summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2023-02-16[4.2.x] Refs #21080, Refs #34322 -- Added warning to ↵Mariusz Felisiak
ManifestStaticFilesStorage docs about paths in comments. Backport of bae053d497ba8a8de7e4f725973924bfb1885fd2 from main.
2023-02-15[4.2.x] Refs #32339 -- Doc'd BaseFormSet.as_div()David Smith
Backport of 4038a8df0b8c20624ba826cf9af8f532e5a51aaa from main
2023-02-14[4.2.x] Fixed #34328 -- Added async-only class-based middleware example.Carlton Gibson
Backport of ce8189eea007882bbe6db22f86b0965e718bd341 from main
2023-02-14[4.2.x] Added CVE-2023-24580 to security archive.Carlton Gibson
Backport of ecafcaf634fcef93f9da8cb12795273dd1c3a576 from main
2023-02-14[4.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.Markus Holtermann
Thanks to Jakob Ackermann for the report.
2023-02-13[4.2.x] Fixed #29994 -- Added warning about performance of FileBasedCache ↵Sarah Boyce
with a large number of files. Co-authored-by: sheenarbw <699166+sheenarbw@users.noreply.github.com> Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 1eb94bc8dab46dfa117d21ef4f3b52aebb593615 from main
2023-02-13[4.2.x] Fixed #34318 -- Added release note for ↵Sota Tabu
4bfe8c0eec835b8eaffcda7dc1e3b203751a790a. Backport of 3e9d413231edc29768cc7ca0427e63b19233f562 from main
2023-02-10[4.2.x] Refs #34140 -- Applied rst code-block to non-Python examples.Carlton Gibson
Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for reviews. Backport of 534ac4829764f317cf2fbc4a18354fcc998c1425 from main.
2023-02-10[4.2.x] Fixed #34325 -- Corrected wording in PercentRank() docs.dennisvang
This is consistent with the terminology used for the percent_rank() function in SQLite docs and PostgreSQL docs. Backport of 7bb741d787ba360a9f0d490db92e22e0d28204ed from main
2023-02-10[4.2.x] Fixed #34324 -- Mentioned Discord server in contributing index.p0lygun
Backport of 358792486e3afd83250364ebc15060820a8a96cc from main
2023-02-09[4.2.x] Fixed #34311 -- Updated serialization docs from unique_together to ↵Willem Van Onsem
UniqueConstraint. Backport of 292aacaf6c3d6956ca2c51c41e36dbf425389346 from main
2023-02-08[4.2.x] Added missing vars to AdminSite.each_context() docs.Carlton Gibson
Backport of 1964e4367f293336b47e30af6e10a5eca5fdfb35 from main
2023-02-08[4.2.x] Fixed #34319 -- Fixed Model.validate_constraints() crash on ↵Mariusz Felisiak
ValidationError with no code. Thanks Mateusz Kurowski for the report. Regression in 667105877e6723c6985399803a364848891513cc. Backport of 2fd755b361d3da2cd0440fc9839feb2bb69b027b from main
2023-02-07[4.2.x] Fixed #34146 -- Added 3rd-party lib tutorial step.Tim Schilling
Added a tutorial step that highlights Django Debug Toolbar, on of the most common third party packages. It also added a mention of djangopackages.com as a place to search for other libraries and a link to Adam Johnson’s post on evaluating whether a package is well-maintained. Third-party packages are one of Django’s strengths. This should give folks a sound route in. Backport of 7715c9fef55c8775608cdb64d5666c7f90ada937 and 1df7814e4b76211a13eaecd77a05137006b82723 from main
2023-02-07[4.2.x] Added stub release notes for 4.0.10 and 3.2.18.Carlton Gibson
Set date for 4.1.7 release. Backport of 7e003428f96d616c1f77fed84882a95e63bc3644 from main
2023-02-07[4.2.x] Fixed #34310 -- Added deletion example to one-to-one topic.Marcelo Galigniana
Backport of 7c6195ef81075b03a704431b5d08ec597e8573f7 from main
2023-02-04[4.2.x] Increased the default PBKDF2 iterations for Django 4.2.Mariusz Felisiak
See https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2. Thanks Markus Holtermann for the report.
2023-02-01[4.2.x] Added stub release notes for 4.1.7.Mariusz Felisiak
Backport of f3c89744cc801cc7d134bca9958c4a74aa76380f from main
2023-02-01[4.2.x] Added CVE-2023-23969 to security archive.Mariusz Felisiak
Backport of 36e3eef7d5a4c88671d20a561788679d0d9c334c from main
2023-02-01[4.2.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for ↵Nick Pope
Accept-Language. The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue.
2023-01-31[4.2.x] Fixed #34180 -- Added note about resetting language in test tear-downs.Durval Carvalho
Co-authored-by: Faris Naimi <farisfaris66@gmail.com> Backport of 40217d1a82b0c16cddba377325d12b2c253f402a from main
2023-01-30[4.2.x] Fixed typo in docs/topics/auth/passwords.txt.fschwebel
Wrapped hashing is only possible if the inner wrapped function is the same as the previous hasher. Backport of 0265b1b49ba10f957abfd1311d0bae0ecefc3111 from main
2023-01-26[4.2.x] Fixed #34291 -- Fixed Meta.constraints validation crash on ↵Mariusz Felisiak
UniqueConstraint with ordered expressions. Thanks Dan F for the report. Bug in 667105877e6723c6985399803a364848891513cc. Backport of 2b1242abb3989f5d74e787b09132d01bcbee5b55 from main
2023-01-25[4.2.x] Adjusted release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson
Backport of d8e1442ce2c56282785dd806e5c1147975e8c857 from main
2023-01-25[4.2.x] Set date and added stub release notes for 4.1.6, 4.0.9, and 3.2.17.Carlton Gibson
Backport of 1df963ad2476726d63be132c0cee47e07b8250d7 from main
2023-01-20[4.2.x] Fixed #34242 -- Doc'd that primary key is set to None when deleting ↵noFFENSE
objects. Backport of 5cd1385356d4b275133ddb0f8c78b2f37c5901eb from main
2023-01-17[4.2.x] Fixed typo in docs/releases/4.2.txt.John Whitlock
Backport of d54717118360e8679aa2bd0c5a1625f3e84712ba from main
2023-01-17[4.2.x] Doc'd that 4.2 is LTS.Mariusz Felisiak
Backport of 2785e121c7eb941202565343d3880da6ba5aa21d from main
2023-01-17[4.2.x] Removed remaining empty sections from 4.2 release notes.Mariusz Felisiak
Follow up to 772cd2b15b158679b9dc15fb599aa935ec7c25b1. Backport of a209f6625936cff2c714e99735782663dc95218f from main
2023-01-17[4.2.x] Fixed #34264 -- Moved release note about session cookies into error ↵Sébastien Corbin
reporting section. Backport of e2964fed1761981ff7e5c60762e954f307cf7969 from main
2023-01-17[4.2.x] Bumped django_next_version in docs config.Mariusz Felisiak
2023-01-17Updated man page for Django 4.2 alpha.Mariusz Felisiak
2023-01-17Made cosmetic edits to docs/releases/4.2.txt.Mariusz Felisiak
2023-01-17Removed empty sections from 4.2 release notes.Mariusz Felisiak
2023-01-17Fixed #34255 -- Made PostgreSQL backend use client-side parameters binding ↵Mariusz Felisiak
with psycopg version 3. Thanks Guillaume Andreu Sabater for the report. Co-authored-by: Florian Apolloner <apollo13@users.noreply.github.com>
2023-01-17Refs #34255 -- Bumped required psycopg version to 3.1.8.Mariusz Felisiak
2023-01-16Fixed #23718 -- Doc'd that test mirrors require TransactionTestCase.sarahboyce
Co-authored-by: Christian Bundy <me@christianbundy.com>
2023-01-16Fixed "nulls characters" typo in docs.Steven
2023-01-13Fixed #34234 -- Dropped support for PROJ 4.Leo
2023-01-12Refs #26029 -- Deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings.Jarosław Wygoda
2023-01-12Fixed #26029 -- Allowed configuring custom file storage backends.Jarosław Wygoda
2023-01-10Corrected used JS libraries in GIS widget docs.Mariusz Felisiak
Follow up to 1833eb3f3e3bda5052637f1a51a27fa1b11b6871.
2023-01-10Refs #31014 -- Added FromWKB and FromWKT GIS database functions.Mariusz Felisiak
Co-authored-by: Ondřej Böhm <ondrej.bohm@firma.seznam.cz> Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Co-authored-by: Sergey Fedoseev <fedoseev.sergey@gmail.com>
2023-01-10Fixed #34110 -- Added in-memory file storage.Francesco Panico
Thanks Paolo Melchiorre, Carlton Gibson, and Mariusz Felisiak for reviews.
2023-01-05Fixed #33865 -- Optimized LimitedStream wrapper.Nick Pope
The current implementation of LimitedStream is slow because .read() performs an extra copy into a buffer and .readline() performs two extra copies. The stream being wrapped is already typically a BytesIO object so this is unnecessary. This implementation has largely been untouched for 12 years and, inspired by a simpler implementation in werkzeug, it was possible to achieve the following performance improvement: LimitedStream.read() (single line): Mean +- std dev: [bench_limitedstream-main] 286 ns +- 6 ns -> [bench_limitedstream-patch] 227 ns +- 6 ns: 1.26x faster LimitedStream.readline() (single line): Mean +- std dev: [bench_limitedstream-main] 507 ns +- 11 ns -> [bench_limitedstream-patch] 232 ns +- 8 ns: 2.18x faster LimitedStream.read(8192) (single line): Mean +- std dev: [bench_limitedstream-main] 360 ns +- 8 ns -> [bench_limitedstream-patch] 297 ns +- 6 ns: 1.21x faster LimitedStream.readline(8192) (single line): Mean +- std dev: [bench_limitedstream-main] 602 ns +- 10 ns -> [bench_limitedstream-patch] 305 ns +- 10 ns: 1.98x faster LimitedStream.read() (multiple lines): Mean +- std dev: [bench_limitedstream-main] 290 ns +- 5 ns -> [bench_limitedstream-patch] 236 ns +- 6 ns: 1.23x faster LimitedStream.readline() (multiple lines): Mean +- std dev: [bench_limitedstream-main] 517 ns +- 19 ns -> [bench_limitedstream-patch] 239 ns +- 7 ns: 2.16x faster LimitedStream.read(8192) (multiple lines): Mean +- std dev: [bench_limitedstream-main] 363 ns +- 8 ns -> [bench_limitedstream-patch] 311 ns +- 11 ns: 1.17x faster LimitedStream.readline(8192) (multiple lines): Mean +- std dev: [bench_limitedstream-main] 601 ns +- 12 ns -> [bench_limitedstream-patch] 308 ns +- 7 ns: 1.95x faster Geometric mean: 1.59x faster
2023-01-05Refs #32355 -- Bumped minimum supported versions of 3rd-party packages.Mariusz Felisiak
This bumps minimum supported versions of 3rd-party packages to the first releases to support Python 3.8.
2023-01-05Refs #32355 -- Bumped mysqlclient requirement to >= 1.4.3.Mariusz Felisiak
mysqlclient 1.4.3 is the first release to support Python 3.8.
2023-01-04Fixed #34232 -- Fixed typo in docs/intro/tutorial07.txt.Raj Desai
2023-01-04Fixed #33961 -- Updated admin's jQuery to 3.6.3.Mariusz Felisiak
2023-01-04Refs #34074 -- Used headers argument for RequestFactory and Client in docs ↵David Wobrock
and tests.