A Django project skeleton that is modern and cutting edge.

Arun Ravindran

Last update: Dec 15, 2022

Related tags

Overview

{% comment "This comment section will be deleted in the generated project" %}

Edge

A Fantastic Django project starter.

Features

Ready Bootstrap-themed pages
User Registration/Sign up
Better Security with 12-Factor recommendations
Logging/Debugging Helpers
Works on Python 3 and Django 2
Formatted with Black

More information at: http://django-edge.readthedocs.org/ Contribute using: Edge Dev Tools ✨ 🍰 ✨

Quick start:

Before creating a new project from this template, you need to create a fresh virtual environment and install Django:

$ python -m venv ./myenv
$ source ./myenv/bin/activate.fish (use the appropriate activate script based on your shell)
$ python -m pip install -U pip django

Create your new edgy django project:

$ django-admin.py startproject --template=https://github.com/arocks/edge/archive/master.zip --extension=py,md,html,env my_proj
$ cd my_proj
$ pip install -r requirements.txt
$ cd src
$ cp my_proj/settings/local.sample.env my_proj/settings/local.env
$ python manage.py migrate
$ python manage.py createsuperuser
$ python manage.py runserver

Recommended Installation (with `pipenv`)

$ pip install --user --upgrade pipenv (Install pipenv system-wide or locally but outside a virtualenv)
$ mkdir my_proj (choose a better name than my_proj for your project)
$ django-admin.py startproject --template=https://github.com/arocks/edge/archive/master.zip --extension=py,md,html,env my_proj .

If you get an SSL error, then download the zip file and mention it after --template=, like this: django-admin.py startproject --template=~/Downloads/master.zip --extension=py,md,html,env my_proj .
$ pipenv install --dev
$ pipenv shell
$ cp src/my_proj/settings/local.sample.env src/my_proj/settings/local.env (or rename this file)
$ cd src
$ python manage.py migrate
$ python manage.py createsuperuser
$ python manage.py runserver

If you need to keep requirements.txt updated then run

pipenv lock --requirements > requirements/base.txt
echo "-r base.txt" > requirements/development.txt
pipenv lock --requirements --dev >> requirements/development.txt

Rest of this README will be copied to the generated project.

{% endcomment %}

{{ project_name }} is a short description. It is built with Python using the Django Web Framework.

This project has the following basic apps:

App1 (short desc)
App2 (short desc)
App3 (short desc)

Installation

Quick start

To set up a development environment quickly, first install Python 3. It comes with virtualenv built-in. So create a virtual env by:

1. `$ python3 -m venv {{ project_name }}`
2. `$ . {{ project_name }}/bin/activate`

Install all dependencies:

pip install -r requirements.txt

Run migrations:

python manage.py migrate

Detailed instructions

Take a look at the docs for more information.

Comments

issue with base.html and the "{% block container %}"

There seems to be a spacing issue in the base.html and any form that does not use the splash block. If the default splash block in the base.html is used, a part of the content block will be under the menu.

A good example of the issue is in the profiles\templates\profiles\edit_profil.html.

The header text:

Edit Profile

Is hidden under the menu, with the separator line just showing in my browsers. I hacked a fix by putting a line in the default splash to take up the room so my forms all display correctly, but I just learning CCS so I'm sure there is a better way.

opened by awinner1 16
would love to see some documentation enhancements.

i can't escape the fact that edge is one of it's kind right now and it is very helpful for any django developer out there, but it need a more better documentions you can add several code snippets and explain them or you can just show how the things actually works by using django api. these changes will be very helpful for a new guy to easily get used to edge code, without going through it.

Thanks.
enhancement

opened by ParvJain 16
v2.0 ship list
All these changes are present in the https://github.com/arocks/edge/tree/accounts2profiles feature branch

Models

User model customized (thanks to authtools)

Use emails as the primary key. username will not be required.

Use full names instead of first name and last name.

Profile :sparkles:

Profiles app: Each user will have a corresponding profile https://github.com/arocks/edge/issues/2 . The default profile details are:

Profile Picture: any image can be uploaded. By default a grey head appears.

Bio: a short writeup

Email Verification status: whether the user clicked on the link in the verification email. Refer Auth.

Show profile: A view to show the user's profile in an attractive page. It has a permalink which can be shared without revealing user's email or database primary key using UUID.

Edit profile: A combined view with user editable details and profile editable details in a single view.

Appearance

Themed: ships with Bootswatch Lumen theme by default

Navbar See Thru: Cover image can be seen through the navbar. Upon scrolling the navbar becomes opaque.

Crispy forms: Every form has been styled to look Bootstrap-native using crispy forms.

Profile Pic on Navbar: appears next to user's full name

Light Navbar: Dark bar was looking too Bootstrap-ish

Upgraded to Bootstrap v3.3.2 https://github.com/arocks/edge/issues/8

Admin

Switch to site: A button on the admin navbar takes you to the home page quickly

Profiles inlined to User: There is no separate admin interface for profiles making it cleaner and less confusing.

Permalink: Unique link to every user's profile shown in user list view

Python 2.7 Support :boom:

Project Template now supports Python 2.7. The super syntax was applied and pathlib library dependency was removed. https://github.com/arocks/edge/issues/4

Environment specific Settings and Requirements files

Pip Requirement files are now split into dev, prod etc

Settings files have been split into dev, prod etc. https://github.com/arocks/edge/issues/3

Authentication Workflows

Signup: fill a simple signup form and it will log you in automatically. There is no email verification step.

Login: login form takes the email address and password. Forget password and Remember me features are also implemented.

Logout: takes you back to home page

Forgot Password: Sends a password reset mail. Clicking on the password reset prompts for a new password (twice). Then you are automatically logged in.

Change Password: The edit profile page has a password change link.

All these are class-based views wrapped around standard Django auth functions for easy customization.

Other Changes

URL names are namespaced to respective apps: Refer to "accounts:login" rather than "login". The "home" and "about" urls are not namespaced.

Test cases now check only if the pages return a success code rather than the exact view function.

Added a console backend for email handling while development.

Login and Signup form removed from Home page: Most modern websites take users to seperate pages for login and signup. As Login forms added more features it gets clunky to fit in the navbar.

Alerts moved to below navbar.

meta
opened by arocks 11
bootstrap3

python manage.py migrate ERROR. AttributeError: 'module' object has no attribute 'bootstrap3'

We need https://github.com/darrylcousins/django-admin-bootstrapped3

Please update requirements :-)

opened by lerina 6

Chain of exceptions "Exception while resolving variable 'tag'"

Hi! I'm novice in Django and I run project under virtualenv on Win-10. So I try to install edge followed by instruction. All works fine untill go to "login" or "Signup" page. The whole console was filled by chains of exceptions like this:

--- Logging error ---
Traceback (most recent call last):
  File "C:\Users\root\Envs\OnEdge\lib\site-packages\django\template\base.py", line 835, in _resolve_lookup
    current = current[bit]
  File "C:\Users\root\Envs\OnEdge\lib\site-packages\django\template\context.py", line 83, in __getitem__
    raise KeyError(key)
KeyError: 'tag'

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "C:\Users\root\Envs\OnEdge\lib\site-packages\django\template\base.py", line 841, in _resolve_lookup
    if isinstance(current, BaseContext) and getattr(type(current), bit):
AttributeError: type object 'Context' has no attribute 'tag'

During handling of the above exception, another exception occurred:

... and so one... Also DebugToolbas show this exceptions: opera _2018-08-26_205050_127 0 0 1

However, in the browser, I can make both a login and a sign up. Also view and modify profile.

