Closed dependabot[bot] closed 1 month ago
ImportError: cannot import name 'python_2_unicode_compatible' from 'django.utils.encoding' (/usr/local/lib/python3.9/site-packages/django/utils/encoding.py)
In progess...
These might need to happen eventually but for now we will go slower with Django. A lot of updates but they aren't that bad.
Django 3.2.25 required a bump of djangorestframework from 3.9.1 to 3.12
poetry add djangorestframework@3.12
poetry install
poetry show djangorestframework
Django 3.2.25 required a bump of django-oauth-toolkit from 1.0.0 to 1.3
poetry add django-oauth-toolkit@1.3
poetry install
poetry show django-oauth-toolkit
Django 3.2.25 required a bump of django-storages from 1.7.2 to 1.11
poetry add django-storages@1.11 --extras "azure" --extras "google"
poetry install
poetry show django-storages
Django 3.2.25 required a bump of drf_writable_nested from 0.5.4 to 0.6.2
poetry add drf_writable_nested@0.6.2
poetry install
poetry show drf_writable_nested
Django 3.2.25 required a bump of drf_extra_fields from 0.9 to 3.1.0
poetry add drf_extra_fields@3.1.0
poetry install --no-cache
poetry show drf_extra_fields
Superseded by #1624.
Bumps django from 2.2.17 to 3.2.25.
Commits
c98eca3
[3.2.x] Bumped version for 3.2.25 release.072963e
[3.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().2ad2676
[3.2.x] Added release date for 3.2.25.fc41af6
[3.2.x] Fixed #35172 -- Fixed intcomma for string floats.b9170b4
[3.2.x] Added CVE-2024-24680 to security archive.e5350a9
[3.2.x] Post release version bump.f5c8808
[3.2.x] Bumped version for 3.2.24 release.c1171ff
[3.2.x] Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template ...9dc3456
[3.2.x] Added stub release notes 3.2.24.90eae45
[3.2.x] Fixed documented alias of smart_text().You can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show