Changelog for
python311-django-axes-6.4.0-lp160.2.2.noarch.rpm :
* Fri May 03 2024 Dirk Müller
- update to 6.4.0:
* Add support for Python 3.12 and Django 5.0, drop support for Django 4.1. [aleksihakli]
* Drop setuptools and pkg_resources dependencies. [Viicos]
* Sun Jan 14 2024 Dirk Müller - update to 6.3.0:
* Add async support to middleware. [Taikono-Himazin]
* Wed Dec 27 2023 Dirk Müller - update to 6.2.0:
* Update documentation.
* Add new management command ``axes_reset_ip_username``.
* Add French translations.
* Avoid running data migration on incorrect databases.
* Sat Dec 02 2023 Dirk Müller - update to 6.1.1:
* Fix ``TransactionManagementError`` when using the database handler with a custom database with for ``AccessAttempt`` or ``AccessFailureLog``.
* Set ``AXES_SENSITIVE_PARAMETERS`` default value to ``[\"username\", \"ip_address\"]`` in addition to the ``AXES_PASSWORD_FORM_FIELD`` configuration flag.
* Improve documentation on GDPR and privacy notes and configuration flags.
* Add Indonesion translation.
* Remove unused methods from AxesStandaloneBackend.
* Add username to admin fieldsets.
* Add Django system checks for validating callable import path settings.
* Improve documentation.
* Improve repository issue and PR templates.
* Fine-tune CI pipelines and RTD build requirements.
* Version 6 is a breaking release. Please see the documentation for upgrade instructions.
* Deprecate Python 3.7 support.
* Deprecate ``is_admin_site`` API call with misleading naming.
* Add ``AXES_LOCKOUT_PARAMETERS`` configuration flag that will supersede ``AXES_ONLY_USER_FAILURES``, ``AXES_LOCK_OUT_BY_COMBINATION_USER_AND_IP``, ``AXES_LOCK_OUT_BY_USER_OR_IP``, and ``AXES_USE_USER_AGENT`` configurations. Add deprecation warnings for old flags. See project documentation on RTD for update instructions.
* Improve translations.
* Use Django ``cache.incr`` API for atomic cached failure counting
* Make ``django-ipware`` an optional dependency. Install it with e.g. ``pip install django-axes[ipware]`` package and extras specifier. [aleksihakli]
* Deprecate and rename old configuration flags. Old flags will be removed in or after version ``6.1``. [aleksihakli]
* Fix sensitive parameter logging for database handler.
* Add ``AXES_CLIENT_CALLABLE`` setting.
* Update Python, Django, and package versions.
* Mon Mar 06 2023 John Vandenberg - Update to v5.40.1
* Fix bug in user agent request blocking- from v5.40.0
* Update packages and linters for new version support
* Update documentation links
* Use importlib instead of setuptools for Python 3.8+
* Python 3.11 support
* Documentation improvements- from v5.39.0
* Utilize new backend class in tests to fix false negative system check warnings- from v5.38.0
* Adjust changelog so release notes are correctly visible on PyPy and released package- from v5.37.0
* Add Django 4.1 support. PyPy 3.8 has a known issue with Django 4.1 and is exempted- from v5.36.0
* Add AxesStandaloneBackend without ModelBackend dependencies- from v5.35.0
* Add Arabic translations- from v5.34.0
* Improve German translations- from v5.33.0
* Migrate MD5 cache key digests to SHA256
* Improve and streamline startup logging
* Improve module typing
* Add support for float or partial hours for AXES_COOLOFF_TIME- from v5.32.0
* Add support for persistent failure logging where failed login attempts are persisted in the database until a specific threshold is reached.
* Add support for not resetting login times when users try to login during the lockout cooloff period- from v5.31.0
* Adjust version specifiers for newer Python and other package versions. Set package minimum Python version to 3.7. Relax django-ipware version requirements to allow newer versions- from v5.30.0
* Fix package build error in 5.29.0 to allow publishing- from v5.29.0
* Drop Python 3.6 support- from v5.28.0
* Drop Django < 3.2 support
* Add Django 4.0 to test matrix- from v5.27.0
* Fix pkg_resources missing for package version resolution on runtime due to setuptools not being a runtime dependency.
* Add Python 3.10 and Django 3.2 support- from v5.26.0
* Fix AXES_USERNAME_CALLABLE not receiving credentials attribute in Axes middleware lockout response when user is locked out- from v5.25.0
* Fix duplicated AccessAttempts with updated database model unique_together constraints and data and schema migration- from v5.24.0
* Use atomic transaction for updating AccessAttempts in database handler- from v5.23.0
* Pass request as argument to AXES_CLIENT_STR_CALLABLE- from v5.22.0
* Improve failures_since_start handling by moving the counter incrementation from non-atomic Python code call to atomic database function
* Add publicly available request.axes_failures_since_start attribute- from v5.21.0
* Add configurable lockout HTTP status code responses with the new AXES_HTTP_RESPONSE_CODE setting- from v5.20.0
* Improve race condition handling in e.g. multi-process environments by using get_or_create for access attempt fetching and updates- from v5.19.0
* Add Polish locale- from v5.18.0
* Fix default_auto_field warning- from v5.17.0
* Fix default_app_config deprecation. Django 3.2 automatically detects AppConfig so setting is no longer required- from v5.16.0
* Add AXES_CLIENT_STR_CALLABLE setting
* Fri Jan 07 2022 John Vandenberg - Skip Tumbleweed Python 3.6 incompatible with Django 4
* Mon May 17 2021 Markéta Machová - Update to 5.15.0
* Improve Django REST Framework (DRF) integration.
* Add Python 3.9 support.
* Add support for resetting attempts with cache backend.
* Remove support for Django 2.0.
* Add support for Django 3.2.
* Sun Sep 13 2020 John Vandenberg - Update to v5.6.0
* Wed Apr 22 2020 John Vandenberg - Initial spec for v5.3.1