In traceback I also noticed this part of exceptions:

Traceback (most recent call last):
  File "C:\Users\root\Envs\OnEdge\lib\site-packages\django\template\base.py", line 856, in _resolve_lookup
    (bit, current))  # missing attribute
django.template.base.VariableDoesNotExist: Failed lookup for key [tag] in [{'True': True, 'False': False, 'None': None}, {'True': True, 'False': False, 'None': None, 'csrf_token': <SimpleLazyObject: 'rozs6ZhIsFDsoSkYfSu5pdh3XGSWkYGuJGEyyQAUajKfnNR6lAd4RbWFP1VbHS5J'>, 'user': <SimpleLazyObject: <django.contrib.auth.models.AnonymousUser object at 0x000001D435AF54A8>>, 'perms': <django.contrib.auth.context_processors.PermWrapper object at 0x000001D435B26DA0>, 'debug': True, 'sql_queries': <function debug.<locals>.<lambda> at 0x000001D435B21D90>, 'LANGUAGES': [('af', 'Afrikaans'), ('ar', 'Arabic'), ('ast', 'Asturian'), ('az', 'Azerbaijani'), ('bg', 'Bulgarian'), ('be', 'Belarusian'), ('bn', 'Bengali'), ('br', 'Breton'), ('bs', 'Bosnian'), ('ca', 'Catalan'), ('cs', 'Czech'), ('cy', 'Welsh'), ('da', 'Danish'), ('de', 'German'), ('dsb', 'Lower Sorbian'), ('el', 'Greek'), ('en', 'English'), ('en-au', 'Australian English'), ('en-gb', 'British English'), ('eo', 'Esperanto'), ('es', 'Spanish'), ('es-ar', 'Argentinian Spanish'), ('es-co', 'Colombian Spanish'), ('es-mx', 'Mexican Spanish'), ('es-ni', 'Nicaraguan Spanish'), ('es-ve', 'Venezuelan Spanish'), ('et', 'Estonian'), ('eu', 'Basque'), ('fa', 'Persian'), ('fi', 'Finnish'), ('fr', 'French'), ('fy', 'Frisian'), ('ga', 'Irish'), ('gd', 'Scottish Gaelic'), ('gl', 'Galician'), ('he', 'Hebrew'), ('hi', 'Hindi'), ('hr', 'Croatian'), ('hsb', 'Upper Sorbian'), ('hu', 'Hungarian'), ('ia', 'Interlingua'), ('id', 'Indonesian'), ('io', 'Ido'), ('is', 'Icelandic'), ('it', 'Italian'), ('ja', 'Japanese'), ('ka', 'Georgian'), ('kab', 'Kabyle'), ('kk', 'Kazakh'), ('km', 'Khmer'), ('kn', 'Kannada'), ('ko', 'Korean'), ('lb', 'Luxembourgish'), ('lt', 'Lithuanian'), ('lv', 'Latvian'), ('mk', 'Macedonian'), ('ml', 'Malayalam'), ('mn', 'Mongolian'), ('mr', 'Marathi'), ('my', 'Burmese'), ('nb', 'Norwegian Bokmål'), ('ne', 'Nepali'), ('nl', 'Dutch'), ('nn', 'Norwegian Nynorsk'), ('os', 'Ossetic'), ('pa', 'Punjabi'), ('pl', 'Polish'), ('pt', 'Portuguese'), ('pt-br', 'Brazilian Portuguese'), ('ro', 'Romanian'), ('ru', 'Russian'), ('sk', 'Slovak'), ('sl', 'Slovenian'), ('sq', 'Albanian'), ('sr', 'Serbian'), ('sr-latn', 'Serbian Latin'), ('sv', 'Swedish'), ('sw', 'Swahili'), ('ta', 'Tamil'), ('te', 'Telugu'), ('th', 'Thai'), ('tr', 'Turkish'), ('tt', 'Tatar'), ('udm', 'Udmurt'), ('uk', 'Ukrainian'), ('ur', 'Urdu'), ('vi', 'Vietnamese'), ('zh-hans', 'Simplified Chinese'), ('zh-hant', 'Traditional Chinese')], 'LANGUAGE_CODE': 'en-us', 'LANGUAGE_BIDI': False, 'MEDIA_URL': '/media/', 'STATIC_URL': '/static/', 'TIME_ZONE': 'Europe/Kiev', 'messages': <django.contrib.messages.storage.fallback.FallbackStorage object at 0x000001D435ADEDD8>, 'DEFAULT_MESSAGE_LEVELS': {'DEBUG': 10, 'INFO': 20, 'SUCCESS': 25, 'WARNING': 30, 'ERROR': 40}, 'form': <LoginForm bound=False, valid=False, fields=(username;password;remember_me)>, 'view': <accounts.views.LoginView object at 0x000001D435ADEEB8>, 'site': <django.contrib.sites.requests.RequestSite object at 0x000001D435AF5EB8>, 'site_name': '127.0.0.1:8000', 'next': '', 'block': <Block Node: form. Contents: [<TextNode: '\n  '>, <crispy_forms.templatetags.crispy_forms_tags.CrispyFormNode object at 0x000001D435B26400>, <TextNode: '\n\n  <div class="form-mess'>, <django.template.defaulttags.URLNode object at 0x000001D435B264E0>, <TextNode: '">Sign up</a>.\n    </p>\n '>]>, 'template_pack': 'bootstrap3', 'form_action': '', 'form_method': 'post', 'form_tag': True, 'form_class': '', 'form_id': '', 'form_style': '', 'form_error_title': None, 'formset_error_title': None, 'form_show_errors': True, 'help_text_inline': False, 'html5_required': False, 'form_show_labels': True, 'disable_csrf': False, 'inputs': [], 'is_formset': False, 'form_attrs': {}, 'flat_attrs': '', 'error_text_inline': True, 'label_class': '', 'field_class': '', 'include_media': True, 'attrs': {}, 'field': <django.forms.boundfield.BoundField object at 0x000001D435AF54E0>, 'labelclass': None, 'wrapper_class': None}]

This led me to think of setting up a locale. So first I check LANGUAGE_CODE in base.py settings file LANGUAGE_CODE = 'en-us' (this is the default setting and it does not fix the problem) but parameter LANGUAGES do! LANGUAGES=[('en', 'English')]

It would be appropriate to put these parameters in the local.env, but I do not know how to do it correctly. LANGUAGE_CODE=en-us and LANGUAGES=('en', 'English') or LANGUAGES=(en, English) not change this environment variables.

opened by dipperside 5

Calling signup.html from home.html
Hi,

I'd like to put the sign up form on top of the banner in the main page. However if i call the form from home.html, the views.py can't find the forms (because it's in accounts app). e.g.

django.template.base.VariableDoesNotExist: Failed lookup for key [form] in [{'True': True, 'False': False, 'None': None}, {}, {}, {'view': <my_env.views.HomePage object at 0x7f0ed11cec88>}]

Tried adding the following to the home.html but no good:

{% if not user.is_authenticated %} {% include "signup.html" %} {% include "auth_base.html" %} {% block form %} {% crispy form %} <div class="form-message"> <p> Already signed up? <a href="{% url 'accounts:login' %}">Log in</a>. </p> </div> {% endblock form %} {% endif %}

Any easy way to get around it?

Thanks in advance, this repo is golden
help wanted
opened by e4c6 4
local env

Hello Arun,

Maybe the local.env file be added in .gitignore and the project can be generated: local.env.sample file and copied to local.env for deploy and local settings.

What do you guys think?
enhancement

opened by lerrua 4
Adapted for python27

Hi, very nice setup: simple but powerful. Without a lot of packages, but with the basics needed. Great Job!!. Nevertheless, I’m still using Python27, so I’ve forked your edge and readapted for Python27. I can share this with you, but I do not know how can you offer both.
enhancement question

opened by dpeinado 4
Django 1.8 support?

Apologies if this is described somewhere; but I could not see if support is offered for the Django LTS version 1.8?

If it is compatible, would it be possible to add a short note to the Quickstart Guide?
question

opened by gamesbook 3
Add steps to Quickstart guide?
Just installed on Ubuntu 14.04.

For installing virtual environment using venv, I ended up using the guides at:

CodeGhar

and

Chapmandu

After the step:

$ pip install -r requirements.txt

I think that there should be explicit reference to copying local.sample.env to local.env as without this step an exception gets raised about the SECRET_KEY, which can be mysterious.

Thanks.
opened by usonianhorizon 3
profile model

adding a model in account with one-to-one relation to User model to be used as user profile, and letting profile filled in registration form is very needed :)

keep up the good work!
enhancement

opened by pajooh 3
Bump pillow from 8.1.2 to 9.3.0 in /requirements
Bumps pillow from 8.1.2 to 9.3.0.

Release notes

Sourced from pillow's releases.

9.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html

Changes

Initialize libtiff buffer when saving #6699 [@radarhere]

Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [@wiredfool]

Inline fname2char to fix memory leak #6329 [@nulano]

Fix memory leaks related to text features #6330 [@nulano]

Use double quotes for version check on old CPython on Windows #6695 [@hugovk]

GHA: replace deprecated set-output command with GITHUB_OUTPUT file #6697 [@nulano]

Remove backup implementation of Round for Windows platforms #6693 [@cgohlke]

Upload fribidi.dll to GitHub Actions #6532 [@nulano]

Fixed set_variation_by_name offset #6445 [@radarhere]

Windows build improvements #6562 [@nulano]

Fix malloc in _imagingft.c:font_setvaraxes #6690 [@cgohlke]

Only use ASCII characters in C source file #6691 [@cgohlke]

Release Python GIL when converting images using matrix operations #6418 [@hmaarrfk]

Added ExifTags enums #6630 [@radarhere]

Do not modify previous frame when calculating delta in PNG #6683 [@radarhere]

Added support for reading BMP images with RLE4 compression #6674 [@npjg]

Decode JPEG compressed BLP1 data in original mode #6678 [@radarhere]

pylint warnings #6659 [@marksmayo]

Added GPS TIFF tag info #6661 [@radarhere]

Added conversion between RGB/RGBA/RGBX and LAB #6647 [@radarhere]

Do not attempt normalization if mode is already normal #6644 [@radarhere]

Fixed seeking to an L frame in a GIF #6576 [@radarhere]

Consider all frames when selecting mode for PNG save_all #6610 [@radarhere]

Don't reassign crc on ChunkStream close #6627 [@radarhere]

Raise a warning if NumPy failed to raise an error during conversion #6594 [@radarhere]

Only read a maximum of 100 bytes at a time in IMT header #6623 [@radarhere]

Show all frames in ImageShow #6611 [@radarhere]

Allow FLI palette chunk to not be first #6626 [@radarhere]

If first GIF frame has transparency for RGB_ALWAYS loading strategy, use RGBA mode #6592 [@radarhere]

Round box position to integer when pasting embedded color #6517 [@radarhere]

Removed EXIF prefix when saving WebP #6582 [@radarhere]

Pad IM palette to 768 bytes when saving #6579 [@radarhere]

Added DDS BC6H reading #6449 [@ShadelessFox]

Added support for opening WhiteIsZero 16-bit integer TIFF images #6642 [@JayWiz]

Raise an error when allocating translucent color to RGB palette #6654 [@jsbueno]

Moved mode check outside of loops #6650 [@radarhere]

Added reading of TIFF child images #6569 [@radarhere]

Improved ImageOps palette handling #6596 [@PososikTeam]

Defer parsing of palette into colors #6567 [@radarhere]

Apply transparency to P images in ImageTk.PhotoImage #6559 [@radarhere]

Use rounding in ImageOps contain() and pad() #6522 [@bibinhashley]

Fixed GIF remapping to palette with duplicate entries #6548 [@radarhere]

Allow remap_palette() to return an image with less than 256 palette entries #6543 [@radarhere]

Corrected BMP and TGA palette size when saving #6500 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

9.3.0 (2022-10-29)

Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [wiredfool]

Initialize libtiff buffer when saving #6699 [radarhere]

Inline fname2char to fix memory leak #6329 [nulano]

Fix memory leaks related to text features #6330 [nulano]

Use double quotes for version check on old CPython on Windows #6695 [hugovk]

Remove backup implementation of Round for Windows platforms #6693 [cgohlke]

Fixed set_variation_by_name offset #6445 [radarhere]

Fix malloc in _imagingft.c:font_setvaraxes #6690 [cgohlke]

Release Python GIL when converting images using matrix operations #6418 [hmaarrfk]

Added ExifTags enums #6630 [radarhere]

Do not modify previous frame when calculating delta in PNG #6683 [radarhere]

Added support for reading BMP images with RLE4 compression #6674 [npjg, radarhere]

Decode JPEG compressed BLP1 data in original mode #6678 [radarhere]

Added GPS TIFF tag info #6661 [radarhere]

Added conversion between RGB/RGBA/RGBX and LAB #6647 [radarhere]

Do not attempt normalization if mode is already normal #6644 [radarhere]

... (truncated)

Commits

d594f4c Update CHANGES.rst [ci skip]

909dc64 9.3.0 version bump

1a51ce7 Merge pull request #6699 from hugovk/security-libtiff_buffer

2444cdd Merge pull request #6700 from hugovk/security-samples_per_pixel-sec

744f455 Added release notes

0846bfa Add to release notes

799a6a0 Fix linting

00b25fd Hide UserWarning in logs

05b175e Tighter test case

13f2c5a Prevent DOS with large SAMPLESPERPIXEL in Tiff IFD

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump pillow from 5.3.0 to 9.3.0
Bumps pillow from 5.3.0 to 9.3.0.

Release notes

Sourced from pillow's releases.

9.3.0

https://pillow.readthedocs.io/en/stable/releasenotes/9.3.0.html

Changes

Initialize libtiff buffer when saving #6699 [@radarhere]

Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [@wiredfool]

Inline fname2char to fix memory leak #6329 [@nulano]

Fix memory leaks related to text features #6330 [@nulano]

Use double quotes for version check on old CPython on Windows #6695 [@hugovk]

GHA: replace deprecated set-output command with GITHUB_OUTPUT file #6697 [@nulano]

Remove backup implementation of Round for Windows platforms #6693 [@cgohlke]

Upload fribidi.dll to GitHub Actions #6532 [@nulano]

Fixed set_variation_by_name offset #6445 [@radarhere]

Windows build improvements #6562 [@nulano]

Fix malloc in _imagingft.c:font_setvaraxes #6690 [@cgohlke]

Only use ASCII characters in C source file #6691 [@cgohlke]

Release Python GIL when converting images using matrix operations #6418 [@hmaarrfk]

Added ExifTags enums #6630 [@radarhere]

Do not modify previous frame when calculating delta in PNG #6683 [@radarhere]

Added support for reading BMP images with RLE4 compression #6674 [@npjg]

Decode JPEG compressed BLP1 data in original mode #6678 [@radarhere]

pylint warnings #6659 [@marksmayo]

Added GPS TIFF tag info #6661 [@radarhere]

Added conversion between RGB/RGBA/RGBX and LAB #6647 [@radarhere]

Do not attempt normalization if mode is already normal #6644 [@radarhere]

Fixed seeking to an L frame in a GIF #6576 [@radarhere]

Consider all frames when selecting mode for PNG save_all #6610 [@radarhere]

Don't reassign crc on ChunkStream close #6627 [@radarhere]

Raise a warning if NumPy failed to raise an error during conversion #6594 [@radarhere]

Only read a maximum of 100 bytes at a time in IMT header #6623 [@radarhere]

Show all frames in ImageShow #6611 [@radarhere]

Allow FLI palette chunk to not be first #6626 [@radarhere]

If first GIF frame has transparency for RGB_ALWAYS loading strategy, use RGBA mode #6592 [@radarhere]

Round box position to integer when pasting embedded color #6517 [@radarhere]

Removed EXIF prefix when saving WebP #6582 [@radarhere]

Pad IM palette to 768 bytes when saving #6579 [@radarhere]

Added DDS BC6H reading #6449 [@ShadelessFox]

Added support for opening WhiteIsZero 16-bit integer TIFF images #6642 [@JayWiz]

Raise an error when allocating translucent color to RGB palette #6654 [@jsbueno]

Moved mode check outside of loops #6650 [@radarhere]

Added reading of TIFF child images #6569 [@radarhere]

Improved ImageOps palette handling #6596 [@PososikTeam]

Defer parsing of palette into colors #6567 [@radarhere]

Apply transparency to P images in ImageTk.PhotoImage #6559 [@radarhere]

Use rounding in ImageOps contain() and pad() #6522 [@bibinhashley]

Fixed GIF remapping to palette with duplicate entries #6548 [@radarhere]

Allow remap_palette() to return an image with less than 256 palette entries #6543 [@radarhere]

Corrected BMP and TGA palette size when saving #6500 [@radarhere]

... (truncated)

Changelog

Sourced from pillow's changelog.

9.3.0 (2022-10-29)

Limit SAMPLESPERPIXEL to avoid runtime DOS #6700 [wiredfool]

Initialize libtiff buffer when saving #6699 [radarhere]

Inline fname2char to fix memory leak #6329 [nulano]

Fix memory leaks related to text features #6330 [nulano]

Use double quotes for version check on old CPython on Windows #6695 [hugovk]

Remove backup implementation of Round for Windows platforms #6693 [cgohlke]

Fixed set_variation_by_name offset #6445 [radarhere]

Fix malloc in _imagingft.c:font_setvaraxes #6690 [cgohlke]

Release Python GIL when converting images using matrix operations #6418 [hmaarrfk]

Added ExifTags enums #6630 [radarhere]

Do not modify previous frame when calculating delta in PNG #6683 [radarhere]

Added support for reading BMP images with RLE4 compression #6674 [npjg, radarhere]

Decode JPEG compressed BLP1 data in original mode #6678 [radarhere]

Added GPS TIFF tag info #6661 [radarhere]

Added conversion between RGB/RGBA/RGBX and LAB #6647 [radarhere]

Do not attempt normalization if mode is already normal #6644 [radarhere]

... (truncated)

Commits

d594f4c Update CHANGES.rst [ci skip]

909dc64 9.3.0 version bump

1a51ce7 Merge pull request #6699 from hugovk/security-libtiff_buffer

2444cdd Merge pull request #6700 from hugovk/security-samples_per_pixel-sec

744f455 Added release notes

0846bfa Add to release notes

799a6a0 Fix linting

00b25fd Hide UserWarning in logs

05b175e Tighter test case

13f2c5a Prevent DOS with large SAMPLESPERPIXEL in Tiff IFD

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump django from 2.1.3 to 2.2.24
Bumps django from 2.1.3 to 2.2.24.

Commits

2da029d [2.2.x] Bumped version for 2.2.24 release.

f27c38a [2.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.

053cc95 [2.2.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs'...

6229d87 [2.2.x] Confirmed release date for Django 2.2.24.

f163ad5 [2.2.x] Added stub release notes and date for Django 2.2.24.

bed1755 [2.2.x] Changed IRC references to Libera.Chat.

63f0d7a [2.2.x] Refs #32718 -- Fixed file_storage.test_generate_filename and model_fi...

5fe4970 [2.2.x] Post-release version bump.

61f814f [2.2.x] Bumped version for 2.2.23 release.

b8ecb06 [2.2.x] Fixed #32718 -- Relaxed file name validation in FileField.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump django from 2.0.9 to 2.2.24 in /requirements
Bumps django from 2.0.9 to 2.2.24.

Commits

2da029d [2.2.x] Bumped version for 2.2.24 release.

f27c38a [2.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.

053cc95 [2.2.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs'...

6229d87 [2.2.x] Confirmed release date for Django 2.2.24.

f163ad5 [2.2.x] Added stub release notes and date for Django 2.2.24.

bed1755 [2.2.x] Changed IRC references to Libera.Chat.

63f0d7a [2.2.x] Refs #32718 -- Fixed file_storage.test_generate_filename and model_fi...

5fe4970 [2.2.x] Post-release version bump.

61f814f [2.2.x] Bumped version for 2.2.23 release.

b8ecb06 [2.2.x] Fixed #32718 -- Relaxed file name validation in FileField.

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump django-debug-toolbar from 1.10.1 to 1.11.1
Bumps django-debug-toolbar from 1.10.1 to 1.11.1.

Changelog

Sourced from django-debug-toolbar's changelog.

1.11.1 (2021-04-14)

Fixed SQL Injection vulnerability, CVE-2021-30459. The toolbar now calculates a signature on all fields for the SQL select, explain, and analyze forms.

