python3Packages.django_5: 5.2.9 -> 5.2.11

https://docs.djangoproject.com/en/5.2/releases/5.2.10/
https://docs.djangoproject.com/en/5.2/releases/5.2.11/
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/

Fixes: CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285,
       CVE-2026-1287, CVE-2026-1312
This commit is contained in:
Martin Weinelt
2026-02-04 03:28:06 +01:00
parent 26aef44576
commit 2fd5c61641
+2 -16
View File
@@ -3,7 +3,6 @@
stdenv,
buildPythonPackage,
fetchFromGitHub,
fetchpatch,
replaceVars,
# build-system
@@ -42,14 +41,14 @@
buildPythonPackage rec {
pname = "django";
version = "5.2.9";
version = "5.2.11";
pyproject = true;
src = fetchFromGitHub {
owner = "django";
repo = "django";
tag = version;
hash = "sha256-9URe8hB15WP92AU1YgGGFfZhVxn59gfBRrORZ04L+F0=";
hash = "sha256-Ldscb87ts0CPbt5uBiL3DK3qhU6SzTmsEUl90Afko84=";
};
patches = [
@@ -59,19 +58,6 @@ buildPythonPackage rec {
# prevent tests from messing with our pythonpath
./5.2/pythonpath.patch
# disable test that expects timezone issues
./django_5_disable_failing_tests.patch
# 3.14.1/3.13.10 comapt
(fetchpatch {
# https://github.com/django/django/pull/20390
url = "https://github.com/django/django/commit/5ca0f62213911a77dd4a62e843db7e420cc98b78.patch";
hash = "sha256-SpVdbS4S5wqvrrUOoZJ7d2cIbtmgI0mvxwwCveSA068=";
})
(fetchpatch {
# https://github.com/django/django/pull/20392
url = "https://github.com/django/django/commit/9cc231e8243091519f5d627cd02ee40bbb853ced.patch";
hash = "sha256-/aimmqxurMCCntraxOtybEq8qNgZgQWLD5Gxs/3pkIU=";
})
./5.2/disable-failing-test.patch
]
++ lib.optionals withGdal [