Skip to content

Release: Merge release into master from: release/2.52.0#13602

Merged
rossops merged 138 commits intomasterfrom
release/2.52.0
Nov 3, 2025
Merged

Release: Merge release into master from: release/2.52.0#13602
rossops merged 138 commits intomasterfrom
release/2.52.0

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions Bot commented Nov 3, 2025

Release triggered by rossops

DefectDojo release bot and others added 30 commits October 6, 2025 18:09
Update versions in application files
b976db2
@rossops
Merge pull request #13355 from DefectDojo/master-into-dev/2.51.0-2.52…
3352897 
….0-dev

Release: Merge back 2.51.0 into dev from: master-into-dev/2.51.0-2.52.0-dev
@dependabot
⬆️ Bump django-pghistory from 3.7.0 to 3.8.3 (#13347)
bb25404 
Bumps [django-pghistory](https://github.com/AmbitionEng/django-pghistory) from 3.7.0 to 3.8.3.
- [Release notes](https://github.com/AmbitionEng/django-pghistory/releases)
- [Changelog](https://github.com/AmbitionEng/django-pghistory/blob/main/CHANGELOG.md)
- [Commits](AmbitionEng/django-pghistory@3.7.0...3.8.3)

---
updated-dependencies:
- dependency-name: django-pghistory
  dependency-version: 3.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@renovate
Update redis:7.2.11-alpine Docker digest from 7.2.11 to v (docker-com…
405ac92 
…pose.yml) (#13325)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@dependabot
⬆️ Bump vulners from 2.3.7 to 3.1.1 (#13342)
1954c8c 
Bumps vulners from 2.3.7 to 3.1.1.

---
updated-dependencies:
- dependency-name: vulners
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
⬆️ Bump social-auth-app-django from 5.4.3 to 5.5.1 (#13344)
18cd4b6 
Bumps [social-auth-app-django](https://github.com/python-social-auth/social-app-django) from 5.4.3 to 5.5.1.
- [Release notes](https://github.com/python-social-auth/social-app-django/releases)
- [Changelog](https://github.com/python-social-auth/social-app-django/blob/master/CHANGELOG.md)
- [Commits](python-social-auth/social-app-django@5.4.3...5.5.1)

---
updated-dependencies:
- dependency-name: social-auth-app-django
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
⬆️ Bump jira from 3.8.0 to 3.10.5 (#13345)
1c49703 
Bumps [jira](https://github.com/pycontribs/jira) from 3.8.0 to 3.10.5.
- [Release notes](https://github.com/pycontribs/jira/releases)
- [Changelog](https://github.com/pycontribs/jira/blob/main/RELEASE.md)
- [Commits](pycontribs/jira@3.8.0...3.10.5)

---
updated-dependencies:
- dependency-name: jira
  dependency-version: 3.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@renovate
chore(deps): update actions/stale action from v9.1.0 to v10 (.github/…
b662f13 
…workflows/close-stale.yml) (#13349)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
chore(deps): update softprops/action-gh-release action from v2.3.4 to…
ea8b74d 
… v2.4.0 (.github/workflows/release-x-manual-helm-chart.yml) (#13358)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@dependabot
Bump boto3 from 1.40.44 to 1.40.46 (#13361)
6a826fa 
Bumps [boto3](https://github.com/boto/boto3) from 1.40.44 to 1.40.46.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.44...1.40.46)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.40.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@kiblik
fix(helm): Fix checker of HELM chart change (#13310)
2da05de
@fernandezcuesta
fix: add missing resources, securityContext and env entries (#13210)
4f38f2f 
* fix: add missing resources, securityContext and env entries

* chore: docs and schema

* fix: missing securityContext for initializer job

* fix: add resources to all cloudsql containers

* chore: add missing explicit namespace

* chore: refactor, split container and pod security context

* chore: docs and schema

* fix: lint

* chore: sort helper

* fix: lint and add changes to release notes

* chore: trigger CI

* chore: move to 2.52, fix pending issues

* chore: docs
@dependabot
Bump social-auth-core from 4.7.0 to 4.8.0 (#13360)
c05fff3 
Bumps [social-auth-core](https://github.com/python-social-auth/social-core) from 4.7.0 to 4.8.0.
- [Release notes](https://github.com/python-social-auth/social-core/releases)
- [Changelog](https://github.com/python-social-auth/social-core/blob/master/CHANGELOG.md)
- [Commits](python-social-auth/social-core@4.7.0...4.8.0)

---
updated-dependencies:
- dependency-name: social-auth-core
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@manuel-sommer
⬆️ Bump ruff from 0.13.2 to 0.14.0 (#13337)
eb3c83a 
* ⬆️ Bump ruff from 0.13.2 to 0.13.3

* bump

* fix

* Update settings.dist.py

* Update requirements-lint.txt
@kiblik
feat(docker): Use Python 3.13 in docker images (#13022)
602e905
@valentijnscholten
apiv2: fix schema for engagements endpoint (#13336)
0399b58
@valentijnscholten
importers: defend against parsers returning None (#13335)
fcfee2f
@valentijnscholten
fix upload error when finding groups disabled (#13334)
fbbc7a0
@valentijnscholten
engagement: allow unlinking of JIRA epic (#13333)
c8c4750
@valentijnscholten
user mentioning: diplay author instead of recipient (#13332)
e3f9734
@dependabot
Bump datatables.net-colreorder from 2.1.1 to 2.1.2 in /components (#1…
5ba26b9 
…3396)

Bumps [datatables.net-colreorder](https://github.com/DataTables/Dist-DataTables-ColReorder) from 2.1.1 to 2.1.2.
- [Release notes](https://github.com/DataTables/Dist-DataTables-ColReorder/releases)
- [Commits](DataTables/Dist-DataTables-ColReorder@2.1.1...2.1.2)

