Skip to content

build(deps): bump django from 5.2.14 to 6.0.7 - #724

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/django-6.0.7
Open

build(deps): bump django from 5.2.14 to 6.0.7#724
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/django-6.0.7

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps django from 5.2.14 to 6.0.7.

Commits
  • e2a4246 [6.0.x] Bumped version for 6.0.7 release.
  • a5de13f [6.0.x] Fixed CVE-2026-53878 -- Prevented newlines from being accepted in Dom...
  • 38dfbd2 [6.0.x] Fixed CVE-2026-53877 -- Prevented heap buffer over-read when creating...
  • 64f9a2b [6.0.x] Fixed CVE-2026-48588 -- Prevented caching of responses that set cooki...
  • c26957a [6.0.x] Fixed flatpages synopsis in docs.
  • 0b60f44 [6.0.x] Added FILE_UPLOAD_DIRECTORY_PERMISSIONS to docs settings index.
  • d928e30 [6.0.x] Fixed #37172 -- Linked to upload handlers section in FILE_UPLOAD_* se...
  • e18935c [6.0.x] Fixed #37158 -- Reordered the contribution checklist sections.
  • 490eb9c [6.0.x] Fixed document referenced in multiple toctrees warning in docs/intern...
  • 748a9b5 [6.0.x] Fixed duplicate target name in docs/internals/howto-release-django.txt.
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabotdependabotBot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 13, 2026
@dependabot
dependabotBotforce-pushed the dependabot/uv/django-6.0.7 branch 2 times, most recently from 5064592 to de5bf19CompareAugust 3, 2026 06:33
Bumps [django](https://github.com/django/django) from 5.2.14 to 6.0.7.
- [Commits](django/django@5.2.14...6.0.7)
---
updated-dependencies:
- dependency-name: django
dependency-version: 6.0.7
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/uv/django-6.0.7 branch from de5bf19 to 384b550CompareAugust 3, 2026 06:44
@dependabot@github

dependabotBot commented on behalf of githubAug 9, 2026

Copy link
Copy Markdown
ContributorAuthor

Dependabot can't resolve your Python dependency files. Because of this, Dependabot cannot update this pull request.

1 similar comment
@dependabot@github

dependabotBot commented on behalf of githubAug 10, 2026

Copy link
Copy Markdown
ContributorAuthor

Dependabot can't resolve your Python dependency files. Because of this, Dependabot cannot update this pull request.

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependenciesPull requests that update a dependency filepython:uvPull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants