Bump the pip-dependencies group with 4 updates

[dependabot]

Bumps the pip-dependencies group with 4 updates: pylint-django, ruff, djlint and mkdocstrings.

Updates pylint-django from 2.7.0 to 2.8.0

Release notes

Sourced from pylint-django's releases.

Version 2.8.0 (11 Jul 2026)

New checks

• Added format-html-interpolation (W5150) and mark-safe-interpolation (W5151) checks which warn when the format string of format_html() / format_html_join() or the argument of mark_safe() is built with an f-string, str.format(), %-formatting or + concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.

Other

• CI now tests against Django 6.0

Changelog

Sourced from pylint-django's changelog.

Version 2.8.0

New checks

- Added ``format-html-interpolation`` (W5150) and ``mark-safe-interpolation`` (W5151) checks
  which warn when the format string of ``format_html()`` / ``format_html_join()`` or the
  argument of ``mark_safe()`` is built with an f-string, ``str.format()``, ``%``-formatting or
  ``+`` concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.
Other

- CI now tests against Django 6.0
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/9cd335fa7cf85b44ad66f39876baaad11368f516&quot;&gt;&lt;code&gt;9cd335f&lt;/code&gt;&lt;/a> Updating release notes</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/39dbb5c3d3ca8eaac686b809d33f082e99222724&quot;&gt;&lt;code&gt;39dbb5c&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/20ecf099f5d6e861ec5317740c56b2344e599265&quot;&gt;&lt;code&gt;20ecf09&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/bf641aaff84ce2cbc5ecd1a52885734fd5002ab4&quot;&gt;&lt;code&gt;bf641aa&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/8b7953df366ace9edaad0b4b97821a89583c07b8&quot;&gt;&lt;code&gt;8b7953d&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/3fdb2c01478650f9fccdcd1a3ebe7e36d15c5573&quot;&gt;&lt;code&gt;3fdb2c0&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/f01056452f5998c1fcd5ca0c81425b0fcf5127f0&quot;&gt;&lt;code&gt;f010564&lt;/code&gt;&lt;/a> Added Django references</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/75c59ff30b8e9351d0a196d30c5e0148ec0e33b4&quot;&gt;&lt;code&gt;75c59ff&lt;/code&gt;&lt;/a> Added format-html-interpolation and mark-safe-interpolation checkers</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/4d1ff7b570bcdde68787b0a646415cdd8fa1f84d&quot;&gt;&lt;code&gt;4d1ff7b&lt;/code&gt;&lt;/a> [pre-commit.ci] auto fixes from pre-commit.com hooks</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/ece47862d9a87a1e111dd37b3d65518abd6f46a2&quot;&gt;&lt;code&gt;ece4786&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li>See full diff in <a href="https://github.com/pylint-dev/pylint-django/compare/v2.7.0...v2.8.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />

Updates ruff from 0.15.20 to 0.15.21

Release notes
Sourced from ruff's releases.

0.15.21
Release Notes
Released on 2026-07-09.
Preview features

Add --add-ignore for adding ruff:ignore comments (#26346)
[flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)
Avoid whitespace normalization when formatting comments (#26455)
[pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

Refine non-empty f-string detection (#26526)
Detect syntax errors in individual notebook cells (#26419)
[flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

[flake8-executable] Mark EXE004 fix as unsafe (#26033)
[flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)
[pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

Avoid per-token source index visitor calls (#26506)
Cache parenthesized expression boundaries in the formatter (#26344)
Improve performance of rendering edits in preview mode (#26565)
Inline fits_element in formatter (#26429)
Inline formatter printing hot paths (#26504)
Lazily create builtin bindings (#26510)
Skip empty trivia scans in the source indexer (#26507)
Use ICF for macOS release builds (#25780)

Formatter

Add --extend-exclude to ruff format (#26372)

Documentation

Add "How does Ruff's import sorting compare to isort?" link to README (#26530)
Fix Mozilla Firefox repository link in README (#26537)
[flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)
[ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

@​EkriirkE
@​tingerrr



... (truncated)


Changelog
Sourced from ruff's changelog.

0.15.21
Released on 2026-07-09.
Preview features

Add --add-ignore for adding ruff:ignore comments (#26346)
[flake8-comprehensions] Drop C409 tuple comprehension preview behavior (#25707)
Avoid whitespace normalization when formatting comments (#26455)
[pyupgrade] Lint and fix use of deprecated abc decorators (UP051) (#26417)

Bug fixes

Refine non-empty f-string detection (#26526)
Detect syntax errors in individual notebook cells (#26419)
[flake8-implicit-str-concat] Fix ISC003 autofix incorrectly stripping + from comments (#26554)

Rule changes

[flake8-executable] Mark EXE004 fix as unsafe (#26033)
[flake8-pyi] Mark PYI061 fixes as unsafe in Python files (#26533)
[pydocstyle] Skip overload-with-docstring in stub files (D418) (#26318)