---
updated-dependencies:
- dependency-name: datatables.net-colreorder
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump boto3 from 1.40.46 to 1.40.49 (#13395)
d90b09f 
Bumps [boto3](https://github.com/boto/boto3) from 1.40.46 to 1.40.49.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.46...1.40.49)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.40.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump social-auth-core from 4.8.0 to 4.8.1 (#13389)
b45c946 
Bumps [social-auth-core](https://github.com/python-social-auth/social-core) from 4.8.0 to 4.8.1.
- [Release notes](https://github.com/python-social-auth/social-core/releases)
- [Changelog](https://github.com/python-social-auth/social-core/blob/master/CHANGELOG.md)
- [Commits](python-social-auth/social-core@4.8.0...4.8.1)

---
updated-dependencies:
- dependency-name: social-auth-core
  dependency-version: 4.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@renovate
chore(deps): update redis:7.2.11-alpine docker digest from 7.2.11 to …
3f94b41 
…v (docker-compose.yml) (#13386)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
chore(deps): update postgres:18.0-alpine docker digest from 18.0 to 1…
5687ab9 
…8.0-alpine (docker-compose.yml) (#13385)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate
fix(deps): update dependency @docsearch/js from 4.1.0 to v4.2.0 (docs…
1419211 
…/package.json) (#13382)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@kiblik
feat(helm): Simplify k8s-tests.yml (#13379)
e6cb0ab
@renovate
chore(deps): update dependency python from 3.13.8 to 3.14 (.github/wo…
3a91a81 
…rkflows/test-helm-chart.yml) (#13374)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@dependabot
Bump social-auth-app-django from 5.5.1 to 5.6.0 (#13388)
66054b3 
Bumps [social-auth-app-django](https://github.com/python-social-auth/social-app-django) from 5.5.1 to 5.6.0.
- [Release notes](https://github.com/python-social-auth/social-app-django/releases)
- [Changelog](https://github.com/python-social-auth/social-app-django/blob/master/CHANGELOG.md)
- [Commits](python-social-auth/social-app-django@5.5.1...5.6.0)

---
updated-dependencies:
- dependency-name: social-auth-app-django
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@kiblik
feat(helm): DRY cloudsql-proxy (#13369)
f61e3aa
dorkdiaries9 and others added 12 commits October 31, 2025 14:47
@dorkdiaries9
Fix recipient handling in create_notification method (#13548)
1ba1122
@dependabot
chore(deps): bump ruff from 0.14.2 to 0.14.3 (#13577)
a8869de 
Bumps [ruff](https://github.com/astral-sh/ruff) from 0.14.2 to 0.14.3.
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.2...0.14.3)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
chore(deps): bump boto3 from 1.40.62 to 1.40.63 (#13579)
e1eef7c 
Bumps [boto3](https://github.com/boto/boto3) from 1.40.62 to 1.40.63.
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.62...1.40.63)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.40.63
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@manuel-sommer
🎉 Add mal vulnid (#13588)
a260967
@manuel-sommer
🐛 fix similiar findings severity color (#13586)
ca0fc56
@Maffooch
fix(CycloneDXJSONParser): handle missing severity field by defaulting…
1f90ab7 
… to "Medium" (#13583)
@paulOsinski @Maffooch
[docs] Prioritization Engine adjustments (#13581)
d1e0dca 
* priority engine docs

* Update docs/content/en/working_with_findings/priority_adjustments.md

Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>

* Update docs/content/en/working_with_findings/priority_adjustments.md

Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>

---------

Co-authored-by: Paul Osinski <paul.m.osinski@gmail.com>
Co-authored-by: Cody Maffucci <46459665+Maffooch@users.noreply.github.com>
@manuel-sommer
🐛 Robustify create_user to handle None value (#13572)
9fb0dae 
* 🐛 Robustify create_user to handle None value

* fix

* update

* update according to review
@Maffooch
Merge branch 'dev' into bugfix
1271649
@rossops
Changing to supported k8s version for minikube
88361c9
@rossops
Merge pull request #13601 from DefectDojo/bugfix
40dca35 
Release 2.52.0: Merge Bugfix into Dev
Update versions in application files
4b6ddca
@rossops rossops closed this Nov 3, 2025
@rossops rossops reopened this Nov 3, 2025
@github-actions github-actions Bot added docker New Migration Adding a new migration file. Take care when merging. settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR apiv2 docs unittests ui parser helm lint labels Nov 3, 2025
@dryrunsecurity
Copy link
Copy Markdown

dryrunsecurity Bot commented Nov 3, 2025 •
edited
Loading

DryRun Security

🔴 Risk threshold exceeded.

This pull request includes a sensitive edit to the file dojo/apps.py; the scanner flagged this change as potentially sensitive and notes that sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml. No other issues were reported.

🔴 Configured Codepaths Edit in dojo/apps.py
Vulnerability Configured Codepaths Edit
Description Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

We've notified @mtesauro.

All finding details can be found in the DryRun Security Dashboard.

@rossops rossops merged commit 8bc3738 into master Nov 3, 2025
152 checks passed
Maffooch pushed a commit to valentijnscholten/django-DefectDojo that referenced this pull request Feb 16, 2026
@rossops
Merge pull request DefectDojo#13602 from DefectDojo/release/2.52.0
2461635 
Release: Merge release into master from: release/2.52.0
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Maffooch Maffooch Awaiting requested review from Maffooch Maffooch is a code owner

@mtesauro mtesauro Awaiting requested review from mtesauro mtesauro is a code owner

Assignees

No one assigned

Labels

apiv2 docker docs helm lint New Migration Adding a new migration file. Take care when merging. parser settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR ui unittests

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.