1
0
mirror of https://github.com/django/django.git synced 2025-04-21 07:44:36 +00:00

4295 Commits

Author SHA1 Message Date
Adam Johnson
9d656ea51d [4.1.x] Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.
Thanks to Benjamin Balder Bach for the report.
2022-10-04 09:12:42 +02:00
Mariusz Felisiak
7843c43c49 [4.1.x] Refs #32987 -- Relaxed system check for template tag modules with the same name by turning into a warning.
Thanks Claude Paroz for the report.

Regression in 004b4620f6f4ad87261e149898940f2dcd5757ef.
Backport of f71b0cf769d9ac582ee3d1a8c33d73dad3a770da from main
2022-10-03 10:52:47 +02:00
Mariusz Felisiak
7a1675806a [4.1.x] Fixed #33984 -- Reverted "Fixed #32980 -- Made models cache related managers."
This reverts 4f8c7fd9d91b35e2c2922de4bb50c8c8066cbbc6 and adds
two regression tests:
- test_related_manager_refresh(), and
- test_create_copy_with_m2m().

Thanks joeli for the report.
Backport of 5e0aa362d91d000984995ce374c2d7547d8d107f from main
2022-09-30 18:19:36 +02:00
Antoine Lorence
ecf6506f44 [4.1.x] Fixed #34062 -- Updated View.http_method_not_allowed() to support async.
As with the options() methods, wrap the response in a coroutine if
the view is async.

Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>

Backport of 9b0c9821ed4dd9920cc7c5e7b657720d91a89bdc from main
2022-09-29 16:29:34 +02:00
Mariusz Felisiak
97353bc64b [4.1.x] Fixed #34058 -- Changed sequence types when altering pre-Django 4.1 auto fields on PostgreSQL.
Thanks Anders Kaseorg for the report.

Thanks Florian Apolloner for pair programming.

Regression in 2eea361eff58dd98c409c5227064b901f41bd0d6.
Backport of 19e6efa50b603af325e7f62058364f278596758f from main
2022-09-29 13:20:55 +02:00
Adam Johnson
b826b38847 [4.1.x] Refs #34010 -- Made --debug-mode work for parallel tests using spawn.
Bug in 3b3f38b3b09b0f2373e51406ecb8c9c45d36aebc.

Thanks Kevin Renskers for the report.

Backport of 0f5b11eca0ba199501941fa244b276aaa10353c8 from main
2022-09-28 20:40:23 +02:00
Adam Johnson
5630a6ca29 [4.1.x] Fixed #34010 -- Made parallel tests using spawn set up Django.
Bug in 3b3f38b3b09b0f2373e51406ecb8c9c45d36aebc.

Thanks Kevin Renskers for the report.

Backport of 4a910f3de35338df7d4fcd8b7729fd1e31edaad0 from main
2022-09-28 20:40:12 +02:00
David Sanders
33d9247c8b [4.1.x] Fixed #34025 -- Fixed selecting ModelAdmin.autocomplete_fields after adding/changing related instances via popups.
Regression in c72f6f36c13a21f6db3d4f85d2d3cec87bad45e6.

Thanks Alexandre da Silva for the report.

Backport of 9976f3d4b80cfb2e6f4c998438622b78eb1ac53e from main
2022-09-28 12:54:48 +02:00
Carlton Gibson
fba7962bac [4.1.x] Set date and added stub notes for 4.1.2, 4.0.8, and 3.2.16 releases.
Backport of c2bc71b635e3ca637b6920f30fb3dcc92037cee2 and
f08651c06cb5fe5a6181354e053bf82fe8d68f16 from main.
2022-09-27 10:11:25 +02:00
Jacob Walls
e151df24ae [4.1.x] Fixed typo in docs/releases/3.2.1.txt.
Backport of cfe3008123ed7c9e3f3a4d51d4a22f9d96634e33 from main
2022-09-19 05:19:45 +02:00
Alexander Kerkum
2d20386b41 [4.1.x] Fixed #34016 -- Fixed QuerySet.values()/values_list() crash on ArrayAgg() and JSONBAgg().
Regression in e06dc4571ea9fd5723c8029959b95808be9f8812.

Backport of f88fc72da4eb76f2d464edb4874ef6046f8a8658 from main
2022-09-18 07:39:47 +02:00
David Sanders
be5e3b46f7 [4.1.x] Fixed #33996 -- Fixed CheckConstraint validation on NULL values.
Bug in 667105877e6723c6985399803a364848891513cc.

Thanks James Beith for the report.

Backport of e14d08cd894e9d91cb5d9f44ba7532c1a223f458 from main
2022-09-13 14:06:46 +02:00
Simon Charette
e0f14d8389 [4.1.x] Fixed #33992 -- Fixed queryset crash when aggregating over a group containing Exists.
A more in-depth solution is likely to make sure that we always GROUP BY
selected annotations or revisit how we use Query.exists() in the Exists
expression but that requires extra work that isn't suitable for a
backport.

Regression in e5a92d400acb4ca6a8e1375d1ab8121f2c7220be.

Thanks Fernando Flores Villaça for the report.

Backport of 32536b1324e98768dd892980408a8c6b26c23fd9 from main
2022-09-08 08:13:15 +02:00
James Beith
7ba9a44831 [4.1.x] Fixed #33982 -- Fixed migrations crash when adding model with ExclusionConstraint.
Regression in 0e656c02fe945389246f0c08f51c6db4a0849bd2.

Backport of 19e838daa8872ee29fbea0bc471c2a6443f26835 from main
2022-09-07 09:17:23 +02:00
Mariusz Felisiak
4987ce3350 [4.1.x] Added stub release notes for 4.1.2.
Backport of 604fadde11966c5fdfe5a236a7a3963ee868f764 from main
2022-09-05 06:09:35 +02:00
Mariusz Felisiak
95c5557032 [4.1.x] Added release date for 4.1.1.
Backport of aed92f686d362b731c74a7840085d2e6714e5ef5 from main
2022-09-05 05:22:07 +02:00
Mariusz Felisiak
a1083805ac [4.1.x] Fixed #33955, Fixed #33971 -- Reverted "Fixed #32565 -- Moved internal URLResolver view-strings mapping to admindocs."
This reverts commit 7f3cfaa12b28d15c0ca78bb692bfd6e59d17bff1.

Thanks Tom Carrick and Greg Kaleka for reports.
Backport of 974942a75039ba43e618f6a5ff95e08b5d5176fd from main
2022-09-01 21:10:43 +02:00
Mariusz Felisiak
e98869a8a8 [4.1.x] Fixed #33960 -- Fixed migrations crash on SQLite < 3.26.
Regression in 0b95a96ee10d3e12aef01d449467bcf4641286b4.

Thanks Aristotelis Mikropoulos for the report.
Backport of 4483a9b12f295908e68b82d6599f460de943444f from main
2022-08-29 09:56:12 +02:00
David Wobrock
fca055315e [4.1.x] Fixed #33952 -- Reallowed creating reverse foreign key managers on unsaved instances.
Thanks Claude Paroz for the report.

Regression in 7ba6ebe9149ae38257d70100e8bfbfd0da189862.

Backport of 806e9e2d0dcf8f58e376fb7e2a8b9771e2a9ce16 from main
2022-08-27 15:36:13 +02:00
Iuri de Silvio
7d5ccbbe1a [4.1.x] Fixed #33953 -- Reverted "Fixed #33201 -- Made RenameModel operation a noop for models with db_table."
Regression in afeafd6036616bac8263d762c1610f22241c0187.
This reverts afeafd6036616bac8263d762c1610f22241c0187.

Thanks Timothy Thomas for the report.

Backport of 166a3b32632c141541d1c3f0eff18e1d8b389404 from main
2022-08-26 07:14:54 +02:00
Simon Charette
c9ebd5b7aa [4.1.x] Fixed #33938 -- Fixed migration crash for m2m with a through model in another app.
Regression in aa4acc164d1247c0de515c959f7b09648b57dc42.

Thanks bryangeplant for the report.

Backport of 71902e0d9f93670c4f93ff9d66095b0e571be74b from main
2022-08-25 10:32:48 +02:00
Benoît Vinot
85942cf669 [4.1.x] Fixed #33932 -- Fixed altering AutoFields to OneToOneField on PostgreSQL.
Regression in 2eea361eff58dd98c409c5227064b901f41bd0d6.

Backport of e3cb8bcb7d2a2d392e726ee1f7e32a8d9038e14c from main
2022-08-17 17:43:48 +02:00
Mohammadtaher Abbasi
c520a5d06e [4.1.x] Fixed #33921 -- Added release note for 5b8699e723d9daf373fff46c6859fed2b780a9bd.
Backport of e30d6678421b7573a1995f61521f14348c9b2a17 from main
2022-08-12 22:39:23 +02:00
Mariusz Felisiak
3848475eeb [4.1.x] Fixed #33919 -- Fixed adding AutoFields on PostgreSQL.
Thanks Jack Calvin Brown for the report.

Regression in 2eea361eff58dd98c409c5227064b901f41bd0d6.
Backport of 5c803bc0702511c8bc05e9db600367a465514f82 from main
2022-08-12 17:31:15 +02:00
David Sanders
e215948f0d [4.1.x] Fixed #33905 -- Fixed CheckConstraint() validation on range fields.
Bug in 667105877e6723c6985399803a364848891513cc.

Backport of e0ae1363ec2aa71945be26f869cafd4181ccbc95 from main
2022-08-09 21:45:58 +02:00
Mariusz Felisiak
6b0193146d [4.1.x] Fixed #33902 -- Fixed Meta.constraints validation crash with F() expressions.
Thanks Adam Zahradník for the report.

Bug in 667105877e6723c6985399803a364848891513cc.
Backport of 63884829acd207404f2a5c3cc1d6b4cd0a822b70 from main
2022-08-09 06:09:56 +02:00
Fiza Ashraf
f546e7c18b [4.1.x] Fixed #33899 -- Fixed migration crash when removing indexed field on SQLite 3.35.5+.
Regression in 702819227fd0cdd9b581cd99e11d1561d51cbeb.

Thanks cessor for the report.

Backport of c0beff21239e70cbdcc9597e5be09e505bb8f76c from main
2022-08-08 07:26:46 +02:00
Mariusz Felisiak
d9ace347b4 [4.1.x] Fixed #33898 -- Fixed Window() expression crash with ArrayAgg().
Thanks Kia for the report.

Regression in e06dc4571ea9fd5723c8029959b95808be9f8812.
Backport of fd93db97c7228b16a4f92f97ef05b0d72418d952 from main
2022-08-06 18:00:38 +02:00
Fab
82e9e19ebe [4.1.x] Fixed #33893 -- Reverted "Fixed #28889 -- Prevented double submission of admin forms."
Regression in fe7dbef5867c577995f0fc849d8dfdb8f2e6bbfa.

Backport of 0756c61f2ada56e4ae625589099c0141a77737eb from main
2022-08-05 17:21:38 +02:00
Mariusz Felisiak
ab860d4e48 [4.1.x] Fixed #33891 -- Fixed test command crash when running in parallel using spawn.
Thanks Kevin Renskers for the report.

Regression in 41c4cb253c137edf5a96b7408ea55d57d6e0602a.
Backport of d4db417c8e6935222d198925dd4c5ac1ca737909 from main
2022-08-04 09:17:30 +02:00
Claude Paroz
2ae024c744 [4.1.x] Fixed #33888 -- Fixed get_select2_language() crash with no language activated.
Regression in 3079133c73f3b8b0e929673b06b62dce1f54be71.

Backport of 0638b4e23dbabdcf7d7a6f2a2d5b95b980dece78 from main
2022-08-03 20:25:10 +02:00
Aarni Koskela
a3ce58ac4c [4.1.x] Fixed #33886 -- Reallowed using GeoIP2() when GEOS is not installed.
Regression in 31bef51d8ea5e3bf650de1495ae1f0566670b8f3.

Backport of e7afb8a18061f664a5d20d409d423b77195e6060 from main
2022-08-03 18:31:15 +02:00
Carlton Gibson
a9268e3225 [4.1.x] Added stub release notes for 4.1.1.
Backport of 09e837c5d93d8ac22697e711901a63ead59c9fd4 from main
2022-08-03 10:53:02 +02:00
Carlton Gibson
6cd2f97a4f [4.1.x] Updated release notes for Django 4.1 release.
Backport of a4cb1dae6362d473116bb8c8fd97df89bfe036f8 from main
2022-08-03 10:26:53 +02:00
Carlton Gibson
c721b569a2 [4.1.x] Added CVE-2022-36359 to security archive.
Backport of 57c7220280db19dc9dda0910b90cf1ceac50c66f from main
2022-08-03 09:10:23 +02:00
Carlton Gibson
46916665f9 [4.1.x] Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.
Thanks to Motoyasu Saburi for the report.
2022-08-03 08:47:19 +02:00
Carlton Gibson
5359607c89 [4.1.x] Adjusted version 4.0.7 release notes.
Backport of 9062c23de80e999009cbe4100d83e90dd0463612 from main
2022-08-03 08:37:13 +02:00
Carlton Gibson
33c2dc8757 [4.1.x] Adjusted release notes for 4.0.7 and 3.2.15.
Backport of cadd864f6878c1c02a014589876ece166befdeb3 from main
2022-07-27 10:03:40 +02:00
Carlton Gibson
5b509539e2 [4.1.x] Added release date and stub release notes for 4.0.7 and 3.2.15 releases.
Backport of 0c1675781ec5944132fe5a475ca6064edc71bd81 from main
2022-07-27 09:32:04 +02:00
Mariusz Felisiak
7d59c6d37c [4.1.x] Refs CVE-2022-34265 -- Unified DatabaseOperations._convert_*_to_tz() hook names.
Backport of 5e2f4ddf2940704a26a4ac782b851989668d74db from main
2022-07-09 13:03:19 +02:00
Simon Charette
585ed2f6d7 [4.1.x] Refs CVE-2022-34265 -- Properly escaped Extract() and Trunc() parameters.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of 877c800f255ccaa7abde1fb944de45d1616f5cc9 from main
2022-07-06 09:10:41 +02:00
Mariusz Felisiak
ee79219f1b [4.1.x] Added CVE-2022-34265 to security archive.
Backport of d12d7c4c42814736c24731a6a300a79526fc2ef6 from main
2022-07-04 10:33:26 +02:00
Mariusz Felisiak
38c2bdba35 [4.1.x] Added stub release notes for 4.0.7.
Backport of c6932ea2ea7ec431245b9a343c72318bb758072f from main
2022-07-04 10:33:18 +02:00
Mariusz Felisiak
284b188a41 [4.1.x] Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.
Thanks Takuto Yoshikai (Aeye Security Lab) for the report.
2022-07-04 08:26:02 +02:00
Mariusz Felisiak
6c0ee61797 [4.1.x] Fixed docs build with sphinxcontrib-spelling 7.5.0+.
sphinxcontrib-spelling 7.5.0+ includes captions of figures in the set
of nodes for which the text is checked.

Backport of ac90529cc58507d9a07610809a795ec5fc3cbf8c from main
2022-06-27 07:44:27 +02:00
Mariusz Felisiak
d783ce3d8d [4.1.x] Added stub release notes and release date for 4.0.6 and 3.2.14.
Backport of b2eff16806057095c7dd3daa9402ad615e51627f from main
2022-06-27 07:16:51 +02:00
Mariusz Felisiak
91b365ef67 [4.1.x] Fixed #33789 -- Doc'd changes in quoting table/column names on Oracle in Django 4.0.
Thanks Paul in 't Hout for the report.

Regression in 1f643c28b5f2b039c47155692844dbae1cb091cd.
Backport of a0608c4b111555023c24ab7333a42ec53dca6b42 from main
2022-06-21 09:10:43 +02:00
Carlton Gibson
0fb02522f9 [4.1.x] Updated asgiref dependency for 4.1 release series.
Backport of 2a2bde52f31e09e95ce616e8e6bc0ffeb68f76c9 from main
2022-06-16 12:17:15 +02:00
Carlton Gibson
0fb0355271 [4.1.x] Added stub release notes for 4.0.6.
Backport of d5bc36203057627f6f7d0c6dc97b31adde6f4313 from main
2022-06-01 14:40:30 +02:00
Carlton Gibson
b73abed2ea [4.1.x] Updated release date for Django 4.0.5.
Backport of 40bf34a92fe5e876197df161e13eca3902b8878c from main
2022-06-01 12:26:21 +02:00