summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2023-11-01[4.2.x] Bumped version for 4.2.7 release.4.2.7Mariusz Felisiak
2023-11-01[4.2.x] Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.Mariusz Felisiak
Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.
2023-10-30[4.2.x] Fixed #34932 -- Restored varchar_pattern_ops/text_pattern_ops index ↵Tom Carrick
creation when deterministic collaction is set. Regression in f3f9d03edf17ccfa17263c7efa0b1350d1ac9278 (4.2) and 8ed25d65ea7546fafd808086fa07e7e5bb5428fc (5.0). Backport of 34b411762b50883d768d7b67e0a158ec39da8b09 from main.
2023-10-16[4.2.x] Fixed #34798 -- Fixed QuerySet.aggregate() crash when referencing ↵Simon Charette
expressions containing subqueries. Regression in 59bea9efd2768102fc9d3aedda469502c218e9b7, complements e5c844d6f2a4ac6ae674d741b5f1fa2a688cedf4. Refs #28477, #34551. Thanks Haldun Komsuoglu for the report. Backport of 3b4a571275d967512866012955eb0b3ae486d63c from main
2023-10-10[4.2.x] Refs #26029 -- Improved get_storage_class() deprecation warning with ↵Carlton Gibson
stacklevel=2. Addition of the `stacklevel` argument shows the source of the deprecated call, making updating the client code simpler. Backport of fa6e6f31137ee4025adfb27f88c07eebd488d446 from stable/5.0.x.
2023-10-04[4.2.x] Post release version bump.Natalia
2023-10-04[4.2.x] Bumped version for 4.2.6 release.4.2.6Natalia
2023-10-04[4.2.x] Fixed CVE-2023-43665 -- Mitigated potential DoS in ↵Natalia
django.utils.text.Truncator when truncating HTML text. Thanks Wenchao Li of Alibaba Group for the report.
2023-09-27[4.2.x] Refs #34320 -- Skipped ↵Mariusz Felisiak
SchemaTests.test_rename_field_with_check_to_truncated_name on MariaBD 10.5.2+. This crashes since MariaDB was bumped to 10.5 on Jenkins.
2023-09-22[4.2.x] Fixed #34840 -- Avoided casting string base fields on PostgreSQL.Mariusz Felisiak
Thanks Alex Vandiver for the report. Regression in 09ffc5c1212d4ced58b708cbbf3dfbfb77b782ca. Backport of 779cd28acb1f7eb06f629c0ea4ded99b5ebb670a from main.
2023-09-11[4.2.x] Fixed #34821 -- Prevented DEFAULT_FILE_STORAGE/STATICFILES_STORAGE ↵Mariusz Felisiak
settings from mutating the main STORAGES. Regression in 6b965c600054f970bdf94017ecf2e0e6e0a4326b. Backport of a7c73b944f51d6c92ec876fd7e0a171e7c01657d from main
2023-09-04[4.2.x] Post-release version bump.Mariusz Felisiak
2023-09-04[4.2.x] Bumped version for 4.2.5 release.4.2.5Mariusz Felisiak
2023-09-04[4.2.x] Fixed CVE-2023-41164 -- Fixed potential DoS in ↵Mariusz Felisiak
django.utils.encoding.uri_to_iri(). Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report. Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-09-01[4.2.x] Fixed #34803 -- Fixed queryset crash when filtering againts deeply ↵willzhao
nested OuterRef annotations. Thanks Pierre-Nicolas Rigal for the report. Regression in c67ea79aa981ae82595d89f8018a41fcd842e7c9. Backport of 9cc0d7f7f85cecc3ad15bbc471fe6a08e4f515b6 from main
2023-08-19[4.2.x] Fixed #34779 -- Avoided unnecessary selection of non-nullable m2m ↵Juan Alvarez
fields without natural keys during serialization. By using `select_related(None)` instead of `select_related()`, the unnecessary joins are completely avoided. Note that the current tests already covers the change, when the field is not `null=True`. Regression in f9936deed1ff13b20e18bd9ca2b0750b52706b6c. Backport of 517d3bb4dd17e9c51690c98d747b86a0ed8b2fbf from main
2023-08-18[4.2.x] Fixed #34773 -- Fixed syncing ↵Mariusz Felisiak
DEFAULT_FILE_STORAGE/STATICFILES_STORAGE settings with STORAGES. Thanks Petr Dlouhý for the report. Bug in 32940d390a00a30a6409282d314d617667892841. Backport of 6b965c600054f970bdf94017ecf2e0e6e0a4326b from main
2023-08-04[4.2.x] Refs #34754 -- Added missing FullResultSet import.Mariusz Felisiak
Follow up to 3a1863319c1ed4bc81fe270b0d7d25c7f03fdb48.
2023-08-04[4.2.x] Fixed #34754 -- Fixed JSONField check constraints validation on NULL ↵Simon Charette
values. The __isnull lookup of JSONField must special case Value(None, JSONField()) left-hand-side in order to be coherent with its convoluted null handling. Since psycopg>=3 offers no way to pass a NULL::jsonb the issue is resolved by optimizing IsNull(Value(None), True | False) to True | False. Regression in 5c23d9f0c32f166c81ecb6f3f01d5077a6084318. Thanks Alexandre Collet for the report. Backport of 3434dbd39d373df7193ad006b970c09c1a909ea3 from main
2023-08-01[4.2.x] Post-release version bump.Natalia
2023-08-01[4.2.x] Bumped version for 4.2.4 release.4.2.4Natalia
2023-08-01[4.2.x] Fixed #34750 -- Fixed QuerySet.count() when grouping by unused ↵Mariusz Felisiak
multi-valued annotations. Thanks Toan Vuong for the report. Thanks Simon Charette for the review. Regression in 59bea9efd2768102fc9d3aedda469502c218e9b7. Backport of c9b9a52edc66be117c6e5b5214fa788a4d5db7a8 from main
2023-07-30[4.2.x] Fixed warnings per flake8 6.1.0.Mariusz Felisiak
Backport of 22b0b73c7732ba67db4e69fd9fa75aad84c8e5c4 from main
2023-07-30[4.2.x] Fixed #34748 -- Fixed queryset crash when grouping by a reference in ↵Simon Charette
a subquery. Regression in dd68af62b2b27ece50d434f6a351877212e15c3f. Thanks Toan Vuong for the report. Backport of 4087367ba869be9cf305dac39a8887d4aa4041d2 from main
2023-07-19[4.2.x] Fixed #34717 -- Fixed QuerySet.aggregate() crash when referencing ↵Simon Charette
window functions. Regression in 59bea9efd2768102fc9d3aedda469502c218e9b7. Refs #28477. Thanks younes-chaoui for the report. Backport of 68912e4f6f84f21322f92a2c7b6c77f68f91b9c9 from main
2023-07-03[4.2.x] Post-release version bump.Mariusz Felisiak
2023-07-03[4.2.x] Bumped version for 4.2.3 release.4.2.3Mariusz Felisiak
2023-07-03[4.2.x] Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator ↵Mariusz Felisiak
and URLValidator. Thanks Seokchan Yoon for reports.
2023-06-11[4.2.x] Fixed #34638 -- Fixed admin change list selected row highlight on ↵Neeraj Kumar
editable boolean fields. Regression in 0aa2f16e63887d6053f6fd0da19254fc74c750ae. Thanks Andrei Shabanski for the report. Backport of 1d9d32389c652edc56ada65116d39789896f4820 from main.
2023-06-09[4.2.x] Fixed #34645 -- Restored alignment for admin date/time timezone ↵Mariusz Felisiak
warnings. Regression in 96a598356a9ea8c2c05b22cadc12e256a3b295fd. Backport of caf80cb41f13e84803a94928282cae75333bbdfc from main
2023-06-05[4.2.x] Post-release version bump.Natalia
2023-06-05[4.2.x] Bumped version for 4.2.2 release.4.2.2Natalia
2023-06-04[4.2.x] Fixed #34620 -- Fixed serialization crash on m2m fields without ↵Mariusz Felisiak
natural keys when base querysets use select_related(). Regression in 19e0587ee596debf77540d6a08ccb6507e60b6a7. Thanks Martin Svoboda for the report. Backport of f9936deed1ff13b20e18bd9ca2b0750b52706b6c from main
2023-06-01[4.2.x] Fixed #34612 -- Fixed QuerySet.only() crash on reverse relationships.Simon Charette
Regression in b3db6c8dcb5145f7d45eff517bcd96460475c879. Thanks Ian Cubitt for the report. This also corrected test_inheritance_deferred2() test which was previously properly defined and marked as an expected failure but was then wrongly adjusted to mask the lack of support for per-alias deferral that was fixed by #21204. Backport of 2cf76f2d5d1aa16acfadaf53db3d30128a34b088 from main
2023-05-24[4.2.x] Fixed #34590 -- Reverted "Refs #33308 -- Improved adapting ↵David Sanders
DecimalField values to decimal." This reverts 7990d254b0af158baf827fafbd90fe8e890f23bd. Thanks Marc Odermatt for the report. Backport of 0c1518ee429b01c145cf5b34eab01b0b92f8c246 from main
2023-05-23[4.2.x] Fixed #34551 -- Fixed QuerySet.aggregate() crash when referencing ↵Simon Charette
subqueries. Regression in 59bea9efd2768102fc9d3aedda469502c218e9b7. Refs #28477. Thanks Denis Roldán and Mariusz for the test. Backport of e5c844d6f2a4ac6ae674d741b5f1fa2a688cedf4 from main
2023-05-23[4.2.x] Refs #34551 -- Fixed QuerySet.aggregate() crash on precending ↵Simon Charette
aggregation reference. Regression in 1297c0d0d76a708017fe196b61a0ab324df76954. Refs #31679. Backport of 2ee01747c32a7275a7a1a5f7862acba7db764921 from main
2023-05-22[4.2.x] Fixed #34588 -- Removed usage of nonexistent stylesheet in the ↵gtleee
'Congrats' page. Regression in d46cc15c51219c3418e0287bf018c5ba1346f825. Backport of 0a324f1b66b9b948041b1c557fc18b3fb40743c4 from main
2023-05-22[4.2.x] Fixed #34580 -- Avoided unnecessary computation of selected ↵Simon Charette
expressions in SQLCompiler. Performance regression in 278881e37619278789942513916acafaa88d26f3. Co-authored-by: David Smith <smithdc@gmail.com> Backport of 98f6ada0e2058d67d91fb6c16482411ec2ca0967 from main
2023-05-17[4.2.x] Fixed #34568 -- Made makemigrations --update respect --name option.Mariusz Felisiak
Thanks David Sanders for the report. Backport of c52f4295f254e1c14af769d22b1a5f516a941f58 from main
2023-05-17[4.2.x] Fixed #34570 -- Silenced noop deferral of many-to-many and GFK.Simon Charette
While deferring many-to-many and GFK has no effect, the previous implementation of QuerySet.defer() ignore them instead of crashing. Regression in b3db6c8dcb5145f7d45eff517bcd96460475c879. Thanks Paco Martínez for the report. Backport of 99e5dff737cd20b12d060e4794e097063b61ec40 from main
2023-05-16[4.2.x] Fixed #34539 -- Restored get_prep_value() call when adapting JSONFields.Julie Rymer
Regression in 5c23d9f0c32f166c81ecb6f3f01d5077a6084318. Backport of 0ec60661e61b153e6bcec64649b1b7f524eb3e18 from main
2023-05-08[4.2.x] Fixed #34544 -- Avoided DBMS_LOB.SUBSTR() wrapping with IS NULL ↵Mariusz Felisiak
condition on Oracle. Regression in 09ffc5c1212d4ced58b708cbbf3dfbfb77b782ca. Thanks Michael Smith for the report. This also reverts commit 1e4da439556cdd69eb9f91e07f99cf77997e70d2. Backport of 1586a09b7949bbb7b0d84cb74ce1cadc25cbb355 from main
2023-05-03[4.2.x] Post-release version bump.Mariusz Felisiak
2023-05-03[4.2.x] Bumped version for 4.2.1 release.4.2.1Mariusz Felisiak
2023-05-03[4.2.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of ↵Mariusz Felisiak
validation when uploading multiple files using one form field. Thanks Moataz Al-Sharida and nawaik for reports. Co-authored-by: Shai Berger <shai@platonix.com> Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-05-03[4.2.x] Fixed #34529, Refs #34525 -- Reduced index operations with ↵Mariusz Felisiak
Meta.indexes/index_together when optimizing migrations. This makes squashing migrations an available path for changing Meta.index_together, which is deprecated, to Meta.indexes. Follow up to f81032572107846922745b68d5b7191058fdd5f5. Backport of 8e2460d599aec95f8cfe514d3cc8acdd4ca4b1fb from main.
2023-05-02[4.2.x] Fixed #34515 -- Made LocaleMiddleware prefer language from paths ↵Mariusz Felisiak
when i18n patterns are used. Regression in 94e7f471c4edef845a4fe5e3160132997b4cca81. This reverts commit 94e7f471c4edef845a4fe5e3160132997b4cca81 (refs #34069) and partly reverts commit 3b4728310a7a64f8fcc548163b0aa5f98a5c78f5. Thanks Anthony Baillard for the report. Co-Authored-By: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> Backport of 0e444e84f87d174713a2aef0c4f9704ce2865586 from main
2023-04-26[4.2.x] Fixed #34512 -- Restored breadcrumbs on admin app index view.Mariusz Felisiak
Thanks Adam (ataylor32) for the report. Regression in 872b61193b013a700ff88cf50f0eb2cf2c266ff7. Backport of 9440f6ba41e5e96458cd7949fc6d605ef5bd09e9 from main
2023-04-21[4.2.x] Fixed #34506 -- Fixed margin of ClearableFileInput in admin CSS.Mariusz Felisiak
Regression in 96a598356a9ea8c2c05b22cadc12e256a3b295fd. Backport of 92537e83c1322c40dd39a8f0f9c78018307f2102 from main
generated by cgit v1.3 (git 2.53.0) at 2026-07-10 08:17:33 +0000