deps(backend): bump the minor-and-patch group across 1 directory with 3 updates

[dependabot]

Bumps the minor-and-patch group with 3 updates in the /backend directory: django, pyotp and boto3.

Updates django from 6.0.5 to 6.0.6

Commits

• ee93f65 [6.0.x] Bumped version for 6.0.6 release.
• 1721035 [6.0.x] Fixed CVE-2026-48587 -- Ignored whitespace padding when checking Vary...
• 664652f [6.0.x] Fixed CVE-2026-35193 -- Varied on Authorization when caching non-publ...
• b433025 [6.0.x] Fixed CVE-2026-8404 -- Used Cache-Control directives case-insensitive...
• 625a670 [6.0.x] Fixed CVE-2026-7666 -- Delayed setting SMTP connection until fully co...
• c807d9c [6.0.x] Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisi...
• 98a75e3 [6.0.x] Included commit hash in checksum file when building artifacts for rel...
• dd895d6 [6.0.x] Updated translations from Transifex.
• 49ca2db [6.0.x] Updated links to severity levels in release notes.
• c9f32a2 [6.0.x] Added stub release notes and release date for 6.0.6 and 5.2.15.
• Additional commits viewable in compare view

Updates pyotp from 2.9.0 to 2.10.0

Release notes

Sourced from pyotp's releases.

v2.10.0

• Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)

  • Simplified and improved generate_otp() performance in Steam class (#179)

  • Check digest function to prevent error on OTP Generation (#170)

  • Ignore non-standard otpauth parameters

  • use strings as immutable default arguments (#162)

Changelog

Sourced from pyotp's changelog.

Changes for v2.10.0 (2026-06-13)

• Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)

• Simplified and improved generate_otp() performance in Steam class (#179)

• Check digest function to prevent error on OTP Generation (#170)

• Ignore non-standard otpauth parameters

• use strings as immutable default arguments (#162)

Commits

• 81ed54a v2.10.0
• d44e98a Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)
• a25dbbb Simplified and improved generate_otp() performance in Steam class (#179)
• 89ebf90 Update CI matrix
• 2c152d4 Replace ubuntu-20.04 with 22.04 in CI (#177)
• 6e25ce2 Replace license classifier with license expression (#176)
• 3419136 Use trusted publishing and hatch
• 0c3b765 Format files with ruff
• a398c80 Update CI configuration
• 92b1dbc docs: fix deprecated intersphinx_mapping format (#173)
• Additional commits viewable in compare view

Updates boto3 from 1.43.9 to 1.43.29

Commits

• 3d3204c Merge branch 'release-1.43.29'
• 4cc6c64 Bumping version to 1.43.29
• 73137ea Add changelog entries from botocore
• b42ee1d Bump https://github.com/astral-sh/ruff-pre-commit (#4798)
• 803cba4 Merge branch 'release-1.43.28'
• 1ed6c48 Merge branch 'release-1.43.28' into develop
• 0044dd3 Bumping version to 1.43.28
• 43e2d2a Add changelog entries from botocore
• 5d9ac3e Merge branch 'release-1.43.27'
• 52b9481 Merge branch 'release-1.43.27' into develop
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.