Mariusz Felisiak
393b8324b3
Added stub release notes for 4.2.4.
2023-07-03 10:33:50 +02:00
Mariusz Felisiak
1d6fbf16f2
Added CVE-2023-36053 to security archive.
2023-07-03 10:19:13 +02:00
Mariusz Felisiak
ad0410ec4f
Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and URLValidator.
...
Thanks Seokchan Yoon for reports.
2023-07-03 08:16:55 +02:00
Mariusz Felisiak
953f29f700
Fixed #34572 -- Added support for GDAL 3.7.
...
Co-authored-by: Michael Howitz <mh@gocept.com>
2023-06-30 06:03:08 +02:00
Akash Kumar Sen
a40b0103bc
Fixed #30382 -- Allowed specifying parent classes in force_insert of Model.save().
2023-06-29 21:52:52 +02:00
Mariusz Felisiak
601ffb0da3
Fixed #34685 -- Dropped support for GEOS 3.6 and 3.7.
2023-06-29 21:45:36 +02:00
Mariusz Felisiak
6a523500af
Fixed #34684 -- Dropped support for GDAL 2.2 and 2.3.
2023-06-29 09:11:30 +02:00
Jon Janzen
5e98959d92
Fixed #34391 -- Added async-compatible interface to auth functions and related methods test clients.
2023-06-27 11:17:17 +02:00
Mariusz Felisiak
2360ba2274
Added stub release notes and release date for 4.2.3, 4.1.10, and 3.2.20.
2023-06-26 14:35:13 +02:00
Mariusz Felisiak
370a021780
Refs #34233 -- Bumped minimum supported version of Selenium to 4.8.0.
...
This bumps minimum supported versions of selenium to the first release
to support Python 3.10.
2023-06-26 14:22:54 +02:00
th3nn3ss
3152f9de47
Refs #31949 -- Made http decorators to work with async functions.
2023-06-26 09:29:04 +02:00
Mariusz Felisiak
650ce96782
Refs #34391 -- Updated asgiref dependency for 5.0 release series.
2023-06-23 21:52:04 +02:00
Jon Janzen
38e391e95f
Refs #31949 -- Made @sensitive_variables/sensitive_post_parameters decorators to work with async functions.
...
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2023-06-23 13:29:40 +02:00
Nick Pope
f8092ee9ad
Improved style of n-tuple wording in docs and comments.
2023-06-23 09:29:35 +02:00
Olivier Le Thanh Duong
1b754d638d
Fixed #34629 -- Added filtering support to GIS aggregates.
2023-06-16 12:20:13 +02:00
Jacob Rief
1fe0b167af
Fixed #34473 -- Fixed step validation for form fields with non-zero minimum value.
2023-06-16 08:38:28 +02:00
Neeraj Kumar
1d9d32389c
Fixed #34638 -- Fixed admin change list selected row highlight on editable boolean fields.
...
Regression in 0aa2f16e63
.
Thanks Andrei Shabanski for the report.
2023-06-11 15:01:06 +02:00
Mariusz Felisiak
caf80cb41f
Fixed #34645 -- Restored alignment for admin date/time timezone warnings.
...
Regression in 96a598356a
.
2023-06-09 21:37:23 +02:00
Anders Kaseorg
b81e974e9e
Fixed #34604 -- Corrected fallback SQL for n-ary logical XOR.
...
An n-ary logical XOR Q(…) ^ Q(…) ^ … ^ Q(…) should evaluate to true
when an odd number of its operands evaluate to true, not when exactly
one operand evaluates to true.
2023-06-08 20:41:18 +02:00
devilsautumn
094b0bea2c
Fixed #34609 -- Deprecated calling format_html() without arguments.
2023-06-06 14:14:57 +02:00
nessita
e26d1a91d7
Added stub release notes for 4.2.3.
2023-06-05 14:55:23 -03:00
Natalia
0faad01938
Added release date for 4.2.2.
2023-06-05 08:21:56 -03:00
Howard Cox
cd413bd78a
Fixed #34621 -- Made admin site header render in <div> tag.
...
This was problematic for screen reader users because they use headings
to navigate. Having two <h1> is confusing, and the one in the header
wasn’t particularly helpful since it’s the same on all pages.
2023-06-05 11:55:06 +02:00
Mariusz Felisiak
f9936deed1
Fixed #34620 -- Fixed serialization crash on m2m fields without natural keys when base querysets use select_related().
...
Regression in 19e0587ee5
.
Thanks Martin Svoboda for the report.
2023-06-04 20:49:07 +02:00
Simon Charette
2cf76f2d5d
Fixed #34612 -- Fixed QuerySet.only() crash on reverse relationships.
...
Regression in b3db6c8dcb
.
Thanks Ian Cubitt for the report.
This also corrected test_inheritance_deferred2() test which was
previously properly defined and marked as an expected failure but was
then wrongly adjusted to mask the lack of support for per-alias
deferral that was fixed by #21204 .
2023-06-01 19:50:47 +01:00
Christopher Cave-Ayland
24d56e21c3
Fixed #34616 -- Corrected label examples in 5.0 release notes.
2023-06-01 11:19:11 +01:00
David Sanders
0c1518ee42
Fixed #34590 -- Reverted "Refs #33308 -- Improved adapting DecimalField values to decimal."
...
This reverts 7990d254b0
.
