1
0
mirror of https://github.com/django/django.git synced 2025-10-26 07:06:08 +00:00
Commit Graph

14279 Commits

Author SHA1 Message Date
Mariusz Felisiak
a8c9b5b263 [5.2.x] Refs #35844 -- Doc'd Python 3.14 compatibility.
Backport of 56977b466c from main.
2025-10-17 20:05:19 +02:00
aj2s
83f6fe810d [5.2.x] Fixed #36669 -- Doc'd that negative indexes are not supported in F() slices.
Backport of f715bc8990 from main.
2025-10-17 10:22:40 -04:00
Jacob Walls
8baee531d4 [5.2.x] Fixed #36648, Refs #33772 -- Accounted for composite pks in first()/last() when aggregating.
Backport of 02eed4f378 from main.
2025-10-14 15:50:26 -04:00
arsalan64
94cbd67d9e [5.2.x] Fixed #36625 -- Mentioned exit() in tutorial's instruction to restart the shell.
Backport of 92d0c21e69 from main.
2025-10-13 16:23:12 -04:00
Simon Charette
88ef9ea6c5 [5.2.x] Fixed #36646 -- Added compatibility for oracledb 3.4.0.
The Database.Binary, Date, and Timestamp attributes were changed from
aliases to bytes, datetime.date, and datetime.datetime to factory
functions in oracle/python-oracledb@869a887819
which made their usage inadequate for isinstance checks.

Thanks John Wagenleitner for the report and Natalia for the triage.

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of 315dbe675d from main
2025-10-11 19:03:27 +02:00
Mariusz Felisiak
713e9d8f53 [5.2.x] Corrected admin check IDs in docs.
Backport of 1167cd1d63 from main
2025-10-09 20:03:00 +02:00
Natalia
80b9c8f529 [5.2.x] Fixed #36526 -- Doc'd QuerySet.bulk_update() memory usage when batching.
Thanks Simon Charette for the review.

Backport of 608d3ebc88 from main.
2025-10-08 18:33:02 -03:00
Michiel W. Beijen
c05c5b80a6 [5.2.x] Fixed #35961 -- Migrated license metadata in pyproject.toml to conform PEP 639.
See https://peps.python.org/pep-0639/ and
https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license-and-license-files.

Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>

Backport of 96a7a65216 from main.
2025-10-08 16:42:36 -03:00
Mariusz Felisiak
084cbe1217 [5.2.x] Added missing backticks in docs/ref/models/fields.txt.
Backport of 4a8ca8bd69 from main
2025-10-08 11:01:02 +02:00
Dani Fornons
2d2e1a6a9d [5.2.x] Fixed #36636, Refs #15902 -- Removed session-based storage reference from set_language() docs.
Backport of 2514857e3f from main.
2025-10-03 15:18:00 -04:00
Jacob Walls
41bcb54bff [5.2.x] Refs #36143, #28596 -- Avoided mentioning exact query parameter limit in bulk_create() docs.
Backport of 0a09c60e97 from main.
2025-10-03 11:27:05 -04:00
Mariusz Felisiak
2fc538af33 [5.2.x] Rewrapped security archive at 79 chars.
Backport of 1499c95d99 from main.
2025-10-01 16:25:11 -04:00
Jacob Walls
071afc3d01 [5.2.x] Added CVE-2025-59681 and CVE-2025-59682 to security archive.
Backport of 43d84aef04 from main.
2025-10-01 10:39:44 -04:00
Jacob Walls
f94449ef69 [5.2.x] Added stub release notes for 5.2.8.
Backport of 1324d9037e from main.
2025-10-01 10:34:11 -04:00
Sarah Boyce
ed8fc39d77 [5.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract().
Thanks stackered for the report.

Follow up to 05413afa8c.

Backport of 924a0c092e from main.
2025-10-01 08:25:20 -04:00
Mariusz Felisiak
52fbae0a4d [5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB.
Thanks sw0rd1ight for the report.

Follow up to 93cae5cb2f.

Backport of 41b43c74bd from main.
2025-10-01 08:24:18 -04:00
Jacob Walls
1794cbf961 [5.2.x] Made cosmetic edits to 5.2.7 release notes.
Backport of 6c82b0bc91 from main.
2025-09-30 16:34:43 -04:00
okaybro
81625a141e [5.2.x] Fixed #36587 -- Clarified usage of list.insert() for upload handlers.
Thanks Baptiste Mispelon for the report

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of afe6634146 from main.
2025-09-29 14:51:44 +02:00
Samriddha9619
6f3813e4b6 [5.2.x] Fixed #35877, Refs #36128 -- Documented unique constraint when migrating a m2m field to use a through model.
Backport of daba609a9b from main.
2025-09-29 09:00:19 +02:00
Mariusz Felisiak
10a2d3b837 [5.2.x] Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25.
Backport of 00174507f8 from main.
2025-09-24 11:41:04 -04:00
Jacob Walls
b2773a39a3 [5.2.x] Refs #25508 -- Used QuerySet.__repr__ in docs/ref/contrib/postgres/search.txt.
Backport of efb96138b4 from main.
2025-09-23 10:09:18 -04:00
CodingWithSaksham
7554c54e5f [5.2.x] Fixed #36581 -- Updated serialization examples from XML to JSON.
Backport of 762d3be8c5 from main.
2025-09-18 15:47:20 +02:00
Natalia
2a2936c3e6 [5.2.x] Updated translations from Transifex. 2025-09-18 09:50:46 -03:00
antoliny0919
d8e9dec1ad [5.2.x] Fixed #36601 -- Fixed color contrast of FilteredSelectMultiple widget chosen labels in TabularInlines.
Regression in a0f50c2a48.

Backport of 1e7728888d from main.
2025-09-17 10:01:37 +02:00
Jacob Walls
1dbf415a18 [5.2.x] Fixed typo in docs/ref/contrib/contenttypes.txt.
Backport of c48904a225 from main.
2025-09-13 11:29:40 -04:00
Mridul Dhall
b8df1eb7c2 [5.2.x] Fixed #36597 -- Corrected directives for functions from email module in docs.
Thanks Mike Edmunds for the report.

Backport of e183d6c26c from main.
2025-09-12 18:59:58 +02:00
Salman
adc80dd81e [5.2.x] Fixed #36486 -- Added MongoDB to list of third-party DB backends.
Backport of 46fdeb1373 from main
2025-09-09 08:24:11 +02:00
Jake Howard
fbced43cf8 [5.2.x] Refs #36588 -- Warned about using external templates in startapp/startproject commands.
Clarified that custom templates provided via `--template` for `starapp`
and `startproject` are used as-is, adding a warning that malicious or
poorly constructed templates may introduce security issues.

Backport of 4e7a991c12 from main.
2025-09-04 13:38:31 -03:00
Mariusz Felisiak
e2d83a2076 [5.2.x] Added missing backticks in docs/releases/security.txt.
Backport of 686a8a62ae from main
2025-09-04 11:10:33 +02:00
Sarah Boyce
18c6bc5db2 [5.2.x] Added CVE-2025-57833 to security archive.
Backport of f0c05a40d2 from main.
2025-09-03 15:28:27 +02:00
Sarah Boyce
db13f7fbcb [5.2.x] Added stub release notes for 5.2.7.
Backport of ab7c7dd99b from main.
2025-09-03 15:22:02 +02:00
Jake Howard
4c044fcc86 [5.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL injection in column aliases.
Thanks Eyal Gabay (EyalSec) for the report.

Backport of 5171171709 from main.
2025-09-03 13:15:55 +02:00
Sarah Boyce
e87ca3d6fa [5.2.x] Made cosmetic edits to 5.2.6 release notes.
Backport of d044e25dc2 from main.
2025-09-03 12:19:46 +02:00
Clifford Gama
ebec2c9323 [5.2.x] Removed unused import in docs/ref/models/expressions.txt example.
Backport of 21603c5b50 from main
2025-08-31 08:16:09 +02:00
SaJH
ace59cb83b [5.2.x] Fixed #36431 -- Returned tuples for multi-column ForeignObject in values()/values_list().
Thanks Jacob Walls and Simon Charette for tests.

