12682 Commits

Author SHA1 Message Date
Carlton Gibson
c33413589d [4.0.x] Updated release date for version 4.0.3.
Backport of 47143e27d4402b62068bf9eb84aa6dd93d3d4678 from main
2022-03-01 09:33:34 +01:00
Mariusz Felisiak
82f25266bf [4.0.x] Fixed #33547 -- Fixed error when rendering invalid inlines with readonly fields in admin.
Regression in de95c826673be9ea519acc86fd898631d1a11356.

Thanks David Glenck for the report.
Backport of 445b075def2c037b971518963b70ce13df5e88a2 from main
2022-03-01 08:10:35 +01:00
Vaarun Sinha
be4a106930 [4.0.x] Refs #33476 -- Mentioned black in docs about pre-commit checks.
Backport of fe3518d25edd69b782339729080b0295a8a33952 from main
2022-02-21 07:53:22 +01:00
Andrey Otto
89befae7b5 [4.0.x] Fixed #33530 -- Fixed typo in docs/ref/templates/builtins.txt.
Backport of f70a875cc05c46b3bfcc1637356081f0c5782bea from main
2022-02-21 06:13:59 +01:00
Philipp Bosch
75872476ec [4.0.x] Fixed typo in docs/topics/i18n/translation.txt.
Backport of 737542390af27616d93f86cd418e2d7f3e874b27 from main
2022-02-18 13:04:02 +01:00
Mariusz Felisiak
760b7e7f4f [4.0.x] Fixed #33515 -- Prevented recreation of migration for ManyToManyField to lowercased swappable setting.
Thanks Chris Lee for the report.

Regression in 43289707809c814a70f0db38ca4f82f35f43dbfd.

Refs #23916.
Backport of 1e2e1be02bdf0fe4add0d0279dbca1d74ae28ad7 from main
2022-02-16 21:10:30 +01:00
Claude Paroz
11881ad69f [4.0.x] Refs #32074 -- Recommended aiosmtpd for minimal SMTP server.
Follow up to 569a33579c3cca5f801c544d9b52a34e3c779424.
Backport of 5d13cc540e29eedafe695338d8ec9ec500185ccd from main
2022-02-12 19:33:55 +01:00
Mariusz Felisiak
3278c31fa5 [4.0.x] Refs #33476 -- Refactored code to strictly match 88 characters line length.
Backport of 7119f40c9881666b6f9b5cf7df09ee1d21cc8344 from main.
2022-02-08 19:25:02 +01:00
django-bot
6a682b38e7 [4.0.x] Refs #33476 -- Reformatted code with Black.
Backport of 9c19aff7c7561e3a82978a272ecdaad40dda5c00 from main.
2022-02-08 12:15:38 +01:00
Carlton Gibson
9a7755fa2d [4.0.x] Refs #33476 -- Adjusted docs and config files for Black.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of ba94488196a74e312177ef2621fbd427956836ef from main
2022-02-08 12:01:30 +01:00
John Hollingsworth
8c407ee7f3 [4.0.x] Fixed #32518 -- Doc'd that QuerySet.contains() should not be overused.
Thanks Tim McCurrach for the idea.

Backport of d70b4bea18c96e518ce14dca96085e9265e8ebb6 from main
2022-02-08 08:33:24 +01:00
Grace Hawkins
3714b44142 [4.0.x] Refs #32243 -- Fixed typo in docs/topics/files.txt.
Backport of 25514b604a64686ba603bf10a8a63390dc38b79d from main
2022-02-05 11:19:53 +01:00
Joshua Massover
76c80d96f3 [4.0.x] Fixed #32243 -- Added docs examples for manually saving Files.
Backport of c9d6e3595cfd0aa58cde1656bd735ecfcd7a872b from main
2022-02-03 09:58:08 +01:00
Mike Lissner
62fe7e08d6 [4.0.x] Improved example of using a custom queryset in Model formsets docs.
Backport of e459b0f5a0b2bfbc2ac45b3e7f21047ec9e4f345 from main
2022-02-03 06:58:51 +01:00
Theofilos Alexiou
efe72cf128 [4.0.x] Added Redis to warning about using cached sessions in docs.
Backport of 3ba60951fcbc8fca3e71d3b78083b100491fa7f9 from main
2022-02-02 20:46:44 +01:00
David Smith
7043f9ab3f [4.0.x] Fixed typo in release notes.
Backport of 770d3e6a4ce8e0a91a9e27156036c1985e74d4a3 from main
2022-02-02 07:18:43 +01:00
Mariusz Felisiak
0c06819caa [4.0.x] Refs #33476 -- Used vertical hanging indentation for format lists with inline comments.
Lists with multiple values and comments per-line are reformatted
by Black to multiple lines with a single comment. For example:

DATE_INPUT_FORMATS =
    "%Y-%m-%d", "%m/%d/%Y", "%m/%d/%y",  # '2006-10-25', '10/25/2006', '10/25/06'
]

is reformatted to the:

DATE_INPUT_FORMATS =
    "%Y-%m-%d",
    "%m/%d/%Y",
    "%m/%d/%y",  # '2006-10-25', '10/25/2006', '10/25/06'
]

This reformats affected entries to multiple lines with corresponding
comments.

Backport of ca88caa1031c0de545d82de8d90dcae0e03651fb from main
2022-02-01 15:14:17 +01:00
Mariusz Felisiak
1c74ac8648 [4.0.x] Added stub release notes for 4.0.3.
Backport of ba4a6880d1783190de4081bd456d934beb45cb19 from main
2022-02-01 09:12:57 +01:00
Mariusz Felisiak
69dfc6e61a [4.0.x] Added CVE-2022-22818 and CVE-2022-23833 to security archive.
Backport of 9e0df0d6dde441dbbad2b548d777e0a01d633286 from main
2022-02-01 08:53:10 +01:00
Mariusz Felisiak
f9c7d48fdd [4.0.x] Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads.
Thanks Alan Ryan for the report and initial patch.

Backport of fc18f36c4ab94399366ca2f2007b3692559a6f23 from main.
2022-02-01 07:44:49 +01:00
Markus Holtermann
0142204606 [4.0.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag.
Thanks Keryn Knight for the report.

Backport of 394517f07886495efcf79f95c7ee402a9437bd68 from main.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-02-01 07:43:45 +01:00
Kirill Safronov
6928227dff [4.0.x] Fixed #33480 -- Fixed makemigrations crash when renaming field of renamed model.
Regression in aa4acc164d1247c0de515c959f7b09648b57dc42.

Backport of 97a72744681d0993b50dee952cf32cdf9650ad9f from main
2022-02-01 07:33:22 +01:00
Mariusz Felisiak
aff79be03a [4.0.x] Fixed #33468 -- Fixed QuerySet.aggregate() after annotate() crash on aggregates with default.
Thanks Adam Johnson for the report.
Backport of 71e7c8e73712419626f1c2b6ec036e8559a2d667 from main
2022-01-31 11:34:29 +01:00
Claude Paroz
7a1c6533eb
[4.0.x] Updated translations from Transifex.
Updated Bulgarian, Czech, German, Uzbek, and Vietnamese translations.
2022-01-29 18:59:17 +01:00
Thomas Aglassinger
9a9c5b402b [4.0.x] Fixed #33459 -- Clarified index type in full text search docs.
Backport of 3a9b8b25d48c5768633e73edc5ddca20c3fd716c from main
2022-01-28 06:37:14 +01:00
Mariusz Felisiak
7c2d4d943b [4.0.x] Fixed #33462 -- Fixed migration crash when altering type of primary key with MTI and foreign key.
This prevents duplicated operations when altering type of primary key
with MTI and foreign key. Previously, a foreign key to the base model
was added twice, once directly and once by the inheritance model.

Thanks bcail for the report.

Regression in 325d7710ce9f6155bb55610ad6b4580d31263557.
Backport of e972620ada4f9ed7bc57f28e133e85c85b0a7b20 from main
2022-01-27 18:52:35 +01:00
Kaushik Chintam
f4de87038e [4.0.x] Fixed #33048 -- Doc'd that DEBUG static files requests don't use middleware chain.
Backport of 1625a8c8eba0b00ebdd1d7a8ba697b2729ec40ed from main
2022-01-26 12:02:43 +01:00
Carlton Gibson
f82ca84f77 [4.0.x] Fixed #33407 -- Fixed .radiolist admin CSS.
Regression in 5942ab5eb165ee2e759174e297148a40dd855920.

Backport of 85f2a9fb0f0973930abc84a725bc30703aa3d98b from main
2022-01-26 10:04:08 +01:00
Mariusz Felisiak
c28a41f4f1 [4.0.x] Added stub release notes and release date for 4.0.2, 3.2.12, and 2.2.27.
Backport of eeca9342381c8583be16f18942774e785ab7e527 from main
2022-01-25 07:26:37 +01:00
Fabian Büchler
b32080219e [4.0.x] Fixed #33449 -- Fixed makemigrations crash on models without Meta.order_with_respect_to but with _order field.
Regression in aa4acc164d1247c0de515c959f7b09648b57dc42.

Backport of eeff1787b0aa23016e4844c0f537d5093a95a356 from main
2022-01-21 08:46:14 +01:00
Tilak
fc5c86c47c [4.0.x] Improved wording in running Django’s test suite in contributing tutorial.
Backport of 2c76c27a951ee76c6f763a05c7e119305a21c78d from main
2022-01-20 11:29:47 +01:00
Brad Solomon
519b6d6070 [4.0.x] Fixed #33443 -- Clarified when PasswordResetView sends an email.
Backport of b55ebe32417e0884b6b8b3e1bc0379033aa221af from main
2022-01-17 08:59:43 +01:00
Scott Pashley
92e1018178 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
Backport of 367d6920ece44639e54650d9a98f8c24e10f7229 from main
2022-01-12 07:45:30 +01:00
Zeilentaucher
89d88414dc [4.0.x] Fixed #33432 -- Fixed typo in docs/howto/outputting-csv.txt.
Backport of 658dc7045aaba548f908bb26a370eb89fb393bca from main
2022-01-12 07:36:55 +01:00
Victor Peralta
cf4128e6e9 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
Backport of f1905db6c0004a2b6c8b69c55a1f5f9da58ce2eb from main
2022-01-11 06:20:30 +01:00
Keryn Knight
c8a6bf951b [4.0.x] Fixed #33426 -- Fixed ResolverMatch.__repr_() for class-based views.
Regression in 7c08f26bf0439c1ed593b51b51ad847f7e262bc1.

Backport of f4b06a3cc1e54888ff86f36a1f9a3ddf21292314 from main
2022-01-10 18:39:59 +01:00
Mariusz Felisiak
dfda5ff722 [4.0.x] Corrected signatures of some functions in docs.
Backport of 178109c1734ccc16386c3e3cbae1465c7a1b8ed8 from main
2022-01-10 13:31:25 +01:00
Mariusz Felisiak
6554f00df6 [4.0.x] Corrected directive for signals in django.contrib.auth docs.
Backport of b0ccf74549fe138c040798e0e99fc0291a7e03ed from main
2022-01-10 13:31:19 +01:00
Keryn Knight
2ea0321058 [4.0.x] Fixed #33425 -- Fixed view name for CBVs on technical 404 debug page.
Regression in 0c0b87725bbcffca3bc3a7a2c649995695a5ae3b.

Backport of 2a66c102d9c674fadab252a28d8def32a8b626ec from main
2022-01-08 14:54:10 +01:00
David
c959aa99aa [4.0.x] Fixed #33419 -- Restored marking forms.Field.help_text as HTML safe.
Regression in 456466d932830b096d39806e291fe23ec5ed38d5.

Thanks Matt Westcott for the report.

Backport of 4c60c3edff4312303e1021fca47ed52c2152d285 from main
2022-01-07 16:12:15 +01:00
Petter Friberg
11475958f6 [4.0.x] Fixed #33410 -- Fixed recursive capturing of callbacks by TestCase.captureOnCommitCallbacks().
Regression in d89f976bddb49fb168334960acc8979c3de991fa.

Backport of bc174e6ea0ce676c5a7f467bda9739e6ef6b6186 from main
2022-01-07 16:12:01 +01:00
David
da710aa3d8 [4.0.x] Removed unused comment directive in CBV topic docs.
Backport of 973fa566521037ac140dcece73fceae50ee522f1 from main
2022-01-05 09:19:54 +01:00
David
17bd04e708 [4.0.x] Fixed malformed attribute directives in docs.
Backport of cc8e771c643b4aed9f1d0b8bfcc5b4a8604385b7 from main
2022-01-05 09:19:44 +01:00
Carlton Gibson
24fce7d134 [4.0.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
Backport of 63869ab1f191ab5781cde8b813b838300455f6d6 from main
2022-01-04 11:30:40 +01:00
Carlton Gibson
6f9a994c47 [4.0.x] Added stub release notes for Django 4.0.2.
Backport of f38c66b55504dfe0b7ca15b0b4ced9430abc7eaa from main
2022-01-04 11:11:20 +01:00
Florian Apolloner
e1592e0f26 [4.0.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.
Thanks to Dennis Brinkrolf for the report.
2022-01-04 10:10:14 +01:00
Florian Apolloner
2a8ec7f546 [4.0.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
Thanks to Dennis Brinkrolf for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Florian Apolloner
df79ef03ac [4.0.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator.
Thanks Chris Bailey for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Luke Plant
7753169585 [4.0.x] Avoided suggestion of plain text database password in sessions topic.
Backport of ccafad2e429468c518c80fb178f9e7a3f06e78e1 from main
2022-01-04 06:48:19 +01:00
Mariusz Felisiak
fe59bf202d [4.0.x] Fixed #33391 -- Clarified Aggregate.empty_result_set_value docs.
Backport of 4400d8568ad5695c46e8de45635a82a27a26b871 from main
2021-12-31 06:49:55 +01:00