summaryrefslogtreecommitdiff
path: root/django/db/models
AgeCommit message (Collapse)Author
2021-05-13[2.2.x] Fixed #32718 -- Relaxed file name validation in FileField.Mariusz Felisiak
- Validate filename returned by FileField.upload_to() not a filename passed to the FileField.generate_filename() (upload_to() may completely ignored passed filename). - Allow relative paths (without dot segments) in the generated filename. Thanks to Jakub Kleň for the report and review. Thanks to all folks for checking this patch on existing projects. Thanks Florian Apolloner and Markus Holtermann for the discussion and implementation idea. Regression in 0b79eb36915d178aef5c6a7bbce71b1e76d376d3. Backport of b55699968fc9ee985384c64e37f6cc74a0a23683 from main.
2021-04-27[2.2.x] Fixed CVE-2021-31542 -- Tightened path & file name sanitation in ↵Florian Apolloner
file uploads.
2020-08-13[2.2.x] Fixed #31863 -- Prevented mutating model state by copies of model ↵Gert Burger
instances. Regression in bfb746f983aa741afa3709794e70f1e0ab6040b5. Backport of 94ea79be137f3cb30949bf82198e96e094f2650d from master
2020-08-11[2.2.x] Fixed #31866 -- Fixed locking proxy models in ↵Daniel Hillier
QuerySet.select_for_update(of=()). Backport of 60626162f76f26d32a38d18151700cb041201fb3 from master
2020-02-11[2.2.x] Fixed #31246 -- Fixed locking models in ↵Abhijeet Viswa
QuerySet.select_for_update(of=()) for related fields and parent link fields with multi-table inheritance. Partly regression in 0107e3d1058f653f66032f7fd3a0bd61e96bf782. Backport of 1712a76b9dfda1ef220395e62ea87079da8c9f6c from master.
2019-12-02[2.2.x] Fixed #30953 -- Made select_for_update() lock queryset's model when ↵Mariusz Felisiak
using "self" with multi-table inheritance. Thanks Abhijeet Viswa for the report and initial patch. Backport of 0107e3d1058f653f66032f7fd3a0bd61e96bf782 from master
2019-11-04[2.2.x] Fixed #30931 -- Restored ability to override Model.get_FIELD_display().Carlton Gibson
Thanks Sergey Fedoseev for the implementation idea. Regression in a68ea231012434b522ce45c513d84add516afa60. Backport of 2d38eb0ab9f78d68c083a5b78b1eca39027b279a from master
2019-09-10[2.2.x] Fixed #30754 -- Prevented inclusion of aliases in partial index ↵Simon Charette
conditions. SQLite doesn't repoint table aliases in partial index conditions on table rename which breaks the documented table alteration procedure. Thanks Pēteris Caune for the report. Backport of 34decdebf157b6f05836009cc1967f74ee541fdf from master
2019-08-15[2.2.x] Fixed #30449 -- Fixed ↵zeyneloz
RelatedFieldListFilter/RelatedOnlyFieldListFilter to respect model's Meta.ordering. Regression in 6d4e5feb79f7eabe8a0c7c4b87f25b1a7f87ca0b. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 00035672a460b6eb5442d2837bc783f8af28c6f3 from master
2019-07-10[2.2.x] Fixed #30628 -- Adjusted expression identity to differentiate bound ↵Simon Charette
fields. Expressions referring to different bound fields should not be considered equal. Thanks Julien Enselme for the detailed report. Regression in bc7e288ca9554ac1a0a19941302dea19df1acd21. Backport of ee6e93ec8727d0f5ed33190a3c354867669ed72f from master
2019-06-05[2.2.x] Fixed #30542 -- Fixed crash of numerical aggregations with filter.Étienne Beaulé
Filters in annotations crashed when used with numerical-type aggregations (i.e. Avg, StdDev, and Variance). This was caused as the source expressions no not necessarily have an output_field (such as the filter field), which lead to an AttributeError: 'WhereNode' object has no attribute output_field. Thanks to Chuan-Zheng Lee for the report. Regression in c690afb873cac8035a3cb3be7c597a5ff0e4b261 and two following commits. Backport of 4b6dfe16226a81fea464ac5f77942f4d6ba266e8 from master.
2019-05-18[2.2.x] Fixed #30463 -- Fixed crash of deprecation message when ↵ruchit2801
Meta.ordering contains expressions. Regression in 1b1f64ee5a78cc217fead52cbae23114502cf564. Backport of 04042b2b440f0bf50eb908d52cfe76af430e1738 from master
2019-05-07[2.2.x] Fixed #26678 -- Doc'd that RelatedManager.add()/remove()/set() ↵Tobias Kunze
accepts the field the relation points to. Backport of a44a21a22f20c1a710670676fcca798dd6bb5ac0 from master
2019-04-30[2.2.x] Fixed #30412 -- Fixed crash when adding check constraints with OR'ed ↵can
condition on Oracle and SQLite. Backport of 719b7466203181066d9537d2e3bec687dffc9f41 from master
2019-04-19[2.2.x] Fixed #30328 -- Fixed crash of IntegerField.validators when ↵Scott Fitsimones
limit_value in a custom validator is callable. Backport of a14c0fda15db7e0eb982ac7b68d47b45fc95b4cb from master
2019-04-18[2.2.x] Fixed #30335, #29139 -- Fixed crash when ordering or aggregating ↵can
over a nested JSONField key transform. Backport of d87bd29c4f8dfcdf3f4a4eb8340e6770a2416fe3 from master.
2019-04-15[2.2.x] Fixed #30325 -- Reverted "Fixed #29725 -- Removed unnecessary join ↵Mariusz Felisiak
in QuerySet.count() and exists() on a many-to-many relation." This reverts commit 1299421cadc4fcf63585f2f88337078e43e660e0 due to a regression with custom managers. Backport of 5f7991c42cff73b6278106d499d719b726f85ead from master
2019-04-08[2.2.x] Fixed #30330 -- Fixed setting of primary key to None during fast-delete.Florian Apolloner
Regression in bc7dd8490b882b2cefdc7faf431dc64c532b79c9. Backport of afc708cf6d047b35db57bd7c55baeffef459d279 from master
2019-03-22[2.2.x] Fixed #30280 -- Restored Model.get_FIELD_display()'s coercion of ↵Matthias Kestenholz
lazy strings. Reverted cc79c7ee637e65c8da27e56d746c87903d5ec901. Backport of ea071870f943c23a8eaf36dfcdf382afd6478fd1 from master.
2019-03-14[2.2.x] Fixed #30254 -- Allowed model metaclasses to access the attribute ↵Matt Westcott
dict in __init__(). Regression in a68ea231012434b522ce45c513d84add516afa60. Backport of 58ad030d05fa50cfed327368ab61defca3303e02 from master.
2019-02-13[2.2.x] Fixed #30184 -- Removed ellipsis characters from shell output strings.Dan Davis
Partially reverted 50b8493581fea3d7137dd8db33bac7008868d23a (refs #29654) to avoid a crash when the user shell doesn't support non-ASCII characters. Backport of 2bd8df243ac6fc35e58c9fe90b20c9e42519a5ac from master.
2019-01-30[2.2.x] Fixed E117 and F405 flake8 warnings.Mariusz Felisiak
Backport of 5a5c77d55dc85c7e6cf910243257e408887f412a from master
2019-01-21[2.2.x] Fixed #30120 -- Fixed invalid SQL in distinct aggregate.Simon Charette
Regression in bc05547cd8c1dd511c6b6a6c873a1bc63417b111 (refs #28658). Backport of 65858119d23e37872505a4476e7141c33981fb50 from master.
2019-01-16Fixed #30044 -- Raised a FieldError on inherited field update attempts.Simon Charette
2019-01-16Refs #9475 -- Simplified dictionary unpacking.Simon Charette
2019-01-15Refs #9475 -- Fixed typo, used unpacking generalization, and made ↵Nick Pope
through_defaults kwarg-only.
2019-01-15Fixed #9475 -- Allowed RelatedManager.add(), create(), etc. for m2m with a ↵Collin Anderson
through model.
2019-01-15Fixed #30099 -- Fixed invalid SQL when filtering a Subquery by an aggregate.Nasir Hussain
2019-01-14Removed unnecessary string formatting of strings.Jon Dufresne
2019-01-14Refs #28643 -- Extracted DurationField logic for Avg() and Sum() into mixin.Nick Pope
Also addresses Sum() not handling the filter option correctly.
2019-01-14Refs #28643 -- Changed Variance() to use NumericOutputFieldMixin.Nick Pope
Keeps precision instead of forcing DecimalField to FloatField.
2019-01-14Refs #28643 -- Changed StdDev() to use NumericOutputFieldMixin.Nick Pope
Keeps precision instead of forcing DecimalField to FloatField.
2019-01-14Refs #28643 -- Changed Avg() to use NumericOutputFieldMixin.Nick Pope
Keeps precision instead of forcing DecimalField to FloatField.
2019-01-14Refs #28643 -- Moved db function mixins to a separate module.Nick Pope
2019-01-14Avoided calling as_oracle() for SQLite in Left database function.Nick Pope
2019-01-14Corrected comment in TruncTime database function.Nick Pope
2019-01-14Simplified overriding source expressions in some database functions.Nick Pope
2019-01-14Fixed #30093 -- Fixed ordering of combined queryset ordered by F expressions.Sergey Fedoseev
2019-01-12Refs #28643 -- Added Reverse database function.Nick Pope
Thanks Mariusz Felisiak for Oracle advice and review.
2019-01-12Fixed #30062 -- Added support for unique conditional constraints.Paveł Tyślacki
2019-01-12Used None as the empty value for condition in Index's SQL construction.Paveł Tyślacki
2019-01-11Moved django.db.migrations.writer.SettingsReference to django.conf.Tim Graham
Reduces the possibility of circular imports.
2019-01-10Refs #28643 -- Added NullIf database function.Mads Jensen
Thanks Nick Pope, Mariusz Felisiak, and Tim Graham for reviews.
2019-01-09Fixed #28658 -- Added DISTINCT handling to the Aggregate class.Simon Charette
2019-01-08Simplified some imports for database functions.Nick Pope
Used more specific modules to reduce the risk of circular imports.
2019-01-02Used 4 space hanging indent for dictionaries.Tim Graham
Thanks Mariusz Felisiak for auditing.
2019-01-01Fixed #30060 -- Moved SQL generation for indexes and constraints to ↵Paveł Tyślacki
SchemaEditor.
2018-12-30Renamed QuerySet.earliest()/latest() helper method.Tim Graham
2018-12-27Fixed #29851 -- Fixed crash of annotations with window expressions in Subquery.Mariusz Felisiak
2018-12-22Fixed #29970, #30041 -- Made ModelBase.__new__() pass attrs without ↵Sergey Fedoseev
contribute_to_class() to type.__new__().
generated by cgit v1.3 (git 2.53.0) at 2026-10-16 17:56:58 +0000