Skip to content

Conversation

@manuel-sommer
Copy link
Contributor

@github-actions github-actions bot added the New Migration Adding a new migration file. Take care when merging. label Jan 14, 2026
@manuel-sommer manuel-sommer changed the title chore(deps): bump django-polymorphic from 4.8.0 to 4.9.0 chore(deps): bump django-polymorphic from 4.8.0 to 4.10.1 Jan 14, 2026
@manuel-sommer manuel-sommer changed the title chore(deps): bump django-polymorphic from 4.8.0 to 4.10.1 chore(deps): bump django-polymorphic from 4.8.0 to 4.10.2 Jan 15, 2026
@Maffooch
Copy link
Contributor

I'd like to do some hands on testing here. This library wigs me out

Copy link
Contributor

@mtesauro mtesauro left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved

@github-actions github-actions bot added docker settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR docs labels Jan 21, 2026
@dryrunsecurity
Copy link

dryrunsecurity bot commented Jan 21, 2026

DryRun Security

🔴 Risk threshold exceeded.

This pull request includes a sensitive edit to a migration file (dojo/db_migrations/0258_alter_answer_options_alter_choiceanswer_options_and_more.py), which may affect protected code paths and should be reviewed against .dryrunsecurity.yaml for allowed authors and paths. The change is flagged as high-risk (failing threshold) but not automatically blocking.

🔴 Configured Codepaths Edit in dojo/db_migrations/0258_alter_answer_options_alter_choiceanswer_options_and_more.py
Vulnerability Configured Codepaths Edit
Description Sensitive edits detected for this file. Sensitive file paths and allowed authors can be configured in .dryrunsecurity.yaml.

We've notified @mtesauro.


All finding details can be found in the DryRun Security Dashboard.

@github-actions github-actions bot removed docker settings_changes Needs changes to settings.py based on changes in settings.dist.py included in this PR docs labels Jan 21, 2026
@mtesauro
Copy link
Contributor

Closing and re-opening to see if the tests go green again. Not sure what happened from when I dropped my approval.

@mtesauro mtesauro closed this Jan 22, 2026
@mtesauro mtesauro reopened this Jan 22, 2026
@valentijnscholten valentijnscholten added this to the 2.55.0 milestone Jan 22, 2026
@manuel-sommer manuel-sommer force-pushed the bump_django-polymorphic branch from 1216716 to af2b9bf Compare January 22, 2026 11:54
@manuel-sommer
Copy link
Contributor Author

Closing and re-opening to see if the tests go green again. Not sure what happened from when I dropped my approval.

Rebasing should fix the problem. I adapted the migration

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

New Migration Adding a new migration file. Take care when merging.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants