Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 26, 2026

Updates the requirements on django-debug-toolbar and sorl-thumbnail to permit the latest version.
Updates django-debug-toolbar to 6.2.0

Release notes

Sourced from django-debug-toolbar's releases.

6.2.0

What's Changed

New Contributors

Full Changelog: django-commons/django-debug-toolbar@6.1.0...6.2.0

Changelog

Sourced from django-debug-toolbar's changelog.

6.2.0 (2026-01-20)

  • Deprecated RedirectsPanel in favor of HistoryPanel for viewing toolbar data from redirected requests.
  • Fixed support for generating code coverage comments in PRs.
  • Added Django 6.0 to the testing matrix. Removed Django 5.0 to save CI resources.
  • Show the cache backend alias and cache backend class name instead of the cache instance in the cache panel.
  • Dropped support for the Python 3.9, it has reached its end of life date.
  • Toggle tracking the toolbar's queries when using debug_toolbar.store.DatabaseStore with SKIP_TOOLBAR_QUERIES.
  • Fixed font family for code blocks and stack traces in the toolbar.
  • Added test to confirm Django's TestCase.assertNumQueries works.
  • Fixed string representation of values in settings panel.
  • Declared support for Django 6.0.

6.1.0 (2025-10-30)

  • Added support for async to timer panel.
  • Added a note about the default password in make example.
  • Removed logging about the toolbar failing to serialize a value into JSON.
  • Moved the the import statement of debug_toolbar.urls to within the if statement's scope on the installation documentation.
  • Changed StoredDebugToolbar.from_store to always create a panel key and class instance, regardless if any data was generated.
  • Fixed selenium tests for CI by using psycopg for Python 3.13 runs.
  • Added CommunityPanel containing links to documentation and resources.
  • Upgraded CI postgis version to 17-3.5.
  • Added how to generate the documentation locally to the contributing documentation.
  • Updated logic that forces values to strings (force_str) to render "Django Debug Toolbar was unable to parse value." when there's a decoding error.
  • Updated docs to show incompatibility with Django Channels.
  • Hide the toolbar's migrations unless debug_toolbar.store.DatabaseStore is being used. This may change in the future.
  • Hide debug_toolbar.HistoryEntry as a model unless debug_toolbar.store.DatabaseStore is being used. This may change in the future.

6.0.0 (2025-07-22)

  • Added support for checking if pytest as the test runner when determining if tests are running.
  • Added show_toolbar_with_docker function to check Docker host IP address when running inside Docker containers.

... (truncated)

Commits
  • 0b7c8d8 Version 6.2.0 (#2298)
  • 33ecfd1 [pre-commit.ci] pre-commit autoupdate (#2282)
  • 03edf77 Add LLM usage checkbox to PR template (#2294)
  • 8ebab3d Cancel in-progress runs on new pushes (#2287)
  • c0d457b Refactor type hints and imports in history panel and views
  • ac02a69 Remove comment for clarity in middleware call method (#2283)
  • 0136ff9 Exclude dependabot and pre-commit bot commits from GitHub release notes (#2278)
  • 3ea11f2 [pre-commit.ci] pre-commit autoupdate
  • 2fc3ef5 Declare support for Django 6.0 (#2272)
  • 2542c06 Bump the github-actions group across 1 directory with 3 updates
  • Additional commits viewable in compare view

Updates sorl-thumbnail to 13.0.0

Release notes

Sourced from sorl-thumbnail's releases.

