Skip to content

build(deps): bump django from 5.2.15 to 5.2.17 - #5127

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/django-5.2.17
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/django-5.2.17

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps django from 5.2.15 to 5.2.17.

Commits
  • e802ada [5.2.x] Bumped version for 5.2.17 release.
  • b9adb81 [5.2.x] Fixed CVE-2026-15920 -- Made display_for_field() validate URLs before...
  • ba80833 [5.2.x] Fixed CVE-2026-15830 -- Mitigated potential DoS via nested geometry c...
  • c72a5db [5.2.x] Fixed CVE-2026-15337 -- Mitigated potential DoS in check_for_language().
  • 115ffd0 [5.2.x] Fixed CVE-2026-15307 -- Blocked raster strings and dicts in spatial l...
  • ec5ced4 [5.2.x] Fixed #36770 -- Fixed incomplete mocking in SQLiteInMemoryTestDbs.
  • 02369b5 [5.2.x] Allowed the full Python test matrix to run on GitHub Actions.
  • 686072f [5.2.x] Added stub release notes and release date for 5.2.17.
  • cd5ad8c [5.2.x] Bumped minimum setuptools version to 83.
  • 3e389b7 [5.2.x] Closed temporary files in GDALRasterTests.
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 1, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner October 1, 2026 02:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 1, 2026
@opentelemetry-pr-dashboard

opentelemetry-pr-dashboard Bot commented Oct 1, 2026 •

Copy link
Copy Markdown

Pull request dashboard status

Waiting on reviewers · refreshed 2026-10-14 22:05 UTC

Review the latest changes.

Also blocked by: 1 required status check is failing.

Status above doesn't look right?
  • Just replied or pushed? Anything around or after the refresh time above may not be picked up yet — give it a few minutes.
  • Anything look wrong? Report it with what you expected; it helps us improve the dashboard.

Bumps [django](https://github.com/django/django) from 5.2.15 to 5.2.17.
- [Commits](django/django@5.2.15...5.2.17)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.17
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/django-5.2.17 branch from b9a7c31 to e2a6439 Compare October 14, 2026 22:00

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

Status: No status

Development

Successfully merging this pull request may close these issues.

0 participants