1.24.2 — Safe Markdown rendering and resilient address validation

2026-09-08

django-mojo 1.24.2 raises Mistune to 3.3.3 to prevent recursive-emphasis Markdown inputs from exhausting Python recursion, and restores USPS-preferred address validation by falling back once to Google whenever USPS is unavailable or unsuccessful. No consumer action is required.

Fixed

• Address validation now treats USPS as the preferred provider and falls back once to Google when USPS is unconfigured, errors, or returns a non-success result; results identify the provider that governs the final outcome and aggregate per-provider errors.

Security

• Raised the Mistune dependency floor to 3.3.3 so deeply nested emphasis cannot exhaust Python’s recursion limit during safe or regular Markdown rendering.