1
0
mirror of https://github.com/django/django.git synced 2025-04-02 20:46:41 +00:00

4298 Commits

Author SHA1 Message Date
Kamil Turek
e03cdf76e7 Fixed -- Allowed ModelForm meta to specify form fields. 2022-08-08 09:46:05 +02:00
Fiza Ashraf
c0beff2123 Fixed -- Fixed migration crash when removing indexed field on SQLite 3.35.5+.
Regression in 702819227fd0cdd9b581cd99e11d1561d51cbeb.

Thanks cessor for the report.
2022-08-08 06:28:53 +02:00
Mariusz Felisiak
fd93db97c7
Fixed -- Fixed Window() expression crash with ArrayAgg().
Thanks Kia for the report.

Regression in e06dc4571ea9fd5723c8029959b95808be9f8812.
2022-08-06 17:59:31 +02:00
Fab
0756c61f2a Fixed -- Reverted "Fixed -- Prevented double submission of admin forms."
Regression in fe7dbef5867c577995f0fc849d8dfdb8f2e6bbfa.
2022-08-05 16:38:52 +02:00
Mariusz Felisiak
d4db417c8e
Fixed -- Fixed test command crash when running in parallel using spawn.
Thanks Kevin Renskers for the report.

Regression in 41c4cb253c137edf5a96b7408ea55d57d6e0602a.
2022-08-04 09:16:38 +02:00
Claude Paroz
0638b4e23d Fixed -- Fixed get_select2_language() crash with no language activated.
Regression in 3079133c73f3b8b0e929673b06b62dce1f54be71.
2022-08-03 19:51:25 +02:00
NOTHING
a2792d09ad
Fixed typo in docs/releases/4.2.txt. 2022-08-03 18:40:42 +02:00
Aarni Koskela
e7afb8a180 Fixed -- Reallowed using GeoIP2() when GEOS is not installed.
Regression in 31bef51d8ea5e3bf650de1495ae1f0566670b8f3.
2022-08-03 16:55:23 +02:00
Mariusz Felisiak
cb791a2540
Fixed -- Deprecated django.contrib.postgres.fields.CIText/CICharField/CIEmailField/CITextField. 2022-08-03 11:42:51 +02:00
Carlton Gibson
09e837c5d9 Added stub release notes for 4.1.1. 2022-08-03 10:52:38 +02:00
Carlton Gibson
a4cb1dae63 Updated release notes for Django 4.1 release. 2022-08-03 10:26:00 +02:00
Carlton Gibson
57c7220280 Added CVE-2022-36359 to security archive. 2022-08-03 09:09:48 +02:00
Carlton Gibson
bd062445cf Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.
Thanks to Motoyasu Saburi for the report.
2022-08-03 08:46:31 +02:00
Carlton Gibson
9062c23de8 Adjusted version 4.0.7 release notes. 2022-08-03 08:36:32 +02:00
Sarah Abderemane
bc7aa2a5e9 Fixed -- Added switch button for dark mode in the admin. 2022-08-02 17:14:24 +02:00
Claude Paroz
44c24bf028 Refs -- Removed inline CSS in the openlayers widget template. 2022-08-01 20:29:49 +02:00
Claude Paroz
1e5bbbb2a8 Fixed -- Allowed GeoIP2 to use DB-IP Lite datasets. 2022-07-30 19:29:45 +02:00
Carlton Gibson
cadd864f68 Adjusted release notes for 4.0.7 and 3.2.15. 2022-07-27 10:03:06 +02:00
Carlton Gibson
0c1675781e Added release date and stub release notes for 4.0.7 and 3.2.15 releases. 2022-07-27 09:23:40 +02:00
Mariusz Felisiak
7e3c9c3205 Refs -- Doc'd that AlterIndexTogether is no longer officially supported for Django 4.2+ migration files. 2022-07-26 11:42:54 +02:00
Mariusz Felisiak
a1e9e9abc5 Refs -- Reverted "Refs -- Added generic mechanism to handle the deprecation of migration operations."
This reverts commit 41019e48bbf082c985e6ba3bad34d118b903bff1.
2022-07-26 11:41:19 +02:00
Mariusz Felisiak
c773d5794e Refs -- Reverted AlterIndexTogether deprecation.
This partly reverts a6385b382e05a614a99e5a5913d8e631823159a2.
2022-07-26 11:41:19 +02:00
Claude Paroz
2d23a07817 Fixed -- Added pathlib.Path support to GDALRaster constructor. 2022-07-25 20:48:33 +02:00
Claude Paroz
3b79dab19a Refs -- Deprecated insecure password hashers.
SHA1PasswordHasher, UnsaltedSHA1PasswordHasher, and UnsaltedMD5PasswordHasher
are now deprecated.
2022-07-23 21:29:31 +02:00
Nick Pope
4d4bf55e0e Fixed -- Deprecated length_is template filter. 2022-07-23 12:36:21 +02:00
cheng
d4c5d2b52c Fixed -- Marked {% blocktranslate asvar %} result as HTML safe. 2022-07-14 11:09:19 +02:00
David Wobrock
a6385b382e
Fixed -- Deprecated Meta.index_together in favor of Meta.indexes.
This also deprecates AlterIndexTogether migration operation.
2022-07-12 09:04:31 +02:00
Mariusz Felisiak
5e2f4ddf29
Refs CVE-2022-34265 -- Unified DatabaseOperations._convert_*_to_tz() hook names. 2022-07-09 13:02:07 +02:00
Mariusz Felisiak
eb3699ea77
Fixed -- Dropped support for MySQL 5.7. 2022-07-08 13:30:12 +02:00
David Wobrock
41019e48bb Refs -- Added generic mechanism to handle the deprecation of migration operations. 2022-07-08 07:05:55 +02:00
Simon Charette
877c800f25 Refs CVE-2022-34265 -- Properly escaped Extract() and Trunc() parameters.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2022-07-06 07:40:07 +02:00
Mariusz Felisiak
d12d7c4c42 Added CVE-2022-34265 to security archive. 2022-07-04 10:27:14 +02:00
Mariusz Felisiak
c6932ea2ea Added stub release notes for 4.0.7. 2022-07-04 10:06:07 +02:00
Mariusz Felisiak
54eb8a374d Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.
Thanks Takuto Yoshikai (Aeye Security Lab) for the report.
2022-07-04 08:13:41 +02:00
Michael Manfre
03eec9ff6c Updated vendored _urlsplit() to strip newline and tabs.
Refs Python CVE-2022-0391. Django is not affected, but others who
incorrectly use internal function url_has_allowed_host_and_scheme()
with unsanitized input could be at risk.
2022-07-01 08:48:38 +02:00
Mariusz Felisiak
154dd1c0ed
Refs -- Added backward incompatibility note about removing multipartparser.parse_header(). 2022-06-28 21:45:03 +02:00
Hrushikesh Vaidya
72e41a0df6 Fixed -- Allowed customizing encoder class in django.utils.html.json_script(). 2022-06-28 10:54:38 +02:00
Mariusz Felisiak
b2eff16806 Added stub release notes and release date for 4.0.6 and 3.2.14. 2022-06-27 07:13:26 +02:00
Mariusz Felisiak
a0608c4b11
Fixed -- Doc'd changes in quoting table/column names on Oracle in Django 4.0.
Thanks Paul in 't Hout for the report.

Regression in 1f643c28b5f2b039c47155692844dbae1cb091cd.
2022-06-21 09:09:41 +02:00
Anv3sh
d7f5bfd241 Fixed -- Fixed pickling HttpResponse and subclasses. 2022-06-20 08:51:26 +02:00
Matt Brewer
8d160f154f Fixed -- Added TrigramStrictWordSimilarity() and TrigramStrictWordDistance() on PostgreSQL. 2022-06-17 11:14:30 +02:00
David Wobrock
e286ce17ff Fixed -- Added --update option to makemigrations command. 2022-06-17 07:50:39 +02:00
Carlton Gibson
2a2bde52f3 Updated asgiref dependency for 4.1 release series. 2022-06-16 12:13:15 +02:00
Ronnie van den Crommenacker
c32858a8ce Fixed -- Improved locale format validation for the makemessages command. 2022-06-08 16:17:12 +02:00
Ciaran McCormick
286e7d076c Fixed -- Deprecated BaseUserManager.make_random_password(). 2022-06-03 07:30:57 +02:00
Samir Shah
6f73eb9d90 Fixed -- Added id to GeoJSON serializer. 2022-06-01 19:11:26 +02:00
Carlton Gibson
d5bc362030 Added stub release notes for 4.0.6. 2022-06-01 14:36:22 +02:00
Carlton Gibson
40bf34a92f Updated release date for Django 4.0.5. 2022-06-01 12:25:33 +02:00
Mariusz Felisiak
ac90529cc5 Fixed docs build with sphinxcontrib-spelling 7.5.0+.
sphinxcontrib-spelling 7.5.0+ includes captions of figures in the set
of nodes for which the text is checked.
2022-05-31 11:17:01 +02:00
Mariusz Felisiak
90aabd730a
Fixed -- Doc'd exclude argument changes in model validation.
Thanks אורי for the report.

Follow up to 1ea7e3157d1f9b4db71e768d75ea57e47dbd49f9.
2022-05-24 10:02:53 +02:00