Commit Graph

3665 Commits

Author SHA1 Message Date
Adam Johnson 9ae40d8137 [3.1.x] Fixes #31877 -- Used lazy() for TemplateView kwarg deprecation warning.
SimpleLazyObjects cause a crash when filtering.

Thanks Tim L. White for the report.
Regression in 4ed534758c.

Backport of 20799cc0a6 from master
2020-08-13 13:13:25 +02:00
Daniel Hillier f139372491 [3.1.x] Fixed #31866 -- Fixed locking proxy models in QuerySet.select_for_update(of=()).
Backport of 60626162f7 from master
2020-08-11 12:30:31 +02:00
Carlton Gibson 02b474f2a4 [3.1.x] Fixed #31865 -- Adjusted admin nav sidebar template to reduce debug logging.
Thanks to Mariusz Felisiak for review.

Backport of 0aeb802cf0 from master
2020-08-11 11:43:22 +02:00
Mariusz Felisiak daf4f70eae [3.1.x] Added stub release notes for 2.2.16 and 3.0.10.
Backport of 8a5683b6b2 from master
2020-08-11 11:12:51 +02:00
Uri cdfdbb3411 [3.1.x] Refs #31864 -- Doc'd that DEFAULT_HASHING_ALGORITHM requires 3.1.1+ in release notes.
Backport of b2b0711b55 from master
2020-08-08 17:33:43 +02:00
Mariusz Felisiak c21bbe0883 [3.1.x] Fixed #31864 -- Fixed encoding session data during transition to Django 3.1.
Thanks אורי for the report.
Backport of 99abfe8f4d from master
2020-08-07 21:43:46 +02:00
Mariusz Felisiak 1c3d3294c1 [3.1.x] Fixed #31854 -- Fixed wrapping of long model names in admin's sidebar.
Backport of e70dc506d7 from master
2020-08-05 10:55:11 +02:00
007gzs ff8e6e83a9 [3.1.x] Fixed #31853 -- Fixed wrapping of translated action labels in admin sidebar.
Backport of b0af56f639 from master
2020-08-05 10:27:17 +02:00
Mariusz Felisiak 42e31d4922 [3.1.x] Added stub release notes for 3.1.1.
Backport of 6c19230297 from master
2020-08-04 10:42:58 +02:00
Mariusz Felisiak 34b6622ff9 [3.1.x] Finalized release notes for Django 3.1.
Backport of df37c2ec76 from master
2020-08-04 09:50:21 +02:00
Mariusz Felisiak 9857352655 [3.1.x] Fixed #31842 -- Added DEFAULT_HASHING_ALGORITHM transitional setting.
It's a transitional setting helpful in migrating multiple instance of
the same project to Django 3.1+.

Thanks Markus Holtermann for the report and review, Florian
Apolloner for the implementation idea and review, and Carlton Gibson
for the review.

Backport of d907371ef9 from master.
2020-08-04 09:39:29 +02:00
Mariusz Felisiak bdad2adb26 [3.1.x] Added release date for 2.2.15 and 3.0.9.
Backport of b68b8cb89a from master
2020-08-03 08:56:15 +02:00
Mariusz Felisiak b84b1921da [3.1.x] Refs #27468 -- Added tests and release notes for signing.dumps()/loads() changes.
Follow up to 71c4fb7beb.

Backport of 1d6fdca557 from master
2020-07-31 22:07:34 +02:00
Mariusz Felisiak 247bcef6b4 [3.1.x] Fixed #31836 -- Dropped support for JSONField __contains and __contained_by lookups on SQLite.
The current implementation works only for basic examples without
supporting nested structures and doesn't follow "the general principle
that the contained object must match the containing object as to
structure and data contents, possibly after discarding some
non-matching array elements or object key/value pairs from the
containing object".

Backport of ba691933ce from master.
2020-07-28 13:08:19 +02:00
Tim Graham d004bcee0c [3.1.x] Reverted "Fixed #30300 -- Allowed migrations to be loaded from directories without __init__.py file."
This reverts commit 3cd3bebe89.
Backport of ff55adbd0d from master
2020-07-22 07:04:52 +02:00
Florian Apolloner bfe404deb9 [3.1.x] Fixed #31784 -- Fixed crash when sending emails on Python 3.6.11+, 3.7.8+, and 3.8.4+.
Fixed sending emails crash on email addresses with display names longer
then 75 chars on Python 3.6.11+, 3.7.8+, and 3.8.4+.

Wrapped display names were passed to email.headerregistry.Address()
what caused raising an exception because address parts cannot contain
CR or LF.

See https://bugs.python.org/issue39073

Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of 96a3ea39ef from master
2020-07-20 07:15:04 +02:00
Mariusz Felisiak 474f65406f [3.1.x] Pinned asgiref to 3.2 series with minimum version to 3.2.10. 2020-07-17 11:08:39 +02:00
Mariusz Felisiak 54dce8148a [3.1.x] Refs #31790 -- Removed incorrect item from 2.2.15 and 3.0.9 release notes.
Django 2.2 and 3.0 don't support settings samesite='None' in
HttpResponse.set_cookie() so fix is not necessary and will not be
backported.
Backport of 9bc8b1ad2d from master
2020-07-16 09:27:39 +02:00
Mariusz Felisiak 3ca8cc0df1 [3.1.x] Fixed #31790 -- Fixed setting SameSite and Secure cookies flags in HttpResponse.delete_cookie().
Cookies with the "SameSite" flag set to None and without the "secure"
flag will be soon rejected by latest browser versions.

This affects sessions and messages cookies.
Backport of 240cbb63bf from master
2020-07-16 08:17:45 +02:00
Kelechi Precious Nwachukwu 6b273a2165 [3.1.x] Added Igbo language.
Backport of 2cd3e7eeaf from master
2020-07-14 21:05:55 +02:00
Resulkary 2160481066 [3.1.x] Added Turkmen language.
Backport of af2b3fee08 from master
2020-07-08 09:03:22 +02:00
Tom Forbes 7598ba01aa [3.1.x] Refs #12990 -- Added example to JSONField release notes.
Backport of 5d4b9c1cab from master
2020-07-03 12:58:33 +02:00
David Smith 8904895a80 [3.1.x] Fixed #30945 -- Doc'd plural equations changes in 2.2. release notes.
Backport of 392036be29 from master
2020-07-03 09:38:52 +02:00
Mariusz Felisiak 4e3b0f56ba [3.1.x] Added stub release notes for 3.0.9.
Backport of c2a835703f from master
2020-07-01 07:12:40 +02:00
Mariusz Felisiak df66b2fba0 [3.1.x] Added release date for 2.2.14 and 3.0.8.
Backport of 0f3aecf581 from master
2020-07-01 06:18:30 +02:00
Mariusz Felisiak 3b5e307bbc [3.1.x] Fixed #31751 -- Fixed database introspection with cx_Oracle 8.
Backport of 615e32162f from master
2020-06-30 09:54:42 +02:00
Simon Charette b8cb14e8a0 [3.1.x] Fixed #31735 -- Fixed migrations crash on namespaced inline FK addition on PostgreSQL.
The namespace of the constraint must be included when making the
constraint immediate.

Regression in 22ce5d0031.

Thanks Rodrigo Estevao for the report.

Backport of 2e8941b6f9 from master
2020-06-24 08:59:43 +02:00
David Smith 9b95c3bc09 [3.1.x] Refs #31670 -- Removed whitelist/blacklist terminology in docs and comments.
Backport of 10df5b7177 from master
2020-06-17 13:16:17 +02:00
Hasan Ramezani ecd794bc68 [3.1.x] Fixed #31696 -- Updated OWASP links in docs.
Backport of a16080810b from master
2020-06-15 09:44:37 +02:00
Claude Paroz 6f526cb203 [3.1.x] Added support for the Tajik language.
Thanks Sirius Sufiew for contributing that support.

Backport of db8268bce6 from master
2020-06-12 22:32:46 +02:00
Mariusz Felisiak 714d7cb415 [3.1.x] Refs #31682 -- Doc'd minimal sqlparse version in Django 2.2.
Support for sqlparse < 0.2.2 was broken in
40b0a58f5f because is_whitespace property
was added in sqlparse 0.2.2.
Backport of 4339f2aff2 from master
2020-06-10 06:54:24 +02:00
Nicolas Baccelli 83749dca7a [3.1.x] Fixed #31664 -- Reallowed using non-expressions having filterable attribute as rhs in queryset filters.
Regression in 4edad1ddf6.

Backport of b38d44229f from master
2020-06-08 09:18:32 +02:00
Mariusz Felisiak df9b9de6b0 [3.1.x] Fixed #31660 -- Fixed queryset crash when grouping by m2o relation.
Regression in 3a941230c8.

