1
0
mirror of https://github.com/django/django.git synced 2025-11-07 07:15:35 +00:00
Commit Graph

32299 Commits

Author SHA1 Message Date
Mariusz Felisiak
4609d53adb [5.0.x] Fixed mail.tests.MailTests.test_backend_arg() test on Python 3.13+.
There is no point in asserting Python error messages.

Backport of 4ee68bb4f5 from main.
2024-07-22 09:05:44 +02:00
Mariusz Felisiak
83ec18b174 [5.0.x] Refs #34118 -- Used Python 3.12 for GitHub actions. 2024-07-22 09:05:44 +02:00
Hisham Mahmood
c3d3af8ea3 [5.0.x] Fixed #35606, Refs #34045 -- Fixed rendering of ModelAdmin.action_checkbox for models with a __html__ method.
Thank you Claude Paroz for the report.

Regression in 85366fbca7.

Backport of 182f262b15 from main.
2024-07-18 08:30:53 +02:00
Simon Charette
fe9bf0cef5 [5.0.x] Fixed #35594 -- Added unique nulls distinct validation for expressions.
Thanks Mark Gensler for the report.

Backport of adc0b6aac3 from main.
2024-07-17 13:07:42 +02:00
Simon Charette
c30669821b [5.0.x] Refs #30581 -- Made unattached UniqueConstraint(fields) validation testable.
The logic allowing UniqueConstraint(fields).validate to preserve backward
compatiblity with Model.unique_error_message failed to account for cases where
the constraint might not be attached to a model which is a common pattern
during testing.

This changes allows for arbitrary UniqueConstraint(fields) to be tested in
isolation without requiring actual models backing them up.

Co-authored-by: Mark G <mark.gensler@protonmail.com>

Backport of 13922580cc from main.
2024-07-17 13:07:41 +02:00
Mariusz Felisiak
c1028bdd09 [5.0.x] Refs #35560 -- Corrected required feature flags in GeneratedModelUniqueConstraint.
Backport of 2d3bb414cf from main.
2024-07-15 10:25:09 +02:00
Natalia
e82281c9f2 [5.0.x] Added CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, and CVE-2024-39614 to security archive.
Backport of e095c7612d from main.
2024-07-09 11:59:59 -03:00
Natalia
95bde9abd6 [5.0.x] Added stub release notes for 5.0.8.
Backport of 9c356144d7 from main.
2024-07-09 11:42:50 -03:00
Natalia
377175a388 [5.0.x] Post-release version bump. 2024-07-09 11:10:26 -03:00
Natalia
deec9b933e [5.0.x] Bumped version for 5.0.7 release. 5.0.7 2024-07-09 10:29:34 -03:00
Natalia
3a7bf7fb6c [5.0.x] Made cosmetic edits to 5.0.7 release notes.
Backport of 1062bf7302 from main.
2024-07-09 10:04:57 -03:00
Sarah Boyce
8e7a44e4be [5.0.x] Fixed CVE-2024-39614 -- Mitigated potential DoS in get_supported_language_variant().
Language codes are now parsed with a maximum length limit of 500 chars.

Thanks to MProgrammer for the report.
2024-07-09 10:03:38 -03:00
Natalia
9f4f63e9eb [5.0.x] Fixed CVE-2024-39330 -- Added extra file name validation in Storage's save method.
Thanks to Josh Schneier for the report, and to Carlton Gibson and Sarah
Boyce for the reviews.
2024-07-09 10:03:32 -03:00
Michael Manfre
07cefdee4a [5.0.x] Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords.
Refs #20760.

Thanks Michael Manfre for the fix and to Adam Johnson for the review.
2024-07-09 10:03:20 -03:00
Adam Johnson
7285644640 [5.0.x] Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.
Thank you to Elias Myllymäki for the report.

Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
2024-07-09 10:03:07 -03:00
lucas-r-oliveira
830340037b [5.0.x] Fixed 35506 -- Clarified initial references to URLconf in tutorial 1.
Backport of 2c931fda5b from main.
2024-07-08 22:03:50 -03:00
Mariusz Felisiak
c76089be6f [5.0.x] Refs #35560 -- Corrected CheckConstraint argument name in model_fields tests. 2024-07-08 12:38:04 +02:00
Mariusz Felisiak
43aa0c103b [5.0.x] Removed outdated note about limitations in Clickjacking protection.
There is no need to list old browser versions or point users to
workarounds.
Backport of f302343380 from main.
2024-07-04 18:13:25 -03:00
Mark Gensler
0602fc2124 [5.0.x] Fixed #35560 -- Made Model.full_clean() ignore GeneratedFields for constraints.
Accessing generated field values on unsaved models caused a crash when
validating CheckConstraints and UniqueConstraints with expressions.

Backport of 1005c2abd1 from main.
2024-07-04 11:49:27 +02:00
Natalia
03b908ffed [5.0.x] Added stub release notes and release date for 5.0.7 and 4.2.14.
Backport of 89557d4c66 from main.
2024-07-03 14:13:02 -03:00
Andrew Miller
4cf7199078 [5.0.x] Fixed #23790 -- Warned about renaming AppConfig.label in docs/ref/applications.txt.
Backport of aa74c4083e from main.
2024-07-01 21:53:50 -03:00
Carlton Gibson
dd3d0483ab [5.0.x] Refs #35059 -- Used asyncio.Event in ASGITest.test_asyncio_cancel_error to enforce specific interleaving.
Sleep call leads to a hard to trace error in CI. Using an Event is
more deterministic, and should be less prone to environment
variations.

Bug in 11393ab131.

Backport of f4a08b6ddf from main.
2024-06-25 11:06:27 -03:00
lufafajoshua
3a4a44978a [5.0.x] Fixed #34886 -- Modified sample use of lazy in delayed translations.
Modified example to use python standard library function
to lower the case of the string.

Backport of 136a5f9409 from main.
2024-06-25 09:04:03 +02:00
Andreu Vallbona
8850079fcb [5.0.x] Moved confirmation about dev server running to earlier in tutorial 1.
Backport of f812b927a5 from main.
2024-06-09 14:52:21 -03:00
Andreu Vallbona
dc164bdb9f [5.0.x] Replaced usage of "patch" with more precise terms in faq, howto, and intro docs.
Backport of 85240139ca from main.
2024-06-09 14:39:41 -03:00
Andreu Vallbona
9f03c6d59b [5.0.x] Simplified tutorial 1 when describing how to run the dev server.
Backport of 3556f63c4c from main.
2024-06-09 04:44:45 -03:00
Ismael
25df397943 [5.0.x] Fixed #35503 -- Removed distracting PHP reference in tutorial 1.
Backport of 6efbeb997c from main.
2024-06-08 09:42:48 -03:00
Natalia
0231bad10d [5.0.x] Updated release date for Django 5.0.7.
Backport of adae619426 from main.
2024-05-31 10:54:48 -03:00
Mariusz Felisiak
3925476ca0 [5.0.x] Made cosmetic edits to code snippets reformatted with blacken-docs.
Backport of 0f694ce2eb from main.
2024-05-30 09:42:50 -03:00
Natalia
629398e55f [5.0.x] Added stub release notes for 5.0.7.
Backport of b79ac89c57 from main.
2024-05-07 15:07:56 -03:00
Natalia
5a6704055a [5.0.x]Post-release version bump. 2024-05-07 14:46:44 -03:00
Sarah Boyce
2719a7f8c1 [5.0.x] Bumped version for 5.0.6 release. 5.0.6 2024-05-07 17:28:45 +02:00
Sarah Boyce
c90b20fc4b [5.0.x] Added release notes for 5.0.6 and 4.2.13.
Backport of 90175e110e from main.
2024-05-07 17:26:16 +02:00
Natalia
0504608faf [5.0.x] Added stub release notes for 5.0.6. 2024-05-06 14:34:46 -03:00
Natalia
2fa9fe3238 [5.0.x] Post-release version bump. 2024-05-06 14:21:27 -03:00
Sarah Boyce
b6844c6e32 [5.0.x] Bumped version for 5.0.5 release. 5.0.5 2024-05-06 14:52:51 +02:00
Sarah Boyce
e1eecbaa14 [5.0.x] Added release date for 5.0.5 and 4.2.12.
Backport of 34a503162f from main.
2024-05-06 14:40:39 +02:00
sobolevn
9b5029f048 [5.0.x] Fixed #35426 -- Updated querysets to be a required argument of GenericPrefetch.
Backport of 9a27c76021 from main.
2024-05-04 11:34:12 +02:00
Sarah Boyce
ac9e18f1c4 [5.0.x] Refs #35359 -- Fixed OperationTests.test_add_generate_field() test on PostgreSQL.
Concat() in Django 5.0 is not immutable on PostgreSQL and cannot be used
in GeneratedField, see 6364b6ee10.
2024-05-03 23:52:24 -03:00
Shamil
59c3f8a539 [5.0.x] Fixed #35427 -- Corrected help text for makemessages --extension in docs/ref/django-admin.txt.
Backport of 32d163e680 from main.
2024-05-03 23:06:29 -03:00
Natalia
e18e9315a3 [5.0.x] Refs #35422 -- Fixed typo in docs/releases/5.0.5.txt.
Backport of e72049aa63 from main.
2024-05-03 13:19:43 -03:00
Mariusz Felisiak
c544f1a223 [5.0.x] Fixed #35422 -- Fixed migrations crash when altering GeneratedField referencing rename field.
Thanks Sarah Boyce for the report and Simon Charette for the
implementation idea.

