Skip to content

build(deps): bump soupsieve from 2.8.3 to 2.8.4 in /django_app - #1190

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/django_app/soupsieve-2.8.4
Open

build(deps): bump soupsieve from 2.8.3 to 2.8.4 in /django_app#1190
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/django_app/soupsieve-2.8.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 10, 2026

Copy link
Copy Markdown
Contributor

Bumps soupsieve from 2.8.3 to 2.8.4.

Release notes

Sourced from soupsieve's releases.

2.8.4

  • FIX: Fix another inefficient attribute pattern (@​mauriceng98).
  • FIX: Limit total number of selectors processed in a pattern to prevent massive selector requests (@​mauriceng98).
Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 10, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 10, 2026 10:22
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
See the Details below.

OpenSSF Scorecard

PackageVersionScoreDetails
pip/soupsieve 2.8.4 UnknownUnknown

Scanned Files

  • django_app/poetry.lock

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Dependabot patch/minor update

@github-actions
github-actions Bot enabled auto-merge (squash) July 10, 2026 10:23
@dependabot
dependabot Bot force-pushed the dependabot/pip/django_app/soupsieve-2.8.4 branch from 821e217 to c074303 Compare July 30, 2026 12:44

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Dependabot patch/minor update

Bumps [soupsieve](https://github.com/facelessuser/soupsieve) from 2.8.3 to 2.8.4.
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.8.3...2.8.4)

---
updated-dependencies:
- dependency-name: soupsieve
  dependency-version: 2.8.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/django_app/soupsieve-2.8.4 branch from c074303 to 407e8c4 Compare August 4, 2026 12:38

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Dependabot patch/minor update

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants