Bump django from 5.1.5 to 5.1.6

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps django from 5.1.5 to 5.1.6.

Commits

• 8c9973c [5.1.x] Bumped version for 5.1.6 release.
• df27e43 [5.1.x] Added release date for 5.1.6, 5.0.12, and 4.2.19.
• 4a04944 [5.1.x] Clarified docs for default email value in UserManager.create_user().
• b814f4c [5.1.x] Refs #35612 -- Extended docs on how the security team evaluates reports.
• 328d54f [5.1.x] Refs #36140 -- Added missing import in django/contrib/auth/forms.py.
• 8552eef [5.1.x] Fixed #36140 -- Allowed BaseUserCreationForm to define non required p...
• 76b4fb7 [5.1.x] Fixed #36162 -- Fixed the black Makefile docs rule to work on macOS.
• 173edeb [5.1.x] Corrected ArrayAgg example for ordering usage.
• 4f0169e [5.1.x] Tweaked docs to avoid reformatting given new black version.
• 9d1945d [5.1.x] Clarified the Releaser's discretion for determining and postponing th...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dryrunsecurity]

DryRun Security Summary

The pull request updates Django from version 5.1.5 to 5.1.6 in requirements.txt, representing a minor version update that includes bug fixes and security patches while maintaining other security-related dependencies.

Expand for full summary

Summary:

The code change in this pull request updates the Django version from 5.1.5 to 5.1.6 in the requirements.txt file. This is a minor version update, which typically includes bug fixes and security patches, rather than major new features. Updating to the latest version of Django is generally a good practice, as it ensures that the application is running on a version of the framework that has the latest security fixes and improvements. Additionally, the requirements.txt file lists a number of other dependencies, including libraries related to security, such as cryptography, argon2-cffi, and vulners. Regularly reviewing and updating these dependencies is also a good security practice, as vulnerabilities may be discovered in the underlying libraries over time. Overall, this code change appears to be a routine update to the application's dependencies, which is a standard part of maintaining the security and stability of the application.

Files Changed:

• requirements.txt: The code change in this file updates the Django version from 5.1.5 to 5.1.6, which is a minor version update that typically includes bug fixes and security patches. Additionally, the file lists a number of other dependencies, including libraries related to security, such as cryptography, argon2-cffi, and vulners. Regularly reviewing and updating these dependencies is a good security practice.

Code Analysis

We ran 9 analyzers against 1 file and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.

[mtesauro]

Approved