| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-08-30 | [3.2.x] Fixed #32992 -- Restored offset extraction for fixed offset timezones. | Carlton Gibson | |
| Regression in 10d126198434810529e0220b0c6896ed64ca0e88. Backport of cbba49971bbbbe3e8c6685e4ce6ab87b1187ae87 from main | |||
| 2021-05-26 | [3.2.x] Fixed #32783 -- Fixed crash of autoreloader when __main__ module ↵ | Mariusz Felisiak | |
| doesn't have __spec__ attribute. Regression in ec6d2531c59466924b645f314ac33f54470d7ac3. Thanks JonathanNickelson for the report. Backport of 12b19a1d76e1a6f80923c8358290d605dacd65d4 from main | |||
| 2021-05-13 | [3.2.x] Fixed #32717 -- Fixed filtering of querysets combined with the | ↵ | Simon Charette | |
| operator. Address a long standing bug in a Where.add optimization to discard equal nodes that was surfaced by implementing equality for Lookup instances in bbf141bcdc31f1324048af9233583a523ac54c94. Thanks Shaheed Haque for the report. Backport of b81c7562fc33f50166d5120138d6398dc42b13c3 from main | |||
| 2021-05-04 | [3.2.x] Fixed CVE-2021-31542 -- Tightened path & file name sanitation in ↵ | Florian Apolloner | |
| file uploads. | |||
| 2021-03-22 | [3.2.x] Refs #31732 -- Fixed django.utils.inspect caching for bound methods. | Adam Johnson | |
| Thanks Alexandr Artemyev for the report, and Simon Charette for the original patch. Backport of 562898034f65e17bcdd2d951ac5236a1ec8ea690 from main | |||
| 2021-03-22 | [3.2.x] Refs #31372 -- Added django.utils.inspect tests for bound methods. | Adam Johnson | |
| Backport of ac72a216a7ef95e8e9cb8651b7e67320597c903b from main | |||
| 2021-03-09 | [3.2.x] Updated Git branch "master" to "main". | Markus Holtermann | |
| This change follows a long discussion on django-develops: https://groups.google.com/g/django-developers/c/tctDuKUGosc/ Backport of d9a266d657f66b8c4fa068408002a4e3709ee669 from main | |||
| 2021-02-19 | [3.2.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via ↵ | Nick Pope | |
| django.utils.http.parse_qsl(). | |||
| 2021-02-01 | [3.2.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via ↵ | Mariusz Felisiak | |
| archive.extract(). Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews. Thanks Wang Baohua for the report. Backport of 05413afa8c18cdb978fcdf470e09f7a12b234a23 from master. | |||
| 2021-01-19 | [3.2.x] Refs #32365 -- Allowed use of non-pytz timezone implementations. | Paul Ganssle | |
| Backport of 10d126198434810529e0220b0c6896ed64ca0e88 from master | |||
| 2021-01-05 | Fixed #32314 -- Fixed detection when started non-django modules with "python ↵ | William Schwartz | |
| -m" in autoreloader. django.utils.autoreload.get_child_arguments() detected when Python was started with the `-m` option only for `django` module. This commit changes the logic to check __spec__, see https://docs.python.org/3/reference/import.html#main-spec Now packages can implement their own __main__ with the runserver command. | |||
| 2020-12-21 | Fixed #32269 -- Fixed parse_duration() for negative days in ISO 8601 format. | starryrbs | |
| 2020-12-21 | Added more assertions for parse_duration() with negative timedeltas. | starryrbs | |
| 2020-12-21 | Fixed #32208 -- Allowed adding lazy() objects. | Hasan Ramezani | |
| Co-authored-by: Claude Paroz <claude@2xlibre.net> | |||
| 2020-12-08 | Fixed #32233 -- Cleaned-up duplicate connection functionality. | Florian Apolloner | |
| 2020-11-19 | Fixed #32202 -- Fixed autoreloader argument generation for Windows with ↵ | Carlton Gibson | |
| Python 3.7-. | |||
| 2020-11-12 | Simplified TimeFormat.g(). | Nick Pope | |
| 2020-11-12 | Fixed #32149 -- Added support for years < 1000 to DateFormat.y(). | Sam | |
| 2020-11-05 | Fixed #25791 -- Implement autoreload behaviour for cached template loader. | Tom Forbes | |
| 2020-10-30 | Updated MultiValueDict.update() to mirror dict.update() behavior. | Nick Pope | |
| Changes in behavior include: - Accepting iteration over empty sequences, updating nothing. - Accepting iterable of 2-tuples providing key-value pairs. - Failing with the same or comparable exceptions for invalid input. Notably this replaces the previous attempt to catch TypeError which was unreachable as the call to .items() resulted in AttributeError on non-dict objects. | |||
