chore(deps): bump watchfiles from 1.2.0 to 1.3.0

[dependabot]

Bumps watchfiles from 1.2.0 to 1.3.0.

Release notes

Sourced from watchfiles's releases.

v1.3.0 2026-09-21

What's Changed

• Bump pyo3 from 0.28.3 to 0.29.0 by @​dependabot[bot] in samuelcolvin/watchfiles#382
• Add Python 3.14t to Windows wheel builds by @​1998LJ in samuelcolvin/watchfiles#393
• Build abi3 wheels for CPython by @​samuelcolvin in samuelcolvin/watchfiles#396
• prep v1.3.0 release by @​samuelcolvin in samuelcolvin/watchfiles#397

New Contributors

• @​1998LJ made their first contribution in samuelcolvin/watchfiles#393

Full Changelog: samuelcolvin/watchfiles@v1.2.0...v1.3.0

Commits

• e74b8fc prep v1.3.0 release (#397)
• 026c971 Build abi3 wheels for CPython (#396)
• 59099d2 Add Python 3.14t to Windows wheel builds (#393)
• 42257e8 Bump pyo3 from 0.28.3 to 0.29.0 (#382)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[claude]

Review

This is a routine Dependabot version bump for watchfiles (1.2.0 → 1.3.0) in requirements/local.txt, a dev-only dependency used by Django's autoreloader. The diff is a single line with no application code changes.

Assessment:

• Code quality / bugs: N/A — no application logic touched.
• Security: Reviewed the upstream release notes (bundled in the PR description) — v1.3.0 is a minor release with a pyo3 bump (0.28.3 → 0.29.0), Python 3.14t wheel support, and abi3 wheel builds. No CVEs or security fixes called out. watchfiles is only pulled in via requirements/local.txt (local/dev environment), so it has no production runtime exposure.
• Performance: No expected impact; this is a filesystem-watcher used for dev-server autoreload only.
• Test coverage: No tests needed for a transitive dev-dependency patch bump.
• Compatibility: Semver-minor bump per the dependency-type metadata; low risk of breaking the local dev environment.

No concerns — safe to merge once CI passes.