chango.git, branch 1.6b4 django http://cgit.adnoto.dev/chango.git/atom?h=1.6b4 2013-09-15T06:36:03Z [1.6.x] Add release notes and bump version number for security release. 2013-09-15T06:36:03Z James Bennett james@b-list.org 2013-09-15T06:36:03Z urn:sha1:623c4916df545f985c66a269a712e95f2724f6d0 [1.6.x] Ensure that passwords are never long enough for a DoS. 2013-09-15T05:46:16Z Russell Keith-Magee russell@keith-magee.com 2013-09-15T05:46:16Z urn:sha1:5ecc0f828ebe270cfc92a0a2bfb4268800907904 * Limit the password length to 4096 bytes * Password hashers will raise a ValueError * django.contrib.auth forms will fail validation * Document in release notes that this is a backwards incompatible change Thanks to Josh Wright for the report, and Donald Stufft for the patch. This is a security fix; disclosure to follow shortly. Backport of aae5a96d5754ad34e48b7f673ef2411a3bbc1015 from master. [1.6.x] Added tests for double-pickling a QuerySet 2013-09-14T07:36:48Z Anssi Kääriäinen anssi.kaariainen@thl.fi 2013-09-14T07:33:12Z urn:sha1:4c4954a3c133e824390296f6bb444622a8b25331 Refs #21102. Backpatch of 74b91b3888383fca28dea00e0e1ffb5aecec7c0f [1.6.x] Fixed #21101 -- Updated urlize documentation to mention email addresses 2013-09-13T16:42:40Z Goetz goetz.buerkle@gmail.com 2013-09-13T15:45:42Z urn:sha1:097fb98f81b9d9dd3faac45f5b93d620098041bc Backport of 39b49fd339 from master [1.6.x] Fixed #21100 -- Noted that Create/UpdateViews.fields is new in 1.6 2013-09-13T13:35:22Z Tim Graham timograham@gmail.com 2013-09-13T13:34:12Z urn:sha1:7a2adec4d047492ed77aa0e027d889d442b0f59c Thanks AndrewIngram for the suggestion. Backport of ec89e1725a from master [1.6.x] Fixed #21094 -- Updated reuseable apps tutorial to use pip for installation. 2013-09-13T13:30:12Z Tim Graham timograham@gmail.com 2013-09-13T13:28:38Z urn:sha1:6e17534c8903cabdd3fb2314c9a9c7b02128669e Thanks ylb415 at gmail.com for the suggestion. Backport of e4aab1bb8d from master [1.6.x] Documentation -- added instructions on working with pull requests 2013-09-13T12:27:23Z Kevin Christopher Henry k@severian.com 2013-09-12T23:01:47Z urn:sha1:c91ffd5f23c71dad8f2ed6b4dfecb4592572f244 Since non-core contributors are asked to review patches, instructions on working with pull requests were added to the Working with Git and GitHub page (based on the existing instructions in the core committers page). Backport of 990ce9aab9 from master [1.6.x] Fixed #21095 -- Documented new requirement for dates lookups. 2013-09-13T08:20:13Z Matt Austin mail@mattaustin.me.uk 2013-09-12T13:27:35Z urn:sha1:a929adfd3b89056d83c34f729bedde78afec44db Day, month, and week_day lookups now require time zone definitions in the database. Backport of 9451d8d from master. [1.6.x] Fixed a couple of typos in GeoDjango docs. 2013-09-12T22:45:27Z Ramiro Morales cramm0@gmail.com 2013-09-12T22:34:22Z urn:sha1:66e6e2d14663f78aacdd9df4e9e8c1c008b62459 8b366a50f4 from master. [1.6.x] Minor typo fix in django.contrib.auth.models.User docs 2013-09-11T23:44:35Z Phaneendra Chiruvella hi@pcx.io 2013-09-11T21:45:00Z urn:sha1:e8bb41d05ccd4ccb2cb983ad6c895ff40de622df Backport of bd72c2acb6 from master