Fellow Reports -- June 2019

[Carlton Gibson]

Hi All. 

Calendar Week 23 -- ending 09 June.

Released Django versions 2.2.2, 2.1.9 & 1.11.21. 

Triaged:

https://code.djangoproject.com/ticket/30555 -- Migration files generated do not follow PEP8 E501 rule (wontfix)

https://code.djangoproject.com/ticket/30475 -- Use of i18n_patterns and a buggy 404 template trigger internal server error without a backtrace. (Invalid)

https://code.djangoproject.com/ticket/30515 -- Document django.shortcuts.resolve_url. (wontfix)

https://code.djangoproject.com/ticket/30536 -- Allow running custom logic in django.setup(). (Accepted)

Reviewed:

https://code.djangoproject.com/ticket/29834 -- Union queryset with ordering breaks on ordering with derived querysets

https://code.djangoproject.com/ticket/29444 -- Allow fields to be part of the RETURNING clause during INSERT

https://code.djangoproject.com/ticket/29379 -- Add autocomplete attribute to contrib.auth fields

https://code.djangoproject.com/ticket/28567 -- Incompatibility between the set_language() view, LocaleMiddleware, and i18n_patterns() when prefix_default_language=False.

https://github.com/django/django/pull/11442 -- Fixed #28567 -- Added examples of redirect_to context variable when using set_language() view.

https://github.com/django/django/pull/11439 -- Removed redundant object descriptions to prevent warnings with Sphinx 2.1.0.

https://github.com/django/django/pull/11435 -- Refs #30536 - Make django.setup() idempotent and tweakable

Authored: 

https://github.com/django/django/commit/deeba6d92006999fee9adfbd8be79bf0a59e8008

    --  Fixed CVE-2019-12308 -- Made AdminURLFieldWidget validate URL before rendering clickable link.

https://github.com/django/django/commit/34ec52269ade54af31a021b12969913129571a3f

    -- Applied jQuery patch for CVE-2019-11358. 

Kind Regards,

Carlton

[Carlton Gibson]

Hi all, 

Calendar Week 24 -- ending 16 June.

Triaged:

https://code.djangoproject.com/ticket/30566 -- Unable to do key lookup when a key is a number on PostgreSQL JSONB field (wontfix)

https://code.djangoproject.com/ticket/30527 -- Problem with creating migrations for subclassed field changes. (Invalid)

https://code.djangoproject.com/ticket/30207 -- Optimise paginator for tables with massive records (Needsinfo)

https://code.djangoproject.com/ticket/30554 -- Excessive logging by autoreload in v 2.2.1 and 2.2.2 (Invalid)

Reviewed:

https://code.djangoproject.com/ticket/12952 -- Models history doesn't use verbose names

https://code.djangoproject.com/ticket/30066 -- UserManager.create_superuser doesn't allow for omitting email or password, unlike create_user which does.

https://code.djangoproject.com/ticket/30547 -- Document what happens during model validation with Meta.constraints.

https://github.com/django/django/pull/11209 -- Fixed #30451 -- Implemented ASGI handler and coroutine-safety.

https://github.com/django/django/pull/11417 -- Fixed #30512 -- Used email.headerregistry.parser for parsing emails in sanitize_address().

https://github.com/django/django/pull/10910 -- Fixed #30128 -- Fixed handling timedelta timezone in database functions.

https://code.djangoproject.com/ticket/30128 -- Using database functions with tzinfo=datetime.timezone(datetime.timedelta(...)) results in an incorrect query

https://github.com/django/django/pull/11468 -- Added missing support for PointOnSurface function on MariaDB.

https://code.djangoproject.com/ticket/30553 -- Misleading logging documentation about disable_existing_loggers default value.

Authored:

https://github.com/django/django/pull/11472 -- Refs #30512, #15042 -- Added local-only address to sanitize_email() tests cases.

Kind Regards,

Carlton

[Carlton Gibson]

Hi All, 

Calendar Week 25 -- ending 23 June.

Triaged:

https://code.djangoproject.com/ticket/30581 -- Allow constraints to be used for validation (in Python) (Accepted)

https://code.djangoproject.com/ticket/30577 -- feature request: custom rendering for readonly fields in admin (needsinfo)

Reviewed:

https://code.djangoproject.com/ticket/30427 -- Descriptors not accessible for inherited models.

https://code.djangoproject.com/ticket/29043 -- test --keepdb says "Using existing test database" even if it's run for the first time

https://code.djangoproject.com/ticket/30565 -- HttpResponseBase.close not called when using FileResponse / WSGI "file wrapper" object

https://github.com/django/django/pull/11481 -- Fixed #10403 -- Declaraive syntax for FormSet, ModelFormSet & InlineF…

https://github.com/django/django/pull/11460 -- Refs #30485 -- Removed non-representative test that emitted a warning.

https://github.com/django/django/pull/11478 -- Fixed #30547 -- Doc'd how Meta.constraints are applied to model valid…

https://code.djangoproject.com/ticket/30066 -- UserManager.create_superuser doesn't allow for omitting email or password, unlike create_user which does.

https://github.com/django/django/pull/11490 -- Fixed #30572 -- Prevented values()/values_list() on combined queryset from mutating the list of columns in querysets.

https://github.com/django/django/pull/11481 -- Fixed #10403 -- Declaraive syntax for FormSet, ModelFormSet & InlineFormSet

Authored:

https://github.com/django/django/commit/54d0f5e62f54c29a12dd96f44bacd810cbe03ac8

    -- Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SSL_HEADER if set.

Calendar Week 26 -- ending 30 June.

    VACATION ⛺️

Kind Regards,

Carlton