Commit Graph

30150 Commits

Author SHA1 Message Date
Brad Solomon 519b6d6070 [4.0.x] Fixed #33443 -- Clarified when PasswordResetView sends an email.
Backport of b55ebe3241 from main
2022-01-17 08:59:43 +01:00
Scott Pashley 92e1018178 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
Backport of 367d6920ec from main
2022-01-12 07:45:30 +01:00
Zeilentaucher 89d88414dc [4.0.x] Fixed #33432 -- Fixed typo in docs/howto/outputting-csv.txt.
Backport of 658dc7045a from main
2022-01-12 07:36:55 +01:00
Victor Peralta cf4128e6e9 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
Backport of f1905db6c0 from main
2022-01-11 06:20:30 +01:00
Keryn Knight c8a6bf951b [4.0.x] Fixed #33426 -- Fixed ResolverMatch.__repr_() for class-based views.
Regression in 7c08f26bf0.

Backport of f4b06a3cc1 from main
2022-01-10 18:39:59 +01:00
Mariusz Felisiak dfda5ff722 [4.0.x] Corrected signatures of some functions in docs.
Backport of 178109c173 from main
2022-01-10 13:31:25 +01:00
Mariusz Felisiak 6554f00df6 [4.0.x] Corrected directive for signals in django.contrib.auth docs.
Backport of b0ccf74549 from main
2022-01-10 13:31:19 +01:00
Keryn Knight 2ea0321058 [4.0.x] Fixed #33425 -- Fixed view name for CBVs on technical 404 debug page.
Regression in 0c0b87725b.

Backport of 2a66c102d9 from main
2022-01-08 14:54:10 +01:00
David c959aa99aa [4.0.x] Fixed #33419 -- Restored marking forms.Field.help_text as HTML safe.
Regression in 456466d932.

Thanks Matt Westcott for the report.

Backport of 4c60c3edff from main
2022-01-07 16:12:15 +01:00
Petter Friberg 11475958f6 [4.0.x] Fixed #33410 -- Fixed recursive capturing of callbacks by TestCase.captureOnCommitCallbacks().
Regression in d89f976bdd.

Backport of bc174e6ea0 from main
2022-01-07 16:12:01 +01:00
David da710aa3d8 [4.0.x] Removed unused comment directive in CBV topic docs.
Backport of 973fa56652 from main
2022-01-05 09:19:54 +01:00
David 17bd04e708 [4.0.x] Fixed malformed attribute directives in docs.
Backport of cc8e771c64 from main
2022-01-05 09:19:44 +01:00
Carlton Gibson 24fce7d134 [4.0.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
Backport of 63869ab1f1 from main
2022-01-04 11:30:40 +01:00
Carlton Gibson 6f9a994c47 [4.0.x] Added stub release notes for Django 4.0.2.
Backport of f38c66b555 from main
2022-01-04 11:11:20 +01:00
Carlton Gibson 9bb9326027 [4.0.x] Post-release version bump. 2022-01-04 10:46:42 +01:00
Carlton Gibson 15aff7f22c [4.0.x] Bumped version for 4.0.1 release. 2022-01-04 10:42:03 +01:00
Florian Apolloner e1592e0f26 [4.0.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.
Thanks to Dennis Brinkrolf for the report.
2022-01-04 10:10:14 +01:00
Florian Apolloner 2a8ec7f546 [4.0.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
Thanks to Dennis Brinkrolf for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Florian Apolloner df79ef03ac [4.0.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator.
Thanks Chris Bailey for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Luke Plant 7753169585 [4.0.x] Avoided suggestion of plain text database password in sessions topic.
Backport of ccafad2e42 from main
2022-01-04 06:48:19 +01:00
Mariusz Felisiak fe59bf202d [4.0.x] Fixed #33391 -- Clarified Aggregate.empty_result_set_value docs.
Backport of 4400d8568a from main
2021-12-31 06:49:55 +01:00
mangelozzi b93fb3d6be [4.0.x] Improved @display(empty_value) example in ModelAdmin.empty_value_display docs.
Backport of eb901681ab from main
2021-12-30 11:39:45 +01:00
Jacob Walls c46e996307 [4.0.x] Fixed #27936 -- Rewrote spanning multi-valued relationships docs.
Backport of 6174814dbe from main
2021-12-30 09:05:29 +01:00
Mariusz Felisiak e9b023b8e4 [4.0.x] Added default values to Entry's fields in making queries docs.
This makes it easier to create a data in examples.

Backport of 1283458baa from main
2021-12-30 09:05:20 +01:00
Sergey Fursov 76d24d5f16 [4.0.x] Updated example of YAML serialization format in docs.
Backport of feeb0685c6 from main
2021-12-28 13:39:06 +01:00
Carlton Gibson c9ec72ea1b [4.0.x] Added stub release notes for 4.0.1, 3.2.11, and 2.2.26 releases.
Backport of b13d920b7b from main.
2021-12-28 10:08:54 +01:00
Mariusz Felisiak b5f60ef5a7 [4.0.x] Refs #32355 -- Bumped required psycopg2 version to 2.8.4.
psycopg2 2.8.4 is the first release to support Python 3.8.
Backport of ca04659b4b from main
2021-12-22 20:33:49 +01:00
David Smith a0e01b000a [4.0.x] Refs #31026 -- Updated TemplatesSetting docs to refer to forms.
Backport of 78f062f63e from main
2021-12-22 08:43:44 +01:00
Adam Johnson ad09b1687d [4.0.x] Added TemplatesSetting to list of built-in renderers in FORM_RENDERER docs.
Backport of fde425051c from main
2021-12-22 07:59:58 +01:00
Brenton Partridge b85ceaaba6 [4.0.x] Fixed #32600 -- Fixed Geometry collections and Polygon segmentation fault on macOS ARM64.
Backport of 19fb838803 from main
2021-12-21 13:36:08 +01:00
Simon Charette 7e6a2e3b45 [4.0.x] Fixed #33366 -- Fixed case handling with swappable setting detection in migrations autodetector.
The migration framework uniquely identifies models by case insensitive
labels composed of their app label and model names and so does the app
registry in most of its methods (e.g. AppConfig.get_model) but it
wasn't the case for get_swappable_settings_name() until this change.

