summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2022-08-03[4.1.x] Bumped version for 4.0 release.4.1Carlton Gibson
2022-08-03[4.1.x] Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.Carlton Gibson
Thanks to Motoyasu Saburi for the report.
2022-08-03[4.1.x] Updated translations from Transifex.Mariusz Felisiak
This also fixes related i18n tests. Co-authored-by: Claude Paroz <claude@2xlibre.net>
2022-08-02[4.1.x] Fixed #33876, Refs #32229 -- Made management forms render with ↵Carlton Gibson
div.html template. Thanks to Claude Paroz for the report. Backport of 89e695a69b16b8c0e720169b3ca4852cfd0c485f from main
2022-08-01[4.1.x] Fixed collation tests on MySQL 8.0.30+.Mariusz Felisiak
The utf8_ collations are renamed to utf8mb3_* on MySQL 8.0.30+. Backport of 88dba2e3fd64b64bcf4fae83b256b4f6f492558f from main
2022-07-31[4.1.x] Fixed warnings per flake8 5.0.0.Mariusz Felisiak
Backport of c18861804feb6a97afbeabb51be748dd60a04458 from main
2022-07-19[4.1.x] Bumped version for 4.1 release candidate 1.4.1rc1Carlton Gibson
2022-07-19[4.1.x] Fixed #33855 -- Removed unnecessary system check calls from test ↵Mariusz Felisiak
worker initialization. Regression in 3b3f38b3b09b0f2373e51406ecb8c9c45d36aebc. Backport of 24effbceb871e71d3bc320b91252f743714722df from main
2022-07-09[4.1.x] Refs CVE-2022-34265 -- Unified DatabaseOperations._convert_*_to_tz() ↵Mariusz Felisiak
hook names. Backport of 5e2f4ddf2940704a26a4ac782b851989668d74db from main
2022-07-08[4.1.x] Fixed #33829 -- Made BaseConstraint.deconstruct() and equality ↵Stéphane "Twidi" Angel
handle violation_error_message. Regression in 667105877e6723c6985399803a364848891513cc. Backport of ccbf714ebeff51d1370789e5e487a978d0e2dbfb from main
2022-07-06[4.1.x] Refs CVE-2022-34265 -- Properly escaped Extract() and Trunc() ↵Simon Charette
parameters. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 877c800f255ccaa7abde1fb944de45d1616f5cc9 from main
2022-07-05[4.1.x] Fixed #33822 -- Fixed save() crash on model formsets when not ↵Shawn Dong
created by modelformset_factory(). Thanks Claude Paroz for the report. Regression in e87f57fdb8dcdabc452bd15abd015bf6c9b1f7a8. Backport of 18c5ba07cc81be993941ecc2ecc17923b401b66f from main
2022-07-04[4.1.x] Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) ↵Mariusz Felisiak
against SQL injection. Thanks Takuto Yoshikai (Aeye Security Lab) for the report.
2022-06-27[4.1.x] Fixed #33796 -- Fixed ordered combined queryset crash when used in ↵Mariusz Felisiak
subquery on PostgreSQL and MySQL. Thanks Shai Berger for the report. Regression in 30a01441347d5a2146af2944b29778fa0834d4be. Backport of 44ffd8d06fabc07d8333f31439e8dd39ea87329b from main
2022-06-23[4.1.x] Fixed #33800 -- Fixed system check for the same template tag module ↵Mariusz Felisiak
in installed apps and template tag libraries. Thanks Claude Paroz for the report. Regression in 004b4620f6f4ad87261e149898940f2dcd5757ef. Backport of 083bfca6b6c00d0f45837a65c2db721eaf46bc07 from main
2022-06-23[4.1.x] Fixed #33799, Refs #31685 -- Added parameters for updating conflicts ↵DhruvaPatil98
to QuerySeta.abulk_create(). Backport of c627226d05dd52aef59447dcfb29cec2c2b11b8a from main
2022-06-21[4.1.x] Bumped version for 4.1 beta 1.4.1b1Carlton Gibson
2022-06-21[4.1.x] Fixed #33794 -- Fixed string-casting of GIS queries on PostgreSQL.Claude Paroz
Regression in 64c3f049ea3bcb1c82f35ae09f1dd5349a826a5c. Backport of de74a74b4b889c986cabab837bb03e2113880afe from main
2022-06-20[4.1.x] Fixed #33657 -- Allowed customizing formatter class of argument parsers.Abhinav Yadav
Backport of 2887b9f67cadc5295ef6a0574de2c2c8fdd66905 from main
2022-06-20[4.1.x] Fixed #23689 -- Made parsing HTTP Accept-Language header ↵Zainab Amir
case-insensitive. Thank you Daniel Samuels for test project. Backport of 901a1691982cab76349d33e51b72c40120ec927a from main
2022-06-18[4.1.x] Fixed #33784 -- Removed unnecessary format escaping in admin ↵Ankur
calendar widget. Replacements were added in fa0653cd1d791a8bce835e8992cbeab6fd70d0e7 where we created a callback function by concatenating strings. It's unnecessary since d638cdc42acec608c1967f44af6be32a477c239f. Backport of d19a53d8e3640e8f937048bf7826c7e2229a9665 from main
2022-06-17[4.1.x] Fixed #28897 -- Fixed QuerySet.update() on querysets ordered by ↵David Wobrock
annotations. Backport of 3ef37a5245015f69a9b9f884ebc289a35d02c5f6 from main
2022-06-17[4.1.x] Refs #28897 -- Added test for QuerySet.update() on querysets ordered ↵David Wobrock
by inline m2m annotation. Backport of f4680a112d01d85540411673eade31f37712d0a6 from main
2022-06-13[4.1.x] Fixed #33773 -- Made Index with multiple fields respect ↵Bruce Cutler
DEFAULT_INDEX_TABLESPACE. Thanks to Simon Charette for locating where issue lay. Backport of de1c8320cedee5d4f91b153a7fe82eb63876470f from main
2022-06-03[4.1.x] Fixed documentation of Widget.id_for_label() empty return value.Swann
Backport of d0863429a39dbc99a52a6d781006e7075c743d33 from main
2022-06-02[4.1.x] Fixed #31788 -- Fixed migration optimization after altering field to ↵David Wobrock
ManyToManyField. This makes AddField() used for altering to ManyToManyField, dependent on the prior RemoveField. Backport of 798b6c23ee52c675dd0f0e233c50cddd7ff15657 from main
2022-06-01[4.1.x] Refs #33697 -- Fixed multipart parsing of headers with double quotes ↵Mehrdad
and semicolons. See https://github.com/python/cpython/commit/1ef0c0349e8fdb5415e21231cb42edbf232b742a Backport of 93cedc82f29076c824d476354527af1150888e4f from main
2022-05-31[4.1.x] Fixed #33754 -- Fixed crash with prematurely closed ASGI request body.Jonas Lundberg
Regression in 441103a04d1d167dc870eaaf90e3fba974f67c93. Backport of f1e0fc645bb0b2c15d1510c9a8501743297dec9d from main
2022-05-31[4.1.x] Fixed #33748 -- Fixed date template filter crash with lazy format.Claude Paroz
Regression in 659d2421c7adbbcd205604002d521d82d6b0b465. Backport of 292f372768836e2aebc713064c5139e8067eebcb from main
2022-05-26[4.1.x] Fixed #22078 -- Fixed crash of Feed with decorated methods.Marcelo Galigniana
Backport of 8c0886b068ba4e224dd78104b93c9638b860b398 from main.
2022-05-26[4.1.x] Fixed #23740 -- Fixed removing unique_together constraint if exists ↵David Wobrock
primary key/unique constraint on the same field. Backport of b949e40e8c32a393f480399e2d70b653108098b6 from main
2022-05-26[4.1.x] Refs #23740 -- Added BaseDatabaseSchemaEditor._unique_constraint_name().David Wobrock
Backport of 115a978fceac4c4de2f9fc70ce19001c3f6d6918 from main
2022-05-21[4.1.x] Fixed #33725 -- Made hidden quick filter in admin's navigation ↵Sankalp
sidebar not focusable. Regression in d915dd1c5809d7c2bb3679751cd5277571dcd9f7. Follow up to 780473d75625d014cbe9b0acdea40b7a5970d5d8. Backport of 90dcf271147693a8897f644c4c8943c5b73c02f8 from main
2022-05-21[4.1.x] Fixed #33727 -- Fixed color contrasts in admin header.Mohammed Y. Alnajdi
Backport of 78bf1565c37d0eef2ff9dd72a2cead0b772b2444 from main
2022-05-20[4.1.x] Fixed #33653 -- Fixed template crash when calling methods for ↵cheng
built-in types without required arguments. Regression in 09341856ed9008875c1cc883dc0c287670131458. Backport of 0dd29209091280ccf34e07c9468746c396b7778e from main
2022-05-19[4.1.x] Fixed #33719 -- Fixed test command crash when running in parallel.Mariusz Felisiak
Thanks Pēteris Caune for the report. Regression in 3b3f38b3b09b0f2373e51406ecb8c9c45d36aebc. Backport of 41c4cb253c137edf5a96b7408ea55d57d6e0602a from main
2022-05-19[4.1.x] Fixed #33705 -- Fixed crash when using IsNull() lookup in filters.David Wobrock
Thanks Florian Apolloner for the report. Thanks Simon Charette for the review. Backport of 9f5548952906c6ea97200c016734b4f519520a64 from main
2022-05-17[4.1.x] Bumped version for 4.1 alpha 1 release.4.1a1Carlton Gibson
2022-05-17[4.1.x] Refs #33379 -- Fixed minimum supported version of MariaDB.Mariusz Felisiak
Backport of 2cec020f5bc462954d902bdad1a5955852cecff6 from main
2022-05-17[4.1.x] Updated source translation catalogs.Mariusz Felisiak
2022-05-17Refs #32339 -- Deprecated default.html form template.David Smith
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2022-05-17Fixed #32565 -- Moved internal URLResolver view-strings mapping to admindocs.Alokik Vijay
Moved the functionality of URLResolver._is_callback(), URLResolver._callback_strs, URLPattern.lookup_str() to django.contrib.admindocs.
2022-05-17Fixed #33683 -- Document HttpResponseBase and allow import from django.httpCollin Anderson
2022-05-17Refs #27064 -- Made migrations generate RenameIndex operations when moving ↵David Wobrock
indexes from index_together to Meta.indexes.
2022-05-17Refs #27064 -- Refactored out MigrationAutodetector.create_renamed_fields().David Wobrock
2022-05-16Refs #27064 -- Made migrations generate RenameIndex operations when renaming ↵David Wobrock
Meta.indexes.
2022-05-16Fixed #33710 -- Made RenameIndex operation a noop when the old and new name ↵David Wobrock
match.
2022-05-16Fixed #27550 -- Allowed GEOSGeometry.normalize() to return a normalized clone.Marcelo Galigniana
2022-05-16Fixed #33681 -- Made Redis client pass CACHES["OPTIONS"] to a connection pool.Mariusz Felisiak
Thanks Ben Picolo for the report.
2022-05-13Added backward compatibility test for ConnectionHandler.databases property.Nick Pope
The ConnectionHandler.databases property is no longer used within Django, but it is maintained for backward compatibility with 3rd party packages that have used this private API in the past.