Dropped patch that is included in this release. Ptests passed: Ran 18131 tests in 450.882s
OK (skipped=1389, expected failures=5) Changelog: 5.2.11: Contains fixes for CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285, CVE-2026-1287 and CVE-2026-1312 5.2.10: * Fixed a bug in Django 5.2 where data exceeding max_length was silently truncated by QuerySet.bulk_create on PostgreSQL. * Fixed a bug where management command colorized help (introduced in Python 3.14) ignored the --no-color option and the DJANGO_COLORS setting. Signed-off-by: Gyorgy Sarvari <[email protected]> --- .../0001-Fix-test_strip_tags-test.patch | 76 ------------------- .../python/python3-django_5.2.11.bb | 5 ++ .../python/python3-django_5.2.9.bb | 7 -- 3 files changed, 5 insertions(+), 83 deletions(-) delete mode 100644 meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch create mode 100644 meta-python/recipes-devtools/python/python3-django_5.2.11.bb delete mode 100644 meta-python/recipes-devtools/python/python3-django_5.2.9.bb diff --git a/meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch b/meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch deleted file mode 100644 index f77c3b963a..0000000000 --- a/meta-python/recipes-devtools/python/python3-django/0001-Fix-test_strip_tags-test.patch +++ /dev/null @@ -1,76 +0,0 @@ -From 7b80b2186300620931009fd62c2969f108fe7a62 Mon Sep 17 00:00:00 2001 -From: Jacob Walls <[email protected]> -Date: Thu, 11 Dec 2025 08:44:19 -0500 -Subject: [PATCH] Refs #36499 -- Adjusted test_strip_tags following Python - behavior change for incomplete entities. - -Upstream-Status: Backport [https://github.com/django/django/commit/7b80b2186300620931009fd62c2969f108fe7a62] -Signed-off-by: Gyorgy Sarvari <[email protected]> ---- - tests/utils_tests/test_html.py | 25 ++++++++++++++++++++----- - 1 file changed, 20 insertions(+), 5 deletions(-) - -diff --git a/tests/utils_tests/test_html.py b/tests/utils_tests/test_html.py -index 7412c2624c73..ee115aaf1cf2 100644 ---- a/tests/utils_tests/test_html.py -+++ b/tests/utils_tests/test_html.py -@@ -1,3 +1,4 @@ -+import math - import os - import sys - from datetime import datetime -@@ -124,7 +125,7 @@ - # old and new results. The check below is temporary until all supported - # Python versions and CI workers include the fix. See: - # https://github.com/python/cpython/commit/6eb6c5db -- min_fixed = { -+ min_fixed_security = { - (3, 14): (3, 14), - (3, 13): (3, 13, 6), - (3, 12): (3, 12, 12), -@@ -132,7 +133,21 @@ - (3, 10): (3, 10, 19), - (3, 9): (3, 9, 24), - } -- htmlparser_fixed = sys.version_info >= min_fixed[sys.version_info[:2]] -+ # Similarly, there was a fix for terminating incomplete entities. See: -+ # https://github.com/python/cpython/commit/95296a9d -+ min_fixed_incomplete_entities = { -+ (3, 14): (3, 14, 1), -+ (3, 13): (3, 13, 10), -+ (3, 12): (3, 12, math.inf), # not fixed in 3.12. -+ } -+ major_version = sys.version_info[:2] -+ htmlparser_fixed_security = sys.version_info >= min_fixed_security.get( -+ major_version, major_version -+ ) -+ htmlparser_fixed_incomplete_entities = ( -+ sys.version_info -+ >= min_fixed_incomplete_entities.get(major_version, major_version) -+ ) - items = ( - ( - "<p>See: 'é is an apostrophe followed by e acute</p>", -@@ -159,16 +174,19 @@ - # https://bugs.python.org/issue20288 - ("&gotcha&#;<>", "&gotcha&#;<>"), - ("<sc<!-- -->ript>test<<!-- -->/script>", "ript>test"), -- ("<script>alert()</script>&h", "alert()h"), -+ ( -+ "<script>alert()</script>&h", -+ "alert()&h;" if htmlparser_fixed_incomplete_entities else "alert()h", -+ ), - ( - "><!" + ("&" * 16000) + "D", -- ">" if htmlparser_fixed else "><!" + ("&" * 16000) + "D", -+ ">" if htmlparser_fixed_security else "><!" + ("&" * 16000) + "D", - ), - ("X<<<<br>br>br>br>X", "XX"), - ("<" * 50 + "a>" * 50, ""), - ( - ">" + "<a" * 500 + "a", -- ">" if htmlparser_fixed else ">" + "<a" * 500 + "a", -+ ">" if htmlparser_fixed_security else ">" + "<a" * 500 + "a", - ), - ("<a" * 49 + "a" * 951, "<a" * 49 + "a" * 951), - ("<" + "a" * 1_002, "<" + "a" * 1_002), diff --git a/meta-python/recipes-devtools/python/python3-django_5.2.11.bb b/meta-python/recipes-devtools/python/python3-django_5.2.11.bb new file mode 100644 index 0000000000..d18aa35169 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-django_5.2.11.bb @@ -0,0 +1,5 @@ +require python3-django.inc +inherit python_setuptools_build_meta + +SRC_URI += "file://0001-fix-test_msgfmt_error_including_non_ascii-test.patch" +SRC_URI[sha256sum] = "7f2d292ad8b9ee35e405d965fbbad293758b858c34bbf7f3df551aeeac6f02d3" diff --git a/meta-python/recipes-devtools/python/python3-django_5.2.9.bb b/meta-python/recipes-devtools/python/python3-django_5.2.9.bb deleted file mode 100644 index 11f438d623..0000000000 --- a/meta-python/recipes-devtools/python/python3-django_5.2.9.bb +++ /dev/null @@ -1,7 +0,0 @@ -require python3-django.inc -inherit python_setuptools_build_meta - -SRC_URI += "file://0001-fix-test_msgfmt_error_including_non_ascii-test.patch \ - file://0001-Fix-test_strip_tags-test.patch \ -" -SRC_URI[sha256sum] = "16b5ccfc5e8c27e6c0561af551d2ea32852d7352c67d452ae3e76b4f6b2ca495"
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#124323): https://lists.openembedded.org/g/openembedded-devel/message/124323 Mute This Topic: https://lists.openembedded.org/mt/117743906/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
