| Age | Commit message (Collapse) | Author |
|
Backport of 8adbab49e116c31619ca38061cb2e74a1a1ec85a from main
|
|
optional.
Co-authored-by: Author: Claude Paroz <claude@2xlibre.net>
Backport of e10c1688f96e3b2d202fe401472b7b25f6105969 from main
|
|
Backport of 18473004afd82a616ba6c9ac22f476347fde4846 from main
|
|
Bug in 0dcd549bbe36c060f536ec270d34d9e7d4b8e6c7.
Thanks Eric Zarowny for the report.
Backport of 2396933ca99c6bfb53bda9e53968760316646e01 from main
|
|
Backport of 9a07999aef7958c9b5441e368cd90646d0edc5c9 from main
|
|
|
|
issues in docs.
Backport of ba755ca13123d2691a0926ddb64e5d0a2906a880 from main
|
|
release note to "Database backend API" section.
Backport of 31cd2852cb86197d5f3f5a637184a078ab0615f8 from main
|
|
Backport of ecafcaf634fcef93f9da8cb12795273dd1c3a576 from main
|
|
Thanks to Jakob Ackermann for the report.
|
|
4bfe8c0eec835b8eaffcda7dc1e3b203751a790a.
Backport of 3e9d413231edc29768cc7ca0427e63b19233f562 from main
|
|
Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for
reviews.
Backport of 534ac4829764f317cf2fbc4a18354fcc998c1425 from main.
|
|
ValidationError with no code.
Thanks Mateusz Kurowski for the report.
Regression in 667105877e6723c6985399803a364848891513cc.
Backport of 2fd755b361d3da2cd0440fc9839feb2bb69b027b from main
|
|
Set date for 4.1.7 release.
Backport of 7e003428f96d616c1f77fed84882a95e63bc3644 from main
|
|
See https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2.
Thanks Markus Holtermann for the report.
|
|
Backport of f3c89744cc801cc7d134bca9958c4a74aa76380f from main
|
|
Backport of 36e3eef7d5a4c88671d20a561788679d0d9c334c from main
|
|
Accept-Language.
The parsed values of Accept-Language headers are cached in order to
avoid repetitive parsing. This leads to a potential denial-of-service
vector via excessive memory usage if the raw value of Accept-Language
headers is very large.
Accept-Language headers are now limited to a maximum length in order
to avoid this issue.
|
|
UniqueConstraint with ordered expressions.
Thanks Dan F for the report.
Bug in 667105877e6723c6985399803a364848891513cc.
Backport of 2b1242abb3989f5d74e787b09132d01bcbee5b55 from main
|
|
Backport of d8e1442ce2c56282785dd806e5c1147975e8c857 from main
|
|
Backport of 1df963ad2476726d63be132c0cee47e07b8250d7 from main
|
|
Backport of d54717118360e8679aa2bd0c5a1625f3e84712ba from main
|
|
Backport of 2785e121c7eb941202565343d3880da6ba5aa21d from main
|
|
Follow up to 772cd2b15b158679b9dc15fb599aa935ec7c25b1.
Backport of a209f6625936cff2c714e99735782663dc95218f from main
|
|
reporting section.
Backport of e2964fed1761981ff7e5c60762e954f307cf7969 from main
|
|
|
|
|
|
with psycopg version 3.
Thanks Guillaume Andreu Sabater for the report.
Co-authored-by: Florian Apolloner <apollo13@users.noreply.github.com>
|
|
|
|
|
|
|
|
|
|
|
|
Co-authored-by: Ondřej Böhm <ondrej.bohm@firma.seznam.cz>
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
Co-authored-by: Sergey Fedoseev <fedoseev.sergey@gmail.com>
|
|
Thanks Paolo Melchiorre, Carlton Gibson, and Mariusz Felisiak for
reviews.
|
|
The current implementation of LimitedStream is slow because .read()
performs an extra copy into a buffer and .readline() performs two
extra copies. The stream being wrapped is already typically a BytesIO
object so this is unnecessary.
This implementation has largely been untouched for 12 years and,
inspired by a simpler implementation in werkzeug, it was possible to
achieve the following performance improvement:
LimitedStream.read() (single line):
Mean +- std dev: [bench_limitedstream-main] 286 ns +- 6 ns
-> [bench_limitedstream-patch] 227 ns +- 6 ns: 1.26x faster
LimitedStream.readline() (single line):
Mean +- std dev: [bench_limitedstream-main] 507 ns +- 11 ns
-> [bench_limitedstream-patch] 232 ns +- 8 ns: 2.18x faster
LimitedStream.read(8192) (single line):
Mean +- std dev: [bench_limitedstream-main] 360 ns +- 8 ns
-> [bench_limitedstream-patch] 297 ns +- 6 ns: 1.21x faster
LimitedStream.readline(8192) (single line):
Mean +- std dev: [bench_limitedstream-main] 602 ns +- 10 ns
-> [bench_limitedstream-patch] 305 ns +- 10 ns: 1.98x faster
LimitedStream.read() (multiple lines):
Mean +- std dev: [bench_limitedstream-main] 290 ns +- 5 ns
-> [bench_limitedstream-patch] 236 ns +- 6 ns: 1.23x faster
LimitedStream.readline() (multiple lines):
Mean +- std dev: [bench_limitedstream-main] 517 ns +- 19 ns
-> [bench_limitedstream-patch] 239 ns +- 7 ns: 2.16x faster
LimitedStream.read(8192) (multiple lines):
Mean +- std dev: [bench_limitedstream-main] 363 ns +- 8 ns
-> [bench_limitedstream-patch] 311 ns +- 11 ns: 1.17x faster
LimitedStream.readline(8192) (multiple lines):
Mean +- std dev: [bench_limitedstream-main] 601 ns +- 12 ns
-> [bench_limitedstream-patch] 308 ns +- 7 ns: 1.95x faster
Geometric mean: 1.59x faster
|
|
This bumps minimum supported versions of 3rd-party packages to the first
releases to support Python 3.8.
|
|
mysqlclient 1.4.3 is the first release to support Python 3.8.
|
|
|
|
|
|
PostGIS.
|
|
This adds ManifestFilesMixin.manifest_hash attribute exposing a "hash"
of the full manifest. This allows applications to determine when their
static files have changed.
|
|
|
|
|
|
UserCreationForm.
Co-Authored-By: Neven Mundar <nmundar@gmail.com>
|
|
|
|
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
|
|
Thanks Jared Chung, Tom Carrick, David Smith, Nick Pope, and Mariusz
Felisiak for reviews.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
Co-authored-by: Nick Pope <nick@nickpope.me.uk>
|
|
Thanks to Florian Vazelle for initial exploratory work, and to Nick
Pope and Mariusz Felisiak for review.
|
|
Updated Bulgarian, Esperanto, Hungarian, Japanese, Macedonian, Persian,
Portuguese (Brazil), Russian, Spanish, and Turkmen translations.
Forwardport of 46b28bbe151282e9198b719d00f84b48c92606ba from stable/4.1.x.
|