| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-01-04 | Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive. | Carlton Gibson | |
| 2022-01-04 | Added stub release notes for Django 4.0.2. | Carlton Gibson | |
| 2022-01-04 | Corrected merge error in release notes. | Carlton Gibson | |
| 2022-01-04 | Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem. | Florian Apolloner | |
| Thanks to Dennis Brinkrolf for the report. | |||
| 2022-01-04 | Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort ↵ | Florian Apolloner | |
| template filter. Thanks to Dennis Brinkrolf for the report. Co-authored-by: Adam Johnson <me@adamj.eu> | |||
| 2022-01-04 | Fixed CVE-2021-45115 -- Prevented DoS vector in ↵ | Florian Apolloner | |
| UserAttributeSimilarityValidator. Thanks Chris Bailey for the report. Co-authored-by: Adam Johnson <me@adamj.eu> | |||
| 2021-12-28 | Added stub release notes for 4.0.1, 3.2.11, and 2.2.26 releases. | Carlton Gibson | |
| 2021-12-27 | Refs #33342 -- Deprecated ExclusionConstraint.opclasses. | Hannes Ljungberg | |
| 2021-12-24 | Fixed #33342 -- Added support for using OpClass() in exclusion constraints. | Hannes Ljungberg | |
| 2021-12-22 | Refs #32355 -- Bumped required psycopg2 version to 2.8.4. | Mariusz Felisiak | |
| psycopg2 2.8.4 is the first release to support Python 3.8. | |||
| 2021-12-21 | Fixed #32600 -- Fixed Geometry collections and Polygon segmentation fault on ↵ | Brenton Partridge | |
| macOS ARM64. | |||
| 2021-12-17 | Fixed #33366 -- Fixed case handling with swappable setting detection in ↵ | Simon Charette | |
| migrations autodetector. The migration framework uniquely identifies models by case insensitive labels composed of their app label and model names and so does the app registry in most of its methods (e.g. AppConfig.get_model) but it wasn't the case for get_swappable_settings_name() until this change. This likely slipped under the radar for so long and only regressed in b9df2b74b98b4d63933e8061d3cfc1f6f39eb747 because prior to the changes related to the usage of model states instead of rendered models in the auto-detector the exact value settings value was never going through a case folding hoop. Thanks Andrew Chen Wang for the report and Keryn Knight for the investigation. | |||
| 2021-12-16 | Fixed #33350 -- Reallowed using cache decorators with duck-typed HttpRequest. | Mariusz Felisiak | |
| Regression in 3fd82a62415e748002435e7bad06b5017507777c. Thanks Terence Honles for the report. | |||
| 2021-12-16 | Fixed #30127 -- Deprecated name argument of cached_property(). | mgaligniana | |
| 2021-12-15 | Fixed #33316 -- Added pagination to admin history view. | mgaligniana | |
| 2021-12-15 | Fixed #16063 -- Adjusted admin changelist searches spanning multi-valued ↵ | Jacob Walls | |
| relationships. This reduces the likelihood of admin searches issuing queries with excessive joins. | |||
| 2021-12-14 | Fixed #33361 -- Fixed Redis cache backend crash on booleans. | Jeremy Lainé | |
| 2021-12-09 | Refs #32338 -- Added Boundfield.legend_tag(). | David Smith | |
| 2021-12-08 | Fixed #33346 -- Fixed SimpleTestCase.assertFormsetError() crash on a formset ↵ | Baptiste Mispelon | |
| named "form". Thanks OutOfFocus4 for the report. Regression in 456466d932830b096d39806e291fe23ec5ed38d5. | |||
| 2021-12-08 | Fixed #19721 -- Allowed admin filters to customize the list separator. | Shreya Bamne | |
| 2021-12-07 | Improved release notes wording for template-based form rendering. | Nick Pope | |
| 2021-12-07 | Added stub release notes for 4.0.1. | Mariusz Felisiak | |
| 2021-12-07 | Finalized release notes for Django 4.0. | Mariusz Felisiak | |
| 2021-12-07 | Updated asgiref dependency for 4.0 release series. | Mariusz Felisiak | |
| 2021-12-07 | Added CVE-2021-44420 to security archive. | Mariusz Felisiak | |
| 2021-12-07 | Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access ↵ | Florian Apolloner | |
| control based on URL paths. Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports. | |||
| 2021-12-03 | Fixed #33078 -- Added support for language regions in i18n_patterns(). | Maxim Piskunov | |
| 2021-12-03 | Fixed #33333 -- Fixed setUpTestData() crash with models.BinaryField on ↵ | Mariusz Felisiak | |
| PostgreSQL. This makes models.BinaryField pickleable on PostgreSQL. Regression in 3cf80d3fcf7446afdde16a2be515c423f720e54d. Thanks Adam Zimmerman for the report. | |||
| 2021-12-01 | Fixed #30398 -- Added CONN_HEALTH_CHECKS database setting. | Przemysław Suliga | |
| The CONN_HEALTH_CHECKS setting can be used to enable database connection health checks for Django's persistent DB connections. Thanks Florian Apolloner for reviews. | |||
| 2021-11-30 | Added stub release notes and release date for 3.2.10, 3.1.14 and 2.2.25. | Mariusz Felisiak | |
| 2021-11-29 | Fixed #32800 -- Changed CsrfViewMiddleware not to mask the CSRF secret. | Chris Jerdonek | |
| This also adds CSRF_COOKIE_MASKED transitional setting helpful in migrating multiple instance of the same project to Django 4.1+. Thanks Florian Apolloner and Shai Berger for reviews. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> | |||
| 2021-11-24 | Fixed typo in docs/releases/4.0.txt. | Ryuji Tsutsui | |
| 2021-11-23 | Fixed #33304 -- Allowed passing string expressions to Window(order_by). | Simon Charette | |
| 2021-11-22 | Fixed #33302 -- Made element_id optional argument for json_script template ↵ | Baptiste Mispelon | |
| filter. Added versionchanged note in documentation | |||
| 2021-11-18 | Added Malay language. | jhisham | |
| 2021-11-12 | Fixed #33161 -- Enabled durability check for nested atomic blocks in TestCase. | Krzysztof Jagiello | |
| Co-Authored-By: Adam Johnson <me@adamj.eu> | |||
| 2021-11-10 | Removed DatabaseIntrospection.get_key_columns(). | Mariusz Felisiak | |
| Thanks Simon Charette for the report. | |||
| 2021-11-08 | Fixed #33264 -- Made test runner return non-zero error code for unexpected ↵ | Baptiste Mispelon | |
| successes. | |||
| 2021-11-08 | Fixed #32980 -- Made models cache related managers. | Keryn Knight | |
| 2021-11-05 | Fixed #33253 -- Reverted "Fixed #32319 -- Added ES module support to ↵ | Mariusz Felisiak | |
| ManifestStaticFilesStorage." This reverts commit 91e21836f667c784a8a63ab1f18d81f553e679cb. `export` and `import` directives have several syntax variants and not all of them were properly covered. Thanks Hervé Le Roy for the report. | |||
| 2021-11-05 | Refs #33263 -- Expanded release notes for DeleteView adopting FormMixin. | Carlton Gibson | |
| 2021-11-04 | Fixed #27147 -- Allowed specifying bounds of tuple inputs for non-discrete ↵ | Guilherme Martins Crocetti | |
| range fields. | |||
| 2021-11-04 | Corrected multiply defined labels in docs. | Mariusz Felisiak | |
| 2021-11-01 | Added stub release notes for Django 3.2.10. | Mariusz Felisiak | |
| 2021-11-01 | Added release date for 3.2.9. | Mariusz Felisiak | |
| 2021-10-28 | Fixed #33228 -- Changed value of ↵ | Chinmoy | |
| BaseDatabaseFeatures.has_case_insensitive_like to False. | |||
| 2021-10-27 | Fixed #33182 -- Moved admin dark mode vars to separate stylesheet and ↵ | Matteo Vitali | |
| template block. | |||
| 2021-10-21 | Fixed #25916 -- Added lastmod support to sitemap index view. | David Smith | |
| Co-authored-by: Matthew Downey <matthew.downey@webit.com.au> | |||
| 2021-10-18 | Refs #32956 -- Changed docs to treat the acronym HTTP phonetically. | David Smith | |
| 2021-10-18 | Fixed #33194 -- Fixed migrations when altering a field with functional ↵ | Hannes Ljungberg | |
| indexes/unique constraints on SQLite. This adjusts Expressions.rename_table_references() to only update alias when needed. Regression in 83fcfc9ec8610540948815e127101f1206562ead. Co-authored-by: Simon Charette <charettes@users.noreply.github.com> | |||