Thanks Marc Odermatt for the report.
2023-05-24 10:59:55 +02:00
Ben Lomax
23abec9192
Refs #31949 -- Made @no_append_slash decorator to work with async functions.
2023-05-23 10:04:41 +02:00
Simon Charette
e5c844d6f2
Fixed #34551 -- Fixed QuerySet.aggregate() crash when referencing subqueries.
...
Regression in 59bea9efd2
.
Refs #28477 .
Thanks Denis Roldán and Mariusz for the test.
2023-05-23 06:25:58 +02:00
Simon Charette
2ee01747c3
Refs #34551 -- Fixed QuerySet.aggregate() crash on precending aggregation reference.
...
Regression in 1297c0d0d7
.
Refs #31679 .
2023-05-23 06:25:27 +02:00
Sarah Boyce
c3862735cd
Fixed references to django.core.cache in docs.
2023-05-22 14:02:01 +02:00
gtleee
0a324f1b66
Fixed #34588 -- Removed usage of nonexistent stylesheet in the 'Congrats' page.
...
Regression in d46cc15c51
.
2023-05-22 11:05:20 +02:00
Arthur Moreira
061a8a1bd8
Fixed #34577 -- Added escapeseq template filter.
2023-05-22 09:58:03 +02:00
Simon Charette
98f6ada0e2
Fixed #34580 -- Avoided unnecessary computation of selected expressions in SQLCompiler.
...
Performance regression in 278881e376
.
Co-authored-by: David Smith <smithdc@gmail.com>
2023-05-22 05:47:29 +02:00
Ben Lomax
00f5d2d110
Refs #31949 -- Made @xframe_options_(deny/sameorigin/exempt) decorators to work with async functions.
2023-05-20 15:52:00 +02:00
HappyDingning
674c23999c
Fixed #34565 -- Added support for async checking of user passwords.
2023-05-18 09:39:04 +02:00
Mariusz Felisiak
c52f4295f2
Fixed #34568 -- Made makemigrations --update respect --name option.
...
Thanks David Sanders for the report.
2023-05-17 13:14:43 +02:00
Simon Charette
99e5dff737
Fixed #34570 -- Silenced noop deferral of many-to-many and GFK.
...
While deferring many-to-many and GFK has no effect, the previous
implementation of QuerySet.defer() ignore them instead of crashing.
Regression in b3db6c8dcb
.
Thanks Paco Martínez for the report.
2023-05-17 08:06:11 +02:00
Julie Rymer
0ec60661e6
Fixed #34539 -- Restored get_prep_value() call when adapting JSONFields.
...
Regression in 5c23d9f0c3
.
2023-05-16 08:26:41 +02:00
Ian Foote
7414704e88
Fixed #470 -- Added support for database defaults on fields.
...
Special thanks to Hannes Ljungberg for finding multiple implementation
gaps.
Thanks also to Simon Charette, Adam Johnson, and Mariusz Felisiak for
reviews.
2023-05-12 19:11:40 +02:00
Mariusz Felisiak
72a86ceb33
Fixed #34558 -- Fixed QuerySet.bulk_create() crash with Now() on Oracle.
2023-05-11 18:22:55 +02:00
Mariusz Felisiak
1586a09b79
Fixed #34544 -- Avoided DBMS_LOB.SUBSTR() wrapping with IS NULL condition on Oracle.
...
Regression in 09ffc5c121
.
Thanks Michael Smith for the report.
This also reverts commit 1e4da43955
.
2023-05-08 19:34:30 +02:00
Mariusz Felisiak
49830025c9
Added CVE-2023-31047 to security archive.
2023-05-03 15:20:31 +02:00
Mariusz Felisiak
b0d3a5de95
Added stub release notes for 4.2.2.
2023-05-03 15:13:07 +02:00
Mariusz Felisiak
fb4c55d9ec
Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.
...
Thanks Moataz Al-Sharida and nawaik for reports.
Co-authored-by: Shai Berger <shai@platonix.com>
Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-05-03 13:42:00 +02:00
Mariusz Felisiak
8e2460d599
Fixed #34529 , Refs #34525 -- Reduced index operations with Meta.indexes/index_together when optimizing migrations.
...
This makes squashing migrations an available path for changing
Meta.index_together, which is deprecated, to Meta.indexes.
Follow up to f810325721
.
2023-05-03 13:06:19 +02:00
Orhan Hirsch
ea53e7c09f
Fixed #34517 -- Avoided connection post_init signal to ImageField without width/height fields.
2023-05-03 06:35:19 +02:00
Paul Brown
3b62d8c83e
Refs #31369 -- Improved hint message in NullBooleanField's deprecation warning.
2023-05-02 15:42:11 -03:00
Mariusz Felisiak
0e444e84f8
Fixed #34515 -- Made LocaleMiddleware prefer language from paths when i18n patterns are used.
...
Regression in 94e7f471c4
.
This reverts commit 94e7f471c4
(refs #34069 ) and
partly reverts commit 3b4728310a
.
Thanks Anthony Baillard for the report.
Co-Authored-By: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
2023-05-02 06:04:18 +02:00
Mariusz Felisiak
5a6d4d3bfd
Refs #34118 , Refs #34504 -- Added backward incompatibility note about EmailBackend.ssl_context.
...
Follow up to 2848e5d0ce
.
2023-04-28 13:04:08 +02:00