source/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2026-02-09 02:49:25 +08:00
Code Issues Packages Projects Releases Wiki Activity
33,964 Commits 5 Branches 498 Tags
6.0rc1
Commit Graph

33964 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Natalia
4413e15380 [6.0.x] Bumped version for 6.0 release candidate 1 release. 6.0rc1 2025-11-19 11:47:00 -03:00
varunkasyap
ef4715ef69 [6.0.x] Fixed #36733 -- Escaped attributes in Stylesheet.__str__(). 
Thanks Mustafa Barakat for the report, Baptiste Mispelon for
the triage, and Jake Howard for the review.

Backport of e05f2a7569 from main.
 2025-11-18 17:16:27 -05:00
Georgi Yanchev
569f455b58 [6.0.x] Fixed #36141 -- Checked for applied replaced migrations recursively. 
Regression in 64b1ac7292.
Backport of b07298a73a from main.
 2025-11-18 08:11:36 -05:00
Annabelle Wiegart
1e8d6a2e1d [6.0.x] Fixed #26379 -- Doc'd that the first filter() on a many-to-many relation is sticky. 
Backport of 3c005b5f79 from main.
 2025-11-17 15:15:41 -05:00
Kasyap Pentamaraju
37b5dced86 [6.0.x] Fixed #36686 -- Clarified Meta.ordering is ignored in GROUP BY queries. 
Backport of 7e765a6859 from main.
 2025-11-13 11:19:05 -05:00
Adam Johnson
5ae8659cb5 [6.0.x] Fixed #36730 -- Fixed constraint validation crash for excluded FK attnames. 
Regression in e44e8327d3.

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of abfa4619fb from main
 2025-11-13 10:04:40 +01:00
Clifford Gama
d6af15d44d [6.0.x] Fixed typo in docs/ref/databases.txt. 
Backport of 2b0f24e622 from main.
 2025-11-10 18:00:19 -03:00
Jacob Walls
a26b660cff Refs #36680 -- Avoided manipulating PATH in AdminScriptTestCase. 
This mostly reverts 6436ec3210,
which was fragile. Instead, if black is present, we use it to format the
expected and actual results, instead of hard-coding the expected
formatted value.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
 2025-11-10 14:14:22 -05:00
Markus Holtermann
edacefdf2a [6.0.x] Fixed unsafe variable interpolation in GitHub Action workflow. 
Thank you Davide Netti for the report and initial patch.

Co-authored-by: Davide Netti <davide.netti4@gmail.com>

Backport of 01c70ba148 from main.
 2025-11-10 15:52:44 -03:00
Clifford Gama
37ab85dd8d [6.0.x] Clarified "get_db_prep_value" default result in docs/ref/models/fields.txt. 
Backport of c135be349d from main.
 2025-11-10 14:12:06 -03:00
Hong Xu
cdae630530 [6.0.x] Clarified EmailValidator docs to specify it validates an email address. 
Updated the EmailValidator docs in docs/ref/validators.txt to explicitly
state that it validates an email address, to avoid confusion with
validating email message content.

Backport of a4f7674134 from main.
 2025-11-10 12:52:53 -03:00
Tim Schilling
fb2fb2de4d [6.0.x] Removed community packages admonition from settings docs. 
Backport of 5ef870fbc5 from main.
 2025-11-06 15:52:36 -05:00
Tim Schilling
03f31bcddf [6.0.x] Added community package email backends mention to docs. 
Co-authored-by: Clifford Gama <cliffygamy@gmail.com>

Backport of 47ac64ed8b from main.
 2025-11-06 15:52:25 -05:00
Mehraz Hossain Rumman
ca82428442 [6.0.x] Fixed #36710 -- Fixed a regression in urlize for multipart domain names. 
Thanks Mehraz Hossain Rumman for the report and Bruno Alla for the triage.

Regression in a9fe98d5bd.
Backport of 125b63ca74 from main.
 2025-11-05 17:06:23 -05:00
Natalia
cdb93b7877 [6.0.x] Added CVE-2025-64458 and CVE-2025-64459 to security archive. 
Backport of c5a107e824 from main.
 2025-11-05 11:18:19 -03:00
Natalia
ef4e0bcdd5 [6.0.x] Added stub release notes for 5.2.9. 
Backport of 6e18c078d5 from main.
 2025-11-05 11:18:09 -03:00
Jacob Walls
a3f3a81f33 [6.0.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on dictionary expansion. 
Backport of 3c3f463577 from main.
 2025-11-05 09:30:12 -03:00
Jacob Walls
06dd38324a [6.0.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via the _connector kwarg. 
Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon
Charette, and Jake Howard for the reviews.

