Bump djangorestframework from 3.17.1 to 3.18.0

[dependabot]

Bumps djangorestframework from 3.17.1 to 3.18.0.

Release notes

Sourced from djangorestframework's releases.

3.18.0

What's Changed

Breaking changes

• Drop support for Django 4.2, Django 5.0 and Django 5.1 by @​p-r-a-v-i-n in encode/django-rest-framework#9899
• Change errors for list serializers (many=True) to dict format by @​p-r-a-v-i-n in encode/django-rest-framework#9837

Features

• Add unaccent to SearchFilter by @​mgaligniana in encode/django-rest-framework#9385
• Add support for Django 6.1 by @​browniebroke in encode/django-rest-framework#10003
• Add @throttle_scope function based view decorator by @​d-ryzhykau in encode/django-rest-framework#9963
• Add nulls_distinct support to UniqueTogetherValidator by @​mag123c in encode/django-rest-framework#9866

Bug fixes

• Include choices param for non-editable fields by @​ticosax in encode/django-rest-framework#9929
• Improve cursor pagination template accessibility in browsable API by @​kosbemrunal in encode/django-rest-framework#9905
• Fix partial form data updates involving ListField by @​Natgho in encode/django-rest-framework#9902
• Fix crash due to browsable API extra action permissions by @​dlfoerster in encode/django-rest-framework#9934
• Handle unhashable BooleanField representation value by @​emfpdlzj in encode/django-rest-framework#9973
• Fix OpenAPI schema for zero numeric bounds on ListField children by @​zainnadeem786 in encode/django-rest-framework#9977
• Replace cc_delim_re usage with split_header_value for Django 6.1+ compatibility by @​laymonage in encode/django-rest-framework#9978
• Fix set_rollback to only rollback initialized connections by @​jdetaeye in encode/django-rest-framework#9599
• Fix DictField HTML input returning empty dict for missing fields by @​veeceey in encode/django-rest-framework#9891
• Raise clear error for unsupported unique-together list updates by @​zainnadeem786 in encode/django-rest-framework#9981

Other changes

• Prepare release 3.18.0 by @​github-actions[bot] in encode/django-rest-framework#10015

New Contributors

• @​Im-Bilal made their first contribution in encode/django-rest-framework#9967
• @​dlfoerster made their first contribution in encode/django-rest-framework#9934
• @​emfpdlzj made their first contribution in encode/django-rest-framework#9973
• @​zainnadeem786 made their first contribution in encode/django-rest-framework#9977
• @​laymonage made their first contribution in encode/django-rest-framework#9978
• @​harshitkandpal made their first contribution in encode/django-rest-framework#9993
• @​udit-prabhakar made their first contribution in encode/django-rest-framework#9962
• @​sai09111995 made their first contribution in encode/django-rest-framework#9884
• @​d-ryzhykau made their first contribution in encode/django-rest-framework#9963
• @​Elkasitu made their first contribution in encode/django-rest-framework#8494
• @​vishalanandl177 made their first contribution in encode/django-rest-framework#10002
• @​jdetaeye made their first contribution in encode/django-rest-framework#9599
• @​veeceey made their first contribution in encode/django-rest-framework#9891
• @​mag123c made their first contribution in encode/django-rest-framework#9866
• @​anurag12anu made their first contribution in encode/django-rest-framework#9814
• @​github-actions[bot] made their first contribution in encode/django-rest-framework#10015

Full Changelog: encode/django-rest-framework@3.17.1...3.18.0

3.17.2

What's Changed

... (truncated)

Commits

• 11875a3 Prepare release 3.18.0 (#10015)
• d346a8c Add note about Browsable API simulating POST in documentation (#9814)
• 80d535d Fix GHA workflow for preparing release
• aa1876b Update fields.md explaining how the source argument affects `.validated_dat...
• 000bb33 Add nulls_distinct support to UniqueTogetherValidator (#9866)
• 7508e0c Raise clear error for unsupported list update validation (#9981)
• 69d1cd7 Fix DictField HTML input returning empty dict for missing fields (#9891)
• bbc62ac Update Django 6.1 dependency to stable release. (#10016)
• f780434 Add GHA workflow to prepare a release
• dc027d2 set_rollback should only rollback initialized connections (#9599)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[claude]

Review

This is a routine Dependabot minor version bump (djangorestframework 3.17.1 → 3.18.0), touching a single line in requirements/base.txt. No application code changes accompany it.

Compatibility check against 3.18.0's breaking changes:

• Dropped support for Django 4.2/5.0/5.1 — not a concern here; this repo pins django==5.2.16 in requirements/base.txt, which remains supported.
• List-serializer errors changed to dict format (many=True) — audited the codebase and found no DRF serializer instantiated with many=True (the only many=True hit is an unrelated PrimaryKeyRelatedField), and no code indexes .errors as a list. DRF views in document_imports/, worker_uploads/, analyzer/, and annotations/ all use serializer.is_valid(raise_exception=True) with no custom EXCEPTION_HANDLER, so error-shape changes are absorbed by DRF's default handling. No code changes needed for this.

Other notes:

• No test coverage changes are expected/needed for a dependency bump like this.
• No security concerns — this is a routine minor upgrade, not a security patch, and I don't see any CVE noted in the release notes for either version.

Looks safe to merge as-is, assuming CI passes.