958cdf65ae
Fixed #32747 -- Prevented initialization of unused caches.
...
Thanks Alexander Ebral for the report.
Regression in 98e05ccde4
2021-05-18 18:24:19 +02:00
a24fed399c
Fixed #32733 -- Skipped system check for specifying type of auto-created primary keys on abstract models.
...
Regression in b5e12d490a
2021-05-18 13:02:33 +02:00
27d4573d35
Fixed #32755 -- Corrected Model.get_absolute_url() example in docs.
2021-05-18 11:30:38 +02:00
f7691d4812
Fixed #32754 -- Made AdminSite.catch_all_view() respect SCRIPT_NAME.
...
Regression in ba31b01034
2021-05-18 09:14:05 +02:00
0851933cba
Fixed #32720 -- Added configuration and docs for Sphinx link checker.
...
We explicitly ignore checking anchors for line-range anchors on GitHub
which are dynamically generated and, otherwise, show up as broken links.
See https://github.com/sphinx-doc/sphinx/issues/7388#issuecomment-739961689 .
We also ignore links to resources that require authentication.
2021-05-17 11:21:35 +02:00
c156e36955
Refs #32720 -- Updated various links in docs to avoid redirects and use HTTPS.
2021-05-17 09:46:09 +02:00
7c4ee487c7
Refs #32720 -- Fixed some broken links in docs.
2021-05-17 09:22:17 +02:00
1c3bbcf802
Refs #32720 -- Used full hashes in security archive.
2021-05-17 08:27:46 +02:00
df5c96299a
Corrected commit hashes for security patches.
2021-05-17 08:26:06 +02:00
8c4caee76a
Refs #32720 -- Used :commit: and :source: role in old release notes.
2021-05-17 07:36:57 +02:00
820408d842
Added stub release notes for Django 3.2.4.
2021-05-13 09:42:26 +02:00
b55699968f
Fixed #32718 -- Relaxed file name validation in FileField.
...
- Validate filename returned by FileField.upload_to() not a filename
passed to the FileField.generate_filename() (upload_to() may
completely ignored passed filename).
- Allow relative paths (without dot segments) in the generated filename.
Thanks to Jakub Kleň for the report and review.
Thanks to all folks for checking this patch on existing projects.
Thanks Florian Apolloner and Markus Holtermann for the discussion and
implementation idea.
Regression in 0b79eb3691
2021-05-13 08:53:44 +02:00
b81c7562fc
Fixed #32717 -- Fixed filtering of querysets combined with the | operator.
...
Address a long standing bug in a Where.add optimization to discard
equal nodes that was surfaced by implementing equality for Lookup
instances in bbf141bcdc
2021-05-13 07:26:52 +02:00
3733ae8957
Fixed #32031 -- Added model class for each model to AdminSite.each_context().
2021-05-13 06:57:09 +02:00
0456d3e427
Fixed #26721 -- Doc'd setting UTF-8 on Windows.
2021-05-12 20:46:01 +02:00
29e4ccb1a2
Fixed #32738 -- Deprecated django.utils.datetime_safe module.
2021-05-12 14:42:17 +02:00
1061f52436
Fixed #32732 -- Removed usage of deprecated 'db' and 'passwd' connection options in MySQL backend.
...
The 'db' and 'passwd' connection options have been deprecated, use
'database' and 'password' instead (available since mysqlclient >= 1.3.8).
This also allows the 'database' option in DATABASES['OPTIONS'] on MySQL.
2021-05-12 12:21:57 +02:00
69ffb1acf3
Refs #32366 -- Avoided use of datetime.utcnow() in the documentation.
2021-05-12 11:06:31 +02:00
88b3982af3
Fixed a typo in docs/ref/models/fields.txt.
...
datetime.date.utcnow() doesn't exist, should be .today().
2021-05-12 11:06:29 +02:00
d1f1417cae
Refs #32718 -- Corrected CVE-2021-31542 release notes.
2021-05-12 10:42:01 +02:00
34363a391b
Fixed #32735 -- Made DateFormat.Y() return a zero-padded year.
2021-05-12 08:17:06 +02:00
205c36b58f
Fixed #32670 -- Allowed GDALRasters to use any GDAL virtual filesystem.
2021-05-07 20:03:46 +02:00
028f10fac6
Fixed #32712 -- Deprecated django.utils.baseconv module.
2021-05-07 11:57:40 +02:00
c240ceea7d
Fixed typo in docs/internals/contributing/writing-documentation.txt.
2021-05-06 20:01:32 +02:00
29779075d7
Added stub release notes for Django 3.2.3.
2021-05-06 10:08:00 +02:00
efebcc429f
Added CVE-2021-32052 to security archive.
2021-05-06 09:58:24 +02:00
e1e81aa1c4
Fixed #32713 , Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+.
...
In Python 3.9.5+ urllib.parse() automatically removes ASCII newlines
and tabs from URLs [1, 2]. Unfortunately it created an issue in
the URLValidator. URLValidator uses urllib.urlsplit() and
urllib.urlunsplit() for creating a URL variant with Punycode which no
longer contains newlines and tabs in Python 3.9.5+. As a consequence,
the regular expression matched the URL (without unsafe characters) and
the source value (with unsafe characters) was considered valid.
[1] https://bugs.python.org/issue43882 and
[2] 76cd81d603
2021-05-06 08:45:23 +02:00
96f55ccf79
Fixed #32714 -- Prevented recreation of migration for Meta.ordering with OrderBy expressions.
...
Regression in c8b6594305
2021-05-05 08:43:57 +02:00
62b2e8b37e
Added commits for CVE-2021-31542 to security archive.
2021-05-04 11:09:21 +02:00
607ebbfba9
Added CVE-2021-31542 to security archive.
2021-05-04 11:06:07 +02:00
5a43cfe245
Added stub release notes for Django 3.2.2.
2021-05-04 11:01:33 +02:00
0b79eb3691
Fixed CVE-2021-31542 -- Tightened path & file name sanitation in file uploads.
2021-05-04 08:44:42 +02:00
7582d913e7
Added spelling option to make.bat.
2021-04-30 14:04:22 +02:00
54da6e2ac2
Fixed #32678 -- Removed SECURE_BROWSER_XSS_FILTER setting.
2021-04-30 12:32:52 +02:00
8bcb00858e
Fixed #32698 -- Moved HttpRequest.get_raw_uri() to ExceptionReporter._get_raw_insecure_uri().
2021-04-30 08:05:42 +02:00
ca34db4650
Refs #32178 -- Doc'd DatabaseFeatures.django_test_skips/django_test_expected_failures in contributing guide.
2021-04-29 20:55:34 +02:00
2161db0792
Fixed capitalization of "ECMAScript" and "JavaScript".
2021-04-29 20:29:08 +02:00
907d3a7ff4
Refs #32674 -- Noted that auto-created through table PKs cannot be automatically migrated.
2021-04-29 13:53:56 +02:00
baba733dcc
Refs #32682 -- Renamed lookup_needs_distinct() to lookup_spawns_duplicates().
...
Follow up to 1871182031
2021-04-29 12:04:30 +02:00
4f128fcf5d
Refs #32694 -- Clarified when colorama requirement is needed in Windows how-to.
2021-04-29 11:26:38 +02:00
4ab3ef238e
Fixed #32675 -- Doc'd that autodector changes might cause generation of no-op migrations.
...
Follow up to aa4acc164d
2021-04-29 07:46:22 +02:00
68e876c095
Corrected introduction to range field lookups docs.
...
Follow up to 24b9f50823
2021-04-28 20:35:05 +02:00
c8b6594305
Fixed #32632 , Fixed #32657 -- Removed flawed support for Subquery deconstruction.
...
Subquery deconstruction support required implementing complex and
expensive equality rules for sql.Query objects for little benefit as
the latter cannot themselves be made deconstructible to their reference
to model classes.
Making Expression @deconstructible and not BaseExpression allows
interested parties to conform to the "expression" API even if they are
not deconstructible as it's only a requirement for expressions allowed
in Model fields and meta options (e.g. constraints, indexes).
Thanks Phillip Cutter for the report.
This also fixes a performance regression in bbf141bcdc
2021-04-28 12:13:55 +02:00
6e742dabc9
Fixed #32687 -- Restored passing process’ environment to underlying tool in dbshell on PostgreSQL.
...
Regression in bbe6fbb876
2021-04-27 10:43:35 +02:00
1871182031
Fixed #32682 -- Made admin changelist use Exists() instead of distinct() for preventing duplicates.
...
Thanks Zain Patel for the report and Simon Charette for reviews.
The exception introduced in 6307c3f1a1
2021-04-27 10:34:47 +02:00
cd74aad90e
Refs #32682 -- Renamed use_distinct variable to may_have_duplicates.
...
QuerySet.distinct() is not the only way to avoid duplicate, it's also
not preferred.
2021-04-27 10:34:47 +02:00
4e5bbb6ef2
Fixed #32681 -- Fixed VariableDoesNotExist when rendering some admin template.
...
Regression in 84609b3205
2021-04-26 07:08:16 +02:00
67bb1f516c
Refs #28034 -- Corrected docs example in contributing tutorial.
2021-04-23 15:24:16 +02:00
6a7af38b07
Added note to update docs config when creating new stable branch.
...
django_next_version in docs/conf.py should be bumped when creating a new stable
branch.
2021-04-22 08:08:38 +02:00
4a77aeb1f8
Fixed #32667 -- Added link to labeling checks in BaseCommand.requires_system_checks docs.
...
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-04-21 16:40:04 +02:00
6d0cbe42c3
Fixed #32650 -- Fixed handling subquery aliasing on queryset combination.
...
This issue started manifesting itself when nesting a combined subquery
relying on exclude() since 8593e162c9#27149 ).
Thanks Raffaele Salmaso for the report.
2021-04-21 09:49:15 +02:00
34d1905712
Fixed #32665 -- Fixed caches system check crash when STATICFILES_DIRS is a list of 2-tuples.
...
Thanks Jared Lockhart for the report.
Regression in c36075ac1d
2021-04-21 09:41:37 +02:00
5c73fbb6a9
Fixed #32647 -- Restored multi-row select with shift-modifier in admin changelist.
...
Regression in 30e59705fc
2021-04-21 08:31:06 +02:00
54e94640ac
Refs #25287 -- Added support for multiplying and dividing DurationField by scalar values on SQLite.
2021-04-20 11:44:41 +02:00
3fec16e8ac
Fixed #32574 -- Confirmed support for PROJ 8.x.
2021-04-19 20:13:43 +02:00
725ca1fb60
Corrected File, ContentFile, and ImageFile signatures in docs.
2021-04-16 06:17:45 +02:00
e3e2276e6f
Fixed #32652 -- Fixed links to new contributors FAQ.
2021-04-15 17:14:22 +02:00
4511d14598
Fixed #32643 -- Fixed decoding of messages in the pre-Django 3.2 format.
...
Thanks Jan Pieter Waagmeester for the report.
Regression in 2d6179c819
2021-04-14 22:52:59 +02:00
ca98729055
Fixed #32645 -- Fixed QuerySet.update() crash when ordered by joined fields on MySQL/MariaDB.
...
Thanks Matt Westcott for the report.
Regression in 779e615e36
2021-04-14 21:11:17 +02:00
338eb65b6e
Refs #32548 -- Forwardported 3.2.1 release note.
2021-04-14 20:25:58 +02:00
08c60cce3b
Fixed #32648 -- Fixed VariableDoesNotExist rendering sitemaps template.
2021-04-14 16:50:47 +02:00
23fa29f6a6
Fixed #32649 -- Fixed ModelAdmin.search_fields crash when searching against phrases with unbalanced quotes.
...
Thanks Dlis for the report.
Regression in 26a413507a
2021-04-14 12:23:47 +02:00
a77c9a4229
Fixed #32635 -- Fixed system check crash for reverse o2o relations in CheckConstraint.check and UniqueConstraint.condition.
...
Regression in b7b7df5fbc
2021-04-14 10:06:18 +02:00
3b8527e32b
Fixed #32637 -- Restored exception message on technical 404 debug page.
...
Thanks Atul Varma for the report.
2021-04-13 09:15:04 +02:00
9760e262f8
Fixed #32627 -- Fixed QuerySet.values()/values_list() crash on combined querysets ordered by unannotated columns.
2021-04-12 21:11:40 +02:00
1351f2ee16
Fixed #32618 -- Added link to conditional aggregation in aggregation topic guide.
2021-04-09 21:34:44 +02:00
fc268c8648
Fixed #32535 -- Added note about DEBUG_PROPAGATE_EXCEPTIONS setting to middleware docs.
2021-04-09 10:47:46 +02:00
45a58c31e6
Fixed #32620 -- Allowed subclasses of Big/SmallAutoField for DEFAULT_AUTO_FIELD.
2021-04-08 13:17:08 +02:00
30e123ed35
Fixed #32575 -- Added support for SpatiaLite 5.
2021-04-08 09:36:29 +02:00
b9d156761f
Refs #31578 -- Removed outdated notes about MyISAM in GIS docs.
...
InnoDB supports spatial data types in MySQL 5.7+ and MariaDB 10.2+.
2021-04-08 09:31:57 +02:00
dc824e2668
Refs #27488 -- Corrected detection of IsValid() support on SpatiaLite.
...
LWGEOM is not required for IsValid().
2021-04-08 09:31:16 +02:00
3ae4344bbd
Dropped support for GEOS 3.5 and GDAL 2.0.
2021-04-07 20:39:30 +02:00
98abc0c90e
Fixed #32501 -- Added support for returning fields from INSERT statements on SQLite 3.35+.
2021-04-07 20:09:56 +02:00
3f2920ae1d
Corrected release number format in 3.2.1 release notes.
2021-04-07 19:44:29 +02:00
e3cfba0029
Fixed #32544 -- Confirmed support for GDAL 3.2 and GEOS 3.9.
2021-04-07 15:54:24 +02:00
5b05a45c62
Corrected wrapping in 3.2 release notes.
...
Partially reverts 0802b404a2
2021-04-07 07:27:31 +02:00
da542ccab6
Refs #30156 -- Corrected version in SpatiaLite install instructions.
2021-04-06 12:44:40 +02:00
df0a9e6d5c
Added stub release notes for Django 3.2.1.
2021-04-06 11:49:48 +02:00
0802b404a2
Added release date for Django 3.2.
...
Adjusted wrapping in release notes where needed.
2021-04-06 11:20:59 +02:00
5aea50e57f
Updated asgiref dependency for 3.2 release series.
2021-04-06 10:38:43 +02:00
1eac8468cb
Added CVE-2021-28658 to security archive.
2021-04-06 09:42:31 +02:00
d4d800ca1a
Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.
...
Thanks Claude Paroz for the initial patch.
Thanks Dennis Brinkrolf for the report.
2021-04-06 08:15:17 +02:00
8f6a7a0e9e
Fixed #32594 -- Doc'd and tested that Signal.disconnect() with lazy references returns None.
2021-04-03 14:57:43 +02:00
e32722d160
Fixed #32383 -- Added source map support to ManifestStaticFilesStorage.
2021-04-02 12:21:21 +02:00
d915dd1c58
Fixed #32204 -- Added quick filter to admin's navigation sidebar.
2021-03-31 09:31:37 +02:00
7248afe12f
Refs #32105 -- Moved ExceptionReporter template paths to properties.
...
Refs #32316 .
2021-03-31 08:41:57 +02:00
db5b75f10f
Fixed #31840 -- Added support for Cross-Origin Opener Policy header.
...
Thanks Adam Johnson and Tim Graham for the reviews.
Co-authored-by: Tim Graham <timograham@gmail.com>
2021-03-30 19:59:24 +02:00
038940cf55
Fixed #29127 -- Prevented DiscoverRunner from hiding tagged test with syntax errors.
...
This mades _FailedTest objects always match tags in DiscoverRunner.
2021-03-30 10:26:20 +02:00
4a80d0f220
Removed dead link in docs/topics/http/sessions.txt.
2021-03-30 06:08:22 +02:00
2f13c476ab
Fixed #31487 -- Added precision argument to Round().
2021-03-29 09:43:08 +02:00
dcb06c2c68
Fixed #32591 -- Made DiscoverRunner order _FailedTest objects first.
...
Failures detected when loading tests are ordered before all of the
above for quicker feedback. This includes things like test modules that
couldn't be found or that couldn't be loaded due to syntax errors.
2021-03-26 12:18:27 +01:00
509d266c6a
Added missing mode="rb" argument to open() call in Client.post() example in docs.
2021-03-26 08:04:59 +01:00
0860db225a
Fixed #32580 -- Doc'd that HttpRequest.get_host() may raise DisallowedHost.
2021-03-26 07:35:34 +01:00
cac9ec73db
Refs #31003 -- Moved note about return value of QuerySet.bulk_create() to the first paragraph.
2021-03-25 17:46:22 +01:00
e53159747c
Doc'd that RawSQL can be used with __in.
2021-03-25 10:28:20 +01:00
41e39c41c9
Refs #32460 -- Doc'd and tested that property names of model choice enums cannot be used as members.
2021-03-24 07:45:33 +01:00
4894a97578
Fixed page numbers in Paginator.get_elided_page_range() example in docs.
2021-03-24 07:35:24 +01:00
3a185cee2a
Fixed #32573 -- Fixed bounds in __iso_year lookup optimization.
2021-03-23 21:27:55 +01:00
71ec102b01
Fixed #32483 -- Fixed QuerySet.values()/values_list() on JSONField key transforms with booleans on SQLite.
...
Thanks Matthew Cornell for the report.
2021-03-23 08:28:47 +01:00
cf2f6fc558
Fixed #32576 -- Corrected dumpdata docs for passing model names to the --exclude option.
2021-03-22 08:43:56 +01:00
41e6b2a3c5
Fixed #32556 -- Fixed handling empty string as non-boolean attributes value by assertHTMLEqual().
2021-03-19 20:41:57 +01:00
d40402cfb0
Fixed #32570 -- Removed unnecessary default_auto_field in app config example.
2021-03-19 12:08:46 +01:00
474cc420bf
Refs #32508 -- Raised Type/ValueError instead of using "assert" in django.core.
2021-03-19 08:04:37 +01:00
37044817f9
Refs #25735 -- Added tags/exclude_tags arguments to DiscoverRunner docs.
2021-03-19 08:03:57 +01:00
f099ef3ef5
Added parallel argument to DiscoverRunner docs.
...
Follow up to cd9fcd4e80
2021-03-19 08:03:57 +01:00
fc6fba0aa9
Corrected DiscoverRunner.build_suite() signature.
...
Follow up to 9012833af8
2021-03-19 08:03:57 +01:00
2411b8b5eb
Fixed #16010 -- Added Origin header checking to CSRF middleware.
...
Thanks David Benjamin for the original patch, and Florian
Apolloner, Chris Jerdonek, and Adam Johnson for reviews.
2021-03-18 20:25:20 +01:00
dba44a7a7a
Refs #16010 -- Required CSRF_TRUSTED_ORIGINS setting to include the scheme.
2021-03-18 20:00:22 +01:00
f6713cda89
Fixed #31370 -- Added support for parallel tests with --buffer.
2021-03-18 15:30:47 +01:00
ceb4b9ee68
Fixed #32547 -- Corrected notes about validation in HTML assertions docs.
2021-03-18 10:21:49 +01:00
45814af619
Fixed #32560 -- Fixed test runner with --pdb and --buffer on fail/error.
2021-03-17 20:56:09 +01:00
6993e1bf6d
Fixed typo in docs/topics/testing/advanced.txt.
2021-03-17 18:10:33 +01:00
065832eaec
Fixed #32353 -- Confirmed support for PROJ 7.X.
2021-03-16 20:22:35 +01:00
bc04941bf8
Fixed #32536 -- Added links to BaseDetailView/BaseListView.get() methods in CBV docs.
2021-03-16 07:34:07 +01:00
50ef9dfac2
Fixed typo in docs/ref/checks.txt.
2021-03-15 09:42:00 +01:00
4d912e6697
Updated datum directory for PROJ 6 in GIS install instructions.
2021-03-15 08:20:36 +01:00
d828beb68f
Fixed #32529 -- Delayed creating a test suite in build_suite().
2021-03-11 10:02:06 +01:00
ba9a2b7544
Refs #32508 -- Raised TypeError instead of using "assert" on unsupported operations for sliced querysets.
2021-03-10 09:16:28 +01:00
98d3fd6102
Updated link to Selenium webdrivers.
2021-03-09 11:29:54 +01:00
d9a266d657
Updated Git branch "master" to "main".
...
This change follows a long discussion on django-develops:
https://groups.google.com/g/django-developers/c/tctDuKUGosc/
2021-03-09 08:48:32 +01:00
d01709aae2
Fixed #24141 -- Added QuerySet.contains().
2021-03-06 20:40:29 +01:00
286fb73b69
Fixed #32507 -- Added link to assertHTMLEqual() in assertInHTML() docs.
2021-03-05 20:20:31 +00:00
c6b07627fc
Refs #32483 -- Doc'd caveat about using JSONField key transforms to booleans with QuerySet.values()/values_list() on SQLite.
2021-03-04 11:30:06 +01:00
05bbff8263
Fixed typo in docs/ref/contrib/postgres/fields.txt.
2021-03-04 10:43:00 +01:00
1da54bfe7d
Corrected messages of admin checks for invalid model field names.
2021-03-04 08:41:28 +01:00
d1f89c9b9a
Corrected admin.E023 message in docs.
2021-03-04 08:41:28 +01:00
ead9085f08
Refs #32412 -- Adjusted Contributing Guide start page.
...
* Added headers emphasising Work on the framework vs Join the community
sections, to raise the visibility of the community section.
* Added callouts to three main code/docs/translations areas, linking to
respective start pages.
* Moved some Writing code specific content from the start page to the
Writing code index. This clarifies the start page and adds content to the
previously empty Writing code index.
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2021-03-03 15:34:06 +01:00
b23232b6ab
Fixed #27854 -- Added system check for nonexistent directories in STATICFILES_DIRS setting.
2021-03-03 11:27:08 +01:00
f55f3ce831
Fixed #32493 -- Removed redundant never_cache uses from admin views.
...
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2021-03-03 09:13:07 +01:00
2b1de3dd24
Updated links to djangoproject.com/code.djangoproject.com repositories.
2021-03-03 09:06:36 +01:00
5fd4f22d19
Fixed #32271 -- Improved consistency of docs CBV examples.
...
Co-Authored-By: Carles Pina i Estany <carles@pina.cat>
2021-03-02 08:33:05 +01:00
8380fe08a0
Fixed #32456 -- Added dbshell support for specifying a password file on PostgreSQL.
2021-03-01 09:33:49 +01:00
9f125fce79
Used GitHub actions for docs tests.
...
Co-Authored-By: Tom Forbes <tom@tomforb.es>
2021-02-26 22:12:25 +01:00
7587139d35
Fixed #20423 -- Doc'd that DTL variable names may not be a number.
2021-02-26 21:02:37 +01:00
0c7e880e13
Fixed typos in assertQuerysetEqual() docs and 1.6 release notes.
2021-02-26 09:10:52 +01:00
f6f430d3ff
Fixed indentation in docs/topics/i18n/translation.txt.
2021-02-25 20:48:32 +01:00
e0f82d7992
Added stub release notes for 3.1.8.
2021-02-25 20:27:10 +01:00
7cc6899d41
Updated links to DEPs.
2021-02-25 17:22:07 +01:00
3089018e95
Fixed #32446 -- Deprecated SERIALIZE test database setting.
...
Whether or not the state of a test database should be serialized can be
inferred from the set of databases allowed to be access from discovered
TestCase/TransactionTestCase enabling the serialized_rollback feature
which makes this setting unnecessary.
This should make a significant test suite bootstraping time difference
on large projects that didn't explicitly disable test database
serialization.
2021-02-24 20:31:11 +01:00
af685b5f00
Refs #31811 -- Corrected DiscoverRunner.setup_databases() signature.
...
Accidentally changed in 61a0ba43cf
2021-02-24 20:24:05 +01:00
3aa545281e
Fixed #30916 -- Added support for functional unique constraints.
...
Thanks Ian Foote and Mariusz Felisiak for reviews.
2021-02-23 20:19:53 +01:00
b1af2cca3a
Fixed #32471 -- Doc'd the return value of EmailMessage.send().
2021-02-23 06:35:45 +01:00
0fd05df7b5
Refs #4027 -- Added Model._state.adding to docs about copying model instances.
2021-02-22 11:14:58 +01:00
ab58f07250
Added CVE-2021-23336 to security archive.
2021-02-19 11:02:32 +01:00
0ad9fa02e0
Refs CVE-2021-23336 -- Updated tests and release notes for affected versions.
2021-02-19 09:03:06 +01:00
d02d60eb0f
Added documentation extlink for bugs.python.org.
2021-02-17 14:24:42 +01:00
3119a6deca
Fixed #26607 -- Allowed customizing formset kwargs with ModelAdmin.get_formset_kwargs().
...
Thanks Nick Pope for reviews.
2021-02-15 11:37:35 +01:00
3fa1ed53be
Refs #32394 -- Rephrased release note for STATIC_URL change.
2021-02-13 20:07:55 +01:00
e412b28845
Fixed #32438 -- Fixed typo in docs/topics/testing/tools.txt.
2021-02-12 09:20:30 +01:00
0963f184ab
Documented an example custom context processor.
2021-02-11 14:36:32 +01:00
a57e91adee
Improved pagination documentation
...
* Link to the topic guide
* Document that page() can raise PageNotAnInteger.
2021-02-11 14:17:01 +01:00
a2fa2fa2f8
Refs #30944 -- Added pyproject.toml in reusable apps docs.
...
Related to f8f35e8c53
2021-02-11 12:44:38 +01:00
dcb094abe8
Fixed #32421 -- Made admindocs ModelDetailView show model cached properties.
2021-02-11 06:50:50 +01:00
17a5e2cff6
Fixed #32431 -- Reversed order of security issues history.
2021-02-10 16:02:35 +01:00
ec0ff40631
Fixed #32355 -- Dropped support for Python 3.6 and 3.7
2021-02-10 10:20:54 +01:00
b99d6c9cbc
Fixed #28216 -- Added next_page/get_default_redirect_url() to LoginView.
2021-02-08 21:08:05 +01:00
59841170ba
Used .. attribute:: directive in authentication views docs.
2021-02-08 18:12:58 +01:00
6ee86a12ee
Fixed #32430 -- Doc'd base class-based views.
2021-02-08 13:13:11 +01:00
de4492fbb1
Fixed #32408 -- Doc'd django.views.generic.detail.BaseDetailView.
2021-02-08 06:39:09 +01:00
50a5f8840f
Refs #32394 -- Changed STATIC_URL/MEDIA_URL to relative paths in tests and docs where appropriate.
2021-02-06 13:41:35 +01:00
9d05add447
Fixed #32394 -- Changed project template settings to use relative STATIC_URL.
...
Refs #25598 which added original support for relative STATIC_URL and
MEDIA_URL.
2021-02-06 13:34:00 +01:00
51637222b6
Fixed #32419 -- Clarified URLconf in example of serving media files.
2021-02-05 15:33:53 +01:00
e48e78738e
Corrected typo in advice to new contributors.
2021-02-04 16:00:47 +01:00
f23b05696e
Fixed #32395 -- Allowed capturing stdout of migration signals.
2021-02-04 11:19:49 +01:00
aa29c57bee
Refs #32412 -- Adjusted link from tutorial to reference docs.
...
The writing code index page is a better location for a newer contributor to
land, than the specific patch guidelines subpage.
2021-02-04 10:33:16 +01:00
e733c9ac17
Refs #32412 -- Adjusted beginning of Advice for new contributors.
...
With the goal of guiding folks to the right destination:
* Improved wording of tutorial call-out.
* Added summary of page purpose.
* Added link to Writing code reference doc.
2021-02-04 10:33:16 +01:00
ce60d28929
Fixed #31527 -- Allowed admindocs index to handle non-string URLconfs.
2021-02-04 10:11:58 +01:00
e17bdb953a
Fix typos
2021-02-04 09:48:40 +01:00
f39634ff22
Refs #32390 -- Bumped required cx_Oracle to 7.0.
2021-02-03 10:03:33 +01:00
84283ab9cd
Fixed #32390 -- Dropped support for Oracle 12.2 and 18c.
2021-02-03 10:03:33 +01:00
f131841c60
Fixed #32403 -- Fixed re-raising DatabaseErrors when using only 'postgres' database.
...
Thanks Kazantcev Andrey for the report.
Regression in f48f671223
2021-02-02 21:34:36 +01:00
f9cfd346f0
Fixed typo in docs/ref/forms/widgets.txt.
2021-02-01 12:04:48 +01:00
8d3c3a5717
Added stub release notes for 3.1.7.
2021-02-01 10:51:16 +01:00
f749148d62
Added CVE-2021-3281 to security archive.
2021-02-01 10:24:22 +01:00
05413afa8c
Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().
...
Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews.
Thanks Wang Baohua for the report.
2021-02-01 09:07:36 +01:00
59e503b670
Modernized custom manager example
...
Since this example was added 15 years ago in a8ccdd0fcd
2021-01-28 15:59:39 +01:00
269a767146
Fixed #32391 -- Used CSS flex properties for changelist filter.
...
Matched layout adjustment using flex from admin sidebar added in
d24ba1be7a
2021-01-28 15:51:05 +01:00
241da3f06e
Fixed #32388 -- Clarified QuerySet.bulk_update() caveat about duplicates for multiple batches.
2021-01-28 07:54:03 +01:00
8a642b88c3
Changed "Don't overuse count() or exists()" example to Python.
2021-01-27 20:24:27 +01:00
f4272d000a
Fixed #32348 , Refs #29087 -- Corrected tutorial for updated deleting inlines UI.
...
Updated tutorial to match change in 24e540fbd7
2021-01-27 08:44:36 +01:00
1adc09064f
Fixed #32347 -- Made ModelChoiceField include the value in ValidationError for invalid_choice.
2021-01-26 09:31:53 +01:00
90ddf46ef7
Refs #26167 -- Corrected OpClass() example in docs.
2021-01-25 08:41:35 +01:00
2b4b6c8af0
Refs #32372 -- Updated manager name in related objects reference docs.
...
Follow up to 725c549ae7
2021-01-22 20:18:44 +01:00
b1821fbad5
Fixed #32360 -- Added system check for FILE_UPLOAD_TEMP_DIR setting.
2021-01-22 07:51:00 +01:00
725c549ae7
Fixed #32372 -- Made examples in related objects reference docs consistent.
2021-01-22 06:33:33 +01:00
7b3ec6bcc8
Fixed #32371 -- Doc'd jquery.init.js dependency for admin widgets.
2021-01-20 20:32:46 +01:00
dcb3ad3319
Fixed #32292 -- Added support for connection by service name to PostgreSQL.
2021-01-20 17:30:37 +01:00
ab7478d1d4
Fixed #32324 -- Added template block to override the admin site header.
2021-01-19 12:27:07 +01:00
5371342ed6
Fixed #32357 -- Dropped support for PostgreSQL 9.6 and PostGIS 2.3.
2021-01-19 12:25:20 +01:00
10d1261984
Refs #32365 -- Allowed use of non-pytz timezone implementations.
2021-01-19 11:59:37 +01:00
73ffc73b68
Corrected versionadded annotations.
2021-01-19 11:52:47 +01:00
34aa4f1997
Fixed #32296 -- Added --skip-checks option to runserver command.
2021-01-18 12:51:35 +01:00
a948d9df39
Increased the default PBKDF2 iterations for Django 4.0.
2021-01-14 17:50:04 +01:00
b4c5f878bd
Advanced deprecation warnings for Django 4.0.
2021-01-14 17:50:04 +01:00
0aa6a602b2
Refs #31842 -- Removed DEFAULT_HASHING_ALGORITHM transitional setting.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
e7208f13c0
Refs #25236 -- Removed {% ifequal %} and {% ifnotequal %} template tags per deprecation timeline.
2021-01-14 17:50:04 +01:00
2dd6a83d2d
Refs #12990 -- Removed django.contrib.postgres.forms.JSONField per deprecation timeline.
2021-01-14 17:50:04 +01:00
8fdb5a656a
Refs #12990 -- Removed django.contrib.postgres.fields.jsonb.KeyTransform/KeyTextTransform.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
7cb5712edc
Refs #12990 -- Removed django.contrib.postgres.fields.JSONField per deprecation timeline.
2021-01-14 17:50:04 +01:00
98ae3925e5
Refs #31534 -- Removed django.conf.urls.url() per deprecation timeline.
2021-01-14 17:50:04 +01:00
be6e468130
Refs #31359 -- Made get_random_string()'s length argument required.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
d992f4e3c2
Refs #31369 -- Removed models.NullBooleanField per deprecation timeline.
2021-01-14 17:50:04 +01:00
06eec31970
Refs #7098 -- Removed support for passing raw column aliases to order_by().
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
bf770cc825
Refs #8760 -- Removed "list" message for ModelMultipleChoiceField per deprecation timeline.
2021-01-14 17:50:04 +01:00
1adcf20385
Refs #31327 -- Removed providing_args argument for Signal per deprecation timeline.
2021-01-14 17:50:04 +01:00
4bb30fe5d5
Refs #26601 -- Made get_response argument required and don't accept None in middleware classes.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
6b4941dd57
Refs #27468 -- Removed support for the pre-Django 3.1 user sessions.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
d32a232fe9
Refs #27468 -- Removed support for the pre-Django 3.1 signatures in Signer and signing.dumps()/loads().
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
8250145a0c
Refs #31274 -- Removed support for the pre-Django 3.1 encoding format of sessions.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
66b4046d68
Refs #27468 -- Removed support for the pre-Django 3.1 password reset tokens.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
831a05b185
Refs #27604 -- Removed support for the pre-Django 3.1 encoding format in CookieStorage.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
d08977a0f0
Refs #30997 -- Removed HttpRequest.is_ajax() per deprecation timeline.
2021-01-14 17:50:04 +01:00
90c59b4e12
Refs #23433 -- Removed django-admin.py entry point per deprecation timeline.
2021-01-14 17:50:04 +01:00
68e3ca13d7
Refs #30988 -- Removed InvalidQuery exception per deprecation timeline.
2021-01-14 17:50:04 +01:00
396da8b94c
Refs #30841 -- Made isnull lookup raise ValueError for non-boolean values.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
12ac4916af
Refs #28622 -- Removed settings.PASSWORD_RESET_TIMEOUT_DAYS per deprecation timeline.
2021-01-14 17:50:04 +01:00
9e456f3166
Refs #30747 -- Removed django.utils.http.is_safe_url() per deprecation timeline.
2021-01-14 17:50:04 +01:00
157ab32f34
Refs #27753 -- Removed django.utils.text.unescape_entities() per deprecation timeline.
2021-01-14 17:50:04 +01:00
5e33ec80d1
Refs #30158 -- Made alias argument required in signature of Expression.get_group_by_cols() subclasses.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
d134b0b93e
Refs #15902 -- Stopped set_language() storing user's language in the session.
...
Per deprecation timeline.
2021-01-14 17:50:04 +01:00
52a238ddf2
Refs #30165 -- Removed ugettext(), ugettext_lazy(), ugettext_noop(), ungettext(), and ungettext_lazy() per deprecation timeline.
2021-01-14 17:50:04 +01:00
810f037b29
Refs #27753 -- Removed django.utils.encoding.force_text() and smart_text() per deprecation timeline.
2021-01-14 17:50:04 +01:00
88ed1c8d08
Refs #27753 -- Removed django.utils.http urllib aliases per deprecation timeline.
2021-01-14 17:50:04 +01:00
b7dd89ed53
Removed versionadded/changed annotations for 3.1.
2021-01-14 17:50:04 +01:00
8774b1144c
Added stub release notes for 4.0.
2021-01-14 17:50:04 +01:00
f20a622aea
Bumped version; master is now 4.0 pre-alpha.
2021-01-14 17:50:04 +01:00
75182a800a
Removed empty sections and adjusted 3.2 release notes.
2021-01-14 14:58:28 +01:00
db971f63ab
Updated django-admin man page for Django 3.2.
2021-01-14 14:58:28 +01:00
76ae6ccf85
Fixed #31358 -- Increased salt entropy of password hashers.
...
Co-authored-by: Florian Apolloner <florian@apolloner.eu>
2021-01-14 11:20:28 +01:00
7072bff1fd
Fixed cross-link in CBV topic documentation.
2021-01-14 11:17:59 +01:00
ffe756d624
Refs #26167 -- Changed default value of DatabaseFeatures.supports_expression_indexes to True.
2021-01-14 08:32:26 +01:00
b5cef91a91
Fixed #31259 -- Added admin dark theme.
2021-01-14 08:27:29 +01:00
9204485396
Fixed #16117 -- Added decorators for admin action and display functions.
...
Refs #25134 , #32099 .
2021-01-13 17:19:22 +01:00
83fcfc9ec8
Fixed #26167 -- Added support for functional indexes.
...
Thanks Simon Charette, Mads Jensen, and Mariusz Felisiak for reviews.
Co-authored-by: Markus Holtermann <info@markusholtermann.eu>
2021-01-13 11:47:50 +01:00
c412d9af7e
Fixed #32291 -- Added fixtures compression support to dumpdata.
2021-01-12 15:47:58 +01:00
ba31b01034
Fixed #31747 -- Fixed model enumeration via admin URLs.
...
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2021-01-12 14:37:56 +01:00
3071660acf
Fixed #29010 , Fixed #29138 -- Added limit_choices_to and to_field support to autocomplete fields.
...
* Fixed #29010 -- Added limit_choices_to support to autocomplete fields.
* Fixed #29138 -- Allowed autocomplete fields to target a custom
to_field rather than the PK.
2021-01-12 11:37:38 +01:00
ba3fb2e4d0
Refs #32311 -- Fixed CSRF_FAILURE_VIEW system check errors code.
2021-01-12 11:22:13 +01:00
fdc3d9dcaf
Removed unused import in docs/ref/models/expressions.txt. ( #13879 )
2021-01-12 10:51:38 +01:00
64331419c8
Fixed #32311 -- Added system check for CSRF_FAILURE_VIEW setting.
2021-01-12 09:44:36 +01:00
02391bc98c
Fixed #32313 -- Corrected QuerySet.in_bulk() signature.
2021-01-11 08:00:49 +01:00
4794a0e35f
Fixed typo in docs/internals/contributing/writing-code/coding-style.txt.
2021-01-09 20:18:00 +01:00
2d6179c819
Fixed #32191 -- Made CookieStorage use RFC 6265 compliant format.
...
Co-authored-by: Craig Smith <hello@craigiansmith.com.au>
2021-01-07 13:00:53 +01:00
3eb98743dc
Fixed #32315 -- Doc'd FieldFile.path.
2021-01-07 12:51:59 +01:00
0a802233ec
Fixed #32018 -- Extracted admin colors into CSS variables.
...
Defined all colors used in the admin CSS as variables. Implemented the
following standardizations and accessibility improvements while at it:
- Improved the contrast of text to not use ratios of less than 3:1 anymore.
- Most hover states already used desaturated and darkened colors.
Changed object tools to follow the same rule instead of showing the
primary color on hover.
Various places used similar colors; those have been merged with the goal
of reducing the count of CSS variables. Contrasts have been improved in
a few places.
- Many borders used slightly different colors (e.g. #eaeaea vs. #eee)
- Help texts used #999 , this has been changed to --body-quiet-color
(#666 ) which has a better contrast.
Introduced fast color transitions on links and buttons.
2021-01-07 10:07:19 +01:00
102d92fc09
Refs #32191 -- Added Signer.sign_object()/unsign_object().
...
Co-authored-by: Craig Smith <hello@craigiansmith.com.au>
2021-01-06 20:16:47 +01:00
415f50298f
Fixed #32231 -- Allowed passing None params to QuerySet.raw().
2021-01-05 10:37:11 +01:00
2d6c9b97bc
Fixed #32310 -- Fixed note about reverse accessors for intermediate table for self-referential ManyToManyField.
2021-01-04 20:16:07 +01:00
966ed414b2
Added stub release notes for 3.1.6.
2021-01-04 08:58:03 +01:00
767917ed49
Added release date for 3.1.5.
2021-01-04 08:31:51 +01:00
Mariusz Felisiak
Rust Saiargaliev
Girish Sontakke
Slava Skvortsov
Nick Pope
Simon Charette
Raffaele Salmaso
David Smith
Jordi Castells
Hasan Ramezani
Carlton Gibson
Florian Apolloner
Susan Wright
Tim Graham
Carlton Gibson
David Wobrock
Adam Johnson
Konstantin Alekseev
Zain Patel
Clumart.G
Abhyudai
Tobias Bengfort
Arthur Jovart
Iuri de Silvio
Claude Paroz
girishsontakke
Hugo Cachitas
Maxim Milovanov
William Schwartz
bankc
Chris Jerdonek
arcanemachine
Nick Pope
John
sreehari1997
Simon Willison
Jannis Vajen
Florian Demmer
tim-mccurrach
Baptiste Mispelon
kshitijraghav
Daniyal
Jozef
Markus Holtermann
Johan Schiff
Jacob Walls
GabbyPrecious
Jack Aitken
Jacob Walls
Camilo Nova
Hannes Ljungberg
Johannes Wilm
manav014
Ramon Saraiva
ThinkChaos
Anil Khatri
Amankumar Singh
Jim Xie
Dan Swain
Brad Solomon
Denis Skulimovskiy
Timothy McCurrach
Jerin Peter George
Jack
Matthias Kestenholz
muskanvaswan
Paul Ganssle
Jon Moroney
Carles Pina Estany
mimi89999
Hannes Ljungberg
Paolo Melchiorre
Jon Dufresne
Johannes Maron
hashlash
Alexander Lyabah
Fabio Sangiovanni