86e13843c2
Refs #25466 -- Removed unused DeprecationInstanceCheck.
...
Unused since ff419de263
2024-07-11 09:40:07 +02:00
b2fec1f08d
Optimized Case.as_sql() default compilation.
...
Moving compiler.compile(self.default) to the else clause avoids
the call when it's unneeded in the FullResultSet case.
2024-07-11 08:19:04 +02:00
7264d7f750
Fixed syntax of CSS file used in tests.
2024-07-11 08:03:21 +02:00
b9098538a9
Fixed #35033 , Refs #28912 -- Fixed repeated headers in EmailMessage.
...
Fixed a regression which would cause multiple To, Cc, and
Reply-To headers in the result of EmailMessage.message() if
values were supplied for both to/cc/reply_to and the
corresponding extra_headers fields.
Updated related tests to check the generated message() has
exactly one of each expected header using get_all().
Regression in b03d500295
2024-07-11 08:00:46 +02:00
c6d1f98d26
Improved test coverage of urlize.
2024-07-10 09:32:02 +02:00
d12184fedc
Fixed #35424 -- Checked order_with_respect_to is available when migrating _order fields.
...
Migrations would crash following the removal of an order_with_respect_to
field from a model and the addition of an _order field.
2024-07-10 08:40:50 +02:00
e095c7612d
Added CVE-2024-38875, CVE-2024-39329, CVE-2024-39330, and CVE-2024-39614 to security archive.
2024-07-09 11:58:27 -03:00
9c356144d7
Added stub release notes for 5.0.8.
2024-07-09 11:41:28 -03:00
1062bf7302
Made cosmetic edits to 5.0.7 release notes.
2024-07-09 09:36:54 -03:00
9e9792228a
Fixed CVE-2024-39614 -- Mitigated potential DoS in get_supported_language_variant().
...
Language codes are now parsed with a maximum length limit of 500 chars.
Thanks to MProgrammer for the report.
2024-07-09 09:21:19 -03:00
fe4a0bbe20
Fixed CVE-2024-39330 -- Added extra file name validation in Storage's save method.
...
Thanks to Josh Schneier for the report, and to Carlton Gibson and Sarah
Boyce for the reviews.
2024-07-09 09:21:19 -03:00
5d86458579
Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords.
...
Refs #20760 .
Thanks Michael Manfre for the fix and to Adam Johnson for the review.
2024-07-09 09:21:19 -03:00
d666457453
Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.
...
Thank you to Elias Myllymäki for the report.
Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
2024-07-09 09:21:19 -03:00
af84bcc8d1
Fixed #35580 -- Allowed related fields referencing auto-created through models.
2024-07-09 13:50:12 +02:00
759abc4daf
Fixed #35413 -- Made unsupported lookup error message more specific.
2024-07-09 09:15:38 +02:00
2c931fda5b
Fixed 35506 -- Clarified initial references to URLconf in tutorial 1.
2024-07-08 22:02:13 -03:00
f302343380
Removed outdated note about limitations in Clickjacking protection.
...
There is no need to list old browser versions or point users to
workarounds.
2024-07-04 18:08:19 -03:00
55a2e3136b
Replaced usage of "patch" with more precise terms in contributing docs.
2024-07-04 17:52:19 -03:00
82c71f0168
Relocated database setup details to install docs to simplify tutorial 2.
...
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2024-07-04 15:30:52 -03:00
1005c2abd1
Fixed #35560 -- Made Model.full_clean() ignore GeneratedFields for constraints.
...
Accessing generated field values on unsaved models caused a crash when
validating CheckConstraints and UniqueConstraints with expressions.
2024-07-04 11:45:15 +02:00
53e674d574
Fixed #35520 -- Avoided opening transaction for read-only ModelAdmin requests.
2024-07-04 11:38:58 +02:00
31837dbcb3
Fixed #35569 -- Improved wording of invalid ForeignKey error message.
2024-07-04 11:35:03 +02:00
704192e478
Removed unneeded hyphens in "counterintuitive".
...
Follow-up to 65ad4ade74https://www.merriam-webster.com/dictionary/counterintuitive
2024-07-04 08:30:19 +02:00
89557d4c66
Added stub release notes and release date for 5.0.7 and 4.2.14.
2024-07-03 14:09:34 -03:00
0e65abd2d9
Refs #28900 -- Made Query.has_select_fields a computed property.
...
This should ensure it never drifts from Query.selected while maintaining
backward compatibility.
2024-07-03 16:36:25 +02:00
6d220963fa
Fixed #28900 -- Propagated all selected fields to combinator queries.
...
Previously, only the selected column aliases would be propagated and
annotations were ignored.
2024-07-03 16:36:25 +02:00
65ad4ade74
Refs #28900 -- Made SELECT respect the order specified by values(*selected).
...
Previously the order was always extra_fields + model_fields + annotations with
respective local ordering inferred from the insertion order of *selected.
This commits introduces a new `Query.selected` propery that keeps tracks of the
global select order as specified by on values assignment. This is crucial
feature to allow the combination of queries mixing annotations and table
references.
