arteria / cmsplugin-contact-plus

With cmsplugin-contact-plus building custom forms for your django-cms project is a breeze. Now it's so easy to build the forms with exactly the fields you want in the order you want - with a minimal effort.
https://github.com/arteria/cmsplugin-contact-plus
BSD 3-Clause "New" or "Revised" License
30 stars 33 forks source link

Bump django-cms from 3.4.4 to 3.4.7 #73

Open dependabot[bot] opened 2 years ago

dependabot[bot] commented 2 years ago

Bumps django-cms from 3.4.4 to 3.4.7.

Changelog

Sourced from django-cms's changelog.

3.4.7 (2020-07-21)

  • Removed extra quotation mark from the sideframe button template
  • Fixed a bug where xframe options were processed by clickjacking middleware when page was served from cache, rather then get this value from cache
  • Fixed a bug where cached page permissions overrides global permissions
  • Fixed a bug where editing pages with primary keys greater than 9999 would throw an exception.
  • Fixed broken wizard page creation when no language is set within the template context (see #5828).
  • Fixed a security vulnerability in the plugin_type url parameter to insert JavaScript code.

3.4.6 (2018-03-26)

  • Changed the way drag and drop works in the page tree. The page has to be selected first before moving.
  • Fixed a bug where the cms alias plugin leaks context into the rendered aliased plugins.
  • Fixed a bug where users without the "Change advanced settings" permission could still change a page's template.
  • Added on_delete to ForeignKey and OneToOneField to silence Django deprecation warnings.
  • Fixed a bug where the sitemap would ignore the public setting of the site languages and thus display hidden languages.
  • Fixed an AttributeError raised when adding or removing apphooks in Django 1.11.
  • Fixed an InconsistentMigrationHistory error raised when the contenttypes app has a pending migration after the user has applied the 0010_migrate_use_structure migration.
  • Fixed a bug where plugins rendered multiple times won't be editable

3.4.5 (2017-10-12)

  • Introduced Django 1.11 compatibility
  • Fixed a bug where slug wouldn't be generated in the creation wizard
  • Fixed a bug where the add page endpoint rendered Change page as the html title.
  • Fixed an issue where non-staff users could request the wizard create endpoint.
  • Fixed an issue where the Edit page toolbar button wouldn't show on non-cms pages with placeholders.
  • Fixed a bug where placeholder inheritance wouldn't work if the inherited placeholder is cached in an ancestor page.
  • Fixed a regression where the code following a {% placeholder x or %} declaration, was rendered before attempting to inherit content from parent pages.
  • Changed page/placeholder cache keys to use sha1 hash instead of md5 to be FIPS compliant.
  • Fixed a bug where the change of a slug would not propagate to all descendant pages
  • Fixed a ValueError raised when using ManifestStaticFilesStorage or similar for static files. This only affects Django >= 1.10
Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/arteria/cmsplugin-contact-plus/network/alerts).