Skip to content

build(deps): bump django from 5.1.15 to 6.0.7 in /backend - #3498

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/backend/django-6.0.7
Closed

build(deps): bump django from 5.1.15 to 6.0.7 in /backend#3498
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/backend/django-6.0.7

Conversation

@dependabot

@dependabotdependabotBot commented on behalf of githubJul 10, 2026

Copy link
Copy Markdown
Contributor

Bumps django from 5.1.15 to 6.0.7.

Commits
  • e2a4246 [6.0.x] Bumped version for 6.0.7 release.
  • a5de13f [6.0.x] Fixed CVE-2026-53878 -- Prevented newlines from being accepted in Dom...
  • 38dfbd2 [6.0.x] Fixed CVE-2026-53877 -- Prevented heap buffer over-read when creating...
  • 64f9a2b [6.0.x] Fixed CVE-2026-48588 -- Prevented caching of responses that set cooki...
  • c26957a [6.0.x] Fixed flatpages synopsis in docs.
  • 0b60f44 [6.0.x] Added FILE_UPLOAD_DIRECTORY_PERMISSIONS to docs settings index.
  • d928e30 [6.0.x] Fixed #37172 -- Linked to upload handlers section in FILE_UPLOAD_* se...
  • e18935c [6.0.x] Fixed #37158 -- Reordered the contribution checklist sections.
  • 490eb9c [6.0.x] Fixed document referenced in multiple toctrees warning in docs/intern...
  • 748a9b5 [6.0.x] Fixed duplicate target name in docs/internals/howto-release-django.txt.
  • Additional commits viewable in compare view

@dependabotdependabotBot added the backend Code review backend label Jul 10, 2026
@dependabot
dependabotBotforce-pushed the dependabot/pip/backend/django-6.0.7 branch from 2338a87 to b48a6b2CompareJuly 21, 2026 12:58
Bumps [django](https://github.com/django/django) from 5.1.15 to 6.0.7.
- [Commits](django/django@5.1.15...6.0.7)
---
updated-dependencies:
- dependency-name: django
dependency-version: 6.0.7
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabotBotforce-pushed the dependabot/pip/backend/django-6.0.7 branch from b48a6b2 to 4ab509bCompareJuly 27, 2026 12:02
@dependabot@github

dependabotBot commented on behalf of githubAug 14, 2026

Copy link
Copy Markdown
ContributorAuthor

Superseded by #3573.

@dependabotdependabotBot closed this Aug 14, 2026
@dependabot
dependabotBot deleted the dependabot/pip/backend/django-6.0.7 branch August 14, 2026 14:03
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backendCode review backend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants