chango.git, branch 3.1.12

[3.1.x] Bumped version for 3.1.12 release.

2021-06-02T08:39:54Z

[3.1.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.

2021-06-02T08:38:07Z

validate_ipv4_address() was affected only on Python < 3.9.5, see [1]. URLValidator() uses a regular expressions and it was affected on all Python versions. [1] https://bugs.python.org/issue36384

[3.1.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs' TemplateDetailView.

2021-06-02T08:38:07Z

[3.1.x] Confirmed release date for Django 3.1.12, and 2.2.24.

2021-06-02T08:22:02Z

Backport of f66ae7a2d5558fe88ddfe639a610573872be6628 from main

[3.1.x] Fixed typo in MiddlewareMixin deprecation note.

2021-05-27T04:55:00Z

Backport of e513fb0e77baf2ebcbf2cbe366bdf0228d01119f from main.

[3.1.x] Added stub release notes and date for Django 3.1.12 and 2.2.24.

2021-05-26T08:19:28Z

Backport of b46dbd4e3e255223078ae0028934ea986e19ebc1 from main

[3.1.x] Changed IRC references to Libera.Chat.

2021-05-20T10:29:31Z

Backport of 66491f08fe86629fa25977bb3dddda06959f65e7 from main.

[3.1.x] Post-release version bump.

2021-05-13T07:18:51Z

[3.1.x] Bumped version for 3.1.11 release.

2021-05-13T07:16:23Z

[3.1.x] Fixed #32718 -- Relaxed file name validation in FileField.

2021-05-13T06:56:06Z

- Validate filename returned by FileField.upload_to() not a filename passed to the FileField.generate_filename() (upload_to() may completely ignored passed filename). - Allow relative paths (without dot segments) in the generated filename. Thanks to Jakub Kleň for the report and review. Thanks to all folks for checking this patch on existing projects. Thanks Florian Apolloner and Markus Holtermann for the discussion and implementation idea. Regression in 0b79eb36915d178aef5c6a7bbce71b1e76d376d3. Backport of b55699968fc9ee985384c64e37f6cc74a0a23683 from main.