1.11 (2018-12-03)

Use defer on all <script> tags to avoid blocking HTML parsing, removed inline JavaScript.

Stop inlining images in CSS to avoid Content Security Policy errors altogether.

Reformatted the code using black <https://github.com/ambv/black>__.

Added the Django mail panel to the list of third-party panels.

Convert system check errors to warnings to accomodate exotic configurations.

Fixed a crash when explaining raw querysets.

Fixed an obscure unicode error with binary data fields.

Added MariaDB and Python 3.7 builds to the CI.

Commits

bc08f69 Merge pull request from GHSA-pghf-347x-c2gj

c201ce3 django-debug-toolbar 1.11

0a75be1 Update the change log

a4a5393 Merge pull request #1121 from matthiask/mariadb

48a0e2e Reformat settings using black

901aed7 Mark binary payload as binary (same thing BinaryField.get_db_prep_value does)

ad091e6 Test with a real BinaryField

2f3193e Remove the MySQL USER

762e5d9 Run tests with MariaDB too on Travis CI

e78ac8c Merge pull request #1107 from dbowd/patch-1

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
using "CHANGE PASSWORD" on admin nav bar, results in exception

django.template.exceptions.TemplateSyntaxError: Invalid block tag on line 32: 'dab_field_rendering', expected 'endblock'. Did you forget to register or load this tag?

opened by awinner1 2

Releases(v2.2)

v2.2(Apr 7, 2018)
What's new in this release:

Pipenv is a vastly improved way of managing your dependencies. We will continue to maintain requirements.txt and keep them in sync with the Pipenv.lock using pinning and hashes.

Originally edge was Python 3 only when it was introduced. Later many cool Python 3 constructs like super() were removed for backward compatibility with Python 2. Now that Django is Python 3 only, we have added them back!

We use pathlib for joining paths in settings files. For e.g. MEDIA_ROOT = str(BASE_DIR / 'media')

Calling super does not require passing the parent class

Improved the cryptographic hash from MD5 as mentioned as suggested in Issue #80

Updated dependencies like django-braces to their latest releases

Host of other improvements

Source code(tar.gz)
Source code(zip)
v2.1(Mar 27, 2018)
Supports Django 2.0 now with the new simplified url path syntax.

Removed django-admin-bootstrapped and template due to improvements in the admin UI/UX.

Updated some dependencies.

Source code(tar.gz)
Source code(zip)
v2.0.0-beta(Mar 11, 2015)
Detailed in the blog post

Email-based logins!: Most websites don’t need usernames. Furthermore, the users have to come up with a unique and memorable username. But their email address is already unique and memorable, hence more widely used for logins these days.

User profiles!: In 90% of the user based applications you will need to create a user profile. So we have added one with nice default fields like a user avatar image, bio etc. They are extendable too.

Python 2.7 support!: Supporting Python 2.7 was a much requested change. Back-porting needed not just syntactic changes but some tricky Unicode management as well.

Less Bootstrappish: After browsing through several examples of well designed bootstrap-based sites, several design improvements have been added like see-through navbar that changes on scroll, full cover image etc.

Environment specific Settings and Requirements files: This was a convention most Django developers follow so the environment specific files have been split out.

Authentication Workflows: In addition to signup, login and logout; we now have views to change password, reset password etc. They are class-based views, hence easier to extend.

Lots more: check the wiki for details.

Source code(tar.gz)
Source code(zip)
v1.0.0-beta(Feb 8, 2015)
More details in the blog post

Python 3 support - e.g. Uses pathlib for paths in settings

Django 1.7 support - e.g. south dependency removed

Sign-in, Sign-up and Logouts - Basic user registration and sign-ins using crispy forms

Bootstrap bundled - Snazzy Bootstrap 3 based home page and admin out of the box

Clean start - Based on Django 1.7 project structure

Secrets Secure - Picks SECRET_KEY from environment as a best practice

Minimal dependencies - Only essential packages listed in requirements.txt not all recommended ones

Source code(tar.gz)
Source code(zip)