From 7da1be7d7154ef80d1b4dd64d9fa77cb0976b895 Mon Sep 17 00:00:00 2001
From: Martin Weinelt <hexa@darmstadt.ccc.de>
Date: Tue, 3 Feb 2026 18:03:24 +0100
Subject: [PATCH] python3Packages.django_4: 4.2.27 -> 4.2.28

https://docs.djangoproject.com/en/4.2/releases/4.2.28/
https://www.djangoproject.com/weblog/2026/feb/03/security-releases/

Fixes: CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026-1285,
       CVE-2026-1287, CVE-2026-1312

(cherry picked from commit 154cebd52aaddd791c4ab34186f02746419d7476)
---
 pkgs/development/python-modules/django/4.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/development/python-modules/django/4.nix b/pkgs/development/python-modules/django/4.nix
index 0a74f1350d763..f359d4831bf50 100644
--- a/pkgs/development/python-modules/django/4.nix
+++ b/pkgs/development/python-modules/django/4.nix
@@ -45,16 +45,16 @@
 
 buildPythonPackage rec {
   pname = "django";
-  version = "4.2.27";
-  format = "pyproject";
+  version = "4.2.28";
+  pyproject = true;
 
   disabled = pythonOlder "3.8" || pythonAtLeast "3.13";
 
   src = fetchFromGitHub {
     owner = "django";
     repo = "django";
-    rev = "refs/tags/${version}";
-    hash = "sha256-vdY85Ib2knRFLPmZZ6ojiD5R9diuvpVut1+nOVXSp0Y=";
+    tag = version;
+    hash = "sha256-dxlTonT8zFIFGFrrOW4GFKOy5b0chcESxt9i9xHO8h4=";
   };
 
   patches = [