10000 chore: Build django CMS 4.1.5 by fsbraun · Pull Request #8196 · django-cms/django-cms · GitHub
[go: up one dir, main page]
Skip to content

chore: Build django CMS 4.1.5 #8196

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Apr 4, 2025
Merged

chore: Build django CMS 4.1.5 #8196

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
e9c7076
[4.1.5 release process] Bumped version to 4.1.5
Apr 3, 2025
ee977fc
[4.1.5 release process] compilemessages
Apr 3, 2025
c0786d3
[4.1.5 release process] compiling new static files
Apr 3, 2025
7dd0007
[4.1.5 release process] updating latest docs
Apr 3, 2025
504e69a
Update changelog and release notes
fsbraun Apr 4, 2025
File filter

Filter by extension

Filter by extension
Viewed files
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Update changelog and release notes
  • Loading branch information
@fsbraun
fsbraun committed Apr 4, 2025
commit 504e69a8164f0c5d5a358ab3074976db9c8193ae
18 changes: 15 additions & 3 deletions CHANGELOG.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,17 +1,29 @@
4.1.4 (2025-04-04)
==================

Bug Fixes:
----------
* Grouper models w/o must not assume language grouper (#8194) (#8195) (35521bc7f) -- Fabian Braun
* Ensure correct placeholder retrieval for PageContent instances (#8088) -- Fabian Braun
* Fallback page names were not escaped (#8113) (#8114) -- Fabian Braun
* Use PageContent.changed_date for sitemap lastmod (#8125) -- Jacob Rief
* Allow frontend editing of page title fields -- Fabian Braun
* Detect page when getting toolbar for endpoint (#8137) (#8138) -- Fabian Braun
* CMS_TOOLBAR_HIDE broke endpoints in django CMS 4+ (#8176) -- Fabian Braun
* Preview did not show the redirect page (#8175) -- Fabian Braun


Statistics:
-----------
< 10000 /td>
This release includes 4 pull requests, and was created with the help of the following contributors (in alphabetical order):
This release includes 8 pull requests, and was created with the help of the following contributors (in alphabetical order):

* Fabian Braun (1 pull request)
* Github Release Action (3 pull requests)
* Fabian Braun (7 pull request)
* Jacob Rief (1 pull request)

With the review help of the following contributors:

* Vinit Kumar
* sourcery-ai[bot]

Thanks to all contributors for their efforts!
Expand Down
56 changes: 16 additions & 40 deletions docs/upgrade/4.1.5.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,35 +4,15 @@
4.1.5 release notes
*******************

*November 12, 2024*
*April 4, 2025*

.. warning:: Upgrading from previous versions

django CMS 4.1 is the **first community release** of django CMS 4. Django CMS 4 introduces changes that **require** action if you are upgrading from a 3.x version. Please read the step-by-step guide to the
process of upgrading from 3.5+ to 4 here: :ref:`upgrade-to-4.0`


Welcome to django CMS 4.1.4!

Security fix
============

django CMS 4.1.4 closes a security vulnerability that could allow an attacker
to inject malicious code into the page title allowing to load arbitrary
javascript code when viewing the page. We recommend that you upgrade to
this version as soon as possible.

The security issue is of low severity, since an attacker needs to have access
to the django CMS admin interface to exploit it.

Thanks to `Ali İltizar (@alii76tt) <https://twitter.com/alii76tt>`_ for
reporting the issue.

.. note::

As ever, we remind our users and contributors that all security reports,
patches and concerns be addressed only to our security team by email, at
`security@django-cms.org <mailto:security@django-cms.org>`_.
Welcome to django CMS 4.1.5!


Django and Python compatibility
Expand All @@ -50,33 +30,29 @@ What's new in 4.1.5

Bug Fixes:
----------
* XSS vulnerability for page title (#8075) (c045a990e) -- Fabian Braun
* Menus crashed when unexpected page content was present (#8052) -- Fabian Braun
* Sites menu was empty in the page tree (#8064) -- Fabian Braun
* Added redirect message when in editing a redirect toolbar object (#8056) -- Sal
* X frame options added to page settings form (#8041) -- Sal
* template tag ``get_admin_url_for_language`` did not return the latest page content (#7967) -- Fabian Braun
* Sitemap return a QuerySet in CMSSitemap.items() (#8031) -- Jens-Erik Weber
* Improved UX when page content is missing in selected language (#8033) -- Jacob Rief

Other:
------
* Updated welcome page (#8057) -- Fabian Braun
Bug Fixes:
----------
* Grouper models w/o must not assume language grouper (#8194) (#8195) (35521bc7f) -- Fabian Braun
* Ensure correct placeholder retrieval for PageContent instances (#8088) -- Fabian Braun
* Fallback page names were not escaped (#8113) (#8114) -- Fabian Braun
* Use PageContent.changed_date for sitemap lastmod (#8125) -- Jacob Rief
* Allow frontend editing of page title fields -- Fabian Braun
* Detect page when getting toolbar for endpoint (#8137) (#8138) -- Fabian Braun
* CMS_TOOLBAR_HIDE broke endpoints in django CMS 4+ (#8176) -- Fabian Braun
* Preview did not show the redirect page (#8175) -- Fabian Braun


Statistics:
-----------

This release includes 9 pull requests, and was created with the help of the following contributors (in alphabetical order):
This release includes 8 pull requests, and was created with the help of the following contributors (in alphabetical order):

* Fabian Braun (5 pull request)
* Fabian Braun (7 pull request)
* Jacob Rief (1 pull request)
* Jens-Erik Weber (1 pull request)
* Sal (2 pull request)

With the review help of the following contributors:

* Jacob Rief
* Mark Walker
* Vinit Kumar
* sourcery-ai[bot]

Thanks to all contributors for their efforts!
Loading
0