Commit Graph

17154 Commits

Author SHA1 Message Date
Mariusz Felisiak 5b9ca81f42 [3.1.x] Post-release version bump. 2021-04-06 08:31:58 +02:00
Mariusz Felisiak c4928c9115 [3.1.x] Bumped version for 3.1.8 release. 2021-04-06 08:27:37 +02:00
Mariusz Felisiak cca0d98118 [3.1.x] Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.
Thanks Claude Paroz for the initial patch.
Thanks Dennis Brinkrolf for the report.

Backport of d4d800ca1a from main.
2021-04-06 08:25:24 +02:00
Adam Johnson 95ee8fecb5 [3.1.x] Fixed #32560 -- Fixed test runner with --pdb and --buffer on fail/error.
Backport of 45814af619 from main
2021-03-17 21:51:51 +01:00
Carlton Gibson 87481ea20c [3.1.x] Post-release version bump. 2021-02-19 09:40:16 +01:00
Carlton Gibson 56f2cccc01 [3.1.x] Bumped version for 3.1.7 release. 2021-02-19 09:39:23 +01:00
Nick Pope 8f6d431b08 [3.1.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via django.utils.http.limited_parse_qsl(). 2021-02-18 10:15:30 +01:00
Mariusz Felisiak 9efe832ee1 [3.1.x] Fixed #32403 -- Fixed re-raising DatabaseErrors when using only 'postgres' database.
Thanks Kazantcev Andrey for the report.

Regression in f48f671223.
Backport of f131841c60 from master
2021-02-02 21:36:06 +01:00
Mariusz Felisiak 69a40b6dbe [3.1.x] Post-release version bump. 2021-02-01 09:47:27 +01:00
Mariusz Felisiak 3235a7b807 [3.1.x] Bumped version for 3.1.6 release. 2021-02-01 09:33:22 +01:00
Mariusz Felisiak 02e6592835 [3.1.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().
Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews.

Thanks Wang Baohua for the report.

Backport of 05413afa8c from master.
2021-02-01 09:13:58 +01:00
Denis Skulimovskiy 82e1294602 [3.1.x] Fixed #32391 -- Used CSS flex properties for changelist filter.
Matched layout adjustment using flex from admin sidebar added in
d24ba1be7a.

Filters would become squashed when viewport was
constrained or list display table became too wide.

Backport of 269a767146 from master
2021-01-28 15:55:51 +01:00
Carlton Gibson e080bf49a0 [3.1.x] Post-release version bump. 2021-01-04 09:01:30 +01:00
Carlton Gibson f244d86962 [3.1.x] Bumped version for 3.1.5 release. 2021-01-04 08:47:51 +01:00
Mariusz Felisiak 5fdc81d893 [3.1.x] Fixed #32304 -- Fixed prefixing STATIC_URL and MEDIA_URL by SCRIPT_NAME for absolute URLs with no domain.
Thanks Adam Hooper for the report.

Regression in c574bec092.
Backport of e13b71403b from master
2020-12-31 13:19:34 +01:00
Mariusz Felisiak 6b4b7da740 [3.1.x] Fixed #32299 -- Prevented mutating handlers when processing middlewares marking as unused in an async context.
Thanks Hubert Bielenia for the report.
Backport of 98ad327864 from master
2020-12-29 09:06:03 +01:00
sage a891e1bb0a [3.1.x] Fixed #32252 -- Fixed __isnull=True on key transforms on SQLite and Oracle.
__isnull=True on key transforms should not match keys with NULL values.

Backport of 8d7085e0fd from master
2020-12-11 11:18:15 +01:00
Mariusz Felisiak 68646e7146 [3.1.x] Post-release version bump. 2020-12-01 07:01:24 +01:00
Mariusz Felisiak fa206fe722 [3.1.x] Bumped version for 3.1.4 release. 2020-12-01 06:32:31 +01:00
sage a7935fe942 [3.1.x] Fixed #32203 -- Fixed QuerySet.values()/values_list() crash on key transforms with non-string values on SQLite.
Thanks Gordon Wrigley for the report.

Backport of fe6e582421 from master
2020-11-25 20:30:38 +01:00
Mariusz Felisiak 97bfe0cba5 [3.1.x] Fixed #32224 -- Avoided suppressing connection errors in supports_json_field on SQLite.
Regression in 6789ded0a6.

Thanks Juan Garcia Alvite for the report.
Backport of f5e5aac59e from master
2020-11-25 12:21:29 +01:00
Hasan Ramezani 166c0d2474 [3.1.x] Fixed #32200 -- Fixed grouping by ExpressionWrapper() with Q objects.
Thanks Gordon Wrigley for the report.

Regression in df32fd42b8.

Backport of fe9c7ded29 from master
2020-11-19 21:42:14 +01:00
Carlton Gibson 012822c7f9 [3.1.x] Fixed #32202 -- Fixed autoreloader argument generation for Windows with Python 3.7-.
Backport of ead37dfb58 from master
2020-11-19 12:12:47 +01:00
Hannes Ljungberg cc3870c30f [3.1.x] Fixed #32182 -- Fixed crash of JSONField nested key transforms with subquery annotations on PostgreSQL.
Backport of 0773837e15 from master
2020-11-10 08:13:03 +01:00
Carlton Gibson 8b3010a298 [3.1.x] Fixed #32159 -- Ensured AsyncRequestFactory correctly sets headers.
Backport of ebb08d1942 from master
2020-11-04 11:09:52 +01:00
Patrick Arminio bb74d2db98 [3.1.x] Fixed #32162 -- Fixed setting Content-Length header in AsyncRequestFactory.
Backport of 542b4b3ab4 from master
2020-11-03 10:33:34 +01:00
Carlton Gibson 7597c51efb [3.1.x] Post-release version bump. 2020-11-02 09:11:45 +01:00
Carlton Gibson 4264d78f2d [3.1.x] Bumped version for 3.1.3 release. 2020-11-02 09:04:03 +01:00
Christian Klus ab951d242e [3.1.x] Fixed #32152 -- Fixed grouping by subquery aliases.
Regression in 42c08ee465.

Thanks Simon Charette for the review.

Backport of 4ac2d4fa42 from master
2020-10-29 11:30:53 +01:00
Josh Santos b3d667f20d [3.1.x] Fixed #32127 -- Fixed admin change-form textarea layout for mid-sized displays.
Backport of 36bc47069c from master
2020-10-27 16:06:57 +01:00
Carlton Gibson d00127ccab [3.1.x] Fixed #32128 -- Added asgiref 3.3 compatibility.
Thread sensitive parameter is True by default from asgiref v3.3.0.
Added an explicit thread_sensitive=False to previously implicit uses.

Backport of e17ee44688 from master
2020-10-27 11:29:31 +01:00
Mariusz Felisiak 767e06b5a8 [3.1.x] Fixed #32130 -- Fixed pre-Django 3.1 password reset tokens validation.
Thanks Gordon Wrigley for the report and implementation idea.

Regression in 226ebb1729.
Backport of 3418092238 from master
2020-10-22 13:22:00 +02:00
Carlton Gibson b37d5849b7 [3.1.x] Fixed #32069 -- Fixed admin change-form layout on small screens.
Restored flex-wrap CSS declaration to form elements at smallest breakpoint.
This was present since the responsive admin was introduced in dc37e8846e.
Regression in 8ee4bb6ffc, where it was accidentally removed.

Backport of 257f8495d6 from master
2020-10-21 15:09:45 +02:00
Hasan Ramezani 2212927c1b [3.1.x] Fixed #32107 -- Fixed ProtectedError.protected_objects and RestrictedError.restricted_objects.
Regression in 4ca5c565f4 and
ab3cbd8b9a.

Thanks Vitaliy Yelnik for the report.

Backport of 3b1746d519 from master
2020-10-19 13:10:13 +02:00
Mariusz Felisiak be3ce38656 [3.1.x] Refs #32096 -- Made JSONField check respect Meta.required_db_vendor.
Thanks Simon Charette for the implementation idea.
Backport of 1fb97fb965 from master
2020-10-15 22:06:33 +02:00
Mariusz Felisiak 536213278c [3.1.x] Refs #32096 -- Fixed ExclusionConstraint crash with JSONField key transforms in expressions.
Regression in 6789ded0a6.

Backport of ee0abac169 from master.
2020-10-14 22:10:09 +02:00
Mariusz Felisiak ae6b24093c [3.1.x] Refs #32096 -- Fixed ExpressionWrapper crash with JSONField key transforms.
Regression in 6789ded0a6.

Thanks Simon Charette and Igor Jerosimić for the report.

Backport of bbd55e5863 from master
2020-10-14 21:03:40 +02:00
Mariusz Felisiak 59fe0b8541 [3.1.x] Refs #32096 -- Fixed __in lookup crash against key transforms for JSONField.
Regression in 6789ded0a6 and
1251772cb8.

Thanks Simon Charette and Igor Jerosimić for the report.

Backport of 7e1e198494 from master
2020-10-14 21:03:15 +02:00
Mariusz Felisiak d94e777b66 [3.1.x] Refs #32096 -- Fixed crash of ArrayAgg/StringAgg/JSONBAgg with ordering over JSONField key transforms.
Regression in 6789ded0a6.

Thanks Igor Jerosimić for the report.

Backport of 1f31027bb3 from master
2020-10-14 21:02:29 +02:00
Tim Schilling 4047c1602c [3.1.x] Fixed #32091 -- Fixed admin search bar width on filtered admin page.
Backport of b7da588e88 from master
2020-10-09 12:11:15 +02:00
Qi Zhao 8c403b17f9 [3.1.x] Fixed #32080 -- Fixed displaying Unicode chars in forms.JSONField and read-only JSONField values in admin.
Backport of de81676b51 from master
2020-10-09 08:44:32 +02:00
Tom Carrick 3add635ff7 [3.1.x] Fixed #32072 -- Fixed admin search bar height.
Thanks şuayip üzülmez for the report.

Regression in 8ee4bb6ffc.

Backport of 342a41740d from master
2020-10-06 11:57:34 +02:00
Mariusz Felisiak c912356264 [3.1.x] Post-release version bump. 2020-10-01 07:39:36 +02:00
Mariusz Felisiak 970729693a [3.1.x] Bumped version for 3.1.2 release. 2020-10-01 07:26:07 +02:00
Tom Carrick 57b359343b [3.1.x] Fixed #31986 -- Fixed admin filter sidebar scrolling.
Regression in 2bc38bc7ca.

Thanks haki for the report.

Backport of 8ee4bb6ffc from master
2020-09-30 21:49:11 +02:00
Claude Paroz f7397bb7c8 [3.1.x] Updated translations from Transifex. 2020-09-30 09:53:06 +02:00
David Smith 12ba61ed17 [3.1.x] Bumped minimum isort version to 5.1.0.
Fixed inner imports per isort 5.
isort 5.0.0 to 5.1.0 was unstable.

Backport of e74b3d724e from master
2020-09-30 09:51:31 +02:00
Mariusz Felisiak b7df7de44f [3.1.x] Fixed #32038 -- Fixed EmptyFieldListFilter crash with GenericRelation.
Thanks Javier Matos Odut for the report.

Backport of e4ab44a4b2 from master
2020-09-25 10:10:26 +02:00
Mariusz Felisiak fbb7881956 [3.1.x] Fixed #32012 -- Made test database creation sync apps models when migrations are disabled.
Thanks Jaap Roes for the report.
Backport of 77caeaea88 from master
2020-09-23 10:54:50 +02:00
Mariusz Felisiak 1afc9b31bb [3.1.x] Fixed #32007 -- Fixed queryset crash with Q() annotation and aggregation.
Thanks Gordon Wrigley for the report.

Regression in 8a6df55f2d.
Backport of eaf9764d3b from master
2020-09-15 11:41:42 +02:00