summaryrefslogtreecommitdiff
path: root/docs/releases
AgeCommit message (Collapse)Author
2022-01-04Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.Carlton Gibson
2022-01-04Added stub release notes for Django 4.0.2.Carlton Gibson
2022-01-04Corrected merge error in release notes.Carlton Gibson
2022-01-04Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.Florian Apolloner
Thanks to Dennis Brinkrolf for the report.
2022-01-04Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort ↵Florian Apolloner
template filter. Thanks to Dennis Brinkrolf for the report. Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04Fixed CVE-2021-45115 -- Prevented DoS vector in ↵Florian Apolloner
UserAttributeSimilarityValidator. Thanks Chris Bailey for the report. Co-authored-by: Adam Johnson <me@adamj.eu>
2021-12-28Added stub release notes for 4.0.1, 3.2.11, and 2.2.26 releases.Carlton Gibson
2021-12-27Refs #33342 -- Deprecated ExclusionConstraint.opclasses.Hannes Ljungberg
2021-12-24Fixed #33342 -- Added support for using OpClass() in exclusion constraints.Hannes Ljungberg
2021-12-22Refs #32355 -- Bumped required psycopg2 version to 2.8.4.Mariusz Felisiak
psycopg2 2.8.4 is the first release to support Python 3.8.
2021-12-21Fixed #32600 -- Fixed Geometry collections and Polygon segmentation fault on ↵Brenton Partridge
macOS ARM64.
2021-12-17Fixed #33366 -- Fixed case handling with swappable setting detection in ↵Simon Charette
migrations autodetector. The migration framework uniquely identifies models by case insensitive labels composed of their app label and model names and so does the app registry in most of its methods (e.g. AppConfig.get_model) but it wasn't the case for get_swappable_settings_name() until this change. This likely slipped under the radar for so long and only regressed in b9df2b74b98b4d63933e8061d3cfc1f6f39eb747 because prior to the changes related to the usage of model states instead of rendered models in the auto-detector the exact value settings value was never going through a case folding hoop. Thanks Andrew Chen Wang for the report and Keryn Knight for the investigation.
2021-12-16Fixed #33350 -- Reallowed using cache decorators with duck-typed HttpRequest.Mariusz Felisiak
Regression in 3fd82a62415e748002435e7bad06b5017507777c. Thanks Terence Honles for the report.
2021-12-16Fixed #30127 -- Deprecated name argument of cached_property().mgaligniana
2021-12-15Fixed #33316 -- Added pagination to admin history view.mgaligniana
2021-12-15Fixed #16063 -- Adjusted admin changelist searches spanning multi-valued ↵Jacob Walls
relationships. This reduces the likelihood of admin searches issuing queries with excessive joins.
2021-12-14Fixed #33361 -- Fixed Redis cache backend crash on booleans.Jeremy Lainé
2021-12-09Refs #32338 -- Added Boundfield.legend_tag().David Smith
2021-12-08Fixed #33346 -- Fixed SimpleTestCase.assertFormsetError() crash on a formset ↵Baptiste Mispelon
named "form". Thanks OutOfFocus4 for the report. Regression in 456466d932830b096d39806e291fe23ec5ed38d5.
2021-12-08Fixed #19721 -- Allowed admin filters to customize the list separator.Shreya Bamne
2021-12-07Improved release notes wording for template-based form rendering.Nick Pope
2021-12-07Added stub release notes for 4.0.1.Mariusz Felisiak
2021-12-07Finalized release notes for Django 4.0.Mariusz Felisiak
2021-12-07Updated asgiref dependency for 4.0 release series.Mariusz Felisiak
2021-12-07Added CVE-2021-44420 to security archive.Mariusz Felisiak
2021-12-07Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access ↵Florian Apolloner
control based on URL paths. Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports.
2021-12-03Fixed #33078 -- Added support for language regions in i18n_patterns().Maxim Piskunov
2021-12-03Fixed #33333 -- Fixed setUpTestData() crash with models.BinaryField on ↵Mariusz Felisiak
PostgreSQL. This makes models.BinaryField pickleable on PostgreSQL. Regression in 3cf80d3fcf7446afdde16a2be515c423f720e54d. Thanks Adam Zimmerman for the report.
2021-12-01Fixed #30398 -- Added CONN_HEALTH_CHECKS database setting.Przemysław Suliga
The CONN_HEALTH_CHECKS setting can be used to enable database connection health checks for Django's persistent DB connections. Thanks Florian Apolloner for reviews.
2021-11-30Added stub release notes and release date for 3.2.10, 3.1.14 and 2.2.25.Mariusz Felisiak
2021-11-29Fixed #32800 -- Changed CsrfViewMiddleware not to mask the CSRF secret.Chris Jerdonek
This also adds CSRF_COOKIE_MASKED transitional setting helpful in migrating multiple instance of the same project to Django 4.1+. Thanks Florian Apolloner and Shai Berger for reviews. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-11-24Fixed typo in docs/releases/4.0.txt.Ryuji Tsutsui
2021-11-23Fixed #33304 -- Allowed passing string expressions to Window(order_by).Simon Charette
2021-11-22Fixed #33302 -- Made element_id optional argument for json_script template ↵Baptiste Mispelon
filter. Added versionchanged note in documentation
2021-11-18Added Malay language.jhisham
2021-11-12Fixed #33161 -- Enabled durability check for nested atomic blocks in TestCase.Krzysztof Jagiello
Co-Authored-By: Adam Johnson <me@adamj.eu>
2021-11-10Removed DatabaseIntrospection.get_key_columns().Mariusz Felisiak
Thanks Simon Charette for the report.
2021-11-08Fixed #33264 -- Made test runner return non-zero error code for unexpected ↵Baptiste Mispelon
successes.
2021-11-08Fixed #32980 -- Made models cache related managers.Keryn Knight
2021-11-05Fixed #33253 -- Reverted "Fixed #32319 -- Added ES module support to ↵Mariusz Felisiak
ManifestStaticFilesStorage." This reverts commit 91e21836f667c784a8a63ab1f18d81f553e679cb. `export` and `import` directives have several syntax variants and not all of them were properly covered. Thanks Hervé Le Roy for the report.
2021-11-05Refs #33263 -- Expanded release notes for DeleteView adopting FormMixin.Carlton Gibson
2021-11-04Fixed #27147 -- Allowed specifying bounds of tuple inputs for non-discrete ↵Guilherme Martins Crocetti
range fields.
2021-11-04Corrected multiply defined labels in docs.Mariusz Felisiak
2021-11-01Added stub release notes for Django 3.2.10.Mariusz Felisiak
2021-11-01Added release date for 3.2.9.Mariusz Felisiak
2021-10-28Fixed #33228 -- Changed value of ↵Chinmoy
BaseDatabaseFeatures.has_case_insensitive_like to False.
2021-10-27Fixed #33182 -- Moved admin dark mode vars to separate stylesheet and ↵Matteo Vitali
template block.
2021-10-21Fixed #25916 -- Added lastmod support to sitemap index view.David Smith
Co-authored-by: Matthew Downey <matthew.downey@webit.com.au>
2021-10-18Refs #32956 -- Changed docs to treat the acronym HTTP phonetically.David Smith
2021-10-18Fixed #33194 -- Fixed migrations when altering a field with functional ↵Hannes Ljungberg
indexes/unique constraints on SQLite. This adjusts Expressions.rename_table_references() to only update alias when needed. Regression in 83fcfc9ec8610540948815e127101f1206562ead. Co-authored-by: Simon Charette <charettes@users.noreply.github.com>