Sarah Boyce fd1dd76778 Fixed #35716 -- Fixed VariableDoesNotExist when rendering admin fieldsets. ...

Regression in 01ed59f753139afb514170ee7f7384c155ecbc2d.

Thank you to Fábio Domingues and Marijke Luttekes for the report,
and thank you to Natalia Bidart for the review.

2024-08-30 20:49:27 +02:00

..

0.95.txt

Added missing backticks to function names.

2022-03-17 11:10:03 +01:00

0.96.txt

Fixed broken links and redirects in docs.

2024-03-06 08:50:21 +01:00

1.0-porting-guide.txt

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00

1.0.1.txt

…

1.0.2.txt

…

1.0.txt

Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:03:56 +01:00

1.1.2.txt

…

1.1.3.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

1.1.4.txt

…

1.1.txt

Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:03:56 +01:00

1.2.1.txt

…

1.2.2.txt

…

1.2.3.txt

…

1.2.4.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

1.2.5.txt

…

1.2.6.txt

…

1.2.7.txt

…

1.2.txt

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00

1.3.1.txt

…

1.3.2.txt

…

1.3.3.txt

…

1.3.4.txt

Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28 12:21:37 +01:00

1.3.5.txt

…

1.3.6.txt

…

1.3.7.txt

…

1.3.txt

Used extlinks for PyPI links.

2023-04-17 06:55:32 +02:00

1.4.1.txt

…

1.4.2.txt

Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28 12:21:37 +01:00

1.4.3.txt

…

1.4.4.txt

…

1.4.5.txt

…

1.4.6.txt

…

1.4.7.txt

…

1.4.8.txt

…

1.4.9.txt

…

1.4.10.txt

…

1.4.11.txt

…

1.4.12.txt

…

1.4.13.txt

…

1.4.14.txt

…

1.4.15.txt

…

1.4.16.txt

…

1.4.17.txt

…

1.4.18.txt

…

1.4.19.txt

…

1.4.20.txt

…

1.4.21.txt

…

1.4.22.txt

…

1.4.txt

Refs #26029 -- Removed DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings.

2023-09-18 22:12:40 +02:00

1.5.1.txt

…

1.5.2.txt

…

1.5.3.txt

…

1.5.4.txt

…

1.5.5.txt

…

1.5.6.txt

…

1.5.7.txt

…

1.5.8.txt

…

1.5.9.txt

…

1.5.10.txt

…

1.5.11.txt

…

1.5.12.txt

…

1.5.txt

Refs #27236 -- Removed Meta.index_together per deprecation timeline.

2023-09-18 22:12:40 +02:00

1.6.1.txt

Changed some words to use inline markup.

2022-03-10 10:18:31 +01:00

1.6.2.txt

…

1.6.3.txt

…

1.6.4.txt

…

1.6.5.txt

…

1.6.6.txt

…

1.6.7.txt

…

1.6.8.txt

…

1.6.9.txt

…

1.6.10.txt

…

1.6.11.txt

…

1.6.txt

Used extlinks for PyPI links.

2023-04-17 06:55:32 +02:00

1.7.1.txt

Refs #32446 -- Removed SERIALIZE test database setting per deprecation timeline.

2023-01-17 11:49:15 +01:00

1.7.2.txt

…

1.7.3.txt

…

1.7.4.txt

…

1.7.5.txt

…

1.7.6.txt

…

1.7.7.txt

…

1.7.8.txt

…

1.7.9.txt

…

1.7.10.txt

…

1.7.11.txt

…

1.7.txt

Refs #27236 -- Removed Meta.index_together per deprecation timeline.

2023-09-18 22:12:40 +02:00

1.8.1.txt

…

1.8.2.txt

Added missing backticks in docs.

2023-07-21 12:54:38 +02:00

1.8.3.txt

…

1.8.4.txt

…

1.8.5.txt

…

1.8.6.txt

…

1.8.7.txt

…

1.8.8.txt

…

1.8.9.txt

…

1.8.10.txt

…

1.8.11.txt

…

1.8.12.txt

…

1.8.13.txt

…

1.8.14.txt

…

1.8.15.txt

…

1.8.16.txt

…

1.8.17.txt

…

1.8.18.txt

…

1.8.19.txt

…

1.8.txt

Used extlinks for PyPI links.

2023-04-17 06:55:32 +02:00

1.9.1.txt

Changed some words to use inline markup.

2022-03-10 10:18:31 +01:00

1.9.2.txt

…

1.9.3.txt

…

1.9.4.txt

…

1.9.5.txt

…

1.9.6.txt

…

1.9.7.txt

…

1.9.8.txt

…

1.9.9.txt

…

1.9.10.txt

…

1.9.11.txt

…

1.9.12.txt

…

1.9.13.txt

…

1.9.txt

Added backticks to setuptools in docs.

2023-10-09 09:55:52 +02:00

1.10.1.txt

…

1.10.2.txt

…

1.10.3.txt

…

1.10.4.txt

…

1.10.5.txt

…

1.10.6.txt

…

1.10.7.txt

…

1.10.8.txt

…

1.10.txt

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00

1.11.1.txt

Improved style of n-tuple wording in docs and comments.

2023-06-23 09:29:35 +02:00

1.11.2.txt

…

1.11.3.txt

…

1.11.4.txt

…

1.11.5.txt

…

1.11.6.txt

…

1.11.7.txt

…

1.11.8.txt

…

1.11.9.txt

…

1.11.10.txt

…

1.11.11.txt

…

1.11.12.txt

…

1.11.13.txt

…

1.11.14.txt

…

1.11.15.txt

…

1.11.16.txt

…

1.11.17.txt

…

1.11.18.txt

…

1.11.19.txt

…

1.11.20.txt

…

1.11.21.txt

…

1.11.22.txt

…

1.11.23.txt

…

1.11.24.txt

…

1.11.25.txt

…

1.11.26.txt

…

1.11.27.txt

…

1.11.28.txt

…

1.11.29.txt

…

1.11.txt

Refs #27236 -- Removed Meta.index_together per deprecation timeline.

2023-09-18 22:12:40 +02:00

2.0.1.txt

…

2.0.2.txt

…

2.0.3.txt

…

2.0.4.txt

…

2.0.5.txt

…

2.0.6.txt

…

2.0.7.txt

…

2.0.8.txt

…

2.0.9.txt

…

2.0.10.txt

…

2.0.11.txt

…

2.0.12.txt

…

2.0.13.txt

…

2.0.txt

Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01 13:03:56 +01:00

2.1.1.txt

…

2.1.2.txt

…

2.1.3.txt

…

2.1.4.txt

…

2.1.5.txt

…

2.1.6.txt

…

2.1.7.txt

…

2.1.8.txt

…

2.1.9.txt

…

2.1.10.txt

…

2.1.11.txt

…

2.1.12.txt

…

2.1.13.txt

…

2.1.14.txt

…

2.1.15.txt

…

2.1.txt

Fixed references to django.core.cache in docs.

2023-05-22 14:02:01 +02:00

2.2.1.txt

…

2.2.2.txt

…

2.2.3.txt

…

2.2.4.txt

Fixed "nulls characters" typo in docs.

2023-01-16 07:54:00 +01:00

2.2.5.txt

…

2.2.6.txt

…

2.2.7.txt

…

2.2.8.txt

…

2.2.9.txt

…

2.2.10.txt

…

2.2.11.txt

…

2.2.12.txt

…

2.2.13.txt

…

2.2.14.txt

…

2.2.15.txt

…

2.2.16.txt

…

2.2.17.txt

…

2.2.18.txt

…

2.2.19.txt

…

2.2.20.txt

…

2.2.21.txt

…

2.2.22.txt

…

2.2.23.txt

…

2.2.24.txt

…

2.2.25.txt

Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.

2021-12-07 06:28:08 +01:00

2.2.26.txt

Corrected merge error in release notes.

2022-01-04 10:50:23 +01:00

2.2.27.txt

Fixed typo in release notes.

2022-02-02 07:17:57 +01:00

2.2.28.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

2.2.txt

Fixed #34688 -- Removed contrib.sitemaps.ping_google() and ping_google management command.

2023-07-10 05:59:35 +02:00

3.0.1.txt

…

3.0.2.txt

…

3.0.3.txt

…

3.0.4.txt

…

3.0.5.txt

…

3.0.6.txt

…

3.0.7.txt

…

3.0.8.txt

…

3.0.9.txt

…

3.0.10.txt

…

3.0.11.txt

…

3.0.12.txt

…

3.0.13.txt

…

3.0.14.txt

…

3.0.txt

Replaced "Django test runner" with DiscoverRunner in release notes.

2024-02-05 09:18:53 -03:00

3.1.1.txt

Removed hyphen from pre-/re- prefixes.

2022-04-28 10:44:14 +02:00

3.1.2.txt

…

3.1.3.txt

…

3.1.4.txt

…

3.1.5.txt

…

3.1.6.txt

…

3.1.7.txt

…

3.1.8.txt

…

3.1.9.txt

…

3.1.10.txt

…

3.1.11.txt

…

3.1.12.txt

…

3.1.13.txt

…

3.1.14.txt

Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.

2021-12-07 06:28:08 +01:00

3.1.txt

Refs #35234 -- Deprecated CheckConstraint.check in favor of .condition.

2024-03-01 07:15:32 +01:00

3.2.1.txt

Fixed typo in docs/releases/3.2.1.txt.

2022-09-19 05:19:01 +02:00

3.2.2.txt

…

3.2.3.txt

…

3.2.4.txt

…

3.2.5.txt

…

3.2.6.txt

…

3.2.7.txt

…

3.2.8.txt

…

3.2.9.txt

…

3.2.10.txt

Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.

2021-12-07 06:28:08 +01:00

3.2.11.txt

Corrected merge error in release notes.

2022-01-04 10:50:23 +01:00

3.2.12.txt

Fixed typo in release notes.

2022-02-02 07:17:57 +01:00

3.2.13.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

3.2.14.txt

Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.

2022-07-04 08:13:41 +02:00

3.2.15.txt

Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.

2022-08-03 08:46:31 +02:00

3.2.16.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

3.2.17.txt

Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.

2023-02-01 09:44:04 +01:00

3.2.18.txt

Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.

2023-02-14 08:18:40 +01:00

3.2.19.txt

Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.

2023-05-03 13:42:00 +02:00

3.2.20.txt

Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.

2023-07-03 08:16:55 +02:00

3.2.21.txt

Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04 11:58:37 +02:00

3.2.22.txt

Fixed CVE-2023-43665 -- Mitigated potential DoS in django.utils.text.Truncator when truncating HTML text.

2023-10-04 09:22:26 -03:00

3.2.23.txt

Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.

2023-11-01 06:10:30 +01:00

3.2.24.txt

Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template filter.

2024-02-06 09:07:31 -03:00

3.2.25.txt

Refs CVE-2024-27351 -- Forwardported release notes and tests.

2024-03-04 08:22:00 +01:00

3.2.txt

Used extlinks for PyPI links.

2023-04-17 06:55:32 +02:00

4.0.1.txt

Refs #33990 -- Renamed SimpleTestCase.assertFormsetError() to assertFormSetError().

2022-10-07 11:22:16 +02:00

4.0.2.txt

Fixed typo in release notes.

2022-02-02 07:17:57 +01:00

4.0.3.txt

Used extlinks for PyPI links.

2023-04-17 06:55:32 +02:00

4.0.4.txt

Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.

2022-04-11 08:59:58 +02:00

4.0.5.txt

Updated release date for Django 4.0.5.

2022-06-01 12:25:33 +02:00

4.0.6.txt

Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against SQL injection.

2022-07-04 08:13:41 +02:00

4.0.7.txt

Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.

2022-08-03 08:46:31 +02:00

4.0.8.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

4.0.9.txt

Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.

2023-02-01 09:44:04 +01:00

4.0.10.txt

Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.

2023-02-14 08:18:40 +01:00

4.0.txt

Replaced "Django test runner" with DiscoverRunner in release notes.

2024-02-05 09:18:53 -03:00

4.1.1.txt

Added release date for 4.1.1.

2022-09-05 05:21:23 +02:00

4.1.2.txt

Fixed CVE-2022-41323 -- Prevented locales being interpreted as regular expressions.

2022-10-04 09:10:04 +02:00

4.1.3.txt

Added release date for 4.1.3.

2022-11-01 06:54:19 +01:00

4.1.4.txt

Added release date for 4.1.4.

2022-12-06 09:56:43 +01:00

4.1.5.txt

Added release date for 4.1.5.

2023-01-02 08:10:59 +01:00

4.1.6.txt

Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.

2023-02-01 09:44:04 +01:00

4.1.7.txt

Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.

2023-02-14 08:18:40 +01:00

4.1.8.txt

Added release date for 4.1.8.

2023-04-05 06:09:31 +02:00

4.1.9.txt

Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.

2023-05-03 13:42:00 +02:00

4.1.10.txt

Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.

2023-07-03 08:16:55 +02:00

4.1.11.txt

Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04 11:58:37 +02:00

4.1.12.txt

Fixed CVE-2023-43665 -- Mitigated potential DoS in django.utils.text.Truncator when truncating HTML text.

2023-10-04 09:22:26 -03:00

4.1.13.txt

Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.

2023-11-01 06:10:30 +01:00

4.1.txt

Replaced "Django test runner" with DiscoverRunner in release notes.

2024-02-05 09:18:53 -03:00

4.2.1.txt

Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.

2023-05-03 13:42:00 +02:00

4.2.2.txt

Added release date for 4.2.2.

2023-06-05 08:21:56 -03:00

4.2.3.txt

Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.

2023-07-03 08:16:55 +02:00

4.2.4.txt

Added release date for 4.2.4.

2023-08-01 13:30:05 -03:00

4.2.5.txt

Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04 11:58:37 +02:00

4.2.6.txt

Refs #34840 -- Improved release note describing index regression.

2023-10-15 10:27:11 +02:00

4.2.7.txt

Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.

2023-11-01 06:10:30 +01:00

4.2.8.txt

Added release date for 4.2.8.

2023-12-04 09:24:31 +01:00

4.2.9.txt

Added release date for 5.0.1 and 4.2.9.

2024-01-02 09:57:41 +01:00

4.2.10.txt

Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template filter.

2024-02-06 09:07:31 -03:00

4.2.11.txt

Refs CVE-2024-27351 -- Forwardported release notes and tests.

2024-03-04 08:22:00 +01:00

4.2.12.txt

Added release date for 5.0.5 and 4.2.12.

2024-05-06 14:35:57 +02:00

4.2.13.txt

Added release notes for 5.0.6 and 4.2.13.

2024-05-07 17:21:21 +02:00

4.2.14.txt

Fixed CVE-2024-39614 -- Mitigated potential DoS in get_supported_language_variant().

2024-07-09 09:21:19 -03:00

4.2.15.txt

Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection attacks against JSON fields.

2024-08-06 08:50:08 +02:00

4.2.16.txt

Fixed grammatical error in stub release notes for upcoming security release.

2024-08-27 09:46:12 -03:00

4.2.txt

Fixed #34978, Refs #31331 -- Added backward incompatibility note about raw aggregations on MySQL.

2023-11-27 11:57:07 +01:00

5.0.1.txt

Added release date for 5.0.1 and 4.2.9.

2024-01-02 09:57:41 +01:00

5.0.2.txt

Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template filter.

2024-02-06 09:07:31 -03:00

5.0.3.txt

Refs CVE-2024-27351 -- Forwardported release notes and tests.

2024-03-04 08:22:00 +01:00

5.0.4.txt

Added release date for 5.0.4.

2024-04-03 11:12:03 -03:00

5.0.5.txt

Added release date for 5.0.5 and 4.2.12.

2024-05-06 14:35:57 +02:00

5.0.6.txt

Added release notes for 5.0.6 and 4.2.13.

2024-05-07 17:21:21 +02:00

5.0.7.txt

Made cosmetic edits to 5.0.7 release notes.

2024-07-09 09:36:54 -03:00

5.0.8.txt

Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection attacks against JSON fields.

2024-08-06 08:50:08 +02:00

5.0.9.txt

Fixed grammatical error in stub release notes for upcoming security release.

2024-08-27 09:46:12 -03:00

5.0.txt

Replaced "Django test runner" with DiscoverRunner in release notes.

2024-02-05 09:18:53 -03:00

5.1.1.txt

Fixed #35716 -- Fixed VariableDoesNotExist when rendering admin fieldsets.

2024-08-30 20:49:27 +02:00

5.1.txt

Fixed #35678 -- Removed "usable_password" field from BaseUserCreationForm.

2024-08-19 12:39:57 -03:00

5.2.txt

Fixed #35083 -- Updated method_decorator to handle async methods.

2024-08-30 08:54:49 -03:00

index.txt

Added stub release notes and release date for 5.1.1, 5.0.9, and 4.2.16.

2024-08-27 09:24:15 -03:00

security.txt

Added CVE-2024-41989, CVE-2024-41990, CVE-2024-41991, and CVE-2024-42005 to security archive.

2024-08-06 17:22:46 +02:00