dependabot[bot]
b6c2e79031
build(deps): bump oauthlib from 4.0.0 to 4.0.1
...
Bumps [oauthlib](https://github.com/oauthlib/oauthlib ) from 4.0.0 to 4.0.1.
- [Release notes](https://github.com/oauthlib/oauthlib/releases )
- [Changelog](https://github.com/oauthlib/oauthlib/blob/v4.0.1/CHANGELOG.rst )
- [Commits](https://github.com/oauthlib/oauthlib/compare/v4.0.0...v4.0.1 )
---
updated-dependencies:
- dependency-name: oauthlib
dependency-version: 4.0.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-11-06 00:25:07 +00:00
Herculino Trotta
2bb8b4e5d4
Merge pull request #631 from eitchtee/dependabot/uv/djangorestframework-3.18.2
...
build(deps): bump djangorestframework from 3.17.2 to 3.18.2
2026-10-25 12:11:37 -03:00
dependabot[bot]
785bd054df
build(deps): bump brotli from 1.2.0 to 1.2.1
...
Bumps [brotli](https://github.com/google/brotli ) from 1.2.0 to 1.2.1.
- [Release notes](https://github.com/google/brotli/releases )
- [Changelog](https://github.com/google/brotli/blob/go/brotli/v1.2.1/CHANGELOG.md )
- [Commits](https://github.com/google/brotli/compare/v1.2.0...go/brotli/v1.2.1 )
---
updated-dependencies:
- dependency-name: brotli
dependency-version: 1.2.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-24 21:15:51 +00:00
dependabot[bot]
b94a6aa4d2
build(deps): bump djangorestframework from 3.17.2 to 3.18.2
...
Bumps [djangorestframework](https://github.com/encode/django-rest-framework ) from 3.17.2 to 3.18.2.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.17.2...3.18.2 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.18.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-24 21:15:42 +00:00
Herculino Trotta
9941c8fb90
build(deps): bump django-allauth to 65.20.1 to allow oauthlib 4.0.0
...
django-allauth 65.18 pinned oauthlib<4, preventing Dependabot from
resolving GHSA-hj66-6f7g-4r5v and GHSA-xpv3-w29h-x7cv.
2026-10-24 12:09:19 -03:00
obervinov
03a27002cc
build(deps): bump certifi from 2026.5.20 to 2026.10.19
2026-10-21 19:32:10 +04:00
Herculino Trotta
10b3c45014
build: require python 3.14
...
Python 3.11 has been security-only since 2024. Bump requires-python to >=3.14 and re-lock.
2026-10-10 18:05:25 -03:00
Herculino Trotta
8a8b9b880d
Merge pull request #605 from eitchtee/dependabot/uv/soupsieve-2.9
...
build(deps): bump soupsieve from 2.8.4 to 2.9
2026-10-03 14:08:00 -03:00
Herculino Trotta
c6e8e2716e
Merge pull request #606 from eitchtee/dependabot/uv/anyio-4.14.2
...
build(deps): bump anyio from 4.13.0 to 4.14.2
2026-10-03 14:07:44 -03:00
Herculino Trotta
2a270f6189
Merge pull request #610 from eitchtee/dependabot/uv/urllib3-2.8.0
...
build(deps): bump urllib3 from 2.7.0 to 2.8.0
2026-10-03 14:07:32 -03:00
Herculino Trotta
8c7b6d5376
Merge pull request #608 from eitchtee/dependabot/uv/pyjwt-2.15.0
...
build(deps): bump pyjwt from 2.13.0 to 2.15.0
2026-10-03 14:06:19 -03:00
dependabot[bot]
720114aec7
build(deps): bump urllib3 from 2.7.0 to 2.8.0
...
Bumps [urllib3](https://github.com/urllib3/urllib3 ) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/urllib3/urllib3/releases )
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst )
- [Commits](https://github.com/urllib3/urllib3/compare/2.7.0...2.8.0 )
---
updated-dependencies:
- dependency-name: urllib3
dependency-version: 2.8.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 02:35:44 +00:00
dependabot[bot]
68fc9e46a1
build(deps): bump django from 5.2.16 to 5.2.17
...
Bumps [django](https://github.com/django/django ) from 5.2.16 to 5.2.17.
- [Commits](https://github.com/django/django/compare/5.2.16...5.2.17 )
---
updated-dependencies:
- dependency-name: django
dependency-version: 5.2.17
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 02:35:41 +00:00
dependabot[bot]
d4cb39dfed
build(deps): bump pyjwt from 2.13.0 to 2.15.0
...
Bumps [pyjwt](https://github.com/jpadilla/pyjwt ) from 2.13.0 to 2.15.0.
- [Release notes](https://github.com/jpadilla/pyjwt/releases )
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.13.0...2.15.0 )
---
updated-dependencies:
- dependency-name: pyjwt
dependency-version: 2.15.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-10-01 00:27:17 +00:00
dependabot[bot]
d44a4c3244
build(deps): bump anyio from 4.13.0 to 4.14.2
...
Bumps [anyio](https://github.com/agronholm/anyio ) from 4.13.0 to 4.14.2.
- [Release notes](https://github.com/agronholm/anyio/releases )
- [Commits](https://github.com/agronholm/anyio/compare/4.13.0...4.14.2 )
---
updated-dependencies:
- dependency-name: anyio
dependency-version: 4.14.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-19 00:30:17 +00:00
dependabot[bot]
327c0a8f26
build(deps): bump soupsieve from 2.8.4 to 2.9
...
Bumps [soupsieve](https://github.com/facelessuser/soupsieve ) from 2.8.4 to 2.9.
- [Release notes](https://github.com/facelessuser/soupsieve/releases )
- [Commits](https://github.com/facelessuser/soupsieve/compare/2.8.4...2.9 )
---
updated-dependencies:
- dependency-name: soupsieve
dependency-version: '2.9'
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-18 01:45:45 +00:00
Herculino Trotta
6c808eff38
Merge pull request #593 from eitchtee/dependabot/uv/djangorestframework-3.17.2
...
build(deps): bump djangorestframework from 3.17.1 to 3.17.2
2026-09-06 16:41:50 -03:00
dependabot[bot]
11b03474c1
build(deps): bump mistune from 3.3.0 to 3.3.3
...
Bumps [mistune](https://github.com/lepture/mistune ) from 3.3.0 to 3.3.3.
- [Release notes](https://github.com/lepture/mistune/releases )
- [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst )
- [Commits](https://github.com/lepture/mistune/compare/v3.3.0...v3.3.3 )
---
updated-dependencies:
- dependency-name: mistune
dependency-version: 3.3.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-02 16:45:07 +00:00
dependabot[bot]
c64a363126
build(deps): bump djangorestframework from 3.17.1 to 3.17.2
...
Bumps [djangorestframework](https://github.com/encode/django-rest-framework ) from 3.17.1 to 3.17.2.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.17.1...3.17.2 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.17.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-09-02 00:14:06 +00:00
dependabot[bot]
7933f1c316
build(deps): bump sqlparse from 0.5.5 to 0.6.0
...
Bumps [sqlparse](https://github.com/andialbrecht/sqlparse ) from 0.5.5 to 0.6.0.
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG )
- [Commits](https://github.com/andialbrecht/sqlparse/compare/0.5.5...0.6.0 )
---
updated-dependencies:
- dependency-name: sqlparse
dependency-version: 0.6.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-17 21:31:28 +00:00
Herculino Trotta
0c9b41182b
Merge pull request #575 from eitchtee/dependabot/uv/cryptography-50.0.0
...
build(deps): bump cryptography from 48.0.1 to 50.0.0
2026-08-13 00:03:51 -03:00
Herculino Trotta
7a900908dd
Merge pull request #578 from eitchtee/dependabot/uv/django-5.2.16
...
build(deps): bump django from 5.2.15 to 5.2.16
2026-08-13 00:03:28 -03:00
dependabot[bot]
6dcf5a63f8
build(deps): bump tablib from 3.9.0 to 3.10.0
...
Bumps [tablib](https://github.com/jazzband/tablib ) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/jazzband/tablib/releases )
- [Changelog](https://github.com/jazzband/tablib/blob/master/HISTORY.md )
- [Commits](https://github.com/jazzband/tablib/compare/v3.9.0...v3.10.0 )
---
updated-dependencies:
- dependency-name: tablib
dependency-version: 3.10.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-12 19:48:53 +00:00
dependabot[bot]
cf908ae87e
build(deps): bump django from 5.2.15 to 5.2.16
...
Bumps [django](https://github.com/django/django ) from 5.2.15 to 5.2.16.