Thanks Tomasz Szymański for the report.
Backport of 78ad4b4b02 from master
2020-06-08 07:23:09 +02:00
Mariusz Felisiak 031a082d41 [3.1.x] Fixed #31654 -- Fixed cache key validation messages.
Backport of 926148ef01 from master
2020-06-05 07:22:24 +02:00
Claude Paroz acaa201527 [3.1.x] Fixed #30134 -- Ensured unlocalized numbers are string representation in templates.
Backport of 9e57b1efb5 from master
2020-06-04 11:00:40 +02:00
Carlton Gibson 616c49d08e [3.1.x] Added CVE-2020-13254 and CVE-2020-13596 to security archive.
Backport of 54975780ee from master
2020-06-03 12:05:46 +02:00
Carlton Gibson d193aa8da6 [3.1.x] Added stub release notes for 3.0.8.
Backport of 7ec2658e1e from master
2020-06-03 10:55:07 +02:00
Dan Palmer 580bd64c04 [3.1.x] Fixed CVE-2020-13254 -- Enforced cache key validation in memcached backends. 2020-06-03 09:31:28 +02:00
Jon Dufresne 49d7cc19e3 [3.1.x] Fixed CVE-2020-13596 -- Fixed potential XSS in admin ForeignKeyRawIdWidget. 2020-06-03 09:30:41 +02:00
Carlton Gibson 0186b43073 [3.1.x] Added release date for 2.2.13 and 3.0.7.
Backport of 81dc710571 from master
2020-06-03 09:14:30 +02:00
Carlton Gibson f9a1da1c06 [3.1.x] Refs #31485 -- Added release notes for backport of jQuery upgrade to 3.5.1.
Backport of 0daddf093f from master
2020-06-02 14:34:56 +02:00
Carlton Gibson 98fada7244 [3.1.x] Fixed #31570 -- Corrected translation loading for apps providing territorial language variants with different plural equations.
Regression in e3e48b0012.

Thanks to Shai Berger for report, reproduce and suggested fix.

Backport of dd1ca50b09 from master
2020-06-01 09:27:02 +02:00
Carlton Gibson 36d5646aff [3.1.x] Updated expected release dates for 3.0.7 and 2.2.13.
Backport of 9d55ae00d3 from master
2020-05-27 10:20:37 +02:00
Hasan Ramezani a6c773aa86 [3.1.x] Fixed #31608 -- Doc'd that form ISO 8601 datetime parsing always retains tzinfo.
Backport of 643207efae from master
2020-05-21 20:49:30 +02:00
Claude Paroz ff9cdb70cf [3.1.x] Added Kyrgyz language.
Thanks Soyuzbek orozbek uulu for contributing that support.
Backport of 3460ea49e8 from master
2020-05-20 12:30:18 +02:00
Mariusz Felisiak d5231719e0 [3.1.x] Refs #31607 -- Added release notes for a125da6a7c.
Backport of 8328811f04 from master
2020-05-20 09:19:08 +02:00
Mariusz Felisiak b46b0f80e8 [3.1.x] Fixed #31584 -- Fixed crash when chaining values()/values_list() after Exists() annotation and aggregation on Oracle.
Oracle requires the EXISTS expression to be wrapped in a CASE WHEN in
the GROUP BY clause.

Regression in efa1908f66.
Backport of 3a941230c8 from master
2020-05-14 15:10:28 +02:00
Jon Dufresne c9a9d042e5 [3.1.x] Refs #31034 -- Documented admin requires django.template.context_processors.request.
Required since d24ba1be7a.

Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>

Backport of e341bed606 from master
2020-05-14 11:01:17 +02:00
Simon Charette 3913acdb29 [3.1.x] Fixed #31568 -- Fixed alias reference when aggregating over multiple subqueries.
691def10a0 made all Subquery() instances
equal to each other which broke aggregation subquery pushdown which
relied on object equality to determine which alias it should select.

Subquery.__eq__() will be fixed in an another commit but
Query.rewrite_cols() should haved used object identity from the start.

Refs #30727, #30188.

Thanks Makina Corpus for the report.

Backport of adfbf653dc from master
2020-05-14 10:26:05 +02:00
Simon Charette 8cb87a3f7c [3.1.x] Fixed #31566 -- Fixed aliases crash when chaining values()/values_list() after annotate() with aggregations and subqueries.
Subquery annotation references must be resolved if they are excluded
from the GROUP BY clause by a following .values() call.

Regression in fb3f034f1c.

Thanks Makina Corpus for the report.

Backport of 42c08ee465 from master
2020-05-14 08:39:21 +02:00