Skip to content

Bump django from 5.1.15 to 5.2.13 in /requirements#9378

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/requirements/django-5.2.13
Open

Bump django from 5.1.15 to 5.2.13 in /requirements#9378
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/requirements/django-5.2.13

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 8, 2026

Bumps django from 5.1.15 to 5.2.13.

Commits
  • 7d831a9 [5.2.x] Bumped version for 5.2.13 release.
  • 49e1e2b [5.2.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...
  • 0b46789 [5.2.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.
  • 397c220 [5.2.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...
  • 60ffa95 [5.2.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...
  • 1cc2a76 [5.2.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.
  • 2a8a76a [5.2.x] Added stub release notes and release date for 5.2.13 and 4.2.30.
  • 90924f5 [5.2.x] Bumped black to 26.3.1.
  • 0ee44c6 [5.2.x] Applied Black's 2026 stable style.
  • 89b4d94 [5.2.x] Combined scripts confirm_release.sh and test_new_version.sh into veri...
  • Additional commits viewable in compare view

@dependabot dependabot bot added the dependencies Bot PRs that update dependencies label Apr 8, 2026
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.60%. Comparing base (de94c2b) to head (ce99ae8).

Additional details and impacted files
@@           Coverage Diff            @@
##           master    #9378    +/-   ##
========================================
  Coverage   82.60%   82.60%            
========================================
  Files         617      617            
  Lines       35369    35369            
  Branches     3249     3317    +68     
========================================
+ Hits        29216    29218     +2     
+ Misses       6032     5807   -225     
- Partials      121      344   +223     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot bot force-pushed the dependabot/pip/requirements/django-5.2.13 branch 2 times, most recently from 1ef6e6d to c06884e Compare April 14, 2026 14:58
Bumps [django](https://github.com/django/django) from 5.1.15 to 5.2.13.
- [Commits](django/django@5.1.15...5.2.13)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/requirements/django-5.2.13 branch from c06884e to ce99ae8 Compare April 16, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bot PRs that update dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant