django.git/docs/releases/3.2.1.txt, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2022-09-19T03:19:01Z Fixed typo in docs/releases/3.2.1.txt. 2022-09-19T03:19:01Z Jacob Walls jacobtylerwalls@gmail.com 2022-09-19T03:19:01Z urn:sha1:cfe3008123ed7c9e3f3a4d51d4a22f9d96634e33 Refs #32718 -- Corrected CVE-2021-31542 release notes. 2021-05-12T08:42:01Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-05-12T08:42:01Z urn:sha1:d1f1417caed648db2f81a1ec28c47bf958c01958 Fixed CVE-2021-31542 -- Tightened path & file name sanitation in file uploads. 2021-05-04T06:44:42Z Florian Apolloner florian@apolloner.eu 2021-04-14T16:23:44Z urn:sha1:0b79eb36915d178aef5c6a7bbce71b1e76d376d3 Fixed #32632, Fixed #32657 -- Removed flawed support for Subquery deconstruction. 2021-04-28T10:13:55Z Simon Charette charette.s@gmail.com 2021-04-24T05:07:18Z urn:sha1:c8b659430556dca0b2fe27cf2ea0f8290dbafecd Subquery deconstruction support required implementing complex and expensive equality rules for sql.Query objects for little benefit as the latter cannot themselves be made deconstructible to their reference to model classes. Making Expression @deconstructible and not BaseExpression allows interested parties to conform to the "expression" API even if they are not deconstructible as it's only a requirement for expressions allowed in Model fields and meta options (e.g. constraints, indexes). Thanks Phillip Cutter for the report. This also fixes a performance regression in bbf141bcdc31f1324048af9233583a523ac54c94. Fixed #32687 -- Restored passing process’ environment to underlying tool in dbshell on PostgreSQL. 2021-04-27T08:43:35Z Konstantin Alekseev mail@kalekseev.com 2021-04-26T12:19:13Z urn:sha1:6e742dabc95b00ba896434293556adeb4dbaee8a Regression in bbe6fbb8768e8fb1aecb96d51c049d7ceaf802d3. Fixed #32682 -- Made admin changelist use Exists() instead of distinct() for preventing duplicates. 2021-04-27T08:34:47Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-04-26T07:22:46Z urn:sha1:187118203197801c6cb72dc8b06b714b23b6dd3d Thanks Zain Patel for the report and Simon Charette for reviews. The exception introduced in 6307c3f1a123f5975c73b231e8ac4f115fd72c0d revealed a possible data loss issue in the admin. Fixed #32681 -- Fixed VariableDoesNotExist when rendering some admin template. 2021-04-26T05:08:16Z Zain Patel zain.patel@quantumblack.com 2021-04-24T00:50:27Z urn:sha1:4e5bbb6ef2287126badd32842b239f4a8a7394ca Regression in 84609b3205905097d7d3038d32e6101f012c0619. Fixed #32650 -- Fixed handling subquery aliasing on queryset combination. 2021-04-21T07:49:15Z Simon Charette charette.s@gmail.com 2021-04-21T02:25:52Z urn:sha1:6d0cbe42c3d382e5393d4af48185c546bb0ada1f This issue started manifesting itself when nesting a combined subquery relying on exclude() since 8593e162c9cb63a6c0b06daf045bc1c21eb4d7c1 but sql.Query.combine never properly handled subqueries outer refs in the first place, see QuerySetBitwiseOperationTests.test_subquery_aliases() (refs #27149). Thanks Raffaele Salmaso for the report. Fixed #32665 -- Fixed caches system check crash when STATICFILES_DIRS is a list of 2-tuples. 2021-04-21T07:41:37Z Mariusz Felisiak felisiak.mariusz@gmail.com 2021-04-21T07:41:37Z urn:sha1:34d1905712d33e72c76b3a55a4fc24abbd11be6c Thanks Jared Lockhart for the report. Regression in c36075ac1dddfa986340b1a5e15fe48833322372. Fixed #32647 -- Restored multi-row select with shift-modifier in admin changelist. 2021-04-21T06:31:06Z Carlton Gibson carlton.gibson@noumenal.es 2021-04-15T15:15:28Z urn:sha1:5c73fbb6a93ee214678f02ba4027f18dff49337b Regression in 30e59705fc3e3e9e8370b965af794ad6173bf92b.