1
0
mirror of https://github.com/django/django.git synced 2025-08-23 10:19:13 +00:00

33491 Commits

Author SHA1 Message Date
Sarah Boyce
a3b1107a49 [5.2.x] Bumped version for 5.2.5 release. 5.2.5 2025-08-06 10:04:41 +02:00
Sarah Boyce
0489f54e8b [5.2.x] Added release date for 5.2.5.
Backport of 8999b0e2bf62ffa1ea19995508712ed8eda2cc14 from main.
2025-08-06 09:59:50 +02:00
David Smith
a9c7d4b703 [5.2.x] Refs #36485 -- Grouped docs checks under a unified make check target.
Added a new 'check' rule to the docs Makefile which runs both the black
and spelling checks.

Backport of 7f9bf357feac06bb34017e1f6c7a7730b1991ede from main.
2025-08-05 12:20:13 -03:00
David Smith
5ad6d43cd9 [5.2.x] Refs #34140 -- Added dedicated code block formatting section in docs/internals/contributing/writing-documentation.txt.
Backport of cba73281966c816824c9bfa028a1bf44e188ded2 from main.
2025-08-05 12:20:04 -03:00
jkhall81
bdc3f9e350 [5.2.x] Fixed #36530 -- Extended fields.E347 to check for ManyToManyField involving CompositePrimaryKey on either side.
Thanks to Jacob Walls for the report.

Backport of 2013092b693be0ebdf36f41dc61615a2de1bbe31 from main.
2025-08-05 08:46:56 -03:00
Natalia
f01ceae477 [5.2.x] Fixed #36535 -- Ensured compatibility with docutils 0.19 through 0.22.
Regression in 65ab92f6a83644bbb555d0eff3a02d8d9301aba4.

Backport of 9cec8d9f55d90fbc162fde23d6ea7a34e322fcae from main.
2025-08-04 21:53:33 -03:00
Adam Zapletal
5ca58ce3d0 [5.2.x] Corrected assertNumQueries() example in docs/topics/testing/tools.txt.
Backport of dca8284a376128c64bd0e0792ad12391ae3e7202 from main.
2025-08-04 15:08:53 +02:00
Simon Charette
b3bb7230e1 [5.2.x] Fixed #34871, #36518 -- Implemented unresolved lookups expression replacement.
This allows the proper resolving of lookups when performing constraint
validation involving Q and Case objects.

Thanks Andrew Roberts for the report and Sarah for the tests and review.

Backport of 079d31e698fa08dd92e2bc4f3fe9b4817a214419 from main.
2025-08-04 09:42:32 +02:00
Simon Charette
e5ccb69bc3 [5.2.x] Fixed #36198 -- Implemented unresolved transform expression replacement.
This allows the proper resolving of F("field__transform") when
performing constraint validation.

Thanks Tom Hall for the report and Sarah for the test.

Prerequisite for #36518.

Backport of fc303551077c3e023fe4f9d01fc1b3026c816fa4 from main.
2025-08-04 09:41:29 +02:00
Mariusz Felisiak
5aefd005fc [5.2.x] Fixed writer_name deprecation warning in docutils 0.22+.
Backport of 65ab92f6a83644bbb555d0eff3a02d8d9301aba4 from main.
2025-07-29 21:50:54 -03:00
Simon Charette
3031c512f0 [5.2.x] Fixed #36522 -- Added support for filtering composite pks using a tuple of expressions.
Thanks Jacob Walls for the report, and Sarah Boyce and Mariusz Felisiak
for reviews.

Backport of 0a4999b422702c64e21f5a10a4d60300b7074401 from main.
2025-07-28 16:40:08 -03:00
Jordan Bae
28f33f50b2 [5.2.x] Moved manual testing instructions from intro to submitting patches docs.
The section on manual testing, including how to use a local checkout of
Django, is moved from the contribution intro to the submitting patches
docs. This makes it easier for reviewers and authors to follow best
practices.

Backport of fdeca380724d523330db9d816c4cda50cda320fd from main.
2025-07-28 09:02:15 -03:00
Mike Edmunds
c1356333b6 [5.2.x] Fixed typo in docs/topics/email.txt.
Backport of f551aeb003ee7f43efffb0e312b014362ce1d7c4 from main.
2025-07-25 13:32:23 +02:00
Thibaud Colas
6e71386118 [5.2.x] Added accessibility guidelines for contributors.
Backport of 5527df91921b54b9fd1eb9aca3aabe91ec58a9c7 from main.
2025-07-23 16:42:23 +02:00
Mike Edmunds
6966adc519 [5.2.x] Fixed get_connection() signature in docs/topics/email.txt.
django.core.mail.get_connection() has always supported only variable
keyword arguments (never variable positional arguments).

Backport of 5289ce65b9a1963707767cc11c476679ab445135 from main.
2025-07-17 14:02:01 -03:00
Natalia
a76587531b [5.2.x] Added SimpleTestCase.enterContext() on Python < 3.11.
This reverts commit 47a618d45c6e40dd59f4cdd46fd5fc7d11626f6d and uses
a solution similar to ed4f83782d9f3404ad600f6131ef78244ff1e162 instead.
2025-07-16 18:11:53 -03:00
nessita
fcc7c12f80 [5.2.x] Fixed GitHub Action that checks commit prefixes to fetch PR head correctly.
Backport of 8499fba0e18826a77fe32cbc13a3d951d9ca8924 from main.
2025-07-16 15:37:08 -03:00
nessita
c1883c3b20 [5.2.x] Added GitHub Action to enforce stable branch commit message prefix.
Backport of 10386fac00be55e73279459f00f1959c3ef30a1c from main.
2025-07-16 08:38:50 -03:00
Clifford Gama
1c2e11c7f4 [5.2.x] Fixed typo in docs/ref/utils.txt.
Backport of ac2d907f459b2cb7ddea7451764e7020ffee08e6 from main
2025-07-13 19:38:44 +02:00
Tim Schilling
e5080fc5e9 [5.2.x] Added Django ecosystem page to the documentation.
Backport of 395e498553e4e01da1ba0ddb5c4708ad9cb8a16a from main
2025-07-13 15:06:58 +02:00
Simon Charette
3df1ad57bf [5.2.x] Fixed #36502 -- Restored UNNEST strategy for foreign key bulk inserts on PostgreSQL.
Regression in 764af7a3d6c0b543dcf659a2c327f214da768fe4.

Backport of 0fe218842e0e396e3ab3982bd21227968a9e7fd8 from main.
2025-07-10 18:36:01 +02:00
Natalia
abc10ab7f9 [5.2.x] Added release date for 5.2.4.
Backport of 94ebcf8366d62f6360851b40e9c4dfe3f71d202f from main.
2025-07-02 15:56:47 -03:00
Natalia
4da3446c92 [5.2.x] Added stub release notes for 5.2.5.
Backport of 7ab6b863da9c8c41dd86bfd1ede1e48e79c719bd from main.
2025-07-02 15:51:38 -03:00
Natalia
1a5c75d8cd [5.2.x] Post-release version bump. 2025-07-02 15:44:20 -03:00
Natalia
c941d0deec [5.2.x] Bumped version for 5.2.4 release. 5.2.4 2025-07-02 15:42:00 -03:00
Natalia
47a618d45c Fixed AttributeError for enterContext() on Python < 3.11.
On Jenkins with Python 3.10:

Traceback (most recent call last):
  File "[...]/python3.10/tests/composite_pk/test_filter.py", line 559, in setUp
    self.enterContext(feature_patch)
AttributeError: 'CompositePKFilterTupleLookupFallbackTests' object has no attribute 'enterContext'
2025-07-02 10:25:21 -03:00
Simon Charette
a150160c9f [5.2.x] Fixed #36464 -- Fixed "__in" tuple lookup on backends lacking native support.
When native support for tuple lookups is missing in a DB backend, it can
be emulated with an EXISTS clause. This is controlled by the backend
feature flag "supports_tuple_lookups".

The mishandling of subquery right-hand side in `TupleIn` (added to
support `CompositePrimaryKey` in Refs #373) was likely missed because
the only core backend we test with the feature flag disabled
(Oracle < 23.4) supports it natively.

Thanks to Nandana Raol for the report, and to Sarah Boyce, Jacob Walls,
and Natalia Bidart for reviews.

Backport of 192bc7a7be92e20cc250907fb4083df689715679 from main.
2025-06-30 20:16:08 -03:00
Jake Howard
db5da3c91c [5.2.x] Clarified that only latest dependency versions are valid for security reports.
Backport of bc1bfe12b613334bd625aeb36fd44af96d186c10 from main.
2025-06-18 11:05:15 -03:00
nessita
359af3779a [5.2.x] Added guidance on AI-assisted security reports to docs/internals/security.txt.
Co-authored-by: Shai Berger <shai@platonix.com>
Co-authored-by: Mike Edmunds <medmunds@gmail.com>

Backport of 0f60102444d8a2cfb662a7b11b3911b52567ee54 from main.
2025-06-17 11:45:48 -03:00
Clifford Gama
1d89691c74 [5.2.x] Fixed #36453 -- Made When.condition resolve with for_save=False.
Value(None, JSONField()) when used in When.condition incorrectly resolved with
for_save=True, resulting in the value being serialized as SQL NULL instead of
JSON null.

Regression in c1fa3fdd040718356e5a3b9a0fe699d73f47a940.

Thanks to Thomas McKay for the report, and to David Sanders and Simon Charettes
for the review.

Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Backport of 104cbfd44b9eff010daf0ef0e1ce434385855b13 from main.
2025-06-16 10:41:24 +02:00
Jake Howard
4de4edf2c0 [5.2.x] Fixed #36447 -- Selected preferred media type based on quality.
When matching which entry in the `Accept` header should be used for
a given media type, the specificity matters. However once those are
resolved, only the quality matters when selecting preference.

Regression in c075508b4de8edf9db553b409f8a8ed2f26ecead.

Thank you to Anders Kaseorg for the report.

Backport of 12c1557060fc94fe5e1fbddc4578a4e29d38f77c from main.
2025-06-16 09:27:46 +02:00
Sarah Boyce
f5cc6a888b [5.2.x] Corrected jsonfield fieldlookup references.
Backport of 8e2249bc79a74d96f9ad20c89f82a89c78d4b648 from main.
2025-06-13 09:53:30 +02:00
Sulove Bista
538616136b [5.2.x] Fixed #36463 -- Fixed grammar in docs/intro/contributing.txt.
Backport of e80b33ae4d6f93375b10b2fe50bd6f588f1246ad from main.
2025-06-12 15:14:52 -03:00
ruvilonix
e3b2370795 [5.2.x] Fixed #36454 -- Fixed typo in docs/intro/tutorial08.txt.
Backport of 87a5ae6c5b55da922e47226e6d54c6d26466a0bd from main.
2025-06-12 09:56:39 +02:00
junghwan16
91569cffec [5.2.x] Fixed #36425 -- Standardized integer fields descriptions.
Backport of 091f66e51aa900f7d7650529621bdc8e4b0dee68 from main.
2025-06-11 10:00:21 +02:00
Sarah Boyce
329a5c9228 [5.2.x] Added follow-up to CVE-2025-48432 to security archive.
Backport of 2714bc3f2c8675d32caae764c874ac381c836c7f from main.
2025-06-10 15:11:54 +02:00
Sarah Boyce
69fe089f00 [5.2.x] Added stub release notes for 5.2.4.
Backport of 7fcc7b1a0cc7e7c542b37a094731bbf632636f1f from main.
2025-06-10 12:31:19 +02:00
Sarah Boyce
6979ee39ae [5.2.x] Post-release version bump. 2025-06-10 11:47:04 +02:00
Sarah Boyce
15883bc669 [5.2.x] Bumped version for 5.2.3 release. 5.2.3 2025-06-10 11:34:02 +02:00
Jacob Walls
264003146f [5.2.x] Refs #373 -- Doc'd that on_delete is ignored for ForeignObject.
Backport of 76e1ca77bc9cdfa12df9541c32b75af926dbdfea from main.
2025-06-10 09:48:25 +02:00
Jacob Walls
6f99c8856d [5.2.x] Fixed #36449 -- Fixed field types in example model using ForeignObject.
Backport of 59427547692b433bef3640a96cc0f6601f57532f from main.
2025-06-10 09:47:37 +02:00
Mariusz Felisiak
aec11dbb4c [5.2.x] Refs #36419 -- Fixed BulkUpdateTests.test_json_field_sql_null() crash on Oracle.
Follow up to c1fa3fdd040718356e5a3b9a0fe699d73f47a940.

