mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity
32,696 Commits 30 Branches 460 Tags
c4d3434ea093aa75a49f8cc1bbf22536f0c24871
Commit Graph

4803 Commits

Author SHA1 Message Date
Mariusz Felisiak
3f41d6d629 Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri(). 
Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.

Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
 2023-09-04 11:58:37 +02:00
Sulabh Katila
9a9620dda6 Fixed #34768 -- Avoided initializing colorama on non-Windows platforms. 2023-09-01 11:26:29 +02:00
willzhao
9cc0d7f7f8 Fixed #34803 -- Fixed queryset crash when filtering againts deeply nested OuterRef annotations. 
Thanks Pierre-Nicolas Rigal for the report.

Regression in c67ea79aa9.
 2023-09-01 10:44:20 +02:00
David Smith
74b5074174 Fixed #34210 -- Added unittest's durations option to the test runner. 2023-08-31 07:14:58 +02:00
David Smith
27b399d235 Fixed #34547 -- Deprecated DatabaseOperations.field_cast_sql(). 2023-08-31 06:18:07 +02:00
Nick Pope
500e01073a Fixed #31262 -- Added support for mappings on model fields and ChoiceField's choices. 2023-08-30 22:57:40 -03:00
Olivier Tabone
3f8dbe267d Fixed #34757 -- Added support for following redirects to AsyncClient. 2023-08-30 06:12:25 +02:00
Mariusz Felisiak
24f1a38b37 Added stub release notes and release date for 4.2.5, 4.1.11, and 3.2.21. 2023-08-28 06:10:20 +02:00
Mariusz Felisiak
11920e7795 Fixed #34709 -- Raised BadRequest for non-UTF-8 requests with the application/x-www-form-urlencoded content type. 
Thanks Eki Xu for the report.
 2023-08-25 21:27:22 +02:00
François Freitag
b7fe36ad37 Refs #34730 -- Made Message importable from django.contrib.messages. 2023-08-25 06:55:12 +02:00
Florian Zimmermann
fbd16438f4 Fixed #33143 -- Raised RuntimeWarning when performing import-time queries. 2023-08-21 13:44:25 +02:00
Juan Alvarez
517d3bb4dd Fixed #34779 -- Avoided unnecessary selection of non-nullable m2m fields without natural keys during serialization. 
By using `select_related(None)` instead of `select_related()`, the
unnecessary joins are completely avoided. Note that the current tests
already covers the change, when the field is not `null=True`.

Regression in f9936deed1.
 2023-08-19 10:29:43 +02:00
Mariusz Felisiak
6b965c6000 Fixed #34773 -- Fixed syncing DEFAULT_FILE_STORAGE/STATICFILES_STORAGE settings with STORAGES. 
Thanks Petr Dlouhý for the report.

Bug in 32940d390a.
 2023-08-18 18:11:24 +02:00
Azat
d25f389211 Added Uyghur language. 2023-08-12 20:37:15 +02:00
Jingbei Li
9946f0b0d9 Fixed #33817 -- Added support for python-oracledb and deprecated cx_Oracle. 2023-08-10 10:11:53 +02:00
Mariusz Felisiak
80a5667c50 Refs #34233 -- Bumped required cx_Oracle to 8.3. 
This bumps minimum supported versions of cx_Oracle to the first release
to support Python 3.10.
 2023-08-09 12:41:47 +02:00
Olivier Tabone
0f3b1a783d Fixed #34739 -- Added GEOSGeometry.equals_identical() method. 2023-08-05 18:23:38 +02:00
Simon Charette
3434dbd39d Fixed #34754 -- Fixed JSONField check constraints validation on NULL values. 
The __isnull lookup of JSONField must special case
Value(None, JSONField()) left-hand-side in order to be coherent with
its convoluted null handling.

Since psycopg>=3 offers no way to pass a NULL::jsonb the issue is
resolved by optimizing IsNull(Value(None), True | False) to
True | False.

Regression in 5c23d9f0c3.

Thanks Alexandre Collet for the report.
 2023-08-04 10:14:03 +02:00
Mariusz Felisiak
2b582387d5 Fixed #34760 -- Dropped support for SQLite < 3.27. 2023-08-04 06:35:13 +02:00
Olivier Tabone
f46a6b2816 Fixed #34686 -- Added support for GEOS 3.12. 2023-08-04 05:53:29 +02:00
Mariusz Felisiak
b719688b21 Fixed #34761 -- Dropped support for MySQL < 8.0.11. 2023-08-03 18:54:29 +02:00
Albert Defler
7cd187a5ba Fixed #33507 -- Used UUID data type on MariaDB 10.7+. 
Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
 2023-08-02 14:11:04 +02:00
Natalia
24068058a6 Added stub release notes for 4.2.5. 2023-08-01 14:52:36 -03:00
Natalia
c8d7a5491e Added release date for 4.2.4. 2023-08-01 13:30:05 -03:00
Mariusz Felisiak
c9b9a52edc Fixed #34750 -- Fixed QuerySet.count() when grouping by unused multi-valued annotations. 
Thanks Toan Vuong for the report.
Thanks Simon Charette for the review.

Regression in 59bea9efd2.
 2023-08-01 16:16:28 +02:00
Gregor Jerše
10725a3187 Fixed #32820 -- Added aria-invalid="true" to fields with errors. 
Co-authored-by: Demetris Stavrou <demestav@gmail.com>
Co-authored-by: David Smith <smithdc@gmail.com>
 2023-08-01 06:08:04 +02:00
John Parton
fff14736f1 Fixed #34331 -- Added QuerySet.aiterator() support for prefetch_related(). 2023-07-31 21:17:36 +02:00
Simon Charette
4087367ba8 Fixed #34748 -- Fixed queryset crash when grouping by a reference in a subquery. 
Regression in dd68af62b2.

Thanks Toan Vuong for the report.
 2023-07-29 16:08:20 +02:00
Olivier Tabone
b9473cac65 Fixed #34714 -- Added aget_object_or_404()/aget_list_or_404() shortcuts. 2023-07-24 07:37:54 +02:00
Mariusz Felisiak
02376f1f53 Added missing backticks in docs. 2023-07-21 12:54:38 +02:00
Simon Charette
595a2abb58 Fixed #34701 -- Added support for NULLS [NOT] DISTINCT on PostgreSQL 15+. 2023-07-19 21:42:27 +02:00
Simon Charette
68912e4f6f Fixed #34717 -- Fixed QuerySet.aggregate() crash when referencing window functions. 
Regression in 59bea9efd2.

Refs #28477.

Thanks younes-chaoui for the report.
 2023-07-19 08:21:33 +02:00
Thomas Chaumeny
89c7454dbd Fixed #34698 -- Made QuerySet.bulk_create() retrieve primary keys when updating conflicts. 2023-07-10 13:17:28 +02:00
Ben Lomax
b7a17b0ea0 Refs #31949 -- Made @vary_on_(cookie/headers) decorators work with async functions. 2023-07-10 11:43:36 +02:00
Ben Lomax
953f81e078 Refs #31949 -- Made @csrf_exempt decorator to work with async functions. 2023-07-10 07:55:02 +02:00
Andrew Northall
6d427288e4 Fixed #34688 -- Removed contrib.sitemaps.ping_google() and ping_google management command. 
Thanks Joachim Jablon for the report.

Google has deprecated the sitemap ping endpoint, and will be removing
it in 6 months ~January 2024.
 2023-07-10 05:59:35 +02:00
Mariusz Felisiak
2584783f46 Refs #9602 -- Moved AlreadyRegistered/NotRegistered exceptions to django.contrib.admin.exceptions. 2023-07-07 13:22:06 +02:00
Mariusz Felisiak
f64fd47a76 Fixed #9602 -- Added AdminSite.get_model_admin(). 
This allows retrieving an admin class for the given model class without
using internal attributes.
 2023-07-07 08:06:01 +02:00
Gregor Jerše
966ecdd482 Fixed #32819 -- Established relationship between form fields and their help text. 
Thanks Nimra for the initial patch.

Thanks Natalia Bidart, Thibaud Colas, David Smith, and Mariusz Felisiak
for reviews.
 2023-07-06 08:03:19 +02:00
Mariusz Felisiak
393b8324b3 Added stub release notes for 4.2.4. 2023-07-03 10:33:50 +02:00
Mariusz Felisiak
1d6fbf16f2 Added CVE-2023-36053 to security archive. 2023-07-03 10:19:13 +02:00
Mariusz Felisiak
ad0410ec4f Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator. 
Thanks Seokchan Yoon for reports.
 2023-07-03 08:16:55 +02:00
Mariusz Felisiak
953f29f700 Fixed #34572 -- Added support for GDAL 3.7. 
Co-authored-by: Michael Howitz <mh@gocept.com>
 2023-06-30 06:03:08 +02:00
Akash Kumar Sen
a40b0103bc Fixed #30382 -- Allowed specifying parent classes in force_insert of Model.save(). 2023-06-29 21:52:52 +02:00
Mariusz Felisiak
601ffb0da3 Fixed #34685 -- Dropped support for GEOS 3.6 and 3.7. 2023-06-29 21:45:36 +02:00
Mariusz Felisiak
6a523500af Fixed #34684 -- Dropped support for GDAL 2.2 and 2.3. 2023-06-29 09:11:30 +02:00
Jon Janzen
5e98959d92 Fixed #34391 -- Added async-compatible interface to auth functions and related methods test clients. 2023-06-27 11:17:17 +02:00
Mariusz Felisiak
2360ba2274 Added stub release notes and release date for 4.2.3, 4.1.10, and 3.2.20. 2023-06-26 14:35:13 +02:00
Mariusz Felisiak
370a021780 Refs #34233 -- Bumped minimum supported version of Selenium to 4.8.0. 
This bumps minimum supported versions of selenium to the first release
to support Python 3.10.
 2023-06-26 14:22:54 +02:00
th3nn3ss
3152f9de47 Refs #31949 -- Made http decorators to work with async functions. 2023-06-26 09:29:04 +02:00