From de5d0f6fb4cd6e72d731d26109ecbca7e79e7e35 Mon Sep 17 00:00:00 2001 From: vishalan Date: Tue, 10 Nov 2026 18:22:49 +0530 Subject: [PATCH] build(deps): upgrade Django to 5.2.17 and DRF to 3.18.2 for CTO-5250, CTO-5553 - Django 4.2.30 -> 5.2.17 (CTO-5250: CVE-2026-15307, CVE-2026-15337, CVE-2026-15830). 4.2 is end of life. - djangorestframework 3.15.2 -> 3.18.2 (GHSA-3547-9m27-7rxg, CTO-5553). DRF 3.18 requires Django >= 5.2. Verified locally: pytest 140 passed, 8 skipped; manage.py check clean; makemigrations --check no changes. Docker image build not yet run. Co-Authored-By: Claude Haiku 5.5 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 7f169aaa..326d690e 100644 --- a/requirements.txt +++ b/requirements.txt @@ -16,11 +16,11 @@ cryptography==50.0.1 decorator==4.4.2 defusedxml==0.7.1 Deprecated==1.2.10 -Django==4.2.30 +Django==5.2.17 django-ajax-datatable==4.4.4 django-filter==22.1 django-mysql==4.7.1 -djangorestframework==3.15.2 +djangorestframework==3.18.2 docopt==0.6.2 docutils==0.16 enum-compat==0.0.3