p31829507
/
django
mirror of https://github.com/django/django.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
28,508 Commits 28 Branches 411 Tags 641 MiB
Commit Graph

3687 Commits

Author SHA1 Message Date
Hasan Ramezani ecd794bc68 [3.1.x] Fixed #31696 -- Updated OWASP links in docs. 
Backport of a16080810b from master
 2020-06-15 09:44:37 +02:00
Claude Paroz 6f526cb203 [3.1.x] Added support for the Tajik language. 
Thanks Sirius Sufiew for contributing that support.

Backport of db8268bce6 from master
 2020-06-12 22:32:46 +02:00
Mariusz Felisiak 714d7cb415 [3.1.x] Refs #31682 -- Doc'd minimal sqlparse version in Django 2.2. 
Support for sqlparse < 0.2.2 was broken in
40b0a58f5f because is_whitespace property
was added in sqlparse 0.2.2.
Backport of 4339f2aff2 from master
 2020-06-10 06:54:24 +02:00
Nicolas Baccelli 83749dca7a [3.1.x] Fixed #31664 -- Reallowed using non-expressions having filterable attribute as rhs in queryset filters. 
Regression in 4edad1ddf6.

Backport of b38d44229f from master
 2020-06-08 09:18:32 +02:00
Mariusz Felisiak df9b9de6b0 [3.1.x] Fixed #31660 -- Fixed queryset crash when grouping by m2o relation. 
Regression in 3a941230c8.

Thanks Tomasz Szymański for the report.
Backport of 78ad4b4b02 from master
 2020-06-08 07:23:09 +02:00
Mariusz Felisiak 031a082d41 [3.1.x] Fixed #31654 -- Fixed cache key validation messages. 
Backport of 926148ef01 from master
 2020-06-05 07:22:24 +02:00
Claude Paroz acaa201527 [3.1.x] Fixed #30134 -- Ensured unlocalized numbers are string representation in templates. 
Backport of 9e57b1efb5 from master
 2020-06-04 11:00:40 +02:00
Carlton Gibson 616c49d08e [3.1.x] Added CVE-2020-13254 and CVE-2020-13596 to security archive. 
Backport of 54975780ee from master
 2020-06-03 12:05:46 +02:00
Carlton Gibson d193aa8da6 [3.1.x] Added stub release notes for 3.0.8. 
Backport of 7ec2658e1e from master
 2020-06-03 10:55:07 +02:00
Dan Palmer 580bd64c04 [3.1.x] Fixed CVE-2020-13254 -- Enforced cache key validation in memcached backends. 2020-06-03 09:31:28 +02:00
Jon Dufresne 49d7cc19e3 [3.1.x] Fixed CVE-2020-13596 -- Fixed potential XSS in admin ForeignKeyRawIdWidget. 2020-06-03 09:30:41 +02:00
Carlton Gibson 0186b43073 [3.1.x] Added release date for 2.2.13 and 3.0.7. 
Backport of 81dc710571 from master
 2020-06-03 09:14:30 +02:00
Carlton Gibson f9a1da1c06 [3.1.x] Refs #31485 -- Added release notes for backport of jQuery upgrade to 3.5.1. 
Backport of 0daddf093f from master
 2020-06-02 14:34:56 +02:00
Carlton Gibson 98fada7244 [3.1.x] Fixed #31570 -- Corrected translation loading for apps providing territorial language variants with different plural equations. 
Regression in e3e48b0012.

Thanks to Shai Berger for report, reproduce and suggested fix.

Backport of dd1ca50b09 from master
 2020-06-01 09:27:02 +02:00
Carlton Gibson 36d5646aff [3.1.x] Updated expected release dates for 3.0.7 and 2.2.13. 
Backport of 9d55ae00d3 from master
 2020-05-27 10:20:37 +02:00
Hasan Ramezani a6c773aa86 [3.1.x] Fixed #31608 -- Doc'd that form ISO 8601 datetime parsing always retains tzinfo. 
Backport of 643207efae from master
 2020-05-21 20:49:30 +02:00
Claude Paroz ff9cdb70cf [3.1.x] Added Kyrgyz language. 
Thanks Soyuzbek orozbek uulu for contributing that support.
Backport of 3460ea49e8 from master
 2020-05-20 12:30:18 +02:00
Mariusz Felisiak d5231719e0 [3.1.x] Refs #31607 -- Added release notes for a125da6a7c. 
Backport of 8328811f04 from master
 2020-05-20 09:19:08 +02:00
Mariusz Felisiak b46b0f80e8 [3.1.x] Fixed #31584 -- Fixed crash when chaining values()/values_list() after Exists() annotation and aggregation on Oracle. 
Oracle requires the EXISTS expression to be wrapped in a CASE WHEN in
the GROUP BY clause.

Regression in efa1908f66.
Backport of 3a941230c8 from master
 2020-05-14 15:10:28 +02:00
Jon Dufresne c9a9d042e5 [3.1.x] Refs #31034 -- Documented admin requires django.template.context_processors.request. 
Required since d24ba1be7a.

Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>

Backport of e341bed606 from master
 2020-05-14 11:01:17 +02:00
Simon Charette 3913acdb29 [3.1.x] Fixed #31568 -- Fixed alias reference when aggregating over multiple subqueries. 
691def10a0 made all Subquery() instances
equal to each other which broke aggregation subquery pushdown which
relied on object equality to determine which alias it should select.

Subquery.__eq__() will be fixed in an another commit but
Query.rewrite_cols() should haved used object identity from the start.

Refs #30727, #30188.

Thanks Makina Corpus for the report.

Backport of adfbf653dc from master
 2020-05-14 10:26:05 +02:00
Simon Charette 8cb87a3f7c [3.1.x] Fixed #31566 -- Fixed aliases crash when chaining values()/values_list() after annotate() with aggregations and subqueries. 
Subquery annotation references must be resolved if they are excluded
from the GROUP BY clause by a following .values() call.

Regression in fb3f034f1c.

Thanks Makina Corpus for the report.

Backport of 42c08ee465 from master
 2020-05-14 08:39:21 +02:00
Mariusz Felisiak 6227173542 [3.1.x] Added stub release notes for 2.2.13. 
Backport of 50798d4389 from master
 2020-05-14 06:30:02 +02:00
Nick Pope 4eb5e4ee4f [3.1.x] Used :envvar: role and .. envvar:: directive in various docs. 
Backport of fbdb032de2 from master
 2020-05-13 09:38:59 +02:00
Nick Pope 345fa40cb5 [3.1.x] Used :mimetype: role in various docs. 
Backport of feb91dbda1 from master
 2020-05-13 09:38:49 +02:00
Nick Pope 15d76dc2ab [3.1.x] Used :pep: role in various docs. 
Backport of a9337b4add from master
 2020-05-13 09:38:40 +02:00
Mariusz Felisiak 0b938cb7d2 Cosmetic edits to docs/releases/3.1.txt. 2020-05-12 11:26:37 +02:00
Mariusz Felisiak a9e589030a Removed empty sections from 3.1 release notes. 2020-05-12 11:26:37 +02:00
Claude Paroz 58f1b07e49 Fixed #30678 -- Added support for GDAL 3. 2020-05-12 09:06:06 +02:00
Tom Carrick d24ba1be7a Fixed #31034 -- Added a navigation sidebar to the admin. 
Co-authored-by: elky <elky@users.noreply.github.com>
Co-authored-by: Goetz <goetz.buerkle@gmail.com>
 2020-05-11 18:16:38 +02:00
Jon Dufresne 72a170b4c3 Fixed #25236 -- Deprecated {% ifequal %} and {% ifnotequal %} template tags. 
The {% if %} tag provides all features of these tags.

Since Django 1.2 (May 17, 2010), the docs have hinted that
{% ifequal %} and {% ifnotequal %} will be deprecated in a future
Django version. Time to make it official.
 2020-05-11 09:07:33 +02:00
sage 6789ded0a6 Fixed #12990, Refs #27694 -- Added JSONField model field. 
Thanks to Adam Johnson, Carlton Gibson, Mariusz Felisiak, and Raphael
Michel for mentoring this Google Summer of Code 2019 project and
everyone else who helped with the patch.

Special thanks to Mads Jensen, Nick Pope, and Simon Charette for
extensive reviews.

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
 2020-05-08 07:23:31 +02:00
Mariusz Felisiak f97f71f592 Refs #12990 -- Bumped mysqlclient requirement to >= 1.4.0. 
MySQLdb.constants.FIELD_TYPE.JSON was added in mysqlclient 1.4.0rc2.
 2020-05-08 06:14:42 +02:00
Adam Johnson 1c2c6f1b51
Fixed a/an typos in "SQL" usage. 2020-05-06 06:35:26 +02:00
Mariusz Felisiak aff7a58aef
Updated admin's Select2 to 4.0.13. 2020-05-05 11:30:02 +02:00
Mariusz Felisiak 30083e0780 Fixed #31485 -- Updated admin's jQuery to 3.5.1. 2020-05-05 11:00:05 +02:00
Mariusz Felisiak b73e66e758
Fixed #31538 -- Fixed Meta.ordering validation lookups that are not transforms. 
Regression in 440505cb2c.

Thanks Simon Meers for the report.
 2020-05-05 09:08:29 +02:00
Chris Burchhardt d2b9a9fdbb Refs #28622 -- Corrected PASSWORD_RESET_TIMEOUT/PASSWORD_RESET_TIMEOUT_DAYS docs. 
Removed outdated note about an extra day in PASSWORD_RESET_TIMEOUT
docs and incorrect "minimum" phrase.
 2020-05-05 08:19:25 +02:00
David Smith 2522559d1a Fixed #31534 -- Deprecated django.conf.urls.url(). 2020-05-05 07:34:34 +02:00
Adam Johnson d17b380653 Refs #30573 -- Rephrased "Of Course" and "Obvious(ly)" in documentation and comments. 2020-05-04 12:10:47 +02:00
Tom Forbes c00bc27945 Refs #30372 -- Stopped watching built-in Django translation files by auto-reloader. 2020-05-04 09:13:47 +02:00
Mariusz Felisiak 7668f9bce9 Fixed typo in docs/releases/3.0.6.txt. 2020-05-04 07:42:25 +02:00
Mariusz Felisiak 8e8ff38cb8 Added stub release notes for 3.0.7. 2020-05-04 07:38:35 +02:00
Mariusz Felisiak c5358794e3 Added release date for 3.0.6. 2020-05-04 07:04:23 +02:00
Ian Foote b4068bc656 Fixed #31455 -- Added support for deferrable exclusion constraints on PostgreSQL. 2020-05-01 09:08:36 +02:00
Ian Foote c226c6cb32 Fixed #20581 -- Added support for deferrable unique constraints. 2020-04-30 10:43:50 +02:00
Mariusz Felisiak 54646a423b
Refs #27468 -- Made user sessions use SHA-256 algorithm. 2020-04-29 16:45:00 +02:00
Hasan Ramezani 68fc21b378 Fixed #29249 -- Made JSON and YAML serializers use Unicode by default. 2020-04-28 11:11:39 +02:00
Mariusz Felisiak 2788de95e3 Updated expected date for 3.0.6 release. 2020-04-28 10:12:33 +02:00
Tim Schilling a92cc84b4a Refs #31369 -- Deprecated models.NullBooleanField in favor of BooleanField(null=True). 2020-04-24 10:10:45 +02:00
Mariusz Felisiak fb9b1c245d
Updated admin's XRegExp to 3.2.0. 2020-04-22 08:45:14 +02:00
Jon Dufresne 75866b93cc Fixed #31479 -- Added support to reset sequences on SQLite. 2020-04-21 10:41:47 +02:00
Jon Dufresne 505fec6bad Capitalized Unicode in docs, strings, and comments. 2020-04-20 12:10:33 +02:00
Jon Dufresne 5673d4b102
Fixed #31477 -- Removed "using" argument from DatabaseOperations.execute_sql_flush(). 2020-04-20 07:49:35 +02:00
Jon Dufresne 75410228df Fixed #31473 -- Made sql_flush() use RESTART IDENTITY to reset sequences on PostgreSQL. 
The sql_flush() positional argument sequences is replaced by the boolean
keyword-only argument reset_sequences. This ensures that the old
function signature can't be used by mistake when upgrading Django. When
the new argument is True, the sequences of the truncated tables will
reset. Using a single boolean value, rather than a list, allows making a
binary yes/no choice as to whether to reset all sequences rather than a
working on a completely different set.
 2020-04-17 11:57:24 +02:00
Claude Paroz 71c4fb7beb Refs #27468 -- Changed default Signer algorithm to SHA-256. 2020-04-15 12:49:14 +02:00
Adam Johnson 5b884d45ac Fixed #29501 -- Allowed dbshell to pass options to underlying tool. 2020-04-14 14:02:51 +01:00
Adam Johnson 8e8c3f964e Refs #29501 -- Allowed customizing exit status for management commands. 2020-04-14 13:22:47 +02:00
Sergey Fedoseev b9e2355eb0 Fixed #31196 -- Added support for PostGIS 3. 2020-04-14 13:19:59 +02:00
Mariusz Felisiak cc70a0343e
Fixed term warning on Sphinx 3.0.1+. 
"term" role became case sensitive in Sphinx 3.0.1.
 2020-04-14 09:32:09 +02:00
David Smith a350bfa6f4 Fixed #13009 -- Added BoundField.widget_type property. 2020-04-10 07:11:14 +02:00
miigotu 210657b791 Fixed #28184 -- Allowed using a callable for FileField and ImageField storage. 2020-04-08 11:26:17 +02:00
Sergey Fedoseev 026719cf17 Fixed #31030 -- Registered SQLite functions as deterministic on Python 3.8+. 2020-04-06 11:26:00 +02:00
Simon Charette 98ea4f0f46 Refs #7098 -- Deprecated passing raw column aliases to order_by(). 
Now that order_by() has expression support passing RawSQL() can achieve
the same result.

This was also already supported through QuerySet.extra(order_by) for
years but this API is more or less deprecated at this point.
 2020-04-06 10:01:02 +02:00
Hasan Ramezani 4237050684 Fixed #31420 -- Fixed crash when filtering subquery annotation against a SimpleLazyObject. 
Thanks Simon Charette for the solution and analysis.
 2020-04-06 07:11:29 +02:00
c-bata 89032876f4 Fixed #31275 -- Optimized sql_flush() without resetting sequences on MySQL. 
Co-Authored-By: Simon Charette <charettes@users.noreply.github.com>
 2020-04-02 12:57:53 +02:00
Carlton Gibson b1f88476db Corrected docs spelling of PgBouncer. 2020-04-01 14:55:11 +02:00
Adam Johnson 1cdfe8d912 Prevented (and corrected) single backtick usage in docs. 2020-04-01 14:55:11 +02:00
Carlton Gibson a7e4ff370c Added stub release notes for 3.0.6. 2020-04-01 10:09:43 +02:00
Carlton Gibson b56243b77f Added release dates for 2.1.12 and 3.0.5. 2020-04-01 09:14:56 +02:00
Hasan Ramezani 8aa71f4e87 Fixed #31375 -- Made contrib.auth.hashers.make_password() accept only bytes or strings. 2020-03-31 10:52:56 +02:00
Deep Sukhwani 4b146e0c83 Fixed #30864 -- Doc'd classproperty decorator. 2020-03-31 10:46:48 +02:00
Adam Johnson 93ed71e058 Fixed #31403 -- Added support for returning fields from INSERT statements on MariaDB 10.5+. 2020-03-31 07:25:50 +02:00
Gordon Pendleton d0da2820ca Fixed #31402 -- Added migrate --check option. 
Command exits with non-zero status if unapplied migrations exist.
 2020-03-26 20:12:39 +01:00
Hannes Ljungberg f3da09df0f Fixed #31396 -- Added binary XOR operator to F expressions. 2020-03-25 10:16:30 +01:00
Hasan Ramezani 10866a10fe Fixed #31377 -- Disabled grouping by aliases on QuerySet.values()/values_list() when they collide with field names. 
Regression in fb3f034f1c.

Thanks Holovashchenko Vadym for the report.
 2020-03-25 09:13:46 +01:00
David Smith 27746ab28a Fixed #7664 -- Allowed customizing suffixes of MultiWidget.widgets' names. 2020-03-24 20:05:18 +01:00
Hannes Ljungberg 0b51a4f894 Fixed #28194 -- Added support for normalization and cover density to SearchRank. 2020-03-23 11:00:55 +01:00
Adam Johnson 4ed534758c Fixed #19878 -- Deprecated TemplateView passing URL kwargs into context. 2020-03-23 08:11:14 +01:00
Hasan Ramezani 53b6a466d8 Refs #29724 -- Added is_dst parameter to QuerySet.datetimes(). 
Thanks Simon Charette for the review and Mariusz Felisiak for tests.
 2020-03-20 12:55:33 +01:00
gowthamk63 142ab6846a Fixed #31123 -- Added --include-stale-apps option to the remove_stale_contenttypes management command. 
Co-Authored-By: Javier Buzzi <buzzi.javier@gmail.com>
 2020-03-19 11:48:10 +01:00
Andrew Godwin fc0fa72ff4 Fixed #31224 -- Added support for asynchronous views and middleware. 
This implements support for asynchronous views, asynchronous tests,
asynchronous middleware, and an asynchronous test client.
 2020-03-18 19:59:12 +01:00
Ryan Petrello 5f8495a40a Fixed #31371 -- Increased User.first_name max_length to 150 characters. 2020-03-18 08:22:49 +01:00
Baptiste Mispelon 3baf92cf82 Fixed #31340 -- Allowed query expressions in SearchQuery.value and __search lookup. 2020-03-16 10:27:23 +01:00
jay20162016 924c01ba09 Fixed #31363 -- Added support for negative integers to intword template filter. 2020-03-16 08:44:43 +01:00
David Smith ccf32aca44 Fixed #8760 -- Changed ModelMultipleChoiceField to use invalid_list as a error message key. 2020-03-12 09:36:01 +01:00
Claude Paroz e663f695fb Fixed #31359 -- Deprecated get_random_string() calls without an explicit length. 2020-03-11 13:16:44 +01:00
Claude Paroz e3e48b0012
Fixed #30439 -- Added support for different plural forms for a language. 
Thanks to Michal Čihař for review.
 2020-03-10 15:56:32 +01:00
Carlton Gibson 692870b611 Removed trailing whitespace in 3.1 release notes. 2020-03-10 12:01:32 +01:00
Carlton Gibson a4200e958d Added stub release notes for 2.2.12. 2020-03-10 12:01:01 +01:00
Jon Dufresne eb77e80de0 Fixed #31349 -- Used :nth-child() CSS pseudo-class to style alternative rows in admin. 2020-03-09 12:34:32 +01:00
Jon Dufresne 769cee5252 Fixed #31327 -- Deprecated providing_args argument for Signal. 2020-03-05 09:38:52 +01:00
Mariusz Felisiak 1b3a900a69 Added stub release notes for 3.0.5. 2020-03-04 10:56:07 +01:00
Mariusz Felisiak 43f8ba1c7c Fixed typo in docs/releases/1.11.29.txt. 2020-03-04 10:46:43 +01:00
Mariusz Felisiak f37f9a0bf0 Added CVE-2020-9402 to security archive. 2020-03-04 09:59:07 +01:00
Mariusz Felisiak 6695d29b1c Fixed CVE-2020-9402 -- Properly escaped tolerance parameter in GIS functions and aggregates on Oracle. 
Thanks to Norbert Szetei for the report.
 2020-03-04 09:04:50 +01:00
Hannes Ljungberg 65ab4f9f03 Fixed #31147 -- Added SearchHeadline to django.contrib.postgres. 2020-03-03 15:39:52 +01:00
Mariusz Felisiak 7b8fa1653f Fixed #31150 -- Included subqueries that reference related fields in GROUP BY clauses. 
Thanks Johannes Hoppe for the report.

Regression in fb3f034f1c.

Co-authored-by: Simon Charette <charette.s@gmail.com>
 2020-03-03 11:25:37 +01:00
Claude Paroz d4fff711d4 Fixed #31274 -- Used signing infrastructure in SessionBase.encode()/decode(). 
Thanks Mariusz Felisiak and Florian Apolloner for the reviews.
 2020-03-02 12:16:48 +01:00
Carlton Gibson 8b30360322
Fixed #31032 -- Updated admin browser support FAQ for 2020. 
Following web standards, the modern _evergreen_ browsers are all
supported. This applies equally to mobile platforms. Assuming current
trends continue, this should be a sustainable policy.

Microsoft deprecated all versions of Internet Explorer. IE 11, the last
version, is described as a "compatibility solution" rather than a web
browser. Whilst it will receive security updates for the lifetime of
Windows 10 it's use is actively discouraged.

The IE 11 downloads page makes it clear: "We recommend you use the new
Microsoft Edge".
 2020-02-28 12:39:14 +01:00