It also allows the removal of the re-ordering shenanigans perform by
ValuesListIterable in order to re-map the tuples returned from the database
backend to the order specified by values_list() as they'll be in the right
order at query compilation time.
Refs #28553 as the initially reported issue that was only partially fixed
for annotations by d6b6e5d0fd
2024-07-03 16:36:25 +02:00
2e47dde438
Fixed #35511 -- Documented when the py binary is unavailable on Windows.
2024-07-03 16:28:17 +02:00
aa74c4083e
Fixed #23790 -- Warned about renaming AppConfig.label in docs/ref/applications.txt.
2024-07-01 21:52:04 -03:00
289f48c71b
Fixed typo in source file linking Sphinx extension.
2024-07-01 11:32:48 -03:00
a5215f9a3e
Refs #35561 -- Renamed Model.save()/asave() helper to a more specific name.
2024-06-28 10:21:21 -03:00
8cfcf9a30e
Reverted "Fixed #35564 -- Improved readability of subclass identification."
...
This reverts commit f0d05a747f
2024-06-28 14:57:41 +02:00
8719a6181e
Refs #22712 -- Corrected deprecation of "all" argument in django.contrib.staticfiles.finders.find().
...
Features deprecated in Django 5.2 should be removed in Django 6.1.
2024-06-28 08:39:55 -03:00
0fdcf1029c
Fixed #22712 -- Avoided name shadowing of "all" in django.contrib.staticfiles.finders.
...
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2024-06-27 23:37:12 -03:00
dfac15d570
Fixed #35517 , Refs #35515 -- Improved test coverage of shell command.
2024-06-27 16:42:55 +02:00
f0d05a747f
Fixed #35564 -- Improved readability of subclass identification.
2024-06-27 13:08:14 +02:00
e56a32b89b
Fixed 35561 -- Made *args and **kwargs parsing more strict in Model.save()/asave().
2024-06-26 12:13:17 -03:00
88966bc2fe
Added references to the Django Discord server inside the FAQ docs.
2024-06-26 12:37:17 +02:00
72b7b59680
Optimized admin docs images.
2024-06-25 17:45:20 -03:00
a6dde9fbd5
Refs #35380 -- Updated screenshots in intro docs.
2024-06-25 17:45:20 -03:00
e510bb1ab1
Fixed #35558 -- Increased inline H3 headers color prominence in admin change page.
2024-06-25 14:03:21 -03:00
28522c3c8d
Fixed #35554 , Refs #35060 -- Corrected deprecated *args parsing in Model.save()/asave().
...
The transitional logic added to deprecate the usage of *args for
Model.save()/asave() introduced two issues that this branch fixes:
* Passing extra positional arguments no longer raised TypeError.
* Passing a positional but empty update_fields would save all fields.
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2024-06-25 13:12:10 -03:00
bcc327aa32
Refs #35380 -- Updated screenshots in admin docs.
...
When listing users, ensure that user first and last name are diverse.
2024-06-25 10:58:36 -03:00
2a7497b036
Used Query.add_annotation where appropriate.
...
This avoids manual .annotations and .append_annotation_mask manipulations.
2024-06-25 14:02:20 +02:00
d9bd58c3b8
Fixed #35540 -- Fixed the padding on admin login page.
2024-06-25 11:35:07 +02:00
136a5f9409
Fixed #34886 -- Modified sample use of lazy in delayed translations.
...
Modified example to use python standard library function
to lower the case of the string.
2024-06-25 08:59:38 +02:00
4686541691
Migrated setuptools configuration to pyproject.toml.
...
This branch migrates setuptools configuration from setup.py/setup.cfg to
pyproject.toml. In order to ensure that the generated binary files have
consistent casing (both the tarball and the wheel), setuptools version
is limited to ">=61.0.0,<69.3.0".
Configuration for flake8 was moved to a dedicated .flake8 file since
it cannot be configured via pyproject.toml.
Also, __pycache__ exclusion was removed from MANIFEST and the
extras/Makefile was replaced with a simpler build command.
Co-authored-by: Nick Pope <nick@nickpope.me.uk>
2024-06-24 15:34:43 -03:00
3ac0e43207
Fixed #35306 -- Documented fallback localization formats in templates when localization is disabled.
2024-06-24 18:06:44 +02:00
f1705c8780
Fixed #35545 , Refs #32833 -- Fixed ContentTypeManager.get_for_models() crash in CreateModel migrations.
...
Thank you to Csirmaz Bendegúz for the report and Simon Charettes for the review.
2024-06-24 10:20:11 +02:00
2a082d827d
Fixed #35547 -- Added reset_queries to django.db.__all__.
2024-06-24 10:11:07 +02:00
Adam Johnson
Tim Graham
Tom Carrick
Mike Edmunds
Sarah Boyce
Daniel Patrick
Natalia
Michael Manfre
jason_bruce
wookkl
lucas-r-oliveira
Mariusz Felisiak
Andreu Vallbona
Kudz
Mark Gensler
Jake Howard
Jacob Walls
Carlton Gibson
Simon Charette
alexgmin
Andrew Miller
Michael
Salvo Polizzi
Jaap Roes
raffaella
arjunomray
lufafajoshua
Claude Paroz
AjmalPonneth