diff mbox series

[meta-python,1/2] python3-django: upgrade 5.2.9 -> 5.2.11

Message ID 20260210191923.4896-1-skandigraun@gmail.com
State New
Headers show
Series [meta-python,1/2] python3-django: upgrade 5.2.9 -> 5.2.11 | expand

Commit Message

Gyorgy Sarvari Feb. 10, 2026, 7:19 p.m. UTC
Dropped patch that is included in this release.

Ptests passed:
Ran 18131 tests in 450.882s

OK (skipped=1389, expected failures=5)

Changelog:
5.2.11:
Contains fixes for CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285,
CVE-2026-1287 and CVE-2026-1312

5.2.10:
* Fixed a bug in Django 5.2 where data exceeding max_length was silently
  truncated by QuerySet.bulk_create on PostgreSQL.

* Fixed a bug where management command colorized help (introduced in
  Python 3.14) ignored the --no-color option and the DJANGO_COLORS setting.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
---
 .../0001-Fix-test_strip_tags-test.patch       | 76 -------------------
 .../python/python3-django_5.2.11.bb           |  5 ++
 .../python/python3-django_5.2.9.bb            |  7 --
 3 files changed, 5 insertions(+), 83 deletions(-)
 delete mode 100644 meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch
 create mode 100644 meta-python/recipes-devtools/python/python3-django_5.2.11.bb
 delete mode 100644 meta-python/recipes-devtools/python/python3-django_5.2.9.bb
diff mbox series

Patch

diff --git a/meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch b/meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch
deleted file mode 100644
index f77c3b963a..0000000000
--- a/meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch
+++ /dev/null
@@ -1,76 +0,0 @@ 
-From 7b80b2186300620931009fd62c2969f108fe7a62 Mon Sep 17 00:00:00 2001
-From: Jacob Walls <jacobtylerwalls@gmail.com>
-Date: Thu, 11 Dec 2025 08:44:19 -0500
-Subject: [PATCH] Refs #36499 -- Adjusted test_strip_tags following Python
- behavior change for incomplete entities.
-
-Upstream-Status: Backport [https://github.com/django/django/commit/7b80b2186300620931009fd62c2969f108fe7a62]
-Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
----
- tests/utils_tests/test_html.py | 25 ++++++++++++++++++++-----
- 1 file changed, 20 insertions(+), 5 deletions(-)
-
-diff --git a/tests/utils_tests/test_html.py b/tests/utils_tests/test_html.py
-index 7412c2624c73..ee115aaf1cf2 100644
---- a/tests/utils_tests/test_html.py
-+++ b/tests/utils_tests/test_html.py
-@@ -1,3 +1,4 @@
-+import math
- import os
- import sys
- from datetime import datetime
-@@ -124,7 +125,7 @@
-         # old and new results. The check below is temporary until all supported
-         # Python versions and CI workers include the fix. See:
-         # https://github.com/python/cpython/commit/6eb6c5db
--        min_fixed = {
-+        min_fixed_security = {
-             (3, 14): (3, 14),
-             (3, 13): (3, 13, 6),
-             (3, 12): (3, 12, 12),
-@@ -132,7 +133,21 @@
-             (3, 10): (3, 10, 19),
-             (3, 9): (3, 9, 24),
-         }
--        htmlparser_fixed = sys.version_info >= min_fixed[sys.version_info[:2]]
-+        # Similarly, there was a fix for terminating incomplete entities. See:
-+        # https://github.com/python/cpython/commit/95296a9d
-+        min_fixed_incomplete_entities = {
-+            (3, 14): (3, 14, 1),
-+            (3, 13): (3, 13, 10),
-+            (3, 12): (3, 12, math.inf),  # not fixed in 3.12.
-+        }
-+        major_version = sys.version_info[:2]
-+        htmlparser_fixed_security = sys.version_info >= min_fixed_security.get(
-+            major_version, major_version
-+        )
-+        htmlparser_fixed_incomplete_entities = (
-+            sys.version_info
-+            >= min_fixed_incomplete_entities.get(major_version, major_version)
-+        )
-         items = (
-             (
-                 "<p>See: &#39;&eacute; is an apostrophe followed by e acute</p>",
-@@ -159,16 +174,19 @@
-             # https://bugs.python.org/issue20288
-             ("&gotcha&#;<>", "&gotcha&#;<>"),
-             ("<sc<!-- -->ript>test<<!-- -->/script>", "ript>test"),
--            ("<script>alert()</script>&h", "alert()h"),
-+            (
-+                "<script>alert()</script>&h",
-+                "alert()&h;" if htmlparser_fixed_incomplete_entities else "alert()h",
-+            ),
-             (
-                 "><!" + ("&" * 16000) + "D",
--                ">" if htmlparser_fixed else "><!" + ("&" * 16000) + "D",
-+                ">" if htmlparser_fixed_security else "><!" + ("&" * 16000) + "D",
-             ),
-             ("X<<<<br>br>br>br>X", "XX"),
-             ("<" * 50 + "a>" * 50, ""),
-             (
-                 ">" + "<a" * 500 + "a",
--                ">" if htmlparser_fixed else ">" + "<a" * 500 + "a",
-+                ">" if htmlparser_fixed_security else ">" + "<a" * 500 + "a",
-             ),
-             ("<a" * 49 + "a" * 951, "<a" * 49 + "a" * 951),
-             ("<" + "a" * 1_002, "<" + "a" * 1_002),
diff --git a/meta-python/recipes-devtools/python/python3-django_5.2.11.bb b/meta-python/recipes-devtools/python/python3-django_5.2.11.bb
new file mode 100644
index 0000000000..d18aa35169
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-django_5.2.11.bb
@@ -0,0 +1,5 @@ 
+require python3-django.inc
+inherit python_setuptools_build_meta
+
+SRC_URI += "file://0001-fix-test_msgfmt_error_including_non_ascii-test.patch"
+SRC_URI[sha256sum] = "7f2d292ad8b9ee35e405d965fbbad293758b858c34bbf7f3df551aeeac6f02d3"
diff --git a/meta-python/recipes-devtools/python/python3-django_5.2.9.bb b/meta-python/recipes-devtools/python/python3-django_5.2.9.bb
deleted file mode 100644
index 11f438d623..0000000000
--- a/meta-python/recipes-devtools/python/python3-django_5.2.9.bb
+++ /dev/null
@@ -1,7 +0,0 @@ 
-require python3-django.inc
-inherit python_setuptools_build_meta
-
-SRC_URI += "file://0001-fix-test_msgfmt_error_including_non_ascii-test.patch \
-            file://0001-Fix-test_strip_tags-test.patch \
-"
-SRC_URI[sha256sum] = "16b5ccfc5e8c27e6c0561af551d2ea32852d7352c67d452ae3e76b4f6b2ca495"