1
0
mirror of https://github.com/django/django.git synced 2024-12-27 19:46:22 +00:00
Commit Graph

13426 Commits

Author SHA1 Message Date
Sarah Boyce
c3862735cd
Fixed references to django.core.cache in docs. 2023-05-22 14:02:01 +02:00
gtleee
0a324f1b66 Fixed #34588 -- Removed usage of nonexistent stylesheet in the 'Congrats' page.
Regression in d46cc15c51.
2023-05-22 11:05:20 +02:00
Arthur Moreira
061a8a1bd8 Fixed #34577 -- Added escapeseq template filter. 2023-05-22 09:58:03 +02:00
Simon Charette
98f6ada0e2 Fixed #34580 -- Avoided unnecessary computation of selected expressions in SQLCompiler.
Performance regression in 278881e376.

Co-authored-by: David Smith <smithdc@gmail.com>
2023-05-22 05:47:29 +02:00
Ben Lomax
00f5d2d110 Refs #31949 -- Made @xframe_options_(deny/sameorigin/exempt) decorators to work with async functions. 2023-05-20 15:52:00 +02:00
HappyDingning
674c23999c Fixed #34565 -- Added support for async checking of user passwords. 2023-05-18 09:39:04 +02:00
Mariusz Felisiak
c52f4295f2
Fixed #34568 -- Made makemigrations --update respect --name option.
Thanks David Sanders for the report.
2023-05-17 13:14:43 +02:00
Mariusz Felisiak
93830abf76
Updated broken links in docs. 2023-05-17 12:13:10 +02:00
Simon Charette
99e5dff737 Fixed #34570 -- Silenced noop deferral of many-to-many and GFK.
While deferring many-to-many and GFK has no effect, the previous
implementation of QuerySet.defer() ignore them instead of crashing.

Regression in b3db6c8dcb.

Thanks Paco Martínez for the report.
2023-05-17 08:06:11 +02:00
Julie Rymer
0ec60661e6 Fixed #34539 -- Restored get_prep_value() call when adapting JSONFields.
Regression in 5c23d9f0c3.
2023-05-16 08:26:41 +02:00
Ian Foote
7414704e88 Fixed #470 -- Added support for database defaults on fields.
Special thanks to Hannes Ljungberg for finding multiple implementation
gaps.

Thanks also to Simon Charette, Adam Johnson, and Mariusz Felisiak for
reviews.
2023-05-12 19:11:40 +02:00
Alexerson
599f3e2cda
Fixed #34556 -- Doc'd that StreamingHttpResponse accepts memoryviews and strings iterators. 2023-05-12 10:34:47 -03:00
Alberto Sottile
e901407e23
Clarified database connections lifetime outside HTTP requests. 2023-05-12 08:09:38 -03:00
Mariusz Felisiak
72a86ceb33
Fixed #34558 -- Fixed QuerySet.bulk_create() crash with Now() on Oracle. 2023-05-11 18:22:55 +02:00
nessita
2b11740e1d
Made explicit the location of locally-built HTML docs. 2023-05-11 07:55:45 -03:00
Mariusz Felisiak
1586a09b79
Fixed #34544 -- Avoided DBMS_LOB.SUBSTR() wrapping with IS NULL condition on Oracle.
Regression in 09ffc5c121.

Thanks Michael Smith for the report.

This also reverts commit 1e4da43955.
2023-05-08 19:34:30 +02:00
Akash Kumar Sen
aaf8c76c56
Fixed #34545 -- Corrected the number of months in installation FAQ. 2023-05-08 08:34:23 +02:00
Pan Dango
12ec80726f
Corrected code-block directive in docs/ref/templates/builtins.txt. 2023-05-07 14:51:27 +02:00
Jannis Vajen
024954aad4 Corrected code-block directives in docs. 2023-05-04 14:10:11 +02:00
Sarah Boyce
60ac77f32e
Removed unnecessary workarounds for Sphinx < 4.3.0.
Unnecessary since ebf25555bb.
2023-05-04 13:55:06 +02:00
Mariusz Felisiak
49830025c9 Added CVE-2023-31047 to security archive. 2023-05-03 15:20:31 +02:00
Mariusz Felisiak
b0d3a5de95 Added stub release notes for 4.2.2. 2023-05-03 15:13:07 +02:00
Mariusz Felisiak
fb4c55d9ec Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.
Thanks Moataz Al-Sharida and nawaik for reports.

Co-authored-by: Shai Berger <shai@platonix.com>
Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-05-03 13:42:00 +02:00
Mariusz Felisiak
8e2460d599
Fixed #34529, Refs #34525 -- Reduced index operations with Meta.indexes/index_together when optimizing migrations.
This makes squashing migrations an available path for changing
Meta.index_together, which is deprecated, to Meta.indexes.

Follow up to f810325721.
2023-05-03 13:06:19 +02:00
Orhan Hirsch
ea53e7c09f Fixed #34517 -- Avoided connection post_init signal to ImageField without width/height fields. 2023-05-03 06:35:19 +02:00
Paul Brown
3b62d8c83e
Refs #31369 -- Improved hint message in NullBooleanField's deprecation warning. 2023-05-02 15:42:11 -03:00
Ran Benita
506f93f0c3
Fixed #34530 -- Improved docs when customizing storage for FileField. 2023-05-02 15:32:24 -03:00
Mariusz Felisiak
0e444e84f8 Fixed #34515 -- Made LocaleMiddleware prefer language from paths when i18n patterns are used.
Regression in 94e7f471c4.

This reverts commit 94e7f471c4
(refs #34069) and
partly reverts commit 3b4728310a.

Thanks Anthony Baillard for the report.

Co-Authored-By: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
2023-05-02 06:04:18 +02:00
Mariusz Felisiak
5a6d4d3bfd
Refs #34118, Refs #34504 -- Added backward incompatibility note about EmailBackend.ssl_context.
Follow up to 2848e5d0ce.
2023-04-28 13:04:08 +02:00
Coen van der Kamp
7bbbadc693 Fixed #34380 -- Allowed specifying a default URL scheme in forms.URLField.
This also deprecates "http" as the default scheme.
2023-04-28 06:58:10 +02:00
Marc Gibbons
070cbac0db
Restored multiprocessing concurrency on coverage.py settings
* Revert "Reverted "Fixed #33213 -- Doc'd testing code coverage in parallel and used it.""

This reverts commit 78da5ca0c1.

* Restored coverage multiprocess concurrency with threads

Investigating https://github.com/nedbat/coveragepy/issues/1585 revealed
that thread tracing gets disabled when passing
`concurrency = multiprocessing`. Adding `thread` restores it, and
ensures that the `auser()` is reported as covered since the test suite
uses `AsyncToSync` to execute this middleware (which spawns threads).
2023-04-27 17:02:55 -03:00
Andrei Shabanski
5c456a8793
Refs #33662 -- Corrected Sitemap.get_languages_for_item() signature in docs. 2023-04-27 19:53:26 +02:00
Tom Forbes
23d24f82a7
Doc'd that Count("*") is equivalent to COUNT(*) SQL. 2023-04-27 11:52:54 +02:00
Mariusz Felisiak
18a7f2c711 Added stub release notes and release date for 4.2.1, 4.1.9, and 3.2.19. 2023-04-26 08:47:44 +02:00
Mariusz Felisiak
9440f6ba41
Fixed #34512 -- Restored breadcrumbs on admin app index view.
Thanks Adam (ataylor32) for the report.

Regression in 872b61193b.
2023-04-26 08:36:56 +02:00
Claude Paroz
453cfa2815 Replaced docutils link by PyPI reference. 2023-04-25 12:41:06 +02:00
Ben Lomax
4dfc6ff8a8 Refs #31949 -- Made @never_cache and @cache_control() decorators to work with async functions.
Thanks Carlton Gibson and Mariusz Felisiak for reviews.
2023-04-25 10:08:03 +02:00
Andreas Dickow
c24cd6575f Updated admin's XRegExp to 5.1.1. 2023-04-25 09:30:52 +02:00
Bakdolot
c813fb327c
Fixed #34481 -- Added system check for reverse related fields in ModelAdmin.list_display. 2023-04-24 08:14:35 -03:00
Claude Paroz
3fe0c609cf
Updated Django Transifex links.
Subdomain was changed on April 3rd and redirects will stop on July 2023.
2023-04-22 16:18:21 +02:00
Mariusz Felisiak
92537e83c1
Fixed #34506 -- Fixed margin of ClearableFileInput in admin CSS.
Regression in 96a598356a.
2023-04-21 19:49:59 +02:00
Mariusz Felisiak
c487634c10
Added meaningful titles to ..admonition:: directives. 2023-04-21 12:03:59 +02:00
Mariusz Felisiak
498195bda4
Improved examples in docs about raw SQL queries.
Regression in 14459f80ee.
2023-04-20 12:24:33 +02:00
David Sanders
0494efddc4 Fixed #34440 -- Doc'd that & queryset operator works similar to chaining. 2023-04-20 08:37:29 +02:00
Sage Abdullah
01ae9d4ca9 Fixed #34435 -- Doc'd that JSONField.default must be a callable. 2023-04-19 20:51:42 +02:00
Sarah Boyce
1611a3af1c
Doc'd RemovedInDjangoXXWarning comments in deprecating a feature guide. 2023-04-19 08:47:27 -03:00
David Wobrock
8b1ff0da4b Refs #16055 -- Deprecated get_joining_columns()/get_reverse_joining_columns() methods. 2023-04-18 12:46:27 +02:00
sarahboyce
594fcc2b74 Fixed #22569 -- Made ModelAdmin.lookup_allowed() respect get_list_filter().
Thank you Simon Meers for the initial patch.
2023-04-17 14:09:38 +02:00
Tim Graham
57f2b935b3 Added Snowflake to list of third-party DB backends. 2023-04-17 06:55:39 +02:00
Tim Graham
2c4dc64760 Used extlinks for PyPI links.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2023-04-17 06:55:32 +02:00
Edison Wang
255f534590
Fixed #34419 -- Doc'd django.contrib.admin.sites.all_sites. 2023-04-15 08:28:55 +02:00
Scott Macpherson
53aee470d5 Fixed #34486 -- Fixed DatabaseOperations.compose_sql() crash with no existing database connection on PostgreSQL.
Regression in 09ffc5c121.
2023-04-14 10:11:33 +02:00
nessita
813015d67e
Fixed #34483 -- Fixed timesince()/timeuntil() with timezone-aware dates and interval less than 1 day.
Regression in 8d67e16493.

Thanks Lorenzo Peña for the report.
2023-04-13 13:16:33 -03:00
Mariusz Felisiak
173034b005 Refs #34482 -- Reverted "Fixed #32969 -- Fixed pickling HttpResponse and subclasses."
This reverts commit d7f5bfd241.

Thanks Márton Salomváry for the report.
2023-04-12 18:52:43 +02:00
Mariusz Felisiak
280ca147af Fixed #34484, Refs #34482 -- Reverted "Fixed #29186 -- Fixed pickling HttpRequest and subclasses."
This reverts commit 6220c445c4.

Thanks Adam Johnson and Márton Salomváry for reports.
2023-04-12 18:52:43 +02:00
Marcelo Galigniana
dfc720c521 Fixed #27505 -- Allowed customizing Paginator's error messages. 2023-04-12 14:02:28 +02:00
sarahboyce
3b4728310a Fixed #34455 -- Restored i18n_patterns() respect of prefix_default_language argument when fallback language is used.
Regression in 94e7f471c4.

Thanks Oussama Jarrousse for the report.
2023-04-10 08:49:54 +02:00
Mariusz Felisiak
5b8a043bf5
Fixed #34470 -- Enforced UTF-8 encoding on PostgreSQL.
Regression in 6a21658163.
2023-04-07 10:11:41 +02:00
Anders Kaseorg
73cbb372ba Fixed #34466 -- Reallowed setting cursor_factory in DATABASES["options"] on PostgreSQL.
Regression in 09ffc5c121.
2023-04-07 08:02:34 +02:00
Simon Charette
9daf8b4109 Fixed #34464 -- Fixed queryset aggregation over group by reference.
Regression in 59bea9efd2.

Refs #28477.

Thanks Ian Cubitt for the report.
2023-04-07 06:57:32 +02:00
Rishi Joshi
1c7aed71ec Fixed typos in docs/faq/contributing.txt. 2023-04-06 19:25:59 +02:00
Mariusz Felisiak
4bf4222010 Fixed #34459 -- Fixed SearchVector() crash for parameters with % symbol.
Thanks Patryk Zawadzki for the report.

Regression in 09ffc5c121.
2023-04-06 13:32:47 +02:00
Yahya Ali
263db8af46
Fixed #34463 -- Corrected code-block directives in docs.
Thanks ExTexan for the report.
2023-04-06 13:08:12 +02:00
Sarah Boyce
bdf59bff65
Refs #34028 -- Doc'd that get_script_prefix() cannot be used outside of the request-response cycle. 2023-04-06 13:01:26 +02:00
Mariusz Felisiak
fdf0a367bd Added release date for 4.1.8. 2023-04-05 06:09:31 +02:00
Simon Charette
87c63bd8df Fixed #34458 -- Fixed QuerySet.defer() crash on attribute names.
Thanks Andrew Cordery for the report.

Regression in b3db6c8dcb.
2023-04-05 05:38:10 +02:00
David Sanders
ff9ceed32b Refs #34434 -- Added note about breaking changes in psycopg version 3 to release notes. 2023-04-04 16:30:15 +02:00
Mariusz Felisiak
073b5fd400
Updated release process for 2.0+ release numbering and latest practices. 2023-04-04 07:27:34 +02:00
th3nn3ss
1d1ddffc27 Fixed #33738 -- Allowed handling ASGI http.disconnect in long-lived requests. 2023-04-03 14:01:48 +02:00
Mariusz Felisiak
4e4eda6d6c Added stub release notes for 4.2.1. 2023-04-03 11:17:54 +02:00
Mariusz Felisiak
8adbab49e1 Finalized release notes for Django 4.2. 2023-04-03 09:00:23 +02:00
Edison Wang
cbcc1240e9 Fixed #34431 -- Improved Date/DateTimeField/TimeField.input_formats docs. 2023-04-03 06:58:25 +02:00
JiriKr
cfe563ffaf Fixed #34446 -- Removed unneeded and incorrect example in coding style docs. 2023-03-30 11:06:52 +02:00
Mariusz Felisiak
7330408ac3
Reverted "Refs #31949 -- Enabled @sensitive_variables to work with async functions."
This reverts commits 23cbed2187 and
203a15cadb.
2023-03-30 10:22:23 +02:00
Mariusz Felisiak
659f6b5bc5
Fixed typos in docs/ref/forms/renderers.txt. 2023-03-24 12:54:47 +01:00
David Smith
cad376f844 Fixed #34077 -- Added form field rendering. 2023-03-24 10:16:30 +01:00
Carlton Gibson
d33368b4ab Added Django Forum to mailing lists page. 2023-03-24 08:32:17 +01:00
David Wobrock
d6b6e5d0fd Fixed #28553 -- Fixed annotation mismatch with QuerySet.values()/values_list() on compound queries.
Co-authored-by: Matthias Kestenholz <mk@feinheit.ch>
2023-03-24 06:09:27 +01:00
Jesper Olsson
216eb63883
Fixed #34409 -- Doc'd limitation of dictfetchall() and namedtuplefetchall() examples.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2023-03-22 19:20:58 +01:00
Carlton Gibson
b00046d2c2 Doc'd use of asgiref.sync adapters with sensitive variables. 2023-03-22 14:36:42 +01:00
Carlton Gibson
203a15cadb
Refs #31949 -- Adjusted error reporting docs. 2023-03-22 11:01:40 +01:00
Jon Janzen
23cbed2187
Refs #31949 -- Enabled @sensitive_variables to work with async functions. 2023-03-22 10:21:04 +01:00
amirsoroush
6087bc4e15 Fixed typo in docs/topics/class-based-views/mixins.txt. 2023-03-22 08:35:24 +01:00
T. Franzel
a2eaea8f22 Fixed #34388 -- Allowed using choice enumeration types directly on model and form fields. 2023-03-21 19:44:41 +01:00
Liyang Zhang
f9f9215d3e
Fixed some typos in comments, docstrings, and tests. 2023-03-20 08:07:23 +01:00
Mariusz Felisiak
e10c1688f9
Fixed #34322 -- Made ES module support to ManifestStaticFilesStorage optional.
Co-authored-by: Author: Claude Paroz <claude@2xlibre.net>
2023-03-18 14:05:41 +01:00
sarahboyce
d2b688b966 Fixed #1873 -- Handled multi-valued query parameters in admin changelist filters. 2023-03-16 08:38:44 +01:00
Ayush Bisht
fc266b694b Fixed #34404 -- Clarified how FileResponse set Content-Type header. 2023-03-16 05:30:21 +01:00
Mariusz Felisiak
78da5ca0c1
Reverted "Fixed #33213 -- Doc'd testing code coverage in parallel and used it."
This reverts commit 69352d85fa.

Test coverage for async methods was no longer calculated with this
change.
2023-03-15 13:05:48 +01:00
Adam Johnson
4db33e96d1
Corrected example in CreateCollation() docs. 2023-03-12 15:02:34 +01:00
Mariusz Felisiak
cc67344db9 Doc'd that action descriptions are %-formatted.
Co-authored-by: JD Bothma <jbothma@gmail.com>
2023-03-09 13:44:34 +01:00
Mariusz Felisiak
18473004af
Fixed #34395 -- Updated admin's jQuery to 3.6.4. 2023-03-09 08:55:08 +01:00
nabil-rady
32d4b61c31 Fixed #34370 -- Added integer fields validation as 64-bit on SQLite. 2023-03-08 11:52:57 +01:00
David Wobrock
2396933ca9 Fixed #34384 -- Fixed session validation when rotation secret keys.
Bug in 0dcd549bbe.

Thanks Eric Zarowny for the report.
2023-03-08 10:48:04 +01:00
Carlton Gibson
279e611c01
Refs #31626 -- Noted that Daphne provides a runserver command. 2023-03-07 19:47:55 +01:00
Jon Janzen
e846c5e724 Fixed #31920 -- Made AuthenticationMiddleware add request.auser(). 2023-03-07 13:11:22 +01:00
Jon Janzen
e83a88566a Fixed #32172 -- Adapted signals to allow async handlers.
co-authored-by: kozzztik <kozzztik@mail.ru>
co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2023-03-07 08:39:25 +01:00
Mariusz Felisiak
9a07999aef Added stub release notes for 4.1.8. 2023-03-06 17:31:26 +01:00
Ivan Sagalaev
a4205076a5
Fixed typo in docs/releases/5.0.txt. 2023-03-05 14:01:19 +01:00
sarahboyce
868e2fcdda Fixed #32539 -- Added toggleable facet filters to ModelAdmin.
Thanks Carlton Gibson, Simon Willison, David Smith, and Mariusz
Felisiak for reviews.
2023-03-03 20:24:57 +01:00
Adam Johnson
ef00d6ef88 Doc'd that django.setup() is called under ASGI. 2023-03-01 14:32:31 +01:00
Heath Henley
54aecf95a2 Fixed #34367 -- Updated instructions for installing GeoDjango on Windows.
Thanks David Smith for the review.
2023-03-01 13:45:02 +01:00
django-bot
14459f80ee Fixed #34140 -- Reformatted code blocks in docs with blacken-docs. 2023-03-01 13:03:56 +01:00
Mariusz Felisiak
6015bab80e Refs #34140 -- Added configurations to run blacken-docs linter and adjusted docs.
This adds:
- GitHub actions,
- tox configuration,
- pre-commit hook, and
- makefile rules
to run blacken-docs linter.

Co-authored-by: David Smith <smithdc@gmail.com>
2023-03-01 13:02:57 +01:00
Mariusz Felisiak
9cf2a5df70 Refs #34140 -- Made minor edits to rst code-blocks. 2023-03-01 13:02:54 +01:00
Joseph Victor Zammit
ba755ca131 Refs #34140 -- Corrected rst code-block and various formatting issues in docs. 2023-02-28 12:21:37 +01:00
Adam Johnson
f9fe062de5 Doc'd that Meta.indexes is preferred to Field.db_index. 2023-02-24 09:08:59 +01:00
Xavier Fernandez
5b3d3e400a Fixed #34338 -- Allowed customizing code of ValidationError in BaseConstraint and subclasses. 2023-02-23 10:58:20 +01:00
Xavier Fernandez
ad18a0102c Fixed #34355 -- Deprecated passing positional arguments to BaseConstraint. 2023-02-22 09:37:58 +01:00
Tim Graham
31cd2852cb
Moved DatabaseIntrospection.get_table_description() internal_size release note to "Database backend API" section. 2023-02-22 05:17:02 +01:00
Mariusz Felisiak
bae053d497
Refs #21080, Refs #34322 -- Added warning to ManifestStaticFilesStorage docs about paths in comments. 2023-02-16 19:18:55 +01:00
Durval Carvalho
85366fbca7 Fixed #34045 -- Improved accessibility of selecting items in admin changelist.
This adds "aria-label".
2023-02-16 08:29:40 +01:00
David Smith
3cc7a92189 Refs #32339 -- Doc'd setting a form's template_name is recomended over using as_* methods. 2023-02-15 10:26:31 +01:00
David Smith
232b60a21b Refs #32339 -- Updated docs to reflect default <div> style form rendering in Django 5.0.
Follow up to 98756c685e.
2023-02-15 10:14:09 +01:00
David Smith
4038a8df0b Refs #32339 -- Doc'd BaseFormSet.as_div() 2023-02-15 09:24:08 +01:00
Carlton Gibson
ce8189eea0
Fixed #34328 -- Added async-only class-based middleware example. 2023-02-14 14:06:42 +01:00
tschilling
c5808470aa Fixed #34280 -- Allowed specifying different field values for create operation in QuerySet.update_or_create(). 2023-02-14 11:50:35 +01:00
Carlton Gibson
ecafcaf634 Added CVE-2023-24580 to security archive. 2023-02-14 09:52:30 +01:00
Markus Holtermann
85ac33591c Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.
Thanks to Jakob Ackermann for the report.
2023-02-14 08:18:40 +01:00
Sarah Boyce
1eb94bc8da
Fixed #29994 -- Added warning about performance of FileBasedCache with a large number of files.
Co-authored-by: sheenarbw <699166+sheenarbw@users.noreply.github.com>
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2023-02-13 21:09:19 +01:00
Sota Tabu
3e9d413231 Fixed #34318 -- Added release note for 4bfe8c0eec. 2023-02-13 11:59:11 +01:00
Paolo Melchiorre
69352d85fa
Fixed #33213 -- Doc'd testing code coverage in parallel and used it. 2023-02-11 09:43:26 +01:00
Carlton Gibson
534ac48297 Refs #34140 -- Applied rst code-block to non-Python examples.
Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for
reviews.
2023-02-10 19:19:13 +01:00
dennisvang
7bb741d787 Fixed #34325 -- Corrected wording in PercentRank() docs.
This is consistent with the terminology used for the percent_rank()
function in SQLite docs and PostgreSQL docs.
2023-02-10 14:07:48 +01:00
p0lygun
358792486e Fixed #34324 -- Mentioned Discord server in contributing index. 2023-02-10 05:55:45 +01:00
Willem Van Onsem
292aacaf6c Fixed #34311 -- Updated serialization docs from unique_together to UniqueConstraint. 2023-02-09 05:28:03 +01:00
Jacob Rief
473283d241
Fixed #34303 –- Allowed customizing admin site log entry list.
Added AdminSite.get_log_entries() as an override point and made this
available to the template via each_context().
2023-02-08 18:37:32 +01:00
Carlton Gibson
1964e4367f
Added missing vars to AdminSite.each_context() docs. 2023-02-08 17:59:56 +01:00
Mariusz Felisiak
2fd755b361
Fixed #34319 -- Fixed Model.validate_constraints() crash on ValidationError with no code.
Thanks Mateusz Kurowski for the report.

Regression in 667105877e.
2023-02-08 16:38:55 +01:00
Carlton Gibson
1df7814e4b
Refs #34146 -- Fixed typos in tutorial. (#16530)
- Fixed formatting on index page.
- Removed duplicate What's next section.

Thanks to Tim Graham for the report.
2023-02-07 20:19:58 +01:00
Tim Schilling
7715c9fef5
Fixed #34146 -- Added 3rd-party lib tutorial step.
Added a tutorial step that highlights Django Debug Toolbar, on of the
most common third party packages. It also added a mention of
djangopackages.com as a place to search for other libraries and a
link to Adam Johnson’s post on evaluating whether a package is
well-maintained.

Third-party packages are one of Django’s strengths. This should give
folks a sound route in.
2023-02-07 15:26:37 +01:00
Bakdolot
5f3c7b7e1d
Fixed #34317 -- Renamed "instance" argument of BaseModelFormSet.save_existing() method. 2023-02-07 14:18:58 +01:00
Carlton Gibson
fb77be9ae1 Fixed typo in release notes. 2023-02-07 10:11:01 +01:00
Carlton Gibson
7e003428f9 Added stub release notes for 4.0.10 and 3.2.18.
Set date for 4.1.7 release.
2023-02-07 10:08:21 +01:00
Marcelo Galigniana
7c6195ef81
Fixed #34310 -- Added deletion example to one-to-one topic. 2023-02-07 08:04:23 +01:00
Mariusz Felisiak
5e9aded33f
Increased the default PBKDF2 iterations for Django 5.0.
Follow up to 9a1848f48c.
2023-02-04 13:37:44 +01:00
Mariusz Felisiak
f3c89744cc Added stub release notes for 4.1.7. 2023-02-01 13:18:34 +01:00
Mariusz Felisiak
36e3eef7d5 Added CVE-2023-23969 to security archive. 2023-02-01 12:09:03 +01:00
Nick Pope
8c660fb592 Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.
The parsed values of Accept-Language headers are cached in order to
avoid repetitive parsing. This leads to a potential denial-of-service
vector via excessive memory usage if the raw value of Accept-Language
headers is very large.

Accept-Language headers are now limited to a maximum length in order
to avoid this issue.
2023-02-01 09:44:04 +01:00
Durval Carvalho
40217d1a82 Fixed #34180 -- Added note about resetting language in test tear-downs.
Co-authored-by: Faris Naimi <farisfaris66@gmail.com>
2023-01-31 06:35:30 +01:00
fschwebel
0265b1b49b
Fixed typo in docs/topics/auth/passwords.txt.
Wrapped hashing is only possible if the inner wrapped function is the
same as the previous hasher.
2023-01-30 08:31:39 +01:00
Mariusz Felisiak
2b1242abb3
Fixed #34291 -- Fixed Meta.constraints validation crash on UniqueConstraint with ordered expressions.
Thanks Dan F for the report.

Bug in 667105877e.
2023-01-26 09:31:40 +01:00
Mariusz Felisiak
882f99031e
Moved release note about the default PBKDF2 iterations into django.contrib.auth section.
Thanks Tim Graham for the report.
2023-01-25 22:25:29 +01:00
Carlton Gibson
d8e1442ce2 Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17. 2023-01-25 12:26:00 +01:00
Carlton Gibson
1df963ad24 Set date and added stub release notes for 4.1.6, 4.0.9, and 3.2.17. 2023-01-25 11:57:04 +01:00
noFFENSE
5cd1385356 Fixed #34242 -- Doc'd that primary key is set to None when deleting objects. 2023-01-20 09:36:36 +01:00
Niccolò Mineo
79c298c9ce Fixed #34266 -- Added ClosestPoint GIS database functions. 2023-01-20 08:13:43 +01:00
Mariusz Felisiak
23e8868862
Refs #34233 -- Used str.removeprefix()/removesuffix(). 2023-01-18 19:11:18 +01:00
Mariusz Felisiak
b209518089
Refs #32339 -- Deprecated transitional form renderers. 2023-01-18 11:08:39 +01:00
Mariusz Felisiak
3bbe22dafc
Fixed #34233 -- Dropped support for Python 3.8 and 3.9. 2023-01-18 09:46:01 +01:00