| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2022-08-03 | Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header. | Carlton Gibson | |
| Thanks to Motoyasu Saburi for the report. | |||
| 2022-08-03 | Updated translations from Transifex. | Mariusz Felisiak | |
| This also fixes related i18n tests. Forwardport of a3bab9332416f655c6ae0fa306c94f7f52e7398d from stable/4.1.x. Co-authored-by: Claude Paroz <claude@2xlibre.net> | |||
| 2022-08-02 | Fixed #33881 -- Added support for database collations to ↵ | Mariusz Felisiak | |
| ArrayField(Char/TextFields). | |||
| 2022-08-02 | Fixed #33876, Refs #32229 -- Made management forms render with div.html ↵ | Carlton Gibson | |
| template. Thanks to Claude Paroz for the report. | |||
| 2022-08-01 | Refs #25706 -- Removed inline CSS in the openlayers widget template. | Claude Paroz | |
| 2022-07-31 | Fixed warnings per flake8 5.0.0. | Mariusz Felisiak | |
| 2022-07-28 | Fixed #33726 -- Added skip-link to admin for keyboard navigation. | Marcelo Galigniana | |
| 2022-07-27 | Refs #32948, Refs #32946 -- Used Q.create() internally for dynamic Q() objects. | Nick Pope | |
| Node.create() which has a compatible signature with Node.__init__() takes in a single `children` argument rather than relying in unpacking *args in Q.__init__() which calls Node.__init__(). In addition, we were often needing to unpack iterables into *args and can instead pass a list direct to Node.create(). | |||
| 2022-07-27 | Refs #32948 -- Renamed Node._new_instance() to Node.create(). | Nick Pope | |
| Node._new_instance() was added in 6dd2b5468fa275d53aa60fdcaff8c28bdc5e9c25 to work around Q.__init__() having an incompatible signature with Node.__init__(). It was intended as a hook that could be overridden if subclasses needed to change the behaviour of instantiation of their specialised form of Node. In practice this doesn't ever seem to have been used for this purpose and there are very few calls to Node._new_instance() with other code, e.g. Node.__deepcopy__() calling Node and overriding __class__ as required. Rename this to Node.create() to make it a more "official" piece of private API that we can use to simplify a lot of other areas internally. The docstring and nearby comment have been reworded to read more clearly. | |||
| 2022-07-27 | Refs #32948 -- Added more tests for django.utils.tree.Node. | Nick Pope | |
| The tests for creating new instances or copying instances of Node and its subclasses didn't fully capture the behaviour of the implementation, particularly around whether the `children` list or is contents were the same as the source. | |||
| 2022-07-27 | Used AND, OR, XOR constants instead of hard-coded values. | Nick Pope | |
| 2022-07-26 | Refs #27236 -- Reverted "Refs #27236 -- Added generic mechanism to handle ↵ | Mariusz Felisiak | |
| the deprecation of migration operations." This reverts commit 41019e48bbf082c985e6ba3bad34d118b903bff1. | |||
| 2022-07-26 | Refs #27236 -- Reverted AlterIndexTogether deprecation. | Mariusz Felisiak | |
| This partly reverts a6385b382e05a614a99e5a5913d8e631823159a2. | |||
| 2022-07-26 | Fixed BasicExtractorTests.test_makemessages_find_files() test. | Claude Paroz | |
| 2022-07-25 | Fixed #33866 -- Added pathlib.Path support to GDALRaster constructor. | Claude Paroz | |
| 2022-07-25 | Fixed #33863 -- Fixed JavaScriptCatalog with more than 1 level of fallback ↵ | Claude Paroz | |
| translations. Co-authored-by: Carlos Mermingas <cmermingas@gmail.com> | |||
| 2022-07-23 | Refs #33691 -- Deprecated insecure password hashers. | Claude Paroz | |
| SHA1PasswordHasher, UnsaltedSHA1PasswordHasher, and UnsaltedMD5PasswordHasher are now deprecated. | |||
| 2022-07-23 | Removed unneeded test suite creation for GIS measure tests. | Claude Paroz | |
| 2022-07-23 | Fixed #33864 -- Deprecated length_is template filter. | Nick Pope | |
| 2022-07-21 | Refs #27236 -- Made cosmetic edits to Meta.index_together deprecation. | Mariusz Felisiak | |
| This should make it more straightforward to move forward when deprecation ends. | |||
| 2022-07-19 | Fixed #33855 -- Removed unnecessary system check calls from test worker ↵ | Mariusz Felisiak | |
| initialization. Regression in 3b3f38b3b09b0f2373e51406ecb8c9c45d36aebc. | |||
| 2022-07-18 | Fixed #33854 -- Corrected the order of parameters in dbshell on PostgreSQL. | Jarrett Keifer | |
| 2022-07-14 | Fixed #33631 -- Marked {% blocktranslate asvar %} result as HTML safe. | cheng | |
| 2022-07-12 | Fixed #27236 -- Deprecated Meta.index_together in favor of Meta.indexes. | David Wobrock | |
| This also deprecates AlterIndexTogether migration operation. | |||
| 2022-07-12 | Refs #27236 -- Split RenameField() tests with unique/index_together. | David Wobrock | |
| 2022-07-11 | Refs #27236 -- Removed usage of Meta.index_together from ↵ | David Wobrock | |
| indexes/introspection test models. | |||
| 2022-07-11 | Fixed typo in tests/sitemaps_tests/test_http.py. | Ikko Ashimine | |
| 2022-07-08 | Fixed #33718 -- Dropped support for MySQL 5.7. | Mariusz Felisiak | |
| 2022-07-08 | Fixed #33829 -- Made BaseConstraint.deconstruct() and equality handle ↵ | Stéphane "Twidi" Angel | |
| violation_error_message. Regression in 667105877e6723c6985399803a364848891513cc. | |||
| 2022-07-08 | Refs #27236 -- Added generic mechanism to handle the deprecation of ↵ | David Wobrock | |
| migration operations. | |||
| 2022-07-06 | Fixed #33826 -- Fixed RedisCache.set_many()/delete_many() crash with an ↵ | Christos Kopanos | |
| empty list. | |||
| 2022-07-06 | Fixed #33823 -- Made inspectdb generate unique related_name when reverse ↵ | Vladimir Kochetkov | |
| accessor clashes. | |||
| 2022-07-06 | Refs CVE-2022-34265 -- Properly escaped Extract() and Trunc() parameters. | Simon Charette | |
| Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> | |||
| 2022-07-05 | Fixed RelatedGeoModelTest.test08_defer_only() on MySQL 8+ with MyISAM ↵ | Mariusz Felisiak | |
| storage engine. | |||
| 2022-07-05 | Fixed #33822 -- Fixed save() crash on model formsets when not created by ↵ | Shawn Dong | |
| modelformset_factory(). Thanks Claude Paroz for the report. Regression in e87f57fdb8dcdabc452bd15abd015bf6c9b1f7a8. | |||
| 2022-07-05 | Fixed #33815 -- Fixed last_executed_query() on Oracle when parameter names ↵ | Mariusz Felisiak | |
| overlap. | |||
| 2022-07-04 | Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against ↵ | Mariusz Felisiak | |
| SQL injection. Thanks Takuto Yoshikai (Aeye Security Lab) for the report. | |||
| 2022-07-04 | Fixed #33816 -- Fixed QuerySet.only() after select_related() crash on proxy ↵ | Ipakeev | |
| models. | |||
| 2022-07-01 | Fixed GEOSTest.test_emptyCollections() on GEOS 3.8.0. | Mariusz Felisiak | |
| It's a regression in GEOS 3.8.0 fixed in GEOS 3.8.1. | |||
| 2022-07-01 | Updated vendored _urlsplit() to strip newline and tabs. | Michael Manfre | |
| Refs Python CVE-2022-0391. Django is not affected, but others who incorrectly use internal function url_has_allowed_host_and_scheme() with unsanitized input could be at risk. | |||
| 2022-06-28 | Fixed #33779 -- Allowed customizing encoder class in ↵ | Hrushikesh Vaidya | |
| django.utils.html.json_script(). | |||
| 2022-06-28 | Refs #33697 -- Used django.utils.http.parse_header_parameters() for parsing ↵ | Mehrdad | |
| boundary streams. This also removes unused parse_header() and _parse_header_params() helpers in django.http.multipartparser. | |||
| 2022-06-28 | Fixed #33805 -- Made admin's many-to-many widgets do not display help text ↵ | Ankur | |
| for selecting values when allow_multiple_selected is False. | |||
| 2022-06-27 | Fixed #33796 -- Fixed ordered combined queryset crash when used in subquery ↵ | Mariusz Felisiak | |
| on PostgreSQL and MySQL. Thanks Shai Berger for the report. Regression in 30a01441347d5a2146af2944b29778fa0834d4be. | |||
| 2022-06-23 | Fixed #33800 -- Fixed system check for the same template tag module in ↵ | Mariusz Felisiak | |
| installed apps and template tag libraries. Thanks Claude Paroz for the report. Regression in 004b4620f6f4ad87261e149898940f2dcd5757ef. | |||
| 2022-06-23 | Fixed #33799, Refs #31685 -- Added parameters for updating conflicts to ↵ | DhruvaPatil98 | |
| QuerySeta.abulk_create(). | |||
| 2022-06-23 | Made HashedFilesMixin ignore URLs without a path. | Florian Apolloner | |
| 2022-06-22 | Fixed #33028 -- Used ModelAdmin's opts attribute instead of model._meta. | Marcelo Galigniana | |
| 2022-06-21 | Fixed #33794 -- Fixed string-casting of GIS queries on PostgreSQL. | Claude Paroz | |
| Regression in 64c3f049ea3bcb1c82f35ae09f1dd5349a826a5c. | |||
| 2022-06-20 | Fixed #33657 -- Allowed customizing formatter class of argument parsers. | Abhinav Yadav | |
