Commit Graph

31711 Commits

Author SHA1 Message Date
Natalia d26c8838d0 [4.2.x]Post-release version bump. 2024-05-07 14:44:42 -03:00
Sarah Boyce 3bf46e2e02 [4.2.x] Bumped version for 4.2.13 release. 2024-05-07 17:37:03 +02:00
Sarah Boyce b46b94e66c [4.2.x] Added release notes for 4.2.13.
Backport of 90175e110e from main.
2024-05-07 17:35:16 +02:00
Natalia 1536833e93 [4.2.x] Post-release version bump. 2024-05-06 14:36:28 -03:00
Sarah Boyce 6193c720b5 [4.2.x] Bumped version for 4.2.12 release. 2024-05-06 17:24:48 +02:00
Sarah Boyce 3f9c8fc1f9 [4.2.x] Added release date for 4.2.12.
Backport of 34a503162f from main.
2024-05-06 14:44:17 +02:00
Sarah Boyce 256f719cb3 [4.2.x] Reverted "Fixed #34994, Fixed #35386 -- Applied checkbox-row CSS class unconditionally in Admin."
This reverts commit 0fc832676c.
2024-04-19 13:29:30 +02:00
Adam Johnson 0fc832676c [4.2.x] Fixed #34994, Fixed #35386 -- Applied checkbox-row CSS class unconditionally in Admin.
Backport of bdd76c4c38 from main.
2024-04-19 11:28:02 +02:00
Natalia 1d85b416aa [4.2.x] Refs #35361 -- Clarified release notes for 4.2.12.
Backport of cd823778e6 from main.
2024-04-12 15:07:36 +02:00
Natalia 27c32cc991 [4.2.x] Fixed #35361 -- Added release notes for 4.2.12 for backport of b231bcd19e.
Backport of 42435fc55c from main.
2024-04-10 18:29:33 +02:00
Mariusz Felisiak 0d3ddcaf2c [4.2.x] Refs #34900, Refs #35361 -- Fixed SafeMIMEText.set_payload() crash on Python 3.13.
Payloads with surrogates are passed to the set_payload() since
f97f25ef5d

Backport of b231bcd19e from main.
2024-04-10 18:18:52 +02:00
Mariusz Felisiak a76c52b19a [4.2.x] Added CVE-2024-27351 to security archive.
Backport of da39ae4b5f from main
2024-03-04 10:12:58 +01:00
Mariusz Felisiak 721c566859 [4.2.x] Post-release version bump. 2024-03-04 08:47:11 +01:00
Mariusz Felisiak 61a986f53d [4.2.x] Bumped version for 4.2.11 release. 2024-03-04 08:43:32 +01:00
Shai Berger 3c9a2771cc [4.2.x] Fixed CVE-2024-27351 -- Prevented potential ReDoS in Truncator.words().
Thanks Seokchan Yoon for the report.

Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2024-03-04 08:36:56 +01:00
Mariusz Felisiak 7973951139 [4.2.x] Added release date for 4.2.11 and 3.2.25.
Backport of 977d254169 from main
2024-02-26 08:29:04 +01:00
Daniel Garcia Moreno 86d8034972 [4.2.x] Refs #34900, Refs #34118 -- Updated assertion in test_skip_class_unless_db_feature() test on Python 3.12.2+.
Python 3.12.2 bring back the skipped tests in the number of running
tests. Refs
0a737639dc

Backport of bc8471f0aa from main
2024-02-10 17:08:48 +01:00
Mariusz Felisiak cb173bb088 [4.2.x] Fixed #35172 -- Fixed intcomma for string floats.
Thanks Warwick Brown for the report.

Regression in 55519d6cf8.

Backport of 2f14c2cedc from main.
2024-02-08 11:00:36 +01:00
Natalia 227ef29cff [4.2.x] Added CVE-2024-24680 to security archive.
Backport of c650c1412d from main
2024-02-06 12:16:50 -03:00
Natalia e2f1907642 [4.2.x] Post release version bump. 2024-02-06 10:04:22 -03:00
Natalia a684d73fc9 [4.2.x] Bumped version for 4.2.10 release. 2024-02-06 09:57:24 -03:00
Adam Johnson 572ea07e84 [4.2.x] Fixed CVE-2024-24680 -- Mitigated potential DoS in intcomma template filter.
Thanks Seokchan Yoon for the report.

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
Co-authored-by: Shai Berger <shai@platonix.com>
2024-02-06 09:56:20 -03:00
nessita 9fe7411235
[4.2.x] Pinned black == 23.12.1 for blacken-docs checks. 2024-01-30 05:47:27 +01:00
nessita 71dd587da9
[4.2.x] Pinned black == 23.12.1 in GitHub actions, pre-commit and test requirements. 2024-01-29 12:53:06 -03:00
Natalia 74582b8d11 [4.2.x] Added stub release notes for 4.2.10 and 3.2.24.
Backport of 06d0a1bd56 from main
2024-01-29 12:09:52 -03:00
Mariusz Felisiak 4198a5cb2d [4.2.x] Post-release version bump. 2024-01-02 10:11:39 +01:00
Mariusz Felisiak f339c4c8e4 [4.2.x] Bumped version for 4.2.9 release. 2024-01-02 10:10:11 +01:00
Mariusz Felisiak 0a4c5e56b4 [4.2.x] Added release date for 4.2.9.
Backport of f82a2c3b3d from main.
2024-01-02 09:59:12 +01:00
Tom Carrick ca43990813 [4.2.x] Fixed #35012 -- Restored wrapping admin fieldsets with multiple fields per line.
Thanks James Gillard for the report.

Regression in 729266c6f2.

Backport of 4aae864463 from main
2023-12-13 12:34:53 +01:00
Mariusz Felisiak d9ba0ea6cb [4.2.x] Added stub release notes for 4.2.9.
Backport of 464af0975c from main
2023-12-05 06:12:20 +01:00
Mariusz Felisiak a315e82f31 [4.2.x] Post-release version bump. 2023-12-04 09:29:47 +01:00
Mariusz Felisiak dff965798e [4.2.x] Bumped version for 4.2.8 release. 2023-12-04 09:26:51 +01:00
Mariusz Felisiak 52e28e5fbf [4.2.x] Added release date for 4.2.8.
Backport of 8fcb9f1f10 from main
2023-12-04 09:25:56 +01:00
Mariusz Felisiak 6e2d9f0aa8 [4.2.x] Fixed #35006 -- Fixed migrations crash when altering Meta.db_table_comment on SQLite.
Thanks Юрий for the report.

Regression in 78f163a4fb.
Backport of 37fc832a54 from main
2023-11-30 10:11:28 +01:00
Adam Johnson 5b698cbcf1 [4.2.x] Removed link to lawrence.com in contrib.sites docs.
lawrence.com has since become a redirect to LJWorld.com,
making the link pointless.
Backport of 9e7ac58901 from main
2023-11-28 20:12:09 +01:00
Tom Carrick bd0ea8c2ba [4.2.x] Fixed #34982 -- Fixed admin's read-only password widget and help texts alignment for tablet screen size.
Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Backport of 729266c6f2 from main
2023-11-27 15:20:59 -03:00
Mariusz Felisiak cdb14cc18b [4.2.x] Fixed #34978, Refs #31331 -- Added backward incompatibility note about raw aggregations on MySQL.
Thanks Matthew Somerville for the report.

Backport of a652f07596 from main
2023-11-27 12:44:18 -03:00
Nathaniel Conroy 450d518d2f [4.2.x] Fixed #34992 -- Fixed DatabaseFeatures.allows_group_by_selected_pks on MariaDB with ONLY_FULL_GROUP_BY sql mode.
Regression in 041551d716.

Backport of 0257426fe1 from main.
2023-11-27 10:35:56 +01:00
Tom Carrick bac9e94ace [4.2.x] Fixed #34994 -- Fixed checkbox layout in admin's change page for narrow screen widths.
Regression in d687febce5.

Backport of a89c715c3b from main
2023-11-23 16:57:21 -03:00
Tom Carrick 3d943c4f55 [4.2.x] Fixed #34991 -- Fixed pagination links and input layout in admin's change list page when using list_editable.
Regression in b4817d20b9.

Thanks Tom Carrick for the report and fix.

Backport of 4eb9c3d90a from main
2023-11-23 10:22:34 -03:00
Simon Charette cf95de9d24 [4.2.x] Fixed #34987 -- Fixed queryset crash when mixing aggregate and window annotations.
Regression in f387d024fc.

Just like `OrderByList` the `ExpressionList` expression used to wrap
`Window.partition_by` must implement `get_group_by_cols` to ensure the
necessary grouping when mixing window expressions with aggregate
annotations is performed against the partition members and not the
partition expression itself.

This is necessary because while `partition_by` is implemented as
a source expression of `Window` it's actually a fragment of the WINDOW
expression at the SQL level and thus it should result in a group by its
members and not the sum of them.

Thanks ElRoberto538 for the report.
Backport of e76cc93b01 from main
2023-11-23 06:10:24 +01:00
Tim Schilling 6d7313bc87 [4.2.x] Fixed #34990 -- Changed link to OWASP in CSRF docs.
The OWASP site is the standard resource for web application
security information.
Backport of aceee39d44 from main
2023-11-23 05:28:43 +01:00
Mariusz Felisiak 9afeb6b9b6 [4.2.x] Refs #34118 -- Doc'd Python 3.12 compatibility in Django 4.2.x.
Backport of ecfea054ee from main.
2023-11-19 16:38:33 +01:00
Mariusz Felisiak 233e2a9e31 [4.2.x] Refs #34118 -- Added Python 3.12 to classifiers and tox.ini.
Backport of f955c90488 from main.
2023-11-19 16:34:36 +01:00
Mariusz Felisiak b5750b9f64
[4.2.x] Refs #34118 -- Fixed stacklevel in complex_setting_changed on Python 3.12.
This fix is unnecessary in Django 5.0 since
e83a88566a because signals no longer use
sync_to_async().
2023-11-19 16:29:13 +01:00
Simon Charette acf4cee951 [4.2.x] Fixed #34975 -- Fixed crash of conditional aggregate() over aggregations.
Adjustments made to solve_lookup_type to defer the resolving of
references for summarized aggregates failed to account for similar
requirements for lookup values which can also reference annotations
through Aggregate.filter.

Regression in b181cae2e3.

Refs #25307.

Thanks Sergey Nesterenko for the report.

Backport of 7530cf3900 from main
2023-11-18 16:53:24 +01:00
Markus Amalthea Magnuson 47f9b8dca1 [4.2.x] Fixed #34970 -- Clarified Password Validation docs regarding the password_changed callback.
Backport of 61c305f298 from main
2023-11-15 21:51:32 -03:00
Giannis Terzopoulos f1e004012f [4.2.x] Removed obsolete sentence in custom model field docs.
Backport of 36ed45d27c from main
2023-11-15 13:53:03 +01:00
William Hayes e9acdff462 [4.2.x] Refs #33690 -- Added missing data-theme selector to example in theming support docs.
Backport of 640283711e from main
2023-11-15 05:28:17 +01:00
Adam Johnson 90c3d71dfe [4.2.x] Fixed #34457 -- Restored output for makemigrations --check.
Co-authored-by: David Sanders <shang.xiao.sanders@gmail.com>
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of f7389c4b07 from main
2023-11-09 11:05:54 -03:00