Commit Graph
5 Commits
Author SHA1 Message Date
Ankur Tyagi f311c7bdfc python3-django: upgrade 5.2.16 -> 5.2.17
Release Notes:
https://docs.djangoproject.com/en/dev/releases/5.2.17/

CVE: CVE-2026-15307 CVE-2026-15337 CVE-2026-15830 CVE-2026-15920

Backport Changes:
- Django 5.2.17 requires setuptools >= 83, the first
  upstream release containing the fix [1]. Wrynose provides
  setuptools 82.0.1 with that fix backported, so retain the
  previous build requirement.

[1] https://github.com/pypa/setuptools/commit/dd9f436a36486b4cb8a4c70a2321548b0be09b8f

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
(cherry picked from commit 8a4bf31e7f)
Signed-off-by: Darsh Kelaiya <dkelaiya@cisco.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-11 08:02:17 +05:30
Gyorgy Sarvari 8fdf6a64c0 python3-django: upgrade 5.2.9 -> 5.2.11
Dropped patch that is included in this release.

Ptests passed:
Ran 18131 tests in 450.882s

OK (skipped=1389, expected failures=5)

Changelog:
5.2.11:
Contains fixes for CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285,
CVE-2026-1287 and CVE-2026-1312

5.2.10:
* Fixed a bug in Django 5.2 where data exceeding max_length was silently
  truncated by QuerySet.bulk_create on PostgreSQL.

* Fixed a bug where management command colorized help (introduced in
  Python 3.14) ignored the --no-color option and the DJANGO_COLORS setting.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-02-10 21:11:46 -08:00
Gyorgy Sarvari 96392e8231 python3-django: add ptest support
Execute the standard, non-selenium tests. The execution is
on the slower side: on my idle machine, KVM enabled it takes
a bit more than 2.5 minutes to execute it (executing tests with
4 threads parallel, 1/core, the default configuration). If the machine is
under load, it easily grows to over 10 minutes.

Added two backported patches for Django 5.2 to fix some tests that
would otherwise fail:

0001-Fix-test_strip_tags-test.patch: tag stripping tests failed due to
changed Python behavior

0001-fix-test_msgfmt_error_including_non_ascii-test.patch: tests were
updated to work with msgfmt 0.25

Most of the skipped tests require some specific database backend
(Postgres, MySQL, Oracle...) or are Selenium tests.

The output is very long (the suite contains way over 15k tests),
so I omit the example output here.

The current summary (for v5.2.9):
Ran 18121 tests in 140.891s
OK (skipped=1394, expected failures=5)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:10 -08:00
Soumya Sambu 64f25a7663 python3-django: Upgrade 5.2 -> 5.2.6
Release notes:
https://docs.djangoproject.com/en/5.2/releases/5.2.6/
https://docs.djangoproject.com/en/5.2/releases/5.2.5/
https://docs.djangoproject.com/en/5.2/releases/5.2.4/
https://docs.djangoproject.com/en/5.2/releases/5.2.3/
https://docs.djangoproject.com/en/5.2/releases/5.2.2/
https://docs.djangoproject.com/en/5.2/releases/5.2.1/

Drop patch 0001-Fixed-35980-Updated-setuptools-to-normalize-package.patch:
already present in the upgraded version.

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-10-06 22:08:46 -07:00
Mingli Yu 9b5c9136df python3-django: Upgrade 5.0.13 -> 5.2
Release note:
https://docs.djangoproject.com/en/5.2/releases/5.2/

Backport a patch [1] to fix the below build failure:
 | ERROR Missing dependencies:
 | 	setuptools<69.3.0,>=61.0.0

[1] https://github.com/django/django/commit/3ae049b26b995c650c41ef918d5f60beed52b4ba

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-04-11 08:20:13 -07:00