| 2020-10-30 | Increased test coverage for django.utils.datastructures.MultiValueDict. | Nick Pope | |
| Co-authored-by: Mads Jensen <mje@inducks.org> | |||
| 2020-10-30 | Increased test coverage for django.utils.datastructures.OrderedSet. | Mads Jensen | |
| Co-authored-by: Nick Pope <nick.pope@flightdataservices.com> | |||
| 2020-10-05 | Refs #29838, Refs #28507 -- Made make_hashable() ignore key order. | Simon Charette | |
| 2020-09-03 | Refs #21231 -- Backport urllib.parse.parse_qsl() from Python 3.8. | Nick Pope | |
| 2020-07-29 | Completed test coverage for colorize(). | David Smith | |
| 2020-07-20 | Used context manager version of tempfile.TemporaryDirectory() in ↵ | Jon Dufresne | |
| utils_tests.test_autoreload. | |||
| 2020-07-20 | Used temporary directory in RestartWithReloaderTests.test_manage_py(). | Tom Forbes | |
| Using the current directory can cause a PermissionError. | |||
| 2020-07-16 | Fixed #31623 -- Allowed specifying number of adjacent time units in ↵ | Tim Park | |
| timesince()/timeuntil(). | |||
| 2020-06-29 | Fixed #30807 -- Fixed TestArchive.test_extract_file_permissions() when umask ↵ | Ad Timmering | |
| is 0o000. Fixed test that checks permissions on files extracted from archives with no permissions set, to not assume a default umask of 0o002. Test regression in c95d063e776e849cf1a0bf616c654165cb89c706. | |||
| 2020-06-18 | Fixed #31716 -- Fixed detection of console scripts in autoreloader on Windows. | Tom Forbes | |
| 2020-06-04 | Refs #27804 -- Used subTest() in tests.utils_tests.test_text. | Jon Dufresne | |
| 2020-05-29 | Fixed #28694 -- Made django.utils.text.slugify() strip dashes and underscores. | David Smith | |
| 2020-05-29 | Added more tests for slugify(). | David Smith | |
| 2020-05-12 | Fixed E128, E741 flake8 warnings. | Mariusz Felisiak | |
| 2020-05-04 | Refs #30573 -- Rephrased "Of Course" and "Obvious(ly)" in documentation and ↵ | Adam Johnson | |
| comments. | |||
| 2020-05-04 | Corrected opts argument of colorize in ↵ | Rasmus Wriedt Larsen | |
| TermColorTests.test_colorize_empty_text(). | |||
| 2020-04-30 | Fixed #31521 -- Skipped test_parsing_rfc850 test on 32-bit systems. | Hasan Ramezani | |
| 2020-04-20 | Capitalized Unicode in docs, strings, and comments. | Jon Dufresne | |
| 2020-03-11 | Fixed #31359 -- Deprecated get_random_string() calls without an explicit length. | Claude Paroz | |
| 2020-02-26 | Fixed #28280 -- Prevented numberformat.format() from formatting large/tiny ↵ | Hasan Ramezani | |
| floats in scientific notation. | |||
| 2020-02-18 | Refs #26601 -- Deprecated passing None as get_response arg to middleware ↵ | Claude Paroz | |
| classes. This is the new contract since middleware refactoring in Django 1.10. Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es> Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> | |||
| 2020-02-07 | Used assertRaisesMessage() in various tests. | Hasan Ramezani | |
| 2020-01-27 | Refs #27468 -- Added algorithm parameter to django.utils.crypto.salted_hmac(). | Claude Paroz | |
| 2020-01-15 | Refs #27468 -- Added explicit tests for django.utils.crypto.salted_hmac() | Claude Paroz | |
| 2019-12-30 | Fixed #30892 -- Fixed slugify() and admin's URLify.js for "İ". | Sjbrgsn | |
| Thanks Luis Nell for the implementation idea and very detailed report. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> | |||
| 2019-12-27 | Increased test coverage of django.utils.inspect. | Mads Jensen | |
| 2019-12-11 | Fixed #31080 -- Removed redundant type="text/javascript" attribute from ↵ | Jon Dufresne | |
| <script> tags. | |||
| 2019-11-27 | Fixed #30803 -- Allowed comma separators for milliseconds in ↵ | Farhaan Bukhsh | |
| django.utils.dateparse functions. Co-Authored-By: Ben Wilber <benwilber@gmail.com> | |||
| 2019-11-27 | Refs #30803 -- Allowed comma separators for decimal fractions in ↵ | Farhaan Bukhsh | |
| parse_duration(). | |||
| 2019-11-22 | Fixed #9762 -- Made DateFormat.r() locale-independent. | Baptiste Mispelon | |
| Thanks to Antonio Melé for the original report all those years ago and to all the contributors who helped along the way. | |||
