Commit Graph

31583 Commits

Author SHA1 Message Date
Sarah Boyce e13954d2cf
Bumped grunt-contrib-qunit versions in npm configurations. 2023-02-14 19:51:21 +01:00
DevilsAutumn ff3a283422 Fixed #34250 -- Fixed renaming model with m2m relation to a model with the same name. 2023-02-14 14:08:06 +01:00
Carlton Gibson ce8189eea0
Fixed #34328 -- Added async-only class-based middleware example. 2023-02-14 14:06:42 +01:00
tschilling c5808470aa Fixed #34280 -- Allowed specifying different field values for create operation in QuerySet.update_or_create(). 2023-02-14 11:50:35 +01:00
Carlton Gibson ecafcaf634 Added CVE-2023-24580 to security archive. 2023-02-14 09:52:30 +01:00
Markus Holtermann 85ac33591c Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.
Thanks to Jakob Ackermann for the report.
2023-02-14 08:18:40 +01:00
Sarah Boyce 1eb94bc8da
Fixed #29994 -- Added warning about performance of FileBasedCache with a large number of files.
Co-authored-by: sheenarbw <699166+sheenarbw@users.noreply.github.com>
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2023-02-13 21:09:19 +01:00
Sarah Boyce 7e297e52c2
Bumped versions in pre-commit and npm configurations. 2023-02-13 20:51:53 +01:00
Sota Tabu 3e9d413231 Fixed #34318 -- Added release note for 4bfe8c0eec. 2023-02-13 11:59:11 +01:00
sarahboyce e678046681 Fixed #34316 -- Fixed layout of admin password change forms and help texts.
Regression in 96a598356a.
2023-02-13 09:41:31 +01:00
Paolo Melchiorre 69352d85fa
Fixed #33213 -- Doc'd testing code coverage in parallel and used it. 2023-02-11 09:43:26 +01:00
Mariusz Felisiak b6ed389eec Ignored 534ac48297 formatting changes in git blame. 2023-02-10 21:08:44 +01:00
Carlton Gibson 534ac48297 Refs #34140 -- Applied rst code-block to non-Python examples.
Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for
reviews.
2023-02-10 19:19:13 +01:00
dennisvang 7bb741d787 Fixed #34325 -- Corrected wording in PercentRank() docs.
This is consistent with the terminology used for the percent_rank()
function in SQLite docs and PostgreSQL docs.
2023-02-10 14:07:48 +01:00
Dhanush a18d20ca97 Fixed #32813 -- Made runserver display port after binding.
Thanks Florian Apolloner for the review.
2023-02-10 08:22:34 +01:00
p0lygun 358792486e Fixed #34324 -- Mentioned Discord server in contributing index. 2023-02-10 05:55:45 +01:00
Syed Sajjad Hussain Shah 3fa8390673
Fixed #34248 -- Added tox.ini to MANIFEST.in.
Co-authored-by: Syed Sajjad  Hussain Shah <syed.sajjad@H7FKF7K6XD.local>
2023-02-09 20:47:34 +01:00
Willem Van Onsem 292aacaf6c Fixed #34311 -- Updated serialization docs from unique_together to UniqueConstraint. 2023-02-09 05:28:03 +01:00
Jacob Rief 473283d241
Fixed #34303 –- Allowed customizing admin site log entry list.
Added AdminSite.get_log_entries() as an override point and made this
available to the template via each_context().
2023-02-08 18:37:32 +01:00
Carlton Gibson 1964e4367f
Added missing vars to AdminSite.each_context() docs. 2023-02-08 17:59:56 +01:00
Mariusz Felisiak 2fd755b361
Fixed #34319 -- Fixed Model.validate_constraints() crash on ValidationError with no code.
Thanks Mateusz Kurowski for the report.

Regression in 667105877e.
2023-02-08 16:38:55 +01:00
Anders Hovmöller 69069a443a
Refs #7430 -- Removed broken Template.__iter__().
Co-authored-by: Anders Hovmöller <anders.hovmoller@dryft.se>
2023-02-08 11:17:58 +01:00
Bakdolot 325c44ac6c Fixed #34315 -- Preserved admin changelist filters on "Close" button. 2023-02-08 09:38:14 +01:00
Youngkwang Yang 9f20f382ca
Fixed #34313 -- Updated thousands separator for Spanish (ES) locale.
Format was updated from a comma to a space in 2010. 

ref: https://en.wikipedia.org/wiki/Decimal_separator#Examples_of_use
2023-02-08 09:37:08 +01:00
Bernhard M. Wiedemann b4cdcbf239 Removed hardcoded date in SetCookieTests.test_far_expiration().
Follow up to a92c838287.
2023-02-07 20:30:00 +01:00
Carlton Gibson 1df7814e4b
Refs #34146 -- Fixed typos in tutorial. (#16530)
- Fixed formatting on index page.
- Removed duplicate What's next section.

