summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2021-07-01[3.2.x] Fixed CVE-2021-35042 -- Prevented SQL injection in QuerySet.order_by().Simon Charette
Regression introduced in 513948735b799239f3ef8c89397592445e1a0cd5 by marking the raw SQL column reference feature for deprecation in Django 4.0 while lifting the column format validation. In retrospective the validation should have been kept around and the user should have been pointed at using RawSQL expressions during the deprecation period. The main branch is not affected because the raw SQL column reference support has been removed in 06eec3197009b88e3a633128bbcbd76eea0b46ff per the 4.0 deprecation life cycle. Thanks Joel Saunders for the report.
2021-07-01[3.2.x] Added stub release notes for 3.1.13 and release date for 3.2.5.Mariusz Felisiak
Backport of 8e97698d7b537cd298438a8d7b55916d275ff851 from main
2021-06-30[3.2.x] Fixed #32850 -- Doc'd Sitemap.paginator.Thomas Guettler
Backport of 775f7506d7fbabf79d8bdec4ccf039ce2870fe70 from main
2021-06-28[3.2.x] Updated translations from Transifex.Claude Paroz
2021-06-22[3.2.x] Fixed #32863 -- Skipped system check for specifying type of ↵Hasan Ramezani
auto-created primary keys on models with invalid app_label. Regression in b5e12d490af3debca8c55ab3c1698189fdedbbdb. Thanks Iuri de Silvio for the report. Backport of 7a9745fed498f69c46a3ffa5dfaff872e0e1df89 from main
2021-06-22[3.2.x] Added a note about %autoawait off for IPython.Russell Keith-Magee
Backport of 4f0a034b9e42048b782f5265344e026902bd3e95 from main
2021-06-21[3.2.x] Fixed #32860 -- Made docs permalinks focusable to improve accessibility.Timothy McCurrach
Backport of 4659a790cf5d0036c3c7488877b4365d948ccb01 from main
2021-06-10[3.2.x] Fixed #32832 -- Fixed adding BLOB/TEXT nullable field with default ↵Mariusz Felisiak
on MySQL 8.0.13+. Regression in d4ac23bee1c84d8e4610350202ac068fc90f38c0. Thanks Omkar Deshpande for the report. Backport of fa0433d05f213afe4c67055006320f7aba4c8108 from main
2021-06-10[3.2.x] Refs #32503 -- Added release notes for ↵Mariusz Felisiak
5e04e84d67da8163f365e9f5fcd169e2630e2873. Backport of 57bc16b38ec75fc96829f912d57a58d8c6358e8f from main
2021-06-08[3.2.x] Refs #14357 -- Updated docs about interaction between aggregations ↵Mariusz Felisiak
and QuerySet.order_by(). Obsolete since 0ddb4ebf7bfcc4730c80a772dd146a49ef6895f6. Backport of fcd44b889f36c4be87910745614a0a4c88d7a3d8 from main
2021-06-05[3.2.x] Fixed header underlines in performance docs.Claude Paroz
Backport of ecf8af79355c8daa67722bd0de946b351f7f613d from main
2021-06-04[3.2.x] Refs #32338 -- Improved accessibility of RadioSelect examples in docs.David Smith
Co-authored-by: Thibaud Colas <thibaudcolas@gmail.com> Backport of d8c17aa10c7f41e692fb6f5d0bf2fab7a90b9374 from main
2021-06-04[3.2.x] Fixed #32812 -- Restored immutability of named values from ↵Takayuki Hirayama
QuerySet.values_list(). Regression in 981a072dd4dec586f8fc606712ed9a2ef116eeee. Thanks pirelle for the report. Backport of 0393b9262dcf1b8302d35a8a470e14837ca1300b from main
2021-06-03[3.2.x] Refs #31356 -- Changed IRC links to the Libera.Chat webchat.Mariusz Felisiak
Follow up to 66491f08fe86629fa25977bb3dddda06959f65e7. Backport of f10c52afabac25f2c10aca26d32dbe7e0e46082e from main.
2021-06-03[3.2.x] Fixed typos in docs.Jacob Walls
Backport of f0d0d29f03448ba4f9cfef03f0605cc7e557c2c4 from main
2021-06-02[3.2.x] Fixed docs header underlines in security archive.Mariusz Felisiak
Backport of d9cee3f5f2f90938d2c2c0230be40c7d50aef53d from main
2021-06-02[3.2.x] Added stub release notes for Django 3.2.5.Carlton Gibson
Backport of ba10772bf659a9507075d713c416882ce2c8df28 from main
2021-06-02[3.2.x] Added CVE-2021-33203 and CVE-2021-33571 to security archive.Carlton Gibson
Backport of a39f235ca4cb7370dba3a3dedeaab0106d27792f from main
2021-06-02[3.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.Mariusz Felisiak
validate_ipv4_address() was affected only on Python < 3.9.5, see [1]. URLValidator() uses a regular expressions and it was affected on all Python versions. [1] https://bugs.python.org/issue36384
2021-06-02[3.2.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via ↵Florian Apolloner
admindocs' TemplateDetailView.
2021-06-02[3.2.x] Confirmed release date for Django 3.2.4, 3.1.12, and 2.2.24.Carlton Gibson
Backport of f66ae7a2d5558fe88ddfe639a610573872be6628 from main
2021-06-02[3.2.x] Fixed typo in docs/internals/contributing/writing-code/coding-style.txt.Jacob Walls
Backport of 1443b5e9aca56e249d751d6486c402b3679d3c38 from main
2021-06-01[3.2.x] Fixed #32793 -- Fixed loss of precision for temporal operations with ↵Mariusz Felisiak
DecimalFields on MySQL. Regression in 1e38f1191de21b6e96736f58df57dfb851a28c1f. Thanks Mohsen Tamiz for the report. Backport of e703b152c6148ddda1b072a4353e9a41dca87f90 from main
2021-05-27[3.2.x] Fixed typo in MiddlewareMixin deprecation note.Nick Pope
Backport of e513fb0e77baf2ebcbf2cbe366bdf0228d01119f from main.
2021-05-26[3.2.x] Fixed #32783 -- Fixed crash of autoreloader when __main__ module ↵Mariusz Felisiak
doesn't have __spec__ attribute. Regression in ec6d2531c59466924b645f314ac33f54470d7ac3. Thanks JonathanNickelson for the report. Backport of 12b19a1d76e1a6f80923c8358290d605dacd65d4 from main
2021-05-26[3.2.x] Added stub release notes and date for Django 3.2.4, 3.1.12, and 2.2.24.Carlton Gibson
Backport of b46dbd4e3e255223078ae0028934ea986e19ebc1 from main
2021-05-26[3.2.x] Fixed #32744 -- Normalized to pathlib.Path in autoreloader check for ↵Hasan Ramezani
template changes. Backport of 68357b2ca9e88c40fc00d848799813241be39129 from main
2021-05-20[3.2.x] Changed IRC references to Libera.Chat.Mariusz Felisiak
Backport of 66491f08fe86629fa25977bb3dddda06959f65e7 from main.
2021-05-20[3.2.x] Fixed note about ISP caching in docs.Ben Sturmfels
Regression in 7aabd6238028f4bb78d0687bbccc97bcf634e28b. Backport of 31b6ce9ff938a0968f2e526f5d5e106fd17e3dfa from main
2021-05-20[3.2.x] Added note about culling in database cache backend docs.Mike Lissner
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 6e155d280dbe4bab171619654d8abc4b7f197e78 from main
2021-05-19[3.2.x] Doc'd that HttpRequest.path doesn't contain a query string.David D Lowe
Backport of fa4e963ee7e6876581b5432363603571839ba00c from main
2021-05-19[3.2.x] Fixed #32740 -- Caught possible exception when initializing colorama.Carlton Gibson
Backport of c2e6047c725e26987c87e2be59f2ab4bf9828fa5 from main
2021-05-19[3.2.x] Fixed typo in docs/ref/contrib/admin/index.txt.David Sanders
Backport of dacc307d9396516e7d3609b7b91e2ec545c84ebc from main
2021-05-18[3.2.x] Fixed #32747 -- Prevented initialization of unused caches.Mariusz Felisiak
Thanks Alexander Ebral for the report. Regression in 98e05ccde440cc9b768952cc10bc8285f4924e1f. Backport of 958cdf65ae90d26236d1815bbba804729595ec7a from main
2021-05-18[3.2.x] Fixed #32733 -- Skipped system check for specifying type of ↵Rust Saiargaliev
auto-created primary keys on abstract models. Regression in b5e12d490af3debca8c55ab3c1698189fdedbbdb. Backport of a24fed399ced6be2e9dce4cf28db00c3ee21a21c from main
2021-05-18[3.2.x] Fixed #32755 -- Corrected Model.get_absolute_url() example in docs.Girish Sontakke
Backport of 27d4573d35935bff83c28bfd68a2ce5a7a6c600a from main
2021-05-18[3.2.x] Fixed #32754 -- Made AdminSite.catch_all_view() respect SCRIPT_NAME.Slava Skvortsov
Regression in ba31b0103442ac891fb3cb98f316781254e366c3. Backport of f7691d4812c578e696635718e67639d2e08eac40 from main
2021-05-17[3.2.x] Refs #32720 -- Updated various links in docs to avoid redirects and ↵Nick Pope
use HTTPS. Backport of c156e369553c75a30c78b8ed54a57b1101865105 from main
2021-05-17[3.2.x] Refs #32720 -- Fixed some broken links in docs.Nick Pope
Backport of 7c4ee487c7392a3a394caf62efad355fad639655 from main
2021-05-17[3.2.x] Refs #32720 -- Used full hashes in security archive.Nick Pope
Backport of 1c3bbcf802e661fc599365a097532ed3b362d16b from main
2021-05-17[3.2.x] Corrected commit hashes for security patches.Mariusz Felisiak
Backport of df5c96299ae30dcf8f152cc43c331fb34d39080e from main
2021-05-17[3.2.x] Refs #32720 -- Used :commit: and :source: role in old release notes.Nick Pope
Backport of 8c4caee76a5571c6c8050660a6a9fc30ece6678d from main
2021-05-13[3.2.x] Added stub release notes for Django 3.2.4.Mariusz Felisiak
Backport of 820408d842a07202a80e6ef7f7a57ec6258d88e6 from main
2021-05-13[3.2.x] Fixed #32718 -- Relaxed file name validation in FileField.Mariusz Felisiak
- Validate filename returned by FileField.upload_to() not a filename passed to the FileField.generate_filename() (upload_to() may completely ignored passed filename). - Allow relative paths (without dot segments) in the generated filename. Thanks to Jakub Kleň for the report and review. Thanks to all folks for checking this patch on existing projects. Thanks Florian Apolloner and Markus Holtermann for the discussion and implementation idea. Regression in 0b79eb36915d178aef5c6a7bbce71b1e76d376d3. Backport of b55699968fc9ee985384c64e37f6cc74a0a23683 from main
2021-05-13[3.2.x] Fixed #32717 -- Fixed filtering of querysets combined with the | ↵Simon Charette
operator. Address a long standing bug in a Where.add optimization to discard equal nodes that was surfaced by implementing equality for Lookup instances in bbf141bcdc31f1324048af9233583a523ac54c94. Thanks Shaheed Haque for the report. Backport of b81c7562fc33f50166d5120138d6398dc42b13c3 from main
2021-05-12[3.2.x] Fixed #26721 -- Doc'd setting UTF-8 on Windows.David Smith
Backport of 0456d3e42795481a186db05719300691fe2a1029 from main
2021-05-12[3.2.x] Fixed #32732 -- Removed usage of deprecated 'db' and 'passwd' ↵Nick Pope
connection options in MySQL backend. The 'db' and 'passwd' connection options have been deprecated, use 'database' and 'password' instead (available since mysqlclient >= 1.3.8). This also allows the 'database' option in DATABASES['OPTIONS'] on MySQL. Backport of 1061f5243646b4c9b8a758f8a36c9e2ccdded1cf from main
2021-05-12[3.2.x] Refs #32366 -- Avoided use of datetime.utcnow() in the documentation.Nick Pope
Backport of 69ffb1acf38bd34f76707468bb592eb4b164e2da from main
2021-05-12[3.2.x] Fixed a typo in docs/ref/models/fields.txt.Nick Pope
datetime.date.utcnow() doesn't exist, should be .today(). Backport of 88b3982af396a7c2eca0db9c52dfa9830045cc19 from main
2021-05-12[3.2.x] Refs #32718 -- Corrected CVE-2021-31542 release notes.Mariusz Felisiak
Backport of d1f1417caed648db2f81a1ec28c47bf958c01958 from main
generated by cgit v1.3 (git 2.53.0) at 2026-07-02 18:54:26 +0000