Performance

Avoid per-token source index visitor calls (#26506)
Cache parenthesized expression boundaries in the formatter (#26344)
Improve performance of rendering edits in preview mode (#26565)
Inline fits_element in formatter (#26429)
Inline formatter printing hot paths (#26504)
Lazily create builtin bindings (#26510)
Skip empty trivia scans in the source indexer (#26507)
Use ICF for macOS release builds (#25780)

Formatter

Add --extend-exclude to ruff format (#26372)

Documentation

Add "How does Ruff's import sorting compare to isort?" link to README (#26530)
Fix Mozilla Firefox repository link in README (#26537)
[flake8-bandit] Fix misleading docstring for mako-templates (S702) (#26432)
[ruff] Fix non-triggering example for if-key-in-dict-del (RUF051) (#26433)

Contributors

@​EkriirkE
@​tingerrr
@​s-rigaud



... (truncated)


Commits

3e1f636 Bump 0.15.21 (#26676)
4059807 [ty] Infer metaclass-declared attributes on class instances (#26512)
013e5d0 [ty] Use a dedicated project name type (#26665)
7ad39ad [ty] Avoid allocating decorated parameter names (#26666)
c36f662 Improve performance of rendering edits in preview mode (#26565)
ad26408 [ty] Gate membership narrowing on __contains__ semantics (#25964)
4594ca7 [ty] Add variant discriminators for CodeGeneratorKind (#26659)
1af03da [ty] Pydantic: Fix float conversion in unions (#26655)
a004a36 [ty] Handle callable classes in solver (#26090)
d8ef3b0 [ty] Parse all supported Google docstring sections. (#26653)
Additional commits viewable in compare view




Updates djlint from 1.40.3 to 1.40.4

Release notes
Sourced from djlint's releases.

v1.40.4
Fix

Keep Jinja comments and set tags idempotently indented with preserve_leading_space.
Avoid false H026 reports when id appears inside quoted attribute values.
Avoid false D018/J018 reports for action parameters inside quoted template URL helper attributes.
Report H007 when leading template tags appear before an HTML tag without a preceding doctype.
Keep blank_line_after_tag from inserting blank lines inside multiline HTML attribute values, preserving idempotent reformatting for embedded template tags.
Report T003 when {% endblock name %} does not match its opening {% block name %}.
Report H025 when list tags are nested inside <p> tags.




Changelog
Sourced from djlint's changelog.

[1.40.4] - 2026-07-07
Fix

Keep Jinja comments and set tags idempotently indented with preserve_leading_space.
Avoid false H026 reports when id appears inside quoted attribute values.
Avoid false D018/J018 reports for action parameters inside quoted template URL helper attributes.
Report H007 when leading template tags appear before an HTML tag without a preceding doctype.
Keep blank_line_after_tag from inserting blank lines inside multiline HTML attribute values, preserving idempotent reformatting for embedded template tags.
Report T003 when {% endblock name %} does not match its opening {% block name %}.
Report H025 when list tags are nested inside <p> tags.




Commits

fefa6e9 v1.40.4
e2b9198 fix(formatter): keep preserve-leading-space template lines idempotent
89fb76c chore(deps): lock file maintenance (#2199)
d5927b0 chore: add missing covdefaults dev dependency
691937a fix: report list tags nested in paragraphs
e40edde fix(linter): avoid false H026 matches in quoted attributes
7b0ff96 fix(linter): report mismatched block endblock names
5129dd9 fix: avoid D018 false positives in template URL attributes
2563e58 fix(linter): report H007 after leading template tags
be77d59 chore(deps): lock file maintenance (#2198)
Additional commits viewable in compare view




Updates mkdocstrings from 1.0.4 to 1.0.6

Release notes
Sourced from mkdocstrings's releases.

1.0.6
1.0.6 - 2026-07-11
Compare with 1.0.5
Bug Fixes

Stop propagating Zensical's zrelpath treeprocessor and its preview extension (4732798 by Timothée Mazzucotelli). Issue-zensical-818

1.0.5
1.0.5 - 2026-07-10
Compare with 1.0.4
Bug Fixes

Parse inventory project and version (acc0da3 by Timothée Mazzucotelli).




Changelog
Sourced from mkdocstrings's changelog.

1.0.6 - 2026-07-11
Compare with 1.0.5
Bug Fixes

Stop propagating Zensical's zrelpath treeprocessor and its preview extension (4732798 by Timothée Mazzucotelli). Issue-zensical-818

1.0.5 - 2026-07-10
Compare with 1.0.4
Bug Fixes

Parse inventory project and version (acc0da3 by Timothée Mazzucotelli).




Commits

9a11dcb chore: Prepare release 1.0.6
4732798 fix: Stop propagating Zensical's zrelpath treeprocessor and its preview e...
ecbaa9a Merge branch 'main' of github.com:mkdocstrings/mkdocstrings
64260f7 chore: Prepare release 1.0.5
acc0da3 fix: Parse inventory project and version
ec45a9b ci: Fix warnings
ce2199c chore: Update sponsors section in README (#823)
See full diff in compare view




Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies, security. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.