Commit graph

13895 commits

Author SHA1 Message Date
mbcodes
95067098dd [5.1.x] Improved readability of triage workflow image by increasing its size and color contrast.
Backport of c973d9ee82 from main.
2024-10-25 10:02:28 +02:00
Carlton Gibson
56ad530ade [5.1.x] Refs #26029 -- Extended docs for the StorageHandler default instance.
Third-party packages that provide storages need to rely on the
StorageHandler API in order to allow users to use the `storages` module
instance to override defaults. Minimally documenting these methods
allows package authors to rely on them.

Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Backport of 6dcab75d5d from main.
2024-10-24 11:58:18 -03:00
AfiMaameDufie
6bc36a1d27 [5.1.x] Updated authentication solutions list on using REMOTE_USER how-to.
Backport of 6ae0dc89c5 from main.
2024-10-24 10:03:45 +02:00
koresi
34989e076b [5.1.x] Fixed #22828 -- Warned that ModelAdmin get hooks return the property itself rather a copy.
Backport of b8e9cdf13b from main.
2024-10-24 10:02:22 +02:00
David D Lowe
8bfa520a01 [5.1.x] Doc'd that unusable passwords are defined by metadata in the password field.
Backport of de2bb73904 from main.
2024-10-23 14:21:05 -03:00
Yash
630c9e1f9d [5.1.x] Fixed #35731 -- Extended db_default docs.
This added a missing db_default reference in docs/topics/db/models.txt,
and added a reference to the DatabaseDefault object.

Backport of 35ab2e0182 from main.
2024-10-23 11:51:13 +02:00
Daniele Procida
d9f37ac118 [5.1.x] Restructured how-to docs landing page.
Previously, this was a bare list of sub-pages, not in any discernible
order, and hard to parse.

Now the sub-pages are grouped in sections by topic. It's unlikely to be
the final word on how this material is arranged, but it's a clear
improvement on the existing arrangement and provides a good basis for
next steps.
Backport of dd0a116b93 from main.
2024-10-22 15:10:53 -03:00
ssanger
8efba53397 [5.1.x] Added missing alt attribute to <img> tag in docs.
Backport of df6013b2b4 from main.
2024-10-22 14:20:00 +02:00
Mariusz Felisiak
60dc9c288c [5.1.x] Fixed example indentation in howto/overriding-templates.txt.
Backport of bcb91611ec from main.
2024-10-22 13:10:13 +02:00
amirreza sohrabi far
6eb6f236f2 [5.1.x] Updated Hypercorn links in docs/howto/deployment/asgi/hypercorn.txt.
Backport of 5a91ad3d71 from main.
2024-10-21 18:32:16 -03:00
Mariusz Felisiak
8d48fc035c [5.1.x] Updated tutorial part count from 7 to 8 in docs/intro/reusable-apps.txt.
Backport of f59cdd0009 from main.
2024-10-21 14:20:39 -03:00
Nick Pope
51eb666758 [5.1.x] Fixed #35841 -- Restored support for DB-IP databases in GeoIP2.
Thanks Felix Farquharson for the report and Claude Paroz for the
review.

Regression in 40b5b1596f.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 3fad712a91 from main.
2024-10-17 21:42:06 -03:00
Justin Thurman
3ba8b0dae8 [5.1.x] Fixed #35845 -- Updated DomainNameValidator to require entire string to be a valid domain name.
Bug in 4971a9afe5.

Thank you to kazet for the report and Claude Paroz for the review.

Backport of 99dcc59237 from main.
2024-10-17 17:00:35 +02:00
Clifford Gama
9a5eae0ad8 [5.1.x] Fixed #26322 -- Consolidated lazy relationships details in docs/ref/models/fields.txt.
Reorganized docs to list and explain the types of lazy relationships
that can be defined in related fields.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 65f3cfce59 from main.
2024-10-17 11:42:54 -03:00
Maryam Yusuf
8ce0039cee [5.1.x] Expanded contributor docs on getting feedback from the wider community.
Backport of 438fc42ac6 from main.
2024-10-16 13:25:43 +02:00
Mariusz Felisiak
6cb0757966 [5.1.x] Fixed docs build on Sphinx 8.1+.
Sphinx 8.1 added :cve: role, so there is no need to define it in Django:
- https://github.com/sphinx-doc/sphinx/pull/11781

This also changes used URL to the one used by Python and soonish to be
used by Sphinx itself:
- https://github.com/sphinx-doc/sphinx/pull/13006

Backport of 263f731919 from main.
2024-10-14 14:44:09 +02:00
Sarah Boyce
a9a7ef7762 [5.1.x] Fixed #35612 -- Added documentation on how the security team evaluates reports.
Co-authored-by: Joshua Olatunji <joshua+github@etentlabs.com>

Backport of 9423f8b476 from main.
2024-10-11 17:15:51 +02:00
Chiara Mezzavilla
b852989c30 [5.1.x] Explained exception to using include() within urlpatterns in tutorial 1.
Backport of 40a60d589e from main.
2024-10-09 11:47:09 -03:00
Natalia
a313e203e0 [5.1.x] Refs #35502 -- Clarified models.py file path in docs/topics/db/queries.txt.
Backport of fc1119e8be from main.
2024-10-09 09:13:58 -03:00
Meta
2bd546957d [5.1.x] Fixed #35502 -- Removed duplication of "mysite" directory name in intro docs.
Reorganized intro docs when explaining `django-admin startproject` to prevent
confusion when using "mysite" as both the top-level directory and the Django
project directory name.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
Co-authored-by: Carlton Gibson <carlton@noumenal.es>

Backport of d2c74cfb48 from main.
2024-10-09 09:13:37 -03:00
Mariusz Felisiak
e2551b30ad [5.1.x] Refs #34900 -- Doc'd Python 3.13 compatibility.
Backport of 2e3bc59fd3 from main.
2024-10-09 09:56:42 +02:00
Natalia
52f2996b9b [5.1.x] Added stub release notes for 5.1.3.
Backport of 4d11402932 from main.
2024-10-08 12:04:53 -03:00
Natalia
6e07a7769f [5.1.x] Added release date for 5.1.2.
Backport of 5bb433e99b from main.
2024-10-08 11:39:02 -03:00
nessita
17fa7592af [5.1.x] Fixed #35809 -- Set background color for selected rows in the admin's form select widget.
Regression in b47bdb4cd9.

Thank you Giannis Terzopoulos for the review, and Tom Carrick and Sarah Boyce
for the review.

Backport of 679d57816d from main.
2024-10-08 10:02:33 -03:00
nessita
e245f62d00
[5.1.x] Updated translations from Transifex. 2024-10-07 17:35:43 -03:00
nessita
6bedb102e9 [5.1.x] Reindented attributes and methods for classes in docs/ref/middleware.txt.
Backport of 1feedc8ef8 from main.
2024-10-02 14:21:43 -03:00
Aditya Chaudhary
bf64ac3567 [5.1.x] Fixed #35670 -- Clarified the return value for LoginRequiredMiddleware's methods.
Backport of efc3b0c627 from main.
2024-10-02 13:15:57 -03:00
Chiara Mezzavilla
53031136f5 [5.1.x] Relocated path() explanation to docs/ref/urls.txt to simplify tutorial 1.
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 73e8e81141 from main.
2024-09-30 13:32:39 -03:00
John Parton
22bce642a9 [5.1.x] Fixed #35734 -- Used JSONB_BUILD_OBJECT database function on PostgreSQL when using server-side bindings.
Regression in 81ccf92f15.

Backport of f22ff4561a from main.
2024-09-26 16:22:59 +02:00
Sarah Boyce
9e146b27ad [5.1.x] Made cosmetic edits to the Steering council docs.
Backport of 39de2e97a0 from main.
2024-09-23 12:53:17 +02:00
Sarah Boyce
251180f7f9 [5.1.x] Removed setting the release schedule from Steering Council prerogatives as per DEP 44.
Backport of 121747fdba from main.
2024-09-21 15:10:22 +02:00
Carlton Gibson
d96b661135 [5.1.x] Fixed #35767 -- Adjusted customizing User model docs.
Backport of c0128e3a81 from main.
2024-09-16 17:41:36 -03:00
Ronny V.
c12fe0a724 [5.1.x] Added example of email sending with additional capabilities to docs/topics/email.txt.
Co-authored-by: Mike Edmunds <medmunds@gmail.com>

Backport of f4813211e2 from main.
2024-09-11 13:10:45 -03:00
Gastón Avila
590f5e09f0 [5.1.x] Fixed #35732 -- Wrapped ConcatPair expression in parentheses to ensure operator precedence.
When ConcatPair was updated to use || this lost the implicit wrapping from CONCAT(...).
This broke the WHERE clauses when used in combination with PostgreSQL trigram similarity.

Regression in 6364b6ee10.

Backport of c3ca6075cc from main.

Co-authored-by: Emiliano Cuenca <106986074+emicuencac@users.noreply.github.com>
2024-09-11 14:40:48 +02:00
Clifford Gama
bf45f06769 [5.1.x] Refs #35060 -- Fixed the update to update_fields in overridden save() method docs.
Regression in 3915d4c70d.

Backport of 38c2065154 from main.
2024-09-11 13:25:21 +02:00
Jon Ribbens
d3da505999 [5.1.x] Fixed #35681 -- Corrected geoip2 docs when describing GeoIP2Exception.
Backport of 826ef00668 from main.
2024-09-07 00:04:59 -03:00
Mariatta
9da696f539 [5.1.x] Fixed #35737 -- Clarified where "models" comes from in tutorial 7.
Backport of 01a4d8a3c7 from main.
2024-09-05 21:37:46 -03:00
SirenityK
76bbeee273 [5.1.x] Updated instruction for deploying with Uvicorn and Gunicorn.
Backport of 03d52d2a52 from main.
2024-09-05 18:33:52 -03:00
Natalia
1b7b5e0d17 [5.1.x] Added CVE-2024-45230 and CVE-2024-45231 to security archive.
Backport of aa52930687 from main.
2024-09-03 11:24:09 -03:00
Natalia
669bc196c9 [5.1.x] Added stub release notes for 5.1.2.
Backport of 60073a3e6b from main.
2024-09-03 10:02:23 -03:00
Natalia
3c733c78d6 [5.1.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.
On successful submission of a password reset request, an email is sent
to the accounts known to the system. If sending this email fails (due to
email backend misconfiguration, service provider outage, network issues,
etc.), an attacker might exploit this by detecting which password reset
requests succeed and which ones generate a 500 error response.

Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam
Johnson, and Sarah Boyce for the reviews.
2024-09-03 09:24:21 -03:00
Sarah Boyce
022ab0a75c [5.1.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and urlizetrunc template filters.
Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.
2024-09-03 09:24:13 -03:00
Sarah Boyce
6203965960 [5.1.x] Fixed #35716 -- Fixed VariableDoesNotExist when rendering admin fieldsets.
Regression in 01ed59f753.

Thank you to Fábio Domingues and Marijke Luttekes for the report,
and thank you to Natalia Bidart for the review.

Backport of fd1dd76778 from main.
2024-08-30 20:52:41 +02:00
Sarah Boyce
26c06671d9 [5.1.x] Fixed #35688 -- Restored timezone and role setters to be PostgreSQL DatabaseWrapper methods.
Following the addition of PostgreSQL connection pool support in
Refs #33497, the methods for configuring the database role and timezone
were moved to module-level functions. This change prevented subclasses
of DatabaseWrapper from overriding these methods as needed, for example,
when creating wrappers for other PostgreSQL-based backends.

Thank you Christian Hardenberg for the report and to
Florian Apolloner and Natalia Bidart for the review.

Regression in fad334e1a9.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 7380ac5734 from main.
2024-08-28 19:25:55 -03:00
Adam Johnson
fcb71a76cc [5.1.x] Removed outdated note about lack of subquery support in MySQL.
Backport of 26a67943ac from main.
2024-08-28 15:56:35 -03:00
Jacob Walls
9b09a4fd95 [5.1.x] Fixed typos in docs/howto/initial-data.txt.
Backport of 920efe503f from main.
2024-08-28 15:26:55 -03:00
Simon Charette
9a461cae3e [5.1.x] Fixed #35666 -- Documented stacklevel usage and testing, and adjusted test suite accordingly.
Over the years we've had multiple instances of hit and misses when
emitting warnings: either setting the wrong stacklevel or not setting
it at all.

This work adds assertions for the existing warnings that were declaring
the correct stacklevel, but were lacking tests for it.

Backport of 57307bbc7d from main.
2024-08-28 11:47:15 -03:00
Simon Charette
dd58edcc37 [5.1.x] Refs #35405 -- Adjusted deprecation warning stacklevel in FieldCacheMixin.get_cache_name().
Backport of 39abd56a7f from main.
2024-08-28 11:46:49 -03:00
Simon Charette
8f5d2c374a [5.1.x] Refs #35326 -- Adjusted deprecation warning stacklevel in FileSystemStorage.OS_OPEN_FLAGS.
Backport of 47f18a7226 from main.
2024-08-28 11:46:23 -03:00
Simon Charette
c87007ab60 [5.1.x] Refs #35060 -- Adjusted deprecation warning stacklevel in Model.save()/asave().
Backport of 52ed2b645e from main.
2024-08-28 11:45:35 -03:00