mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-23 21:59:11 +00:00
Code Issues 32 Releases Wiki Activity
31,672 Commits 30 Branches 460 Tags
3d943c4f55e24eb77a5fc70e6253e182110d80f6
Commit Graph

13344 Commits

Author SHA1 Message Date
Tom Carrick
3d943c4f55 [4.2.x] Fixed #34991 -- Fixed pagination links and input layout in admin's change list page when using list_editable. 
Regression in b4817d20b9.

Thanks Tom Carrick for the report and fix.

Backport of 4eb9c3d90a from main
 2023-11-23 10:22:34 -03:00
Simon Charette
cf95de9d24 [4.2.x] Fixed #34987 -- Fixed queryset crash when mixing aggregate and window annotations. 
Regression in f387d024fc.

Just like `OrderByList` the `ExpressionList` expression used to wrap
`Window.partition_by` must implement `get_group_by_cols` to ensure the
necessary grouping when mixing window expressions with aggregate
annotations is performed against the partition members and not the
partition expression itself.

This is necessary because while `partition_by` is implemented as
a source expression of `Window` it's actually a fragment of the WINDOW
expression at the SQL level and thus it should result in a group by its
members and not the sum of them.

Thanks ElRoberto538 for the report.
Backport of e76cc93b01 from main
 2023-11-23 06:10:24 +01:00
Tim Schilling
6d7313bc87 [4.2.x] Fixed #34990 -- Changed link to OWASP in CSRF docs. 
The OWASP site is the standard resource for web application
security information.
Backport of aceee39d44 from main
 2023-11-23 05:28:43 +01:00
Mariusz Felisiak
9afeb6b9b6 [4.2.x] Refs #34118 -- Doc'd Python 3.12 compatibility in Django 4.2.x. 
Backport of ecfea054ee from main.
 2023-11-19 16:38:33 +01:00
Simon Charette
acf4cee951 [4.2.x] Fixed #34975 -- Fixed crash of conditional aggregate() over aggregations. 
Adjustments made to solve_lookup_type to defer the resolving of
references for summarized aggregates failed to account for similar
requirements for lookup values which can also reference annotations
through Aggregate.filter.

Regression in b181cae2e3.

Refs #25307.

Thanks Sergey Nesterenko for the report.

Backport of 7530cf3900 from main
 2023-11-18 16:53:24 +01:00
Markus Amalthea Magnuson
47f9b8dca1 [4.2.x] Fixed #34970 -- Clarified Password Validation docs regarding the password_changed callback. 
Backport of 61c305f298 from main
 2023-11-15 21:51:32 -03:00
Giannis Terzopoulos
f1e004012f [4.2.x] Removed obsolete sentence in custom model field docs. 
Backport of 36ed45d27c from main
 2023-11-15 13:53:03 +01:00
William Hayes
e9acdff462 [4.2.x] Refs #33690 -- Added missing data-theme selector to example in theming support docs. 
Backport of 640283711e from main
 2023-11-15 05:28:17 +01:00
Adam Johnson
90c3d71dfe [4.2.x] Fixed #34457 -- Restored output for makemigrations --check. 
Co-authored-by: David Sanders <shang.xiao.sanders@gmail.com>
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of f7389c4b07 from main
 2023-11-09 11:05:54 -03:00
Patrick Rauscher
3d2370607d [4.2.x] Fixed #34813 -- Doc'd usage of integrity HTML attribute with ManifestStaticFilesStorage. 
Backport of 116e225266 from main
 2023-11-02 08:27:06 -03:00
Mariusz Felisiak
ce44eaf6d0 [4.2.x] Added stub release notes for 4.2.8. 
Backport of 36173cf29d from main
 2023-11-01 08:25:36 +01:00
Mariusz Felisiak
e4c9703ec6 [4.2.x] Added CVE-2023-46695 to security archive. 
Backport of 7caf262183 from main
 2023-11-01 08:17:50 +01:00
Mariusz Felisiak
048a9ebb6e [4.2.x] Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows. 
Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.
 2023-11-01 06:19:20 +01:00
Natalia
3fae5d92da [4.2.x] Refs #30601 -- Fixed typos in docs/topics/db/transactions.txt. 
Backport of 9b18af4f6f from main
 2023-10-30 13:50:20 -03:00
Natalia
a8aa94062b [4.2.x] Refs #15578 -- Made cosmetic edits to fixtures docs. 
Backport of b412e5645a from main
 2023-10-30 10:33:40 -03:00
Tom Carrick
109f39a38b [4.2.x] Fixed #34932 -- Restored varchar_pattern_ops/text_pattern_ops index creation when deterministic collaction is set. 
Regression in f3f9d03edf (4.2) and
8ed25d65ea (5.0).

Backport of 34b411762b from main.
 2023-10-30 11:14:08 +01:00
Sarah Boyce
61612990d8 [4.2.x] Fixed typos in docs/ref/models/expressions.txt. 
Backport of 8992a0489c from main
 2023-10-28 14:22:30 +02:00
lufafajoshua
696fbc32d6 [4.2.x] Fixed #30601 -- Doc'd the need to manually revert all app state on transaction rollbacks. 
Backport of aa80b357fb from main
 2023-10-27 23:33:45 -03:00
Izzy Hyman
ffba63180c [4.2.x] Fixed typo in docs/ref/contrib/gis/geos.txt. 
Backport of c42250a703 from main
 2023-10-27 05:32:47 +02:00
Leo Suarez
43a3646070 [4.2.x] Fixed #15578 -- Stated the processing order of fixtures in the fixtures docs. 
Also, added details about loading multiple fixtures and unified line wrapping
at 79 cols.

Co-Authored-By: Aniketh Babu <anikethbabu@gmail.com>
Co-Authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
Co-Authored-By: Natalia Bidart <124304+nessita@users.noreply.github.com>

Backport of 334dc073b1 from main
 2023-10-26 21:52:24 -03:00
Mariusz Felisiak
0cd8b867a0 [4.2.x] Added stub release notes and release date for 4.2.7, 4.1.13, and 3.2.23. 
Backport of fdd1323b9c from main
 2023-10-25 05:43:24 +02:00
Claire Pritchard
510a512119 [4.2.x] Fixed typo in docs/releases/4.2.txt. 
Backport of 61cc0e6f2c from main
 2023-10-22 11:03:08 +02:00
David Smith
b644f8bc1f [4.2.x] Corrected note about using accents in writing documentation contributing guide. 
Backport of 1611577102 from main
 2023-10-21 09:40:21 +02:00
Simon Charette
803caec60b [4.2.x] Fixed #34798 -- Fixed QuerySet.aggregate() crash when referencing expressions containing subqueries. 
Regression in 59bea9efd2,
complements e5c844d6f2.

Refs #28477, #34551.

Thanks Haldun Komsuoglu for the report.

Backport of 3b4a571275 from main
 2023-10-16 06:15:36 +02:00
Adam Johnson
caec4f4a6f [4.2.x] Refs #34840 -- Improved release note describing index regression. 
Backport of 73b2c63127 from main
 2023-10-15 10:28:07 +02:00
lufafajoshua
e8fe48d3a0 [4.2.x] Fixed #34808 -- Doc'd aggregate function's default argument. 
Backport of 8adc7c86ab from main
 2023-10-11 16:11:09 -03:00
Natalia
830990fa6c [4.2.x] Reorganized tutorial's part 4 to better understand changes needed in URLConf. 
Backport of d21ab70223 from main
 2023-10-10 14:07:10 -03:00
sarahboyce
9c7627da30 [4.2.x] Refs #34043 -- Clarified how to test UI changes. 
Backport of e083f3082c from main
 2023-10-09 11:51:50 +02:00
Mariusz Felisiak
0bd53ab86a [4.2.x] Added backticks to setuptools in docs. 
Backport of 54b23b1835 from main
 2023-10-09 09:57:35 +02:00
ume
99dcba90b4 [4.2.x] Refs #32275 -- Added scrypt password hasher to PASSWORD_HASHERS setting docs. 
Backport of 90c75dc4f3 from main
 2023-10-06 09:56:11 +02:00
David Sanders
6697880219 [4.2.x] Refs #31435 -- Doc'd potential infinite recursion when accessing model fields in __init__. 
Backport of e47298aec4 from main
 2023-10-05 14:34:07 -03:00
Mariusz Felisiak
a9a3317a95 [4.2.x] Corrected wrap_socket() reference in docs/ref/settings.txt. 
Backport of f9cdecfb0d from main
 2023-10-04 19:54:32 +02:00
Natalia
9962f94a97 [4.2.x] Added CVE-2023-43665 to security archive. 
Backport of 4e790271e3 from main
 2023-10-04 13:09:25 -03:00
Natalia
b2d95bb301 [4.2.x] Added stub release notes for 4.2.7. 
Backport of 034457941a from main
 2023-10-04 13:09:11 -03:00
Natalia
be9c27c4d1 [4.2.x] Fixed CVE-2023-43665 -- Mitigated potential DoS in django.utils.text.Truncator when truncating HTML text. 
Thanks Wenchao Li of Alibaba Group for the report.
 2023-10-04 09:39:49 -03:00
Natalia
39fc3f46a8 [4.2.x] Added stub release notes and release date for 4.2.6, 4.1.12, and 3.2.22. 
Backport of 5e4b75b78a from main
 2023-09-27 14:27:44 -03:00
Mariusz Felisiak
dd0bf63d3e [4.2.x] Added warning about flatpages and untrusted users. 
Backport of 571bab9887 from main
 2023-09-27 19:10:59 +02:00
Mariusz Felisiak
a148461f1f [4.2.x] Fixed #34840 -- Avoided casting string base fields on PostgreSQL. 
Thanks Alex Vandiver for the report.

Regression in 09ffc5c121.

Backport of 779cd28acb from main.
 2023-09-22 06:07:19 +02:00
David Sanders
b08f53ff46 [4.2.x] Refs #34808 -- Doc'd that aggregation functions on empty groups can return None. 
Backport of 78b5c90753 from main
 2023-09-21 13:18:15 -03:00
Mariusz Felisiak
c70f08c4aa [4.2.x] Added updating the Django release process on Trac to release steps. 
Backport of 7c1cf585e8 from main
 2023-09-19 09:29:25 -03:00
therealrinku
d485aa2732 [4.2.x] Fixed typo in docs/howto/custom-file-storage.txt. 
Backport of aebedb7bd1 from main
 2023-09-16 07:40:17 +02:00
Mariusz Felisiak
ff26e6ad84 [4.2.x] Corrected QuerySet.prefetch_related() note about GenericRelation(). 
GenericRelation is a reverse generic relationship so it's always
homogeneous. Mentioning this as a restriction is confusing.
Backport of 88b5b7b8e5 from main
 2023-09-16 06:58:08 +02:00
Michele Mazzucchi
866122690d [4.2.x] Doc'd HttpResponse.cookies. 
Backport of 5bfb3cbf49 from main
 2023-09-14 12:29:49 +02:00
Mariusz Felisiak
97e8a2afb1 [4.2.x] Fixed #34821 -- Prevented DEFAULT_FILE_STORAGE/STATICFILES_STORAGE settings from mutating the main STORAGES. 
Regression in 6b965c6000.
Backport of a7c73b944f from main
 2023-09-11 13:04:55 +02:00
Mariusz Felisiak
592ebd8920 [4.2.x] Added stub release notes for 4.2.6. 
Backport of a534835c7b from main
 2023-09-04 13:25:56 +02:00
Mariusz Felisiak
a1dd785139 [4.2.x] Added CVE-2023-41164 to security archive. 
Backport of 8a98768868 from main
 2023-09-04 13:17:59 +02:00
Mariusz Felisiak
9c51b4dcfa [4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri(). 
Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.

Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
 2023-09-04 12:05:35 +02:00
willzhao
acfb427522 [4.2.x] Fixed #34803 -- Fixed queryset crash when filtering againts deeply nested OuterRef annotations. 
Thanks Pierre-Nicolas Rigal for the report.

Regression in c67ea79aa9.

Backport of 9cc0d7f7f8 from main
 2023-09-01 11:25:00 +02:00
Mariusz Felisiak
55a0b9c32e [4.2.x] Added stub release notes and release date for 4.2.5, 4.1.11, and 3.2.21. 
Backport of 24f1a38b37 from main
 2023-08-28 06:14:50 +02:00
Mariusz Felisiak
8e8c318449 [4.2.x] Avoided counting exceptions in AsyncClient docs. 
Follow up to ad6bb20557.
Backport of 9942a3e49b from main
 2023-08-24 05:21:00 +02:00