Commit Graph

30180 Commits

Author SHA1 Message Date
Mariusz Felisiak f2d3e1fc8c [4.0.x] Refs #33476 -- Ignored formatting changes in git blame. 2022-02-09 07:32:16 +01:00
Mariusz Felisiak 3278c31fa5 [4.0.x] Refs #33476 -- Refactored code to strictly match 88 characters line length.
Backport of 7119f40c98 from main.
2022-02-08 19:25:02 +01:00
django-bot 6a682b38e7 [4.0.x] Refs #33476 -- Reformatted code with Black.
Backport of 9c19aff7c7 from main.
2022-02-08 12:15:38 +01:00
Mariusz Felisiak e73ce08888 [4.0.x] Refs #33476 -- Changed quotation marks in DebugViewTests.test_template_exceptions().
This prevents a failure after reformatting the code with Black.

Backport of f68fa8b45d from main
2022-02-08 12:02:37 +01:00
Carlton Gibson 224c64a733 [4.0.x] Refs #33476 -- Added GitHub action to run black linter.
Backport of cf5e61cf6c from main
2022-02-08 12:02:14 +01:00
Carlton Gibson 9a7755fa2d [4.0.x] Refs #33476 -- Adjusted docs and config files for Black.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of ba94488196 from main
2022-02-08 12:01:30 +01:00
John Hollingsworth 8c407ee7f3 [4.0.x] Fixed #32518 -- Doc'd that QuerySet.contains() should not be overused.
Thanks Tim McCurrach for the idea.

Backport of d70b4bea18 from main
2022-02-08 08:33:24 +01:00
Grace Hawkins 3714b44142 [4.0.x] Refs #32243 -- Fixed typo in docs/topics/files.txt.
Backport of 25514b604a from main
2022-02-05 11:19:53 +01:00
Mariusz Felisiak d55a1e5809 [4.0.x] Refs #33476 -- Refactored problematic code before reformatting by Black.
In these cases Black produces unexpected results, e.g.

def make_random_password(
    self,
    length=10,
    allowed_chars='abcdefghjkmnpqrstuvwxyz' 'ABCDEFGHJKLMNPQRSTUVWXYZ' '23456789',
):

or

cursor.execute("""
SELECT ...
""",
    [table name],
)

Backport of c5cd878382 from main.
2022-02-03 11:38:46 +01:00
Joshua Massover 76c80d96f3 [4.0.x] Fixed #32243 -- Added docs examples for manually saving Files.
Backport of c9d6e3595c from main
2022-02-03 09:58:08 +01:00
Mike Lissner 62fe7e08d6 [4.0.x] Improved example of using a custom queryset in Model formsets docs.
Backport of e459b0f5a0 from main
2022-02-03 06:58:51 +01:00
Theofilos Alexiou efe72cf128 [4.0.x] Added Redis to warning about using cached sessions in docs.
Backport of 3ba60951fc from main
2022-02-02 20:46:44 +01:00
David Smith 7043f9ab3f [4.0.x] Fixed typo in release notes.
Backport of 770d3e6a4c from main
2022-02-02 07:18:43 +01:00
Mariusz Felisiak 0c06819caa [4.0.x] Refs #33476 -- Used vertical hanging indentation for format lists with inline comments.
Lists with multiple values and comments per-line are reformatted
by Black to multiple lines with a single comment. For example:

DATE_INPUT_FORMATS =
    "%Y-%m-%d", "%m/%d/%Y", "%m/%d/%y",  # '2006-10-25', '10/25/2006', '10/25/06'
]

is reformatted to the:

DATE_INPUT_FORMATS =
    "%Y-%m-%d",
    "%m/%d/%Y",
    "%m/%d/%y",  # '2006-10-25', '10/25/2006', '10/25/06'
]

This reformats affected entries to multiple lines with corresponding
comments.

Backport of ca88caa103 from main
2022-02-01 15:14:17 +01:00
Mariusz Felisiak 1c74ac8648 [4.0.x] Added stub release notes for 4.0.3.
Backport of ba4a6880d1 from main
2022-02-01 09:12:57 +01:00
Mariusz Felisiak 69dfc6e61a [4.0.x] Added CVE-2022-22818 and CVE-2022-23833 to security archive.
Backport of 9e0df0d6dd from main
2022-02-01 08:53:10 +01:00
Mariusz Felisiak 3cb9025d65 [4.0.x] Post-release version bump. 2022-02-01 08:02:32 +01:00
Mariusz Felisiak b12be7ad6b [4.0.x] Bumped version for 4.0.2 release. 2022-02-01 07:59:05 +01:00
Mariusz Felisiak f9c7d48fdd [4.0.x] Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads.
Thanks Alan Ryan for the report and initial patch.

Backport of fc18f36c4a from main.
2022-02-01 07:44:49 +01:00
Markus Holtermann 0142204606 [4.0.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag.
Thanks Keryn Knight for the report.

Backport of 394517f078 from main.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-02-01 07:43:45 +01:00
Kirill Safronov 6928227dff [4.0.x] Fixed #33480 -- Fixed makemigrations crash when renaming field of renamed model.
Regression in aa4acc164d.

Backport of 97a7274468 from main
2022-02-01 07:33:22 +01:00
Mariusz Felisiak aff79be03a [4.0.x] Fixed #33468 -- Fixed QuerySet.aggregate() after annotate() crash on aggregates with default.
Thanks Adam Johnson for the report.
Backport of 71e7c8e737 from main
2022-01-31 11:34:29 +01:00
Claude Paroz 7a1c6533eb
[4.0.x] Updated translations from Transifex.
Updated Bulgarian, Czech, German, Uzbek, and Vietnamese translations.
2022-01-29 18:59:17 +01:00
Thomas Aglassinger 9a9c5b402b [4.0.x] Fixed #33459 -- Clarified index type in full text search docs.
Backport of 3a9b8b25d4 from main
2022-01-28 06:37:14 +01:00
Mariusz Felisiak 7c2d4d943b [4.0.x] Fixed #33462 -- Fixed migration crash when altering type of primary key with MTI and foreign key.
This prevents duplicated operations when altering type of primary key
with MTI and foreign key. Previously, a foreign key to the base model
was added twice, once directly and once by the inheritance model.

Thanks bcail for the report.

Regression in 325d7710ce.
Backport of e972620ada from main
2022-01-27 18:52:35 +01:00
Kaushik Chintam f4de87038e [4.0.x] Fixed #33048 -- Doc'd that DEBUG static files requests don't use middleware chain.
Backport of 1625a8c8eb from main
2022-01-26 12:02:43 +01:00
Carlton Gibson f82ca84f77 [4.0.x] Fixed #33407 -- Fixed .radiolist admin CSS.
Regression in 5942ab5eb1.

Backport of 85f2a9fb0f from main
2022-01-26 10:04:08 +01:00
Mariusz Felisiak c28a41f4f1 [4.0.x] Added stub release notes and release date for 4.0.2, 3.2.12, and 2.2.27.
Backport of eeca934238 from main
2022-01-25 07:26:37 +01:00
Fabian Büchler b32080219e [4.0.x] Fixed #33449 -- Fixed makemigrations crash on models without Meta.order_with_respect_to but with _order field.
Regression in aa4acc164d.

Backport of eeff1787b0 from main
2022-01-21 08:46:14 +01:00
Tilak fc5c86c47c [4.0.x] Improved wording in running Django’s test suite in contributing tutorial.
Backport of 2c76c27a95 from main
2022-01-20 11:29:47 +01:00
Brad Solomon 519b6d6070 [4.0.x] Fixed #33443 -- Clarified when PasswordResetView sends an email.
Backport of b55ebe3241 from main
2022-01-17 08:59:43 +01:00
Scott Pashley 92e1018178 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
Backport of 367d6920ec from main
2022-01-12 07:45:30 +01:00
Zeilentaucher 89d88414dc [4.0.x] Fixed #33432 -- Fixed typo in docs/howto/outputting-csv.txt.
Backport of 658dc7045a from main
2022-01-12 07:36:55 +01:00
Victor Peralta cf4128e6e9 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
Backport of f1905db6c0 from main
2022-01-11 06:20:30 +01:00
Keryn Knight c8a6bf951b [4.0.x] Fixed #33426 -- Fixed ResolverMatch.__repr_() for class-based views.
Regression in 7c08f26bf0.

Backport of f4b06a3cc1 from main
2022-01-10 18:39:59 +01:00
Mariusz Felisiak dfda5ff722 [4.0.x] Corrected signatures of some functions in docs.
Backport of 178109c173 from main
2022-01-10 13:31:25 +01:00
Mariusz Felisiak 6554f00df6 [4.0.x] Corrected directive for signals in django.contrib.auth docs.
Backport of b0ccf74549 from main
2022-01-10 13:31:19 +01:00
Keryn Knight 2ea0321058 [4.0.x] Fixed #33425 -- Fixed view name for CBVs on technical 404 debug page.
Regression in 0c0b87725b.

Backport of 2a66c102d9 from main
2022-01-08 14:54:10 +01:00
David c959aa99aa [4.0.x] Fixed #33419 -- Restored marking forms.Field.help_text as HTML safe.
Regression in 456466d932.

Thanks Matt Westcott for the report.

Backport of 4c60c3edff from main
2022-01-07 16:12:15 +01:00
Petter Friberg 11475958f6 [4.0.x] Fixed #33410 -- Fixed recursive capturing of callbacks by TestCase.captureOnCommitCallbacks().
Regression in d89f976bdd.

Backport of bc174e6ea0 from main
2022-01-07 16:12:01 +01:00
David da710aa3d8 [4.0.x] Removed unused comment directive in CBV topic docs.
Backport of 973fa56652 from main
2022-01-05 09:19:54 +01:00
David 17bd04e708 [4.0.x] Fixed malformed attribute directives in docs.
Backport of cc8e771c64 from main
2022-01-05 09:19:44 +01:00
Carlton Gibson 24fce7d134 [4.0.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
Backport of 63869ab1f1 from main
2022-01-04 11:30:40 +01:00
Carlton Gibson 6f9a994c47 [4.0.x] Added stub release notes for Django 4.0.2.
Backport of f38c66b555 from main
2022-01-04 11:11:20 +01:00
Carlton Gibson 9bb9326027 [4.0.x] Post-release version bump. 2022-01-04 10:46:42 +01:00
Carlton Gibson 15aff7f22c [4.0.x] Bumped version for 4.0.1 release. 2022-01-04 10:42:03 +01:00
Florian Apolloner e1592e0f26 [4.0.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.
Thanks to Dennis Brinkrolf for the report.
2022-01-04 10:10:14 +01:00
Florian Apolloner 2a8ec7f546 [4.0.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
Thanks to Dennis Brinkrolf for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Florian Apolloner df79ef03ac [4.0.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator.
Thanks Chris Bailey for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Luke Plant 7753169585 [4.0.x] Avoided suggestion of plain text database password in sessions topic.
Backport of ccafad2e42 from main
2022-01-04 06:48:19 +01:00