summaryrefslogtreecommitdiff
path: root/django/core
AgeCommit message (Collapse)Author
2023-03-06[4.2.x] Fixed #34386 -- Made SMTP backend load default system root CA ↵Dmitriy Sintsov
certificates by default. Regression in 2848e5d0ce5cf3c31fe87525536093b21d570f69. Backport of c914d6cff176ae6bfab2f33a84bcfd45208f1894 from main
2023-02-14[4.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.Markus Holtermann
Thanks to Jakob Ackermann for the report.
2023-02-10[4.2.x] Fixed #32813 -- Made runserver display port after binding.Dhanush
Thanks Florian Apolloner for the review. Backport of a18d20ca97e6799152c1e0b6f007fde943053dcb from main
2023-02-03[4.2.x] Fixed #34259 -- Passed called_from_command_line to command subparsers.Adam Johnson
Backport of 017fa23d3b0aee9142f531c2a0002fc86c82a54c from main
2023-02-01[4.2.x] Refs #33476 -- Applied Black's 2023 stable style.David Smith
Black 23.1.0 is released which, as the first release of the year, introduces the 2023 stable style. This incorporates most of last year's preview style. https://github.com/psf/black/releases/tag/23.1.0 Backport of 097e3a70c1481ee7b042b2edd91b2be86fb7b5b6 from main
2023-01-27[4.2.x] Fixed #28054 -- Made runserver not return response body for HEAD ↵Sarah Boyce
requests. Co-authored-by: jannschu <jannik.schuerg@posteo.de> Backport of 8acc433e415cd771f69dfe84e57878a83641e78b from main
2023-01-26[4.2.x] Fixed #34294 -- Protected django.core.files.locks against argtypes ↵Simon Sawicki
redefinition on Windows. Backport of 7eb5391b71f473dd13abdaaef143a5509160487f from main
2023-01-12Refs #26029 -- Deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings.Jarosław Wygoda
2023-01-12Fixed #26029 -- Allowed configuring custom file storage backends.Jarosław Wygoda
2023-01-10Fixed #34110 -- Added in-memory file storage.Francesco Panico
Thanks Paolo Melchiorre, Carlton Gibson, and Mariusz Felisiak for reviews.
2023-01-05Fixed #33865 -- Optimized LimitedStream wrapper.Nick Pope
The current implementation of LimitedStream is slow because .read() performs an extra copy into a buffer and .readline() performs two extra copies. The stream being wrapped is already typically a BytesIO object so this is unnecessary. This implementation has largely been untouched for 12 years and, inspired by a simpler implementation in werkzeug, it was possible to achieve the following performance improvement: LimitedStream.read() (single line): Mean +- std dev: [bench_limitedstream-main] 286 ns +- 6 ns -> [bench_limitedstream-patch] 227 ns +- 6 ns: 1.26x faster LimitedStream.readline() (single line): Mean +- std dev: [bench_limitedstream-main] 507 ns +- 11 ns -> [bench_limitedstream-patch] 232 ns +- 8 ns: 2.18x faster LimitedStream.read(8192) (single line): Mean +- std dev: [bench_limitedstream-main] 360 ns +- 8 ns -> [bench_limitedstream-patch] 297 ns +- 6 ns: 1.21x faster LimitedStream.readline(8192) (single line): Mean +- std dev: [bench_limitedstream-main] 602 ns +- 10 ns -> [bench_limitedstream-patch] 305 ns +- 10 ns: 1.98x faster LimitedStream.read() (multiple lines): Mean +- std dev: [bench_limitedstream-main] 290 ns +- 5 ns -> [bench_limitedstream-patch] 236 ns +- 6 ns: 1.23x faster LimitedStream.readline() (multiple lines): Mean +- std dev: [bench_limitedstream-main] 517 ns +- 19 ns -> [bench_limitedstream-patch] 239 ns +- 7 ns: 2.16x faster LimitedStream.read(8192) (multiple lines): Mean +- std dev: [bench_limitedstream-main] 363 ns +- 8 ns -> [bench_limitedstream-patch] 311 ns +- 11 ns: 1.17x faster LimitedStream.readline(8192) (multiple lines): Mean +- std dev: [bench_limitedstream-main] 601 ns +- 12 ns -> [bench_limitedstream-patch] 308 ns +- 7 ns: 1.95x faster Geometric mean: 1.59x faster
2022-12-28Fixed #14094 -- Added support for unlimited CharField on PostgreSQL.Adrian Torres
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2022-12-28Fixed #18468 -- Added support for comments on columns and tables.kimsoungryoul
Thanks Jared Chung, Tom Carrick, David Smith, Nick Pope, and Mariusz Felisiak for reviews. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Co-authored-by: Nick Pope <nick@nickpope.me.uk>
2022-12-22Fixed #33735 -- Added async support to StreamingHttpResponse.Carlton Gibson
Thanks to Florian Vazelle for initial exploratory work, and to Nick Pope and Mariusz Felisiak for review.
2022-12-20Refs #34118 -- Adopted asgiref coroutine detection shims.Carlton Gibson
Thanks to Mariusz Felisiak for review.
2022-12-16Fixed #34212 -- Made RedisCacheClient.incr() use write connection.Leo
Co-authored-by: Sin-Woo Bang <sinwoobang@gmail.com>
2022-12-15Fixed #33308 -- Added support for psycopg version 3.Daniele Varrazzo
Thanks Simon Charette, Tim Graham, and Adam Johnson for reviews. Co-authored-by: Florian Apolloner <florian@apolloner.eu> Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2022-12-13Fixed #34209 -- Prevented FileBasedCache.has_key() crash caused by a race ↵Marti Raudsepp
condition.
2022-12-09Fixed #33199 -- Deprecated passing positional arguments to ↵SirAbhi13
Signer/TimestampSigner. Thanks Jacob Walls for the implementation idea.
2022-12-08Made inspectdb used Cursor.description.display_size for CharFields' max_length.Mariusz Felisiak
internal_size is size for fixed-size types not for char types.
2022-11-16Refs #34118 -- Used smtplib's context parameter instead of keyfile and certfile.Mariusz Felisiak
keyfile and certfile parameters were removed in Python 3.12, see https://github.com/python/cpython/commit/ef0e72b31d22f780d3a165d7d0471806061fe380
2022-11-11Refs #34110 -- Added StorageSettingsMixin.Francesco Panico
2022-11-11Refs #34110 -- Reorganized django.core.files.storage into a separate module.Francesco Panico
2022-11-10Updated documentation and comments for RFC updates.Nick Pope
- Updated references to RFC 1123 to RFC 5322 - Only partial as RFC 5322 sort of sub-references RFC 1123. - Updated references to RFC 2388 to RFC 7578 - Except RFC 2388 Section 5.3 which has no equivalent. - Updated references to RFC 2396 to RFC 3986 - Updated references to RFC 2616 to RFC 9110 - Updated references to RFC 3066 to RFC 5646 - Updated references to RFC 7230 to RFC 9112 - Updated references to RFC 7231 to RFC 9110 - Updated references to RFC 7232 to RFC 9110 - Updated references to RFC 7234 to RFC 9111 - Tidied up style of text when referring to RFC documents
2022-11-07Refs #33374 -- Adjusted full match condition handling.Simon Charette
Adjusting WhereNode.as_sql() to raise an exception when encoutering a full match just like with empty matches ensures that all case are explicitly handled.
2022-10-24Fixed #29027 -- Fixed file_move_safe() crash when moving files with SELinux.Yuri Konotopov
Thanks Florian Apolloner for the review.
2022-10-20Fixed #34085 -- Made management commands don't use black for non-Python files.Carlton Gibson
Bug in d113b5a837f726d1c638d76c4e88445e6cd59fd5. Co-authored-by: programmylife <acmshar@gmail.com> Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2022-10-13Removed unused branch in Paginator.validate_number().Marcelo Galigniana
Unused since 96cf3656c48f6c42714a70b4546bc42f7b904185.
2022-10-04Fixed #34068 -- Corrected output of runserver command for "0" IP address.Dhanush
Thanks David Sanders for the review.
2022-10-03Refs #32987 -- Relaxed system check for template tag modules with the same ↵Mariusz Felisiak
name by turning into a warning. Thanks Claude Paroz for the report. Regression in 004b4620f6f4ad87261e149898940f2dcd5757ef.
2022-09-28Fixed #34051 -- Made makemigrations --check exit before making migrations.Jacob Walls
2022-09-27Fixed #34052 -- Made migrate --check don't emit signals and output when up ↵JunKi Yoon
to date.
2022-09-26Improved migrate help text for the --check option.Mike Lissner
2022-09-17Fixed #34014 -- Fixed DecimalValidator validating 0 in positive exponent ↵Kamil Turek
scientific notation. Thanks Shiplu Mokaddim for the report.
2022-09-14Fixed #29186 -- Fixed pickling HttpRequest and subclasses.Anvesh Mishra
2022-09-07Fixed #33986 -- Hardened binary lookup in template commands.Shai Berger
Made template commands look up formatters before writing files. This makes sure files included in the template are not identified as executable formatter commands, even in case the template is rendered into the system path (as might easily happen on Windows, where the current directory is on the system path by default). While at it, Warned about trusting custom templates for startapp/startproject. Thanks Trung Pham of Viettel Cyber Security for reporting the issue, Django Security Team for discussions, and Adam Johnson and Carlton Gibson for reviews.
2022-09-05Fixed #33937 -- Optimized serialization of related m2m fields without ↵Mark Evans
natural keys.
2022-08-23Fixed #33949 -- Fixed fixture dirs duplicates with Path instances.Claude Paroz
2022-07-26Refs #27236 -- Reverted "Refs #27236 -- Added generic mechanism to handle ↵Mariusz Felisiak
the deprecation of migration operations." This reverts commit 41019e48bbf082c985e6ba3bad34d118b903bff1.
2022-07-25Removed obsolete note in management.get_commands() docstring.Anders Kaseorg
Commit 901c3708fb8a2e51bddd37358f8e536282a8c266 documented that the return dict could directly include command modules instead of name strings, which was true at the time. However, that possibility was removed in commit 38f1fe3b35c212136d959538a309c33bf2d340a9.
2022-07-08Refs #27236 -- Added generic mechanism to handle the deprecation of ↵David Wobrock
migration operations.
2022-07-06Fixed #33826 -- Fixed RedisCache.set_many()/delete_many() crash with an ↵Christos Kopanos
empty list.
2022-07-06Used list comprehensions in RedisCache.delete_many().Christos Kopanos
2022-07-06Fixed #33823 -- Made inspectdb generate unique related_name when reverse ↵Vladimir Kochetkov
accessor clashes.
2022-06-23Fixed #33800 -- Fixed system check for the same template tag module in ↵Mariusz Felisiak
installed apps and template tag libraries. Thanks Claude Paroz for the report. Regression in 004b4620f6f4ad87261e149898940f2dcd5757ef.
2022-06-20Fixed #33657 -- Allowed customizing formatter class of argument parsers.Abhinav Yadav
2022-06-17Fixed #24870 -- Added --update option to makemigrations command.David Wobrock
2022-06-17Refs #24870 -- Refactored out get_relative_path() hook in makemigrations.David Wobrock
2022-06-09Fixed #33755 -- Moved ASGI body-file cleanup into request class.Jonas Lundberg
2022-06-08Fixed #33565 -- Improved locale format validation for the makemessages command.Ronnie van den Crommenacker
generated by cgit v1.3 (git 2.53.0) at 2026-07-10 14:44:54 +0000