1
0
mirror of https://github.com/django/django.git synced 2025-07-19 09:09:13 +00:00

3437 Commits

Author SHA1 Message Date
Carlton Gibson
af1999dd33 [3.0.x] Added release date for 3.0.3.
Backport of 1a2600d8dfe86eb0fd0952a8c86107ab20323847 from master
2020-02-03 08:53:28 +01:00
Simon Charette
505826b469 [3.0.x] Fixed CVE-2020-7471 -- Properly escaped StringAgg(delimiter) parameter. 2020-02-03 08:32:54 +01:00
Mariusz Felisiak
27e4ebc0ba [3.0.x] Refs #25778 -- Updated some links to HTTPS and new locations.
Backport of 0ac8ac8b0dece68072548900e992fc31493154c1 from master
2020-01-29 09:35:45 +01:00
Eugene Hatsko
a56e45a2bf [3.0.x] Fixed #31190 -- Fixed prefetch_related() crash for GenericForeignKey with custom ContentType foreign key.
Regression in dffa3e1992562ba60512d96d1eb5859ffff2ceb5.

Backport of 0b013564ef0609d95b1d263626f2e15bccda1a50 from master
2020-01-22 08:25:23 +01:00
Carlton Gibson
57468eaff3 [3.0.x] Fixed #31124 -- Fixed setting of get_FOO_display() when overriding inherited choices.
Regression in 2d38eb0ab9f78d68c083a5b78b1eca39027b279a

Backport of 29c126bb349526b5f1cd78facbe9f25906f18563 from master
2020-01-15 15:36:28 +01:00
Carlton Gibson
6aac9f6b11 [3.0.x] Refs #31097 -- Added release notes for 2f565f84aca136d9cc4e4d061f3196ddf9358ab8.
.

Backport of 927c903f3cd25c817c21738328b53991c035b415 from master
2020-01-14 14:36:25 +01:00
Mariusz Felisiak
92866682c6 [3.0.x] Fixed #31155 -- Fixed a system check for the longest choice when a named group contains only non-string values.
Regression in b6251956b69512bf230322bd7a49b629ca8455c6.

Thanks Murat Guchetl for the report.
Backport of 6f7998adc784032f4b8918ca2eea27537ea4cbbe from master
2020-01-11 19:49:38 +01:00
Adam Johnson
16297e7d5e [3.0.x] Fixed #31154 -- Added support for using enumeration types in templates.
Enumeration helpers are callables, so the template system tried to call
them with no arguments.

Thanks Rupert Baker for helping discover this.

Backport of 5166097d7c80cab757e44f2d02f3d148fbbc2ff6 from master
2020-01-10 09:13:36 +01:00
Mariusz Felisiak
0379da59bd [3.0.x] Fixed #31141 -- Relaxed system check of translation settings for sublanguages.
Regression in 4400d8296d268f5a8523cd02ddc33b12219b2535.

Thanks Enrique Matías Sánchez for the report.
Backport of 53d8646f799de7f92ab9defe9dc56c6125448102 from master
2020-01-08 08:06:33 +01:00
Mariusz Felisiak
4f81f6d236 [3.0.x] Fixed #31136 -- Disabled grouping by aliases on QuerySet.values()/values_list().
Regression in fb3f034f1c63160c0ff13c609acd01c18be12f80.

Thanks Sigurd Ljødal for the report.
Backport of 0f843fdd5b9b2f2307148465cd60f4e1b2befbb4 from master
2020-01-04 20:49:43 +01:00
Simon Charette
02cda09b13 [3.0.x] Fixed #31133 -- Fixed crash when subtracting against a subquery annotation.
The subtract_temporals() database operation was not handling expressions
returning SQL params in mixed database types.

Regression in 35431298226165986ad07e91f9d3aca721ff38ec.

Thanks Reupen Shah for the report.

Backport of 9bcbcd599abac91ea853b2fe10b784ba32df043e from master
2020-01-03 10:35:44 +01:00
Mariusz Felisiak
eb94e7ad6b [3.0.x] Added stub release notes for 3.0.3.
Backport of 69331bb851c34f05bc77e9fc24020fe6908b9cd5 from master
2020-01-02 08:41:58 +01:00
Mariusz Felisiak
5738364fd6 [3.0.x] Added release date for 3.0.2.
Backport of 434a81d320d1352b7c5db49800a99d0b285eefed from master
2020-01-02 07:57:28 +01:00
Simon Charette
a04e6fb355 [3.0.x] Refs #29260 -- Doc'd Model.save() behavior change in Django 3.0.
Backport of 9e14bc2135cb806b66374bac791c79344fff4ded from master
2019-12-30 08:30:49 +01:00
Simon Charette
7db4ab8439 [3.0.x] Fixed #31071 -- Disabled insert optimization for primary keys with defaults when loading fixtures.
Model.save_base() is called directly when loading fixtures and assumes
existing rows will be updated. Branching of "raw" allows to maintain
the optimization introduced in #29260 while supporting this edge case.

Regression in 85458e94e38c20e57939947ee515a1a53689659f.

Thanks Reupen Shah for the report.

Backport of 5779cc938a34eb96815c7a40ded2c8f6c8087c58 from master
2019-12-30 08:30:44 +01:00
Mariusz Felisiak
0f8041abd5 [3.0.x] Fixed #31106 -- Fixed migrations crash on PostgreSQL 10+ when adding FK constraints inline and changing data.
This allows adding foreign key constraints inline and changing data in
the same migration on PostgreSQL 10+.

Regression in 738faf9da2a5cd03148a36375db80746c99c9623.

Thanks Janne Rönkkö for the report and Simon Charette for the
implementation idea and review.
Backport of 22ce5d0031bd795ade081394043833e82046016c from master
2019-12-23 23:30:30 +01:00
Simon Charette
7b065c41e4 [3.0.x] Fixed #31109 -- Disabled grouping by aliases on QuerySet.exists().
Clearing the SELECT clause in Query.has_results was orphaning GROUP BY
references to it.

Thanks Thierry Bastian for the report and Baptiste Mispelon for the
bisect.

Regression in fb3f034f1c63160c0ff13c609acd01c18be12f80.

Backport of 720de4d0441fcfdb543051389c70efbe66ed962a from master
2019-12-23 09:24:37 +01:00
Simon Charette
fd9050589f [3.0.x] Fixed #31094 -- Included columns referenced by subqueries in GROUP BY on aggregations.
Thanks Johannes Hoppe for the report.

Regression in fb3f034f1c63160c0ff13c609acd01c18be12f80.

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of 5a4d7285bd10bd40d9f7e574a7c421eb21094858 from master
2019-12-19 11:10:33 +01:00
Mariusz Felisiak
efd9302b14 [3.0.x] Added stub release notes for 3.0.2.
Backport of 50a69efb2e73ab8b3ef26042d4579e8ade950c37 from master
2019-12-18 10:52:37 +01:00
Mariusz Felisiak
f21c132cd4 [3.0.x] Added CVE-2019-19844 to the security archive.
Backport of 5a2b9f0b546222e928df91310acb9cf363a6c920 from master
2019-12-18 10:38:37 +01:00
Simon Charette
302a4ff1e8 [3.0.x] Fixed CVE-2019-19844 -- Used verified user email for password reset requests.
Backport of 5b1fbcef7a8bec991ebe7b2a18b5d5a95d72cb70 from master.

Co-Authored-By: Florian Apolloner <florian@apolloner.eu>
2019-12-18 09:14:44 +01:00
Hasan Ramezani
6cb30414bc [3.0.x] Fixed #31069, Refs #26431 -- Doc'd RegexPattern behavior change in passing optional named groups in Django 3.0.
Backport of 9736137cdc4b7528a0aca17415dc9798660eed81 from master
2019-12-12 14:49:13 +01:00
Hasan Ramezani
79c92fc7b6 [3.0.x] Fixed typos in 3.0 release notes and docs/ref/request-response.txt.
Backport of 52018e1615edfafcb5170ba6b473132fe2f9a534 from master
2019-12-12 10:19:38 +01:00
Mariusz Felisiak
f4baf2fdf6 [3.0.x] Refs #31073 -- Added release notes for 02eff7ef60466da108b1a33f1e4dc01eec45c99d.
Backport of ec12c37384798093e359971c8980fe0c68d555bc from master
2019-12-11 10:08:32 +01:00
Ali Mirlou
314cb3a976 [3.0.x] Fixed typo in docs/releases/3.0.1.txt.
Backport of 663bb435deb1d6c407818dacfdcddd458e9b60c6 from master
2019-12-09 07:58:33 +01:00
Alex Aktsipetrov
8af07712df [3.0.x] Fixed #31060 -- Reallowed window expressions to be used in conditions outside of queryset filters.
Regression in 4edad1ddf6203326e0be4bdb105beecb0fe454c4.

Thanks utapyngo for the report.

Backport of bf12273db4e53779546e2ac7b65c0ce8e3c8a640 from master.
2019-12-06 15:28:23 +01:00
Mariusz Felisiak
e986e49e66 [3.0.x] Fixed #31061 -- Ignored positional args in django.urls.resolve() when all optional named parameters are missing.
Regression in 76b993a117b61c41584e95149a67d8a1e9f49dd1.

Thanks Claude Paroz for the report and Carlton Gibson for reviews.
Backport of 82a88d2f48e13ef5d472741d5ed1c183230cfe4c from master
2019-12-06 09:33:45 +01:00
jsals1
7263c7710c [3.0.x] Fixed typo in docs/releases/3.0.txt.
Backport of 1f62c008d1c983b4e5450a8764605aa6246e1cb4 from master
2019-12-05 07:55:56 +01:00
Mariusz Felisiak
cc64b1d8f3 [3.0.x] Fixed #31059 -- Fixed typo in docs/releases/3.0.txt.
Backport of 95ae1a9f8caf9c63c14c1a7c3e15594d3181b3ca from master
2019-12-04 09:25:00 +01:00
Andrew Godwin
9243435b5e [3.0.x] Fixed #31056 -- Allowed disabling async-unsafe check with an environment variable.
Backport of c90ab30fa1305481024b9c3c50b5a6ed6cd9a2f5 from master
2019-12-03 17:50:24 +01:00
Mariusz Felisiak
7ec5962638 [3.0.x] Added stub release notes for 3.0.1.
Backport of 908c67e719a54b8b612cb7df732126f42350f3fa from master
2019-12-02 21:47:49 +01:00
Carlton Gibson
f3da0836ff [3.0.x] Finalized release notes for Django 3.0.
Backport of 3b347a8a00273e9cc2fd9d4a5c61569c08398769 from master
2019-12-02 11:55:06 +01:00
Carlton Gibson
d13ba5502d [3.0.x] Added CVE-2019-19118 to the security archive.
Backport of 900ea762e5d1342e84a645483d05b90e6d908f2d from master
2019-12-02 11:42:52 +01:00
Carlton Gibson
5fca551f12 [3.0.x] Removed issue reporter name from 2.1.15 and 2.2.8 release notes.
Backport of 368b8d20aaa16f0ef763759a0a87d986ef460584 from master
2019-12-02 09:48:14 +01:00
Carlton Gibson
46491e8095 [3.0.x] Added release dates for 2.1.15, 2.2.8 and 3.0.
Backport of e31d1852671866f6e52d55f9b7925ecad711fcf5 from master
2019-12-02 09:11:31 +01:00
Carlton Gibson
092cd66cf3 Fixed CVE-2019-19118 -- Required edit permissions on parent model for editable inlines in admin.
Thank you to Shen Ying for reporting this issue.
2019-12-02 08:57:44 +01:00
Mariusz Felisiak
db0cc4ae96 [3.0.x] Refs #30953 -- Added 2.1.15 release note for 0107e3d1058f653f66032f7fd3a0bd61e96bf782.
Backport of 39e39d0ac1b720e7460ec8ccf45926c78edb2047 from master
2019-12-02 08:12:10 +01:00
Mariusz Felisiak
f4ed6800bd [3.0.x] Fixed #30953 -- Made select_for_update() lock queryset's model when using "self" with multi-table inheritance.
Thanks Abhijeet Viswa for the report and initial patch.
Backport of 0107e3d1058f653f66032f7fd3a0bd61e96bf782 from master
2019-12-02 07:58:04 +01:00
Mariusz Felisiak
ca9144a4a8 [3.0.x] Fixed #31021 -- Fixed proxy model permissions data migration crash with a multiple databases setup.
Regression in 98296f86b340c8c9c968375d59f1d3a3479e60c2.

Backport of e8fcdaad5c428878d0a5d6ba820d957013f75595 from master
2019-11-29 11:10:36 +01:00
Sergey Fedoseev
314ad45c09 [3.0.x] Used 🎫 role in all tickets links.
Backport of abc51d44afcb8482c64c0bb8c1022f11e7eb2bbb from master
2019-11-26 14:43:27 +01:00
Baptiste Mispelon
3ed55606c4 [3.0.x] Fixed #31031 -- Fixed data loss in admin changelist view when formset's prefix contains regex special chars.
Regression in b18650a2634890aa758abae2f33875daa13a9ba3.

Backport of 52936efacec4df05df2d9872c09c3332335bf21b from master
2019-11-26 09:19:19 +01:00
Carlton Gibson
947f8e3485 [3.0.x] Fixed #31012 -- Reverted "Fixed #29056 -- Fixed HTML5 validation of required SelectDateWidget."
This reverts commit f038214d917c982613f5a15db8dfe325b1f7479b.

The initial issue was incorrect. Django 2.2, and before, did not
generate invalid HTML as reported. With f03821 in place invalid HTML
was generated.

Thanks to Kevin Brown for follow-up report and investigation.
Backport of ee4a19053a32d41cdd79e087b1968980804ce658 from master
2019-11-21 21:06:07 +01:00
Hasan Ramezani
6e3ef98413 [3.0.x] Fixed #30625 -- Doc'd cache.get()/delete() behavior change in Django 2.2.
Backport of f69b32782e21642c6184162d888fcc17dd1dd85e from master
2019-11-21 10:54:46 +01:00
Mariusz Felisiak
2ef484ba3b [3.0.x] Added stub release notes for 2.1.15.
Backport of e9def97d1095efed15a109d82fe0498ebd56fa04 from master
2019-11-19 12:44:43 +01:00
Mariusz Felisiak
9ad38d4089 [3.0.x] Refs #29926 -- Doc'd Python 3.8 compatibility in Django 2.2.x.
Backport of b93a0e34d9b9b99d41103782b7e7aeabf47517e3 from master.
2019-11-12 22:13:54 +01:00
Mariusz Felisiak
f375ad95fa [3.0.x] Added stub release notes for 2.2.8 release.
Backport of 30359496a3f3d9af0b02afc334710f7e24c74f5b from master
2019-11-12 14:42:15 +01:00
Stephen Rauch
76d293f3e6 [3.0.x] Refs #30183 -- Doc'd dropping support for sqlparse < 0.2.2.
Support for sqlparse < 0.2.2 was broken in
782d85b6dfa191e67c0f1d572641d8236c79174c because is_whitespace property
was added in sqlparse 0.2.2.

Backport of 4b6db766ba4b613d317c87f87d1d63865b7424a4 from master
2019-11-06 09:01:48 +01:00
Claude Paroz
48c263df29 [3.0.x] Added Uzbek language.
Backport of 6ccb1b68bc22e4edc1562f0159e71631d6a256d9 from master
2019-11-04 15:18:53 +01:00
Mariusz Felisiak
810dd8ad8d [3.0.x] Added release dates for 2.2.7, 2.1.14, and 1.11.26.
Backport of 126cfefce2b59900138f2bf1ef6ad966cddc55d4 from master
2019-11-04 08:26:18 +01:00
Carlton Gibson
dd2ca8b0ea [3.0.x] Fixed #30931 -- Restored ability to override Model.get_FIELD_display().
Thanks Sergey Fedoseev for the implementation idea.

Regression in a68ea231012434b522ce45c513d84add516afa60.

Backport of 2d38eb0ab9f78d68c083a5b78b1eca39027b279a from master
2019-11-04 08:15:03 +01:00