Bump dynaconf from 3.2.12 to 3.2.13

[dependabot]

Bumps dynaconf from 3.2.12 to 3.2.13.

Release notes

Sourced from dynaconf's releases.

3.2.13

What's Changed

Bug Fixes

• Fix @jinja and @format templating vulnerabilities. *By @​pedro-psb *.
• Fix failing @get converter. *By @​rochacbruno *

Full Changelog: dynaconf/dynaconf@3.2.12...3.2.13

Changelog

Sourced from dynaconf's changelog.

3.2.13 - 2026-03-17

Chore

• fix linting errors and pre-commit config. By Pedro Brochado.

Commits

• 3c39a2c Release version 3.2.13
• 379fc67 chore: fix linting errors and pre-commit config
• 2fbb45e Fix @​jinja and @​format templating vulnerabilities
• 8547454 backport #1347 fix failing get converter
• 83c1690 Bump to version 3.2.13-dev0
• See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[cursor]

PR Summary

Low Risk
Scope is limited to version pins and the lockfile; risk is low though the upgrade addresses known dynaconf templating vulnerabilities in a config dependency.

Overview
Bumps dynaconf from 3.2.12 to 3.2.13 in pyproject.toml and refreshes poetry.lock (package entries and lock content-hash).

This is a patch-only dependency update; upstream 3.2.13 includes security fixes for @jinja and @format templating and a fix for the @get converter, which matters because dynaconf is the project’s dynamic configuration dependency.

^{Reviewed by Cursor Bugbot for commit d671035. Bugbot is set up for automated code reviews on this repo. Configure here.}

[panther-windmill-bot]

@dependabot rebase

[panther-windmill-bot]

@dependabot rebase