Signed-off-by: SaJH <wogur981208@gmail.com>

Backport of bb7a7701b1 from main
2025-08-29 15:36:09 -04:00
Mustafa Pirbhai
16a12a9799 [5.2.x] Fixed #35831 -- Documented the model form meta API in model form reference docs.
Co-authored-by: Jonathan <3218047+jernwerber@users.noreply.github.com>
Co-authored-by: Mustafa <117516335+mspirbhai@users.noreply.github.com>

Backport of 183fcebf88 from main.
2025-08-29 09:00:37 +02:00
Sarah Boyce
51753bc809 [5.2.x] Added stub release notes and release date for 5.2.6, 5.1.12, and 4.2.24.
Backport of 4c71e33440 from main.
2025-08-27 16:07:46 +02:00
Jacob Walls
a486455125 [5.2.x] Corrected definition of "needsinfo" triage stage in contributing guide.
Backport of 66082a7dac from main
2025-08-27 09:22:26 -04:00
Jacob Walls
f8e572e843 [5.2.x] Removed reference to flake8 file exclusions.
Obsolete since 41384812ef.
(six was removed in 9285926295fbfc86b70e7be8d595d4cfbe7895b8.)
Backport of 165ad74c57 from main
2025-08-23 20:06:54 +02:00
Mariusz Felisiak
9c9ed6fd7a [5.2.x] Refs #35530 -- Corrected deprecation message in auth.alogin().
Follow up to ceecd518b1.

Backport of b3166e1e15 from main.
2025-08-22 16:15:42 +02:00
Mariusz Felisiak
98972b53aa [5.2.x] Corrected release notes of calling format_html() without arguments.
Backport of bcddf641ae from main
2025-08-20 07:35:30 +02:00
mengxun
38844c348b [5.2.x] Fixed spelling of "logged-in" when used as an adjective in docs.
Backport of f5c944b314 from main.
2025-08-19 12:43:52 -03:00
David Sanders
4926591343 [5.2.x] Aligned format of constraint examples in docs/ref/models/constraints.txt.
Backport of fda3c1712a from main.
2025-08-13 09:16:06 +02:00
Rohit
1d9f6c3270 [5.2.x] Corrected code examples in topics docs.
Backport of fa804d0d14 from main.
2025-08-11 10:14:43 +02:00
Sarah Boyce
ad836aa0c5 [5.2.x] Added stub release notes for 5.2.6.
Backport of 0bff53b413 from main.
2025-08-06 10:36:46 +02:00
Sarah Boyce
0489f54e8b [5.2.x] Added release date for 5.2.5.
Backport of 8999b0e2bf from main.
2025-08-06 09:59:50 +02:00
David Smith
a9c7d4b703 [5.2.x] Refs #36485 -- Grouped docs checks under a unified make check target.
Added a new 'check' rule to the docs Makefile which runs both the black
and spelling checks.

Backport of 7f9bf357fe from main.
2025-08-05 12:20:13 -03:00
David Smith
5ad6d43cd9 [5.2.x] Refs #34140 -- Added dedicated code block formatting section in docs/internals/contributing/writing-documentation.txt.
Backport of cba7328196 from main.
2025-08-05 12:20:04 -03:00
jkhall81
bdc3f9e350 [5.2.x] Fixed #36530 -- Extended fields.E347 to check for ManyToManyField involving CompositePrimaryKey on either side.
Thanks to Jacob Walls for the report.

Backport of 2013092b69 from main.
2025-08-05 08:46:56 -03:00
Natalia
f01ceae477 [5.2.x] Fixed #36535 -- Ensured compatibility with docutils 0.19 through 0.22.
Regression in 65ab92f6a8.

Backport of 9cec8d9f55 from main.
2025-08-04 21:53:33 -03:00