Purplix.io Bump litestar from 2.8.2 to 2.8.3 in /backend

Bumps litestar from 2.8.2 to 2.8.3.

Release notes

v2.8.3

:warning: Important :warning:

This release contains a patch for a vulnerability that would allow path traversal in the static file serving functionality of Litestar. It is highly recommended to update your minor version to this patch release.

You can find more background information in the related discussion #3473 .

Sponsors 🌟

Thanks to these incredible business sponsors:

Scalar (@scalar), Telemetry Sports (via @chris-telemetry), Stok (@stok-team)

A huge 'Thank you!' to all other sponsors across Polar.sh, OpenCollective and GitHub Sponsors!

What's changed

New contributors 🎉

@maintain0404 made their first contribution in litestar-org/litestar#3405

Bugfixes 🐛

Fix improper Limitation of a Pathname to a Restricted Directory by @peterschutt in https://github.com/litestar-org/litestar/security/advisories/GHSA-83pv-qr33-2vcf

Remove use of asserts for control flow in Pydantic Plugin by @peterschutt in litestar-org/litestar#3359

Fix OpenAPI schema for generic wrapped return types with DTO by @peterschutt in litestar-org/litestar#3371

Fix ambiguous default warning for no signature default by @peterschutt in litestar-org/litestar#3378

Fix path param consumed by dependency treated as unconsumed by @peterschutt in litestar-org/litestar#3380

Fix remove name and in properties included in OpenAPI headers by @peterschutt in litestar-org/litestar#3417

Fix unconditional minijinja import in flash-messages plugin by @peterschutt in litestar-org/litestar#3418

Fix routing issues with regular handler under mounted app by @peterschutt in litestar-org/litestar#3430

Fix file logging with structlog by @peterschutt in litestar-org/litestar#3425

Fix clearing large session cookies by @peterschutt in litestar-org/litestar#3446

Fix flash messages were not displayed on redirects by @euri10 in litestar-org/litestar#3420

Fix alidation of optional sequence in multipart data with one value by @provinzkraut in litestar-org/litestar#3408

Documentation

Update usage/static_files by @JacobCoffee in litestar-org/litestar#3358

Fix broken url; swagger ui by @wer153 in litestar-org/litestar#3368

Correct a word by @wer153 in litestar-org/litestar#3412

Fix WebSockets documentation grammar by @marcuslimdw in litestar-org/litestar#3413

Fix intersphinx mapping for advanced-alchemy by @provinzkraut in litestar-org/litestar#3438

Update usage/caching by @JacobCoffee in litestar-org/litestar#3345

Update docs/usage/security/* by @JacobCoffee in litestar-org/litestar#3344

Improve sse by @euri10 in litestar-org/litestar#3454

Full Changelog https://github.com/litestar-org/litestar/compare/v2.8.2...v2.8.3

Commits

743d8ec chore(release): prepare release v2.8.3
57e706e Merge pull request from GHSA-83pv-qr33-2vcf
ab5f45a docs: add Alc-Alc as a contributor for infra (#3472)
1e36d54 chore(infra): remove poetry in devcontainer.json (#3462)
b640328 docs: add wallseat as a contributor for bug (#3447)
9937fa0 fix: pass branch to create_draft_release()
cb641e0 test: Add tests for dto factory doc examples (#3453)
8cbeb57 fix(ci): adjust issue template to not allow blank issues (#3452)
a4fc05c docs: improve sse (#3454)
6667cce fix: Validation of optional sequence in multipart data with one value (#3408)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

May 13 '24 02:05 dependabot[bot]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
purplix-io	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 22, 2024 2:43am
purplix-io-iuu9	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 22, 2024 2:43am

May 13 '24 02:05 vercel[bot]

Dependabot couldn't access the repository. Because of this, Dependabot cannot update this pull request.

May 20 '24 06:05 dependabot[bot]

@dependabot rebase

May 22 '24 02:05 WardPearce