pythonic-news
pythonic-news copied to clipboard
Bump django-debug-toolbar from 2.0 to 2.2.1
Bumps django-debug-toolbar from 2.0 to 2.2.1.
Changelog
Sourced from django-debug-toolbar's changelog.
2.2.1 (2021-04-14)
- Fixed SQL Injection vulnerability, CVE-2021-30459. The toolbar now calculates a signature on all fields for the SQL select, explain, and analyze forms.
2.2 (2020-01-31)
- Removed support for end of life Django 2.0 and 2.1.
- Added support for Python 3.8.
- Add locals() option for sql panel.
- Added support for Django 3.0
2.1 (2019-11-12)
- Changed the Travis CI matrix to run style checks first.
- Exposed the
djdt.init
function too.- Small improvements to the code to take advantage of newer Django APIs and avoid warnings because of deprecated code.
- Verified compatibility with the upcoming Django 3.0 (at the time of writing).
Commits
5e6750b
Merge pull request from GHSA-pghf-347x-c2gje154955
Merge pull request #1234 from tim-schilling/ddt-2.2852e455
Merge pull request #1229 from tim-schilling/postgres-json-explain530fde6
Bump to version 2.298308a2
Merge pull request #1226 from tim-schilling/tox-expand-db-tests0caa826
Only use postgres CursorDebugWrapper with Django 359af30f
Expand travis tests.863664d
Handle postgres CursorDebugWrapper in debugsqlshell.9efa204
Test with postgresql and mariadb on multiple versions of Django.a8ae50b
get_safe_settings' location has changed in Django 3.1 (#1233)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labels
will set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewers
will set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assignees
will set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestone
will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.