vitalik/django-ninja v1.6.4

1.6.4

on GitHub

What's Changed

• Fix auth/throttle overrides for nested routers in #1819
  • api.add_router(..., auth=..., throttle=...) now also applies to routers nested inside the mounted router
  • Router.add_router(..., auth=..., throttle=...) keeps the override per mount, so a child router reused under several parents gets the right settings under each one

If you use nested routers with auth or throttle set on add_router(), we recommend upgrading.

Security reviewer reference: ANT-2026-H81LRF3W

Hotfix release cut from v1.6.3. It contains only the changes above (plus a test-only fix for pydantic 2.14, #1797).

Full Changelog: v1.6.3...v1.6.4