This likely slipped under the radar for so long and only regressed in
b9df2b74b9 because prior to the changes
related to the usage of model states instead of rendered models in the
auto-detector the exact value settings value was never going through a
case folding hoop.

Thanks Andrew Chen Wang for the report and Keryn Knight for the
investigation.

Backport of 4328970780 from main
2021-12-17 10:00:33 +01:00
Mariusz Felisiak c1d2e8b9b8 [4.0.x] Fixed #33350 -- Reallowed using cache decorators with duck-typed HttpRequest.
Regression in 3fd82a6241.

Thanks Terence Honles for the report.
Backport of 40165eecc4 from main
2021-12-16 20:14:17 +01:00
Mariusz Felisiak 267a743bf2 [4.0.x] Refs #33365, Refs #30530 -- Doc'd re_path() behavior change in Django 2.2.25, 3.1.14, and 3.2.10.
Follow up to d4dcd5b9dd.
Backport of 5de12a369a from main
2021-12-15 18:54:35 +01:00
Jeremy Lainé 3b03bce122 [4.0.x] Fixed #33361 -- Fixed Redis cache backend crash on booleans.
Backport of 2f33217ea2 from main
2021-12-14 08:46:16 +01:00
mgaligniana cc5bbd447b [4.0.x] Fixed #33338 -- Doc'd that never_cache() decorator set Expires header.
Backport of 669dcefc04 from main
2021-12-13 18:38:48 +01:00
Beomsoo Kim c607ee949d [4.0.x] Corrected example in models.DecimalField docs.
Backport of 7e4a9a9f69 from main
2021-12-13 07:20:56 +01:00
Wayne Lambert e39e5fa8e6 [4.0.x] Updated link to Microsoft SQL Server backend.
Backport of 8a8c8797e8 from main
2021-12-13 07:17:33 +01:00
Ömer Faruk Abacı bb8435f5db [4.0.x] Refs #33319 -- Added note about commutation of QuerySet's | operator.
Backport of f04b44bad4 from main
2021-12-08 21:59:40 +01:00
Baptiste Mispelon 15031852c5 [4.0.x] Fixed #33346 -- Fixed SimpleTestCase.assertFormsetError() crash on a formset named "form".
Thanks OutOfFocus4 for the report.

Regression in 456466d932.

Backport of cb383753c0 from main.
2021-12-08 21:13:00 +01:00
Nick Pope b7f2afa8de [4.0.x] Improved release notes wording for template-based form rendering.
Backport of dfdf1c6864 from main
2021-12-07 13:35:03 +01:00
Mariusz Felisiak 81a90b5bc3 [4.0.x] Added stub release notes for 4.0.1.
Backport of adef3d975e from main
2021-12-07 10:42:26 +01:00
Mariusz Felisiak 677c553699 [4.0.x] Post-release version bump. 2021-12-07 10:16:37 +01:00
Mariusz Felisiak 67d0c4644a [4.0.x] Bumped version for 4.0 release. 2021-12-07 10:10:26 +01:00
Mariusz Felisiak 0f4fa0caee [4.0.x] Finalized release notes for Django 4.0.
Backport of d7bd9eb6cd from main
2021-12-07 10:03:39 +01:00
Mariusz Felisiak 01c0fb9d19 [4.0.x] Updated asgiref dependency for 4.0 release series.
Backport of 513441240f from main
2021-12-07 09:55:18 +01:00
Mariusz Felisiak 7f20e89453 [4.0.x] Added CVE-2021-44420 to security archive.
Backport of 8747052411 from main
2021-12-07 08:53:48 +01:00
Florian Apolloner 20b9ad36ff [4.0.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.
Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports.

Backport of d4dcd5b9dd from main.
2021-12-07 06:29:34 +01:00
Mariusz Felisiak 4c5215ab03
[4.0.x] Updated translations from Transifex.
This also fixes related i18n tests.

Co-authored-by: Claude Paroz <claude@2xlibre.net>
2021-12-06 20:29:53 +01:00
Hannes Ljungberg fed7f992ac [4.0.x] Fixed #33335 -- Made model validation ignore functional unique constraints.
Regression in 3aa545281e.

Thanks Hervé Le Roy for the report.

Backport of 1eaf38fa87 from main
2021-12-06 13:28:54 +01:00
Mariusz Felisiak 7bde53a7ae [4.0.x] Refs #33333 -- Fixed PickleabilityTestCase.test_annotation_with_callable_default() crash on Oracle.
Grouping by LOBs is not allowed on Oracle. This moves a binary field to
a separate model.
Backport of d3a64bea51 from main
2021-12-04 15:55:31 +01:00