CVS commit: pkgsrc/www/py-django

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat May 10 18:20:17 UTC 2025

Modified Files:
        pkgsrc/www/py-django: Makefile distinfo

Log Message:
py-django: updated to 5.2.1

Django 5.2.1 fixes a security issue with severity “moderate” and several bugs in 5.2.

CVE-2025-32873: Denial-of-service possibility in strip_tags()

Bugfixes

Fixed a regression in Django 5.2 that caused a crash when annotating aggregate expressions over query that uses explicit grouping by transforms followed by field references

Fixed a regression in Django 5.2 that caused unnecessary queries when prefetching nullable foreign key relationships

Fixed a regression in Django 5.2 that caused a crash of QuerySet.bulk_create() with nullable geometry fields on PostGIS

Fixed a regression in Django 5.2 that caused fields to be incorrectly selected when using QuerySet.alias() after values()

Fixed a data corruption possibility in file_move_safe() when allow_overwrite=True, where leftover content from a previously larger file could remain after overwriting with a smaller one due to lack 
of truncation

Fixed a regression in Django 5.2 that caused a crash when using QuerySet.select_for_update(of=(…)) with values()/values_list() including expressions

Fixed a regression in Django 5.2 that caused improper values to be returned from QuerySet.values_list() when duplicate field names were specified

Fixed a regression in Django 5.2 where the password validation error message from MinimumLengthValidator was not translated when using non-English locales

Fixed a regression in Django 5.2 that caused the object-tools block to be rendered twice when using custom admin templates with overridden blocks due to changes in the base admin page block structure

Fixed a regression in Django 5.2, introduced when fixing CVE 2025-26699, where the wordwrap template filter did not preserve empty lines between paragraphs after wrapping text

Fixed a regression in Django 5.2 that caused a crash when serializing email alternatives or attachments due to named tuple mismatches

Fixed a regression in Django 5.2 that caused a crash when using update() on a QuerySet filtered against a related model and including references to annotations through values()

Fixed a bug in Django 5.2 that caused composite primary key introspection to wrongly identify IntegerField as AutoField on SQLite

Fixed a bug in Django 5.2 that caused a redundant unique_together constraint to be generated for composite primary keys when using inspectdb


To generate a diff of this commit:
cvs rdiff -u -r1.142 -r1.143 pkgsrc/www/py-django/Makefile
cvs rdiff -u -r1.115 -r1.116 pkgsrc/www/py-django/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django/Makefile
diff -u pkgsrc/www/py-django/Makefile:1.142 pkgsrc/www/py-django/Makefile:1.143
--- pkgsrc/www/py-django/Makefile:1.142 Mon Apr 14 14:20:53 2025
+++ pkgsrc/www/py-django/Makefile       Sat May 10 18:20:17 2025
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.142 2025/04/14 14:20:53 adam Exp $
+# $NetBSD: Makefile,v 1.143 2025/05/10 18:20:17 adam Exp $
 
-DISTNAME=      Django-5.2
-PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
+DISTNAME=      django-5.2.1
+PKGNAME=       ${PYPKGPREFIX}-${DISTNAME}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
 MASTER_SITES+= ${MASTER_SITE_PYPI:=D/Django/}

Index: pkgsrc/www/py-django/distinfo
diff -u pkgsrc/www/py-django/distinfo:1.115 pkgsrc/www/py-django/distinfo:1.116
--- pkgsrc/www/py-django/distinfo:1.115 Mon Apr 14 14:20:53 2025
+++ pkgsrc/www/py-django/distinfo       Sat May 10 18:20:17 2025
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.115 2025/04/14 14:20:53 adam Exp $
+$NetBSD: distinfo,v 1.116 2025/05/10 18:20:17 adam Exp $
 
-BLAKE2s (Django-5.2.tar.gz) = 2885a8e3f8c06275b609d41e24dfee7fe278901fdea444099a096dcf71b5bcb6
-SHA512 (Django-5.2.tar.gz) = b2b676b622ab2b4d52a7eebf23dd0660756c263830e850e49ff55a81657877eab5dcb2005829a904177231645f93edd0d60f1317b29d5484c02d7539135c972f
-Size (Django-5.2.tar.gz) = 10824891 bytes
+BLAKE2s (django-5.2.1.tar.gz) = 8f6d12e1421266096fb0863efb272205ca7660ee622e8b52ad6f052b4b5d1df5
+SHA512 (django-5.2.1.tar.gz) = b97fc3221f2bcb499e2f55ea5fa8da61da9062266255a31e8d0a54afb7a41ea049dbe4b370ad7e8ca3b5105ab1d5a15f1fe3e48af4251590d27bc032fef17d25
+Size (django-5.2.1.tar.gz) = 10818735 bytes