Bump wagtail from 7.2.1 to 7.3

[dependabot]

Bumps wagtail from 7.2.1 to 7.3.

Release notes

Sourced from wagtail's releases.

7.3

• Add support for Django 6.0
• Resize overly large avatar images on upload (Harshit Ranjan)
• Add natural keys for Page and Collection models (Samya Aggarwal)
• Add Loom oEmbed provider (Nick Ivons)
• Add ModelViewSet.pk_path_converter with defaults for IntegerField and UUIDField primary keys (Seb Corbin)
• Improve accessibility for sidebar menu with visual active (expanded) menu item indicators (Vignesh Shivhare)
• Add before_edit_setting / after_edit_setting hooks (Baptiste Mispelon)
• Lower default AVIF encoding quality from 80 to 73 (Thibaud Colas)
• Provide a structured rendering of StreamBlock in comparison view (Taras Panasiuk)
• Add support for settings and custom block layouts for StructBlock (Sage Abdullah)
• Add llms.txt versions of the developer documentation and Wagtail user guide (Thibaud Colas)
• Lower default JPEG and AVIF image quality settings to provide consistent perceptual quality between formats (Thibaud Colas)
• Add support for custom content checks with client-side registration (Thibaud Colas)
• Initial support for autosave (Matt Westcott, Sage Abdullah)
• Fix: Do not try to resolve locale during fixture load (Jake Howard, Seb Corbin)
• Fix: Gracefully handle oEmbed responses with a non-200 status or missing type (Shivam Kumar, Bhavesh Sharma)
• Fix: Keep action button labelled as "Publish" rather than "Schedule to publish" if go-live date has passed (Vishrut Ramraj)
• Fix: Pass accumulated icons to each register_icons hook (Joey Jurjens, Sage Abdullah)
• Fix: Skip revisions that are missing the specified field in StreamField migrations (Joshua Munn)
• Fix: Preserve listing search and filter parameters when redirecting from bulk actions (Sage Abdullah)
• Fix: Ensure that object references within TypedTableBlock are counted in the reference index (Aman Bora)
• Fix: Fix slug auto-generation when slug field is omitted from page edit form (Pravin Kamble)
• Fix: Ensure request.is_preview and request.preview_mode are set for password-required responses (Ishtpreet Singh)
• Fix: Optimise storage of redirect paths containing Unicode characters and ensure percent-encoded characters are matched case-insensitively (Andy Babic, Florin Barnea, Aman Bora, Matt Westcott)
• Fix: Ensure that reference index records are deleted when the target object is deleted (bettercallok)
• Fix: Ensure filters are applied to export button URLs in custom page listings (Ritik Arya, Sage Abdullah)
• Fix: Prevent conflicting IDs in nested StructBlocks with blocks named content (Sage Abdullah, Serkan Korkusuz)
• Fix: CVE-2026-25517: Improper permission handling on admin preview endpoints (thxtech, Matt Westcott, Jake Howard)
• Docs: Recommend running purge_embeds after an embed provider changes policies (Paul Souders)
• Docs: Document WAGTAILIMAGES_FORMAT_CONVERSIONS in the settings docs (David Buxton)
• Docs: Wording changes to Draftail extension docs to improve searchability (Lasse Schmieding)
• Docs: Fix StreamField param name (Baptiste Mispelon)
• Docs: Clarify that before_delete_page and similar hooks only trigger on the individual page view, not bulk actions (Shivam Kumar)
• Docs: Clarify template location in custom user model documentation (Akhil Muraleedharan)
• Docs: Improve signposting for contributor docs (Matt Westcott)
• Docs: Add mention of novalidate attribute in form builder docs (Thibaud Colas)
• Docs: Fix formatting for PageQuerySet.prefetch_related performance note (Lasse Schmieding)
• Docs: Fix path to search.html in tutorial (Lee Hart)
• Docs: Grammar fixes to contributor guidelines (Biswajeet Yadav)
• Docs: Mention punctuation is unsupported in paths for RoutablePageMixin (Tibor Leupold)
• Docs: Various typo and grammar fixes (Mustansir Dabhiya)
• Docs: Improve instructions for building documentation on Windows (Mustansir Dabhiya)
• Docs: Provide recommended image quality settings for common use cases (Thibaud Colas)
• Docs: Add detailed documentation on reordering within generic listing view (Ankit Chaudhary)
• Docs: Document early notification process for security releases (Jake Howard)
• Docs: Remove mention of Wagtailtrans from internationalization docs (Andreas Nüßlein)
• Maintenance: Dropped support for Django 5.1
• Maintenance: Updated NPM packages (LB (Ben) Johnston)
• Maintenance: Rationalize front-end linting tasks and run concurrently (LB (Ben) Johnston)

... (truncated)

Changelog

Sourced from wagtail's changelog.

7.3 (03.02.2026)

 * Add support for Django 6.0
 * Resize overly large avatar images on upload (Harshit Ranjan)
 * Add natural keys for `Page` and `Collection` models (Samya Aggarwal)
 * Add Loom oEmbed provider (Nick Ivons)
 * Add `ModelViewSet.pk_path_converter` with defaults for `IntegerField` and `UUIDField` primary keys (Seb Corbin)
 * Improve accessibility for sidebar menu with visual active (expanded) menu item indicators (Vignesh Shivhare)
 * Add `before_edit_setting` / `after_edit_setting` hooks (Baptiste Mispelon)
 * Lower default AVIF encoding quality from 80 to 73 (Thibaud Colas)
 * Provide a structured rendering of `StreamBlock` in comparison view (Taras Panasiuk)
 * Add support for settings and custom block layouts for StructBlock (Sage Abdullah)
 * Add llms.txt versions of the developer documentation and Wagtail user guide (Thibaud Colas)
 * Lower default JPEG and AVIF image quality settings to provide consistent perceptual quality between formats (Thibaud Colas)
 * Add support for custom content checks with client-side registration (Thibaud Colas)
 * Initial support for autosave (Matt Westcott, Sage Abdullah)
 * Fix: Do not try to resolve locale during fixture load (Jake Howard, Seb Corbin)
 * Fix: Gracefully handle oEmbed responses with a non-200 status or missing type (Shivam Kumar, Bhavesh Sharma)
 * Fix: Keep action button labelled as "Publish" rather than "Schedule to publish" if go-live date has passed (Vishrut Ramraj)
 * Fix: Pass accumulated icons to each `register_icons` hook (Joey Jurjens, Sage Abdullah)
 * Fix: Skip revisions that are missing the specified field in StreamField migrations (Joshua Munn)
 * Fix: Preserve listing search and filter parameters when redirecting from bulk actions (Sage Abdullah)
 * Fix: Ensure that object references within `TypedTableBlock` are counted in the reference index (Aman Bora)
 * Fix: Fix slug auto-generation when slug field is omitted from page edit form (Pravin Kamble)
 * Fix: Ensure `request.is_preview` and `request.preview_mode` are set for password-required responses (Ishtpreet Singh)
 * Fix: Optimise storage of redirect paths containing Unicode characters and ensure percent-encoded characters are matched case-insensitively (Andy Babic, Florin Barnea, Aman Bora, Matt Westcott)
 * Fix: Ensure that reference index records are deleted when the target object is deleted (bettercallok)
 * Fix: Ensure filters are applied to export button URLs in custom page listings (Ritik Arya, Sage Abdullah)
 * Fix: Prevent conflicting IDs in nested `StructBlock`s with blocks named `content` (Sage Abdullah, Serkan Korkusuz)
 * Fix: CVE-2026-25517: Improper permission handling on admin preview endpoints (thxtech, Matt Westcott, Jake Howard)
 * Docs: Recommend running `purge_embeds` after an embed provider changes policies (Paul Souders)
 * Docs: Document `WAGTAILIMAGES_FORMAT_CONVERSIONS` in the settings docs (David Buxton)
 * Docs: Wording changes to Draftail extension docs to improve searchability (Lasse Schmieding)
 * Docs: Fix StreamField param name (Baptiste Mispelon)
 * Docs: Clarify that `before_delete_page` and similar hooks only trigger on the individual page view, not bulk actions (Shivam Kumar)
 * Docs: Clarify template location in custom user model documentation (Akhil Muraleedharan)
 * Docs: Improve signposting for contributor docs (Matt Westcott)
 * Docs: Add mention of novalidate attribute in form builder docs (Thibaud Colas)
 * Docs: Fix formatting for `PageQuerySet.prefetch_related` performance note (Lasse Schmieding)
 * Docs: Fix path to `search.html` in tutorial (Lee Hart)
 * Docs: Grammar fixes to contributor guidelines (Biswajeet Yadav)
 * Docs: Mention punctuation is unsupported in paths for `RoutablePageMixin` (Tibor Leupold)
 * Docs: Various typo and grammar fixes (Mustansir Dabhiya)
 * Docs: Improve instructions for building documentation on Windows (Mustansir Dabhiya)
 * Docs: Provide recommended image quality settings for common use cases (Thibaud Colas)
 * Docs: Add detailed documentation on reordering within generic listing view (Ankit Chaudhary)
 * Docs: Document early notification process for security releases (Jake Howard)
 * Docs: Remove mention of Wagtailtrans from internationalization docs (Andreas Nüßlein)
 * Maintenance: Dropped support for Django 5.1
</tr></table> 

... (truncated)

Commits

• 0d3367a Version bump to 7.3 final
• c4b5dc8 Fill in release date for 7.3
• ff89ecb Fetch new translations from Transifex
• b410ddd Release note for CVE-2026-25517 in 7.3
• a7e4283 Fill in release date for 7.2.2
• 2ea0573 Release note for CVE-2026-25517 in 7.2.2
• add82f9 Fill in release date for 7.1.3
• 5812d44 Release note for CVE-2026-25517 in 7.1.3
• 520ae1a Fill in release date for 7.0.4
• 1d306d8 Release note for CVE-2026-25517 in 7.0.4
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)