Commits
- [`60ebd19`](https://github.com/django/django/commit/60ebd195c99884e0cf0aee721839119079bb3046) [2.1.x] Bumped version for 2.1.9 release.
- [`95649bc`](https://github.com/django/django/commit/95649bc08547a878cebfa1d019edec8cb1b80829) [2.1.x] Applied jQuery patch for CVE-2019-11358.
- [`09186a1`](https://github.com/django/django/commit/09186a13d975de6d049f8b3e05484f66b01ece62) [2.1.x] Fixed CVE-2019-12308 -- Made AdminURLFieldWidget validate URL before ...
- [`f6e2b55`](https://github.com/django/django/commit/f6e2b556e0e26433f97ae0a316d06c3906eaea95) [2.1.x] Added stub release notes for security releases.
- [`fb2b425`](https://github.com/django/django/commit/fb2b4253f93a85e21ee6bac4ecdac52929faeb2f) [2.1.x] Refs [#27807](https://github-redirect.dependabot.com/django/django/issues/27807) -- Removed docs for User.username_validator.
- [`0a8617a`](https://github.com/django/django/commit/0a8617a5b1cac7063f30e4d8ff4ea4c30748f7b8) [2.1.x] Refs [#30331](https://github-redirect.dependabot.com/django/django/issues/30331) -- Doc'd that psycopg2 < 2.8 is required.
- [`32561b8`](https://github.com/django/django/commit/32561b84f75aadac8198198d8a6004840bb998ee) [2.1.x] Post-release version bump.
- [`e49b2ae`](https://github.com/django/django/commit/e49b2ae36122030e434e10c1c54ebd834dcda6bb) [2.1.x] Bumped version for 2.1.8 release.
- [`aafdf62`](https://github.com/django/django/commit/aafdf62921f880f37d7091ed7ac8bc948cd5a9a5) [2.1.x] Fixed [#30289](https://github-redirect.dependabot.com/django/django/issues/30289) -- Prevented admin inlines for a ManyToManyField's impli...
- [`6bfad83`](https://github.com/django/django/commit/6bfad83c2a36cca58c2360e7393becc55eb366dd) [2.1.x] Added stub 2.1.8 release notes.
- Additional commits viewable in [compare view](https://github.com/django/django/compare/2.1.7...2.1.9)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
dependabot[bot]
commented
5 years ago
Bumps django from 2.1.7 to 2.1.9.
Commits
- [`60ebd19`](https://github.com/django/django/commit/60ebd195c99884e0cf0aee721839119079bb3046) [2.1.x] Bumped version for 2.1.9 release. - [`95649bc`](https://github.com/django/django/commit/95649bc08547a878cebfa1d019edec8cb1b80829) [2.1.x] Applied jQuery patch for CVE-2019-11358. - [`09186a1`](https://github.com/django/django/commit/09186a13d975de6d049f8b3e05484f66b01ece62) [2.1.x] Fixed CVE-2019-12308 -- Made AdminURLFieldWidget validate URL before ... - [`f6e2b55`](https://github.com/django/django/commit/f6e2b556e0e26433f97ae0a316d06c3906eaea95) [2.1.x] Added stub release notes for security releases. - [`fb2b425`](https://github.com/django/django/commit/fb2b4253f93a85e21ee6bac4ecdac52929faeb2f) [2.1.x] Refs [#27807](https://github-redirect.dependabot.com/django/django/issues/27807) -- Removed docs for User.username_validator. - [`0a8617a`](https://github.com/django/django/commit/0a8617a5b1cac7063f30e4d8ff4ea4c30748f7b8) [2.1.x] Refs [#30331](https://github-redirect.dependabot.com/django/django/issues/30331) -- Doc'd that psycopg2 < 2.8 is required. - [`32561b8`](https://github.com/django/django/commit/32561b84f75aadac8198198d8a6004840bb998ee) [2.1.x] Post-release version bump. - [`e49b2ae`](https://github.com/django/django/commit/e49b2ae36122030e434e10c1c54ebd834dcda6bb) [2.1.x] Bumped version for 2.1.8 release. - [`aafdf62`](https://github.com/django/django/commit/aafdf62921f880f37d7091ed7ac8bc948cd5a9a5) [2.1.x] Fixed [#30289](https://github-redirect.dependabot.com/django/django/issues/30289) -- Prevented admin inlines for a ManyToManyField's impli... - [`6bfad83`](https://github.com/django/django/commit/6bfad83c2a36cca58c2360e7393becc55eb366dd) [2.1.x] Added stub 2.1.8 release notes. - Additional commits viewable in [compare view](https://github.com/django/django/compare/2.1.7...2.1.9)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language