Revisions of python-Django

buildservice-autocommit accepted request 1168720 from Daniel Garcia's avatar Daniel Garcia (dgarcia) (revision 164)
baserev update by copy to link target
Daniel Garcia's avatar Daniel Garcia (dgarcia) accepted request 1168719 from Daniel Garcia's avatar Daniel Garcia (dgarcia) (revision 163)
- Add fix-safemimetext-set_payload.patch, to support python 3.11.9+
  (gh#django/django@b231bcd19e57, bsc#1222880)
buildservice-autocommit accepted request 1154852 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 162)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1154851 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 161)
-  Update to 4.2.11 (CVE-2024-27351, bsc#1220358)
  * CVE-2024-27351: Potential regular expression denial-of-service in
    django.utils.text.Truncator.words()
  * Fixed a regression in Django 4.2.10 where intcomma template filter
    could return a leading comma for string representation of floats
- Remove python3122.patch, already upstream
buildservice-autocommit accepted request 1145400 from Daniel Garcia's avatar Daniel Garcia (dgarcia) (revision 160)
baserev update by copy to link target
Daniel Garcia's avatar Daniel Garcia (dgarcia) committed (revision 159)
- Fix python3122.patch
Daniel Garcia's avatar Daniel Garcia (dgarcia) committed (revision 158)
- Add python3122.patch to fix tests with python 3.12.2
  gh#django/django#17843
- Update to 4.2.10 (bsc#1219683, CVE-2024-24680):
  - Django 4.2.10 fixes a security issue with severity "moderate" in
    4.2.9.
    CVE-2024-24680: Potential denial-of-service in intcomma template
    filter The intcomma template filter was subject to a potential
    denial-of-service attack when used with very long strings.
buildservice-autocommit accepted request 1137119 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 157)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1137053 from Antonio Larrosa's avatar Antonio Larrosa (alarrosa) (revision 156)
Add bugzilla reference

  + CVE-2023-31047: Potential bypass of validation when uploading
    multiple files using one form field (bsc#1210866)
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1136760 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 155)
- Update to 4.2.9:
  * Fixed a regression in Django 4.2.8 where admin fields on the same
    line could overflow the page and become non-interactive
buildservice-autocommit accepted request 1130705 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 154)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1130704 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 153)
- Update to 4.2.8
  * Fixed a regression in Django 4.2 that caused makemigrations
    --check to stop displaying pending migrations
  * Fixed a regression in Django 4.2 that caused a crash of
    QuerySet.aggregate() with aggregates referencing other aggregates
    or window functions through conditional expressions
  * Fixed a regression in Django 4.2 that caused a crash when
    annotating a QuerySet with a Window expressions composed of a
    partition_by clause mixing field types and aggregation expressions
  * Fixed a regression in Django 4.2 where the admin’s change list
    page had misaligned pagination links and inputs when using
    list_editable
  * Fixed a regression in Django 4.2 where checkboxes in the admin
    would be centered on narrower screen widths
  * Fixed a regression in Django 4.2 that caused a crash of querysets
    with aggregations on MariaDB when the ONLY_FULL_GROUP_BY SQL mode
    was enabled
  * Fixed a regression in Django 4.2 where the admin’s read-only
    password widget and some help texts were incorrectly aligned at
    tablet widths
  * Fixed a regression in Django 4.2 that caused a migration crash on
    SQLite when altering unsupported Meta.db_table_comment
buildservice-autocommit accepted request 1129130 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 152)
baserev update by copy to link target
Markéta Machová's avatar Markéta Machová (mcalabkova) accepted request 1129117 from Dirk Mueller's avatar Dirk Mueller (dirkmueller) (revision 151)
- add dirty-hack-remove-assert.patch from fedora to fix
  minor test failure with python 3.12

- Update to 4.2.5 (CVE-2023-41164)
- Update minimal dependency versions.
  + Fixed a long standing bug in the __len lookup for ArrayField
    constraints on expressions and database functions.
    customization.
  read the egg-info and fail if they are not fulfilled.
  + New decorators for the admin site
  * CVE-2020-24584: Permission escalation in intermediate-level directories of the file
  * Fixed a data loss possibility in the select_for_update(). When using related fields
  * Fixed a regression in Django 3.1 that caused permission errors in CommonPasswordValidator
 * Added compatibility for cx_Oracle 8
 * many other bugfixes
- Update to 3.0.5
 * Fixed a regression in Django 2.0 where combining Q objects with __in lookups
     with FileExistsError if concurrent saves try to create the same directory
  * Made admin’s RelatedFieldWidgetWrapper use the wrapped widget’s
    value_omitted_from_data() method (#27905)
  * Fixed ClearableFileInput’s “Clear” checkbox on model form fields where the
    model field has a default
  * Fixed RequestDataTooBig and TooManyFieldsSent exceptions crashing rather than
  * Fixed a crash on Oracle and PostgreSQL when subtracting DurationField or
    IntegerField from DateField
  * Fixed query expression date subtraction accuracy on PostgreSQL for differences
  * Fixed a GDALException raised by GDALClose on GDAL >= 2.0
  * Quoted the Oracle test user’s password in queries to fix the “ORA-00922: missing
    or invalid option” error when the password starts with a number or
  with SLE-12 which provides PIL instead of Pillow.
buildservice-autocommit accepted request 1121683 from Markéta Machová's avatar Markéta Machová (mcalabkova) (revision 150)
baserev update by copy to link target
Markéta Machová's avatar Markéta Machová (mcalabkova) accepted request 1121555 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 149)
- Update to 4.2.7
  * Fixed a regression in Django 4.2 that caused a crash of
    QuerySet.aggregate() with aggregates referencing expressions
    containing subqueries
  * Restored, following a regression in Django 4.2, creating
    varchar/text_pattern_ops indexes on CharField and TextField with
    deterministic collations on PostgreSQL
buildservice-autocommit accepted request 1117946 from Daniel Garcia's avatar Daniel Garcia (dgarcia) (revision 148)
baserev update by copy to link target
Daniel Garcia's avatar Daniel Garcia (dgarcia) committed (revision 147)
- Update to 4.2.6 (bsc#1215978, CVE-2023-43665)
  * CVE-2023-43665: Denial-of-service possibility in
    django.utils.text.Truncator
    The input processed by Truncator, when operating in HTML mode, has
    been limited to the first five million characters in order to
    avoid potential performance and memory issues.
  * Fixed a regression in Django 4.2.5 where overriding the deprecated
    DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings in tests
    caused the main STORAGES to mutate (#34821).
  * Fixed a regression in Django 4.2 that caused unnecessary casting
    of string based fields (CharField, EmailField, TextField,
    CICharField, CIEmailField, and CITextField) used with the __isnull
    lookup on PostgreSQL. As a consequence, indexes using an __isnull
    expression or condition created before Django 4.2 wouldn’t be used
    by the query planner, leading to a performance regression
    (#34840).
buildservice-autocommit accepted request 1108900 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 146)
baserev update by copy to link target
Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) accepted request 1108899 from Alberto Planas Dominguez's avatar Alberto Planas Dominguez (aplanas) (revision 145)
- Update to 4.2.5 (CVE-2023-41164) 
  + Bugfixes
    * Fixed a regression in Django 4.2 that caused an incorrect
      validation of CheckConstraints on __isnull lookups against
      JSONField
    * Fixed a bug in Django 4.2 where the deprecated
      DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings were not
      synced with STORAGES
    * Fixed a regression in Django 4.2.2 that caused an unnecessary
      selection of a non-nullable ManyToManyField without a natural
      key during serialization
    * Fixed a regression in Django 4.2 that caused a crash of a
      queryset when filtering against deeply nested OuterRef()
      annotations
Displaying revisions 1 - 20 of 164
openSUSE Build Service is sponsored by