From d033813d9b8e4652115f5cdafefb043933a8031e Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Tue, 7 Jul 2026 16:47:28 +0200 Subject: [PATCH 1/2] python3Packages.django_6: 6.0.6 -> 6.0.7 https://docs.djangoproject.com/en/6.0/releases/6.0.7/ https://www.djangoproject.com/weblog/2026/jul/07/security-releases/ Fixes: CVE-2026-48588, CVE-2026-53877, CVE-2026-53878 --- pkgs/development/python-modules/django/6.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/django/6.nix b/pkgs/development/python-modules/django/6.nix index 4b6e54569b85..b6cb92b964e9 100644 --- a/pkgs/development/python-modules/django/6.nix +++ b/pkgs/development/python-modules/django/6.nix @@ -42,7 +42,7 @@ buildPythonPackage (finalAttrs: { pname = "django"; - version = "6.0.6"; + version = "6.0.7"; pyproject = true; disabled = pythonOlder "3.12"; @@ -51,7 +51,7 @@ buildPythonPackage (finalAttrs: { owner = "django"; repo = "django"; tag = finalAttrs.version; - hash = "sha256-hLnTqY64PfaGJ1JJccrxYms41Jp4E4pVq6rmrtFpESE="; + hash = "sha256-B28twwEGLcXV0TlQxgRhNBiKhwJd+5f7sL35SkHAkRY="; }; patches = [ From 4dea9ea7c2c0d6656c78a256eb1068a869692b62 Mon Sep 17 00:00:00 2001 From: Martin Weinelt Date: Tue, 7 Jul 2026 17:02:20 +0200 Subject: [PATCH 2/2] python3Packages.django_5: 5.2.15 -> 5.2.16 https://docs.djangoproject.com/en/5.2/releases/5.2.16/ https://www.djangoproject.com/weblog/2026/jul/07/security-releases/ Fixes: CVE-2026-48588, CVE-2026-53877, CVE-2026-53878 --- pkgs/development/python-modules/django/5.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pkgs/development/python-modules/django/5.nix b/pkgs/development/python-modules/django/5.nix index 273b61da19c9..74dff79704f1 100644 --- a/pkgs/development/python-modules/django/5.nix +++ b/pkgs/development/python-modules/django/5.nix @@ -41,14 +41,14 @@ buildPythonPackage rec { pname = "django"; - version = "5.2.15"; + version = "5.2.16"; pyproject = true; src = fetchFromGitHub { owner = "django"; repo = "django"; tag = version; - hash = "sha256-K9yFHr3IkVNMqoeumESszVlju2fW2r8hS8z6M2OdVpE="; + hash = "sha256-DZa3OkqnrgXp1A/HerKYdUdanvi5jxHndo1DV4RVs0M="; }; patches = [