summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2023-02-01[4.0.x] Bumped version for 4.0.9 release.4.0.9Mariusz Felisiak
2023-02-01[4.0.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for ↵Nick Pope
Accept-Language. The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue.
2023-01-31[4.0.x] Fixed E501 flake8 error.Mariusz Felisiak
2023-01-31[4.0.x] Fixed inspectdb.tests.InspectDBTestCase.test_custom_fields() on ↵Mariusz Felisiak
SQLite 3.37+. Use FlexibleFieldLookupDict which is case-insensitive mapping because SQLite 3.37+ returns some data type names upper-cased e.g. TEXT. Backport of 974e3b8750fe96c16c9c0b115a72ee4a2171df34 from main.
2023-01-31[4.0.x] Bumped versions in pre-commit and npm configurations.Mariusz Felisiak
Backport of f825536b5e09b3a047fec0c10aabd91bace0995c from main.
2023-01-31[4.0.x] Added packaging tools to GitHub actions.Mariusz Felisiak
Backport of fbacaa58ffc5a62456ee68b90efa13957f761ce4 from main.
2023-01-31[4.0.x] Used GitHub actions for Windows tests.Tom Forbes
Backport of f97401d1b184406d2e24f11eddbdaca8bbc360e3 from main
2023-01-31[4.0.x] Skipped GitHub actions for linters and JavaScript tests on purely ↵Mariusz Felisiak
doc changes. Backport of 48924966e275670623bd7e33e9089f895f6a3110 from main
2023-01-25[4.0.x] Adjusted release notes for 4.0.9, and 3.2.17.Carlton Gibson
Backport of d8e1442ce2c56282785dd806e5c1147975e8c857 from main
2023-01-25[4.0.x] Added stub release notes for 4.0.9 and 3.2.17.Carlton Gibson
Backport of 1df963ad2476726d63be132c0cee47e07b8250d7 from main
2023-01-25[4.0.x] Corrected passenv value for tox 4.0.6+.Stephen
Backport of 34b328814976a2e2f7907361a494202763649f3f from main
2022-12-29[4.0.x] Disabled auto-created table of contents entries on Sphinx 5.2+.Mariusz Felisiak
Auto-created table of contents entries for all domain objects (e.g. functions, classes, attributes, etc.) were added in Sphinx 5.2, see https://github.com/sphinx-doc/sphinx/issues/6316. An option to control new table of contents entries was added in Sphinx 5.2.3, see https://github.com/sphinx-doc/sphinx/pull/10886. Backport of 279967ec859a9a5240318cf29a077539b0e3139f from main
2022-11-22[4.0.x] Bumped gh-problem-matcher-wrap version to 2.0.0.Mariusz Felisiak
This avoids issues with using deprecated Node.js 12 actions. Backport of 744a1af7f943106e30d538e6ace55c2c66ccd791 from main.
2022-10-29[4.0.x] Removed obsolete doc reference to asyncio.iscoroutinefunction.Nick Pope
Backport of 970f61fefb148284fb2af63b5cc844279254111a from main
2022-10-20[4.0.x] Skipped scrypt tests when OpenSSL 1.1+ is not installed.HieuPham9720
Backport of 3e928de8add92a5f38a562abd7560b023d24b6af from main
2022-10-04[4.0.x] Added CVE-2022-36359 to security archive.Carlton Gibson
Backport of 93d4c9ea1de24eb391cb2b3561b6703fd46374df from main
2022-10-04[4.0.x] Post-release version bump.Carlton Gibson
2022-10-04[4.0.x] Bumped version for 4.0.8 release.4.0.8Carlton Gibson
2022-09-27[4.0.x] Fixed CVE-2022-41323 -- Prevented locales being interpreted as ↵Adam Johnson
regular expressions. Thanks to Benjamin Balder Bach for the report.
2022-09-27[4.0.x] Set date and added stub notes for 4.0.8 and 3.2.16 releases.Carlton Gibson
Backport of 57c7220280db19dc9dda0910b90cf1ceac50c66f from main.
2022-08-03[4.0.x] Added CVE-2022-36359 to security archive.Carlton Gibson
Backport of 57c7220280db19dc9dda0910b90cf1ceac50c66f from main
2022-08-03[4.0.x] Post-release version bump.Carlton Gibson
2022-08-03[4.0.x] Bumped version for 4.0.7 release.4.0.7Carlton Gibson
2022-08-03[4.0.x] Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.Carlton Gibson
Thanks to Motoyasu Saburi for the report.
2022-08-03[4.0.x] Adjusted version 4.0.7 release notes.Carlton Gibson
Backport of 9062c23de80e999009cbe4100d83e90dd0463612 from main
2022-08-03[4.0.x] Ignored 080359c4c5242ef69ac8c58c92f240e71121ffd7 formatting changes ↵Mariusz Felisiak
in git blame.
2022-08-03[4.0.x] Fixed warnings per flake8 5.0.0.Mariusz Felisiak
Backport of c18861804feb6a97afbeabb51be748dd60a04458 from main.
2022-08-01[4.0.x] Fixed collation tests on MySQL 8.0.30+.Mariusz Felisiak
The utf8_ collations are renamed to utf8mb3_* on MySQL 8.0.30+. Backport of 88dba2e3fd64b64bcf4fae83b256b4f6f492558f from main
2022-07-27[4.0.x] Adjusted release notes for 4.0.7 and 3.2.15.Carlton Gibson
Backport of cadd864f6878c1c02a014589876ece166befdeb3 from main
2022-07-27[4.0.x] Added release date and stub release notes for 4.0.7 and 3.2.15 releases.Carlton Gibson
Backport of 0c1675781ec5944132fe5a475ca6064edc71bd81 from main
2022-07-26[4.0.x] Fixed #33820 -- Doc'd "true"/"false"/"null" caveat for JSONField key ↵Mariusz Felisiak
transforms on SQLite. Thanks Johnny Metz for the report. Regression in 71ec102b01fcc85acae3819426a4e02ef423b0fa. Backport of e20e5d1557785ba71e8ef0ceb8ccb85bdc13840a from main
2022-07-05[4.0.x] Fixed RelatedGeoModelTest.test08_defer_only() on MySQL 8+ with ↵Mariusz Felisiak
MyISAM storage engine. Backport of 73766c118781a7f7052bf0a5fbee38b944964e31 from main
2022-07-04[4.0.x] Added CVE-2022-34265 to security archive.Mariusz Felisiak
Backport of d12d7c4c42814736c24731a6a300a79526fc2ef6 from main
2022-07-04[4.0.x] Added stub release notes for 4.0.7.Mariusz Felisiak
Backport of c6932ea2ea7ec431245b9a343c72318bb758072f from main
2022-07-04[4.0.x] Post-release version bump.Mariusz Felisiak
2022-07-04[4.0.x] Bumped version for 4.0.6 release.4.0.6Mariusz Felisiak
2022-07-04[4.0.x] Updated man page for Django 4.0.6.Mariusz Felisiak
2022-07-04[4.0.x] Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) ↵Mariusz Felisiak
against SQL injection. Thanks Takuto Yoshikai (Aeye Security Lab) for the report.
2022-07-02[4.0.x] Fixed typo in docs/topics/signals.txt.Aristotelis Mikropoulos
Backport of 5eb6a2b33d70b9889e1cafa12594ad6f80773d3a from main
2022-07-01[4.0.x] Fixed GEOSTest.test_emptyCollections() on GEOS 3.8.0.Mariusz Felisiak
It's a regression in GEOS 3.8.0 fixed in GEOS 3.8.1. Backport of 863aa7541d30247e7eb7a973ff68a7d36f16dc02 from main
2022-06-27[4.0.x] Fixed docs build with sphinxcontrib-spelling 7.5.0+.Mariusz Felisiak
sphinxcontrib-spelling 7.5.0+ includes captions of figures in the set of nodes for which the text is checked. Backport of ac90529cc58507d9a07610809a795ec5fc3cbf8c from main.
2022-06-27[4.0.x] Added stub release notes and release date for 4.0.6 and 3.2.14.Mariusz Felisiak
Backport of b2eff16806057095c7dd3daa9402ad615e51627f from main
2022-06-21[4.0.x] Fixed CoveringIndexTests.test_covering_partial_index() when ↵Mariusz Felisiak
DEFAULT_INDEX_TABLESPACE is set. Backport of aa8b9279e40da343f5b91e5aec07f868184056f4 from main
2022-06-21[4.0.x] Fixed #33789 -- Doc'd changes in quoting table/column names on ↵Mariusz Felisiak
Oracle in Django 4.0. Thanks Paul in 't Hout for the report. Regression in 1f643c28b5f2b039c47155692844dbae1cb091cd. Backport of a0608c4b111555023c24ab7333a42ec53dca6b42 from main
2022-06-16[4.0.x] Updated OWASP Top 10 link in security topic.Grammy Jiang
Backport of ef9121f3e6f62060d2904fb1811dbe7d74834686 from main
2022-06-01[4.0.x] Added stub release notes for 4.0.6.Carlton Gibson
Backport of d5bc36203057627f6f7d0c6dc97b31adde6f4313 from main
2022-06-01[4.0.x] Post-release version bump.Carlton Gibson
2022-06-01[4.0.x] Bumped version for 4.0.5 release.4.0.5Carlton Gibson
2022-06-01[4.0.x] Updated release date for Django 4.0.5.Carlton Gibson
Backport of 40bf34a92fe5e876197df161e13eca3902b8878c from main
2022-06-01[4.0.x] Fixed #33753 -- Fixed docs build on Sphinx 5+.Mariusz Felisiak
Empty language is not supported anymore. Backport of 565ad5ace46aa1e2368450701cba45dd1a95a026 from main