build(deps): bump pylint-django from 2.7.0 to 2.8.0

[dependabot]

Bumps pylint-django from 2.7.0 to 2.8.0.

Release notes

Sourced from pylint-django's releases.

Version 2.8.0 (11 Jul 2026)

New checks

• Added format-html-interpolation (W5150) and mark-safe-interpolation (W5151) checks which warn when the format string of format_html() / format_html_join() or the argument of mark_safe() is built with an f-string, str.format(), %-formatting or + concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.

Other

• CI now tests against Django 6.0

Changelog

Sourced from pylint-django's changelog.

Version 2.8.0

New checks

- Added ``format-html-interpolation`` (W5150) and ``mark-safe-interpolation`` (W5151) checks
  which warn when the format string of ``format_html()`` / ``format_html_join()`` or the
  argument of ``mark_safe()`` is built with an f-string, ``str.format()``, ``%``-formatting or
  ``+`` concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.
Other

- CI now tests against Django 6.0
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/9cd335fa7cf85b44ad66f39876baaad11368f516&quot;&gt;&lt;code&gt;9cd335f&lt;/code&gt;&lt;/a> Updating release notes</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/39dbb5c3d3ca8eaac686b809d33f082e99222724&quot;&gt;&lt;code&gt;39dbb5c&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/20ecf099f5d6e861ec5317740c56b2344e599265&quot;&gt;&lt;code&gt;20ecf09&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/bf641aaff84ce2cbc5ecd1a52885734fd5002ab4&quot;&gt;&lt;code&gt;bf641aa&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/8b7953df366ace9edaad0b4b97821a89583c07b8&quot;&gt;&lt;code&gt;8b7953d&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/3fdb2c01478650f9fccdcd1a3ebe7e36d15c5573&quot;&gt;&lt;code&gt;3fdb2c0&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/f01056452f5998c1fcd5ca0c81425b0fcf5127f0&quot;&gt;&lt;code&gt;f010564&lt;/code&gt;&lt;/a> Added Django references</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/75c59ff30b8e9351d0a196d30c5e0148ec0e33b4&quot;&gt;&lt;code&gt;75c59ff&lt;/code&gt;&lt;/a> Added format-html-interpolation and mark-safe-interpolation checkers</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/4d1ff7b570bcdde68787b0a646415cdd8fa1f84d&quot;&gt;&lt;code&gt;4d1ff7b&lt;/code&gt;&lt;/a> [pre-commit.ci] auto fixes from pre-commit.com hooks</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/ece47862d9a87a1e111dd37b3d65518abd6f46a2&quot;&gt;&lt;code&gt;ece4786&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li>See full diff in <a href="https://github.com/pylint-dev/pylint-django/compare/v2.7.0...v2.8.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options


You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

@dependabot merge

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric	Results
Duplication	0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

_{TIP This summary will be updated as you push new changes.}

[codacy-production]

Pull Request Overview

This PR updates pylint-django from 2.7.0 to 2.8.0. This version includes support for Django 6.0 and introduces new security checks (W5150 and W5151) specifically targeting unsafe HTML interpolation.

Codacy analysis confirms that the update meets project standards with no new quality issues. While the version bump is correctly applied in requirements.txt, the PR lacks verification that the new linting rules are effectively integrated and operational within the CI/CD pipeline.

Test suggestions

• Verify that the new version of pylint-django is correctly installed and integrated into the CI/CD linting pipeline.
• Verify that the new linting rules (format-html-interpolation and mark-safe-interpolation) correctly flag unsafe string formatting in Django templates/views.

Prompt proposal for missing tests

Consider implementing these tests if applicable:
1. Verify that the new version of pylint-django is correctly installed and integrated into the CI/CD linting pipeline.
2. Verify that the new linting rules (format-html-interpolation and mark-safe-interpolation) correctly flag unsafe string formatting in Django templates/views.

_{TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback}