Skip to content

Bump django from 5.2.12 to 6.0.5 in /requirements#9488

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/requirements/django-6.0.5
Open

Bump django from 5.2.12 to 6.0.5 in /requirements#9488
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/requirements/django-6.0.5

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 6, 2026

Bumps django from 5.2.12 to 6.0.5.

Commits
  • 8f8ad09 [6.0.x] Bumped version for 6.0.5 release.
  • 44ad76e [6.0.x] Fixed CVE-2026-6907 -- Prevented caching of requests when Vary header...
  • 1b0184a [6.0.x] Fixed CVE-2026-35192 -- Ensured Vary header is sent when setting sess...
  • ad8f9e1 [6.0.x] Fixed CVE-2026-5766 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE in Memory...
  • 990ab01 [6.0.x] Fixed #37039 -- Removed outdated note from QuerySet.iterator() docs.
  • f0c269f [6.0.x] Fixed typo in stub release notes for 5.2.14.
  • 8bcd15b [6.0.x] Fixed #37067 -- Added trailing slash in django_file_prefixes().
  • 3cdec64 [6.0.x] Refs CVE-2026-25674 -- Clarified role of umask in upload permissions.
  • 5dd5c70 [6.0.x] Added stub release notes and release date for 6.0.5 and 5.2.14.
  • 8ee7341 [6.0.x] Refs #373, #34122 -- Removed warning that ForeignObject is an interna...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Bot PRs that update dependencies label May 6, 2026
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented May 6, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.61%. Comparing base (7f4ed32) to head (8aac950).

Additional details and impacted files
@@           Coverage Diff           @@
##           master    #9488   +/-   ##
=======================================
  Coverage   82.61%   82.61%           
=======================================
  Files         610      610           
  Lines       35113    35113           
  Branches     3219     3221    +2     
=======================================
  Hits        29010    29010           
  Misses       5948     5948           
  Partials      155      155           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot Bot force-pushed the dependabot/pip/requirements/django-6.0.5 branch 3 times, most recently from 177d62d to d077612 Compare May 11, 2026 19:21
Bumps [django](https://github.com/django/django) from 5.2.12 to 6.0.5.
- [Commits](django/django@5.2.12...6.0.5)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/requirements/django-6.0.5 branch from d077612 to c1f2be4 Compare May 13, 2026 14:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Bot PRs that update dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant