Skip to content

Bump django from 5.1.15 to 5.2.13 in /requirements#9378

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/requirements/django-5.2.13
Open

Bump django from 5.1.15 to 5.2.13 in /requirements#9378
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/requirements/django-5.2.13

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 8, 2026

Bumps django from 5.1.15 to 5.2.13.

Commits
  • 7d831a9 [5.2.x] Bumped version for 5.2.13 release.
  • 49e1e2b [5.2.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...
  • 0b46789 [5.2.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.
  • 397c220 [5.2.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...
  • 60ffa95 [5.2.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...
  • 1cc2a76 [5.2.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.
  • 2a8a76a [5.2.x] Added stub release notes and release date for 5.2.13 and 4.2.30.
  • 90924f5 [5.2.x] Bumped black to 26.3.1.
  • 0ee44c6 [5.2.x] Applied Black's 2026 stable style.
  • 89b4d94 [5.2.x] Combined scripts confirm_release.sh and test_new_version.sh into veri...
  • Additional commits viewable in compare view

@dependabot dependabot bot added the dependencies Bot PRs that update dependencies label Apr 8, 2026
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.60%. Comparing base (741976c) to head (7ff0b68).

Additional details and impacted files
@@           Coverage Diff            @@
##           master    #9378    +/-   ##
========================================
  Coverage   82.60%   82.60%            
========================================
  Files         618      618            
  Lines       35374    35374            
  Branches     3327     3317    -10     
========================================
  Hits        29221    29221            
+ Misses       6032     5809   -223     
- Partials      121      344   +223     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot bot force-pushed the dependabot/pip/requirements/django-5.2.13 branch 3 times, most recently from c06884e to ce99ae8 Compare April 16, 2026 14:13
Bumps [django](https://github.com/django/django) from 5.1.15 to 5.2.13.
- [Commits](django/django@5.1.15...5.2.13)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/requirements/django-5.2.13 branch from ce99ae8 to 7ff0b68 Compare April 17, 2026 02:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bot PRs that update dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant