Deleting nested device roles in bulk via REST API results in duplicate change records

[jeremystretch]

Deployment Type

Self-hosted

NetBox Version

v4.3.4

Python Version

3.10

Steps to Reproduce

1. Create device role A with no parent.
2. Create device role B as a child of role B.
3. Note the IDs of both roles. (In this example, we assume their IDs are 1 and 2.)
4. Delete both roles using a single REST API request:

curl -X DELETE \
-H "Authorization: Token $TOKEN" \
-H "Content-Type: application/json" \
-H "Accept: application/json; indent=4" \
http://netbox:8000/api/dcim/device-roles/ \
--data '[
    {"id": 1},
    {"id": 2}
]'

5. Inspect the change log.

Expected Behavior

The API request should generate only two deletion records (one for either role).

Observed Behavior

A duplicate deletion record is generated for the child role.

I believe the first comes from the cascading deletion triggered by the deletion of the parent role; the second comes from the explicit deletion in the API request.

[jeremystretch]

I believe this occurs for any similar nested objects, such as inventory items.