File python-django-axes.changes of Package python-django-axes
-------------------------------------------------------------------
Wed Apr 16 08:28:19 UTC 2025 - Markéta Machová <mmachova@suse.com>
- update to 7.0.2
* Add session hash to access log.
* Add test matrix support for Django 5.1.
* Drop support for EOL Django 3.2.
* Add support for dynamic cooloff time calculation from request.
This is a breaking change.
* Add Python 3.13 support.
* Default to using settings.AUTH_USER_MODEL.USERNAME_FIELD for
resolving settings.AXES_USERNAME_FORM_FIELD if otherwise unset
(previously "username").
-------------------------------------------------------------------
Fri May 3 07:27:02 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 6.4.0:
* Add support for Python 3.12 and Django 5.0, drop support for
Django 4.1. [aleksihakli]
* Drop setuptools and pkg_resources dependencies. [Viicos]
-------------------------------------------------------------------
Sun Jan 14 17:32:47 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 6.3.0:
* Add async support to middleware. [Taikono-Himazin]
-------------------------------------------------------------------
Wed Dec 27 09:32:48 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 6.2.0:
* Update documentation.
* Add new management command ``axes_reset_ip_username``.
* Add French translations.
* Avoid running data migration on incorrect databases.
-------------------------------------------------------------------
Sat Dec 2 20:19:59 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 6.1.1:
* Fix ``TransactionManagementError`` when using the database
handler with a custom database with for ``AccessAttempt`` or
``AccessFailureLog``.
* Set ``AXES_SENSITIVE_PARAMETERS`` default value to
``["username", "ip_address"]`` in addition to the
``AXES_PASSWORD_FORM_FIELD`` configuration flag.
* Improve documentation on GDPR and privacy notes and
configuration flags.
* Add Indonesion translation.
* Remove unused methods from AxesStandaloneBackend.
* Add username to admin fieldsets.
* Add Django system checks for validating callable import path
settings.
* Improve documentation.
* Improve repository issue and PR templates.
* Fine-tune CI pipelines and RTD build requirements.
* Version 6 is a breaking release. Please see the documentation
for upgrade instructions.
* Deprecate Python 3.7 support.
* Deprecate ``is_admin_site`` API call with misleading naming.
* Add ``AXES_LOCKOUT_PARAMETERS`` configuration flag that will
supersede ``AXES_ONLY_USER_FAILURES``,
``AXES_LOCK_OUT_BY_COMBINATION_USER_AND_IP``,
``AXES_LOCK_OUT_BY_USER_OR_IP``, and ``AXES_USE_USER_AGENT``
configurations. Add deprecation warnings for old flags. See
project documentation on RTD for update instructions.
* Improve translations.
* Use Django ``cache.incr`` API for atomic cached failure
counting
* Make ``django-ipware`` an optional dependency. Install it
with e.g. ``pip install django-axes[ipware]`` package and
extras specifier. [aleksihakli]
* Deprecate and rename old configuration flags. Old flags will
be removed in or after version ``6.1``. [aleksihakli]
* Fix sensitive parameter logging for database handler.
* Add ``AXES_CLIENT_CALLABLE`` setting.
* Update Python, Django, and package versions.
-------------------------------------------------------------------
Mon Mar 6 01:19:28 UTC 2023 - John Vandenberg <jayvdb@gmail.com>
- Update to v5.40.1
* Fix bug in user agent request blocking
- from v5.40.0
* Update packages and linters for new version support
* Update documentation links
* Use importlib instead of setuptools for Python 3.8+
* Python 3.11 support
* Documentation improvements
- from v5.39.0
* Utilize new backend class in tests to fix false negative
system check warnings
- from v5.38.0
* Adjust changelog so release notes are correctly visible
on PyPy and released package
- from v5.37.0
* Add Django 4.1 support. PyPy 3.8 has a known issue with
Django 4.1 and is exempted
- from v5.36.0
* Add AxesStandaloneBackend without ModelBackend dependencies
- from v5.35.0
* Add Arabic translations
- from v5.34.0
* Improve German translations
- from v5.33.0
* Migrate MD5 cache key digests to SHA256
* Improve and streamline startup logging
* Improve module typing
* Add support for float or partial hours for AXES_COOLOFF_TIME
- from v5.32.0
* Add support for persistent failure logging where failed login
attempts are persisted in the database until a specific threshold
is reached.
* Add support for not resetting login times when users try to login
during the lockout cooloff period
- from v5.31.0
* Adjust version specifiers for newer Python and other package versions.
Set package minimum Python version to 3.7. Relax django-ipware
version requirements to allow newer versions
- from v5.30.0
* Fix package build error in 5.29.0 to allow publishing
- from v5.29.0
* Drop Python 3.6 support
- from v5.28.0
* Drop Django < 3.2 support
* Add Django 4.0 to test matrix
- from v5.27.0
* Fix pkg_resources missing for package version resolution on runtime
due to setuptools not being a runtime dependency.
* Add Python 3.10 and Django 3.2 support
- from v5.26.0
* Fix AXES_USERNAME_CALLABLE not receiving credentials attribute in
Axes middleware lockout response when user is locked out
- from v5.25.0
* Fix duplicated AccessAttempts with updated database model
unique_together constraints and data and schema migration
- from v5.24.0
* Use atomic transaction for updating AccessAttempts in database handler
- from v5.23.0
* Pass request as argument to AXES_CLIENT_STR_CALLABLE
- from v5.22.0
* Improve failures_since_start handling by moving the counter
incrementation from non-atomic Python code call to atomic
database function
* Add publicly available request.axes_failures_since_start attribute
- from v5.21.0
* Add configurable lockout HTTP status code responses with the new
AXES_HTTP_RESPONSE_CODE setting
- from v5.20.0
* Improve race condition handling in e.g. multi-process environments
by using get_or_create for access attempt fetching and updates
- from v5.19.0
* Add Polish locale
- from v5.18.0
* Fix default_auto_field warning
- from v5.17.0
* Fix default_app_config deprecation. Django 3.2 automatically
detects AppConfig so setting is no longer required
- from v5.16.0
* Add AXES_CLIENT_STR_CALLABLE setting
-------------------------------------------------------------------
Fri Jan 7 03:47:57 UTC 2022 - John Vandenberg <jayvdb@gmail.com>
- Skip Tumbleweed Python 3.6 incompatible with Django 4
-------------------------------------------------------------------
Mon May 17 14:13:02 UTC 2021 - Markéta Machová <mmachova@suse.com>
- Update to 5.15.0
* Improve Django REST Framework (DRF) integration.
* Add Python 3.9 support.
* Add support for resetting attempts with cache backend.
* Remove support for Django 2.0.
* Add support for Django 3.2.
-------------------------------------------------------------------
Sun Sep 13 13:28:41 UTC 2020 - John Vandenberg <jayvdb@gmail.com>
- Update to v5.6.0
-------------------------------------------------------------------
Wed Apr 22 11:08:25 AM UTC 2020 - John Vandenberg <jayvdb@gmail.com>
- Initial spec for v5.3.1
