summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2020-09-01[3.1.x] Bumped version for 3.1.1 release.3.1.1Carlton Gibson
2020-09-01[3.1.x] Fixed CVE-2020-24584 -- Fixed permission escalation in ↵Mariusz Felisiak
intermediate-level directories of the file system cache on Python 3.7+. Backport of f56b57976133129b0b351a38bba4ac882badabf0 from master.
2020-09-01[3.1.x] Fixed CVE-2020-24583, #31921 -- Fixed permissions on ↵Mariusz Felisiak
intermediate-level static and storage directories on Python 3.7+. Thanks WhiteSage for the report. Backport of ea0febbba531a3ecc8c77b570efbfb68ca7155db from master.
2020-09-01[3.1.x] Fixed #31901 -- Prevented content overflowing in the admin ↵007gzs
changelist with navigation sidebar. Backport of 2bc38bc7cae002f949157d95e3f0c19ea6b8ca5c from master
2020-08-31[3.1.x] Fixed #31952 -- Fixed EmptyFieldListFilter crash with reverse ↵Federico Jaramillo Martínez
relationships. Thanks dacotagh for the report. Backport of 179d9dc0c2265176f9f7062a1d98dc44d896f91f from master
2020-08-31[3.1.x] Fixed #31965 -- Adjusted multi-table fast-deletion on MySQL/MariaDB.Simon Charette
The optimization introduced in 7acef095d73 did not properly handle deletion involving filters against aggregate annotations. It initially was surfaced by a MariaDB test failure but misattributed to an undocumented change in behavior that resulted in the systemic generation of poorly performing database queries in 5b83bae031. Thanks Anton Plotkin for the report. Refs #23576. Backport of f6405c0b8ef7aff513b105c1da68407a881a3671 from master
2020-08-28[3.1.x] Fixed #31956 -- Fixed crash of ordering by JSONField with a custom ↵Mariusz Felisiak
decoder on PostgreSQL. Thanks Marc Debureaux for the report. Thanks Simon Charette, Nick Pope, and Adam Johnson for reviews. Backport of 0be51d2226fce030ac9ca840535a524f41e9832c from master
2020-08-28[3.1.x] Fixed #31928 -- Fixed detecting an async get_response in various ↵Kevin Michel
middlewares. SecurityMiddleware and the three cache middlewares were not calling super().__init__() during their initialization or calling the required MiddlewareMixin._async_check() method. This made the middlewares not properly present as coroutine and confused the middleware chain when used in a fully async context. Thanks Kordian Kowalski for the report. Backport of 825ce75faec63ce81601e31152c757a9c28fed13 from master
2020-08-28[3.1.x] Fixed #31912 -- Removed strict=True in Path.resolve() in project ↵Mariusz Felisiak
template and CommonPasswordValidator. This caused permission errors when user didn't have permissions to all intermediate directories in a Django installation path. Thanks tytusd and leonyxz for reports. Regression in edeec1247e52de6fc32cee93e96d4ce36003ea4b and 26554cf5d1e96db10d0d5f4b69683a22fb82fdf8. Backport of e39e727ded673e74016b5d3658d23cbe20234d11 from master
2020-08-26[3.1.x] Fixed #31936 -- Fixed __in lookup on key transforms for JSONField.Mariusz Felisiak
This resolves an issue on databases without a native JSONField (MariaDB, MySQL, SQLite, Oracle), where values must be wrapped. Thanks Sébastien Pattyn for the report. Backport of 1251772cb83aa4106f526fe00738e51c0eb59122 from master
2020-08-26[3.1.x] Fixed #31905 -- Made MiddlewareMixin call ↵Michael Galler
process_request()/process_response() with thread sensitive. Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es> Backport of 547a07fa7ec4364ea9ecd2aabfdd16ee4c63003c from master
2020-08-24[3.1.x] Fixed #31877 -- Reverted "Fixed #19878 -- Deprecated TemplateView ↵Mariusz Felisiak
passing URL kwargs into context." This reverts commit 4ed534758cb6a11df9f49baddecca5a6cdda9311. Backport of bb8f66934d93faf80cd1a2dda65aaedce21a6fc5 from master
2020-08-24[3.1.x] Refs #31877 -- Reverted "Fixes #31877 -- Used lazy() for ↵Mariusz Felisiak
TemplateView kwarg deprecation warning." This reverts commit 20799cc0a6d98816b9ef0577e24691bd26b80d7d. Backport of 04e87e79a0bd2b1b9fdc30f884a637a3268733f0 from master
2020-08-19[3.1.x] Fixed #31895 -- Fixed crash when decoding invalid session data.Mariusz Felisiak
Thanks Matt Hegarty for the report. Regression in d4fff711d4c97356bd6ba1273d2a5e349326eb5f. Backport of 4376c2c7f8cd9c7604a7d053b3c4022dd5ac2795 from master
2020-08-13[3.1.x] Fixed #31863 -- Prevented mutating model state by copies of model ↵Gert Burger
instances. Regression in bfb746f983aa741afa3709794e70f1e0ab6040b5. Backport of 94ea79be137f3cb30949bf82198e96e094f2650d from master
2020-08-13[3.1.x] Fixes #31877 -- Used lazy() for TemplateView kwarg deprecation warning.Adam Johnson
SimpleLazyObjects cause a crash when filtering. Thanks Tim L. White for the report. Regression in 4ed534758cb6a11df9f49baddecca5a6cdda9311. Backport of 20799cc0a6d98816b9ef0577e24691bd26b80d7d from master
2020-08-11[3.1.x] Fixed #31866 -- Fixed locking proxy models in ↵Daniel Hillier
QuerySet.select_for_update(of=()). Backport of 60626162f76f26d32a38d18151700cb041201fb3 from master
2020-08-11[3.1.x] Fixed #31865 -- Adjusted admin nav sidebar template to reduce debug ↵Carlton Gibson
logging. Thanks to Mariusz Felisiak for review. Backport of 0aeb802cf054cb369646c871b53c93a83c1fa58a from master
2020-08-10[3.1.x] Fixed #31871 -- Updated SESSION_COOKIE_SAMESITE comment in ↵אורי
global_settings.py. Follow up to b33bfc383935cd26e19a2cf71d066ac6edd1425f. Backport of ad827ddaef05069a1385cc2d26fd2ab9c6ba1f4d from master
2020-08-07[3.1.x] Fixed #31864 -- Fixed encoding session data during transition to ↵Mariusz Felisiak
Django 3.1. Thanks אורי for the report. Backport of 99abfe8f4d3caebcd73548f5bf9e4755bdfed318 from master
2020-08-05[3.1.x] Fixed #31854 -- Fixed wrapping of long model names in admin's sidebar.Mariusz Felisiak
Backport of e70dc506d76083e443a37bac5058151823802e29 from master
2020-08-05[3.1.x] Fixed #31853 -- Fixed wrapping of translated action labels in admin ↵007gzs
sidebar. Backport of b0af56f639179ac5a70253b07ead8b768c4ef4a9 from master
2020-08-04[3.1.x] Post-release version bump.Mariusz Felisiak
2020-08-04[3.1.x] Bumped version for 3.1 release.3.1Mariusz Felisiak
2020-08-04[3.1.x] Fixed #31842 -- Added DEFAULT_HASHING_ALGORITHM transitional setting.Mariusz Felisiak
It's a transitional setting helpful in migrating multiple instance of the same project to Django 3.1+. Thanks Markus Holtermann for the report and review, Florian Apolloner for the implementation idea and review, and Carlton Gibson for the review. Backport of d907371ef99a1e4ca6bc1660f57d81f265750984 from master.
2020-08-01[3.1.x] Updated translations from TransifexClaude Paroz
Backport of 1a60838fa688d3c1e245ebe4cfe7038ccd67ae3b from master
2020-07-30[3.1.x] Refs #31829 -- Added ↵Tim Graham
DatabaseFeatures.json_key_contains_list_matching_requires_list. CockroachDB's behavior matches PostgreSQL. Backport of 184a6eebb0ef56d5f1b1315a8e666830e37f3f81 from master
2020-07-28[3.1.x] Fixed #31829 -- Used JSONField __contains lookup on key transforms.sage
Backport of 2d8dcba03aae200aaa103ec1e69f0a0038ec2f85 from master
2020-07-28[3.1.x] Fixed #31836 -- Dropped support for JSONField __contains and ↵Mariusz Felisiak
__contained_by lookups on SQLite. The current implementation works only for basic examples without supporting nested structures and doesn't follow "the general principle that the contained object must match the containing object as to structure and data contents, possibly after discarding some non-matching array elements or object key/value pairs from the containing object". Backport of ba691933cee375195c9c50f333dd4b2a3abbb726 from master.
2020-07-28[3.1.x] Fixed #31835 -- Dropped support for JSONField __contains lookup on ↵Mariusz Felisiak
Oracle. The current implementation works only for basic examples without supporting nested structures and doesn't follow "the general principle that the contained object must match the containing object as to structure and data contents, possibly after discarding some non-matching array elements or object key/value pairs from the containing object". Backport of 02447fb133b53ec7d0ff068cc08f06fdf8817ef7 from master
2020-07-22[3.1.x] Reverted "Fixed #30300 -- Allowed migrations to be loaded from ↵Tim Graham
directories without __init__.py file." This reverts commit 3cd3bebe8921e14b911b36b2a1cbceef8fb6294e. Backport of ff55adbd0da6618abaf265d16196bf54f81aa77a from master
2020-07-20[3.1.x] Bumped version for 3.1 release candidate 1.3.1rc1Mariusz Felisiak
2020-07-20[3.1.x] Fixed #31784 -- Fixed crash when sending emails on Python 3.6.11+, ↵Florian Apolloner
3.7.8+, and 3.8.4+. Fixed sending emails crash on email addresses with display names longer then 75 chars on Python 3.6.11+, 3.7.8+, and 3.8.4+. Wrapped display names were passed to email.headerregistry.Address() what caused raising an exception because address parts cannot contain CR or LF. See https://bugs.python.org/issue39073 Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 96a3ea39ef0790dbc413dde0a3e19f6a769356a2 from master
2020-07-16[3.1.x] Fixed #31790 -- Fixed setting SameSite and Secure cookies flags in ↵Mariusz Felisiak
HttpResponse.delete_cookie(). Cookies with the "SameSite" flag set to None and without the "secure" flag will be soon rejected by latest browser versions. This affects sessions and messages cookies. Backport of 240cbb63bf9965c63d7a3cc9032f91410f414d46 from master
2020-07-14Added admin translatable string.Claude Paroz
2020-07-14[3.1.x] Added Igbo language.Kelechi Precious Nwachukwu
Backport of 2cd3e7eeaf59265d87546ca122a273d4c4109e8b from master
2020-07-09[3.1.x] Fixed #31773 -- Fixed preserving output_field in ExpressionWrapper ↵Mariusz Felisiak
for combined expressions. Thanks Thodoris Sotiropoulos for the report and Simon Charette for the implementation idea. Regression in df32fd42b84cc6dbba173201f244491b0d154a63. Backport of 8a6df55f2dd5131282084a4edfd48f63fbf8c69a from master
2020-07-08[3.1.x] Added Turkmen language.Resulkary
Backport of af2b3fee081e85e8487c3b64b7967a50ff8fe6cf from master
2020-06-30[3.1.x] Fixed #31751 -- Fixed database introspection with cx_Oracle 8.Mariusz Felisiak
Backport of 615e32162ff646db3456b90fb4eaaecc33dd3e4e from master
2020-06-26[3.1.x] Fixed #31742 -- Fixed makemigrations crash on ForeignKey to an app ↵Mariusz Felisiak
with mixed case label. Regression in 9e1b6b8a66af4c2197e5b1b41eb9dbb36e4f6502. Thanks Ignacio Santolin for the report. Backport of 62d85a283500e9abb0e1c9ec53c59be468f056a0 from master
2020-06-24[3.1.x] Fixed #31735 -- Fixed migrations crash on namespaced inline FK ↵Simon Charette
addition on PostgreSQL. The namespace of the constraint must be included when making the constraint immediate. Regression in 22ce5d0031bd795ade081394043833e82046016c. Thanks Rodrigo Estevao for the report. Backport of 2e8941b6f90e65ffad3f07083b8de59e8ed29767 from master
2020-06-22[3.1.x] Fixed #31728 -- Fixed cache culling when no key is found for deletion.Guillermo Bonvehí
DatabaseCache._cull implementation could fail if no key was found to perform a deletion in the table. This prevented the new cache key/value from being correctly added. Backport of f386454d1302b66d0eb331ed0ae9e4811e2f3a15 from master
2020-06-18[3.1.x] Fixed #31716 -- Fixed detection of console scripts in autoreloader ↵Tom Forbes
on Windows. Backport of 8a902b7ee622ada258d15fb122092c1f02b82698 from master
2020-06-17[3.1.x] Refs #31670 -- Removed whitelist/blacklist terminology in docs and ↵David Smith
comments. Backport of 10df5b71775d8ee98201acb1367266521b17cc00 from master
2020-06-15[3.1.x] Bumped version for 3.1 beta 1.3.1b1Mariusz Felisiak
2020-06-12[3.1.x] Added support for the Tajik language.Claude Paroz
Thanks Sirius Sufiew for contributing that support. Backport of db8268bce69fb53b7be4be90a2d7200c12019b90 from master
2020-06-12[3.1.x] Fixed #31659 -- Made ExpressionWrapper preserve output_field for ↵Mariusz Felisiak
combined expressions. Regression in df32fd42b84cc6dbba173201f244491b0d154a63. Thanks Simon Charette for the review. Backport of aeb8996a6706cad3e96d8221760c1cb408ee7ed9 from master
2020-06-11[3.1.x] Fixed #28132 -- Made MultiPartParser ignore filenames with trailing ↵Michael Brown
slash. Backport of 36db4dd937ae11c5b687c5d2e5fa3c27e4140001 from master
2020-06-10[3.1.x] Fixed #31657 -- Fixed ordering by attnames of self-referential ↵Hasan Ramezani
ForeignKeys. Backport of 037a624120b676858be4b93c4d0adda45916fd2a from master
2020-06-08[3.1.x] Fixed #31594 -- Added ASGIStaticFilesHandler.get_response_async().Joshua Massover
Backport of 92309e53d9921a60e667656d8dd65e59eb5cf81c from master
generated by cgit v1.3 (git 2.53.0) at 2026-07-14 00:45:35 +0000