chango.git, branch 4.0.9 django http://cgit.adnoto.dev/chango.git/atom?h=4.0.9 2023-02-01T08:55:51Z [4.0.x] Bumped version for 4.0.9 release. 2023-02-01T08:55:51Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-02-01T08:55:51Z urn:sha1:ca891ef44b27eb93890846615e0121037e6c8a35 [4.0.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language. 2023-02-01T08:47:17Z Nick Pope nick@nickpope.me.uk 2023-01-25T11:21:48Z urn:sha1:4452642f193533e288a52c02efb5bbc766a68f95 The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue. [4.0.x] Fixed E501 flake8 error. 2023-01-31T14:41:11Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-01-31T14:41:11Z urn:sha1:b880e20876fec670e11db8b42f754fbbbfd8055c [4.0.x] Fixed inspectdb.tests.InspectDBTestCase.test_custom_fields() on SQLite 3.37+. 2023-01-31T14:34:43Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-12-09T19:24:38Z urn:sha1:2990e6fe8f5bf9152b97111724235c1c5959f41f Use FlexibleFieldLookupDict which is case-insensitive mapping because SQLite 3.37+ returns some data type names upper-cased e.g. TEXT. Backport of 974e3b8750fe96c16c9c0b115a72ee4a2171df34 from main. [4.0.x] Bumped versions in pre-commit and npm configurations. 2023-01-31T13:13:03Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-05-21T12:53:37Z urn:sha1:8fe7bdc29d4c898c4acd4ca1d2b0cfc6b327513e Backport of f825536b5e09b3a047fec0c10aabd91bace0995c from main. [4.0.x] Added packaging tools to GitHub actions. 2023-01-31T13:11:03Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-03-18T07:55:32Z urn:sha1:9d39b0f19e20056131914dca076e0d686395fe93 Backport of fbacaa58ffc5a62456ee68b90efa13957f761ce4 from main. [4.0.x] Used GitHub actions for Windows tests. 2023-01-31T13:08:41Z Tom Forbes tom@tomforb.es 2021-01-04T20:08:10Z urn:sha1:78aa12e3344444501b8136bc01cfe7af4a85893e Backport of f97401d1b184406d2e24f11eddbdaca8bbc360e3 from main [4.0.x] Skipped GitHub actions for linters and JavaScript tests on purely doc changes. 2023-01-31T13:08:30Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-09-22T11:11:37Z urn:sha1:ca8c5bd69065d6bff8bff61e12f4b52072a06007 Backport of 48924966e275670623bd7e33e9089f895f6a3110 from main [4.0.x] Adjusted release notes for 4.0.9, and 3.2.17. 2023-01-25T11:28:59Z Carlton Gibson carlton.gibson@noumenal.es 2023-01-25T11:26:00Z urn:sha1:2d13db1b4ad2e742f99ed7245f727ec5b1144187 Backport of d8e1442ce2c56282785dd806e5c1147975e8c857 from main [4.0.x] Added stub release notes for 4.0.9 and 3.2.17. 2023-01-25T11:00:54Z Carlton Gibson carlton.gibson@noumenal.es 2023-01-25T10:57:04Z urn:sha1:d8767c8d2510f99d586f29b9e8f66d1e02097d33 Backport of 1df963ad2476726d63be132c0cee47e07b8250d7 from main