- [Commits](https://github.com/django/django/compare/5.2.15...5.2.16 )
---
updated-dependencies:
- dependency-name: django
dependency-version: 5.2.16
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-10 03:07:57 +00:00
dependabot[bot]
ee39dcf9ef
build(deps): bump cryptography from 48.0.1 to 50.0.0
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 48.0.1 to 50.0.0.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/48.0.1...50.0.0 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 50.0.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-08-05 03:39:39 +00:00
Herculino Trotta
743951a862
feat(automatic-exchange-rates): Add Yahoo Finance as a provider via yfinance
2026-07-18 15:42:51 -03:00
dependabot[bot]
ad357fac45
build(deps): bump mistune from 3.2.1 to 3.3.0
...
Bumps [mistune](https://github.com/lepture/mistune ) from 3.2.1 to 3.3.0.
- [Release notes](https://github.com/lepture/mistune/releases )
- [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst )
- [Commits](https://github.com/lepture/mistune/compare/v3.2.1...v3.3.0 )
---
updated-dependencies:
- dependency-name: mistune
dependency-version: 3.3.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-07-10 20:10:10 +00:00
Herculino Trotta
4805ce9e04
Merge pull request #557 from obervinov/obervinov/app-owned-oauth-api-tokens
...
feat(api): add API tokens and OAuth2 client support for external integrations
2026-07-04 12:38:44 -03:00
4273c541c5
Add API tokens and OAuth2 client support for external integrations
...
- Personal API tokens (model, user-settings UI, admin, management command,
DRF auth class) for non-interactive API access from automations like n8n.
Raw token shown once; only a SHA-256 hash is stored; last_used_at writes
are throttled.
- OAuth2 authorization server via django-oauth-toolkit with authorization
server metadata and optional, off-by-default Dynamic Client Registration
(RFC 7591), so remote OAuth/MCP clients can authenticate and self-register.
- Tests for token auth, DCR gating and the management commands, plus
.env.example and README documentation.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-24 19:15:31 +04:00
dependabot[bot]
5c4cb16a0a
build(deps): bump cryptography from 48.0.0 to 48.0.1
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 48.0.0 to 48.0.1.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/48.0.0...48.0.1 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 48.0.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-17 01:11:02 +00:00
Herculino Trotta
6987b54dba
chore: bump python and node dependencies
2026-06-06 05:14:26 -03:00
Herculino Trotta
e839f31104
Merge pull request #549 from eitchtee/dependabot/uv/django-5.2.14
...
build(deps): bump django from 5.2.13 to 5.2.14
2026-06-06 04:42:09 -03:00
Herculino Trotta
2282625790
Merge pull request #548 from eitchtee/dependabot/uv/idna-3.15
...
build(deps): bump idna from 3.11 to 3.15
2026-06-06 04:41:50 -03:00
Herculino Trotta
aa8b559152
Merge pull request #547 from eitchtee/dependabot/uv/mistune-3.2.1
...
build(deps): bump mistune from 3.1.4 to 3.2.1
2026-06-06 04:41:37 -03:00
dependabot[bot]
801b2a9edd
build(deps): bump django from 5.2.13 to 5.2.14
...
Bumps [django](https://github.com/django/django ) from 5.2.13 to 5.2.14.
- [Commits](https://github.com/django/django/compare/5.2.13...5.2.14 )
---
updated-dependencies:
- dependency-name: django
dependency-version: 5.2.14
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-06 07:39:25 +00:00
dependabot[bot]
968499f1ab
build(deps): bump idna from 3.11 to 3.15
...
Bumps [idna](https://github.com/kjd/idna ) from 3.11 to 3.15.
- [Release notes](https://github.com/kjd/idna/releases )
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md )
- [Commits](https://github.com/kjd/idna/compare/v3.11...v3.15 )
---
updated-dependencies:
- dependency-name: idna
dependency-version: '3.15'
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-06 07:37:29 +00:00
dependabot[bot]
5b351821b1
build(deps): bump mistune from 3.1.4 to 3.2.1
...
Bumps [mistune](https://github.com/lepture/mistune ) from 3.1.4 to 3.2.1.
- [Release notes](https://github.com/lepture/mistune/releases )
- [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst )
- [Commits](https://github.com/lepture/mistune/compare/v3.1.4...v3.2.1 )
---
updated-dependencies:
- dependency-name: mistune
dependency-version: 3.2.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-06 07:36:43 +00:00
dependabot[bot]
7b49072848
build(deps): bump urllib3 from 2.6.3 to 2.7.0
...
Bumps [urllib3](https://github.com/urllib3/urllib3 ) from 2.6.3 to 2.7.0.
