chore(deps): update strawberry-graphql-django requirement from ~=0.57.0 to >=0.57,<0.87

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Updates the requirements on strawberry-graphql-django to permit the latest version.

Release notes

Sourced from strawberry-graphql-django's releases.

0.86.1

Fix offset_paginated fields applying the filter pipeline twice per resolution.

StrawberryOffsetPaginatedExtension.resolve forwards filters/order/pagination to the inner resolver (so extensions and custom resolvers can access them), but then re-applied them on the queryset the resolver returned. Filters, permission filtering and the optimizer pass all ran twice; for a filter spanning a multivalued relation the second .filter() duplicated the relation JOINs, which can grow the intermediate row count quadratically and turn a sub-second query into a multi-minute one.

The queryset returned by the inner resolver is now passed straight to resolve_paginated, matching the behavior of relay connection fields.

This release was contributed by @​aprams in strawberry-graphql/strawberry-django#916

Changelog

Sourced from strawberry-graphql-django's changelog.

0.86.1 - 2026-06-10

Fix offset_paginated fields applying the filter pipeline twice per resolution.

StrawberryOffsetPaginatedExtension.resolve forwards filters/order/pagination to the inner resolver (so extensions and custom resolvers can access them), but then re-applied them on the queryset the resolver returned. Filters, permission filtering and the optimizer pass all ran twice; for a filter spanning a multivalued relation the second .filter() duplicated the relation JOINs, which can grow the intermediate row count quadratically and turn a sub-second query into a multi-minute one.

The queryset returned by the inner resolver is now passed straight to resolve_paginated, matching the behavior of relay connection fields.

This release was contributed by @​aprams in #916

0.86.0 - 2026-05-23

DateFilterLookup, TimeFilterLookup and DatetimeFilterLookup no longer require a type parameter, matching StrFilterLookup. The generated GraphQL input names also lose their type prefix (e.g. DateDateFilterLookup becomes DateFilterLookup).

@strawberry_django.filter_type(models.Project)
class ProjectFilter:
    due_date: strawberry_django.DateFilterLookup | None

Migrating:

• Drop the type argument from StrFilterLookup[str], DateFilterLookup[datetime.date], etc. The bare lookup now works; the bracket form still resolves to the same class but emits a DeprecationWarning.
• DatetimeFilterLookup.date and .time now accept Date / Time values (previously typed as Int, which never matched Django's __date / __time transforms).
• TimeFilterLookup.date and .time were removed. Django's __date / __time transforms don't apply to TimeField.

This release was contributed by @​bellini666 in #910

0.85.0 - 2026-05-23

Breaking change: PAGINATION_MAX_LIMIT now defaults to 100 instead of None, so clients can no longer request more than 100 rows in a single page by default.

Previously, the cap was off and PAGINATION_DEFAULT_LIMIT only applied when the client omitted the limit, which let any client send limit: 9999999 and receive the full table in one response.

To restore the old behavior, set PAGINATION_MAX_LIMIT to None in STRAWBERRY_DJANGO (not recommended for production).

This release was contributed by @​bellini666 in #909

... (truncated)

Commits

• 52acfbf Fix offset paginated double filter (#916)
• 9f89332 [pre-commit.ci] pre-commit autoupdate (#915)
• 94a55f6 [pre-commit.ci] pre-commit autoupdate (#914)
• 1639265 [pre-commit.ci] pre-commit autoupdate (#911)
• 1647dc6 🤖 Release 0.86.0
• d5bd8ea fix: Date/Time/Datetime filter lookups without type parameter (#910)
• 02b1639 🤖 Release 0.85.0
• 17b4217 feat: cap pagination at 1000 rows by default (#909)
• 7aae9ed docs: warn about ReDoS exposure on regex/iRegex filter lookups (#908)
• b748b6c [pre-commit.ci] pre-commit autoupdate (#906)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)