pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/www/py-django2



Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Jun  3 12:39:46 UTC 2019

Modified Files:
        pkgsrc/www/py-django2: Makefile PLIST distinfo

Log Message:
py-django2: updated to 2.2.2

2.2.2:
CVE-2019-12308: AdminURLFieldWidget XSS

The clickable "Current URL" link generated by AdminURLFieldWidget displayed the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value 
provided as a URL query parameter payload, could result in an clickable JavaScript link.

AdminURLFieldWidget now validates the provided value using URLValidator before displaying the clickable link. You may customise the validator by passing a validator_class kwarg to 
AdminURLFieldWidget.__init__(), e.g. when using ModelAdmin.formfield_overrides.

2.2.1:
Bugfixes

Fixed a regression in Django 2.1 that caused the incorrect quoting of database user password when using dbshell on Oracle
Added compatibility for psycopg2 2.8
Fixed a regression in Django 2.2 that caused a crash when loading the template for the technical 500 debug page
Fixed crash of ordering argument in ArrayAgg and StringAgg when it contains an expression with params
Fixed a regression in Django 2.2 that caused a single instance fast-delete to not set the primary key to None
Prevented makemigrations from generating infinite migrations for check constraints and partial indexes when condition contains a range object
Reverted an optimization in Django 2.2
Fixed a regression in Django 2.2 where Paginator crashes if object_list is a queryset ordered or aggregated over a nested JSONField key transform
Fixed a regression in Django 2.2 where IntegerField validation of database limits crashes if limit_value attribute in a custom validator is callable
Fixed a regression in Django 2.2 where SearchVector generates SQL that is not indexable
Fixed a regression in Django 2.2 that caused an exception to be raised when a custom error handler could not be imported
Relaxed the system check added in Django 2.2 for the admin app’s dependencies to reallow use of SessionMiddleware subclasses, rather than requiring django.contrib.sessions to be in INSTALLED_APPS
Increased the default timeout when using Watchman to 5 seconds to prevent falling back to StatReloader on larger projects and made it customizable via the DJANGO_WATCHMAN_TIMEOUT environment variable
Fixed a regression in Django 2.2 that caused a crash when migrating permissions for proxy models if the target permissions already existed. For example, when a permission had been created manually or 
a model had been migrated from concrete to proxy
Fixed a regression in Django 2.2 that caused a crash of runserver when URLConf modules raised exceptions
Fixed a regression in Django 2.2 where changes were not reliably detected by auto-reloader when using StatReloader
Fixed a migration crash on Oracle and PostgreSQL when adding a check constraint with a contains, startswith, or endswith lookup (or their case-insensitive variant)
Fixed a migration crash on Oracle and SQLite when adding a check constraint with condition contains | (OR) operator
 Django 2.2.2 release notesDjango 2.2 release notes

2.2:
This version has been designated as a long-term support (LTS) release, which means that security and data loss fixes will be applied for at least the next three years. It will also receive fixes for 
crashing bugs, major functionality bugs in newly-introduced features, and regressions from older versions of Django for the next eight months until December 2019.

As always, the release notes cover the salmagundi of new features in detail, but a few highlights are:
* HttpRequest.headers to allow simple access to a request’s headers.
* Database-level constraints on models.
* Watchman compatibility for runserver to improve the performance of watching a large number of files for changes.


To generate a diff of this commit:
cvs rdiff -u -r1.16 -r1.17 pkgsrc/www/py-django2/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/www/py-django2/PLIST
cvs rdiff -u -r1.14 -r1.15 pkgsrc/www/py-django2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/www/py-django2/Makefile
diff -u pkgsrc/www/py-django2/Makefile:1.16 pkgsrc/www/py-django2/Makefile:1.17
--- pkgsrc/www/py-django2/Makefile:1.16 Fri May 31 12:40:05 2019
+++ pkgsrc/www/py-django2/Makefile      Mon Jun  3 12:39:46 2019
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.16 2019/05/31 12:40:05 adam Exp $
+# $NetBSD: Makefile,v 1.17 2019/06/03 12:39:46 adam Exp $
 
-DISTNAME=      Django-2.1.8
+DISTNAME=      Django-2.2.2
 PKGNAME=       ${PYPKGPREFIX}-${DISTNAME:tl}
 CATEGORIES=    www python
 MASTER_SITES=  https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/

Index: pkgsrc/www/py-django2/PLIST
diff -u pkgsrc/www/py-django2/PLIST:1.5 pkgsrc/www/py-django2/PLIST:1.6
--- pkgsrc/www/py-django2/PLIST:1.5     Mon Dec  3 19:04:16 2018
+++ pkgsrc/www/py-django2/PLIST Mon Jun  3 12:39:46 2019
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.5 2018/12/03 19:04:16 adam Exp $
+@comment $NetBSD: PLIST,v 1.6 2019/06/03 12:39:46 adam Exp $
 bin/django-admin-${PYVERSSUFFIX}
 bin/django-admin-${PYVERSSUFFIX}.py
 ${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
@@ -330,6 +330,8 @@ ${PYSITELIB}/django/conf/locale/hu/__ini
 ${PYSITELIB}/django/conf/locale/hu/formats.py
 ${PYSITELIB}/django/conf/locale/hu/formats.pyc
 ${PYSITELIB}/django/conf/locale/hu/formats.pyo
+${PYSITELIB}/django/conf/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/conf/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/conf/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/conf/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/conf/locale/id/LC_MESSAGES/django.mo
@@ -840,6 +842,10 @@ ${PYSITELIB}/django/contrib/admin/locale
 ${PYSITELIB}/django/contrib/admin/locale/hu/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/admin/locale/hu/LC_MESSAGES/djangojs.mo
 ${PYSITELIB}/django/contrib/admin/locale/hu/LC_MESSAGES/djangojs.po
+${PYSITELIB}/django/contrib/admin/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/admin/locale/hy/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/admin/locale/hy/LC_MESSAGES/djangojs.mo
+${PYSITELIB}/django/contrib/admin/locale/hy/LC_MESSAGES/djangojs.po
 ${PYSITELIB}/django/contrib/admin/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/admin/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/admin/locale/ia/LC_MESSAGES/djangojs.mo
@@ -1204,7 +1210,6 @@ ${PYSITELIB}/django/contrib/admin/templa
 ${PYSITELIB}/django/contrib/admin/templates/admin/pagination.html
 ${PYSITELIB}/django/contrib/admin/templates/admin/popup_response.html
 ${PYSITELIB}/django/contrib/admin/templates/admin/prepopulated_fields_js.html
-${PYSITELIB}/django/contrib/admin/templates/admin/related_widget_wrapper.html
 ${PYSITELIB}/django/contrib/admin/templates/admin/search_form.html
 ${PYSITELIB}/django/contrib/admin/templates/admin/submit_line.html
 ${PYSITELIB}/django/contrib/admin/templates/admin/widgets/clearable_file_input.html
@@ -1583,6 +1588,8 @@ ${PYSITELIB}/django/contrib/auth/locale/
 ${PYSITELIB}/django/contrib/auth/locale/hsb/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/auth/locale/hu/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/auth/locale/hu/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/auth/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/auth/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/auth/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/auth/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/auth/locale/id/LC_MESSAGES/django.mo
@@ -1720,6 +1727,12 @@ ${PYSITELIB}/django/contrib/auth/migrati
 ${PYSITELIB}/django/contrib/auth/migrations/0009_alter_user_last_name_max_length.py
 ${PYSITELIB}/django/contrib/auth/migrations/0009_alter_user_last_name_max_length.pyc
 ${PYSITELIB}/django/contrib/auth/migrations/0009_alter_user_last_name_max_length.pyo
+${PYSITELIB}/django/contrib/auth/migrations/0010_alter_group_name_max_length.py
+${PYSITELIB}/django/contrib/auth/migrations/0010_alter_group_name_max_length.pyc
+${PYSITELIB}/django/contrib/auth/migrations/0010_alter_group_name_max_length.pyo
+${PYSITELIB}/django/contrib/auth/migrations/0011_update_proxy_permissions.py
+${PYSITELIB}/django/contrib/auth/migrations/0011_update_proxy_permissions.pyc
+${PYSITELIB}/django/contrib/auth/migrations/0011_update_proxy_permissions.pyo
 ${PYSITELIB}/django/contrib/auth/migrations/__init__.py
 ${PYSITELIB}/django/contrib/auth/migrations/__init__.pyc
 ${PYSITELIB}/django/contrib/auth/migrations/__init__.pyo
@@ -1845,6 +1858,8 @@ ${PYSITELIB}/django/contrib/contenttypes
 ${PYSITELIB}/django/contrib/contenttypes/locale/hsb/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/contenttypes/locale/hu/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/contenttypes/locale/hu/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/contenttypes/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/contenttypes/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/contenttypes/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/contenttypes/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/contenttypes/locale/id/LC_MESSAGES/django.mo
@@ -2052,6 +2067,8 @@ ${PYSITELIB}/django/contrib/flatpages/lo
 ${PYSITELIB}/django/contrib/flatpages/locale/hsb/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/flatpages/locale/hu/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/flatpages/locale/hu/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/flatpages/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/flatpages/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/flatpages/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/flatpages/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/flatpages/locale/id/LC_MESSAGES/django.mo
@@ -2588,6 +2605,8 @@ ${PYSITELIB}/django/contrib/gis/locale/h
 ${PYSITELIB}/django/contrib/gis/locale/hsb/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/gis/locale/hu/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/gis/locale/hu/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/gis/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/gis/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/gis/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/gis/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/gis/locale/id/LC_MESSAGES/django.mo
@@ -2984,6 +3003,9 @@ ${PYSITELIB}/django/contrib/postgres/agg
 ${PYSITELIB}/django/contrib/postgres/aggregates/general.py
 ${PYSITELIB}/django/contrib/postgres/aggregates/general.pyc
 ${PYSITELIB}/django/contrib/postgres/aggregates/general.pyo
+${PYSITELIB}/django/contrib/postgres/aggregates/mixins.py
+${PYSITELIB}/django/contrib/postgres/aggregates/mixins.pyc
+${PYSITELIB}/django/contrib/postgres/aggregates/mixins.pyo
 ${PYSITELIB}/django/contrib/postgres/aggregates/statistics.py
 ${PYSITELIB}/django/contrib/postgres/aggregates/statistics.pyc
 ${PYSITELIB}/django/contrib/postgres/aggregates/statistics.pyo
@@ -3036,6 +3058,8 @@ ${PYSITELIB}/django/contrib/postgres/ind
 ${PYSITELIB}/django/contrib/postgres/indexes.pyc
 ${PYSITELIB}/django/contrib/postgres/indexes.pyo
 ${PYSITELIB}/django/contrib/postgres/jinja2/postgres/widgets/split_array.html
+${PYSITELIB}/django/contrib/postgres/locale/af/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/postgres/locale/af/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/postgres/locale/ar/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/postgres/locale/ar/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/postgres/locale/az/LC_MESSAGES/django.mo
@@ -3090,6 +3114,8 @@ ${PYSITELIB}/django/contrib/postgres/loc
 ${PYSITELIB}/django/contrib/postgres/locale/hsb/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/postgres/locale/hu/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/postgres/locale/hu/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/postgres/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/postgres/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/postgres/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/postgres/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/postgres/locale/id/LC_MESSAGES/django.mo
@@ -3157,6 +3183,9 @@ ${PYSITELIB}/django/contrib/postgres/ope
 ${PYSITELIB}/django/contrib/postgres/search.py
 ${PYSITELIB}/django/contrib/postgres/search.pyc
 ${PYSITELIB}/django/contrib/postgres/search.pyo
+${PYSITELIB}/django/contrib/postgres/serializers.py
+${PYSITELIB}/django/contrib/postgres/serializers.pyc
+${PYSITELIB}/django/contrib/postgres/serializers.pyo
 ${PYSITELIB}/django/contrib/postgres/signals.py
 ${PYSITELIB}/django/contrib/postgres/signals.pyc
 ${PYSITELIB}/django/contrib/postgres/signals.pyo
@@ -3254,6 +3283,8 @@ ${PYSITELIB}/django/contrib/redirects/lo
 ${PYSITELIB}/django/contrib/redirects/locale/hsb/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/redirects/locale/hu/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/redirects/locale/hu/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/redirects/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/redirects/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/redirects/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/redirects/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/redirects/locale/id/LC_MESSAGES/django.mo
@@ -3477,6 +3508,8 @@ ${PYSITELIB}/django/contrib/sessions/loc
 ${PYSITELIB}/django/contrib/sessions/locale/hsb/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/sessions/locale/hu/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/sessions/locale/hu/LC_MESSAGES/django.po
+${PYSITELIB}/django/contrib/sessions/locale/hy/LC_MESSAGES/django.mo
+${PYSITELIB}/django/contrib/sessions/locale/hy/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/sessions/locale/ia/LC_MESSAGES/django.mo
 ${PYSITELIB}/django/contrib/sessions/locale/ia/LC_MESSAGES/django.po
 ${PYSITELIB}/django/contrib/sessions/locale/id/LC_MESSAGES/django.mo
@@ -3945,6 +3978,9 @@ ${PYSITELIB}/django/core/checks/security
 ${PYSITELIB}/django/core/checks/templates.py
 ${PYSITELIB}/django/core/checks/templates.pyc
 ${PYSITELIB}/django/core/checks/templates.pyo
+${PYSITELIB}/django/core/checks/translation.py
+${PYSITELIB}/django/core/checks/translation.pyc
+${PYSITELIB}/django/core/checks/translation.pyo
 ${PYSITELIB}/django/core/checks/urls.py
 ${PYSITELIB}/django/core/checks/urls.pyc
 ${PYSITELIB}/django/core/checks/urls.pyo
@@ -4401,9 +4437,6 @@ ${PYSITELIB}/django/db/migrations/serial
 ${PYSITELIB}/django/db/migrations/state.py
 ${PYSITELIB}/django/db/migrations/state.pyc
 ${PYSITELIB}/django/db/migrations/state.pyo
-${PYSITELIB}/django/db/migrations/topological_sort.py
-${PYSITELIB}/django/db/migrations/topological_sort.pyc
-${PYSITELIB}/django/db/migrations/topological_sort.pyo
 ${PYSITELIB}/django/db/migrations/utils.py
 ${PYSITELIB}/django/db/migrations/utils.pyc
 ${PYSITELIB}/django/db/migrations/utils.pyo
@@ -4422,6 +4455,9 @@ ${PYSITELIB}/django/db/models/base.pyo
 ${PYSITELIB}/django/db/models/constants.py
 ${PYSITELIB}/django/db/models/constants.pyc
 ${PYSITELIB}/django/db/models/constants.pyo
+${PYSITELIB}/django/db/models/constraints.py
+${PYSITELIB}/django/db/models/constraints.pyc
+${PYSITELIB}/django/db/models/constraints.pyo
 ${PYSITELIB}/django/db/models/deletion.py
 ${PYSITELIB}/django/db/models/deletion.pyc
 ${PYSITELIB}/django/db/models/deletion.pyo
@@ -4461,6 +4497,12 @@ ${PYSITELIB}/django/db/models/functions/
 ${PYSITELIB}/django/db/models/functions/datetime.py
 ${PYSITELIB}/django/db/models/functions/datetime.pyc
 ${PYSITELIB}/django/db/models/functions/datetime.pyo
+${PYSITELIB}/django/db/models/functions/math.py
+${PYSITELIB}/django/db/models/functions/math.pyc
+${PYSITELIB}/django/db/models/functions/math.pyo
+${PYSITELIB}/django/db/models/functions/mixins.py
+${PYSITELIB}/django/db/models/functions/mixins.pyc
+${PYSITELIB}/django/db/models/functions/mixins.pyo
 ${PYSITELIB}/django/db/models/functions/text.py
 ${PYSITELIB}/django/db/models/functions/text.pyc
 ${PYSITELIB}/django/db/models/functions/text.pyo
@@ -4911,9 +4953,15 @@ ${PYSITELIB}/django/utils/timesince.pyo
 ${PYSITELIB}/django/utils/timezone.py
 ${PYSITELIB}/django/utils/timezone.pyc
 ${PYSITELIB}/django/utils/timezone.pyo
+${PYSITELIB}/django/utils/topological_sort.py
+${PYSITELIB}/django/utils/topological_sort.pyc
+${PYSITELIB}/django/utils/topological_sort.pyo
 ${PYSITELIB}/django/utils/translation/__init__.py
 ${PYSITELIB}/django/utils/translation/__init__.pyc
 ${PYSITELIB}/django/utils/translation/__init__.pyo
+${PYSITELIB}/django/utils/translation/reloader.py
+${PYSITELIB}/django/utils/translation/reloader.pyc
+${PYSITELIB}/django/utils/translation/reloader.pyo
 ${PYSITELIB}/django/utils/translation/template.py
 ${PYSITELIB}/django/utils/translation/template.pyc
 ${PYSITELIB}/django/utils/translation/template.pyo

Index: pkgsrc/www/py-django2/distinfo
diff -u pkgsrc/www/py-django2/distinfo:1.14 pkgsrc/www/py-django2/distinfo:1.15
--- pkgsrc/www/py-django2/distinfo:1.14 Fri May 31 12:40:05 2019
+++ pkgsrc/www/py-django2/distinfo      Mon Jun  3 12:39:46 2019
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.14 2019/05/31 12:40:05 adam Exp $
+$NetBSD: distinfo,v 1.15 2019/06/03 12:39:46 adam Exp $
 
-SHA1 (Django-2.1.8.tar.gz) = 1e24c1c3680fe4c955db977f135f6cd714a42533
-RMD160 (Django-2.1.8.tar.gz) = d0bdcfca6d44f06b8fade766d4eeb1ee9b395dee
-SHA512 (Django-2.1.8.tar.gz) = f84fcdf919091a9db6289f25da601ce447382f79118a99f8f316b2479a9325d629f725edb4618300f76e23bd68ae45ff4c6b6576988f109d1a7ba715c73327c3
-Size (Django-2.1.8.tar.gz) = 8613572 bytes
+SHA1 (Django-2.2.2.tar.gz) = 2d8de20bbc3c2864fb095341ecea8cb095bce7ed
+RMD160 (Django-2.2.2.tar.gz) = b9e8a11eba809c86bd3db4784cf81e101d2e007e
+SHA512 (Django-2.2.2.tar.gz) = 87e0a7b2d0e6d6149c746a7cd5547351ba002c6eaedac160e72544b429d41b133da5c36256a07155b7b4743969e9ff4c3ac890c9925db428117f68a67104df0f
+Size (Django-2.2.2.tar.gz) = 8841523 bytes



Home | Main Index | Thread Index | Old Index