- [Release notes](https://github.com/urllib3/urllib3/releases )
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst )
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.3...2.7.0 )
---
updated-dependencies:
- dependency-name: urllib3
dependency-version: 2.7.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-06-06 07:36:28 +00:00
Herculino Trotta
4d3ce087d6
chore: bump versions
2026-04-18 13:45:28 +00:00
Herculino Trotta
aeaf9fac43
Merge pull request #535 from eitchtee/dependabot/uv/requests-2.33.0
...
build(deps): bump requests from 2.32.5 to 2.33.0
2026-04-18 02:41:18 -03:00
Herculino Trotta
dcedf53b83
Merge pull request #534 from eitchtee/dependabot/uv/cryptography-46.0.7
...
build(deps): bump cryptography from 46.0.5 to 46.0.7
2026-04-18 02:41:06 -03:00
Herculino Trotta
d66d1530bb
Merge pull request #533 from eitchtee/dependabot/uv/pyjwt-2.12.0
...
build(deps): bump pyjwt from 2.10.1 to 2.12.0
2026-04-18 02:40:12 -03:00
dependabot[bot]
0c927a2fe9
build(deps): bump requests from 2.32.5 to 2.33.0
...
Bumps [requests](https://github.com/psf/requests ) from 2.32.5 to 2.33.0.
- [Release notes](https://github.com/psf/requests/releases )
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md )
- [Commits](https://github.com/psf/requests/compare/v2.32.5...v2.33.0 )
---
updated-dependencies:
- dependency-name: requests
dependency-version: 2.33.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-18 05:37:40 +00:00
dependabot[bot]
c52db80c64
build(deps): bump cryptography from 46.0.5 to 46.0.7
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 46.0.5 to 46.0.7.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/46.0.5...46.0.7 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.7
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-18 05:37:14 +00:00
dependabot[bot]
330ce8069c
build(deps): bump pyjwt from 2.10.1 to 2.12.0
...
Bumps [pyjwt](https://github.com/jpadilla/pyjwt ) from 2.10.1 to 2.12.0.
- [Release notes](https://github.com/jpadilla/pyjwt/releases )
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.10.1...2.12.0 )
---
updated-dependencies:
- dependency-name: pyjwt
dependency-version: 2.12.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-18 05:36:41 +00:00
dependabot[bot]
2989f11b01
build(deps): bump django from 5.2.11 to 5.2.13
...
Bumps [django](https://github.com/django/django ) from 5.2.11 to 5.2.13.
- [Commits](https://github.com/django/django/compare/5.2.11...5.2.13 )
---
updated-dependencies:
- dependency-name: django
dependency-version: 5.2.13
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-18 05:36:10 +00:00
dependabot[bot]
4a35e770a4
build(deps): bump simpleeval from 1.0.3 to 1.0.5
...
Bumps [simpleeval](https://github.com/danthedeckie/simpleeval ) from 1.0.3 to 1.0.5.
- [Release notes](https://github.com/danthedeckie/simpleeval/releases )
- [Commits](https://github.com/danthedeckie/simpleeval/compare/1.0.3...1.0.5 )
---
updated-dependencies:
- dependency-name: simpleeval
dependency-version: 1.0.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-14 05:54:33 +00:00
dependabot[bot]
e305fab300
build(deps): bump cryptography from 46.0.3 to 46.0.5
...
Bumps [cryptography](https://github.com/pyca/cryptography ) from 46.0.3 to 46.0.5.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...46.0.5 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 46.0.5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-12 00:44:59 +00:00
dependabot[bot]
624dc382cf
build(deps): bump django from 5.2.9 to 5.2.11
...
Bumps [django](https://github.com/django/django ) from 5.2.9 to 5.2.11.
- [Commits](https://github.com/django/django/compare/5.2.9...5.2.11 )
---
updated-dependencies:
- dependency-name: django
dependency-version: 5.2.11
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-02-03 23:24:38 +00:00
dependabot[bot]
e2f1156264
build(deps): bump urllib3 from 2.6.2 to 2.6.3
...
Bumps [urllib3](https://github.com/urllib3/urllib3 ) from 2.6.2 to 2.6.3.
- [Release notes](https://github.com/urllib3/urllib3/releases )
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst )
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.2...2.6.3 )
---
updated-dependencies:
- dependency-name: urllib3
dependency-version: 2.6.3
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-25 19:49:42 +00:00