CVS commit: pkgsrc/www/py-django

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Mar  4 15:49:51 UTC 2024

Modified Files:
        pkgsrc/www/py-django: Makefile distinfo

Log Message:
py-django: updated to 5.0.3

Django 5.0.3 fixes a security issue with severity “moderate” and several bugs in 5.0.2.

CVE-2024-27351: Potential regular expression denial-of-service in django.utils.text.Truncator.words()

django.utils.text.Truncator.words() method (with html=True) and truncatewords_html template filter were subject to a potential regular expression denial-of-service attack using a suitably crafted 
string (follow up to CVE-2019-14232 and CVE-2023-43665).

Bugfixes

Fixed a regression in Django 5.0.2 where intcomma template filter could return a leading comma for string representation of floats.
Fixed a bug in Django 5.0 that caused a crash of Signal.asend() and asend_robust() when all receivers were asynchronous functions.
Fixed a regression in Django 5.0.1 where ModelAdmin.lookup_allowed() would prevent filtering against foreign keys using lookups like __isnull when the field was not included in ModelAdmin.list_filter.
Fixed a regression in Django 5.0 that caused a crash of @sensitive_variables and @sensitive_post_parameters decorators on functions loaded from .pyc files.
Fixed a regression in Django 5.0 that caused a crash when reloading a test database and a base queryset for a base manager used prefetch_related().
Fixed a bug in Django 5.0 where facet filters in the admin would crash on a SimpleListFilter using a queryset without primary keys.


To generate a diff of this commit:
cvs rdiff -u -r1.125 -r1.126 pkgsrc/www/py-django/Makefile
cvs rdiff -u -r1.101 -r1.102 pkgsrc/www/py-django/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django/Makefile
diff -u pkgsrc/www/py-django/Makefile:1.125 pkgsrc/www/py-django/Makefile:1.126
--- pkgsrc/www/py-django/Makefile:1.125 Thu Feb  8 22:43:53 2024
+++ pkgsrc/www/py-django/Makefile       Mon Mar  4 15:49:51 2024
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.125 2024/02/08 22:43:53 adam Exp $
+# $NetBSD: Makefile,v 1.126 2024/03/04 15:49:51 adam Exp $
 
-DISTNAME=      Django-5.0.2
+DISTNAME=      Django-5.0.3
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

Index: pkgsrc/www/py-django/distinfo
diff -u pkgsrc/www/py-django/distinfo:1.101 pkgsrc/www/py-django/distinfo:1.102
--- pkgsrc/www/py-django/distinfo:1.101 Thu Feb  8 22:43:53 2024
+++ pkgsrc/www/py-django/distinfo       Mon Mar  4 15:49:51 2024
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.101 2024/02/08 22:43:53 adam Exp $
+$NetBSD: distinfo,v 1.102 2024/03/04 15:49:51 adam Exp $
 
-BLAKE2s (Django-5.0.2.tar.gz) = 5643021581ec8ef9dba5c64d635b2da46c9563b907bd0a32fb8936544dd73d0b
-SHA512 (Django-5.0.2.tar.gz) = a9270eafb0e270222740ae94b2f866eddaab296768253f0d84c78760a2ac442e0f648af55f74b9b07082f4ccc4eeb91c4facdfdc32ec770936015524fcf4838f
-Size (Django-5.0.2.tar.gz) = 10619702 bytes
+BLAKE2s (Django-5.0.3.tar.gz) = 18a278fb16453744905534d9e62ec9601641e476dc174ec9f55b89777f7b991d
+SHA512 (Django-5.0.3.tar.gz) = ed1899007898fc1f6c0889b28fc94016aa9cd2a3556f486bf77efc4310d04896c73bcef93fb4c9162ce884da01c557f6343a20da15a7d6cf2193fd9e88e0dadb
+Size (Django-5.0.3.tar.gz) = 10620661 bytes