1
0
mirror of https://github.com/django/django.git synced 2025-03-12 18:30:48 +00:00

13893 Commits

Author SHA1 Message Date
AfiMaameDufie
6bc36a1d27 [5.1.x] Updated authentication solutions list on using REMOTE_USER how-to.
Backport of 6ae0dc89c53e51ec1d74ffba630686ad1988466a from main.
2024-10-24 10:03:45 +02:00
koresi
34989e076b [5.1.x] Fixed #22828 -- Warned that ModelAdmin get hooks return the property itself rather a copy.
Backport of b8e9cdf13b7ab6621926a5d2aad3e2bb745aae00 from main.
2024-10-24 10:02:22 +02:00
David D Lowe
8bfa520a01 [5.1.x] Doc'd that unusable passwords are defined by metadata in the password field.
Backport of de2bb73904009313bae3664ef71edfd60df9912b from main.
2024-10-23 14:21:05 -03:00
Yash
630c9e1f9d [5.1.x] Fixed #35731 -- Extended db_default docs.
This added a missing db_default reference in docs/topics/db/models.txt,
and added a reference to the DatabaseDefault object.

Backport of 35ab2e018214479fa712d73f070198299ef670a1 from main.
2024-10-23 11:51:13 +02:00
Daniele Procida
d9f37ac118 [5.1.x] Restructured how-to docs landing page.
Previously, this was a bare list of sub-pages, not in any discernible
order, and hard to parse.

Now the sub-pages are grouped in sections by topic. It's unlikely to be
the final word on how this material is arranged, but it's a clear
improvement on the existing arrangement and provides a good basis for
next steps.
Backport of dd0a116b93c40f9febf0e09614ad666af1191744 from main.
2024-10-22 15:10:53 -03:00
ssanger
8efba53397 [5.1.x] Added missing alt attribute to <img> tag in docs.
Backport of df6013b2b4e93ed6d127c2f572e6de0ba46d1d6a from main.
2024-10-22 14:20:00 +02:00
Mariusz Felisiak
60dc9c288c [5.1.x] Fixed example indentation in howto/overriding-templates.txt.
Backport of bcb91611eca154f022211633fe485e3e1a3c608d from main.
2024-10-22 13:10:13 +02:00
amirreza sohrabi far
6eb6f236f2 [5.1.x] Updated Hypercorn links in docs/howto/deployment/asgi/hypercorn.txt.
Backport of 5a91ad3d7115c692d497663a155edee5ebc8989c from main.
2024-10-21 18:32:16 -03:00
Mariusz Felisiak
8d48fc035c [5.1.x] Updated tutorial part count from 7 to 8 in docs/intro/reusable-apps.txt.
Backport of f59cdd00093338427acde555c9b687acc5ac67ea from main.
2024-10-21 14:20:39 -03:00
Nick Pope
51eb666758 [5.1.x] Fixed #35841 -- Restored support for DB-IP databases in GeoIP2.
Thanks Felix Farquharson for the report and Claude Paroz for the
review.

Regression in 40b5b1596f7505416bd30d5d7582b5a9004ea7d5.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 3fad712a91a8a8f6f6f904aff3d895e3b06b24c7 from main.
2024-10-17 21:42:06 -03:00
Justin Thurman
3ba8b0dae8 [5.1.x] Fixed #35845 -- Updated DomainNameValidator to require entire string to be a valid domain name.
Bug in 4971a9afe5642569f3dcfcd3972ebb39e88dd457.

Thank you to kazet for the report and Claude Paroz for the review.

Backport of 99dcc59237f384d7ade98acfd1cae8d90e6d60ab from main.
2024-10-17 17:00:35 +02:00
Clifford Gama
9a5eae0ad8 [5.1.x] Fixed #26322 -- Consolidated lazy relationships details in docs/ref/models/fields.txt.
Reorganized docs to list and explain the types of lazy relationships
that can be defined in related fields.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 65f3cfce59395131f318cf1ecba144530ed6609e from main.
2024-10-17 11:42:54 -03:00
Maryam Yusuf
8ce0039cee [5.1.x] Expanded contributor docs on getting feedback from the wider community.
Backport of 438fc42ac667653488200578a47e59f6608f2b0b from main.
2024-10-16 13:25:43 +02:00
Mariusz Felisiak
6cb0757966 [5.1.x] Fixed docs build on Sphinx 8.1+.
Sphinx 8.1 added :cve: role, so there is no need to define it in Django:
- https://github.com/sphinx-doc/sphinx/pull/11781

This also changes used URL to the one used by Python and soonish to be
used by Sphinx itself:
- https://github.com/sphinx-doc/sphinx/pull/13006

Backport of 263f7319192b217c4e3b1eea0ea7809836392bbc from main.
2024-10-14 14:44:09 +02:00
Sarah Boyce
a9a7ef7762 [5.1.x] Fixed #35612 -- Added documentation on how the security team evaluates reports.
Co-authored-by: Joshua Olatunji <joshua+github@etentlabs.com>

Backport of 9423f8b47673779049f603a7da271d183de7dc1d from main.
2024-10-11 17:15:51 +02:00
Chiara Mezzavilla
b852989c30 [5.1.x] Explained exception to using include() within urlpatterns in tutorial 1.
Backport of 40a60d589e1d0d290c3b79c7e97d9cd0c94e52e3 from main.
2024-10-09 11:47:09 -03:00
Natalia
a313e203e0 [5.1.x] Refs #35502 -- Clarified models.py file path in docs/topics/db/queries.txt.
Backport of fc1119e8be705766b0277a0ebf8ad637f9d068c2 from main.
2024-10-09 09:13:58 -03:00
Meta
2bd546957d [5.1.x] Fixed #35502 -- Removed duplication of "mysite" directory name in intro docs.
Reorganized intro docs when explaining `django-admin startproject` to prevent
confusion when using "mysite" as both the top-level directory and the Django
project directory name.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
Co-authored-by: Carlton Gibson <carlton@noumenal.es>

Backport of d2c74cfb48a3d29159732fb98e3c28a53572067f from main.
2024-10-09 09:13:37 -03:00
Mariusz Felisiak
e2551b30ad [5.1.x] Refs #34900 -- Doc'd Python 3.13 compatibility.
Backport of 2e3bc59fd3760de87952ec8fd6cd3694e8d9dc1c from main.
2024-10-09 09:56:42 +02:00
Natalia
52f2996b9b [5.1.x] Added stub release notes for 5.1.3.
Backport of 4d11402932eca570850bdfa58a71eb59fc62275a from main.
2024-10-08 12:04:53 -03:00
Natalia
6e07a7769f [5.1.x] Added release date for 5.1.2.
Backport of 5bb433e99bc24625295e05448fdf173dc72028ad from main.
2024-10-08 11:39:02 -03:00
nessita
17fa7592af [5.1.x] Fixed #35809 -- Set background color for selected rows in the admin's form select widget.
Regression in b47bdb4cd9149ee2a39bf1cc9996a36a940bd7d9.

Thank you Giannis Terzopoulos for the review, and Tom Carrick and Sarah Boyce
for the review.

Backport of 679d57816d716cbc7cff3b364ae265d70444ebd9 from main.
2024-10-08 10:02:33 -03:00
nessita
e245f62d00
[5.1.x] Updated translations from Transifex. 2024-10-07 17:35:43 -03:00
nessita
6bedb102e9 [5.1.x] Reindented attributes and methods for classes in docs/ref/middleware.txt.
Backport of 1feedc8ef8a34484cb5afe33f5c45b543b860210 from main.
2024-10-02 14:21:43 -03:00
Aditya Chaudhary
bf64ac3567 [5.1.x] Fixed #35670 -- Clarified the return value for LoginRequiredMiddleware's methods.
Backport of efc3b0c627f7e3cb4e337280ecd2483758dcb0a5 from main.
2024-10-02 13:15:57 -03:00
Chiara Mezzavilla
53031136f5 [5.1.x] Relocated path() explanation to docs/ref/urls.txt to simplify tutorial 1.
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 73e8e811416dcb5007ad9cc9d1632aaca95bf302 from main.
2024-09-30 13:32:39 -03:00
John Parton
22bce642a9 [5.1.x] Fixed #35734 -- Used JSONB_BUILD_OBJECT database function on PostgreSQL when using server-side bindings.
Regression in 81ccf92f154c6d9eac3e30bac0aa67574d0ace15.

Backport of f22ff4561ada77be98ca4db3ce117caca897696e from main.
2024-09-26 16:22:59 +02:00
Sarah Boyce
9e146b27ad [5.1.x] Made cosmetic edits to the Steering council docs.
Backport of 39de2e97a06d0317973b280bc159ca6f89fc64e3 from main.
2024-09-23 12:53:17 +02:00
Sarah Boyce
251180f7f9 [5.1.x] Removed setting the release schedule from Steering Council prerogatives as per DEP 44.
Backport of 121747fdba5862ac8c4e26ec3b8f597385e9aa05 from main.
2024-09-21 15:10:22 +02:00
Carlton Gibson
d96b661135 [5.1.x] Fixed #35767 -- Adjusted customizing User model docs.
Backport of c0128e3a81cfb07238324b185958a88631e94963 from main.
2024-09-16 17:41:36 -03:00
Ronny V.
c12fe0a724 [5.1.x] Added example of email sending with additional capabilities to docs/topics/email.txt.
Co-authored-by: Mike Edmunds <medmunds@gmail.com>

Backport of f4813211e2d8017b56b7447f56ad17df3fae9aa3 from main.
2024-09-11 13:10:45 -03:00
Gastón Avila
590f5e09f0 [5.1.x] Fixed #35732 -- Wrapped ConcatPair expression in parentheses to ensure operator precedence.
When ConcatPair was updated to use || this lost the implicit wrapping from CONCAT(...).
This broke the WHERE clauses when used in combination with PostgreSQL trigram similarity.

Regression in 6364b6ee1071381eb3a23ba6b821fc0d6f0fce75.

Backport of c3ca6075cc0ad425bcf905fe14062f38eb9fbcbf from main.

Co-authored-by: Emiliano Cuenca <106986074+emicuencac@users.noreply.github.com>
2024-09-11 14:40:48 +02:00
Clifford Gama
bf45f06769 [5.1.x] Refs #35060 -- Fixed the update to update_fields in overridden save() method docs.
Regression in 3915d4c70d0d7673abe675525b58117a5099afd3.

Backport of 38c206515494cb28c48f77c10145a8aa9a172629 from main.
2024-09-11 13:25:21 +02:00
Jon Ribbens
d3da505999 [5.1.x] Fixed #35681 -- Corrected geoip2 docs when describing GeoIP2Exception.
Backport of 826ef006681eae1e9b4bd0e4f18fa13713025cba from main.
2024-09-07 00:04:59 -03:00
Mariatta
9da696f539 [5.1.x] Fixed #35737 -- Clarified where "models" comes from in tutorial 7.
Backport of 01a4d8a3c741b3129d481ef3515084a199d21222 from main.
2024-09-05 21:37:46 -03:00
SirenityK
76bbeee273 [5.1.x] Updated instruction for deploying with Uvicorn and Gunicorn.
Backport of 03d52d2a52af89381ee5b1030c672f0daf27be12 from main.
2024-09-05 18:33:52 -03:00
Natalia
1b7b5e0d17 [5.1.x] Added CVE-2024-45230 and CVE-2024-45231 to security archive.
Backport of aa5293068782dfa2d2173c75c8477f58a9989942 from main.
2024-09-03 11:24:09 -03:00
Natalia
669bc196c9 [5.1.x] Added stub release notes for 5.1.2.
Backport of 60073a3e6bece123b95b226d191873e81b54aab1 from main.
2024-09-03 10:02:23 -03:00
Natalia
3c733c78d6 [5.1.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.
On successful submission of a password reset request, an email is sent
to the accounts known to the system. If sending this email fails (due to
email backend misconfiguration, service provider outage, network issues,
etc.), an attacker might exploit this by detecting which password reset
requests succeed and which ones generate a 500 error response.

Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam
Johnson, and Sarah Boyce for the reviews.
2024-09-03 09:24:21 -03:00
Sarah Boyce
022ab0a75c [5.1.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and urlizetrunc template filters.
Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.
2024-09-03 09:24:13 -03:00
Sarah Boyce
6203965960 [5.1.x] Fixed #35716 -- Fixed VariableDoesNotExist when rendering admin fieldsets.
Regression in 01ed59f753139afb514170ee7f7384c155ecbc2d.

Thank you to Fábio Domingues and Marijke Luttekes for the report,
and thank you to Natalia Bidart for the review.

Backport of fd1dd767783b5a7ec1a594fcc5885e7e4178dd26 from main.
2024-08-30 20:52:41 +02:00
Sarah Boyce
26c06671d9 [5.1.x] Fixed #35688 -- Restored timezone and role setters to be PostgreSQL DatabaseWrapper methods.
Following the addition of PostgreSQL connection pool support in
Refs #33497, the methods for configuring the database role and timezone
were moved to module-level functions. This change prevented subclasses
of DatabaseWrapper from overriding these methods as needed, for example,
when creating wrappers for other PostgreSQL-based backends.

Thank you Christian Hardenberg for the report and to
Florian Apolloner and Natalia Bidart for the review.

Regression in fad334e1a9b54ea1acb8cce02a25934c5acfe99f.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 7380ac57340653854bc2cfe0ed80298cdac6061d from main.
2024-08-28 19:25:55 -03:00
Adam Johnson
fcb71a76cc [5.1.x] Removed outdated note about lack of subquery support in MySQL.
Backport of 26a67943ac5c2f196621220b24f4314d84471d07 from main.
2024-08-28 15:56:35 -03:00
Jacob Walls
9b09a4fd95 [5.1.x] Fixed typos in docs/howto/initial-data.txt.
Backport of 920efe503f8a1b16a497a792075c987080f3280a from main.
2024-08-28 15:26:55 -03:00
Simon Charette
9a461cae3e [5.1.x] Fixed #35666 -- Documented stacklevel usage and testing, and adjusted test suite accordingly.
Over the years we've had multiple instances of hit and misses when
emitting warnings: either setting the wrong stacklevel or not setting
it at all.

This work adds assertions for the existing warnings that were declaring
the correct stacklevel, but were lacking tests for it.

Backport of 57307bbc7d88927989cf5b314f16d6e13ade04e6 from main.
2024-08-28 11:47:15 -03:00
Simon Charette
dd58edcc37 [5.1.x] Refs #35405 -- Adjusted deprecation warning stacklevel in FieldCacheMixin.get_cache_name().
Backport of 39abd56a7fb1e2f735040df0fdfc08f57d91a49b from main.
2024-08-28 11:46:49 -03:00
Simon Charette
8f5d2c374a [5.1.x] Refs #35326 -- Adjusted deprecation warning stacklevel in FileSystemStorage.OS_OPEN_FLAGS.
Backport of 47f18a722624527cc72eef44cfc9d1e07ea4b4e0 from main.
2024-08-28 11:46:23 -03:00
Simon Charette
c87007ab60 [5.1.x] Refs #35060 -- Adjusted deprecation warning stacklevel in Model.save()/asave().
Backport of 52ed2b645e1dd8c9a874cfd21c4c9f2500032626 from main.
2024-08-28 11:45:35 -03:00
Mariusz Felisiak
625aab3aea [5.1.x] Fixed typo in docs/ref/models/expressions.txt.
Backport of fed11ba4617a5fa151bbabb91eb27ec01dd7c942 from main.
2024-08-28 09:09:16 -03:00
Natalia
f362c3dea2 [5.1.x] Fixed grammatical error in stub release notes for upcoming security release.
Backport of b941de340daed4ce88f04a8012b9dba00ccb1359 from main.
2024-08-27 09:49:52 -03:00