summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-05-03[4.1.x] Bumped version for 4.1.9 release.4.1.9Mariusz Felisiak
2023-05-03[4.1.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of ↵Mariusz Felisiak
validation when uploading multiple files using one form field. Thanks Moataz Al-Sharida and nawaik for reports. Co-authored-by: Shai Berger <shai@platonix.com> Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-04-26[4.1.x] Added missing backticks in docs/releases/1.7.txt.Mariusz Felisiak
2023-04-26[4.1.x] Added stub release notes for 4.1.9 and 3.2.19.Mariusz Felisiak
Backport of 18a7f2c711529f8e43c36190a5e2479f13899749 from main
2023-04-07[4.1.x] Refs #34118 -- Fixed CustomChoicesTests.test_uuid_unsupported on ↵Mariusz Felisiak
Python 3.11.4+. https://github.com/python/cpython/commit/5342f5e713e0cc45b6f226d2d053a8cde1b4d68e Follow up to 38e63c9e61152682f3ff982c85a73793ab6d3267. Backport of 2eb1f37260f0e0b71ef3a77eb5522d2bb68d6489 from main
2023-04-05[4.1.x] Post-release version bump.Mariusz Felisiak
2023-04-05[4.1.x] Bumped version for 4.1.8 release.4.1.8Mariusz Felisiak
2023-04-05[4.1.x] Added release date for 4.1.8.Mariusz Felisiak
Backport of fdf0a367bdd72c70f91fb3aed77dabbe9dcef69f from main
2023-03-08[4.1.x] Fixed #34384 -- Fixed session validation when rotation secret keys.David Wobrock
Bug in 0dcd549bbe36c060f536ec270d34d9e7d4b8e6c7. Thanks Eric Zarowny for the report. Backport of 2396933ca99c6bfb53bda9e53968760316646e01 from main
2023-03-06[4.1.x] Added stub release notes for 4.1.8.Mariusz Felisiak
Backport of 9a07999aef7958c9b5441e368cd90646d0edc5c9 from main
2023-02-16[4.1.x] Refs #21080, Refs #34322 -- Added warning to ↵Mariusz Felisiak
ManifestStaticFilesStorage docs about paths in comments. Backport of bae053d497ba8a8de7e4f725973924bfb1885fd2 from main.
2023-02-15[4.1.x] Refs #32339 -- Doc'd BaseFormSet.as_div()David Smith
Backport of 4038a8df0b8c20624ba826cf9af8f532e5a51aaa from main.
2023-02-14[4.1.x] Added CVE-2023-24580 to security archive.Carlton Gibson
Backport of ecafcaf634fcef93f9da8cb12795273dd1c3a576 from main
2023-02-14[4.1.x] Post-release version bump.Carlton Gibson
2023-02-14[4.1.x] Bumped version for 4.1.7 release.4.1.7Carlton Gibson
2023-02-14[4.1.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.Markus Holtermann
Thanks to Jakob Ackermann for the report.
2023-02-13[4.1.x] Fixed #34318 -- Added release note for ↵Sota Tabu
4bfe8c0eec835b8eaffcda7dc1e3b203751a790a. Backport of 3e9d413231edc29768cc7ca0427e63b19233f562 from main
2023-02-08[4.1.x] Fixed #34319 -- Fixed Model.validate_constraints() crash on ↵Mariusz Felisiak
ValidationError with no code. Thanks Mateusz Kurowski for the report. Regression in 667105877e6723c6985399803a364848891513cc. Backport of 2fd755b361d3da2cd0440fc9839feb2bb69b027b from main
2023-02-07[4.1.x] Added stub release notes for 4.0.10 and 3.2.18.Carlton Gibson
Set date for 4.1.7 release. Backport of 7e003428f96d616c1f77fed84882a95e63bc3644 from main
2023-02-01[4.1.x] Added stub release notes for 4.1.7.Mariusz Felisiak
Backport of f3c89744cc801cc7d134bca9958c4a74aa76380f from main
2023-02-01[4.1.x] Added CVE-2023-23969 to security archive.Mariusz Felisiak
Backport of 36e3eef7d5a4c88671d20a561788679d0d9c334c from main
2023-02-01[4.1.x] Ignored a637d0bd22665edfe7af40b4da3297462ec3c9cf formatting changes ↵Mariusz Felisiak
in git blame.
2023-02-01[4.1.x] Refs #33476 -- Applied Black's 2023 stable style.David Smith
Black 23.1.0 is released which, as the first release of the year, introduces the 2023 stable style. This incorporates most of last year's preview style. https://github.com/psf/black/releases/tag/23.1.0 Backport of 097e3a70c1481ee7b042b2edd91b2be86fb7b5b6 from main.
2023-02-01[4.1.x] Post-release version bump.Mariusz Felisiak
2023-02-01[4.1.x] Bumped version for 4.1.6 release.4.1.6Mariusz Felisiak
2023-02-01[4.1.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for ↵Nick Pope
Accept-Language. The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue.
2023-01-31[4.1.x] Bumped versions in pre-commit and npm configurations.Mariusz Felisiak
Backport of f825536b5e09b3a047fec0c10aabd91bace0995c from main
2023-01-31[4.1.x] Fixed E501 flake8 error.Mariusz Felisiak
2023-01-31[4.1.x] Fixed #34180 -- Added note about resetting language in test tear-downs.Durval Carvalho
Co-authored-by: Faris Naimi <farisfaris66@gmail.com> Backport of 40217d1a82b0c16cddba377325d12b2c253f402a from main
2023-01-26[4.1.x] Fixed #34291 -- Fixed Meta.constraints validation crash on ↵Mariusz Felisiak
UniqueConstraint with ordered expressions. Thanks Dan F for the report. Bug in 667105877e6723c6985399803a364848891513cc. Backport of 2b1242abb3989f5d74e787b09132d01bcbee5b55 from main.
2023-01-25[4.1.x] Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson
Backport of d8e1442ce2c56282785dd806e5c1147975e8c857 from main
2023-01-25[4.1.x] Set date and added stub release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson
Backport of 1df963ad2476726d63be132c0cee47e07b8250d7 from main
2023-01-25[4.1.x] Corrected passenv value for tox 4.0.6+.Stephen
Backport of 34b328814976a2e2f7907361a494202763649f3f from main
2023-01-20[4.1.x] Fixed #34242 -- Doc'd that primary key is set to None when deleting ↵noFFENSE
objects. Backport of 5cd1385356d4b275133ddb0f8c78b2f37c5901eb from main
2023-01-16[4.1.x] Fixed #23718 -- Doc'd that test mirrors require TransactionTestCase.sarahboyce
Co-authored-by: Christian Bundy <me@christianbundy.com> Backport of 0fbdb9784da915fce5dcc1fe82bac9b4785749e5 from main
2023-01-16[4.1.x] Fixed "nulls characters" typo in docs.Steven
Backport of 4b7016866a80ec8582f55fc7eedfa692039e9648 from main
2023-01-12[4.1.x] Fixed thread termination in servers.tests.LiveServerPort on Python ↵Mariusz Felisiak
3.10.9+, 3.11.1+, and 3.12+. Class cleanups registered in TestCase subclasses are no longer called as TestCase.doClassCleanups() only cleans up the particular class, see https://github.com/python/cpython/commit/c2102136be569e6fc8ed90181f229b46d07142f8 Backport of d02a9f0cee84e3d23f676bdf2ab6aadbf4a5bfe8 from main
2023-01-04[4.1.x] Fixed #34232 -- Fixed typo in docs/intro/tutorial07.txt.Raj Desai
Backport of d2310f6473593d28c14b63a72253408b568e100a from main
2023-01-02[4.1.x] Added stub release notes for 4.1.6.Mariusz Felisiak
Backport of 75500feecddcb27b6ab65c9057e7317024cef761 from main
2023-01-02[4.1.x] Post-release version bump.Mariusz Felisiak
2023-01-02[4.1.x] Bumped version for 4.1.5 release.4.1.5Mariusz Felisiak
2023-01-02[4.1.x] Added release date for 4.1.5.Mariusz Felisiak
Backport of 174d8157b5700f6451ac0bdc3eef7e73121bc4a4 from main
2022-12-29[4.1.x] Disabled auto-created table of contents entries on Sphinx 5.2+.Mariusz Felisiak
Auto-created table of contents entries for all domain objects (e.g. functions, classes, attributes, etc.) were added in Sphinx 5.2, see https://github.com/sphinx-doc/sphinx/issues/6316. An option to control new table of contents entries was added in Sphinx 5.2.3, see https://github.com/sphinx-doc/sphinx/pull/10886. Backport of 279967ec859a9a5240318cf29a077539b0e3139f from main
2022-12-20[4.1.x] Updated translations from Transifex.Mariusz Felisiak
Updated Bulgarian, Esperanto, Hungarian, Japanese, Macedonian, Persian, Portuguese (Brazil), Russian, Spanish, and Turkmen translations.
2022-12-20[4.1.x] Refs DEP 12 -- Renamed TB to Steering Council wherever mentioned.Andrew Godwin
Backport of a09d39f28609c707a62dbbbdc4e55489fae1631f from main
2022-12-19[4.1.x] Fixed typo in docs/topics/async.txt.Mariusz Felisiak
Backport of 0c60d11bdbe5bf353e3fa0f2db1cb85786ca3448 from main
2022-12-16[4.1.x] Fixed typo in docs/topics/http/sessions.txt.TAKAHASHI Shuuji
Backport of 05d70fb92b72f9701bea99c809a5edd53b290de9 from main
2022-12-14[4.1.x] Fixed #34213 -- Updated PostgreSQL package names in installing ↵Paolo Melchiorre
PostGIS docs. Backport of d44ee518c4c110af25bebdbedbbf9fba04d197aa from main
2022-12-14[4.1.x] Removed KyngChaos packages from docs.Mariusz Felisiak
See https://www.kyngchaos.com/2022/09/11/goodbye-software-packaging/ Backport of 9d9ec0c79f52efad3a4d3f6ac4644d5c9fb1d22c from main
2022-12-10[4.1.x] Fixed #34205 -- Fixed Meta.constraints validation crash with ↵James Gillard
ArrayField and __len lookup. Regression in 88fc9e2826044110b7b22577a227f122fe9c1fb5 that began manifesting in Django 4.1. Backport of c5ed884eabf3b2b67581c55bf6c87e721f69157f from main.