13.0.0

What's Changed

  • THUMBNAIL_STORAGE should now be an alias in the Django STORAGES setting. The old way of specifying a dotted path to a Storage module is still supported.
  • Fixed serialization to use storage aliases instead of backend class paths, ensuring storage OPTIONS (like bucket names and credentials) are preserved when thumbnails are cached and retrieved. Fixes issues with S3, Google Cloud Storage, and other cloud backends.
  • Confirmed support for Python 3.13 (on Django 5.1+).
  • Drop support for Python 3.8 and 3.9.
  • Add support for Django 5.2
  • Accept a tuple as blur radius use GaussianBlur from PIL (#773)
  • Fixed a performance issue in convert engine with _get_exif_orientation
  • Reduced logging in ThumbnailBackend when THUMBNAIL_DUMMY is activated
  • Privileged sRGB as default for ImageMagick colorspace

New Contributors

Full Changelog: jazzband/sorl-thumbnail@12.11.0...13.0.0

Changelog

Sourced from sorl-thumbnail's changelog.

13.0.0

  • THUMBNAIL_STORAGE should now be an alias in the Django STORAGES setting. The old way of specifying a dotted path to a Storage module is still supported.
  • Fixed serialization to use storage aliases instead of backend class paths, ensuring storage OPTIONS (like bucket names and credentials) are preserved when thumbnails are cached and retrieved. Fixes issues with S3, Google Cloud Storage, and other cloud backends.
  • Confirmed support for Python 3.13 (on Django 5.1+).
  • Drop support for Python 3.8 and 3.9.
  • Add support for Django 5.2
  • Accept a tuple as blur radius use GaussianBlur from PIL (#773)
  • Fixed a performance issue in convert engine with _get_exif_orientation
  • Reduced logging in ThumbnailBackend when THUMBNAIL_DUMMY is activated
  • Privileged sRGB as default for ImageMagick colorspace

12.11.0

  • Deprecated THUMBNAIL_KVSTORE. Only the Django cache-based store will be used in a future version.
  • Add support for Django 5.0 and 5.1
  • Add support for installing with optional dependencies.
  • Drop support for Django 3.2, 4.0 and 4.1

12.10.0

  • Fixed safe_filter application on various thumbnail template tags.
  • Fixed slow performance with external storages like S3.
  • Added support for Django 4.2.
  • Drop support for Python 3.7.
  • Confirmed Python 3.11 support.

12.9.0

  • Drop support for Django 2.2 and 3.1.
  • Added support for Django 4.1.
  • Drop support for Python 3.6.
  • Fixed various Pillow deprecation warnings.

12.8.0

  • Drop support for Django 3.0.
  • Added support for Django 3.2 and 4.0.
  • Confirmed Python 3.9 and 3.10 support.
  • Adapted size regex getting size from the identify output. #532
  • Display possible thumbnail command labels in command help.
  • Added Jazzband code of conduct.

12.7.0

... (truncated)

Commits
  • a115216 Updated Changelog for the upcoming 13.0.0 release
  • e5b1ab3 Missing quotes around URL in docs
  • 0c91ddb Missing quotes in release.yml
  • bc23aa6 [pre-commit.ci] pre-commit autoupdate
  • 2f4ac8d Drop support for Python 3.9
  • 2f0e95f Privileged sRGB as default for ImageMagick colorspace
  • 9a0cebe Update CHANGES.rst with serialization fix description
  • ce7c996 Change from Vagrant to Docker for running tests
  • 1ed3c83 Add support for Django 5.2
  • 92f1734 Refs #748 - Serialize storage alias whenever possible
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) and [sorl-thumbnail](https://github.com/jazzband/sorl-thumbnail) to permit the latest version.

Updates `django-debug-toolbar` to 6.2.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@2.2...6.2.0)

Updates `sorl-thumbnail` to 13.0.0
- [Release notes](https://github.com/jazzband/sorl-thumbnail/releases)
- [Changelog](https://github.com/jazzband/sorl-thumbnail/blob/master/CHANGES.rst)
- [Commits](jazzband/sorl-thumbnail@12.10.0...13.0.0)

---
updated-dependencies:
- dependency-name: django-debug-toolbar
  dependency-version: 6.2.0
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: sorl-thumbnail
  dependency-version: 13.0.0
  dependency-type: direct:production
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants