www/py-djangorestframework: Update to 3.18.1 Changelog: https://github.com/encode/django-rest-framework/releases/tag/3.18.101acca7143
py-djangorestframework -- two vulnerabilitiesentered 2026-08-07
no CVE referenced
Django REST framework
# pkg install py312-djangorestframeworkinstalls 3.18.1,1 from latest; from quarterly (2026Q4) 3.18.1,1# cd /usr/ports/www/py-djangorestframework && make install clean| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 3.18.1,1 | 3.18.1,1 | – |
| FreeBSD 15 | 3.18.1,1 | 3.18.1,1 | – |
| FreeBSD 14 | 3.18.1,1 | 3.18.1,1 | 3.18.1,1 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 3.18.1,1 | 3.18.1,1 | – |
| FreeBSD 14 | 3.18.1,1 | 3.18.1,1 | 3.18.1,1 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 3.18.1,1.no CVE referenced
www/py-djangorestframework: Update to 3.18.1 Changelog: https://github.com/encode/django-rest-framework/releases/tag/3.18.101acca7143
www/py-djangorestframework: Update to 3.18.0 Changelog: https://github.com/encode/django-rest-framework/releases/tag/3.18.0923cb7035d
www/py-djangorestframework: Update to 3.17.2 Changelog: https://github.com/encode/django-rest-framework/releases/tag/3.17.2 MFH: 2026Q3 Security: 5ce58e67-919a-11f1-b333-901b0edee04450a7f8d61d
www/py-djangorestframework: Update to 3.17.1 Changelogs since 3.16.1: https://github.com/encode/django-rest-framework/releases/tag/3.17.1 https://github.com/encode/django-rest-framework/releases/tag/3.17.00404f6b2a2
*: Switch consumers over to Django 5.2 Django 4.2 reached its End-of-Life on 7th April 2026 and Django 5.2 is the new LTS (= Long Term Support) release which will be supported until April 2028. * Switch most ports that use www/py-django42 to www/py-django52. * Where necessary, remove PORTSCOUT, which is no longer needed because an update to a newer version that no longer supports Django 4.2 should now be possible. * Bump PORTREVISION due dependency change where necessary. PR: 291707 Reviewed by: sunpoet (python) Differential Revision: https://reviews.freebsd.org/D56966ce59801b72
www/py-djangorestframework: Update to 3.16.1 Changelog: https://github.com/encode/django-rest-framework/releases/tag/3.16.147630a9785
www/py-djangorestframework: Update to 3.16.0 * Switch to the PEP517 build framework. * Also moving to the more preferred DISTVERSION, while I'm here. Changelog: https://github.com/encode/django-rest-framework/releases/tag/3.16.07657066def
www/py-djangorestframework: Remove outdated PYTHON_REL check after lang/python38 removal (ca15850a2b13f4fede0294d724e1d4a8edec8407) Approved by: portmgr (blanket) With hat: python02a275ad59
python: bump all USE_PYTHON=distutils consumers after RUN_DEPENDS removal Any missed ports, feel free to bump. Any ports that need setuptools at runtime can have the devel/py-setuptools manually added back to RUN_DEPENDS, but understand that this practice is deprecated; see CHANGES for details.06a08e69f3
www/py-djangorestframework: Update to 3.15.2 Changelog since 3.14.0: https://www.django-rest-framework.org/community/release-notes/#31520cffd5a7f4
*: Switch consumers over to Django 4.2 Django 3.2 reached its End-of-Life on 1st April 2024 and Django 4.2 is the new LTS (= Long Term Support) release which will be supported until April 2026. * Switch most ports that use www/py-django32 to www/py-django42. * Ports that are not compatible with Django 3.2 have already been set with an expiration date were not taken into account. * Bump PORTREVISION due dependency change where necessary. PR: 276319 Reviewed by: dvl, grembo, ultima Approved by: bofh (implicit), dvl, grembo, Kevin Golding, sunpoet, ultima, maintainer timeout (remaining maintainers) Differential Revision: https://reviews.freebsd.org/D44637680c68fd4d
all: remove explicit versions in USES=python for "3.x+"
The logic in USES=python will automatically convert this to 3.8+ by
itself.
Adjust two ports that only had Python 3.7 mentioned but build fine
on Python 3.8 too.
finance/quickfix: mark BROKEN with PYTHON
libtool: compile: c++ -DHAVE_CONFIG_H -I. -I../.. -I -I. -I.. -I../.. -I../C++ -DLIBICONV_PLUG -DPYTHON_MAJOR_VERSION=3 -Wno-unused-variable -Wno-maybe-uninitialized -O2 -pipe -DLIBICONV_PLUG -fstack-protector-strong -fno-strict-aliasing -DLIBICONV_PLUG -Wall -ansi -Wno-unused-command-line-argument -Wpointer-arith -Wwrite-strings -Wno-overloaded-virtual -Wno-deprecated-declarations -Wno-deprecated -std=c++0x -MT _quickfix_la-QuickfixPython.lo -MD -MP -MF .deps/_quickfix_la-QuickfixPython.Tpo -c QuickfixPython.cpp -fPIC -DPIC -o .libs/_quickfix_la-QuickfixPython.o
warning: unknown warning option '-Wno-maybe-uninitialized'; did you mean '-Wno-uninitialized'? [-Wunknown-warning-option]
QuickfixPython.cpp:175:11: fatal error: 'Python.h' file not found
^~~~~~~~~~
1 warning and 1 error generated.
Reviewed by: portmgr, vishwin, yuri
Differential Revision: <https://reviews.freebsd.org/D40568>3d9a815d9c*/*: rename CHEESESHOP to PYPI in MASTER_SITES PR: 267994 Differential revision: D37518 Approved by: bapt77d68471ad
www/py-djangorestframework: Update to 3.14.0 Changelog: https://www.django-rest-framework.org/community/release-notes/#3140a7f6cbe48f
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
net-mgmt/netbox: Create Django 4.0 consumers * Django 3.2 is currently the "default" version in the ports tree due its long term support until April 2024. Thus ports that are assigned to that version will exist until then. The following ports are required to make the upgrade of net-mgmt/netbox to the 3.2 release possible because it requires Django 4.0. All of the ports listed below were created on the basis of their respective original ports: - devel/py-dj40-django-rq - devel/py-dj40-graphene-django - www/py-dj40-django-auth-ldap - www/py-dj40-django-cors-headers - www/py-dj40-django-debug-toolbar - www/py-dj40-django-filter - www/py-dj40-django-graphiql-debug-toolbar - www/py-dj40-django-js-asset - www/py-dj40-django-mptt - www/py-dj40-django-prometheus - www/py-dj40-django-redis - www/py-dj40-django-tables2 - www/py-dj40-django-taggit - www/py-dj40-django-timezone-field - www/py-dj40-djangorestframework - www/py-dj40-drf-yasg * Simplify the related CONFLICTS_INSTALL entries as well. This also reduces editing of the Makefiles if another ports need to be "repo-copied" (e.g. for Django 4.1) based on the original ports in the future. [1] Reviewed by: se [1], sunpoet Differential Revision: https://reviews.freebsd.org/D3544489acacbfee
www/py-djangorestframework: Update to 3.13.1 * Remove obsolete entries from CONFLICTS_INSTALL. * Update pkg-descr to match reality. Changelog since 3.12.4: https://www.django-rest-framework.org/community/release-notes/#313x-seriesf38fc1bea7
www/py-django32: Switch consumers over to Django 3.2 Django 2.2 became End-of-Life on 11th April 2022 and Django 3.2 is the new LTS (= Long Term Support) release which will be supported until April 2024. * Switch the most ports that use www/py-django22 to www/py-django32 * Switch www/seahub over to www/py-djangorestframework * Ports that are not yet ready for Django 3.2 (only three so far) or those that have already been set with an expiration date were not taken into account. * Bump PORTREVISION due dependency change where necessary. PR: 261313 Reviewed by: bofh, dvl, koobs, ultima Approved by: bofh, dvl, koobs, ultima, sunpoet, Kevin Golding, Ivan Rozhuk, Alexander Sieg (maintainers) maintainer timeout (remaining maintainers) Differential Revision: https://reviews.freebsd.org/D348590cf5531fcd
*: Create Django 3.2 ports for net-mgmt/netbox * Django 2.2 is currently the "default" version in the ports tree due its long term support until April 2022. Thus ports that are assigned to that version will exist until then. The following ports are required to make the upgrade of net-mgmt/netbox to the 2.11 release possible because it requires Django 3.2. All of the ports listed below were created on the basis of their respective original ports: - devel/py-dj32-django-rq - www/py-dj32-django-auth-ldap - www/py-dj32-django-cacheops (updated to a newer release) - www/py-dj32-django-cors-headers - www/py-dj32-django-debug-toolbar - www/py-dj32-django-filter - www/py-dj32-django-js-asset - www/py-dj32-django-mptt - www/py-dj32-django-prometheus - www/py-dj32-django-redis - www/py-dj32-django-tables2 (updated to a newer release) - www/py-dj32-django-taggit (updated to a newer release) - www/py-dj32-django-timezone-field - www/py-dj32-djangorestframework - www/py-dj32-drf-yasg * Add/update the related CONFLICTS_INSTALL entries as well. Reviewed by: koobs, sunpoet Differential Revision: https://reviews.freebsd.org/D30977fd76d1a577
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
www/py-djangorestframework: Update to 3.12.4 Changelog since 3.12.2: https://www.django-rest-framework.org/community/release-notes/#31244440dd533e
www/py-djangorestframework: Update to 3.12.2 * Remove obsolete info from pkg-descr while I'm here. Changelog: https://www.django-rest-framework.org/community/release-notes/#3122bbae5a89a4
Create some ports that are assigned to Django 3.1 instead Django 2.2
* Django 2.2 is currently the "default" version in the ports tree due its
long term support until April 2022. Thus ports that are assigned to that
version will exist until then.
The following ports are required to make the upgrade of net-mgmt/netbox to
the 2.9 release possible because it requires Django 3.1 and provides no
backwards compatibility for previous versions of Django.
- www/py-dj31-django-rq
(copied from r539662 to use the 2.3.2 release for now)
- www/py-dj31-django-auth-ldap
- www/py-dj31-django-cacheops
- www/py-dj31-django-cors-headers
- www/py-dj31-django-debug-toolbar
- www/py-dj21-django-filter
- www/py-dj31-django-js-asset
- www/py-dj31-django-mptt
- www/py-dj31-django-prometheus
- www/py-dj31-django-redis
- www/py-dj31-django-tables2
- www/py-dj31-django-taggit
- www/py-dj31-django-timezone-field
- www/py-dj31-djangorestframework
- www/py-dj31-drf-yasg
* Also limit the new ports to Python 3.6+ due the requirements of Django 3.1
and add/update the related CONFLICTS_INSTALL entries.
Reviewed by: sunpoet
Differential Revision: https://reviews.freebsd.org/D27083a0f4c73ff7Update to 3.12.1 Changes: https://github.com/encode/django-rest-framework/releases https://github.com/encode/django-rest-framework/commits/master PR: 250122 Submitted by: sunpoet (myself) Approved by: maintainer (timeout, 18 days)71d9425985
www/py-djangorestframework: Update to 3.11.0
* Switch the port to Django 2.2 (current LTS release) as well because
Django 1.11 is End-of-Life since April. Do the same for www/py-drf-yasg.
* Repo-copy www/py-djangorestframework to www/py-djangorestframework311
which will be used as a transitional package by www/seahub until it gets
support for Django 2.2+ in the next weeks/months.
* Drop the Python 2.7 support of the remaining consumers to avoid breakage
of "bulk -a".
* Mark both repo-copied ports www/py-dj22-{djangorestframework,drf-yasg} as
deprecated because they're obsolete now.
PR: 245309
Reviewed by: sunpoet (earlier revision), ultima
Differential Revision: https://reviews.freebsd.org/D24850ea1b10f966www/py-djangorestframework: Update to 3.9.4 Changelog: https://www.django-rest-framework.org/community/release-notes/#394e56a33cd9c
www/py-djangorestframework: Update to 3.9.2 Changes since 3.9.0: * Routers: invalidate _urls cache on register() * Deferred schema renderer creation to avoid requiring pyyaml. * Added 'request_forms' block to base.html * Fixed SchemaView to reset renderer on exception. * Update Django Guardian dependency. * Ensured support for Django 2.2 * Made templates compatible with session-based CSRF. * Adjusted field validators to accept non-list iterables. * Added SearchFilter.get_search_fields() hook. * Fix DeprecationWarning when accessing collections.abc classes via collections. * Allowed Q objects in limit_choices_to introspection. * Added lazy evaluation to composed permissions. * Add negation ~ operator to permissions composition. * Avoided calling distinct on annotated fields in SearchFilter. * Introduced RemovedInDRF…Warning classes to simplify deprecations. * Resolve XSS issue in browsable API. * Upgrade Bootstrap to 3.4.0 to resolve XSS issue. * Resolve issues with composable permissions. * Respect limit_choices_to on foreign keys. https://www.django-rest-framework.org/community/release-notes/#39x-series Approved by: mentors (implicit)27f581f690
www/py-{dj21-,}djangorestframework: Update WWW
* Update the WWW field to spare redirects from HTTP to HTTPS
Reported by: Repology
Approved by: mentors (implicit)e3cdd2e82aCreate some ports that are assigned to Django 2.1 instead Django 1.11. Django 1.11 is currently the "default" version in the ports tree due its long term support until April 2020 thus ports that are assigned to that version will exist until then. The following packages are required to make the upgrade of net-mgmt/netbox to 2.5.x possible because upstream has decided to switch from Django 1.11 to Django 2.1: * www/py-dj21-django-cors-headers * www/py-dj21-django-debug-toolbar * www/py-dj21-django-filter * www/py-dj21-django-js-asset * www/py-dj21-django-mptt * www/py-dj21-django-tables2 * www/py-dj21-django-taggit * www/py-dj21-django-timezone-field * www/py-dj21-djangorestframework * www/py-dj21-drf-yasg Also limit the new ports to Python 3.5 and later to match the requirements for Django 2.1 and to reduce some overhead in the building infrastructure. Reviewed by: miwi, tcberner (mentors) Approved by: miwi Differential Revision: https://reviews.freebsd.org/D1905968dbb932f9
Change my maintainer email address to my new one at the FreeBSD project. Reviewed by: miwi (mentor) Approved by: miwi (mentor) Differential Revision: https://reviews.freebsd.org/D190506a4a5116bf
- Update to 3.9.0 Changes by upstream: - https://www.django-rest-framework.org/community/release-notes/#39x-series PR: 234639 Submitted by: maintainer Sponsored by: iXsystems Inc.907c64b2a6
New port: www/py-djangorestframework as version 3.8.x - py-djangorestframework 3.6.x lives on as py-djangorestframework36 - seahub and django-annotations stay on -36 PR: 227319 Submitted by: Kai <freebsd_ports@k-worx.org> Reviewed by: antoine, sunpoetfb1da81342
Revert r457271, version 3.7.7 is not compatible with django 1.8 With hat: portmgrf9deff1be5
Simplify some USES=python With hat: portmgr377901b804
www/py-djangorestframework: update to 3.7.7cfbad457d7
update to 3.6.4 for py3 support671f79ea10
www/py-djangorestframework: update to 3.3.331448d4a66
- Update to 3.3.2.f1180f699d
Add django rest framework and some of its modules. Differential Revision: https://reviews.freebsd.org/D380632c3c8a566