Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-djangorestframework for
openSUSE:Factory checked in at 2026-10-26 11:17:22
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-djangorestframework (Old)
and /work/SRC/openSUSE:Factory/.python-djangorestframework.new.2252680
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-djangorestframework"
Mon Oct 26 11:17:22 2026 rev:29 rq:1392677 version:3.18.2
Changes:
--------
---
/work/SRC/openSUSE:Factory/python-djangorestframework/python-djangorestframework.changes
2026-08-27 18:57:26.135378420 +0200
+++
/work/SRC/openSUSE:Factory/.python-djangorestframework.new.2252680/python-djangorestframework.changes
2026-10-26 11:17:29.871094284 +0100
@@ -1,0 +2,31 @@
+Mon Oct 26 09:06:09 UTC 2026 - Dirk Müller <[email protected]>
+
+- update to 3.18.2 (
+ bsc#1287141, CVE-2026-114136,
+ bsc#1287153, CVE-2026-114137,
+ bsc#1287167, CVE-2026-114138):
+ * GHSA-33wh-fxxf-88vv: Harden content negotiation against large
+ `Accept` headers by @jisung-02 in 148ab65. Thanks @jisung-02
+ for the report.
+ * GHSA-3547-9m27-7rxg: Refuse non-text encoding charsets by
+ @syrull in 3c26345. Thanks @syrull and @jisung-02 who both
+ reported the problem.
+ * GHSA-xw6w-gcfp-cf8m: Make `TokenProxy` deletion actually
+ delete the token by @syrull in af3fabf. Thanks @syrull for
+ the report.
+ * Add support for Python 3.15
+ * Fix `blank=True` fields in unique constraints being treated
+ as required
+ * Fix `UniqueConstraint` validation with conditional fields
+- update to 3.18.1:
+ * Fix duplicate validation errors for GenericIPAddressField
+ with protocol
+ * Fix int64 format detection for negative `IntegerField`
+ minimums in OpenAPI schema definition
+ * Fix list serializer on unique constraint validator
+ * Reject non-finite values (nan, inf) in FloatField
+ * Add a compatibility setting for `ListSerializer` error
+ formats
+ * Expand deprecation classes and review deprecation policy
+
+-------------------------------------------------------------------
Old:
----
djangorestframework-3.18.0.tar.gz
New:
----
djangorestframework-3.18.2.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-djangorestframework.spec ++++++
--- /var/tmp/diff_new_pack.VZzNnH/_old 2026-10-26 11:17:31.214150433 +0100
+++ /var/tmp/diff_new_pack.VZzNnH/_new 2026-10-26 11:17:31.220150684 +0100
@@ -26,12 +26,13 @@
%bcond_with test
%endif
Name: python-djangorestframework%{psuffix}
-Version: 3.18.0
+Version: 3.18.2
Release: 0
Summary: A REST Framework for Django
License: BSD-2-Clause
URL: https://www.django-rest-framework.org/
Source:
https://github.com/encode/django-rest-framework/archive/%{version}.tar.gz#/djangorestframework-%{version}.tar.gz
+BuildRequires: %{python_module base >= 3.10}
BuildRequires: %{python_module pip}
BuildRequires: %{python_module setuptools >= 77.0.3}
BuildRequires: %{python_module wheel}
@@ -75,7 +76,7 @@
%autosetup -p1 -n django-rest-framework-%{version}
# Remove pytest params incompatible with older pytest on Leap
-sed -i '/addopts/d' pyproject.toml
+sed -i '/^addopts/,/^\]/d' pyproject.toml
# Remove pytest params breaking Tumbleweed
sed -i '/^filterwarnings/,/^\]/d' pyproject.toml
++++++ djangorestframework-3.18.0.tar.gz -> djangorestframework-3.18.2.tar.gz
++++++
/work/SRC/openSUSE:Factory/python-djangorestframework/djangorestframework-3.18.0.tar.gz
/work/SRC/openSUSE:Factory/.python-djangorestframework.new.2252680/djangorestframework-3.18.2.tar.gz
differ: char 16, line 1