Thanks to Tim Graham for the report.
2023-02-07 20:19:58 +01:00
Tim Schilling 7715c9fef5
Fixed #34146 -- Added 3rd-party lib tutorial step.
Added a tutorial step that highlights Django Debug Toolbar, on of the
most common third party packages. It also added a mention of
djangopackages.com as a place to search for other libraries and a
link to Adam Johnson’s post on evaluating whether a package is
well-maintained.

Third-party packages are one of Django’s strengths. This should give
folks a sound route in.
2023-02-07 15:26:37 +01:00
Bakdolot 5f3c7b7e1d
Fixed #34317 -- Renamed "instance" argument of BaseModelFormSet.save_existing() method. 2023-02-07 14:18:58 +01:00
Nils VAN ZUIJLEN ae1fe72e9b Fixed #34285 -- Fixed index/slice lookups on filtered aggregates with ArrayField.
Thanks Simon Charette for the review.
2023-02-07 13:16:41 +01:00
Jacob Walls 4403432b75 Fixed #33638 -- Fixed GIS lookups crash with geography fields on PostGIS. 2023-02-07 11:48:10 +01:00
Carlton Gibson fb77be9ae1 Fixed typo in release notes. 2023-02-07 10:11:01 +01:00
Carlton Gibson 7e003428f9 Added stub release notes for 4.0.10 and 3.2.18.
Set date for 4.1.7 release.
2023-02-07 10:08:21 +01:00
Marcelo Galigniana 7c6195ef81
Fixed #34310 -- Added deletion example to one-to-one topic. 2023-02-07 08:04:23 +01:00
Frederic Mheir 2878938626 Fixed #34301 -- Made admin's submit_row check add permission for "Save as new" button. 2023-02-07 07:01:10 +01:00
Dan Glass bd366ca2ae
Made PostgreSQL's SchemaEditor._create_index_sql() respect the "sql" argument. 2023-02-06 10:41:08 +01:00
Mariusz Felisiak 5e9aded33f
Increased the default PBKDF2 iterations for Django 5.0.
Follow up to 9a1848f48c.
2023-02-04 13:37:44 +01:00
Adam Johnson 017fa23d3b Fixed #34259 -- Passed called_from_command_line to command subparsers. 2023-02-03 06:56:57 +01:00
skidipap 1250483ebf Fixed #34286 -- Fixed admindocs markups for case-sensitive template/view names. 2023-02-02 13:21:08 +01:00
Mariusz Felisiak c626173833 Improved error message for ASCIIUsernameValidator.
Follow up to 10bb21e71e.

Co-authored-by: Paolo Melchiorre <paolo@melchiorre.org>
2023-02-02 09:27:15 +01:00
Mariusz Felisiak f3c89744cc Added stub release notes for 4.1.7. 2023-02-01 13:18:34 +01:00
Mariusz Felisiak 36e3eef7d5 Added CVE-2023-23969 to security archive. 2023-02-01 12:09:03 +01:00
Mariusz Felisiak 4dcb919c97 Ignored 097e3a70c1 formatting changes in git blame. 2023-02-01 11:34:49 +01:00
David Smith 097e3a70c1 Refs #33476 -- Applied Black's 2023 stable style.
Black 23.1.0 is released which, as the first release of the year,
introduces the 2023 stable style. This incorporates most of last year's
preview style.

https://github.com/psf/black/releases/tag/23.1.0
2023-02-01 11:04:38 +01:00
Nick Pope 8c660fb592 Fixed CVE-2023-23969 -- Prevented DoS with pathological values for Accept-Language.
The parsed values of Accept-Language headers are cached in order to
avoid repetitive parsing. This leads to a potential denial-of-service
vector via excessive memory usage if the raw value of Accept-Language
headers is very large.

Accept-Language headers are now limited to a maximum length in order
to avoid this issue.
2023-02-01 09:44:04 +01:00
sag᠎e 110b3b8356
Fixed #34304 -- Made MySQL's SchemaEditor.remove_constraint() don't create foreign key index when unique constraint is ignored.
Regression in b731e88415.
2023-01-31 11:52:07 +01:00
Durval Carvalho 40217d1a82 Fixed #34180 -- Added note about resetting language in test tear-downs.
Co-authored-by: Faris Naimi <farisfaris66@gmail.com>
2023-01-31 06:35:30 +01:00
Stanislav Volyk 20a0850099 Fixed #34283 -- Escaped title in admin's changelist filters.
Regression in 27aa7035f5.
2023-01-30 09:37:53 +01:00
fschwebel 0265b1b49b
Fixed typo in docs/topics/auth/passwords.txt.
Wrapped hashing is only possible if the inner wrapped function is the
same as the previous hasher.
2023-01-30 08:31:39 +01:00
Sarah Boyce 8acc433e41
Fixed #28054 -- Made runserver not return response body for HEAD requests.
Co-authored-by: jannschu <jannik.schuerg@posteo.de>
2023-01-27 21:49:54 +01:00
Mariusz Felisiak 82dad11bfe
Refs #34255 -- Skipped test_group_by_nested_expression_with_params test on PostgreSQL when server-side binding cursors are used.
Thanks Tim Graham for the review.
2023-01-27 21:28:10 +01:00