chango.git, branch 4.2.6 django http://cgit.adnoto.dev/chango.git/atom?h=4.2.6 2023-10-04T12:51:04Z [4.2.x] Bumped version for 4.2.6 release. 2023-10-04T12:51:04Z Natalia 124304+nessita@users.noreply.github.com 2023-10-04T12:51:04Z urn:sha1:c22017bd1dddb5b57d8a179e6378ef0c8d7f5eeb [4.2.x] Fixed CVE-2023-43665 -- Mitigated potential DoS in django.utils.text.Truncator when truncating HTML text. 2023-10-04T12:39:49Z Natalia 124304+nessita@users.noreply.github.com 2023-09-19T12:51:48Z urn:sha1:be9c27c4d18c2e6a5be8af4e53c0797440794473 Thanks Wenchao Li of Alibaba Group for the report. [4.2.x] Added stub release notes and release date for 4.2.6, 4.1.12, and 3.2.22. 2023-09-27T17:27:44Z Natalia 124304+nessita@users.noreply.github.com 2023-09-27T17:18:40Z urn:sha1:39fc3f46a8777a499f6358c6f06b4bcfffabb137 Backport of 5e4b75b78a7a84bc30170c2b8e7434525e745c1b from main [4.2.x] Added warning about flatpages and untrusted users. 2023-09-27T17:10:59Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-09-27T17:09:10Z urn:sha1:dd0bf63d3e76ce1e0bc5d6d43f8c853643396887 Backport of 571bab98879578b6ef54ee654ead06736855767d from main [4.2.x] Refs #34320 -- Skipped SchemaTests.test_rename_field_with_check_to_truncated_name on MariaBD 10.5.2+. 2023-09-27T13:51:52Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-09-27T13:51:52Z urn:sha1:fec4ed0a250841f41066cbbc9581993ba378d268 This crashes since MariaDB was bumped to 10.5 on Jenkins. [4.2.x] Fixed #34840 -- Avoided casting string base fields on PostgreSQL. 2023-09-22T04:07:19Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-09-22T04:01:11Z urn:sha1:a148461f1fa7aceb2ea6c9dc203b67a170884445 Thanks Alex Vandiver for the report. Regression in 09ffc5c1212d4ced58b708cbbf3dfbfb77b782ca. Backport of 779cd28acb1f7eb06f629c0ea4ded99b5ebb670a from main. [4.2.x] Refs #34808 -- Doc'd that aggregation functions on empty groups can return None. 2023-09-21T16:18:15Z David Sanders shang.xiao.sanders@gmail.com 2023-09-20T13:58:23Z urn:sha1:b08f53ff46238301431084b50762a40170d7869d Backport of 78b5c9075348aa12da2e024f6ece29d1d652dfdd from main [4.2.x] Added updating the Django release process on Trac to release steps. 2023-09-19T12:29:25Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-09-19T06:22:31Z urn:sha1:c70f08c4aa55b097fceb53f68392887d9ac2fd16 Backport of 7c1cf585e80114b6e531b40bd2954406d033afe3 from main [4.2.x] Fixed typo in docs/howto/custom-file-storage.txt. 2023-09-16T05:40:17Z therealrinku rinkunited2032@gmail.com 2023-09-16T03:17:09Z urn:sha1:d485aa2732e4219756c99120a8326cc33b291e34 Backport of aebedb7bd1bd9774823d15cc1041dcdce6fb172a from main [4.2.x] Corrected QuerySet.prefetch_related() note about GenericRelation(). 2023-09-16T04:58:08Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-09-16T04:57:38Z urn:sha1:ff26e6ad845e112d2ab76549ea740fb1d82d1c54 GenericRelation is a reverse generic relationship so it's always homogeneous. Mentioning this as a restriction is confusing. Backport of 88b5b7b8e56667b0f55ea6f04038b6ac77c57b98 from main