Commits
- [`90a1cfd`](https://github.com/django/django/commit/90a1cfd60002c465d9c47ad9ebc0a79ad0bc6cf9) [2.1.x] Bumped version for 2.1.10 release.
- [`1e40f42`](https://github.com/django/django/commit/1e40f427bb8d0fb37cc9f830096a97c36c97af6f) [2.1.x] Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SS...
- [`87be9c9`](https://github.com/django/django/commit/87be9c9626014a2754729d6293cb4c86ba294354) [2.1.x] Added stub release notes for security releases.
- [`757c226`](https://github.com/django/django/commit/757c226fd6f6e68116a2bbffab9c7367e11e3ed8) [2.1.x] Fixed GeoIPTest.test04_city() failure with the latest GeoIP2 database.
- [`20968e3`](https://github.com/django/django/commit/20968e3eaee8977da3003e18f09acc3741567814) [2.1.x] Bumped minimum ESLint version to 4.18.2.
- [`d58f8e4`](https://github.com/django/django/commit/d58f8e4235001a1673bf62bfe3e397fc9bbb41b4) [2.1.x] Added CVE-2019-12308 to the security release archive.
- [`8827e09`](https://github.com/django/django/commit/8827e0994473225bbb1a8c6c26a07d06bbc94305) [2.1.x] Added CVE-2019-11358 to the security release archive.
- [`73158f1`](https://github.com/django/django/commit/73158f19f19400dc324acf6a6a69ce985a8bb3cb) [2.1.x] Fixed typos in 1.11.21, 2.1.9, 2.2.2 release notes.
- [`eecf5a1`](https://github.com/django/django/commit/eecf5a1474d23422a3c1fe01afc73ed866283957) [2.1.x] Post-release version bump.
- [`60ebd19`](https://github.com/django/django/commit/60ebd195c99884e0cf0aee721839119079bb3046) [2.1.x] Bumped version for 2.1.9 release.
- Additional commits viewable in [compare view](https://github.com/django/django/compare/2.1.7...2.1.10)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
Bumps django from 2.1.7 to 2.1.10.
Commits
- [`90a1cfd`](https://github.com/django/django/commit/90a1cfd60002c465d9c47ad9ebc0a79ad0bc6cf9) [2.1.x] Bumped version for 2.1.10 release. - [`1e40f42`](https://github.com/django/django/commit/1e40f427bb8d0fb37cc9f830096a97c36c97af6f) [2.1.x] Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SS... - [`87be9c9`](https://github.com/django/django/commit/87be9c9626014a2754729d6293cb4c86ba294354) [2.1.x] Added stub release notes for security releases. - [`757c226`](https://github.com/django/django/commit/757c226fd6f6e68116a2bbffab9c7367e11e3ed8) [2.1.x] Fixed GeoIPTest.test04_city() failure with the latest GeoIP2 database. - [`20968e3`](https://github.com/django/django/commit/20968e3eaee8977da3003e18f09acc3741567814) [2.1.x] Bumped minimum ESLint version to 4.18.2. - [`d58f8e4`](https://github.com/django/django/commit/d58f8e4235001a1673bf62bfe3e397fc9bbb41b4) [2.1.x] Added CVE-2019-12308 to the security release archive. - [`8827e09`](https://github.com/django/django/commit/8827e0994473225bbb1a8c6c26a07d06bbc94305) [2.1.x] Added CVE-2019-11358 to the security release archive. - [`73158f1`](https://github.com/django/django/commit/73158f19f19400dc324acf6a6a69ce985a8bb3cb) [2.1.x] Fixed typos in 1.11.21, 2.1.9, 2.2.2 release notes. - [`eecf5a1`](https://github.com/django/django/commit/eecf5a1474d23422a3c1fe01afc73ed866283957) [2.1.x] Post-release version bump. - [`60ebd19`](https://github.com/django/django/commit/60ebd195c99884e0cf0aee721839119079bb3046) [2.1.x] Bumped version for 2.1.9 release. - Additional commits viewable in [compare view](https://github.com/django/django/compare/2.1.7...2.1.10)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language