From 2ac419509c484a7601dd4e66826527dffd8e4f5f Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 4 Aug 2026 18:41:08 +0200
Subject: [PATCH] python3Packages.django_5: 5.2.16 -> 5.2.17

https://docs.djangoproject.com/en/5.2/releases/5.2.17/
https://www.djangoproject.com/weblog/2026/aug/04/security-releases/

Fixes: CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, CVE-2026-15920

(cherry picked from commit 6cce7828fff3ad67b3384beb701a8ed5cd00d1d5)
---
 pkgs/development/python-modules/django/5.nix | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/pkgs/development/python-modules/django/5.nix b/pkgs/development/python-modules/django/5.nix
index 74dff79704f1..904d93e13300 100644
--- a/pkgs/development/python-modules/django/5.nix
+++ b/pkgs/development/python-modules/django/5.nix
@@ -41,14 +41,14 @@
 
 buildPythonPackage rec {
   pname = "django";
-  version = "5.2.16";
+  version = "5.2.17";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "django";
     repo = "django";
     tag = version;
-    hash = "sha256-DZa3OkqnrgXp1A/HerKYdUdanvi5jxHndo1DV4RVs0M=";
+    hash = "sha256-7it3opzsiN/hHhpipZz4ogmRKGz7E9/LmTF03/UYIB0=";
   };
 
   patches = [
@@ -69,6 +69,9 @@ buildPythonPackage rec {
   ];
 
   postPatch = ''
+    substituteInPlace pyproject.toml \
+      --replace-fail "setuptools>=83" "setuptools"
+
     substituteInPlace tests/utils_tests/test_autoreload.py \
       --replace-fail "/usr/bin/python" "${python.interpreter}"
   '';