Skip to content

Commit

Permalink
fix(deps): update dependency django to v4.2.16 [security] (#205)
Browse files Browse the repository at this point in the history
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [Django](https://togithub.com/django/django)
([changelog](https://docs.djangoproject.com/en/stable/releases/)) |
dependencies | patch | `4.2.15` -> `4.2.16` |

### GitHub Vulnerability Alerts

#### [CVE-2024-45230](https://nvd.nist.gov/vuln/detail/CVE-2024-45230)

An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9,
and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters
are subject to a potential denial-of-service attack via very large
inputs with a specific sequence of characters.

---

### Release Notes

<details>
<summary>django/django (Django)</summary>

###
[`v4.2.16`](https://togithub.com/django/django/compare/4.2.15...4.2.16)

[Compare
Source](https://togithub.com/django/django/compare/4.2.15...4.2.16)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" in timezone Asia/Jerusalem,
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://togithub.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4zOS42IiwidXBkYXRlZEluVmVyIjoiMzguMzkuNiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsic2VjdXJpdHkiXX0=-->

Co-authored-by: descope[bot] <107609351+descope[bot]@users.noreply.github.com>
  • Loading branch information
descope[bot] authored Oct 8, 2024
1 parent ffda5ae commit d997e4a
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions poetry.lock

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

0 comments on commit d997e4a

Please sign in to comment.