[Security] Bump django from 2.2.8 to 3.0.3 #57
Conversation
![dependabot-preview[bot]](https://avatars.githubusercontent.com/in/2141?s=60&v=4){kind=small}
dependabot-preview
bot
added
the
dependencies
|
Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting |
|
We've just been alerted that this update fixes a security vulnerability: Sourced from The GitHub Security Advisory Database.
|
dependabot-preview
bot
changed the title
dependabot-preview
bot
added
the
security
dependabot-preview
bot
force-pushed
the
dependabot/pip/django-3.0.3
branch
2 times, most recently
from
99465df
to
f52bdd5
Compare
Bumps [django](https://github.com/django/django) from 2.2.8 to 3.0.3. - [Release notes](https://github.com/django/django/releases) - [Commits](django/django@2.2.8...3.0.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
dependabot-preview
bot
force-pushed
the
dependabot/pip/django-3.0.3
branch
from
f52bdd5
to
9295547
Compare
|
Superseded by #63. |
Bumps django from 2.2.8 to 3.0.3.
Commits
c459a46[3.0.x] Bumped version for 3.0.3 release.af1999d[3.0.x] Added release date for 3.0.3.505826b[3.0.x] Fixed CVE-2020-7471 -- Properly escaped StringAgg(delimiter) parameter.673444d[3.0.x] Fixed #31217 -- Made QuerySet.values()/values_list() group by not sel...ca4f870[3.0.x] Updated translations from Transifex7d48a4b[3.0.x] Fixed #31126 -- Doc'd STATICFILES_DIRS namespacing in static files ho...b0207ac[3.0.x] Updated the GeoJSON format specification link to RFC 7946.27e4ebc[3.0.x] Refs #25778 -- Updated some links to HTTPS and new locations.21cc097[3.0.x] Fixed #31212 -- Updated psycopg links to HTTPS and new location.d346f07[3.0.x] Refs #25778 -- Updated sphinx-doc.org links to HTTPS.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and language@dependabot badge mewill comment on this PR with code to add a "Dependabot enabled" badge to your readmeAdditionally, you can set the following in your Dependabot dashboard: