Commit Graph

3049 Commits

Author SHA1 Message Date
Jon Dufresne ec0803b1be [2.1.x] Capitalized "Python" in docs and comments.
Backport of e90af8bad4 from master.
2018-10-09 20:50:31 -04:00
Carlton Gibson 4a7ea6ba58 [2.1.x] Adjusted text for CVE-2018-16984 in security release archive.
Backport of 92ccc39170 from master
2018-10-01 15:05:28 +02:00
Carlton Gibson 8fb3c2fe2a [2.1.x] Added CVE-2018-16984 to the security release archive.
Backport of 0b3b7c4b0a from master
2018-10-01 12:01:22 +02:00
Carlton Gibson d53e91d43d [2.1.x] Added stub release notes for 2.1.3 release.
Backport of dc28c0faf3 from master
2018-10-01 12:01:12 +02:00
Carlton Gibson 5da80967bc [2.1.x] Added stub release notes for 2.0.10 release.
Backport of 2e86710dac from master
2018-10-01 12:01:01 +02:00
Carlton Gibson ceac3aac59 [2.1.x] Added stub release notes for 1.11.17 release.
Backport of 7040e638b9 from master
2018-10-01 12:00:48 +02:00
Carlton Gibson b493e8f4f9 [2.1.x] Added release date for 2.1.2 release.
Backport of fb7fd884a1 from master
2018-10-01 10:16:48 +02:00
Tim Graham 176d20b92a [2.1.x] Fixed #29809 -- Fixed a crash when a "view only" user POSTs to the admin user change form.
Backport of a7284cc0c3 from master
2018-10-01 10:16:15 +02:00
Carlton Gibson c4bd5b597e Fixed CVE-2018-16984 -- Fixed password hash disclosure to admin "view only" users.
Thanks Claude Paroz & Tim Graham for collaborating on the patch.

# Conflicts:
#	tests/auth_tests/test_views.py
2018-10-01 10:15:50 +02:00
Carlton Gibson f86100ab18 [2.1.x] Added release date for 2.0.9 release.
Backport of a4932be483 from master
2018-10-01 09:56:20 +02:00
Carlton Gibson 991f75fb0a [2.1.x] Added release date for 1.11.16.
Backport of d37ed40048 from master
2018-10-01 09:35:26 +02:00
Claude Paroz d5ed08263b [2.1.x] Updated translations from Transifex 2018-09-29 16:03:27 +02:00
Mariusz Felisiak 5aeced6dcd
[2.1.x] Fixed #29630 -- Fixed crash of sliced queries with multiple columns with the same name on Oracle 12.1.
Regression in 0899d583bd.

Thanks Tim Graham for the review and Jani Tiainen for help.
Backport of 024abe5b82 from master
2018-09-26 20:24:20 +02:00
Oleg cdb8ee741d [2.1.x] Fixed #29778 -- Fixed quoting of unique index names.
Regression in 3b429c9673.
Backport of d1d5c97bc2 from master.
2018-09-25 16:10:47 -04:00
Tim Graham 322b70f605 [2.1.x] Fixed typo in docs/releases/2.1.txt.
Backport of 0192e9a976 from master
2018-09-18 15:47:07 -04:00
Mariusz Felisiak 430966c2fc
[2.1.x] Fixed #29759 -- Fixed crash on Oracle when fetching a returned insert id with cx_Oracle 7.
Backport of da92ec7962 from master
2018-09-16 12:49:24 +02:00
Simon Charette 4c5a8c6f50 [2.1.x] Fixed #29755 -- Made migrations detect changes to Meta.default_related_name.
Backport of a4495f4b98 from master
2018-09-14 10:20:27 -04:00
Tim Graham 5bbcf83fce [2.1.x] Fixed #29749 -- Made the migrations loader ignore files starting with a tilde or underscore.
Regression in 29150d5da8.
Backport of 32fbccab40 from master
2018-09-11 12:51:24 -04:00
Curtis Maloney 1853e2dbf2 [2.1.x] Refs #20910 -- Replaced snippet directive with code-block.
Backport of c49ea6f591 from master
2018-09-10 14:38:08 -04:00
Alexander Holmbäck bd5ce0599b [2.1.x] Fixed #29727 -- Made nonexistent joins in F() raise FieldError.
Regression in 2162f0983d.

Backport of f315d0423a from master
2018-09-08 09:50:02 -04:00
Carlton Gibson d51ca1232e [2.1.x] Added stub release notes for 2.1.2.
Backport of 728ee98cd3 from master
2018-08-31 11:02:10 +02:00
Carlton Gibson 3adf649d74 [2.1.x] Added release date for 2.1.1.
Backport of fff25d6d0c from master
2018-08-31 10:13:46 +02:00
Tim Graham 152b1d783b [2.1.x] Fixed #29723 -- Fixed crash if InlineModelAdmin.has_add_permission() doesn't accept the obj argument.
* Refs #27991 -- Added testing for ModelAdmin.get_inline_instances() if the inline's has_add_permission() doesn't accept 'obj'.

* Fixed #29723 -- Fixed crash if InlineModelAdmin.has_add_permission() doesn't accept the obj argument.

Backport of fd8a7a5313 from master
2018-08-30 11:36:04 +02:00
Mariusz Felisiak e7acd99113 [2.1.x] Fixed #29694 -- Fixed column mismatch crash with QuerySet.values() or values_list() after combining querysets with extra() with union(), difference(), or intersection().
Regression in 0b66c3b442.
Backport of 39461a83c3 from master
2018-08-29 10:03:36 +02:00
Tim Graham c4559d0b39 [2.1.x] Fixed #29718 -- Doc'd admin template collision backwards incompatibility in Django 2.1.
Backport of 166dec8406 from master
2018-08-28 14:40:39 -04:00
Tim Graham b7ac1b316b [2.1.x] Fixed typo in docs/releases/2.0.5.txt.
Backport of cdc6da395a from master
2018-08-21 09:48:39 -04:00
Tim Graham 53b9a6654b [2.1.x] Fixed #29682 -- Fixed admin change form crash if a view-only model's form has an extra field.
Backport of d311124be5 from master
2018-08-20 11:15:16 -04:00
Jon Dufresne 9c93bf0903 [2.1.x] Fixed #29663 -- Made admin change view redirect to changelist with view permission.
Backport of 09ee3b6fe3 from master
2018-08-17 11:21:17 -04:00
Marnanel Thurman ef306338eb [2.1.x] Fixed #29662 -- Allowed test client to accept structured suffix JSON content types.
Backport of 7cc52250f0 from master
2018-08-15 10:28:08 -04:00
Dragoon Aethis c903e905b3 [2.1.x] Refs #29449 -- Removed release note for "Allowed using contrib.auth forms without installing contrib.auth."
The code was reverted in f3fa86a89b.
Backport of d3449faaa9 from master
2018-08-11 22:32:51 -04:00
Ramiro Morales f72a7d8f44 [2.1.x] Fixed #29653 -- Fixed missing related_query_name reverse accessor if GenericRelation is declared on an abstract base model.
Regression in 4ab027b944.

Thanks Lauri Kainulainen for the report.

Backport of b5c7cb4d33 from master
2018-08-10 12:43:27 -04:00
Clément Mangin d7615674d9 [2.1.x] Fixed #29637 -- Fixed admin change form crash if the user doesn’t have the add permission to a TabularInline.
Regression in 825f0beda8.

Backport of 64e1a271f5 from master
2018-08-10 11:32:52 -04:00
Tim Graham 42f194b858 [2.1.x] Refs #29652 -- Fixed typo in docs/releases/2.1.txt.
Backport of d0928d6454 from master
2018-08-08 18:07:40 -04:00
Tim Graham 548a2d3c1f [2.1.x] Fixed #29652 -- Doc'd removal of py-bcrypt compatibility.
Backport of 2fa36719a8 from master
2018-08-08 18:02:02 -04:00
Tim Graham e3be4e94d1 [2.1.x] Fixed #29623 -- Fixed translation failure of DurationField's "overflow" error message.
Backport of 730173d1c5 from master
2018-08-08 06:38:27 -04:00
Mariusz Felisiak 2bf766cedc
[2.1.x] Fixed #29643 -- Fixed crash when combining Q objects with __in lookups and lists.
Regression in fc6528b25a.
Backport of 9fee229874 from master
2018-08-08 08:52:55 +02:00
Tim Graham 37c0a33655 [2.1.x] Fixed #28540 -- Doc'd a change to file upload permissions in Django 1.11.
Behavior changed in f734e2d4b2
(refs #27334).

Backport of 89d4d41240 from master
2018-08-04 11:06:11 -04:00
Tim Graham 1593a8386a [2.1.x] Refs #28584 -- Documented removal of support for SQLite < 3.7.15.
Backport of 1160a97596 from master
2018-08-03 14:58:38 -04:00
Mariusz Felisiak c706091225
[2.1.x] Fixed #29613 -- Fixed --keepdb on PostgreSQL if the database exists and the user can't create databases.
Regression in e776dd2db6.

Thanks Tim Graham for the review.
Backport of 1a9cbf41a1 from master
2018-08-03 10:33:52 +02:00
Tim Graham 0cfca0f2cc [2.1.x] Fixed #29627 -- Fixed QueryDict.urlencode() crash with non-string values.
Regression in 7d96f0c49a.
Backport of d8e2be459f from master
2018-08-02 21:56:43 -04:00
Carlton Gibson 66c0c58cf2 [2.1.x] Fixed #29593 -- Added QUERY_TERMS removal to 2.1 release notes.
Removed in 244cc40155.

Backport of 5180015051 from master
2018-08-02 21:07:44 -04:00
Michael Sanders 221ef69a9b [2.1.x] Fixed #29499 -- Fixed race condition in QuerySet.update_or_create().
A race condition happened when the object didn't already exist and
another process/thread created the object before update_or_create()
did and then attempted to update the object, also before update_or_create()
saved the object. The update by the other process/thread could be lost.

Backport of 271542dad1 from master
2018-08-02 17:17:12 -04:00
Tim Graham 7da1e45dc5 [2.1.x] Added stub release notes for 2.1.1.
Backport of 25dd595742 from master
2018-08-01 11:14:25 -04:00
Tim Graham 3dc02de761 [2.1.x] Added CVE-2018-14574 to the security release archive.
Backport of 0006538e53 from master
2018-08-01 11:07:18 -04:00
Andreas Hug c4e5ff7fdb [2.1.x] Fixed CVE-2018-14574 -- Fixed open redirect possibility in CommonMiddleware. 2018-08-01 09:35:09 -04:00
Tim Graham b323425661 [2.1.x] Added stub release notes for security releases. 2018-08-01 09:35:09 -04:00
Tim Graham 5f62efb5c8 [2.1.x] Removed code terms from docs/spelling_wordlist.
Backport of b4fa94aed8 from master
2018-07-31 12:53:14 -04:00
Dražen Odobašić 4dadf4eb7b [2.1.x] Fixed #29617 -- Fixed Template crash if template_string is lazy.
Regression in 3a148f958d.
Backport of 9f3b9ffd51 from master
2018-07-31 09:57:28 -04:00
Maxime Lorant 223ba7fa57 [2.1.x] Removed duplicate words in docs.
Backport of 31407fa3b3 from master
2018-07-18 11:27:17 -04:00
Michal Čihař c1ac9c5ea3 [2.1.x] Fixed #29544 -- Fixed regex lookup on MariaDB.
Regression in 4249076844.
Backport of 39e287d8bf from master
2018-07-05 12:12:04 -04:00