Skip to content

Bump django from 5.2.12 to 5.2.13#9377

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/django-5.2.13
Closed

Bump django from 5.2.12 to 5.2.13#9377
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/django-5.2.13

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026

Bumps django from 5.2.12 to 5.2.13.

Commits
  • 7d831a9 [5.2.x] Bumped version for 5.2.13 release.
  • 49e1e2b [5.2.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...
  • 0b46789 [5.2.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.
  • 397c220 [5.2.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...
  • 60ffa95 [5.2.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...
  • 1cc2a76 [5.2.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.
  • 2a8a76a [5.2.x] Added stub release notes and release date for 5.2.13 and 4.2.30.
  • 90924f5 [5.2.x] Bumped black to 26.3.1.
  • 0ee44c6 [5.2.x] Applied Black's 2026 stable style.
  • 89b4d94 [5.2.x] Combined scripts confirm_release.sh and test_new_version.sh into veri...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Bot PRs that update dependencies label Apr 8, 2026
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.67%. Comparing base (0871f37) to head (50f6adf).
⚠️ Report is 21 commits behind head on master.

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #9377   +/-   ##
=======================================
  Coverage   82.67%   82.67%           
=======================================
  Files         600      600           
  Lines       34534    34534           
  Branches     3131     3131           
=======================================
  Hits        28552    28552           
  Misses       5652     5652           
  Partials      330      330           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot force-pushed the dependabot/pip/django-5.2.13 branch from 2545ca6 to 0cac1c6 Compare April 21, 2026 15:33
Bumps [django](https://github.com/django/django) from 5.1.15 to 5.2.13.
- [Commits](django/django@5.1.15...5.2.13)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump django from 5.1.15 to 5.2.13 Bump django from 5.2.12 to 5.2.13 Apr 21, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/django-5.2.13 branch from 0cac1c6 to 50f6adf Compare April 21, 2026 17:04
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 6, 2026

Superseded by #9487.

@dependabot dependabot Bot closed this May 6, 2026
@dependabot dependabot Bot deleted the dependabot/pip/django-5.2.13 branch May 6, 2026 02:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bot PRs that update dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant