Mariusz Felisiak
4609d53adb
[5.0.x] Fixed mail.tests.MailTests.test_backend_arg() test on Python 3.13+.
...
There is no point in asserting Python error messages.
Backport of 4ee68bb4f5 from main.
2024-07-22 09:05:44 +02:00
Mariusz Felisiak
83ec18b174
[5.0.x] Refs #34118 -- Used Python 3.12 for GitHub actions.
2024-07-22 09:05:44 +02:00
Hisham Mahmood
c3d3af8ea3
[5.0.x] Fixed #35606 , Refs #34045 -- Fixed rendering of ModelAdmin.action_checkbox for models with a __html__ method.
...
Thank you Claude Paroz for the report.
Regression in 85366fbca7 .
Backport of 182f262b15 from main.
2024-07-18 08:30:53 +02:00
Simon Charette
fe9bf0cef5
[5.0.x] Fixed #35594 -- Added unique nulls distinct validation for expressions.
...
Thanks Mark Gensler for the report.
Backport of adc0b6aac3 from main.
2024-07-17 13:07:42 +02:00
Simon Charette
c30669821b
[5.0.x] Refs #30581 -- Made unattached UniqueConstraint(fields) validation testable.
...
The logic allowing UniqueConstraint(fields).validate to preserve backward
compatiblity with Model.unique_error_message failed to account for cases where
the constraint might not be attached to a model which is a common pattern
during testing.
This changes allows for arbitrary UniqueConstraint(fields) to be tested in
isolation without requiring actual models backing them up.
Co-authored-by: Mark G <mark.gensler@protonmail.com >
Backport of 13922580cc from main.
2024-07-17 13:07:41 +02:00
Mariusz Felisiak
c1028bdd09
[5.0.x] Refs #35560 -- Corrected required feature flags in GeneratedModelUniqueConstraint.
...
Backport of 2d3bb414cf from main.
2024-07-15 10:25:09 +02:00
Natalia
e82281c9f2
[5.0.x] Added CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, and CVE-2024-39614 to security archive.
...
Backport of e095c7612d from main.
2024-07-09 11:59:59 -03:00
Natalia
95bde9abd6
[5.0.x] Added stub release notes for 5.0.8.
...
Backport of 9c356144d7 from main.
2024-07-09 11:42:50 -03:00
Natalia
377175a388
[5.0.x] Post-release version bump.
2024-07-09 11:10:26 -03:00
Natalia
deec9b933e
[5.0.x] Bumped version for 5.0.7 release.
5.0.7
2024-07-09 10:29:34 -03:00
Natalia
3a7bf7fb6c
[5.0.x] Made cosmetic edits to 5.0.7 release notes.
...
Backport of 1062bf7302 from main.
2024-07-09 10:04:57 -03:00
Sarah Boyce
8e7a44e4be
[5.0.x] Fixed CVE-2024-39614 -- Mitigated potential DoS in get_supported_language_variant().
...
Language codes are now parsed with a maximum length limit of 500 chars.
Thanks to MProgrammer for the report.
2024-07-09 10:03:38 -03:00
Natalia
9f4f63e9eb
[5.0.x] Fixed CVE-2024-39330 -- Added extra file name validation in Storage's save method.
...
Thanks to Josh Schneier for the report, and to Carlton Gibson and Sarah
Boyce for the reviews.
2024-07-09 10:03:32 -03:00
Michael Manfre
07cefdee4a
[5.0.x] Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords.
...
Refs #20760 .
Thanks Michael Manfre for the fix and to Adam Johnson for the review.
2024-07-09 10:03:20 -03:00
Adam Johnson
7285644640
[5.0.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.
...
Thank you to Elias Myllymäki for the report.
Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com >
2024-07-09 10:03:07 -03:00
lucas-r-oliveira
830340037b
[5.0.x] Fixed 35506 -- Clarified initial references to URLconf in tutorial 1.
...
Backport of 2c931fda5b from main.
2024-07-08 22:03:50 -03:00
Mariusz Felisiak
c76089be6f
[5.0.x] Refs #35560 -- Corrected CheckConstraint argument name in model_fields tests.
2024-07-08 12:38:04 +02:00
Mariusz Felisiak
43aa0c103b
[5.0.x] Removed outdated note about limitations in Clickjacking protection.
...
There is no need to list old browser versions or point users to
workarounds.
Backport of f302343380 from main.
2024-07-04 18:13:25 -03:00
Mark Gensler
0602fc2124
[5.0.x] Fixed #35560 -- Made Model.full_clean() ignore GeneratedFields for constraints.
...
Accessing generated field values on unsaved models caused a crash when
validating CheckConstraints and UniqueConstraints with expressions.
Backport of 1005c2abd1 from main.
2024-07-04 11:49:27 +02:00
Natalia
03b908ffed
[5.0.x] Added stub release notes and release date for 5.0.7 and 4.2.14.
...
Backport of 89557d4c66 from main.
2024-07-03 14:13:02 -03:00
Andrew Miller
4cf7199078
[5.0.x] Fixed #23790 -- Warned about renaming AppConfig.label in docs/ref/applications.txt.
...
Backport of aa74c4083e from main.
2024-07-01 21:53:50 -03:00
Carlton Gibson
dd3d0483ab
[5.0.x] Refs #35059 -- Used asyncio.Event in ASGITest.test_asyncio_cancel_error to enforce specific interleaving.
...
Sleep call leads to a hard to trace error in CI. Using an Event is
more deterministic, and should be less prone to environment
variations.
Bug in 11393ab131 .
Backport of f4a08b6ddf from main.
2024-06-25 11:06:27 -03:00
lufafajoshua
3a4a44978a
[5.0.x] Fixed #34886 -- Modified sample use of lazy in delayed translations.
...
Modified example to use python standard library function
to lower the case of the string.
Backport of 136a5f9409 from main.
2024-06-25 09:04:03 +02:00
Andreu Vallbona
8850079fcb
[5.0.x] Moved confirmation about dev server running to earlier in tutorial 1.
...
Backport of f812b927a5 from main.
2024-06-09 14:52:21 -03:00
Andreu Vallbona
dc164bdb9f
[5.0.x] Replaced usage of "patch" with more precise terms in faq, howto, and intro docs.
...
Backport of 85240139ca from main.
2024-06-09 14:39:41 -03:00
Andreu Vallbona
9f03c6d59b
[5.0.x] Simplified tutorial 1 when describing how to run the dev server.
...
Backport of 3556f63c4c from main.
2024-06-09 04:44:45 -03:00
Ismael
25df397943
[5.0.x] Fixed #35503 -- Removed distracting PHP reference in tutorial 1.
...
Backport of 6efbeb997c from main.
2024-06-08 09:42:48 -03:00
Natalia
0231bad10d
[5.0.x] Updated release date for Django 5.0.7.
...
Backport of adae619426 from main.
2024-05-31 10:54:48 -03:00
Mariusz Felisiak
3925476ca0
[5.0.x] Made cosmetic edits to code snippets reformatted with blacken-docs.
...
Backport of 0f694ce2eb from main.
2024-05-30 09:42:50 -03:00
Natalia
629398e55f
[5.0.x] Added stub release notes for 5.0.7.
...
Backport of b79ac89c57 from main.
2024-05-07 15:07:56 -03:00
Natalia
5a6704055a
[5.0.x]Post-release version bump.
2024-05-07 14:46:44 -03:00
Sarah Boyce
2719a7f8c1
[5.0.x] Bumped version for 5.0.6 release.
5.0.6
2024-05-07 17:28:45 +02:00
Sarah Boyce
c90b20fc4b
[5.0.x] Added release notes for 5.0.6 and 4.2.13.
...
Backport of 90175e110e from main.
2024-05-07 17:26:16 +02:00
Natalia
0504608faf
[5.0.x] Added stub release notes for 5.0.6.
