Add Django system checks for validating callable import path settings.
[iafisher]
Improve documentation.
[hirotasoshu]
Improve repository issue and PR templates.
[hirotasoshu]
6.0.1 (2023-05-17)
Fine-tune CI pipelines and RTD build requirements.
[aleksihakli]
6.0.0 (2023-05-17)
Version 6 is a breaking release. Please see the documentation for upgrade instructions.
Deprecate Python 3.7 support.
[aleksihakli]
Deprecate is_admin_site API call with misleading naming.
[hirotasoshu]
Add AXES_LOCKOUT_PARAMETERS configuration flag that will supersede AXES_ONLY_USER_FAILURES, AXES_LOCK_OUT_BY_COMBINATION_USER_AND_IP, AXES_LOCK_OUT_BY_USER_OR_IP, and AXES_USE_USER_AGENT configurations. Add deprecation warnings for old flags. See project documentation on RTD for update instructions.
[hirotasoshu]
Improve translations.
[hirotasoshu]
Use Django cache.incr API for atomic cached failure counting
[hirotasoshu, aleksihakli]
Make django-ipware an optional dependency. Install it with e.g. pip install django-axes[ipware] package and extras specifier. [aleksihakli]
Deprecate and rename old configuration flags. Old flags will be removed in or after version 6.1. [aleksihakli]
AXES_PROXY_ORDER is now AXES_IPWARE_PROXY_ORDER,
AXES_PROXY_COUNT is now AXES_IPWARE_PROXY_COUNT,
AXES_PROXY_TRUSTED_IPS is now AXES_IPWARE_PROXY_TRUSTED_IPS, and
AXES_META_PRECEDENCE_ORDER is now AXES_IPWARE_META_PRECEDENCE_ORDER.
Set 429 as the default lockout response code. [hirotasoshu]
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps django-axes from 5.40.1 to 6.0.3.
Changelog
Sourced from django-axes's changelog.
... (truncated)
Commits
1548a58
Version 6.0.3deb0e33
Add username to admin fieldsets #1073091d666
chore(deps): bump tox from 4.6.0 to 4.6.181360d0
Version 6.0.21e6ca7a
chore(deps): bump pytest-cov from 4.0.0 to 4.1.0f339b4c
chore(deps): bump tox from 4.5.1 to 4.6.036b6c2c
chore(deps): bump coverage from 7.2.5 to 7.2.790ede53
chore(deps): bump prospector from 1.10.0 to 1.10.28178a63
chore(deps): bump sphinx-rtd-theme from 1.2.0 to 1.2.275a0709
chore(deps): bump pytest from 7.3.1 to 7.3.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)