Skip to content

[pull] main from django:main#487

Merged
pull[bot] merged 5 commits into
threatcode:mainfrom
django:main
Jul 7, 2026
Merged

[pull] main from django:main#487
pull[bot] merged 5 commits into
threatcode:mainfrom
django:main

Conversation

@pull

@pull pull Bot commented Jul 7, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

nessita and others added 5 commits July 6, 2026 23:30
…es and vary on Cookie.

`UpdateCacheMiddleware` skipped caching `Set-Cookie` responses that vary
on `Cookie` only when the request had no cookies at all. A request
carrying an unrelated cookie bypassed the guard, allowing a newly-issued
session cookie to be stored in Django's shared cache.

The guard now applies whenever a response both sets a cookie and varies
on Cookie, regardless of what cookies the incoming request carried.

Thanks Chris Whyland for the report, Jake Howard for initial triage, and
Jacob Walls for reviews.
… GDALRaster from bytes.

Previously, `sys.getsizeof()` included the size of the `PyBytesObject`
wrapper which is bigger. `len(bytes_object)` is the accurate size.

Thanks Bence Nagy for the report, and Simon Charette for reviews.
…ainNameValidator.

Thanks Bence Nagy for the report, and Jake Howard for reviews.
@pull pull Bot locked and limited conversation to collaborators Jul 7, 2026
@pull pull Bot added the ⤵️ pull label Jul 7, 2026
@pull pull Bot merged commit c93a9e3 into threatcode:main Jul 7, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants