MAKENTNU / web

The website of the student organization MAKE NTNU, built with Django.
https://makentnu.no
MIT License
9 stars 5 forks source link

⬆(deps): Bump django from 4.0.7 to 4.1.7 #596

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Proposed changes

Updated Django to version 4.1(.7), with some additional required changes (1da5db549b9421055bd1c24540dcd032b7331d42) and some improvements to the code motivated by this update (30ebca333f27302a6307074c9c3691f585749729, eb4c90175baa3c96aecc91af8f516111562e2677). Also changed the order of the apps listed on the Django admin index page (8e9d66c15ced597951c4167d28424c0d781727a6), and made the Dataporten logout view require requests being sent using POST (c12a27f9a4b76850b6060b60044055d9b7d36c9a).

Original description by @dependabot:

Bumps django from 4.0.7 to 4.1.7.

Commits
  • c57ff9b [4.1.x] Bumped version for 4.1.7 release.
  • 628b33a [4.1.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.
  • 425c75f [4.1.x] Fixed #34318 -- Added release note for 4bfe8c0eec835b8eaffcda7dc1e3b2...
  • 590a92e [4.1.x] Fixed #34319 -- Fixed Model.validate_constraints() crash on Validatio...
  • ae53649 [4.1.x] Added stub release notes for 4.0.10 and 3.2.18.
  • 83c88af [4.1.x] Added stub release notes for 4.1.7.
  • 9ac634f [4.1.x] Added CVE-2023-23969 to security archive.
  • f3b6a4f [4.1.x] Ignored a637d0bd22665edfe7af40b4da3297462ec3c9cf formatting changes i...
  • a637d0b [4.1.x] Refs #33476 -- Applied Black's 2023 stable style.
  • c629c78 [4.1.x] Post-release version bump.
  • Additional commits viewable in compare view


Dependabot compatibility score

Areas to review closely

That the order of the apps on the Django admin index page seems intuitive, and that the logout button in the user dropdown in the header works correctly.

Checklist

(If any of the points are not relevant, mark them as checked)

codecov[bot] commented 1 year ago

Codecov Report

Merging #596 (c1355df) into dev (a70723a) will increase coverage by 0.01%. The diff coverage is 100.00%.

@@            Coverage Diff             @@
##              dev     #596      +/-   ##
==========================================
+ Coverage   87.70%   87.71%   +0.01%     
==========================================
  Files         133      134       +1     
  Lines        5578     5585       +7     
==========================================
+ Hits         4892     4899       +7     
  Misses        686      686              
Impacted Files Coverage Δ
make_queue/forms.py 87.71% <ø> (ø)
web/hosts.py 100.00% <ø> (ø)
web/management/commands/runserver.py 0.00% <ø> (ø)
web/multilingual/widgets.py 100.00% <ø> (ø)
web/widgets.py 95.17% <ø> (ø)
contentbox/tests/urls/hosts.py 100.00% <100.00%> (ø)
dataporten/views.py 81.48% <100.00%> (ø)
make_queue/models/reservation.py 94.73% <100.00%> (ø)
web/admin.py 100.00% <100.00%> (ø)
web/urls.py 93.54% <100.00%> (ø)

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

ddabble commented 1 year ago

Merging without explicit approval from another member, as the Dev committee agreed to merge these changes and assume they're relatively bug-free, simply to get things done quicker.