Backport of 98e642c691 from main.
 2025-11-05 09:29:44 -03:00
Jacob Walls
6e13348436 [6.0.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedirect/HttpResponsePermanentRedirect on Windows. 
Thanks Seokchan Yoon for the report, Markus Holtermann for the
triage, and Jake Howard for the review.

Follow-up to CVE-2025-27556 and 39e2297210.

Backport of c880530ddd from main.
 2025-11-05 09:28:56 -03:00
Hal Blackburn
12042b8978 [6.0.x] Fixed #36704 -- Fixed system check error for proxy model with a composite pk. 
Proxy models subclassing a model with a CompositePrimaryKey were
incorrectly reporting check errors because the check that requires only
local fields to be used in a composite pk was evaluated against the proxy
subclass, which has no fields.

To fix this, composite pk field checks are not evaluated against
proxy subclasses, as none of the checks are applicable to proxy
subclasses. This also has the benefit of not double-reporting real check
errors from an invalid superclass pk.

Thanks Clifford Gama for the review.

Backport of 74564946c3 from main.
 2025-11-04 11:59:49 -05:00
ontowhee
1b9f7a1ddf [6.0.x] Updated ticket triage process diagram and contributing docs. 
Backport of eaf7b563a5 from main.
 2025-11-04 09:40:43 -03:00
Patrick Rauscher
953d31028a [6.0.x] Fixed #36696 -- Fixed NameError when inspecting functions with deferred annotations. 
In Python 3.14, annotations are deferred by default, so we should not
assume that the names in them have been imported unconditionally.

Backport of 6019147229 from main.
 2025-10-31 08:45:13 -04:00
Tim Schilling
a36108094d [6.0.x] Added community package storage backends mention to docs. 
Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>

Backport of 340e4f832e from main.
 2025-10-30 17:22:24 -04:00
Mariusz Felisiak
11cfb573d2 [6.0.x] Refs #36680 -- Fixed admin_scripts tests crash when black is not installed. 
Regression in 6436ec3210.
Backport of 3939cd2795 from main.
 2025-10-30 08:41:02 -03:00
Mariusz Felisiak
e217139f53 [6.0.x] Fixed #36596 -- Made parallel test runner respect django_test_skips and django_test_expected_failures. 
Backport of 9ba3f74a46 from main.
 2025-10-29 17:59:49 -03:00
Jacob Walls
32ef95796a [6.0.x] Fixed #36680 -- Parametrized formatter discovery in AdminScriptTestCase. 
Backport of 6436ec3210 from main.
 2025-10-29 17:57:05 -03:00
Mariusz Felisiak
db922c885c [6.0.x] Fixed parameter names in in "New contributor" GitHub action. 
Follow up to 407ab79357.

Backport of 37df013195 from main.
 2025-10-29 17:07:33 -03:00
Jacob Walls
e87de45bc1 [6.0.x] Pinned "New contributor" GitHub action to v1. 
Later versions misidentify all contributors as new ones if the project
does not enable issues.

Follow-up to b7507bad77.

Backport of 407ab79357 from main.
 2025-10-29 17:07:29 -03:00
Tim Kamanin
b36029b6ea [6.0.x] Added required "issue_message" input to "New contributor" GitHub action. 
Backport of dfb04d9472 from main.
 2025-10-29 17:05:32 -03:00
Jacob Walls
9e87170674 [6.0.x] Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26. 
Backport of ab108bf94d from main.
 2025-10-29 14:59:34 -03:00
Jacob Walls
69386758ef [6.0.x] Fixed #36678 -- Limited retries in ParallelTestRunner. 
Thanks Natalia Bidart for the review.

Backport of 1aa69a7491 from main.
 2025-10-29 09:12:12 -03:00
Kasyap Pentamaraju
f13e6c90cf [6.0.x] Fixed #36681 -- Removed English pluralization bias from example in docs/topics/i18n/translation.txt. 
Backport of 0ea01101c3 from main.
 2025-10-27 14:42:45 -04:00
Annabelle Wiegart
f647d864c2 [6.0.x] Fixed #35095 -- Clarified Swiss number formatting in docs/topics/i18n/formatting.txt. 
Co-authored-by: Ahmed Nassar <a.moh.nassar00@gmail.com>

Backport of 7423918125 from main.
 2025-10-23 10:13:28 -04:00
Natalia
a956e39b38 [6.0.x] Bumped version for 6.0 beta 1 release. 6.0b1 2025-10-22 15:40:01 -03:00
Natalia
ee5cc0b7d6 [6.0.x] Made cosmetic edits to docs/releases/6.0.txt. 
Backport of 42d6e20feb from main.
 2025-10-22 15:38:28 -03:00
Jacob Walls
da9f73c579 [6.0.x] Fixed #36677 -- Fixed scheduling of system checks in ParallelTestSuite workers. 
Running system checks in workers must happen after database aliases
are set up.

Regression in 606fc35279.

Backport of b6c9246d0a from main.
 2025-10-21 22:54:49 -04:00
Mariusz Felisiak
500c5d325f [6.0.x] Made RemoteTestResultTest.test_pickle_errors_detection() compatible with tblib 3.2+. 
tblib 3.2+ makes exception subclasses with __init__() and the default
__reduce__() picklable. This broke the test for
RemoteTestResult._confirm_picklable(), which expects a specific
exception to fail unpickling.

https://github.com/ionelmc/python-tblib/blob/master/CHANGELOG.rst#320-2025-10-21

This fix defines ExceptionThatFailsUnpickling.__reduce__() in a way
that pickle.dumps(obj) succeeds, but pickle.loads(pickle.dumps(obj))
raises TypeError.

Refs #27301. This preserves the intent of the regression test from
52188a5ca6 without skipping it.

Backport of 548209e620 from main.
 2025-10-21 23:11:08 -03:00
Adam Johnson
bb4fcf5f67 [6.0.x] Fixed #36656 -- Avoided truncating async streaming responses in GZipMiddleware. 
Backport of a0323a0c44 from main.
 2025-10-21 10:46:37 -04:00
YashRaj1506
f5b6ed7820 [6.0.x] Fixed #36470 -- Prevented log injection in runserver when handling NOT FOUND. 
Migrated `WSGIRequestHandler.log_message()` to use a more robust
`log_message()` helper, which was based of `log_response()` via factoring out
the common bits.

Refs CVE-2025-48432.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>

Backport of 9bb83925d6 from main.
 2025-10-20 16:22:10 -03:00
Emmanuel Ferdman
c365139af7 [6.0.x] Removed duplicate display_raw key in expected data in GeometryWidgetTests. 
Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com>

Backport of 5625bd5907 from main.
 2025-10-20 14:52:48 -03:00
Mariusz Felisiak
d2a69d730b [6.0.x] Fixed RelatedGeoModelTest.test_related_union_aggregate() test on Oracle and GEOS 3.12+. 
Backport of 344ae16e1e from main
 2025-10-20 16:05:11 +02:00
Mariusz Felisiak
195836b69a [6.0.x] Refs #36005 -- Bumped minimum supported versions of docutils to 0.22. 
Backport of ca3e0484ef from main.
 2025-10-19 20:16:37 +02:00
Mariusz Felisiak
a27c2ef906 [6.0.x] Refs #35844 -- Doc'd Python 3.14 compatibility. 
Backport of 56977b466c from main.
 2025-10-17 19:26:34 +02:00
Mariusz Felisiak
915d10a57d [6.0.x] Refs #35844 -- Relaxed GEOSIOTest.test02_wktwriter() test assertion. 
Backport of 2d9c194d5a from main
 2025-10-17 19:25:47 +02:00
aj2s
fa772f4014 [6.0.x] Fixed #36669 -- Doc'd that negative indexes are not supported in F() slices. 
Backport of f715bc8990 from main.
 2025-10-17 10:22:04 -04:00
Jacob Walls
887e897287 [6.0.x] Bumped minimum isort version to 7.0.0. 
Added ignores relating to https://github.com/PyCQA/isort/issues/2352.

Backport of d980d68609 from main.
 2025-10-16 14:59:48 -04:00
Jacob Walls
2cc90728de [6.0.x] Refs #36648 -- Removed hardcoded pk in CompositePKAggregateTests. 
Backport of bee64561a6 from main.
 2025-10-15 23:45:20 -04:00
Clifford Gama
5c114ce2d8 [6.0.x] Fixed 36622 -- Prevented LazyObject FileField storages from evaluating at boot time. 
Co-authored-by: Fabien MICHEL <fmichel@adista.fr>

Backport of 6862d46dd9 from main.
 2025-10-15 18:25:43 -03:00
Baptiste Mispelon
094797ae50 [6.0.x] Fixed #36659 -- Fixed flatpage content selector in admin forms.css. 
Regression in bb145e2c47.

Backport of 2b62951fec from main.
 2025-10-15 11:13:12 -04:00
Mariusz Felisiak
880c8fa088 Skipped GISFunctionsTests.test_geometry_type() test for MultiPoint on MariaDB and GEOS 3.12+. 
GEOSWKTWriter_write() behavior was changed in GEOS 3.12+ to include
parentheses for sub-members (https://github.com/libgeos/geos/pull/903).

MariaDB doesn't accept WKT representations with additional parentheses
for MultiPoint. This is an accepted bug (MDEV-36166) in MariaDB that
should be fixed in the future:

- https://jira.mariadb.org/browse/MDEV-36166
 2025-10-15 15:04:26 +02:00