Revisions of python-Django

buildservice-autocommit accepted request 1208607 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 182)
baserev update by copy to link target
Markéta Machová's avatar Markéta Machová (mcalabkova) accepted request 1208605 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 181)
- Update to 5.1.2
  * Fixed a regression in Django 5.1 that caused a crash when using 
    the PostgreSQL lookup trigram_similar on output fields from Concat
  * Fixed a regression in Django 5.1 that caused a crash of JSONObject() 
    when using server-side binding with PostgreSQL 16+
  * Fixed a regression in Django 5.1 that made selected items in 
    multi-select widgets indistinguishable from non-selected items in 
    the admin dark theme
buildservice-autocommit accepted request 1198700 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 180)
baserev update by copy to link target
Markéta Machová's avatar Markéta Machová (mcalabkova) committed (revision 179)
- Update to 5.1.1 (bsc#1229823, bsc#1229824)
Markéta Machová's avatar Markéta Machová (mcalabkova) accepted request 1198650 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 178)
- Update to 5.1.1 (CVE-2024-45230, bsc#1229823, CVE-2024-45231, bsc#1229824)
  * Fixed a regression in Django 5.1 that caused a crash of Window() when 
    passing an empty sequence to the order_by parameter, and a crash of 
    Prefetch() for a sliced queryset without ordering
  * Fixed a regression in Django 5.1 where a new usable_password field was 
    included in BaseUserCreationForm (and children).
  * Adjusted the deprecation warning stacklevel in Model.save() and 
    Model.asave() to correctly point to the offending call site
  * Adjusted the deprecation warning stacklevel when using OS_OPEN_FLAGS 
    in FileSystemStorage to correctly point to the offending call site
  * Adjusted the deprecation warning stacklevel in FieldCacheMixin.get_cache_name() 
    to correctly point to the offending call site
  * Restored, following a regression in Django 5.1, the ability to 
    override the timezone and role setting behavior used within the 
    init_connection_state method of the PostgreSQL backend
  * Fixed a bug in Django 5.1 where variable lookup errors were logged 
    when rendering admin fieldsets
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1198652 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 177)
- Update to 5.1.1
  * CVE-2024-45230: Potential denial-of-service vulnerability in
    django.utils.html.urlize()
  * CVE-2024-45231: Potential user email enumeration via response
    status on password reset
  * Fixed a regression in Django 5.1 that caused a crash of Window()
    when passing an empty sequence to the order_by parameter, and a
    crash of Prefetch() for a sliced queryset without ordering
  * Fixed a regression in Django 5.1 where a new usable_password field
    was included in BaseUserCreationForm (and children). A new
    AdminUserCreationForm including this field was added, isolating
    the feature to the admin where it was intended
  * Adjusted the deprecation warning stacklevel in Model.save() and
    Model.asave() to correctly point to the offending call site
  * Adjusted the deprecation warning stacklevel when using
    OS_OPEN_FLAGS in FileSystemStorage to correctly point to the
    offending call site
  * Adjusted the deprecation warning stacklevel in
    FieldCacheMixin.get_cache_name() to correctly point to the
    offending call site
  * Restored, following a regression in Django 5.1, the ability to
    override the timezone and role setting behavior used within the
    init_connection_state method of the PostgreSQL backend
  * Fixed a bug in Django 5.1 where variable lookup errors were logged
    when rendering admin fieldsets
buildservice-autocommit accepted request 1192591 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 176)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1192949 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 175)
- Update to 5.1
  * Supports Python >= 3.10.
  * Easier guardrails for authentication: the new and shiny 
    LoginRequiredMiddleware, when added to MIDDLEWARE, enforces 
    authentication for all views by default.
  * A more inclusive framework: Django 5.1 includes several accessibility 
    enhancements, such as improved screen reader support in the admin 
    interface, more semantic HTML elements, and better association of 
    help text and labels with form fieldsets.
  * The second oldest ticket fixed in this release provides the long awaited 
    querystring template tag, which greatly simplifies the handling of query 
    strings when building URLs in templates.
  * For a detailed list of changes see https://docs.djangoproject.com/en/5.1/releases/5.1/
- Refreshed python-Django.keyring
Markéta Machová's avatar Markéta Machová (mcalabkova) committed (revision 174)
add bugzilla entries for the CVEs
buildservice-autocommit accepted request 1192060 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 173)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1192057 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 172)
- Update to 5.0.8
  * CVE-2024-41989: Memory exhaustion in
    django.utils.numberformat.floatformat()
  * CVE-2024-41990: Potential denial-of-service vulnerability in
    django.utils.html.urlize()
  * CVE-2024-41991: Potential denial-of-service vulnerability in
    django.utils.html.urlize() and AdminURLFieldWidget
  * CVE-2024-42005: Potential SQL injection in QuerySet.values() and
    values_list()
  * Added missing validation for
    UniqueConstraint(nulls_distinct=False) when using *expressions
  * Fixed a regression in Django 5.0 where ModelAdmin.action_checkbox
    could break the admin changelist HTML page when rendering a model
    instance with a __html__ method
  * Fixed a crash when creating a model with a Field.db_default and a
    Meta.constraints constraint composed of __endswith, __startswith,
    or __contains lookups
  * Fixed a regression in Django 5.0.7 that caused a crash in
    LocaleMiddleware when processing a language code over 500
    characters
  * Fixed a bug in Django 5.0 that caused a system check crash when
    ModelAdmin.date_hierarchy was a GeneratedField with an
    output_field of DateField or DateTimeField
  * Fixed a bug in Django 5.0 which caused constraint validation to
    either crash or incorrectly raise validation errors for
    constraints referring to fields using Field.db_default
  * Fixed a crash in Django 5.0 when saving a model containing a
    FileField with a db_default set
buildservice-autocommit accepted request 1188243 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 171)
baserev update by copy to link target
Markéta Machová's avatar Markéta Machová (mcalabkova) accepted request 1187821 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 169)
- This release also fixes several security issues:
  * bsc#1227590 (CVE-2024-38875)
  * bsc#1227593 (CVE-2024-39329)
  * bsc#1227594 (CVE-2024-39330)
  * bsc#1227595 (CVE-2024-39614)
buildservice-autocommit accepted request 1186497 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 168)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1186489 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 167)
- Update to 5.0.7
  * Supports Python >= 3.10.
  * Facet counts are now shown for applied filters in the admin changelist 
    when toggled on via the UI. This behavior can be changed via the new 
    ModelAdmin.show_facets attribute.
  * Django 5.0 introduces the concept of a field group, and field group 
    templates. This simplifies rendering of the related elements of a 
    Django form field such as its label, widget, help text, and errors.
  * The new Field.db_default parameter sets a database-computed default value.
  * The new GeneratedField allows creation of database generated columns. 
    This field can be used on all supported database backends to create 
    a field that is always computed from other fields.
  * More options for declaring field choices
  * Few backwards-incompatible changes in the database backend API,
    django.contrib.gis and django.contrib.sitemaps
  * Dropped support for MySQL < 8.0.11
  * Using create_defaults__exact may now be required with QuerySet.update_or_create()
  * Migrating existing UUIDField on MariaDB 10.7+
- Drop no-longer-needed patches:
  * dirty-hack-remove-assert.patch
  * sanitize_address.patch
buildservice-autocommit accepted request 1172648 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 166)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1172647 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 165)
- Update to 4.2.13
  + Django 4.2.13 fixes a packaging error in 4.2.12.
- Update to 4.2.12
  + Django 4.2.12 fixes a compatibility issue with Python 3.11.9+ and 3.12.3+.
  + Fixed a crash in Django 4.2 when validating email max line lengths
    with content decoded using the surrogateescape error handling
    scheme
- Drop fix-safemimetext-set_payload.patch, already merged upstream
buildservice-autocommit accepted request 1168720 from Daniel Garcia's avatar Daniel Garcia (dgarcia) (revision 164)
baserev update by copy to link target
Daniel Garcia's avatar Daniel Garcia (dgarcia) accepted request 1168719 from Daniel Garcia's avatar Daniel Garcia (dgarcia) (revision 163)
- Add fix-safemimetext-set_payload.patch, to support python 3.11.9+
  (gh#django/django@b231bcd19e57, bsc#1222880)
Displaying revisions 1 - 20 of 182
openSUSE Build Service is sponsored by