Backport of 91a4b9a8ec from main.
2024-05-03 09:32:31 +02:00
DevilsAutumn
24f54c3b09 [5.0.x] Fixed #35359 -- Fixed migration operations ordering when adding fields referenced by GeneratedField.expression.
Thank you to Simon Charette for the review.

Backport of 9aeb38c296 from main.
2024-05-02 21:54:52 -03:00
fa202d5cb1 [5.0.x] Refs #34007, Refs #35359 -- Added Q.referenced_based_fields property.
Thank you to Mariusz Felisiak and Natalia Bidart for the reviews.

Backport of 97d48cd3c6 from main
2024-05-02 21:45:02 -03:00
Adam Zapletal
f29922b6ef [5.0.x] Fixed #20744 -- Removed hint that arbitrary kwargs are allowed when creating forms.Fields.
Backport of 828b94b178 from main
2024-04-26 14:38:41 -03:00
minusf
8468ea237d [5.0.x] Fixed incorrect blockquotes in docs/topics/forms/index.txt.
Backport of bcad5ad92b from main
2024-04-22 22:27:42 -03:00
James Ostrander
ea81c9d343 [5.0.x] Fixed #35392, Refs #34331 -- Allowed importing aprefetch_related_objects from django.db.models.
Thanks James Ostrander for the report and fix, and to Tim Graham and
Mariusz Felisiak for the reviews.

Backport of 36b7024b7f from main
2024-04-22 17:06:18 -03:00
Sarah Boyce
a42a2fa267 [5.0.x] Reverted "Fixed #34994, Fixed #35386 -- Applied checkbox-row CSS class unconditionally in Admin."
This reverts commit ffcf660711.
2024-04-19 13:40:19 +02:00
Adam Johnson
ffcf660711 [5.0.x] Fixed #34994, Fixed #35386 -- Applied checkbox-row CSS class unconditionally in Admin.
Backport of bdd76c4c38 from main.
2024-04-19 11:23:28 +02:00
David Sanders
d36ecbd530 [5.0.x] Doc'd that RemoveField also drops related database objects in PostgreSQL.
Backport of f0d50a9379 from main
2024-04-16 13:11:41 -03:00