mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-07-19 00:59:17 +00:00
Code Issues 32 Releases Wiki Activity
27,489 Commits 29 Branches 451 Tags
Commit Graph

3417 Commits

Author SHA1 Message Date
Simon Charette
302a4ff1e8 [3.0.x] Fixed CVE-2019-19844 -- Used verified user email for password reset requests. 
Backport of 5b1fbcef7a8bec991ebe7b2a18b5d5a95d72cb70 from master.

Co-Authored-By: Florian Apolloner <florian@apolloner.eu>
 2019-12-18 09:14:44 +01:00
Hasan Ramezani
6cb30414bc [3.0.x] Fixed #31069, Refs #26431 -- Doc'd RegexPattern behavior change in passing optional named groups in Django 3.0. 
Backport of 9736137cdc4b7528a0aca17415dc9798660eed81 from master
 2019-12-12 14:49:13 +01:00
Hasan Ramezani
79c92fc7b6 [3.0.x] Fixed typos in 3.0 release notes and docs/ref/request-response.txt. 
Backport of 52018e1615edfafcb5170ba6b473132fe2f9a534 from master
 2019-12-12 10:19:38 +01:00
Mariusz Felisiak
f4baf2fdf6 [3.0.x] Refs #31073 -- Added release notes for 02eff7ef60466da108b1a33f1e4dc01eec45c99d. 
Backport of ec12c37384798093e359971c8980fe0c68d555bc from master
 2019-12-11 10:08:32 +01:00
Ali Mirlou
314cb3a976 [3.0.x] Fixed typo in docs/releases/3.0.1.txt. 
Backport of 663bb435deb1d6c407818dacfdcddd458e9b60c6 from master
 2019-12-09 07:58:33 +01:00
Alex Aktsipetrov
8af07712df [3.0.x] Fixed #31060 -- Reallowed window expressions to be used in conditions outside of queryset filters. 
Regression in 4edad1ddf6203326e0be4bdb105beecb0fe454c4.

Thanks utapyngo for the report.

Backport of bf12273db4e53779546e2ac7b65c0ce8e3c8a640 from master.
 2019-12-06 15:28:23 +01:00
Mariusz Felisiak
e986e49e66 [3.0.x] Fixed #31061 -- Ignored positional args in django.urls.resolve() when all optional named parameters are missing. 
Regression in 76b993a117b61c41584e95149a67d8a1e9f49dd1.

Thanks Claude Paroz for the report and Carlton Gibson for reviews.
Backport of 82a88d2f48e13ef5d472741d5ed1c183230cfe4c from master
 2019-12-06 09:33:45 +01:00
jsals1
7263c7710c [3.0.x] Fixed typo in docs/releases/3.0.txt. 
Backport of 1f62c008d1c983b4e5450a8764605aa6246e1cb4 from master
 2019-12-05 07:55:56 +01:00
Mariusz Felisiak
cc64b1d8f3 [3.0.x] Fixed #31059 -- Fixed typo in docs/releases/3.0.txt. 
Backport of 95ae1a9f8caf9c63c14c1a7c3e15594d3181b3ca from master
 2019-12-04 09:25:00 +01:00
Andrew Godwin
9243435b5e [3.0.x] Fixed #31056 -- Allowed disabling async-unsafe check with an environment variable. 
Backport of c90ab30fa1305481024b9c3c50b5a6ed6cd9a2f5 from master
 2019-12-03 17:50:24 +01:00
Mariusz Felisiak
7ec5962638 [3.0.x] Added stub release notes for 3.0.1. 
Backport of 908c67e719a54b8b612cb7df732126f42350f3fa from master
 2019-12-02 21:47:49 +01:00
Carlton Gibson
f3da0836ff [3.0.x] Finalized release notes for Django 3.0. 
Backport of 3b347a8a00273e9cc2fd9d4a5c61569c08398769 from master
 2019-12-02 11:55:06 +01:00
Carlton Gibson
d13ba5502d [3.0.x] Added CVE-2019-19118 to the security archive. 
Backport of 900ea762e5d1342e84a645483d05b90e6d908f2d from master
 2019-12-02 11:42:52 +01:00
Carlton Gibson
5fca551f12 [3.0.x] Removed issue reporter name from 2.1.15 and 2.2.8 release notes. 
Backport of 368b8d20aaa16f0ef763759a0a87d986ef460584 from master
 2019-12-02 09:48:14 +01:00
Carlton Gibson
46491e8095 [3.0.x] Added release dates for 2.1.15, 2.2.8 and 3.0. 
Backport of e31d1852671866f6e52d55f9b7925ecad711fcf5 from master
 2019-12-02 09:11:31 +01:00
Carlton Gibson
092cd66cf3 Fixed CVE-2019-19118 -- Required edit permissions on parent model for editable inlines in admin. 
Thank you to Shen Ying for reporting this issue.
 2019-12-02 08:57:44 +01:00
Mariusz Felisiak
db0cc4ae96 [3.0.x] Refs #30953 -- Added 2.1.15 release note for 0107e3d1058f653f66032f7fd3a0bd61e96bf782. 
Backport of 39e39d0ac1b720e7460ec8ccf45926c78edb2047 from master
 2019-12-02 08:12:10 +01:00
Mariusz Felisiak
f4ed6800bd [3.0.x] Fixed #30953 -- Made select_for_update() lock queryset's model when using "self" with multi-table inheritance. 
Thanks Abhijeet Viswa for the report and initial patch.
Backport of 0107e3d1058f653f66032f7fd3a0bd61e96bf782 from master
 2019-12-02 07:58:04 +01:00
Mariusz Felisiak
ca9144a4a8 [3.0.x] Fixed #31021 -- Fixed proxy model permissions data migration crash with a multiple databases setup. 
Regression in 98296f86b340c8c9c968375d59f1d3a3479e60c2.

Backport of e8fcdaad5c428878d0a5d6ba820d957013f75595 from master
 2019-11-29 11:10:36 +01:00
Sergey Fedoseev
314ad45c09 [3.0.x] Used 🎫 role in all tickets links. 
Backport of abc51d44afcb8482c64c0bb8c1022f11e7eb2bbb from master
 2019-11-26 14:43:27 +01:00
Baptiste Mispelon
3ed55606c4 [3.0.x] Fixed #31031 -- Fixed data loss in admin changelist view when formset's prefix contains regex special chars. 
Regression in b18650a2634890aa758abae2f33875daa13a9ba3.

Backport of 52936efacec4df05df2d9872c09c3332335bf21b from master
 2019-11-26 09:19:19 +01:00
Carlton Gibson
947f8e3485 [3.0.x] Fixed #31012 -- Reverted "Fixed #29056 -- Fixed HTML5 validation of required SelectDateWidget." 
This reverts commit f038214d917c982613f5a15db8dfe325b1f7479b.

The initial issue was incorrect. Django 2.2, and before, did not
generate invalid HTML as reported. With f03821 in place invalid HTML
was generated.

Thanks to Kevin Brown for follow-up report and investigation.
Backport of ee4a19053a32d41cdd79e087b1968980804ce658 from master
 2019-11-21 21:06:07 +01:00
Hasan Ramezani
6e3ef98413 [3.0.x] Fixed #30625 -- Doc'd cache.get()/delete() behavior change in Django 2.2. 
Backport of f69b32782e21642c6184162d888fcc17dd1dd85e from master
 2019-11-21 10:54:46 +01:00
Mariusz Felisiak
2ef484ba3b [3.0.x] Added stub release notes for 2.1.15. 
Backport of e9def97d1095efed15a109d82fe0498ebd56fa04 from master
 2019-11-19 12:44:43 +01:00
Mariusz Felisiak
9ad38d4089 [3.0.x] Refs #29926 -- Doc'd Python 3.8 compatibility in Django 2.2.x. 
Backport of b93a0e34d9b9b99d41103782b7e7aeabf47517e3 from master.
 2019-11-12 22:13:54 +01:00
Mariusz Felisiak
f375ad95fa [3.0.x] Added stub release notes for 2.2.8 release. 
Backport of 30359496a3f3d9af0b02afc334710f7e24c74f5b from master
 2019-11-12 14:42:15 +01:00
Stephen Rauch
76d293f3e6 [3.0.x] Refs #30183 -- Doc'd dropping support for sqlparse < 0.2.2. 
Support for sqlparse < 0.2.2 was broken in
782d85b6dfa191e67c0f1d572641d8236c79174c because is_whitespace property
was added in sqlparse 0.2.2.

Backport of 4b6db766ba4b613d317c87f87d1d63865b7424a4 from master
 2019-11-06 09:01:48 +01:00
Claude Paroz
48c263df29 [3.0.x] Added Uzbek language. 
Backport of 6ccb1b68bc22e4edc1562f0159e71631d6a256d9 from master
 2019-11-04 15:18:53 +01:00
Mariusz Felisiak
810dd8ad8d [3.0.x] Added release dates for 2.2.7, 2.1.14, and 1.11.26. 
Backport of 126cfefce2b59900138f2bf1ef6ad966cddc55d4 from master
 2019-11-04 08:26:18 +01:00
Carlton Gibson
dd2ca8b0ea [3.0.x] Fixed #30931 -- Restored ability to override Model.get_FIELD_display(). 
Thanks Sergey Fedoseev for the implementation idea.

Regression in a68ea231012434b522ce45c513d84add516afa60.

Backport of 2d38eb0ab9f78d68c083a5b78b1eca39027b279a from master
 2019-11-04 08:15:03 +01:00
Hannes Ljungberg
318d186d7e [3.0.x] Fixed #30903 -- Fixed migrations crash on PostgreSQL when adding Index with opclasses and ordering. 
Backport of fa5f3291e7f2611d53e64ab481ebe951b0161791 from master
 2019-10-24 09:51:33 +02:00
Mariusz Felisiak
4a756cbc38 [3.0.x] Fixed #30870 -- Fixed showing that RunPython operations are irreversible by migrate --plan. 
Thanks Hasan Ramezani for the initial patch and Kyle Dickerson for the
report.

Backport of 06d34aab7cfb1632a1538a243db81f24498525ff from master
 2019-10-14 11:43:15 +02:00
Louise Grandjonc
cf7ef5d258 [3.0.x] Fixed #30826 -- Fixed crash of many JSONField lookups when one hand side is key transform. 
Regression in 6c3dfba89215fc56fc27ef61829a6fff88be4abb.

Backport of 7d1bf29977bb368d7c28e7c6eb146db3b3009ae7 from master
 2019-10-11 11:51:14 +02:00
Mariusz Felisiak
0dede9e981 [3.0.x] Fixed typos in docs/releases/3.0.txt. 
Backport of 2a6f45e08e8cb8c7e5157915c378b453109424d2 from master
 2019-10-10 14:25:41 +02:00
Mariusz Felisiak
2624653bef [3.0.x] Added stub release notes for 1.11.26 and 2.1.14. 
Backport of 84322a29ce9b0940335f8ab3d60e55192bef1e50 from master
 2019-10-02 07:55:19 +02:00
Carlton Gibson
a135e1e16e [3.0.x] Added stub release notes for 2.2.7. 
Backport of e1c1eaf0c6f4d3d2f60513d20aa9b84b17d096ec from master
 2019-10-01 10:44:49 +02:00
Carlton Gibson
848abaab62 [3.0.x] Added release dates for 2.2.6, 2.1.13, and 1.11.25. 
Backport of 3826aed46d7d4310c2ab6777a4f92165ca4d8d4f from master
 2019-10-01 08:50:43 +02:00
Simon Charette
574154ef56 [3.0.x] Fixed #30769 -- Fixed a crash when filtering against a subquery JSON/HStoreField annotation. 
This was a regression introduced by 7deeabc7c7526786df6894429ce89a9c4b614086
to address CVE-2019-14234.

Thanks Tim Kleinschmidt for the report and Mariusz for the tests.

Backport of 6c3dfba89215fc56fc27ef61829a6fff88be4abb from master
 2019-09-16 08:53:02 +02:00
Mariusz Felisiak
7bd28727ad [3.0.x] Added stub release notes for 1.11.25 and 2.1.13. 
Backport of bd7e0f81f8590eadcb820c976ba03c9b75bbcad6 from master
 2019-09-16 07:43:27 +02:00
Nick Pope
4d72c14baf [3.0.x] Refs #27910 -- Improved documentation for model field choice enumeration types. 
Backport of 1c66767d4e472fea27798812817b8a47c6ae22b3 from master
 2019-09-13 15:38:27 +02:00
Carlton Gibson
1fa629cd8f [3.0.x] Added PBKDF2 hasher iteration increase to 3.0 release notes. 
Refs 06670015f7e55a8be8137dbd95b7f4c536c3782b

Backport of ea25bdc2b94466bb1563000bf81628dea4d80612 from master
 2019-09-12 17:25:39 +02:00
Simon Charette
34decdebf1 Fixed #30754 -- Prevented inclusion of aliases in partial index conditions. 
SQLite doesn't repoint table aliases in partial index conditions on table
rename which breaks the documented table alteration procedure.

Thanks Pēteris Caune for the report.
 2019-09-10 10:03:16 +02:00
Carlton Gibson
a624803514 Finalised release notes for 3.0 alpha release. 
* Removed empty sections
* Corrected some typos and wrapping errors.
 2019-09-10 09:58:42 +02:00
Vojtech Bocek
b1d37fea8f Fixed #28107 -- Added DatabaseFeatures.allows_group_by_selected_pks_on_model() to allow enabling optimization for unmanaged models. 2019-09-09 14:04:46 +02:00
Nick Pope
406dba04e1 Fixed #29406 -- Added support for Referrer-Policy header. 
Thanks to James Bennett for the initial implementation.
 2019-09-09 13:35:41 +02:00
Nick Pope
1edbb6c194 Refs #30426 -- Moved release notes into separate security section. 2019-09-09 13:35:31 +02:00
Johannes Hoppe
7254f1138d Refs #29444 -- Allowed returning multiple fields from INSERT statements on PostgreSQL. 
Thanks Florian Apolloner, Tim Graham, Simon Charette, Nick Pope, and
Mariusz Felisiak for reviews.
 2019-09-09 10:51:14 +02:00
Claude Paroz
05d0eca635 Fixed #30426 -- Changed X_FRAME_OPTIONS setting default to DENY. 2019-09-09 08:15:26 +02:00
Mariusz Felisiak
350123f38c
Moved release note for refs #30158 from deprecated to backwards incompatible changes. 2019-09-05 15:56:52 +02:00
Mariusz Felisiak
e2c6a0858d Fixed #30750 -- Added support for check constraints on MySQL 8.0.16+. 2019-09-05 09:18:34 +02:00