1
0
mirror of https://github.com/django/django.git synced 2025-01-15 12:52:31 +00:00

31439 Commits

Author SHA1 Message Date
Mariusz Felisiak
6234acb717 [4.2.x] Bumped version for 4.2 beta 1. 4.2b1 2023-02-20 09:35:28 +01:00
Laurens Verhoeven
bb94e1b7db [4.2.x] Fixed #34349 -- Fixed FormSet.empty_form crash when deleting extra forms is disabled.
Backport of 6cbc403b8ee7014bd6dae4892d404eedb1d4a50d from main
2023-02-20 09:33:19 +01:00
Simon Charette
aab25a69dd [4.2.x] Fixed #34346 -- Ordered selected expressions by position.
Used the same approach as for #34176 by using selected expressions
position to prevent ambiguous aliases in collisions.

Thanks henribru for the report.

Regression in 04518e310d4552ff7595a34f5a7f93487d78a406.

Backport of 278881e37619278789942513916acafaa88d26f3 from main
2023-02-20 06:22:18 +01:00
Simon Charette
312d0f88b4 [4.2.x] Refs #33308 -- Added tests for queryset ordered by annotation with nulls_first/nulls_last.
Backport of a6511bc23329f1d3939571ad01d3176f8f6cb786 from main
2023-02-18 16:29:04 +01:00
Stefan Brand
efcc0f25a7 [4.2.x] Fixed #34302 -- Fixed SpatialReference.srid for objects without top-level authority.
Backport of eacf6b73d8eace004f840bd9b80c8c671caab9da from main
2023-02-17 19:57:41 +01:00
Stefan Brand
341f33ed15 [4.2.x] Refs #34302 -- Fixed SpatialReference.auth_name()/auth_code() when target is None.
force_bytes() turns None into the byte string b"None". Since
ctypes.c_char_p() also accepts None, we can bypass force_bytes() if
target is None.

Backport of d77762de038d1ab46cdcda2b7202d36c80956e25 from main
2023-02-17 19:57:34 +01:00
Alexandre Spaeth
610cd06c3f [4.2.x] Fixed #34342, Refs #33735 -- Fixed test client handling of async streaming responses.
Bug in 0bd2c0c9015b53c41394a1c0989afbfd94dc2830.

Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>

Backport of 52b054824e899db40ba48f908a9a00dadc56cb89 from main
2023-02-17 11:48:59 +01:00
Alexandre Spaeth
1ecbc04624 [4.2.x] Refs #34342 -- Added tests for handling sync streaming responses by test client.
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>

Backport of bfb8fda3e69cc6f5c6695ba70117faff51cc25a9 from main
2023-02-17 11:48:53 +01:00
Mariusz Felisiak
e1c74bf458 [4.2.x] Refs #21080, Refs #34322 -- Added warning to ManifestStaticFilesStorage docs about paths in comments.
Backport of bae053d497ba8a8de7e4f725973924bfb1885fd2 from main.
2023-02-16 19:20:41 +01:00
nabil-rady
3b09f35558 [4.2.x] Fixed #34320 -- Make sure constraints names are obtained from truncated columns names.
Backport of 6bdc3c58b65eb32fd63cd41849f00a17a36b4473 from main
2023-02-15 16:52:31 +01:00
David Smith
ce10686604 [4.2.x] Refs #32339 -- Doc'd BaseFormSet.as_div()
Backport of 4038a8df0b8c20624ba826cf9af8f532e5a51aaa from main
2023-02-15 09:24:59 +01:00
Sarah Boyce
389318d118 [4.2.x] Bumped grunt-contrib-qunit versions in npm configurations.
Backport of e13954d2cfe8fba2045076b20a863aa7614937e6 from main
2023-02-14 19:52:19 +01:00
Sarah Boyce
3b2685b01c [4.2.x] Bumped versions in pre-commit and npm configurations.
Backport of 7e297e52c21e9203d2b963dd34b9098af9382994 from main
2023-02-14 19:41:11 +01:00
DevilsAutumn
5cde08f702 [4.2.x] Fixed #34250 -- Fixed renaming model with m2m relation to a model with the same name.
Backport of ff3a2834224f527ca574b5cd0d578c8c26d51a6c from main
2023-02-14 14:33:45 +01:00
Carlton Gibson
b7aab1fb3a [4.2.x] Fixed #34328 -- Added async-only class-based middleware example.
Backport of ce8189eea007882bbe6db22f86b0965e718bd341 from main
2023-02-14 14:16:19 +01:00
Carlton Gibson
ac8cf0ae76 [4.2.x] Added CVE-2023-24580 to security archive.
Backport of ecafcaf634fcef93f9da8cb12795273dd1c3a576 from main
2023-02-14 09:53:00 +01:00
Markus Holtermann
7ac5ff37b8 [4.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.
Thanks to Jakob Ackermann for the report.
2023-02-14 08:21:18 +01:00
Sarah Boyce
de42d51361 [4.2.x] Fixed #29994 -- Added warning about performance of FileBasedCache with a large number of files.
Co-authored-by: sheenarbw <699166+sheenarbw@users.noreply.github.com>
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
Backport of 1eb94bc8dab46dfa117d21ef4f3b52aebb593615 from main
2023-02-13 21:09:55 +01:00
Sota Tabu
8cc5caa113 [4.2.x] Fixed #34318 -- Added release note for 4bfe8c0eec835b8eaffcda7dc1e3b203751a790a.
Backport of 3e9d413231edc29768cc7ca0427e63b19233f562 from main
2023-02-13 14:13:16 +01:00
sarahboyce
5510a12c90 [4.2.x] Fixed #34316 -- Fixed layout of admin password change forms and help texts.
Regression in 96a598356a9ea8c2c05b22cadc12e256a3b295fd.

Backport of e67804668115fd388e7554c6a809bd409f70adfe from main
2023-02-13 11:52:09 +01:00
Mariusz Felisiak
111273f7ee [4.2.x] Ignored b784768eef75afb32f6d2ce7166551a528bce0ec formatting changes in git blame. 2023-02-10 21:13:53 +01:00
Carlton Gibson
b784768eef [4.2.x] Refs #34140 -- Applied rst code-block to non-Python examples.
Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for
reviews.

Backport of 534ac4829764f317cf2fbc4a18354fcc998c1425 from main.
2023-02-10 21:12:06 +01:00
dennisvang
4a89aa25c9 [4.2.x] Fixed #34325 -- Corrected wording in PercentRank() docs.
This is consistent with the terminology used for the percent_rank()
function in SQLite docs and PostgreSQL docs.

Backport of 7bb741d787ba360a9f0d490db92e22e0d28204ed from main
2023-02-10 19:07:24 +01:00
Dhanush
a0623b117c [4.2.x] Fixed #32813 -- Made runserver display port after binding.
Thanks Florian Apolloner for the review.

Backport of a18d20ca97e6799152c1e0b6f007fde943053dcb from main
2023-02-10 09:55:35 +01:00
p0lygun
aaacf72c4c [4.2.x] Fixed #34324 -- Mentioned Discord server in contributing index.
Backport of 358792486e3afd83250364ebc15060820a8a96cc from main
2023-02-10 06:21:04 +01:00
Willem Van Onsem
7a88b1f5aa [4.2.x] Fixed #34311 -- Updated serialization docs from unique_together to UniqueConstraint.
Backport of 292aacaf6c3d6956ca2c51c41e36dbf425389346 from main
2023-02-09 05:56:31 +01:00
Carlton Gibson
efe16fd72a [4.2.x] Added missing vars to AdminSite.each_context() docs.
Backport of 1964e4367f293336b47e30af6e10a5eca5fdfb35 from main
2023-02-08 18:00:37 +01:00
Mariusz Felisiak
836ae73a89 [4.2.x] Fixed #34319 -- Fixed Model.validate_constraints() crash on ValidationError with no code.
Thanks Mateusz Kurowski for the report.

Regression in 667105877e6723c6985399803a364848891513cc.
Backport of 2fd755b361d3da2cd0440fc9839feb2bb69b027b from main
2023-02-08 16:39:53 +01:00
Bakdolot
1f193f7f56 [4.2.x] Fixed #34315 -- Preserved admin changelist filters on "Close" button.
Backport of 325c44ac6c070465ef2b3b7b8ed06cbcb88a3f10 from main
2023-02-08 10:21:40 +01:00
Youngkwang Yang
b17fad46fb [4.2.x] Fixed #34313 -- Updated thousands separator for Spanish (ES) locale.
Format was updated from a comma to a space in 2010.

ref: https://en.wikipedia.org/wiki/Decimal_separator#Examples_of_use
Backport of 9f20f382cab9241f2e8ec724eb84d341a68567bc from main
2023-02-08 09:39:10 +01:00
Tim Schilling
757c456d23 [4.2.x] Fixed #34146 -- Added 3rd-party lib tutorial step.
Added a tutorial step that highlights Django Debug Toolbar, on of the
most common third party packages. It also added a mention of
djangopackages.com as a place to search for other libraries and a
link to Adam Johnson’s post on evaluating whether a package is
well-maintained.

Third-party packages are one of Django’s strengths. This should give
folks a sound route in.

Backport of 7715c9fef55c8775608cdb64d5666c7f90ada937 and
1df7814e4b76211a13eaecd77a05137006b82723 from main
2023-02-07 20:22:11 +01:00
Nils VAN ZUIJLEN
e8a39da396 [4.2.x] Fixed #34285 -- Fixed index/slice lookups on filtered aggregates with ArrayField.
Thanks Simon Charette for the review.

Backport of ae1fe72e9b1f5fe3b05e5b670bd0c205cd305e71 from main
2023-02-07 14:06:08 +01:00
Jacob Walls
714d59d57f [4.2.x] Fixed #33638 -- Fixed GIS lookups crash with geography fields on PostGIS.
Backport of 4403432b759124aa613249373e0d2ede64ae8765 from main
2023-02-07 12:24:24 +01:00
Carlton Gibson
600b88db4c [4.2.x] Added stub release notes for 4.0.10 and 3.2.18.
Set date for 4.1.7 release.

Backport of 7e003428f96d616c1f77fed84882a95e63bc3644 from main
2023-02-07 10:10:22 +01:00
Marcelo Galigniana
9306a8d18f [4.2.x] Fixed #34310 -- Added deletion example to one-to-one topic.
Backport of 7c6195ef81075b03a704431b5d08ec597e8573f7 from main
2023-02-07 08:05:17 +01:00
Frederic Mheir
d70b2a88e8 [4.2.x] Fixed #34301 -- Made admin's submit_row check add permission for "Save as new" button.
Backport of 2878938626aed211d03db33a9a135c9b1d933069 from main
2023-02-07 07:31:51 +01:00
Dan Glass
edbc9d11ff [4.2.x] Made PostgreSQL's SchemaEditor._create_index_sql() respect the "sql" argument.
Backport of bd366ca2aeffa869b7dbc0b0aa01caea75e6dc31 from main
2023-02-06 14:13:09 +01:00
Mariusz Felisiak
9a1848f48c
[4.2.x] Increased the default PBKDF2 iterations for Django 4.2.
See https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2.

Thanks Markus Holtermann for the report.
2023-02-04 13:36:06 +01:00
Adam Johnson
beaa5f31e1 [4.2.x] Fixed #34259 -- Passed called_from_command_line to command subparsers.
Backport of 017fa23d3b0aee9142f531c2a0002fc86c82a54c from main
2023-02-03 07:54:15 +01:00
skidipap
db0e10c037 [4.2.x] Fixed #34286 -- Fixed admindocs markups for case-sensitive template/view names.
Backport of 1250483ebf73f7a82ff820b94092c63ce4238264 from main
2023-02-02 14:48:10 +01:00
Mariusz Felisiak
0b6797eedd [4.2.x] Improved error message for ASCIIUsernameValidator.
Follow up to 10bb21e71e3668f770493e2af0d0e0271830f7a3.

Co-authored-by: Paolo Melchiorre <paolo@melchiorre.org>

Backport of c626173833784c86920b448793ac45005af4c058 from main
2023-02-02 10:08:02 +01:00
Mariusz Felisiak
ba7d8ac37d [4.2.x] Added stub release notes for 4.1.7.
Backport of f3c89744cc801cc7d134bca9958c4a74aa76380f from main
2023-02-01 13:22:00 +01:00
Mariusz Felisiak
379b37171b [4.2.x] Added CVE-2023-23969 to security archive.
Backport of 36e3eef7d5a4c88671d20a561788679d0d9c334c from main
2023-02-01 12:10:03 +01:00
Mariusz Felisiak
d6d30b9697 [4.2.x] Ignored 80aae8343939e849100db87b1c9615f32b38ea0b formatting changes in git blame. 2023-02-01 11:37:53 +01:00
David Smith
80aae83439 [4.2.x] Refs #33476 -- Applied Black's 2023 stable style.
Black 23.1.0 is released which, as the first release of the year,
introduces the 2023 stable style. This incorporates most of last year's
preview style.

https://github.com/psf/black/releases/tag/23.1.0

Backport of 097e3a70c1481ee7b042b2edd91b2be86fb7b5b6 from main
2023-02-01 11:37:29 +01:00
Nick Pope
8a7b22d4a6 [4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.
The parsed values of Accept-Language headers are cached in order to
avoid repetitive parsing. This leads to a potential denial-of-service
vector via excessive memory usage if the raw value of Accept-Language
headers is very large.

Accept-Language headers are now limited to a maximum length in order
to avoid this issue.
2023-02-01 09:45:07 +01:00
sag᠎e
5e0be0873c [4.2.x] Fixed #34304 -- Made MySQL's SchemaEditor.remove_constraint() don't create foreign key index when unique constraint is ignored.
Regression in b731e8841558ee4caaba766c83f34ea9c7004f8b.
Backport of 110b3b83567da22f19ec04210db134d0fe83d662 from main
2023-01-31 11:52:44 +01:00
Durval Carvalho
af396ce3f9 [4.2.x] Fixed #34180 -- Added note about resetting language in test tear-downs.
Co-authored-by: Faris Naimi <farisfaris66@gmail.com>

Backport of 40217d1a82b0c16cddba377325d12b2c253f402a from main
2023-01-31 07:29:21 +01:00
Stanislav Volyk
7217c11eba [4.2.x] Fixed #34283 -- Escaped title in admin's changelist filters.
Regression in 27aa7035f57f0db30b6632e4274e18b430906799.

Backport of 20a0850099340fb4cb8df0e4441e5019b2cbd1ea from main
2023-01-30 11:58:06 +01:00
fschwebel
5159e05e40 [4.2.x] Fixed typo in docs/topics/auth/passwords.txt.
Wrapped hashing is only possible if the inner wrapped function is the
same as the previous hasher.
Backport of 0265b1b49ba10f957abfd1311d0bae0ecefc3111 from main
2023-01-30 08:32:13 +01:00