30147 Commits

Author SHA1 Message Date
Victor Peralta
cf4128e6e9 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.
Backport of f1905db6c0004a2b6c8b69c55a1f5f9da58ce2eb from main
2022-01-11 06:20:30 +01:00
Keryn Knight
c8a6bf951b [4.0.x] Fixed #33426 -- Fixed ResolverMatch.__repr_() for class-based views.
Regression in 7c08f26bf0439c1ed593b51b51ad847f7e262bc1.

Backport of f4b06a3cc1e54888ff86f36a1f9a3ddf21292314 from main
2022-01-10 18:39:59 +01:00
Mariusz Felisiak
dfda5ff722 [4.0.x] Corrected signatures of some functions in docs.
Backport of 178109c1734ccc16386c3e3cbae1465c7a1b8ed8 from main
2022-01-10 13:31:25 +01:00
Mariusz Felisiak
6554f00df6 [4.0.x] Corrected directive for signals in django.contrib.auth docs.
Backport of b0ccf74549fe138c040798e0e99fc0291a7e03ed from main
2022-01-10 13:31:19 +01:00
Keryn Knight
2ea0321058 [4.0.x] Fixed #33425 -- Fixed view name for CBVs on technical 404 debug page.
Regression in 0c0b87725bbcffca3bc3a7a2c649995695a5ae3b.

Backport of 2a66c102d9c674fadab252a28d8def32a8b626ec from main
2022-01-08 14:54:10 +01:00
David
c959aa99aa [4.0.x] Fixed #33419 -- Restored marking forms.Field.help_text as HTML safe.
Regression in 456466d932830b096d39806e291fe23ec5ed38d5.

Thanks Matt Westcott for the report.

Backport of 4c60c3edff4312303e1021fca47ed52c2152d285 from main
2022-01-07 16:12:15 +01:00
Petter Friberg
11475958f6 [4.0.x] Fixed #33410 -- Fixed recursive capturing of callbacks by TestCase.captureOnCommitCallbacks().
Regression in d89f976bddb49fb168334960acc8979c3de991fa.

Backport of bc174e6ea0ce676c5a7f467bda9739e6ef6b6186 from main
2022-01-07 16:12:01 +01:00
David
da710aa3d8 [4.0.x] Removed unused comment directive in CBV topic docs.
Backport of 973fa566521037ac140dcece73fceae50ee522f1 from main
2022-01-05 09:19:54 +01:00
David
17bd04e708 [4.0.x] Fixed malformed attribute directives in docs.
Backport of cc8e771c643b4aed9f1d0b8bfcc5b4a8604385b7 from main
2022-01-05 09:19:44 +01:00
Carlton Gibson
24fce7d134 [4.0.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
Backport of 63869ab1f191ab5781cde8b813b838300455f6d6 from main
2022-01-04 11:30:40 +01:00
Carlton Gibson
6f9a994c47 [4.0.x] Added stub release notes for Django 4.0.2.
Backport of f38c66b55504dfe0b7ca15b0b4ced9430abc7eaa from main
2022-01-04 11:11:20 +01:00
Carlton Gibson
9bb9326027 [4.0.x] Post-release version bump. 2022-01-04 10:46:42 +01:00
Carlton Gibson
15aff7f22c [4.0.x] Bumped version for 4.0.1 release. 4.0.1 2022-01-04 10:42:03 +01:00
Florian Apolloner
e1592e0f26 [4.0.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.
Thanks to Dennis Brinkrolf for the report.
2022-01-04 10:10:14 +01:00
Florian Apolloner
2a8ec7f546 [4.0.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
Thanks to Dennis Brinkrolf for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Florian Apolloner
df79ef03ac [4.0.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator.
Thanks Chris Bailey for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04 10:10:14 +01:00
Luke Plant
7753169585 [4.0.x] Avoided suggestion of plain text database password in sessions topic.
Backport of ccafad2e429468c518c80fb178f9e7a3f06e78e1 from main
2022-01-04 06:48:19 +01:00
Mariusz Felisiak
fe59bf202d [4.0.x] Fixed #33391 -- Clarified Aggregate.empty_result_set_value docs.
Backport of 4400d8568ad5695c46e8de45635a82a27a26b871 from main
2021-12-31 06:49:55 +01:00
mangelozzi
b93fb3d6be [4.0.x] Improved @display(empty_value) example in ModelAdmin.empty_value_display docs.
Backport of eb901681ab58c008f7bbbe555e5f43f8e0893bd3 from main
2021-12-30 11:39:45 +01:00
Jacob Walls
c46e996307 [4.0.x] Fixed #27936 -- Rewrote spanning multi-valued relationships docs.
Backport of 6174814dbe04fb6668aa212a6cdbca765a8b0522 from main
2021-12-30 09:05:29 +01:00
Mariusz Felisiak
e9b023b8e4 [4.0.x] Added default values to Entry's fields in making queries docs.
This makes it easier to create a data in examples.

Backport of 1283458baae482c2bbb22c842b1db6c832c953f3 from main
2021-12-30 09:05:20 +01:00
Sergey Fursov
76d24d5f16 [4.0.x] Updated example of YAML serialization format in docs.
Backport of feeb0685c62a793c55a058584ba1de45e74f80f7 from main
2021-12-28 13:39:06 +01:00
Carlton Gibson
c9ec72ea1b [4.0.x] Added stub release notes for 4.0.1, 3.2.11, and 2.2.26 releases.
Backport of b13d920b7b56d3e088e35311f5ee54f25d2779af from main.
2021-12-28 10:08:54 +01:00
Mariusz Felisiak
b5f60ef5a7 [4.0.x] Refs #32355 -- Bumped required psycopg2 version to 2.8.4.
psycopg2 2.8.4 is the first release to support Python 3.8.
Backport of ca04659b4b3f042c1bc7e557c25ed91e3c56c745 from main
2021-12-22 20:33:49 +01:00
David Smith
a0e01b000a [4.0.x] Refs #31026 -- Updated TemplatesSetting docs to refer to forms.
Backport of 78f062f63e7dea09c219fd1310d43950817f4c78 from main
2021-12-22 08:43:44 +01:00
Adam Johnson
ad09b1687d [4.0.x] Added TemplatesSetting to list of built-in renderers in FORM_RENDERER docs.
Backport of fde425051c31b240e8eca48a8eb54daa6d372c9f from main
2021-12-22 07:59:58 +01:00
Brenton Partridge
b85ceaaba6 [4.0.x] Fixed #32600 -- Fixed Geometry collections and Polygon segmentation fault on macOS ARM64.
Backport of 19fb838803f63eef0726a370050443b693f109be from main
2021-12-21 13:36:08 +01:00
Simon Charette
7e6a2e3b45 [4.0.x] Fixed #33366 -- Fixed case handling with swappable setting detection in migrations autodetector.
The migration framework uniquely identifies models by case insensitive
labels composed of their app label and model names and so does the app
registry in most of its methods (e.g. AppConfig.get_model) but it
wasn't the case for get_swappable_settings_name() until this change.

This likely slipped under the radar for so long and only regressed in
b9df2b74b98b4d63933e8061d3cfc1f6f39eb747 because prior to the changes
related to the usage of model states instead of rendered models in the
auto-detector the exact value settings value was never going through a
case folding hoop.

Thanks Andrew Chen Wang for the report and Keryn Knight for the
investigation.

Backport of 43289707809c814a70f0db38ca4f82f35f43dbfd from main
2021-12-17 10:00:33 +01:00
Mariusz Felisiak
c1d2e8b9b8 [4.0.x] Fixed #33350 -- Reallowed using cache decorators with duck-typed HttpRequest.
Regression in 3fd82a62415e748002435e7bad06b5017507777c.

Thanks Terence Honles for the report.
Backport of 40165eecc40f9e223702a41a0cb0958515bb1f82 from main
2021-12-16 20:14:17 +01:00
Mariusz Felisiak
267a743bf2 [4.0.x] Refs #33365, Refs #30530 -- Doc'd re_path() behavior change in Django 2.2.25, 3.1.14, and 3.2.10.
Follow up to d4dcd5b9dd9e462fec8220e33e3e6c822b7e88a6.
Backport of 5de12a369a7b2231e668e0460c551c504718dbf6 from main
2021-12-15 18:54:35 +01:00
Jeremy Lainé
3b03bce122 [4.0.x] Fixed #33361 -- Fixed Redis cache backend crash on booleans.
Backport of 2f33217ea2cad688040dd6044cdda946c62e5b65 from main
2021-12-14 08:46:16 +01:00
mgaligniana
cc5bbd447b [4.0.x] Fixed #33338 -- Doc'd that never_cache() decorator set Expires header.
Backport of 669dcefc04837c35fc2ec5ce906d84397005965d from main
2021-12-13 18:38:48 +01:00
Beomsoo Kim
c607ee949d [4.0.x] Corrected example in models.DecimalField docs.
Backport of 7e4a9a9f696574a18f5c98f34d5a88e254b2d394 from main
2021-12-13 07:20:56 +01:00
Wayne Lambert
e39e5fa8e6 [4.0.x] Updated link to Microsoft SQL Server backend.
Backport of 8a8c8797e81b338f3c93a5a4e2483916e68e4a54 from main
2021-12-13 07:17:33 +01:00
Ömer Faruk Abacı
bb8435f5db [4.0.x] Refs #33319 -- Added note about commutation of QuerySet's | operator.
Backport of f04b44bad40369ec2df74b16adb4d3f09350e4b2 from main
2021-12-08 21:59:40 +01:00
Baptiste Mispelon
15031852c5 [4.0.x] Fixed #33346 -- Fixed SimpleTestCase.assertFormsetError() crash on a formset named "form".
Thanks OutOfFocus4 for the report.

Regression in 456466d932830b096d39806e291fe23ec5ed38d5.

Backport of cb383753c0e0eb52306e1024d32a782549c27e61 from main.
2021-12-08 21:13:00 +01:00
Nick Pope
b7f2afa8de [4.0.x] Improved release notes wording for template-based form rendering.
Backport of dfdf1c68645627f54259dbe25f5b42329ee83b5d from main
2021-12-07 13:35:03 +01:00
Mariusz Felisiak
81a90b5bc3 [4.0.x] Added stub release notes for 4.0.1.
Backport of adef3d975e55c55b020c2f357d82c2db11e58450 from main
2021-12-07 10:42:26 +01:00
Mariusz Felisiak
677c553699 [4.0.x] Post-release version bump. 2021-12-07 10:16:37 +01:00
Mariusz Felisiak
67d0c4644a [4.0.x] Bumped version for 4.0 release. 4.0 2021-12-07 10:10:26 +01:00
Mariusz Felisiak
0f4fa0caee [4.0.x] Finalized release notes for Django 4.0.
Backport of d7bd9eb6cda0aff4634cbb453622b24a98933463 from main
2021-12-07 10:03:39 +01:00
Mariusz Felisiak
01c0fb9d19 [4.0.x] Updated asgiref dependency for 4.0 release series.
Backport of 513441240f874dd0b6187c0c6aaa3e8eccd8ddbe from main
2021-12-07 09:55:18 +01:00
Mariusz Felisiak
7f20e89453 [4.0.x] Added CVE-2021-44420 to security archive.
Backport of 8747052411275d290b2152ffcb8dee11afbb82cd from main
2021-12-07 08:53:48 +01:00
Florian Apolloner
20b9ad36ff [4.0.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.
Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports.

Backport of d4dcd5b9dd9e462fec8220e33e3e6c822b7e88a6 from main.
2021-12-07 06:29:34 +01:00
Mariusz Felisiak
4c5215ab03
[4.0.x] Updated translations from Transifex.
This also fixes related i18n tests.

Co-authored-by: Claude Paroz <claude@2xlibre.net>
2021-12-06 20:29:53 +01:00
Hannes Ljungberg
fed7f992ac [4.0.x] Fixed #33335 -- Made model validation ignore functional unique constraints.
Regression in 3aa545281e0c0f9fac93753e3769df9e0334dbaa.

Thanks Hervé Le Roy for the report.

Backport of 1eaf38fa87384fe26d1abf6e389d6df1600d4d8c from main
2021-12-06 13:28:54 +01:00
Mariusz Felisiak
7bde53a7ae [4.0.x] Refs #33333 -- Fixed PickleabilityTestCase.test_annotation_with_callable_default() crash on Oracle.
Grouping by LOBs is not allowed on Oracle. This moves a binary field to
a separate model.
Backport of d3a64bea51676fcf8a0ae593cf7b103939e12c87 from main
2021-12-04 15:55:31 +01:00
Mariusz Felisiak
2c20883cb0 [4.0.x] Fixed #33333 -- Fixed setUpTestData() crash with models.BinaryField on PostgreSQL.
This makes models.BinaryField pickleable on PostgreSQL.

Regression in 3cf80d3fcf7446afdde16a2be515c423f720e54d.

Thanks Adam Zimmerman for the report.

Backport of 2c7846d992ca512d36a73f518205015c88ed088c from main.
2021-12-03 11:58:55 +01:00
Shivam Durgbuns
306fbf197a [4.0.x] Fixed #33334 -- Alphabetized form and model fields in reference docs.
Backport of d75c387f46c55459a2daf071e5463bad0ad7dcbd from main
2021-12-02 10:12:31 +01:00
Mariusz Felisiak
2fa95bfbd4 [4.0.x] Added stub release notes and release date for 3.2.10, 3.1.14 and 2.2.25.
Backport of ae4077e13ea2e4c460c3f21b9aab93a696590851 from main
2021-11-30 11:26:10 +01:00