django.git/django/db/models/sql/query.py, branch 5.0.12 django http://cgit.adnoto.dev/django.git/atom?h=5.0.12 2024-08-06T06:51:55Z [5.0.x] Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection attacks against JSON fields. 2024-08-06T06:51:55Z Simon Charette charette.s@gmail.com 2024-07-25T16:19:13Z urn:sha1:32ebcbf2e1fe3e5ba79a6554a167efce81f7422d Thanks Eyal (eyalgabay) for the report. [5.0.x] Fixed #35135 -- Made FilteredRelation raise ValueError on querysets as rhs. 2024-01-30T04:54:39Z Nicolas Delaby nicolas.delaby@infarm.com 2024-01-23T10:51:24Z urn:sha1:a5440054d2285b2abf54251a33990fd9a6f94060 Regression in 59f475470494ce5b8cbff816b1e5dafcbd10a3a3. Backport of 820c5f1bacd41713bd30d8b5fefb66752ff15c4c from main [5.0.x] Applied Black's 2024 stable style. 2024-01-26T11:55:56Z Mariusz Felisiak felisiak.mariusz@gmail.com 2024-01-26T11:45:07Z urn:sha1:0379e7532fdf3212b1fe22a58826109c23009be3 https://github.com/psf/black/releases/tag/24.1.0 Backport of 305757aec19c9d5111e4d76095ae0acd66163e4b from main [5.0.x] Fixed #35050 -- Fixed prefixing field names in FilteredRelation(). 2023-12-23T17:33:07Z David Wobrock david.wobrock@gmail.com 2023-12-21T22:20:36Z urn:sha1:9aad44150fa7632b894c8b1d1cb9c6dde131b577 Thanks Mark Zorn for the report. Regression in 59f475470494ce5b8cbff816b1e5dafcbd10a3a3. Backport of 14917c9ae272f47d23401100faa6cefa8e1728bf from main [5.0.x] Fixed #34975 -- Fixed crash of conditional aggregate() over aggregations. 2023-11-18T15:52:54Z Simon Charette charette.s@gmail.com 2023-11-18T00:42:44Z urn:sha1:49f1ced86398177c125e256d7e812eb34fae672e Adjustments made to solve_lookup_type to defer the resolving of references for summarized aggregates failed to account for similar requirements for lookup values which can also reference annotations through Aggregate.filter. Regression in b181cae2e3697b2e53b5b67ac67e59f3b05a6f0d. Refs #25307. Thanks Sergey Nesterenko for the report. Backport of 7530cf3900ab98104edcde69e8a2a415e82b345a from main [5.0.x] Fixed #34798 -- Fixed QuerySet.aggregate() crash when referencing expressions containing subqueries. 2023-10-16T04:15:08Z Simon Charette charette.s@gmail.com 2023-10-16T01:59:15Z urn:sha1:4ccca9eedc2f453602a20f562399a835a24817c1 Regression in 59bea9efd2768102fc9d3aedda469502c218e9b7, complements e5c844d6f2a4ac6ae674d741b5f1fa2a688cedf4. Refs #28477, #34551. Thanks Haldun Komsuoglu for the report. Backport of 3b4a571275d967512866012955eb0b3ae486d63c from main Fixed #34362 -- Fixed FilteredRelation() crash on conditional expressions. 2023-08-11T10:32:18Z Francesco Panico panico.francesco@gmail.com 2023-03-04T17:59:53Z urn:sha1:59f475470494ce5b8cbff816b1e5dafcbd10a3a3 Thanks zhu for the report and Simon Charette for reviews. Fixed #34743 -- Fixed Meta.constraints validation crash when using pk. 2023-08-11T06:51:29Z Francesco Panico francesco.panico@fiscozen.it 2023-08-10T14:08:11Z urn:sha1:1506f498fe42b65730ece809300c2c0963e38c5a Thanks Nwawel A Iroume for the report. Removed unneeded escapes in regexes. 2023-08-02T17:53:16Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-08-02T17:53:16Z urn:sha1:9b9c805cedb08621bd5dc58a01a6478eb7cc49a9 Special characters lose their special meaning inside sets of characters. "-" lose its special meaning if it's placed as the first or last character. Follow up to 7c6b66383da5f9a67142334cd2ed2d769739e8f1. Fixed #34750 -- Fixed QuerySet.count() when grouping by unused multi-valued annotations. 2023-08-01T14:16:28Z Mariusz Felisiak felisiak.mariusz@gmail.com 2023-08-01T14:16:28Z urn:sha1:c9b9a52edc66be117c6e5b5214fa788a4d5db7a8 Thanks Toan Vuong for the report. Thanks Simon Charette for the review. Regression in 59bea9efd2768102fc9d3aedda469502c218e9b7.