34043 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
varunkasyap	77ac2a74d9	Merge faf73d9529 into 1ce6e78dd4	2025-11-17 21:03:13 +05:30
varunkasyap	faf73d9529	draft	2025-11-17 21:02:47 +05:30
Mariusz Felisiak	1ce6e78dd4	Fixed #24920 -- Added support for DecimalField with no precision. ... Thanks Lily for the review.	2025-11-17 13:43:47 +01:00
Kasyap Pentamaraju	5c60763561	Fixed #36723 -- Removed logic for repositioning FilteredSelectMultiple help text.	2025-11-14 09:26:05 -05:00
Mariusz Felisiak	35f86b641a	Refs #24928 -- Added introspection support for PostgreSQL HStoreField.	2025-11-14 13:36:15 +01:00
Kasyap Pentamaraju	0eec2a163a	Fixed #36724 -- Removed invalid "for" attribute on <legend> tags.	2025-11-13 11:22:44 -05:00
Kasyap Pentamaraju	7e765a6859	Fixed #36686 -- Clarified Meta.ordering is ignored in GROUP BY queries.	2025-11-13 11:18:02 -05:00
Simon Charette	3aba1fced8	Fixed #36663 -- Defaulted to running checks against all databases. ... Regression in 0b83c8cc4d which added support for running checks only against databases but also defaulted to running against no databases if not specified. Note that this continues to *not* default to runing database tagged checks for all management commands except the migrate one as whether or not we should change this must be discussed further. Thanks Tim Graham for surfacing how this was a problematic default.	2025-11-13 11:37:58 +01:00
Simon Charette	96ee097bd6	Refs #31055 -- Adjusted passing of Field.check kwargs to ArrayField.base_field. ... This was missed when Field.check(databases) was introduced.	2025-11-13 10:28:59 +01:00
Simon Charette	1b539ef27e	Refs #31055 -- Augmented regression tests for database system checks. ... We might want to change this in the future but it should be further discussed first.	2025-11-13 10:18:06 +01:00
Adam Johnson	abfa4619fb	Fixed #36730 -- Fixed constraint validation crash for excluded FK attnames. ... Regression in e44e8327d3. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>	2025-11-13 09:16:46 +01:00
Benedict Etzel	5401b125ab	Fixed #36717 -- Redirect authenticated users on admin login view to next URL. ... Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>	2025-11-12 19:42:24 -03:00
Clifford Gama	66b5a6de78	Refs #35381 -- Made JSONNull deconstruct using convenient import path.	2025-11-12 17:14:52 -05:00
Jacob Walls	a1ce852e52	Refs #35844 -- Ran further selenium tests with --parallel=1.	2025-11-11 21:30:00 -05:00
Jacob Walls	c0d7fbe502	Refs #35844 -- Ran selenium tests with --parallel=1.	2025-11-11 18:28:07 -05:00
Jacob Walls	c60a708b58	Refs #35844 -- Checked for forkserver mode when running runtests.py with --selenium and --parallel.	2025-11-11 18:28:07 -05:00
Dani Fornons	6821a7c990	Fixed #36053 -- Fixed placement of FilteredSelectMultiple widget label.	2025-11-11 16:31:16 -05:00
Clifford Gama	2b0f24e622	Fixed typo in docs/ref/databases.txt.	2025-11-10 17:59:38 -03:00
Kasyap Pentamaraju	fffa64abc3	Fixed #36715 -- Handled non-finite Decimals in intcomma filter.	2025-11-10 14:45:48 -05:00
Jacob Walls	e78420c2b8	Refs #36680 -- Avoided manipulating PATH in AdminScriptTestCase. ... This mostly reverts 6436ec3210, which was fragile. Instead, if black is present, we use it to format the expected and actual results, instead of hard-coding the expected formatted value. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>	2025-11-10 14:13:49 -05:00
Markus Holtermann	01c70ba148	Fixed unsafe variable interpolation in GitHub Action workflow. ... Thank you Davide Netti for the report and initial patch. Co-authored-by: Davide Netti <davide.netti4@gmail.com>	2025-11-10 15:46:15 -03:00
Clifford Gama	c135be349d	Clarified "get_db_prep_value" default result in docs/ref/models/fields.txt.	2025-11-10 14:11:28 -03:00
Hong Xu	a4f7674134	Clarified EmailValidator docs to specify it validates an email address. ... Updated the EmailValidator docs in docs/ref/validators.txt to explicitly state that it validates an email address, to avoid confusion with validating email message content.	2025-11-10 12:51:51 -03:00
myoungjinGo	c4e07f94eb	Fixed #36420 -- Used actual SQLite limits in last_executed_query() quoting.	2025-11-07 16:41:57 -05:00
Kasyap Pentamaraju	1c7db70e79	Fixed #36705 -- Avoided string concatenation in utils. ... Repeated string concatenation performs poorly on PyPy. Thanks Seokchan Yoon for the report.	2025-11-07 14:06:42 -05:00
Thomas Grainger	2768747526	Fixed #36315 -- Used TaskGroup instead of asyncio.gather().	2025-11-07 13:17:25 -05:00
Thomas Grainger	2501958b51	Refs #36315 -- Replaced manual task and cancellation handling with TaskGroup in ASGIHandler.	2025-11-07 12:23:31 -05:00
Thomas Grainger	796cf3d325	Refs #36315 -- Used contextlib.closing() in ASGIHandler.handle().	2025-11-07 12:23:31 -05:00
Tim Schilling	5ef870fbc5	Removed community packages admonition from settings docs.	2025-11-06 15:50:59 -05:00
Tim Schilling	47ac64ed8b	Added community package email backends mention to docs. ... Co-authored-by: Clifford Gama <cliffygamy@gmail.com>	2025-11-06 15:50:59 -05:00
us77ipis	6d4d99b3ce	Fixed #36702 -- Made bulk_create() return pk values set by an expression.	2025-11-06 11:58:01 -05:00
Mehraz Hossain Rumman	125b63ca74	Fixed #36710 -- Fixed a regression in urlize for multipart domain names. ... Thanks Mehraz Hossain Rumman for the report and Bruno Alla for the triage. Regression in a9fe98d5bd.	2025-11-05 17:05:54 -05:00
Harsh Jain	dfcc662cf8	Fixed #36709 -- Included static methods in system check for UserModel.is_anonymous/is_authenticated methods.	2025-11-05 16:56:15 -05:00
Natalia	c5a107e824	Added CVE-2025-64458 and CVE-2025-64459 to security archive.	2025-11-05 11:17:12 -03:00
Natalia	6e18c078d5	Added stub release notes for 5.2.9.	2025-11-05 11:12:30 -03:00
Jacob Walls	3c3f463577	Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on dictionary expansion.	2025-11-05 09:20:57 -03:00
Jacob Walls	98e642c691	Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via the _connector kwarg. ... Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon Charette, and Jake Howard for the reviews.	2025-11-05 09:20:57 -03:00
Jacob Walls	c880530ddd	Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedirect/HttpResponsePermanentRedirect on Windows. ... Thanks Seokchan Yoon for the report, Markus Holtermann for the triage, and Jake Howard for the review. Follow-up to CVE-2025-27556 and 39e2297210.	2025-11-05 09:20:57 -03:00
Hal Blackburn	74564946c3	Fixed #36704 -- Fixed system check error for proxy model with a composite pk. ... Proxy models subclassing a model with a CompositePrimaryKey were incorrectly reporting check errors because the check that requires only local fields to be used in a composite pk was evaluated against the proxy subclass, which has no fields. To fix this, composite pk field checks are not evaluated against proxy subclasses, as none of the checks are applicable to proxy subclasses. This also has the benefit of not double-reporting real check errors from an invalid superclass pk. Thanks Clifford Gama for the review.	2025-11-04 11:59:21 -05:00
Jayden Kneller	e27cff68a3	Fixed #36652 -- Increased determinism when loading migrations from disk. ... Ordering still depends on pkgutil.iter_modules, which does not guarantee order, but at least now Django is not introducing additional indeterminism, causing CircularDependencyError to appear or not appear in some edge cases. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>	2025-11-04 08:15:22 -05:00
ontowhee	eaf7b563a5	Updated ticket triage process diagram and contributing docs.	2025-11-04 09:38:03 -03:00
Augusto Pontes	8af79e2c0c	Fixed #36695 -- Fixed handling of parameterized generics in migration serialization. ... Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>	2025-11-03 20:45:48 -05:00
Mariusz Felisiak	05ba1a9228	Fixed #36661 -- Added introspection of database-level delete options.	2025-10-31 14:33:27 +01:00
Patrick Rauscher	6019147229	Fixed #36696 -- Fixed NameError when inspecting functions with deferred annotations. ... In Python 3.14, annotations are deferred by default, so we should not assume that the names in them have been imported unconditionally.	2025-10-31 08:44:37 -04:00
Tim Schilling	340e4f832e	Added community package storage backends mention to docs. ... Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>	2025-10-30 17:21:28 -04:00
Mariusz Felisiak	3939cd2795	Refs #36680 -- Fixed admin_scripts tests crash when black is not installed. ... Regression in 6436ec3210.	2025-10-30 08:38:17 -03:00
Clifford Gama	7fc9db1c6a	Refs #35381 -- Clarified key and index lookup handling of None in exact lookup docs.	2025-10-29 15:00:52 -04:00
Clifford Gama	348ca84538	Refs #35381 -- Deprecated using None in JSONExact rhs to mean JSON null. ... Key and index lookups are exempt from the deprecation. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>	2025-10-29 15:00:52 -04:00
Clifford Gama	be7f68422d	Refs #35381 -- Delegated ArrayField element prepping to base_field.get_db_prep_save. ... Previously, ArrayField always used base_field.get_db_prep_value when saving, which could differ from how base_field prepares data for save. This change overrides ArrayField.get_db_prep_save to delegate to the base_field's get_db_prep_save, ensuring elements like None in JSONField arrays are saved correctly as SQL NULL instead of JSON null.	2025-10-29 15:00:52 -04:00
Clifford Gama	adc25a9a66	Fixed #35381 -- Added JSONNull() expression. ... Thanks Jacob Walls for the review.	2025-10-29 15:00:52 -04:00