2024-05-06 14:34:46 -03:00
Natalia
2fa9fe3238
[5.0.x] Post-release version bump.
2024-05-06 14:21:27 -03:00
Sarah Boyce
b6844c6e32
[5.0.x] Bumped version for 5.0.5 release.
5.0.5
2024-05-06 14:52:51 +02:00
Sarah Boyce
e1eecbaa14
[5.0.x] Added release date for 5.0.5 and 4.2.12.
...
Backport of 34a503162f from main.
2024-05-06 14:40:39 +02:00
sobolevn
9b5029f048
[5.0.x] Fixed #35426 -- Updated querysets to be a required argument of GenericPrefetch.
...
Backport of 9a27c76021 from main.
2024-05-04 11:34:12 +02:00
Sarah Boyce
ac9e18f1c4
[5.0.x] Refs #35359 -- Fixed OperationTests.test_add_generate_field() test on PostgreSQL.
...
Concat() in Django 5.0 is not immutable on PostgreSQL and cannot be used
in GeneratedField, see 6364b6ee10 .
2024-05-03 23:52:24 -03:00
Shamil
59c3f8a539
[5.0.x] Fixed #35427 -- Corrected help text for makemessages --extension in docs/ref/django-admin.txt.
...
Backport of 32d163e680 from main.
2024-05-03 23:06:29 -03:00
Natalia
e18e9315a3
[5.0.x] Refs #35422 -- Fixed typo in docs/releases/5.0.5.txt.
...
Backport of e72049aa63 from main.
2024-05-03 13:19:43 -03:00
Mariusz Felisiak
c544f1a223
[5.0.x] Fixed #35422 -- Fixed migrations crash when altering GeneratedField referencing rename field.
...
Thanks Sarah Boyce for the report and Simon Charette for the
implementation idea.
Backport of 91a4b9a8ec from main.
2024-05-03 09:32:31 +02:00
DevilsAutumn
24f54c3b09
[5.0.x] Fixed #35359 -- Fixed migration operations ordering when adding fields referenced by GeneratedField.expression.
...
Thank you to Simon Charette for the review.
Backport of 9aeb38c296 from main.
2024-05-02 21:54:52 -03:00
fa202d5cb1
[5.0.x] Refs #34007 , Refs #35359 -- Added Q.referenced_based_fields property.
...
Thank you to Mariusz Felisiak and Natalia Bidart for the reviews.
Backport of 97d48cd3c6 from main
2024-05-02 21:45:02 -03:00
Adam Zapletal
f29922b6ef
[5.0.x] Fixed #20744 -- Removed hint that arbitrary kwargs are allowed when creating forms.Fields.
...
Backport of 828b94b178 from main
2024-04-26 14:38:41 -03:00
minusf
8468ea237d
[5.0.x] Fixed incorrect blockquotes in docs/topics/forms/index.txt.
...
Backport of bcad5ad92b from main
2024-04-22 22:27:42 -03:00
James Ostrander
ea81c9d343
[5.0.x] Fixed #35392 , Refs #34331 -- Allowed importing aprefetch_related_objects from django.db.models.
...
Thanks James Ostrander for the report and fix, and to Tim Graham and
Mariusz Felisiak for the reviews.
Backport of 36b7024b7f from main
2024-04-22 17:06:18 -03:00
Sarah Boyce
a42a2fa267
[5.0.x] Reverted "Fixed #34994 , Fixed #35386 -- Applied checkbox-row CSS class unconditionally in Admin."
...
This reverts commit ffcf660711 .
2024-04-19 13:40:19 +02:00
Adam Johnson
ffcf660711
[5.0.x] Fixed #34994 , Fixed #35386 -- Applied checkbox-row CSS class unconditionally in Admin.
...
Backport of bdd76c4c38 from main.
2024-04-19 11:23:28 +02:00
David Sanders
d36ecbd530
[5.0.x] Doc'd that RemoveField also drops related database objects in PostgreSQL.
...
Backport of f0d50a9379 from main
2024-04-16 13:11:41 -03:00