From 518abbdf78371b7c508460ca5d1d5d9c10fed79a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 3 Sep 2026 08:32:17 +0000
Subject: [PATCH] Bump django-cors-headers from 4.3.0 to 4.9.0

Bumps [django-cors-headers](https://github.com/adamchainz/django-cors-headers) from 4.3.0 to 4.9.0.
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/adamchainz/django-cors-headers/compare/4.3.0...4.9.0)

---
updated-dependencies:
- dependency-name: django-cors-headers
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 poetry.lock    | 21 +++++++++++----------
 pyproject.toml |  2 +-
 2 files changed, 12 insertions(+), 11 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index d130baf..d7cb631 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1,4 +1,4 @@
-# This file is automatically @generated by Poetry 2.2.1 and should not be changed by hand.
+# This file is automatically @generated by Poetry 2.4.1 and should not be changed by hand.
 
 [[package]]
 name = "amqp"
@@ -775,7 +775,7 @@ reference = "tsinghua"
 [[package]]
 name = "django-comment-migrate"
 version = "0.1.7"
-description = "An app that provides Django model comment migration "
+description = "An app that provides Django model comment migration"
 optional = false
 python-versions = ">=3.6"
 groups = ["main"]
@@ -794,18 +794,19 @@ reference = "tsinghua"
 
 [[package]]
 name = "django-cors-headers"
-version = "4.3.0"
+version = "4.9.0"
 description = "django-cors-headers is a Django application for handling the server headers required for Cross-Origin Resource Sharing (CORS)."
 optional = false
-python-versions = ">=3.8"
+python-versions = ">=3.9"
 groups = ["main"]
 files = [
-    {file = "django_cors_headers-4.3.0-py3-none-any.whl", hash = "sha256:bd36c7aea0d070e462f3383f0dc9ef717e5fdc2b10a99c98c285f16da84ffba2"},
-    {file = "django_cors_headers-4.3.0.tar.gz", hash = "sha256:25aabc94d4837678c1edf442c7f68a5f5fd151f6767b0e0b01c61a2179d02711"},
+    {file = "django_cors_headers-4.9.0-py3-none-any.whl", hash = "sha256:15c7f20727f90044dcee2216a9fd7303741a864865f0c3657e28b7056f61b449"},
+    {file = "django_cors_headers-4.9.0.tar.gz", hash = "sha256:fe5d7cb59fdc2c8c646ce84b727ac2bca8912a247e6e68e1fb507372178e59e8"},
 ]
 
 [package.dependencies]
-Django = ">=3.2"
+asgiref = ">=3.6"
+django = ">=4.2"
 
 [package.source]
 type = "legacy"
@@ -1480,7 +1481,7 @@ files = [
 
 [package.dependencies]
 attrs = ">=22.2.0"
-jsonschema-specifications = ">=2023.03.6"
+jsonschema-specifications = ">=2023.3.6"
 referencing = ">=0.28.4"
 rpds-py = ">=0.25.0"
 
@@ -1575,7 +1576,7 @@ librabbitmq = ["librabbitmq (>=2.0.0) ; python_version < \"3.11\""]
 mongodb = ["pymongo (==4.15.3)"]
 msgpack = ["msgpack (==1.1.2)"]
 pyro = ["pyro4 (==4.82)"]
-qpid = ["qpid-python (==1.36.0-1)", "qpid-tools (==1.36.0-1)"]
+qpid = ["qpid-python (==1.36.0.post1)", "qpid-tools (==1.36.0.post1)"]
 redis = ["redis (>=4.5.2,!=4.5.5,!=5.0.2,<6.5)"]
 slmq = ["softlayer_messaging (>=1.0.3)"]
 sqlalchemy = ["sqlalchemy (>=1.4.48,<2.1)"]
@@ -2772,4 +2773,4 @@ reference = "tsinghua"
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.12.11,<3.13"
-content-hash = "d70f46ac67b83ad5f5005280a6bae9c3e17547d6107eed49ce4793fe9eb21b64"
+content-hash = "4b0272777187d4efdf518b21ae261c5a0970a274fab18423f16dd87614ec8c45"
diff --git a/pyproject.toml b/pyproject.toml
index ce233a2..8bef88a 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,7 @@ package-mode = false
 python = ">=3.12.11,<3.13"
 django = "4.2.7"
 django-comment-migrate = "0.1.7"
-django-cors-headers = "4.3.0"
+django-cors-headers = "4.9.0"
 django-filter = "23.3"
 django-ranged-response = "0.2.0"
 djangorestframework = "3.14.0"