Sebastian Pipping

Same issue again today with the security fixes from Django 5.2.7 (CVE-2025-59681 and CVE-2025-59682). Dependabot [discards the update from 5.2.6 to 5.2.7](https://productionresultssa16.blob.core.windows.net/actions-results/0dd8066e-8a00-4295-9a5a-3df858d62894/workflow-job-run-d9ea7e53-86bf-520f-be3f-4a3ef514831b/logs/job/job-logs.txt?rsct=text%2Fplain&se=2025-10-01T16%3A22%3A16Z&sig=1HXNc2dJubxDammmq%2BtBL4YaAFakjSLp8hDagtqGWZ8%3D&ske=2025-10-02T02%3A02%3A43Z&skoid=ca7593d4-ee42-46cd-af88-8b886a2f84eb&sks=b&skt=2025-10-01T14%3A02%3A43Z&sktid=398a6654-997b-47e9-b12b-9515b896b4de&skv=2025-11-05&sp=r&spr=https&sr=b&st=2025-10-01T16%3A12%3A11Z&sv=2025-11-05)… ``` 2025-10-01T16:09:48.5700751Z updater | 2025/10/01 16:09:48 INFO Checking...

@thavaahariharangit sorry, that's not accurate and not the cause (and looks AI generated to me). Did you validate this answer? Here's why it's not true in detail: ## 1. `django-extensions==4.1`...

@thavaahariharangit please re-open. I confirm it's fixed for https://github.com/hartwork/jawanndenn where `setup.py` was indeed dictating `>=3.9` for the version of Python but it's not fixed for https://github.com/hartwork/wnpp.debian.net where Python 3.13 is...

@thavaahariharangit thank you! 👍

@thavaahariharangit thank you, looks like the right direction! 👍

@thavaahariharangit thanks for the fix! When run today, Dependabot [did offer an update to Django 5.2.7](https://github.com/hartwork/wnpp.debian.net/pull/1460) (and others) today — very nice. Thank you! 🙏

Hi @alex-orange, sounds like `-msse4` is tribool in nature… > Once I find the appropriate forum I'll be asking gcc to clarify their documentation on the -msse4 bit, and determine...

@alex-orange very cool, thanks a bunch! :tada: I have pull request #180 about it ready for review and testing if you find time :pray:

> I notice you're on the gentoo bug as well. Will you be handling the process of getting a new rev into gentoo, or should I file a bug to...

I only found now that I duplicated your report in #167, at least there is overlap. I hope the issue doesn't go unfixed and without a reply for another eight...