From af0f67f71256916942231755b9c2f7f401f33363 Mon Sep 17 00:00:00 2001
From: catborise <catborise@gmail.com>
Date: Sun, 11 Oct 2026 20:24:04 +0300
Subject: [PATCH] build(deps): Django 5.2.18

Security release of 2026-10-06. Two of its fixes reach this app: a
quadratic HTTP header parsing DoS reachable without a login
(CVE-2026-84429) and long language codes through LocaleMiddleware
(CVE-2026-77050). The GeoDjango and model formset fixes do not apply.
---
 conf/requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/requirements.txt b/conf/requirements.txt
index 0176a466..1f2d2bd0 100644
--- a/conf/requirements.txt
+++ b/conf/requirements.txt
@@ -1,4 +1,4 @@
-Django==5.2.17
+Django==5.2.18
 django_bootstrap5==26.2
 django-bootstrap-icons==0.9.0
 django-otp==1.7.3