Backport of f5441e42da691ee2e7aeeb9be70f98e2bce6d17d from main.
2025-06-10 08:42:37 +02:00
Natalia
cc5079730a [5.2.x] Fixed #36446 -- Restored "q" in internal MediaType.params property.
The "q" key was removed while addressing ticket #36411. Despite
`MediaType.params` is undocumented and considered internal, it was used
in third-party projects (Zulip reported breakage), so this work restored
the `q` key in `params`.

Thanks Anders Kaseorg for the report.

Regression in c075508b4de8edf9db553b409f8a8ed2f26ecead.

Backport of cf5f36bf903a2854f5e395149cee707115b83744 from main.
2025-06-09 17:39:25 -03:00
Clifford Gama
6fc620b4a8 [5.2.x] Fixed #36419 -- Ensured for_save was propagated when resolving expressions.
The for_save flag wasn't properly propagated when resolving expressions, which
prevented get_db_prep_save() from being called in some cases. This affected
fields like JSONField where None would be saved as JSON null instead of SQL NULL.

Regression in 00c690efbc0b10f67924687f24a7b30397bf47d9.

Thanks to David Sanders and Simon Charette for reviews.

Co-authored-by: Adam Johnson <me@adamj.eu>

Backport of c1fa3fdd040718356e5a3b9a0fe699d73f47a940 from main.
2025-06-06 17:41:51 +02:00
Jake Howard
8fcc83953c [5.2.x] Refs CVE-2025-48432 -- Prevented log injection in remaining response logging.
Migrated remaining response-related logging to use the `log_response()`
helper to avoid potential log injection, to ensure untrusted values like
request paths are safely escaped.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 957951755259b412d5113333b32bf85871d29814 from main.
2025-06-06 09:07:12 -03:00
Natalia
9d7fc9eb1c [5.2.x] Refs CVE-2025-48432 -- Made SuspiciousOperation logging use log_response() for consistency.
Backport of ff835f439cb1ecd8d74a24de12e3c03e5477dc9d from main.
2025-06-06 09:07:06 -03:00
Natalia
c042af7147 [5.2.x] Refactored logging_tests to reuse assertions for log records.
Backport of 9d72e7daf7299ef1ece56fd657a02f77a469efe9 from main.
2025-06-06 09:06:57 -03:00
Sarah Boyce
5901cfe591 [5.2.x] Updated translations from Transifex. 2025-06-06 13:55:05 +02:00
Natalia
f11fb10766 [5.2.x] Improved "fetch" translations helper to restrict the resulting set by date.
Backport of e715b07cf32f9d913f10efe87db7b4b0d793237a from main.
2025-06-05 12:04:50 -03:00
Natalia
48a82d44d8 [5.2.x] Added CVE-2025-48432 to security archive.
Backport of 51923c576a596ad00214e44028f9dee9748bce95 from main.
2025-06-04 10:58:40 -03:00