Skip to content

Bump django from 5.2.9 to 5.2.13#292

Merged
sarahboyce merged 2 commits intomainfrom
dependabot/pip/django-5.2.13
May 8, 2026
Merged

Bump django from 5.2.9 to 5.2.13#292
sarahboyce merged 2 commits intomainfrom
dependabot/pip/django-5.2.13

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026

Bumps django from 5.2.9 to 5.2.13.

Commits
  • 7d831a9 [5.2.x] Bumped version for 5.2.13 release.
  • 49e1e2b [5.2.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...
  • 0b46789 [5.2.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.
  • 397c220 [5.2.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...
  • 60ffa95 [5.2.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...
  • 1cc2a76 [5.2.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.
  • 2a8a76a [5.2.x] Added stub release notes and release date for 5.2.13 and 4.2.30.
  • 90924f5 [5.2.x] Bumped black to 26.3.1.
  • 0ee44c6 [5.2.x] Applied Black's 2026 stable style.
  • 89b4d94 [5.2.x] Combined scripts confirm_release.sh and test_new_version.sh into veri...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 8, 2026
@ulgens
Copy link
Copy Markdown
Member

ulgens commented Apr 27, 2026

Needs a rebase on main for CI to pass.

@sarahboyce
Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot dependabot Bot force-pushed the dependabot/pip/django-5.2.13 branch from 580bb90 to 710894b Compare May 8, 2026 09:05
@sarahboyce
Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps [django](https://github.com/django/django) from 5.2.9 to 5.2.13.
- [Commits](django/django@5.2.9...5.2.13)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.13
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/django-5.2.13 branch from 710894b to b1e2c3c Compare May 8, 2026 09:08
Comment thread requirements.txt Outdated
Copy link
Copy Markdown
Contributor

@sarahboyce sarahboyce left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

.

@sarahboyce sarahboyce merged commit 6022eaa into main May 8, 2026
5 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/django-5.2.13 branch May 8, 2026 09:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants