mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-11-20 11:36:04 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
33774 commits 30 branches 464 tags 716 MiB
Commit graph

14343 commits

Author SHA1 Message Date
Simon Charette
8be0c0d690 Fixed #36373 -- Fixed select_related() crash on foreign object for a composite pk.
Some checks are pending
Docs / docs (push) Waiting to run
Details
Docs / blacken-docs (push) Waiting to run
Details
Linters / flake8 (push) Waiting to run
Details
Linters / isort (push) Waiting to run
Details
Linters / black (push) Waiting to run
Details
Tests / Windows, SQLite, Python 3.13 (push) Waiting to run
Details
Tests / JavaScript tests (push) Waiting to run
Details 
Thanks Jacob Walls for the report and Sarah for the in-depth review.
 2025-05-12 12:33:07 +01:00
Natalia
42ab99309d Refs #35980 -- Added release note about changes in release artifacts filenames. 2025-05-09 13:29:19 -03:00
Natalia
c86156378d Removed "Expected" from release date for 5.2.1, 5.1.9, and 4.2.21. 2025-05-09 13:29:19 -03:00
Natalia
37f2a77c72 Cleaned up CVE-2025-32873 security archive description. 2025-05-07 11:36:05 -03:00
Natalia
fdabda4e05 Added CVE-2025-32873 to security archive. 2025-05-07 10:59:55 -03:00
Natalia
d8397bf6cd Added stub release notes for 5.2.2. 2025-05-07 10:56:00 -03:00
Sarah Boyce
9f3419b519 Fixed CVE-2025-32873 -- Mitigated potential DoS in strip_tags(). 
Thanks to Elias Myllymäki for the report, and Shai Berger and Jake
Howard for the reviews.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
 2025-05-06 22:21:42 -03:00
Natalia
f7d97dd118 Simplified artifact building steps in docs/internals/howto-release-django.txt. 
With the recent merge of artifact build updates from
https://github.com/django/django/pull/19436, there is no need to have
different build instructions for 4.2.
 2025-05-06 11:11:40 -03:00
Clifford Gama
9d93e35c20 Fixed #17461 -- Doc'd the presumed order of foreign keys on the intermediary model of a self-referential m2m. 
Thanks Giannis Terzopoulos and Sarah Boyce for the reviews.
 2025-05-02 07:56:56 +01:00
Natalia
0f5dd0dff3 Made cosmetic edits and added upcoming security release to release notes. 2025-04-30 14:55:12 -03:00
Baptiste Mispelon
66f9eb0ff1 Fixed #36357 -- Skipped unique_together in inspectdb output for composite primary keys. 
Thanks to Baptiste Mispelon for the report and quick fix, and to Simon
Charette and Jacob Walls for the reviews.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
 2025-04-30 11:55:25 -03:00
Simon Charette
07100db6f4 Fixed #36358 -- Corrected introspection of composite primary keys on SQLite. 
Previously, any first field of a composite primary key with type
`INTEGER` was incorrectly introspected as an `AutoField` due to SQLite
treating `INTEGER PRIMARY KEY` as an alias for the `ROWID`.

This change ensures that integer fields in composite PKs are not
mistaken for auto-incrementing fields.

Thanks Jacob Walls and Sarah Boyce for the reviews.
 2025-04-30 10:51:48 -03:00
Simon Charette
8ef4e0bd42 Fixed #36360 -- Fixed QuerySet.update() crash when referring annotations through values(). 
The issue was only manifesting itself when also filtering againt a related
model as that forces the usage of a subquery because SQLUpdateCompiler doesn't
support the UPDATE FROM syntax yet.

Regression in 65ad4ade74.

Refs #28900.

Thanks Gav O'Connor for the detailed report.
 2025-04-30 10:38:19 +01:00
koresi
0ee06c04e0 Fixed #35931 -- Documented fields and methods of the FlatPage model. 
Co-authored-by: Clifford Gama <53076065+cliff688@users.noreply.github.com>
 2025-04-27 15:10:33 +01:00
Bruno Alla
bc21bc4282 Fixed #18296 -- Created missing custom target directory for startproject and startapp. 2025-04-27 14:41:27 +01:00
9r0k
3babda775d
Fixed #36346 -- Removed outdated section about the threaded option in Oracle driver. 2025-04-27 14:16:50 +02:00
dbogar89
7b394b9988
Fixed #36335 -- Fixed typo in docs/topics/db/managers.txt. 2025-04-27 08:40:14 +02:00
nessita
0596263c31
Fixed #36309 -- Made email alternatives and attachments pickleable. 
Regression in aba0e541ca and in
d5bebc1c26.

Thanks Florent Messa for the report, and Jake Howard and Claude
Paroz for the review.
 2025-04-24 10:11:16 -03:00
nessita
c86242d61f
Refs #36341 -- Added release notes for 5.1.9 and 4.2.21 for fix in wordwrap template filter. 
Revision 1e9db35836 fixed a regression in
55d89e25f4, which also needs to be
backported to the stable branches in extended support (5.1.x and 4.2.x).
 2025-04-23 17:26:48 -03:00
Matti Pohjanvirta
1e9db35836 Fixed #36341 -- Preserved whitespaces in wordwrap template filter. 
Regression in 55d89e25f4.

This work improves the django.utils.text.wrap() function to ensure that
empty lines and lines with whitespace only are kept instead of being
dropped.

Thanks Matti Pohjanvirta for the report and fix.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
 2025-04-23 16:14:03 -03:00
antoliny0919
1bc805e23b Fixed #36331 -- Reverted "Fixed #36055 -- Prevented overlap of object-tools buttons and page header in the admin." 
This reverts commits b1324a680a and
02a5cbfe76. The former caused a regression
in admin sites that relied on the `object-tools` block being inside the
`content` block.

Thank you to Fabian Braun for the report.
 2025-04-22 22:13:38 -03:00
SaJH
1831f7733d Fixed #36326 -- Added CompositePrimaryKey support in QuerySet.raw(). 
Signed-off-by: SaJH <wogur981208@gmail.com>
 2025-04-17 17:23:06 +02:00
Ahmed Nassar
d469db978e Fixed #36314 -- Fixed MinimumLengthValidator error message translation. 
Regression in ec7d69035a.

Thank you Gabriel Trouvé for the report and Claude Paroz for the review.
 2025-04-17 12:30:20 +02:00
Adam Johnson
6ef0f5bc27 Americanized some spellings. 2025-04-16 10:21:38 +02:00
Natalia
5020a9d43a Replaced '' with * for consistent emphasis styling in docs/howto/custom-template-tags.txt. 2025-04-15 14:48:55 -03:00
Ahmed Nassar
be402891cd Fixed #36311 -- Unified spelling of "hardcode" and its variants in docs. 
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
 2025-04-15 14:48:55 -03:00
Ahmed Nassar
abbcef5280 Refs #36311 -- Unified spelling of "flatpage" in docs/ref/contrib/flatpages.txt. 2025-04-15 14:48:55 -03:00
Ahmed Nassar
8bca33f68a Fixed #36269 -- Documented how to test callable storage in FileField. 2025-04-15 10:05:59 +02:00
Ahmed Nassar
2c2f090555 Fixed #35993 -- Documented gettext f-string support limitations. 
Thank you to Claude Paroz and Athena Wolfskämpf for the review.
 2025-04-15 10:02:25 +02:00
Baptiste Mispelon
ac16d2876d
Fixed #36320 -- Ignored "duplicated_toc_entry" for ePub docs build. 2025-04-12 19:39:07 +02:00
Simon Charette
21f8be76d4 Fixed #36288 -- Addressed improper handling of duplicates in values_list(). 
Now that selected aliases are stored in sql.Query.selected: dict[str, Any]
the values_list() method must ensures that duplicate field name references are
assigned unique aliases.

Refs #28900.

Regression in 65ad4ade74.

Thanks Claude for the report.
 2025-04-11 09:04:49 +02:00
Clifford Gama
a2f7b3a6a0 Clarified url and name arguments in flatpages URLconf ref docs. 2025-04-08 22:02:10 -03:00
Natalia
f9f0a18327 Added missing closing parenthesis in docs/ref/contrib/flatpages.txt. 2025-04-08 22:02:10 -03:00
Simon Charette
71a19a0e47 Fixed #36301 -- Fixed select_for_update(of) crash when using values()/values_list(). 
Regression in 65ad4ade74 which allowed for
annotations to be SELECT'ed before model field references through
values()/values_list() and broke assumptions the select_for_update(of)
table infererence logic had about model fields always being first.

Refs #28900.

Thanks OutOfFocus4 for the report and Sarah for the test.
 2025-04-07 22:56:40 +02:00
Sarah Boyce
8ad3e80e88 Fixed #36298 -- Truncated the overwritten file content in file_move_safe(). 
Regression in 58cd4902a7.

Thanks Baptiste Mispelon for the report.
 2025-04-07 16:11:36 +02:00
Simon Charette
12b771a1ec Fixed #36299 -- Prevented field selection on QuerySet.alias() after values(). 
Regression in 65ad4ade74.

Refs #28900.

Thanks Jeff Iadarola for the report and tests.

Co-Authored-By: OutOfFocus4 <jeff.iadarola@gmail.com>
 2025-04-05 20:43:50 +02:00
Simon Charette
764af7a3d6 Fixed #36289 -- Fixed bulk_create() crash with nullable geometry fields on PostGIS. 
Swapped to an allow list instead of a deny list for field types to
determine if the UNNEST optimization can be enabled to avoid further
surprises with other types that would require further specialization to
adapt.

Regression in a16eedcf9c.

Thanks Joshua Goodwin for the report and Sarah Boyce for the test.
 2025-04-04 21:33:04 +02:00
Natalia
4a824b1313 Added usage for --since when fetching translations in docs/internals/howto-release-django.txt. 2025-04-04 15:55:07 -03:00
koffi
019acad112 Fixed #36255 -- Renamed the admin action button for improved accessibility. 2025-04-04 17:41:13 +02:00
Simon Charette
f7f38f3a0b Fixed #36290 -- Made TupleIn() lookup discard tuples containing None. 
Just like the In() lookup discards of None members TupleIn() should
discard tuples containing any None as NULL != NULL in SQL and the
framework expects such queries to be elided under some circumstances.

Refs #31667, #36116.

Thanks Basptise Mispelon for bisecting the regression to 626d77e.
 2025-04-03 20:40:43 +02:00
Simon Charette
543e17c440 Fixed #36292 -- Fixed crash when aggregating over a group mixing transforms and references. 
Regression in 65ad4ade74.

Refs #28900

Thanks Patrick Altman for the report.
 2025-04-03 17:51:26 +02:00
Sarah Boyce
c7ff347c64 Added stub release notes for 5.2.1. 2025-04-02 15:24:48 +02:00
Sarah Boyce
345ba995c0 Finalized release notes for Django 5.2. 2025-04-02 14:43:00 +02:00
Sarah Boyce
b83dab7d8d Added CVE-2025-27556 to security archive. 2025-04-02 13:31:24 +02:00
Sarah Boyce
39e2297210 Fixed CVE-2025-27556 -- Mitigated potential DoS in url_has_allowed_host_and_scheme() on Windows. 
Thank you sw0rd1ight for the report.
 2025-04-02 10:21:33 +02:00
Babak Mahmoudy
be1b776ad8 Fixed #36213 -- Doc'd MySQL's handling of self-select updates in QuerySet.update(). 
Co-authored-by: Andro Ranogajec <ranogaet@gmail.com>
 2025-04-02 08:45:03 +02:00
Aarni Koskela
6b32506739 Fixes #36215 -- Included unpacking generalization notes in coding style guide (PEP-448). 2025-03-31 22:43:13 -03:00
Anthony Joseph
6888375c53 Fixed #22977 -- Added system check for clashing managers and reverse related fields. 
With thanks to  Konrad Świat, Loïc Bistuer, Russell Keith-Magee,
and Mariusz Felisiak.

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
 2025-03-31 22:20:43 +02:00
Clifford Gama
9d5d0e8135 Clarified pre_delete and post_delete's origin attributes. 2025-03-31 16:10:44 +02:00
Song Junho
126417be43 Fixed #36265 -- Added support for serialization of ZoneInfo instances in migrations. 2025-03-31 13:44:54 +02:00