django/django (Django)
### [`v4.2.16`](https://redirect.github.com/django/django/compare/4.2.15...4.2.16)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.15...4.2.16)
### [`v4.2.15`](https://redirect.github.com/django/django/compare/4.2.14...4.2.15)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.14...4.2.15)
### [`v4.2.14`](https://redirect.github.com/django/django/compare/4.2.13...4.2.14)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.13...4.2.14)
### [`v4.2.13`](https://redirect.github.com/django/django/compare/4.2.12...4.2.13)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.12...4.2.13)
### [`v4.2.12`](https://redirect.github.com/django/django/compare/4.2.11...4.2.12)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.11...4.2.12)
### [`v4.2.11`](https://redirect.github.com/django/django/compare/4.2.10...4.2.11)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.10...4.2.11)
### [`v4.2.10`](https://redirect.github.com/django/django/compare/4.2.9...4.2.10)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.9...4.2.10)
### [`v4.2.9`](https://redirect.github.com/django/django/compare/4.2.8...4.2.9)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.8...4.2.9)
### [`v4.2.8`](https://redirect.github.com/django/django/compare/4.2.7...4.2.8)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.7...4.2.8)
### [`v4.2.7`](https://redirect.github.com/django/django/compare/4.2.6...4.2.7)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.6...4.2.7)
### [`v4.2.6`](https://redirect.github.com/django/django/compare/4.2.5...4.2.6)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.5...4.2.6)
### [`v4.2.5`](https://redirect.github.com/django/django/compare/4.2.4...4.2.5)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.4...4.2.5)
### [`v4.2.4`](https://redirect.github.com/django/django/compare/4.2.3...4.2.4)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.3...4.2.4)
### [`v4.2.3`](https://redirect.github.com/django/django/compare/4.2.2...4.2.3)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.2...4.2.3)
### [`v4.2.2`](https://redirect.github.com/django/django/compare/4.2.1...4.2.2)
[Compare Source](https://redirect.github.com/django/django/compare/4.2.1...4.2.2)
### [`v4.2.1`](https://redirect.github.com/django/django/compare/4.2...4.2.1)
[Compare Source](https://redirect.github.com/django/django/compare/4.2...4.2.1)
### [`v4.2`](https://redirect.github.com/django/django/compare/4.1.13...4.2)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.13...4.2)
### [`v4.1.13`](https://redirect.github.com/django/django/compare/4.1.12...4.1.13)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.12...4.1.13)
### [`v4.1.12`](https://redirect.github.com/django/django/compare/4.1.11...4.1.12)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.11...4.1.12)
### [`v4.1.11`](https://redirect.github.com/django/django/compare/4.1.10...4.1.11)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.10...4.1.11)
### [`v4.1.10`](https://redirect.github.com/django/django/compare/4.1.9...4.1.10)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.9...4.1.10)
### [`v4.1.9`](https://redirect.github.com/django/django/compare/4.1.8...4.1.9)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.8...4.1.9)
### [`v4.1.8`](https://redirect.github.com/django/django/compare/4.1.7...4.1.8)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.7...4.1.8)
### [`v4.1.7`](https://redirect.github.com/django/django/compare/4.1.6...4.1.7)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.6...4.1.7)
### [`v4.1.6`](https://redirect.github.com/django/django/compare/4.1.5...4.1.6)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.5...4.1.6)
### [`v4.1.5`](https://redirect.github.com/django/django/compare/4.1.4...4.1.5)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.4...4.1.5)
### [`v4.1.4`](https://redirect.github.com/django/django/compare/4.1.3...4.1.4)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.3...4.1.4)
### [`v4.1.3`](https://redirect.github.com/django/django/compare/4.1.2...4.1.3)
[Compare Source](https://redirect.github.com/django/django/compare/4.1.2...4.1.3)
django-compressor/django-appconf (django-appconf)
### [`v1.0.6`](https://redirect.github.com/django-compressor/django-appconf/compare/v1.0.5...v1.0.6)
[Compare Source](https://redirect.github.com/django-compressor/django-appconf/compare/v1.0.5...v1.0.6)
adamchainz/django-cors-headers (django-cors-headers)
### [`v3.14.0`](https://redirect.github.com/adamchainz/django-cors-headers/blob/HEAD/CHANGELOG.rst#3140-2023-02-25)
[Compare Source](https://redirect.github.com/adamchainz/django-cors-headers/compare/3.13.0...3.14.0)
- Support Django 4.2.
- Switch from `urlparse()` to `urlsplit()` for URL parsing, reducing the middleware runtime up to 5%.
This changes the type passed to `origin_found_in_white_lists()`, so if you have subclassed the middleware to override this method, you should check it is compatible (it most likely is).
Thanks to Thibaut Decombe in `PR #793 `\__.
jazzband/django-debug-toolbar (django-debug-toolbar)
### [`v3.8.1`](https://redirect.github.com/jazzband/django-debug-toolbar/releases/tag/3.8.1)
[Compare Source](https://redirect.github.com/jazzband/django-debug-toolbar/compare/3.7...3.8.1)
Note: 3.8.0 was not released, use 3.8.1
#### What's Changed
- fix: Simplify logic for Panel.enabled property by [@adamantike](https://redirect.github.com/adamantike) in [https://github.com/jazzband/django-debug-toolbar/pull/1676](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1676)
- Auto-update History panel with JavaScript fetch requests. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1685](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1685)
- Improve the template_source view coverage a bit by [@matthiask](https://redirect.github.com/matthiask) in [https://github.com/jazzband/django-debug-toolbar/pull/1688](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1688)
- Support rerendering the toolbar on HTMX boosted pages. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1686](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1686)
- Include panel scripts in content when RENDER_PANELS=True by [@matthiask](https://redirect.github.com/matthiask) in [https://github.com/jazzband/django-debug-toolbar/pull/1689](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1689)
- Fixed [#1693](https://redirect.github.com/jazzband/django-debug-toolbar/issues/1693) -- Run tests on python 3.11 by [@pauloxnet](https://redirect.github.com/pauloxnet) in [https://github.com/jazzband/django-debug-toolbar/pull/1694](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1694)
- Add divide by zero protection in timer.js by [@SmailBestybay](https://redirect.github.com/SmailBestybay) in [https://github.com/jazzband/django-debug-toolbar/pull/1687](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1687)
- Fixed [#1695](https://redirect.github.com/jazzband/django-debug-toolbar/issues/1695) - Run test on Python 3.11 for Django 4.1 by [@pauloxnet](https://redirect.github.com/pauloxnet) in [https://github.com/jazzband/django-debug-toolbar/pull/1696](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1696)
- Create one-time mouseup listener for each mousedown by [@scuml](https://redirect.github.com/scuml) in [https://github.com/jazzband/django-debug-toolbar/pull/1697](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1697)
- Update package metadata by [@ofek](https://redirect.github.com/ofek) in [https://github.com/jazzband/django-debug-toolbar/pull/1690](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1690)
- Validate and format pyproject.toml by [@hugovk](https://redirect.github.com/hugovk) in [https://github.com/jazzband/django-debug-toolbar/pull/1700](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1700)
- Drop Rob's email address in project config. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1699](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1699)
- Fix highlighting on history panel by [@scuml](https://redirect.github.com/scuml) in [https://github.com/jazzband/django-debug-toolbar/pull/1698](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1698)
- Allow Language Selection on the Toolbar by [@leandrodesouzadev](https://redirect.github.com/leandrodesouzadev) in [https://github.com/jazzband/django-debug-toolbar/pull/1703](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1703)
- Attach handlers to djDebug instead of document by [@scuml](https://redirect.github.com/scuml) in [https://github.com/jazzband/django-debug-toolbar/pull/1702](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1702)
- Formalize support for Python 3.11. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1713](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1713)
#### New Contributors
- [@adamantike](https://redirect.github.com/adamantike) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1676](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1676)
- [@SmailBestybay](https://redirect.github.com/SmailBestybay) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1687](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1687)
- [@ofek](https://redirect.github.com/ofek) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1690](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1690)
- [@hugovk](https://redirect.github.com/hugovk) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1700](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1700)
- [@leandrodesouzadev](https://redirect.github.com/leandrodesouzadev) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1703](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1703)
**Full Changelog**: https://github.com/jazzband/django-debug-toolbar/compare/3.7...3.8.1
joke2k/django-environ (django-environ)
### [`v0.11.2`](https://redirect.github.com/joke2k/django-environ/blob/HEAD/CHANGELOG.rst#v0112---1-September-2023)
[Compare Source](https://redirect.github.com/joke2k/django-environ/compare/v0.11.1...v0.11.2)
Fixed
\+++++
- Revert "Add variable expansion." feature
due to `#490 `\_.
### [`v0.11.1`](https://redirect.github.com/joke2k/django-environ/blob/HEAD/CHANGELOG.rst#v0111---30-August-2023)
[Compare Source](https://redirect.github.com/joke2k/django-environ/compare/v0.11.0...v0.11.1)
Fixed
\+++++
- Revert "Add interpolate argument to avoid resolving proxied values." feature
due to `#485 `\_.
### [`v0.11.0`](https://redirect.github.com/joke2k/django-environ/blob/HEAD/CHANGELOG.rst#v0110---30-August-2023)
[Compare Source](https://redirect.github.com/joke2k/django-environ/compare/v0.10.0...v0.11.0)
Added
\+++++
- Added support for Django 4.2
`#456 `\_.
- Added support for secure Elasticsearch connections
`#463 `\_.
- Added variable expansion
`#468 `\_.
- Added capability to handle comments after #, after quoted values,
like `KEY= 'part1 # part2' # comment`
`#475 `\_.
- Added support for `interpolate` parameter
`#415 `\_.
Changed
\+++++++
- Used `mssql-django` as engine for SQL Server
`#446 `\_.
- Changed handling bool values, stripping whitespace around value
`#475 `\_.
- Use `importlib.util.find_spec` to `replace pkgutil.find_loader`
`#482 `\_.
Removed
\+++++++
- Removed support of Python 3.5.
### [`v0.10.0`](https://redirect.github.com/joke2k/django-environ/blob/HEAD/CHANGELOG.rst#v0100---2-March-2023)
[Compare Source](https://redirect.github.com/joke2k/django-environ/compare/v0.9.0...v0.10.0)
Added
\+++++
- Use the core redis library by default if running Django >= 4.0
`#356 `\_.
- Value of dict can now contain an equal sign
`#241 `\_.
- Added support for Python 3.11.
- Added `CONN_HEALTH_CHECKS` to database base options
`#413 `\_.
- Added `encoding` parameter to `read_env` with default value 'utf8'
`#442 `\_.
- Added support for Django 4.1
`#416 `\_.
Deprecated
\++++++++++
- Support of Python < 3.6 is deprecated and will be removed
in next major version.
Changed
\+++++++
- Used UTF-8 as a encoding when open `.env` file.
- Provided access to `DB_SCHEMES` through `cls` rather than
`Env` in `db_url_config`
`#414 `\_.
- Correct CI workflow to use supported Python versions/OS matrix
`#441 `\_.
- Reworked trigger CI workflows strategy
`#440 `\_.
Fixed
\+++++
- Fixed logic of `Env.get_value()` to skip parsing only when
`default=None`, not for all default values that coerce to `False`
`#404 `\_.
- Deleted duplicated include in docs/quickstart.rst
`#439 `\_.
Removed
\+++++++
- Removed deprecated `Env.unicode()`.
- Removed `environ.register_schemes` calls and do not modify global
`urllib.parse.urlparse`'s `uses_*` variables as this no longer needed
`#246 `\_.
django-extensions/django-extensions (django-extensions)
### [`v3.2.3`](https://redirect.github.com/django-extensions/django-extensions/releases/tag/3.2.3)
[Compare Source](https://redirect.github.com/django-extensions/django-extensions/compare/3.2.1...3.2.3)
#### What's Changed
- Fix error with lack of PosixPath support by [@giff-h](https://redirect.github.com/giff-h) in [https://github.com/django-extensions/django-extensions/pull/1785](https://redirect.github.com/django-extensions/django-extensions/pull/1785)
- Import pkg_resources directly by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1782](https://redirect.github.com/django-extensions/django-extensions/pull/1782)
- Add REMOTE_USER to werkzeug environment by [@confuzeus](https://redirect.github.com/confuzeus) in [https://github.com/django-extensions/django-extensions/pull/1769](https://redirect.github.com/django-extensions/django-extensions/pull/1769)
- runserver_plus template reloading by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1775](https://redirect.github.com/django-extensions/django-extensions/pull/1775)
- Add Python 3.11 support by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1786](https://redirect.github.com/django-extensions/django-extensions/pull/1786)
- Run tests againts Django 4.2 and add trove classifier by [@michael-k](https://redirect.github.com/michael-k) in [https://github.com/django-extensions/django-extensions/pull/1812](https://redirect.github.com/django-extensions/django-extensions/pull/1812)
- fix: test_should_highlight_bash_syntax_without_name to include whites… by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1797](https://redirect.github.com/django-extensions/django-extensions/pull/1797)
- runserver_plus autoreload on template change by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1796](https://redirect.github.com/django-extensions/django-extensions/pull/1796)
- Add support for psycopg3 by [@Apreche](https://redirect.github.com/Apreche) in [https://github.com/django-extensions/django-extensions/pull/1814](https://redirect.github.com/django-extensions/django-extensions/pull/1814)
- Fixed drop test database command with psycopg 3 by [@jannh](https://redirect.github.com/jannh) in [https://github.com/django-extensions/django-extensions/pull/1818](https://redirect.github.com/django-extensions/django-extensions/pull/1818)
- Fixed reset_db with psycopg3 (same patch like for drop_test_database) by [@jannh](https://redirect.github.com/jannh) in [https://github.com/django-extensions/django-extensions/pull/1821](https://redirect.github.com/django-extensions/django-extensions/pull/1821)
- Cleanup http: links by [@Crocmagnon](https://redirect.github.com/Crocmagnon) in [https://github.com/django-extensions/django-extensions/pull/1798](https://redirect.github.com/django-extensions/django-extensions/pull/1798)
#### New Contributors
- [@giff-h](https://redirect.github.com/giff-h) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1785](https://redirect.github.com/django-extensions/django-extensions/pull/1785)
- [@foarsitter](https://redirect.github.com/foarsitter) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1782](https://redirect.github.com/django-extensions/django-extensions/pull/1782)
- [@confuzeus](https://redirect.github.com/confuzeus) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1769](https://redirect.github.com/django-extensions/django-extensions/pull/1769)
- [@Apreche](https://redirect.github.com/Apreche) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1814](https://redirect.github.com/django-extensions/django-extensions/pull/1814)
- [@Crocmagnon](https://redirect.github.com/Crocmagnon) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1798](https://redirect.github.com/django-extensions/django-extensions/pull/1798)
**Full Changelog**: https://github.com/django-extensions/django-extensions/compare/3.2.1...3.2.3
jazzband/django-oauth-toolkit (django-oauth-toolkit)
### [`v2.4.0`](https://redirect.github.com/jazzband/django-oauth-toolkit/blob/HEAD/CHANGELOG.md#240---2024-05-13)
[Compare Source](https://redirect.github.com/jazzband/django-oauth-toolkit/compare/2.3.0...2.4.0)
##### WARNING
Issues caused by **Release 2.0.0 breaking changes** continue to be logged. Please **make sure to carefully read these release notes** before
performing a MAJOR upgrade to 2.x.
These issues both result in `{"error": "invalid_client"}`:
1. The application client secret is now hashed upon save. You must copy it before it is saved. Using the hashed value will fail.
2. `PKCE_REQUIRED` is now `True` by default. You should use PKCE with your client or set `PKCE_REQUIRED=False` if you are unable to fix the client.
If you are going to revert migration 0006 make note that previously hashed client_secret cannot be reverted!
##### Added
- [#1304](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1304) Add `OAuth2ExtraTokenMiddleware` for adding access token to request.
See [Setup a provider](https://django-oauth-toolkit.readthedocs.io/en/latest/tutorial/tutorial\_03.html#setup-a-provider) in the Tutorial.
- [#1273](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1273) Performance improvement: Add caching of loading of OIDC private key.
- [#1285](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1285) Add `post_logout_redirect_uris` field in the [Application Registration form](https://django-oauth-toolkit.readthedocs.io/en/latest/templates.html#application-registration-form-html)
- [#1311](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1311),[#1334](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1334) (**Security**) Add option to disable client_secret hashing to allow verifying JWTs' signatures when using
[HS256 keys](https://django-oauth-toolkit.readthedocs.io/en/latest/oidc.html#using-hs256-keys).
This means your client secret will be stored in cleartext but is the only way to successfully use HS256 signed JWT's.
- [#1350](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1350) Support Python 3.12 and Django 5.0
- [#1367](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1367) Add `code_challenge_methods_supported` property to auto discovery information, per [RFC 8414 section 2](https://www.rfc-editor.org/rfc/rfc8414.html#page-7)
- [#1328](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1328) Adds the ability to [define how to store a user profile](https://django-oauth-toolkit.readthedocs.io/en/latest/oidc.html#define-where-to-store-the-profile).
##### Fixed
- [#1292](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1292) Interpret `EXP` in AccessToken always as UTC instead of (possibly) local timezone.
Use setting `AUTHENTICATION_SERVER_EXP_TIME_ZONE` to enable different time zone in case the remote
authentication server does not provide EXP in UTC.
- [#1323](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1323) Fix instructions in [documentation](https://django-oauth-toolkit.readthedocs.io/en/latest/getting_started.html#authorization-code)
on how to create a code challenge and code verifier
- [#1284](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1284) Fix a 500 error when trying to logout with no id_token_hint even if the browser session already expired.
- [#1296](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1296) Added reverse function in migration `0006_alter_application_client_secret`. Note that reversing this migration cannot undo a hashed `client_secret`.
- [#1345](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1345) Fix encapsulation for Redirect URI scheme validation. Deprecates `RedirectURIValidator` in favor of `AllowedURIValidator`.
- [#1357](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1357) Move import of setting_changed signal from test to django core modules.
- [#1361](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1361) Fix prompt=none redirects to login screen
- [#1380](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1380) Fix AttributeError in OAuth2ExtraTokenMiddleware when a custom AccessToken model is used.
- [#1288](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1288) Fix [#1276](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1276) which attempted to resolve [#1092](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1092) for requests that don't have a client_secret per [RFC 6749 4.1.1](https://www.rfc-editor.org/rfc/rfc6749.html#section-4.1.1)
- [#1337](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1337) Gracefully handle expired or deleted refresh tokens, in `validate_user`.
- Various documentation improvements: [#1410](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1410), [#1408](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1408), [#1405](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1405), [#1399](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1399), [#1401](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1401), [#1396](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1396), [#1375](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1375), [#1162](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1162), [#1315](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1315), [#1307](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1307)
##### Removed
- [#1350](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1350) Remove support for Python 3.7 and Django 2.2
### [`v2.3.0`](https://redirect.github.com/jazzband/django-oauth-toolkit/blob/HEAD/CHANGELOG.md#230-2023-05-31)
[Compare Source](https://redirect.github.com/jazzband/django-oauth-toolkit/compare/2.2.0...2.3.0)
##### WARNING
Issues caused by **Release 2.0.0 breaking changes** continue to be logged. Please **make sure to carefully read these release notes** before
performing a MAJOR upgrade to 2.x.
These issues both result in `{"error": "invalid_client"}`:
1. The application client secret is now hashed upon save. You must copy it before it is saved. Using the hashed value will fail.
2. `PKCE_REQUIRED` is now `True` by default. You should use PKCE with your client or set `PKCE_REQUIRED=False` if you are unable to fix the client.
##### Added
- Add Japanese(日本語) Language Support
- [#1244](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1244) implement [OIDC RP-Initiated Logout](https://openid.net/specs/openid-connect-rpinitiated-1\_0.html)
- [#1092](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1092) Allow Authorization Code flow without a client_secret per [RFC 6749 2.3.1](https://www.rfc-editor.org/rfc/rfc6749.html#section-2.3.1)
- [#1264](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1264) Support Django 4.2.
##### Changed
- [#1222](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1222) Remove expired ID tokens alongside access tokens in `cleartokens` management command
- [#1267](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1267), [#1253](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1253), [#1251](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1251), [#1250](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1250), [#1224](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1224), [#1212](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1212), [#1211](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1211) Various documentation improvements
jazzband/django-silk (django-silk)
### [`v5.2.0`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#520-2024-08-17)
[Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.1.0...5.2.0)
:release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw))
[Full Changelog](https://redirect.github.com/jazzband/django-silk/compre/5.1.0..5.2.0)
**Features/Enhancements:**
- Support Django 5.1 ([#734](https://redirect.github.com/jazzband/django-silk/issues/734), [#732](https://redirect.github.com/jazzband/django-silk/issues/732)) [@albertyw](https://redirect.github.com/albertyw)
**Fixes:**
- Fix when Session, Authentication or Message middleware are not present ([#667](https://redirect.github.com/jazzband/django-silk/issues/667)) [@mgaligniana](https://redirect.github.com/mgaligniana)
- Update 'tables_involved' property to include tables from UPDATE operation ([#717](https://redirect.github.com/jazzband/django-silk/issues/717)) [@emregeldegul](https://redirect.github.com/emregeldegul)
- Fix double-escaping of the curl and Python example code ([#709](https://redirect.github.com/jazzband/django-silk/issues/709)) [@SpecLad](https://redirect.github.com/SpecLad)
- Correct units in profiling and requests pages ([#725](https://redirect.github.com/jazzband/django-silk/issues/725)) [@ka28kumar](https://redirect.github.com/ka28kumar)
**Maintenance and Cleanup:**
- Update python dependencies ([#733](https://redirect.github.com/jazzband/django-silk/issues/733)) [@albertyw](https://redirect.github.com/albertyw)
- Refactor SQL query time calculation to use Django aggregation ([#720](https://redirect.github.com/jazzband/django-silk/issues/720)) [@beltagymohamed](https://redirect.github.com/beltagymohamed)
- Fix test failures on Windows ([#707](https://redirect.github.com/jazzband/django-silk/issues/707)) [@SpecLad](https://redirect.github.com/SpecLad)
- Update workflow actions ([#700](https://redirect.github.com/jazzband/django-silk/issues/700)) [@albertyw](https://redirect.github.com/albertyw)
- Update test matrix to latest version of django, postgres, and mariadb [#701](https://redirect.github.com/jazzband/django-silk/issues/701)) [@albertyw](https://redirect.github.com/albertyw)
### [`v5.1.0`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#510-2023-12-30)
[Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.4...5.1.0)
:release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw))
[Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.4..5.1.0)
**Upgrading:**
This release includes [Fix deprecation warning for get_storage_class #669](https://redirect.github.com/jazzband/django-silk/pull/669)
which deprecates `SILKY_STORAGE_CLASS`. Users should instead use the Django
`STORAGES` configuration. See [README](https://redirect.github.com/albertyw/django-silk/blob/master/README.md#profiling)
and [Django documentation](https://docs.djangoproject.com/en/5.0/ref/settings/#std-setting-STORAGES)
for more information.
Also, for python 3.12, the `cProfile` stdlib library cannot be enabled multiple times concurrently.
Silk will therefore skip profiling if another profile is already enabled.
**Features/Enhancements:**
- Allow option to delete profiles ([#652](https://redirect.github.com/jazzband/django-silk/issues/652)) [@viralj](https://redirect.github.com/viralj)
**Fixes:**
- Gracefully error out when there are concurrent profilers ([#692](https://redirect.github.com/jazzband/django-silk/issues/692)) [@albertyw](https://redirect.github.com/albertyw)
- Always disable cProfile as part of cleanup ([#699](https://redirect.github.com/jazzband/django-silk/issues/699)) [@albertyw](https://redirect.github.com/albertyw)
- Fix when Session, Authentication or Message middlewares are not present ([#667](https://redirect.github.com/jazzband/django-silk/issues/667)) [@mgaligniana](https://redirect.github.com/mgaligniana)
**Maintenance and Cleanup:**
- Fix deprecation warning for get_storage_class ([#669](https://redirect.github.com/jazzband/django-silk/issues/669)) [@albertyw](https://redirect.github.com/albertyw)
- Support Django 4.2 ([#685](https://redirect.github.com/jazzband/django-silk/issues/685)) [@albertyw](https://redirect.github.com/albertyw)
- Support python 3.12 ([#683](https://redirect.github.com/jazzband/django-silk/issues/683)) [@albertyw](https://redirect.github.com/albertyw)
- Support Django 5 ([#686](https://redirect.github.com/jazzband/django-silk/issues/686)) [@albertyw](https://redirect.github.com/albertyw)
- Remove deprecated datetime.timezone.utc ([#687](https://redirect.github.com/jazzband/django-silk/issues/687)) [@albertyw](https://redirect.github.com/albertyw)
- Derive version from importlib ([#697](https://redirect.github.com/jazzband/django-silk/issues/697)) [@robinchow](https://redirect.github.com/robinchow)
**Dependencies:**
- Update python dependencies ([#693](https://redirect.github.com/jazzband/django-silk/issues/693)) [@albertyw](https://redirect.github.com/albertyw)
### [`v5.0.4`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#504-2023-09-17)
[Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.3...5.0.4)
:release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw))
[Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.3..5.0.4)
**Features/Enhancements:**
- Handle case-insensitive sensitive headers ([#674](https://redirect.github.com/jazzband/django-silk/issues/674)) [@shtimn](https://redirect.github.com/shtimn)
- Add a "pagetitle" block to Silky templates ([#661](https://redirect.github.com/jazzband/django-silk/issues/661)) [@vsajip](https://redirect.github.com/vsajip)
- Allow to generate more informative profile file name ([#638](https://redirect.github.com/jazzband/django-silk/issues/638)) [@k4rl85](https://redirect.github.com/k4rl85)
**Maintenance and Cleanup:**
- Remove unsupported versions of Django and Python ([#668](https://redirect.github.com/jazzband/django-silk/issues/668)) [@albertyw](https://redirect.github.com/albertyw)
- Outsource all inline scripts and styles ([#635](https://redirect.github.com/jazzband/django-silk/issues/635)) [@sgelis](https://redirect.github.com/sgelis)
- Remove support for looking up headers on django <3.2 ([#643](https://redirect.github.com/jazzband/django-silk/issues/643)) [@albertyw](https://redirect.github.com/albertyw)
**Dependencies:**
- Update python dependencies ([#677](https://redirect.github.com/jazzband/django-silk/issues/677)) [@albertyw](https://redirect.github.com/albertyw)
### [`v5.0.3`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#503-2023-01-12)
[Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.2...5.0.3)
:release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw))
[Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.2..5.0.3)
**Fixes:**
- [#46](https://redirect.github.com/jazzband/django-silk/issues/46) Retain ordering, view style and limit ([#614](https://redirect.github.com/jazzband/django-silk/issues/614))
- [#157](https://redirect.github.com/jazzband/django-silk/issues/157) prevent encoding errors in params ([#617](https://redirect.github.com/jazzband/django-silk/issues/617))
- [#594](https://redirect.github.com/jazzband/django-silk/issues/594) Silk fails on constraint check queries ([#618](https://redirect.github.com/jazzband/django-silk/issues/618)) (Fixes compatibility with Django 4.1)
**Features/Enhancements:**
- [#132](https://redirect.github.com/jazzband/django-silk/issues/132) Add action on sql query list ([#611](https://redirect.github.com/jazzband/django-silk/issues/611))
- traceback only when needed ([#387](https://redirect.github.com/jazzband/django-silk/issues/387))
**Dependencies:**
- [#625](https://redirect.github.com/jazzband/django-silk/issues/625) Drop dependency to jinja2
### [`v5.0.2`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#502-2022-10-12)
[Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.1...5.0.2)
:release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw))
[Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.1...5.0.2)
**Fixes:**
- Multipart forms and RawPostDataException ([#592](https://redirect.github.com/jazzband/django-silk/issues/592))
- Decrease unnecessary database hits ([#587](https://redirect.github.com/jazzband/django-silk/issues/587)) ([#588](https://redirect.github.com/jazzband/django-silk/issues/588))
**Features/Enhancements:**
- Remove unneeded pytz package ([#603](https://redirect.github.com/jazzband/django-silk/issues/603))
- Use contextlib in test_profile_parser ([#590](https://redirect.github.com/jazzband/django-silk/issues/590))
- Add support for storages, that don't implement full filesystem path ([#596](https://redirect.github.com/jazzband/django-silk/issues/596))
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, check this box
This PR contains the following updates:
==4.1.2
->==4.2.16
==1.0.5
->==1.0.6
==3.13.0
->==3.14.0
==3.7.0
->==3.8.1
==0.9.0
->==0.11.2
==3.2.1
->==3.2.3
==0.14.0
->==0.16.0
==2.2.0
->==2.4.0
==5.0.1
->==5.2.0
==0.11.0
->==0.19.0
Release Notes
django/django (Django)
### [`v4.2.16`](https://redirect.github.com/django/django/compare/4.2.15...4.2.16) [Compare Source](https://redirect.github.com/django/django/compare/4.2.15...4.2.16) ### [`v4.2.15`](https://redirect.github.com/django/django/compare/4.2.14...4.2.15) [Compare Source](https://redirect.github.com/django/django/compare/4.2.14...4.2.15) ### [`v4.2.14`](https://redirect.github.com/django/django/compare/4.2.13...4.2.14) [Compare Source](https://redirect.github.com/django/django/compare/4.2.13...4.2.14) ### [`v4.2.13`](https://redirect.github.com/django/django/compare/4.2.12...4.2.13) [Compare Source](https://redirect.github.com/django/django/compare/4.2.12...4.2.13) ### [`v4.2.12`](https://redirect.github.com/django/django/compare/4.2.11...4.2.12) [Compare Source](https://redirect.github.com/django/django/compare/4.2.11...4.2.12) ### [`v4.2.11`](https://redirect.github.com/django/django/compare/4.2.10...4.2.11) [Compare Source](https://redirect.github.com/django/django/compare/4.2.10...4.2.11) ### [`v4.2.10`](https://redirect.github.com/django/django/compare/4.2.9...4.2.10) [Compare Source](https://redirect.github.com/django/django/compare/4.2.9...4.2.10) ### [`v4.2.9`](https://redirect.github.com/django/django/compare/4.2.8...4.2.9) [Compare Source](https://redirect.github.com/django/django/compare/4.2.8...4.2.9) ### [`v4.2.8`](https://redirect.github.com/django/django/compare/4.2.7...4.2.8) [Compare Source](https://redirect.github.com/django/django/compare/4.2.7...4.2.8) ### [`v4.2.7`](https://redirect.github.com/django/django/compare/4.2.6...4.2.7) [Compare Source](https://redirect.github.com/django/django/compare/4.2.6...4.2.7) ### [`v4.2.6`](https://redirect.github.com/django/django/compare/4.2.5...4.2.6) [Compare Source](https://redirect.github.com/django/django/compare/4.2.5...4.2.6) ### [`v4.2.5`](https://redirect.github.com/django/django/compare/4.2.4...4.2.5) [Compare Source](https://redirect.github.com/django/django/compare/4.2.4...4.2.5) ### [`v4.2.4`](https://redirect.github.com/django/django/compare/4.2.3...4.2.4) [Compare Source](https://redirect.github.com/django/django/compare/4.2.3...4.2.4) ### [`v4.2.3`](https://redirect.github.com/django/django/compare/4.2.2...4.2.3) [Compare Source](https://redirect.github.com/django/django/compare/4.2.2...4.2.3) ### [`v4.2.2`](https://redirect.github.com/django/django/compare/4.2.1...4.2.2) [Compare Source](https://redirect.github.com/django/django/compare/4.2.1...4.2.2) ### [`v4.2.1`](https://redirect.github.com/django/django/compare/4.2...4.2.1) [Compare Source](https://redirect.github.com/django/django/compare/4.2...4.2.1) ### [`v4.2`](https://redirect.github.com/django/django/compare/4.1.13...4.2) [Compare Source](https://redirect.github.com/django/django/compare/4.1.13...4.2) ### [`v4.1.13`](https://redirect.github.com/django/django/compare/4.1.12...4.1.13) [Compare Source](https://redirect.github.com/django/django/compare/4.1.12...4.1.13) ### [`v4.1.12`](https://redirect.github.com/django/django/compare/4.1.11...4.1.12) [Compare Source](https://redirect.github.com/django/django/compare/4.1.11...4.1.12) ### [`v4.1.11`](https://redirect.github.com/django/django/compare/4.1.10...4.1.11) [Compare Source](https://redirect.github.com/django/django/compare/4.1.10...4.1.11) ### [`v4.1.10`](https://redirect.github.com/django/django/compare/4.1.9...4.1.10) [Compare Source](https://redirect.github.com/django/django/compare/4.1.9...4.1.10) ### [`v4.1.9`](https://redirect.github.com/django/django/compare/4.1.8...4.1.9) [Compare Source](https://redirect.github.com/django/django/compare/4.1.8...4.1.9) ### [`v4.1.8`](https://redirect.github.com/django/django/compare/4.1.7...4.1.8) [Compare Source](https://redirect.github.com/django/django/compare/4.1.7...4.1.8) ### [`v4.1.7`](https://redirect.github.com/django/django/compare/4.1.6...4.1.7) [Compare Source](https://redirect.github.com/django/django/compare/4.1.6...4.1.7) ### [`v4.1.6`](https://redirect.github.com/django/django/compare/4.1.5...4.1.6) [Compare Source](https://redirect.github.com/django/django/compare/4.1.5...4.1.6) ### [`v4.1.5`](https://redirect.github.com/django/django/compare/4.1.4...4.1.5) [Compare Source](https://redirect.github.com/django/django/compare/4.1.4...4.1.5) ### [`v4.1.4`](https://redirect.github.com/django/django/compare/4.1.3...4.1.4) [Compare Source](https://redirect.github.com/django/django/compare/4.1.3...4.1.4) ### [`v4.1.3`](https://redirect.github.com/django/django/compare/4.1.2...4.1.3) [Compare Source](https://redirect.github.com/django/django/compare/4.1.2...4.1.3)django-compressor/django-appconf (django-appconf)
### [`v1.0.6`](https://redirect.github.com/django-compressor/django-appconf/compare/v1.0.5...v1.0.6) [Compare Source](https://redirect.github.com/django-compressor/django-appconf/compare/v1.0.5...v1.0.6)adamchainz/django-cors-headers (django-cors-headers)
### [`v3.14.0`](https://redirect.github.com/adamchainz/django-cors-headers/blob/HEAD/CHANGELOG.rst#3140-2023-02-25) [Compare Source](https://redirect.github.com/adamchainz/django-cors-headers/compare/3.13.0...3.14.0) - Support Django 4.2. - Switch from `urlparse()` to `urlsplit()` for URL parsing, reducing the middleware runtime up to 5%. This changes the type passed to `origin_found_in_white_lists()`, so if you have subclassed the middleware to override this method, you should check it is compatible (it most likely is). Thanks to Thibaut Decombe in `PR #793jazzband/django-debug-toolbar (django-debug-toolbar)
### [`v3.8.1`](https://redirect.github.com/jazzband/django-debug-toolbar/releases/tag/3.8.1) [Compare Source](https://redirect.github.com/jazzband/django-debug-toolbar/compare/3.7...3.8.1) Note: 3.8.0 was not released, use 3.8.1 #### What's Changed - fix: Simplify logic for Panel.enabled property by [@adamantike](https://redirect.github.com/adamantike) in [https://github.com/jazzband/django-debug-toolbar/pull/1676](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1676) - Auto-update History panel with JavaScript fetch requests. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1685](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1685) - Improve the template_source view coverage a bit by [@matthiask](https://redirect.github.com/matthiask) in [https://github.com/jazzband/django-debug-toolbar/pull/1688](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1688) - Support rerendering the toolbar on HTMX boosted pages. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1686](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1686) - Include panel scripts in content when RENDER_PANELS=True by [@matthiask](https://redirect.github.com/matthiask) in [https://github.com/jazzband/django-debug-toolbar/pull/1689](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1689) - Fixed [#1693](https://redirect.github.com/jazzband/django-debug-toolbar/issues/1693) -- Run tests on python 3.11 by [@pauloxnet](https://redirect.github.com/pauloxnet) in [https://github.com/jazzband/django-debug-toolbar/pull/1694](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1694) - Add divide by zero protection in timer.js by [@SmailBestybay](https://redirect.github.com/SmailBestybay) in [https://github.com/jazzband/django-debug-toolbar/pull/1687](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1687) - Fixed [#1695](https://redirect.github.com/jazzband/django-debug-toolbar/issues/1695) - Run test on Python 3.11 for Django 4.1 by [@pauloxnet](https://redirect.github.com/pauloxnet) in [https://github.com/jazzband/django-debug-toolbar/pull/1696](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1696) - Create one-time mouseup listener for each mousedown by [@scuml](https://redirect.github.com/scuml) in [https://github.com/jazzband/django-debug-toolbar/pull/1697](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1697) - Update package metadata by [@ofek](https://redirect.github.com/ofek) in [https://github.com/jazzband/django-debug-toolbar/pull/1690](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1690) - Validate and format pyproject.toml by [@hugovk](https://redirect.github.com/hugovk) in [https://github.com/jazzband/django-debug-toolbar/pull/1700](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1700) - Drop Rob's email address in project config. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1699](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1699) - Fix highlighting on history panel by [@scuml](https://redirect.github.com/scuml) in [https://github.com/jazzband/django-debug-toolbar/pull/1698](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1698) - Allow Language Selection on the Toolbar by [@leandrodesouzadev](https://redirect.github.com/leandrodesouzadev) in [https://github.com/jazzband/django-debug-toolbar/pull/1703](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1703) - Attach handlers to djDebug instead of document by [@scuml](https://redirect.github.com/scuml) in [https://github.com/jazzband/django-debug-toolbar/pull/1702](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1702) - Formalize support for Python 3.11. by [@tim-schilling](https://redirect.github.com/tim-schilling) in [https://github.com/jazzband/django-debug-toolbar/pull/1713](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1713) #### New Contributors - [@adamantike](https://redirect.github.com/adamantike) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1676](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1676) - [@SmailBestybay](https://redirect.github.com/SmailBestybay) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1687](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1687) - [@ofek](https://redirect.github.com/ofek) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1690](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1690) - [@hugovk](https://redirect.github.com/hugovk) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1700](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1700) - [@leandrodesouzadev](https://redirect.github.com/leandrodesouzadev) made their first contribution in [https://github.com/jazzband/django-debug-toolbar/pull/1703](https://redirect.github.com/jazzband/django-debug-toolbar/pull/1703) **Full Changelog**: https://github.com/jazzband/django-debug-toolbar/compare/3.7...3.8.1joke2k/django-environ (django-environ)
### [`v0.11.2`](https://redirect.github.com/joke2k/django-environ/blob/HEAD/CHANGELOG.rst#v0112---1-September-2023) [Compare Source](https://redirect.github.com/joke2k/django-environ/compare/v0.11.1...v0.11.2) Fixed \+++++ - Revert "Add variable expansion." feature due to `#490django-extensions/django-extensions (django-extensions)
### [`v3.2.3`](https://redirect.github.com/django-extensions/django-extensions/releases/tag/3.2.3) [Compare Source](https://redirect.github.com/django-extensions/django-extensions/compare/3.2.1...3.2.3) #### What's Changed - Fix error with lack of PosixPath support by [@giff-h](https://redirect.github.com/giff-h) in [https://github.com/django-extensions/django-extensions/pull/1785](https://redirect.github.com/django-extensions/django-extensions/pull/1785) - Import pkg_resources directly by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1782](https://redirect.github.com/django-extensions/django-extensions/pull/1782) - Add REMOTE_USER to werkzeug environment by [@confuzeus](https://redirect.github.com/confuzeus) in [https://github.com/django-extensions/django-extensions/pull/1769](https://redirect.github.com/django-extensions/django-extensions/pull/1769) - runserver_plus template reloading by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1775](https://redirect.github.com/django-extensions/django-extensions/pull/1775) - Add Python 3.11 support by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1786](https://redirect.github.com/django-extensions/django-extensions/pull/1786) - Run tests againts Django 4.2 and add trove classifier by [@michael-k](https://redirect.github.com/michael-k) in [https://github.com/django-extensions/django-extensions/pull/1812](https://redirect.github.com/django-extensions/django-extensions/pull/1812) - fix: test_should_highlight_bash_syntax_without_name to include whites… by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1797](https://redirect.github.com/django-extensions/django-extensions/pull/1797) - runserver_plus autoreload on template change by [@foarsitter](https://redirect.github.com/foarsitter) in [https://github.com/django-extensions/django-extensions/pull/1796](https://redirect.github.com/django-extensions/django-extensions/pull/1796) - Add support for psycopg3 by [@Apreche](https://redirect.github.com/Apreche) in [https://github.com/django-extensions/django-extensions/pull/1814](https://redirect.github.com/django-extensions/django-extensions/pull/1814) - Fixed drop test database command with psycopg 3 by [@jannh](https://redirect.github.com/jannh) in [https://github.com/django-extensions/django-extensions/pull/1818](https://redirect.github.com/django-extensions/django-extensions/pull/1818) - Fixed reset_db with psycopg3 (same patch like for drop_test_database) by [@jannh](https://redirect.github.com/jannh) in [https://github.com/django-extensions/django-extensions/pull/1821](https://redirect.github.com/django-extensions/django-extensions/pull/1821) - Cleanup http: links by [@Crocmagnon](https://redirect.github.com/Crocmagnon) in [https://github.com/django-extensions/django-extensions/pull/1798](https://redirect.github.com/django-extensions/django-extensions/pull/1798) #### New Contributors - [@giff-h](https://redirect.github.com/giff-h) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1785](https://redirect.github.com/django-extensions/django-extensions/pull/1785) - [@foarsitter](https://redirect.github.com/foarsitter) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1782](https://redirect.github.com/django-extensions/django-extensions/pull/1782) - [@confuzeus](https://redirect.github.com/confuzeus) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1769](https://redirect.github.com/django-extensions/django-extensions/pull/1769) - [@Apreche](https://redirect.github.com/Apreche) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1814](https://redirect.github.com/django-extensions/django-extensions/pull/1814) - [@Crocmagnon](https://redirect.github.com/Crocmagnon) made their first contribution in [https://github.com/django-extensions/django-extensions/pull/1798](https://redirect.github.com/django-extensions/django-extensions/pull/1798) **Full Changelog**: https://github.com/django-extensions/django-extensions/compare/3.2.1...3.2.3jazzband/django-oauth-toolkit (django-oauth-toolkit)
### [`v2.4.0`](https://redirect.github.com/jazzband/django-oauth-toolkit/blob/HEAD/CHANGELOG.md#240---2024-05-13) [Compare Source](https://redirect.github.com/jazzband/django-oauth-toolkit/compare/2.3.0...2.4.0) ##### WARNING Issues caused by **Release 2.0.0 breaking changes** continue to be logged. Please **make sure to carefully read these release notes** before performing a MAJOR upgrade to 2.x. These issues both result in `{"error": "invalid_client"}`: 1. The application client secret is now hashed upon save. You must copy it before it is saved. Using the hashed value will fail. 2. `PKCE_REQUIRED` is now `True` by default. You should use PKCE with your client or set `PKCE_REQUIRED=False` if you are unable to fix the client. If you are going to revert migration 0006 make note that previously hashed client_secret cannot be reverted! ##### Added - [#1304](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1304) Add `OAuth2ExtraTokenMiddleware` for adding access token to request. See [Setup a provider](https://django-oauth-toolkit.readthedocs.io/en/latest/tutorial/tutorial\_03.html#setup-a-provider) in the Tutorial. - [#1273](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1273) Performance improvement: Add caching of loading of OIDC private key. - [#1285](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1285) Add `post_logout_redirect_uris` field in the [Application Registration form](https://django-oauth-toolkit.readthedocs.io/en/latest/templates.html#application-registration-form-html) - [#1311](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1311),[#1334](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1334) (**Security**) Add option to disable client_secret hashing to allow verifying JWTs' signatures when using [HS256 keys](https://django-oauth-toolkit.readthedocs.io/en/latest/oidc.html#using-hs256-keys). This means your client secret will be stored in cleartext but is the only way to successfully use HS256 signed JWT's. - [#1350](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1350) Support Python 3.12 and Django 5.0 - [#1367](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1367) Add `code_challenge_methods_supported` property to auto discovery information, per [RFC 8414 section 2](https://www.rfc-editor.org/rfc/rfc8414.html#page-7) - [#1328](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1328) Adds the ability to [define how to store a user profile](https://django-oauth-toolkit.readthedocs.io/en/latest/oidc.html#define-where-to-store-the-profile). ##### Fixed - [#1292](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1292) Interpret `EXP` in AccessToken always as UTC instead of (possibly) local timezone. Use setting `AUTHENTICATION_SERVER_EXP_TIME_ZONE` to enable different time zone in case the remote authentication server does not provide EXP in UTC. - [#1323](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1323) Fix instructions in [documentation](https://django-oauth-toolkit.readthedocs.io/en/latest/getting_started.html#authorization-code) on how to create a code challenge and code verifier - [#1284](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1284) Fix a 500 error when trying to logout with no id_token_hint even if the browser session already expired. - [#1296](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1296) Added reverse function in migration `0006_alter_application_client_secret`. Note that reversing this migration cannot undo a hashed `client_secret`. - [#1345](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1345) Fix encapsulation for Redirect URI scheme validation. Deprecates `RedirectURIValidator` in favor of `AllowedURIValidator`. - [#1357](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1357) Move import of setting_changed signal from test to django core modules. - [#1361](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1361) Fix prompt=none redirects to login screen - [#1380](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1380) Fix AttributeError in OAuth2ExtraTokenMiddleware when a custom AccessToken model is used. - [#1288](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1288) Fix [#1276](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1276) which attempted to resolve [#1092](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1092) for requests that don't have a client_secret per [RFC 6749 4.1.1](https://www.rfc-editor.org/rfc/rfc6749.html#section-4.1.1) - [#1337](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1337) Gracefully handle expired or deleted refresh tokens, in `validate_user`. - Various documentation improvements: [#1410](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1410), [#1408](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1408), [#1405](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1405), [#1399](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1399), [#1401](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1401), [#1396](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1396), [#1375](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1375), [#1162](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1162), [#1315](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1315), [#1307](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1307) ##### Removed - [#1350](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1350) Remove support for Python 3.7 and Django 2.2 ### [`v2.3.0`](https://redirect.github.com/jazzband/django-oauth-toolkit/blob/HEAD/CHANGELOG.md#230-2023-05-31) [Compare Source](https://redirect.github.com/jazzband/django-oauth-toolkit/compare/2.2.0...2.3.0) ##### WARNING Issues caused by **Release 2.0.0 breaking changes** continue to be logged. Please **make sure to carefully read these release notes** before performing a MAJOR upgrade to 2.x. These issues both result in `{"error": "invalid_client"}`: 1. The application client secret is now hashed upon save. You must copy it before it is saved. Using the hashed value will fail. 2. `PKCE_REQUIRED` is now `True` by default. You should use PKCE with your client or set `PKCE_REQUIRED=False` if you are unable to fix the client. ##### Added - Add Japanese(日本語) Language Support - [#1244](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1244) implement [OIDC RP-Initiated Logout](https://openid.net/specs/openid-connect-rpinitiated-1\_0.html) - [#1092](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1092) Allow Authorization Code flow without a client_secret per [RFC 6749 2.3.1](https://www.rfc-editor.org/rfc/rfc6749.html#section-2.3.1) - [#1264](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1264) Support Django 4.2. ##### Changed - [#1222](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1222) Remove expired ID tokens alongside access tokens in `cleartokens` management command - [#1267](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1267), [#1253](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1253), [#1251](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1251), [#1250](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1250), [#1224](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1224), [#1212](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1212), [#1211](https://redirect.github.com/jazzband/django-oauth-toolkit/issues/1211) Various documentation improvementsjazzband/django-silk (django-silk)
### [`v5.2.0`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#520-2024-08-17) [Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.1.0...5.2.0) :release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw)) [Full Changelog](https://redirect.github.com/jazzband/django-silk/compre/5.1.0..5.2.0) **Features/Enhancements:** - Support Django 5.1 ([#734](https://redirect.github.com/jazzband/django-silk/issues/734), [#732](https://redirect.github.com/jazzband/django-silk/issues/732)) [@albertyw](https://redirect.github.com/albertyw) **Fixes:** - Fix when Session, Authentication or Message middleware are not present ([#667](https://redirect.github.com/jazzband/django-silk/issues/667)) [@mgaligniana](https://redirect.github.com/mgaligniana) - Update 'tables_involved' property to include tables from UPDATE operation ([#717](https://redirect.github.com/jazzband/django-silk/issues/717)) [@emregeldegul](https://redirect.github.com/emregeldegul) - Fix double-escaping of the curl and Python example code ([#709](https://redirect.github.com/jazzband/django-silk/issues/709)) [@SpecLad](https://redirect.github.com/SpecLad) - Correct units in profiling and requests pages ([#725](https://redirect.github.com/jazzband/django-silk/issues/725)) [@ka28kumar](https://redirect.github.com/ka28kumar) **Maintenance and Cleanup:** - Update python dependencies ([#733](https://redirect.github.com/jazzband/django-silk/issues/733)) [@albertyw](https://redirect.github.com/albertyw) - Refactor SQL query time calculation to use Django aggregation ([#720](https://redirect.github.com/jazzband/django-silk/issues/720)) [@beltagymohamed](https://redirect.github.com/beltagymohamed) - Fix test failures on Windows ([#707](https://redirect.github.com/jazzband/django-silk/issues/707)) [@SpecLad](https://redirect.github.com/SpecLad) - Update workflow actions ([#700](https://redirect.github.com/jazzband/django-silk/issues/700)) [@albertyw](https://redirect.github.com/albertyw) - Update test matrix to latest version of django, postgres, and mariadb [#701](https://redirect.github.com/jazzband/django-silk/issues/701)) [@albertyw](https://redirect.github.com/albertyw) ### [`v5.1.0`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#510-2023-12-30) [Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.4...5.1.0) :release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw)) [Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.4..5.1.0) **Upgrading:** This release includes [Fix deprecation warning for get_storage_class #669](https://redirect.github.com/jazzband/django-silk/pull/669) which deprecates `SILKY_STORAGE_CLASS`. Users should instead use the Django `STORAGES` configuration. See [README](https://redirect.github.com/albertyw/django-silk/blob/master/README.md#profiling) and [Django documentation](https://docs.djangoproject.com/en/5.0/ref/settings/#std-setting-STORAGES) for more information. Also, for python 3.12, the `cProfile` stdlib library cannot be enabled multiple times concurrently. Silk will therefore skip profiling if another profile is already enabled. **Features/Enhancements:** - Allow option to delete profiles ([#652](https://redirect.github.com/jazzband/django-silk/issues/652)) [@viralj](https://redirect.github.com/viralj) **Fixes:** - Gracefully error out when there are concurrent profilers ([#692](https://redirect.github.com/jazzband/django-silk/issues/692)) [@albertyw](https://redirect.github.com/albertyw) - Always disable cProfile as part of cleanup ([#699](https://redirect.github.com/jazzband/django-silk/issues/699)) [@albertyw](https://redirect.github.com/albertyw) - Fix when Session, Authentication or Message middlewares are not present ([#667](https://redirect.github.com/jazzband/django-silk/issues/667)) [@mgaligniana](https://redirect.github.com/mgaligniana) **Maintenance and Cleanup:** - Fix deprecation warning for get_storage_class ([#669](https://redirect.github.com/jazzband/django-silk/issues/669)) [@albertyw](https://redirect.github.com/albertyw) - Support Django 4.2 ([#685](https://redirect.github.com/jazzband/django-silk/issues/685)) [@albertyw](https://redirect.github.com/albertyw) - Support python 3.12 ([#683](https://redirect.github.com/jazzband/django-silk/issues/683)) [@albertyw](https://redirect.github.com/albertyw) - Support Django 5 ([#686](https://redirect.github.com/jazzband/django-silk/issues/686)) [@albertyw](https://redirect.github.com/albertyw) - Remove deprecated datetime.timezone.utc ([#687](https://redirect.github.com/jazzband/django-silk/issues/687)) [@albertyw](https://redirect.github.com/albertyw) - Derive version from importlib ([#697](https://redirect.github.com/jazzband/django-silk/issues/697)) [@robinchow](https://redirect.github.com/robinchow) **Dependencies:** - Update python dependencies ([#693](https://redirect.github.com/jazzband/django-silk/issues/693)) [@albertyw](https://redirect.github.com/albertyw) ### [`v5.0.4`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#504-2023-09-17) [Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.3...5.0.4) :release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw)) [Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.3..5.0.4) **Features/Enhancements:** - Handle case-insensitive sensitive headers ([#674](https://redirect.github.com/jazzband/django-silk/issues/674)) [@shtimn](https://redirect.github.com/shtimn) - Add a "pagetitle" block to Silky templates ([#661](https://redirect.github.com/jazzband/django-silk/issues/661)) [@vsajip](https://redirect.github.com/vsajip) - Allow to generate more informative profile file name ([#638](https://redirect.github.com/jazzband/django-silk/issues/638)) [@k4rl85](https://redirect.github.com/k4rl85) **Maintenance and Cleanup:** - Remove unsupported versions of Django and Python ([#668](https://redirect.github.com/jazzband/django-silk/issues/668)) [@albertyw](https://redirect.github.com/albertyw) - Outsource all inline scripts and styles ([#635](https://redirect.github.com/jazzband/django-silk/issues/635)) [@sgelis](https://redirect.github.com/sgelis) - Remove support for looking up headers on django <3.2 ([#643](https://redirect.github.com/jazzband/django-silk/issues/643)) [@albertyw](https://redirect.github.com/albertyw) **Dependencies:** - Update python dependencies ([#677](https://redirect.github.com/jazzband/django-silk/issues/677)) [@albertyw](https://redirect.github.com/albertyw) ### [`v5.0.3`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#503-2023-01-12) [Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.2...5.0.3) :release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw)) [Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.2..5.0.3) **Fixes:** - [#46](https://redirect.github.com/jazzband/django-silk/issues/46) Retain ordering, view style and limit ([#614](https://redirect.github.com/jazzband/django-silk/issues/614)) - [#157](https://redirect.github.com/jazzband/django-silk/issues/157) prevent encoding errors in params ([#617](https://redirect.github.com/jazzband/django-silk/issues/617)) - [#594](https://redirect.github.com/jazzband/django-silk/issues/594) Silk fails on constraint check queries ([#618](https://redirect.github.com/jazzband/django-silk/issues/618)) (Fixes compatibility with Django 4.1) **Features/Enhancements:** - [#132](https://redirect.github.com/jazzband/django-silk/issues/132) Add action on sql query list ([#611](https://redirect.github.com/jazzband/django-silk/issues/611)) - traceback only when needed ([#387](https://redirect.github.com/jazzband/django-silk/issues/387)) **Dependencies:** - [#625](https://redirect.github.com/jazzband/django-silk/issues/625) Drop dependency to jinja2 ### [`v5.0.2`](https://redirect.github.com/jazzband/django-silk/blob/HEAD/CHANGELOG.md#502-2022-10-12) [Compare Source](https://redirect.github.com/jazzband/django-silk/compare/5.0.1...5.0.2) :release-by: Albert Wang ([@albertyw](https://redirect.github.com/albertyw)) [Full Changelog](https://redirect.github.com/jazzband/django-silk/compare/5.0.1...5.0.2) **Fixes:** - Multipart forms and RawPostDataException ([#592](https://redirect.github.com/jazzband/django-silk/issues/592)) - Decrease unnecessary database hits ([#587](https://redirect.github.com/jazzband/django-silk/issues/587)) ([#588](https://redirect.github.com/jazzband/django-silk/issues/588)) **Features/Enhancements:** - Remove unneeded pytz package ([#603](https://redirect.github.com/jazzband/django-silk/issues/603)) - Use contextlib in test_profile_parser ([#590](https://redirect.github.com/jazzband/django-silk/issues/590)) - Add support for storages, that don't implement full filesystem path ([#596](https://redirect.github.com/jazzband/django-silk/issues/596))Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.