Skip to content

Bump django from 5.2.12 to 6.0.5#9487

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/django-5.2.14
Open

Bump django from 5.2.12 to 6.0.5#9487
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/django-5.2.14

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps django from 5.2.12 to 6.0.5.

Commits
  • 8f8ad09 [6.0.x] Bumped version for 6.0.5 release.
  • 44ad76e [6.0.x] Fixed CVE-2026-6907 -- Prevented caching of requests when Vary header...
  • 1b0184a [6.0.x] Fixed CVE-2026-35192 -- Ensured Vary header is sent when setting sess...
  • ad8f9e1 [6.0.x] Fixed CVE-2026-5766 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE in Memory...
  • 990ab01 [6.0.x] Fixed #37039 -- Removed outdated note from QuerySet.iterator() docs.
  • f0c269f [6.0.x] Fixed typo in stub release notes for 5.2.14.
  • 8bcd15b [6.0.x] Fixed #37067 -- Added trailing slash in django_file_prefixes().
  • 3cdec64 [6.0.x] Refs CVE-2026-25674 -- Clarified role of umask in upload permissions.
  • 5dd5c70 [6.0.x] Added stub release notes and release date for 6.0.5 and 5.2.14.
  • 8ee7341 [6.0.x] Refs #373, #34122 -- Removed warning that ForeignObject is an interna...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Bot PRs that update dependencies label May 6, 2026
@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.61%. Comparing base (3dd9646) to head (b26470f).

Additional details and impacted files
@@           Coverage Diff            @@
##           master    #9487    +/-   ##
========================================
  Coverage   82.61%   82.61%            
========================================
  Files         610      610            
  Lines       35099    35099            
  Branches     3219     3281    +62     
========================================
  Hits        28996    28996            
+ Misses       5948     5728   -220     
- Partials      155      375   +220     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot force-pushed the dependabot/pip/django-5.2.14 branch from b26470f to f4f894f Compare May 7, 2026 18:59
@dependabot dependabot Bot changed the title Bump django from 5.2.12 to 5.2.14 Bump django from 5.2.12 to 6.0.5 May 11, 2026
@dependabot dependabot Bot force-pushed the dependabot/pip/django-5.2.14 branch 2 times, most recently from 1258a90 to db7bded Compare May 11, 2026 19:21
Bumps [django](https://github.com/django/django) from 5.2.12 to 6.0.5.
- [Commits](django/django@5.2.12...6.0.5)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/django-5.2.14 branch from db7bded to 53d9ad1 Compare May 13, 2026 14:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bot PRs that update dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant