1.10.txt 33 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919
  1. =============================================
  2. Django 1.10 release notes - UNDER DEVELOPMENT
  3. =============================================
  4. Welcome to Django 1.10!
  5. These release notes cover the `new features`_, as well as some `backwards
  6. incompatible changes`_ you'll want to be aware of when upgrading from Django
  7. 1.9 or older versions. We've :ref:`dropped some features<removed-features-1.10>`
  8. that have reached the end of their deprecation cycle, and we've `begun the
  9. deprecation process for some features`_.
  10. .. _`new features`: `What's new in Django 1.10`_
  11. .. _`backwards incompatible changes`: `Backwards incompatible changes in 1.10`_
  12. .. _`dropped some features`: `Features removed in 1.10`_
  13. .. _`begun the deprecation process for some features`: `Features deprecated in 1.10`_
  14. Python compatibility
  15. ====================
  16. Like Django 1.9, Django 1.10 requires Python 2.7, 3.4, or 3.5. We **highly
  17. recommend** and only officially support the latest release of each series.
  18. What's new in Django 1.10
  19. =========================
  20. ...
  21. Minor features
  22. --------------
  23. :mod:`django.contrib.admin`
  24. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  25. * For sites running on a subpath, the default :attr:`URL for the "View site"
  26. link <django.contrib.admin.AdminSite.site_url>` at the top of each admin page
  27. will now point to ``request.META['SCRIPT_NAME']`` if set, instead of ``/``.
  28. * The success message that appears after adding or editing an object now
  29. contains a link to the object's change form.
  30. * All inline JavaScript is removed so you can enable the
  31. ``Content-Security-Policy`` HTTP header if you wish.
  32. * The new :attr:`InlineModelAdmin.classes
  33. <django.contrib.admin.InlineModelAdmin.classes>` attribute allows specifying
  34. classes on inline fieldsets. Inlines with a ``collapse`` class will be
  35. initially collapsed and their header will have a small "show" link.
  36. * If a user doesn't have the add permission, the ``object-tools`` block on a
  37. model's changelist will now be rendered (without the add button, of course).
  38. This makes it easier to add custom tools in this case.
  39. * The :class:`~django.contrib.admin.models.LogEntry` model now stores change
  40. messages in a JSON structure so that the message can be dynamically translated
  41. using the current active language. A new ``LogEntry.get_change_message()``
  42. method is now the preferred way of retrieving the change message.
  43. * Selected objects for fields in ``ModelAdmin.raw_id_fields`` now have a link
  44. to object's change form.
  45. * Added "No date" and "Has date" choices for ``DateFieldListFilter`` if the
  46. field is nullable.
  47. :mod:`django.contrib.admindocs`
  48. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  49. * ...
  50. :mod:`django.contrib.auth`
  51. ~~~~~~~~~~~~~~~~~~~~~~~~~~
  52. * The default iteration count for the PBKDF2 password hasher has been increased
  53. by 25%. This backwards compatible change will not affect users who have
  54. subclassed ``django.contrib.auth.hashers.PBKDF2PasswordHasher`` to change the
  55. default value.
  56. * The :func:`~django.contrib.auth.views.logout` view sends "no-cache" headers
  57. to prevent an issue where Safari caches redirects and prevents a user from
  58. being able to log out.
  59. * Added the optional ``backend`` argument to :func:`~django.contrib.auth.login`
  60. to allow using it without credentials.
  61. * The new :setting:`LOGOUT_REDIRECT_URL` setting controls the redirect of the
  62. :func:`~django.contrib.auth.views.logout` view, if the view doesn't get a
  63. ``next_page`` argument.
  64. * The new ``redirect_authenticated_user`` parameter for the
  65. :func:`~django.contrib.auth.views.login` view allows redirecting
  66. authenticated users visiting the login page.
  67. :mod:`django.contrib.contenttypes`
  68. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  69. * ...
  70. :mod:`django.contrib.gis`
  71. ~~~~~~~~~~~~~~~~~~~~~~~~~
  72. * :ref:`Distance lookups <distance-lookups>` now accept expressions as the
  73. distance value parameter.
  74. * The new :attr:`GEOSGeometry.unary_union
  75. <django.contrib.gis.geos.GEOSGeometry.unary_union>` property computes the
  76. union of all the elements of this geometry.
  77. * Added the :meth:`GEOSGeometry.covers()
  78. <django.contrib.gis.geos.GEOSGeometry.covers>` binary predicate.
  79. * Added the :meth:`GDALBand.statistics()
  80. <django.contrib.gis.gdal.GDALBand.statistics>` method and
  81. :attr:`~django.contrib.gis.gdal.GDALBand.mean`
  82. and :attr:`~django.contrib.gis.gdal.GDALBand.std` attributes.
  83. * Added support for the :class:`~django.contrib.gis.db.models.MakeLine`
  84. aggregate and :class:`~django.contrib.gis.db.models.functions.GeoHash`
  85. function on SpatiaLite.
  86. * Added support for the
  87. :class:`~django.contrib.gis.db.models.functions.Difference`,
  88. :class:`~django.contrib.gis.db.models.functions.Intersection`, and
  89. :class:`~django.contrib.gis.db.models.functions.SymDifference`
  90. functions on MySQL.
  91. * Added support for instantiating empty GEOS geometries.
  92. * The new :attr:`~django.contrib.gis.geos.WKTWriter.trim` and
  93. :attr:`~django.contrib.gis.geos.WKTWriter.precision` properties
  94. of :class:`~django.contrib.gis.geos.WKTWriter` allow controlling
  95. output of the fractional part of the coordinates in WKT.
  96. * Added the :attr:`LineString.closed
  97. <django.contrib.gis.geos.LineString.closed>` and
  98. :attr:`MultiLineString.closed
  99. <django.contrib.gis.geos.MultiLineString.closed>` properties.
  100. * The :doc:`GeoJSON serializer </ref/contrib/gis/serializers>` now outputs the
  101. primary key of objects in the ``properties`` dictionary if specific fields
  102. aren't specified.
  103. :mod:`django.contrib.messages`
  104. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  105. * ...
  106. :mod:`django.contrib.postgres`
  107. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  108. * For convenience, :class:`~django.contrib.postgres.fields.HStoreField` now
  109. casts its keys and values to strings.
  110. :mod:`django.contrib.redirects`
  111. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  112. * ...
  113. :mod:`django.contrib.sessions`
  114. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  115. * The :djadmin:`clearsessions` management command now removes file-based
  116. sessions.
  117. :mod:`django.contrib.sitemaps`
  118. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  119. * ...
  120. :mod:`django.contrib.sites`
  121. ~~~~~~~~~~~~~~~~~~~~~~~~~~~
  122. * The :class:`~django.contrib.sites.models.Site` model now supports
  123. :ref:`natural keys <topics-serialization-natural-keys>`.
  124. :mod:`django.contrib.staticfiles`
  125. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  126. * The :ttag:`static` template tag now uses ``django.contrib.staticfiles``
  127. if it's in ``INSTALLED_APPS``. This is especially useful for third-party apps
  128. which can now always use ``{% load static %}`` (instead of
  129. ``{% load staticfiles %}`` or ``{% load static from staticfiles %}``) and
  130. not worry about whether or not the ``staticfiles`` app is installed.
  131. :mod:`django.contrib.syndication`
  132. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  133. * ...
  134. Cache
  135. ~~~~~
  136. * The file-based cache backend now uses the highest pickling protocol.
  137. CSRF
  138. ~~~~
  139. * The default :setting:`CSRF_FAILURE_VIEW`, ``views.csrf.csrf_failure()`` now
  140. accepts an optional ``template_name`` parameter, defaulting to
  141. ``'403_csrf.html'``, to control the template used to render the page.
  142. Database backends
  143. ~~~~~~~~~~~~~~~~~
  144. * Temporal data subtraction was unified on all backends.
  145. Email
  146. ~~~~~
  147. * ...
  148. File Storage
  149. ~~~~~~~~~~~~
  150. * Storage backends now present a timezone-aware API with new methods
  151. :meth:`~django.core.files.storage.Storage.get_accessed_time`,
  152. :meth:`~django.core.files.storage.Storage.get_created_time`, and
  153. :meth:`~django.core.files.storage.Storage.get_modified_time`. They return a
  154. timezone-aware ``datetime`` if :setting:`USE_TZ` is ``True`` and a naive
  155. ``datetime`` in the local timezone otherwise.
  156. File Uploads
  157. ~~~~~~~~~~~~
  158. * ...
  159. Forms
  160. ~~~~~
  161. * Form and widget ``Media`` is now served using
  162. :mod:`django.contrib.staticfiles` if installed.
  163. Generic Views
  164. ~~~~~~~~~~~~~
  165. * The :class:`~django.views.generic.base.View` class can now be imported from
  166. ``django.views``.
  167. Internationalization
  168. ~~~~~~~~~~~~~~~~~~~~
  169. * ...
  170. Management Commands
  171. ~~~~~~~~~~~~~~~~~~~
  172. * :func:`~django.core.management.call_command` now returns the value returned
  173. from the ``command.handle()`` method.
  174. * The new :option:`check --fail-level` option allows specifying the message
  175. level that will cause the command to exit with a non-zero status.
  176. * The new :option:`makemigrations --check` option makes the command exit
  177. with a non-zero status when model changes without migrations are detected.
  178. * :djadmin:`makemigrations` now displays the path to the migration files that
  179. it generates.
  180. * The :option:`shell --interface` option now accepts ``python`` to force use of
  181. the "plain" Python interpreter.
  182. * The new :option:`shell --command` option lets you run a command as Django and
  183. exit, instead of opening the interactive shell.
  184. * Added a warning to :djadmin:`dumpdata` if a proxy model is specified (which
  185. results in no output) without its concrete parent.
  186. * The new :attr:`BaseCommand.requires_migrations_checks
  187. <django.core.management.BaseCommand.requires_migrations_checks>` attribute
  188. may be set to ``True`` if you want your command to print a warning, like
  189. :djadmin:`runserver` does, if the set of migrations on disk don't match the
  190. migrations in the database.
  191. Migrations
  192. ~~~~~~~~~~
  193. * Added support for serialization of ``enum.Enum`` objects.
  194. * Added the ``elidable`` argument to the
  195. :class:`~django.db.migrations.operations.RunSQL` and
  196. :class:`~django.db.migrations.operations.RunPython` operations to allow them
  197. to be removed when squashing migrations.
  198. * Added support for :ref:`non-atomic migrations <non-atomic-migrations>` by
  199. setting the ``atomic`` attribute on a ``Migration``.
  200. Models
  201. ~~~~~~
  202. * Reverse foreign keys from proxy models are now propagated to their
  203. concrete class. The reverse relation attached by a
  204. :class:`~django.db.models.ForeignKey` pointing to a proxy model is now
  205. accessible as a descriptor on the proxied model class and may be referenced in
  206. queryset filtering.
  207. * The new :meth:`Field.rel_db_type() <django.db.models.Field.rel_db_type>`
  208. method returns the database column data type for fields such as ``ForeignKey``
  209. and ``OneToOneField`` that point to another field.
  210. * The :attr:`~django.db.models.Func.arity` class attribute is added to
  211. :class:`~django.db.models.Func`. This attribute can be used to set the number
  212. of arguments the function accepts.
  213. * Added :class:`~django.db.models.BigAutoField` which acts much like an
  214. :class:`~django.db.models.AutoField` except that it is guaranteed
  215. to fit numbers from ``1`` to ``9223372036854775807``.
  216. * :meth:`QuerySet.in_bulk() <django.db.models.query.QuerySet.in_bulk>`
  217. may be called without any arguments to return all objects in the queryset.
  218. * :attr:`~django.db.models.ForeignKey.related_query_name` now supports
  219. app label and class interpolation using the ``'%(app_label)s'`` and
  220. ``'%(class)s'`` strings.
  221. * The :func:`~django.db.models.prefetch_related_objects` function is now a
  222. public API.
  223. Requests and Responses
  224. ~~~~~~~~~~~~~~~~~~~~~~
  225. * Added ``request.user`` to the debug view.
  226. * Added :class:`~django.http.HttpResponse` methods
  227. :meth:`~django.http.HttpResponse.readable()` and
  228. :meth:`~django.http.HttpResponse.seekable()` to make an instance a
  229. stream-like object and allow wrapping it with :py:class:`io.TextIOWrapper`.
  230. * Added the :attr:`HttpResponse.content_type
  231. <django.http.HttpRequest.content_type>` and
  232. :attr:`~django.http.HttpRequest.content_params` attributes which are
  233. parsed from the ``CONTENT_TYPE`` header.
  234. Serialization
  235. ~~~~~~~~~~~~~
  236. * The ``django.core.serializers.json.DjangoJSONEncoder`` now knows how to
  237. serialize lazy strings, typically used for translatable content.
  238. Signals
  239. ~~~~~~~
  240. * ...
  241. Templates
  242. ~~~~~~~~~
  243. * Added the ``autoescape`` option to the
  244. :class:`~django.template.backends.django.DjangoTemplates` backend and the
  245. :class:`~django.template.Engine` class.
  246. * Added the ``is`` comparison operator to the :ttag:`if` tag.
  247. * Allowed :tfilter:`dictsort` to order a list of lists by an element at a
  248. specified index.
  249. Tests
  250. ~~~~~
  251. * To better catch bugs, :class:`~django.test.TestCase` now checks deferrable
  252. database constraints at the end of each test.
  253. * Tests and test cases can be :ref:`marked with tags <topics-tagging-tests>`
  254. and run selectively with the new :option:`test --tag` and :option:`test
  255. --exclude-tag` options.
  256. URLs
  257. ~~~~
  258. * An addition in :func:`django.setup()` allows URL resolving that happens
  259. outside of the request/response cycle (e.g. in management commands and
  260. standalone scripts) to take :setting:`FORCE_SCRIPT_NAME` into account when it
  261. is set.
  262. Validators
  263. ~~~~~~~~~~
  264. * :class:`~django.core.validators.URLValidator` now limits the length of
  265. domain name labels to 63 characters and the total length of domain
  266. names to 253 characters per :rfc:`1034`.
  267. * :func:`~django.core.validators.int_list_validator` now accepts an optional
  268. ``allow_negative`` boolean parameter, defaulting to ``False``, to allow
  269. negative integers.
  270. Backwards incompatible changes in 1.10
  271. ======================================
  272. .. warning::
  273. In addition to the changes outlined in this section, be sure to review the
  274. :ref:`removed-features-1.10` for the features that have reached the end of
  275. their deprecation cycle and therefore been removed. If you haven't updated
  276. your code within the deprecation timeline for a given feature, its removal
  277. may appear as a backwards incompatible change.
  278. Database backend API
  279. --------------------
  280. * GIS's ``AreaField`` uses an unspecified underlying numeric type that could in
  281. practice be any numeric Python type. ``decimal.Decimal`` values retrieved
  282. from the database are now converted to ``float`` to make it easier to combine
  283. them with values used by the GIS libraries.
  284. * In order to enable temporal subtraction you must set the
  285. ``supports_temporal_subtraction`` database feature flag to ``True`` and
  286. implement the ``DatabaseOperations.subtract_temporals()`` method. This
  287. method should return the SQL and parameters required to compute the
  288. difference in microseconds between the ``lhs`` and ``rhs`` arguments in the
  289. datatype used to store :class:`~django.db.models.DurationField`.
  290. ``select_related()`` prohibits non-relational fields for nested relations
  291. -------------------------------------------------------------------------
  292. Django 1.8 added validation for non-relational fields in ``select_related()``::
  293. >>> Book.objects.select_related('title')
  294. Traceback (most recent call last):
  295. ...
  296. FieldError: Non-relational field given in select_related: 'title'
  297. But it didn't prohibit nested non-relation fields as it does now::
  298. >>> Book.objects.select_related('author__name')
  299. Traceback (most recent call last):
  300. ...
  301. FieldError: Non-relational field given in select_related: 'name'
  302. ``_meta.get_fields()`` returns consistent reverse fields for proxy models
  303. -------------------------------------------------------------------------
  304. Before Django 1.10, the :meth:`~django.db.models.options.Options.get_fields`
  305. method returned different reverse fields when called on a proxy model compared
  306. to its proxied concrete class. This inconsistency was fixed by returning the
  307. full set of fields pointing to a concrete class or one of its proxies in both
  308. cases.
  309. :attr:`AbstractUser.username <django.contrib.auth.models.User.username>` ``max_length`` increased to 150
  310. --------------------------------------------------------------------------------------------------------
  311. A migration for :attr:`django.contrib.auth.models.User.username` is included.
  312. If you have a custom user model inheriting from ``AbstractUser``, you'll need
  313. to generate and apply a database migration for your user model.
  314. We considered an increase to 254 characters to more easily allow the use of
  315. email addresses (which are limited to 254 characters) as usernames but rejected
  316. it due to a MySQL limitation. When using the ``utf8mb4`` encoding (recommended
  317. for proper Unicode support), MySQL can only create unique indexes with 191
  318. characters by default. Therefore, if you need a longer length, please use a
  319. custom user model.
  320. If you want to preserve the 30 character limit for usernames, use a custom form
  321. when creating a user or changing usernames::
  322. from django.contrib.auth.forms import UserCreationForm
  323. class MyUserCreationForm(UserCreationForm):
  324. username = forms.CharField(
  325. max_length=30,
  326. help_text='Required. 30 characters or fewer. Letters, digits and @/./+/-/_ only.',
  327. )
  328. If you wish to keep this restriction in the admin, set ``UserAdmin.add_form``
  329. to use this form::
  330. from django.contrib.auth.admin import UserAdmin as BaseUserAdmin
  331. from django.contrib.auth.models import User
  332. class UserAdmin(BaseUserAdmin):
  333. add_form = MyUserCreationForm
  334. admin.site.unregister(User)
  335. admin.site.register(User, UserAdmin)
  336. Dropped support for PostgreSQL 9.1
  337. ----------------------------------
  338. Upstream support for PostgreSQL 9.1 ends in September 2016. As a consequence,
  339. Django 1.10 sets PostgreSQL 9.2 as the minimum version it officially supports.
  340. ``runserver`` output goes through logging
  341. -----------------------------------------
  342. Request and response handling of the ``runserver`` command is sent to the
  343. :ref:`django-server-logger` logger instead of to ``sys.stderr``. If you
  344. disable Django's logging configuration or override it with your own, you'll
  345. need to add the appropriate logging configuration if you want to see that
  346. output::
  347. 'formatters': {
  348. 'django.server': {
  349. '()': 'django.utils.log.ServerFormatter',
  350. 'format': '[%(server_time)s] %(message)s',
  351. }
  352. },
  353. 'handlers': {
  354. 'django.server': {
  355. 'level': 'INFO',
  356. 'class': 'logging.StreamHandler',
  357. 'formatter': 'django.server',
  358. },
  359. },
  360. 'loggers': {
  361. 'django.server': {
  362. 'handlers': ['django.server'],
  363. 'level': 'INFO',
  364. 'propagate': False,
  365. }
  366. }
  367. ``auth.CustomUser`` and ``auth.ExtensionUser`` test models were removed
  368. -----------------------------------------------------------------------
  369. Since the introduction of migrations for the contrib apps in Django 1.8, the
  370. tables of these custom user test models were not created anymore making them
  371. unusable in a testing context.
  372. Apps registry is no longer auto-populated when unpickling models outside of Django
  373. ----------------------------------------------------------------------------------
  374. The apps registry is no longer auto-populated when unpickling models. This was
  375. added in Django 1.7.2 as an attempt to allow unpickling models outside of
  376. Django, such as in an RQ worker, without calling ``django.setup()``, but it
  377. creates the possibility of a deadlock. To adapt your code in the case of RQ,
  378. you can `provide your own worker script <http://python-rq.org/docs/workers/>`_
  379. that calls ``django.setup()``.
  380. Removed null assignment check for non-null foreign key fields
  381. -------------------------------------------------------------
  382. In older versions, assigning ``None`` to a non-nullable ``ForeignKey`` or
  383. ``OneToOneField`` raised ``ValueError('Cannot assign None: "model.field" does
  384. not allow null values.')``. For consistency with other model fields which don't
  385. have a similar check, this check is removed.
  386. Removed weak password hashers from the default ``PASSWORD_HASHERS`` setting
  387. ---------------------------------------------------------------------------
  388. Django 0.90 stored passwords as unsalted MD5. Django 0.91 added support for
  389. salted SHA1 with automatic upgrade of passwords when a user logs in. Django 1.4
  390. added PBKDF2 as the default password hasher.
  391. If you have an old Django project with MD5 or SHA1 (even salted) encoded
  392. passwords, be aware that these can be cracked fairly easily with today's
  393. hardware. To make Django users acknowledge continued use of weak hashers, the
  394. following hashers are removed from the default :setting:`PASSWORD_HASHERS`
  395. setting::
  396. 'django.contrib.auth.hashers.SHA1PasswordHasher'
  397. 'django.contrib.auth.hashers.MD5PasswordHasher'
  398. 'django.contrib.auth.hashers.UnsaltedSHA1PasswordHasher'
  399. 'django.contrib.auth.hashers.UnsaltedMD5PasswordHasher'
  400. 'django.contrib.auth.hashers.CryptPasswordHasher'
  401. Consider using a :ref:`wrapped password hasher <wrapping-password-hashers>` to
  402. strengthen the hashes in your database. If that's not feasible, add the
  403. :setting:`PASSWORD_HASHERS` setting to your project and add back any hashers
  404. that you need.
  405. You can check if your database has any of the removed hashers like this::
  406. from django.contrib.auth import get_user_model
  407. User = get_user_model()
  408. # Unsalted MD5/SHA1:
  409. User.objects.filter(password__startswith='md5$$')
  410. User.objects.filter(password__startswith='sha1$$')
  411. # Salted MD5/SHA1:
  412. User.objects.filter(password__startswith='md5$').exclude(password__startswith='md5$$')
  413. User.objects.filter(password__startswith='sha1$').exclude(password__startswith='sha1$$')
  414. # Crypt hasher:
  415. User.objects.filter(password__startswith='crypt$$')
  416. from django.db.models import CharField
  417. from django.db.models.functions import Length
  418. CharField.register_lookup(Length)
  419. # Unsalted MD5 passwords might not have an 'md5$$' prefix:
  420. User.objects.filter(password__length=32)
  421. Miscellaneous
  422. -------------
  423. * The ``repr()`` of a ``QuerySet`` is wrapped in ``<QuerySet >`` to
  424. disambiguate it from a plain list when debugging.
  425. * Support for SpatiaLite < 3.0 and GEOS < 3.3 is dropped.
  426. * ``utils.version.get_version()`` returns :pep:`440` compliant release
  427. candidate versions (e.g. '1.10rc1' instead of '1.10c1').
  428. * The ``LOGOUT_URL`` setting is removed as Django hasn't made use of it
  429. since pre-1.0. If you use it in your project, you can add it to your
  430. project's settings. The default value was ``'/accounts/logout/'``.
  431. * The ``add_postgis_srs()`` backwards compatibility alias for
  432. ``django.contrib.gis.utils.add_srs_entry()`` is removed.
  433. * Objects with a ``close()`` method such as files and generators passed to
  434. :class:`~django.http.HttpResponse` are now closed immediately instead of when
  435. the WSGI server calls ``close()`` on the response.
  436. * A redundant ``transaction.atomic()`` call in ``QuerySet.update_or_create()``
  437. is removed. This may affect query counts tested by
  438. ``TransactionTestCase.assertNumQueries()``.
  439. * Support for ``skip_validation`` in ``BaseCommand.execute(**options)`` is
  440. removed. Use ``skip_checks`` (added in Django 1.7) instead.
  441. * :djadmin:`loaddata` now raises a ``CommandError`` instead of showing a
  442. warning when the specified fixture file is not found.
  443. * Instead of directly accessing the ``LogEntry.change_message`` attribute, it's
  444. now better to call the ``LogEntry.get_change_message()`` method which will
  445. provide the message in the current language.
  446. * The default error views now raise ``TemplateDoesNotExist`` if a nonexistent
  447. ``template_name`` is specified.
  448. * The unused ``choices`` keyword argument of the ``Select`` and
  449. ``SelectMultiple`` widgets' ``render()`` method is removed. The ``choices``
  450. argument of the ``render_options()`` method is also removed, making
  451. ``selected_choices`` the first argument.
  452. * On Oracle/GIS, the :class:`~django.contrib.gis.db.models.functions.Area`
  453. aggregate function now returns a ``float`` instead of ``decimal.Decimal``.
  454. (It's still wrapped in a measure of square meters.)
  455. * Tests that violate deferrable database constraints will now error when run on
  456. a database that supports deferrable constraints.
  457. .. _deprecated-features-1.10:
  458. Features deprecated in 1.10
  459. ===========================
  460. Direct assignment to a reverse foreign key or many-to-many relation
  461. -------------------------------------------------------------------
  462. Instead of assigning related objects using direct assignment::
  463. >>> new_list = [obj1, obj2, obj3]
  464. >>> e.related_set = new_list
  465. Use the :meth:`~django.db.models.fields.related.RelatedManager.set` method
  466. added in Django 1.9::
  467. >>> e.related_set.set([obj1, obj2, obj3])
  468. This prevents confusion about an assignment resulting in an implicit save.
  469. Non-timezone-aware :class:`~django.core.files.storage.Storage` API
  470. ------------------------------------------------------------------
  471. The old, non-timezone-aware methods ``accessed_time()``, ``created_time()``,
  472. and ``modified_time()`` are deprecated in favor of the new ``get_*_time()``
  473. methods.
  474. Third-party storage backends should implement the new methods and mark the old
  475. ones as deprecated. Until then, the new ``get_*_time()`` methods on the base
  476. :class:`~django.core.files.storage.Storage` class convert ``datetime``\s from
  477. the old methods as required and emit a deprecation warning as they do so.
  478. Third-party storage backends may retain the old methods as long as they
  479. wish to support earlier versions of Django.
  480. :mod:`django.contrib.gis`
  481. -------------------------
  482. * The ``get_srid()`` and ``set_srid()`` methods of
  483. :class:`~django.contrib.gis.geos.GEOSGeometry` are deprecated in favor
  484. of the :attr:`~django.contrib.gis.geos.GEOSGeometry.srid` property.
  485. * The ``get_x()``, ``set_x()``, ``get_y()``, ``set_y()``, ``get_z()``, and
  486. ``set_z()`` methods of :class:`~django.contrib.gis.geos.Point` are deprecated
  487. in favor of the ``x``, ``y``, and ``z`` properties.
  488. * The ``get_coords()`` and ``set_coords()`` methods of
  489. :class:`~django.contrib.gis.geos.Point` are deprecated in favor of the
  490. ``tuple`` property.
  491. * The ``cascaded_union`` property of
  492. :class:`~django.contrib.gis.geos.MultiPolygon` is deprecated in favor of the
  493. :attr:`~django.contrib.gis.geos.GEOSGeometry.unary_union` property.
  494. ``CommaSeparatedIntegerField`` model field
  495. ------------------------------------------
  496. ``CommaSeparatedIntegerField`` is deprecated in favor of
  497. :class:`~django.db.models.CharField` with the
  498. :func:`~django.core.validators.validate_comma_separated_integer_list`
  499. validator::
  500. from django.core.validators import validate_comma_separated_integer_list
  501. from django.db import models
  502. class MyModel(models.Model):
  503. numbers = models.CharField(..., validators=[validate_comma_separated_integer_list])
  504. If you're using Oracle, ``CharField`` uses a different database field type
  505. (``NVARCHAR2``) than ``CommaSeparatedIntegerField`` (``VARCHAR2``). Depending
  506. on your database settings, this might imply a different encoding, and thus a
  507. different length (in bytes) for the same contents. If your stored values are
  508. longer than the 4000 byte limit of ``NVARCHAR2``, you should use ``TextField``
  509. (``NCLOB``) instead. In this case, if you have any queries that group by the
  510. field (e.g. annotating the model with an aggregation or using ``distinct()``)
  511. you'll need to change them (to defer the field).
  512. Using a model name as a query lookup when ``default_related_name`` is set
  513. -------------------------------------------------------------------------
  514. Assume the following models::
  515. from django.db import models
  516. class Foo(models.Model):
  517. pass
  518. class Bar(models.Model):
  519. foo = models.ForeignKey(Foo)
  520. class Meta:
  521. default_related_name = 'bars'
  522. In older versions, :attr:`~django.db.models.Options.default_related_name`
  523. couldn't be used as a query lookup. This is fixed and support for the old
  524. lookup name is deprecated. For example, since ``default_related_name`` is set
  525. in model ``Bar``, instead of using the model name ``bar`` as the lookup::
  526. >>> bar = Bar.objects.get(pk=1)
  527. >>> Foo.object.get(bar=bar)
  528. use the default_related_name ``bars``::
  529. >>> Foo.object.get(bars=bar)
  530. Miscellaneous
  531. -------------
  532. * The ``makemigrations --exit`` option is deprecated in favor of the
  533. :option:`makemigrations --check` option.
  534. * ``django.utils.functional.allow_lazy()`` is deprecated in favor of the new
  535. :func:`~django.utils.functional.keep_lazy` function which can be used with a
  536. more natural decorator syntax.
  537. * The ``shell --plain`` option is deprecated in favor of ``-i python`` or
  538. ``--interface python``.
  539. * Importing from the ``django.core.urlresolvers`` module is deprecated in
  540. favor of its new location, :mod:`django.urls`.
  541. * The template ``Context.has_key()`` method is deprecated in favor of ``in``.
  542. .. _removed-features-1.10:
  543. Features removed in 1.10
  544. ========================
  545. These features have reached the end of their deprecation cycle and so have been
  546. removed in Django 1.10 (please see the :ref:`deprecation timeline
  547. <deprecation-removed-in-1.10>` for more details):
  548. * Support for calling a ``SQLCompiler`` directly as an alias for calling its
  549. ``quote_name_unless_alias`` method is removed.
  550. * The ``cycle`` and ``firstof`` template tags are removed from the ``future``
  551. template tag library.
  552. * ``django.conf.urls.patterns()`` is removed.
  553. * Support for the ``prefix`` argument to
  554. ``django.conf.urls.i18n.i18n_patterns()`` is removed.
  555. * ``SimpleTestCase.urls`` is removed.
  556. * Using an incorrect count of unpacked values in the ``for`` template tag
  557. raises an exception rather than failing silently.
  558. * The ability to :func:`~django.urls.reverse` URLs using a dotted Python path
  559. is removed.
  560. * Support for ``optparse`` is dropped for custom management commands.
  561. * The class ``django.core.management.NoArgsCommand`` is removed.
  562. * ``django.core.context_processors`` module is removed.
  563. * ``django.db.models.sql.aggregates`` module is removed.
  564. * ``django.contrib.gis.db.models.sql.aggregates`` module is removed.
  565. * The following methods and properties of ``django.db.sql.query.Query`` are
  566. removed:
  567. * Properties: ``aggregates`` and ``aggregate_select``
  568. * Methods: ``add_aggregate``, ``set_aggregate_mask``, and
  569. ``append_aggregate_mask``.
  570. * ``django.template.resolve_variable`` is removed.
  571. * The following private APIs are removed from
  572. :class:`django.db.models.options.Options` (``Model._meta``):
  573. * ``get_field_by_name()``
  574. * ``get_all_field_names()``
  575. * ``get_fields_with_model()``
  576. * ``get_concrete_fields_with_model()``
  577. * ``get_m2m_with_model()``
  578. * ``get_all_related_objects()``
  579. * ``get_all_related_objects_with_model()``
  580. * ``get_all_related_many_to_many_objects()``
  581. * ``get_all_related_m2m_objects_with_model()``
  582. * The ``error_message`` argument of ``django.forms.RegexField`` is removed.
  583. * The ``unordered_list`` filter no longer supports old style lists.
  584. * Support for string ``view`` arguments to ``url()`` is removed.
  585. * The backward compatible shim to rename ``django.forms.Form._has_changed()``
  586. to ``has_changed()`` is removed.
  587. * The ``removetags`` template filter is removed.
  588. * The ``remove_tags()`` and ``strip_entities()`` functions in
  589. ``django.utils.html`` is removed.
  590. * The ``is_admin_site`` argument to
  591. ``django.contrib.auth.views.password_reset()`` is removed.
  592. * ``django.db.models.field.subclassing.SubfieldBase`` is removed.
  593. * ``django.utils.checksums`` is removed.
  594. * The ``original_content_type_id`` attribute on
  595. ``django.contrib.admin.helpers.InlineAdminForm`` is removed.
  596. * The backwards compatibility shim to allow ``FormMixin.get_form()`` to be
  597. defined with no default value for its ``form_class`` argument is removed.
  598. * The following settings are removed:
  599. * ``ALLOWED_INCLUDE_ROOTS``
  600. * ``TEMPLATE_CONTEXT_PROCESSORS``
  601. * ``TEMPLATE_DEBUG``
  602. * ``TEMPLATE_DIRS``
  603. * ``TEMPLATE_LOADERS``
  604. * ``TEMPLATE_STRING_IF_INVALID``
  605. * The backwards compatibility alias ``django.template.loader.BaseLoader`` is
  606. removed.
  607. * Django template objects returned by
  608. :func:`~django.template.loader.get_template` and
  609. :func:`~django.template.loader.select_template` no longer accept a
  610. :class:`~django.template.Context` in their
  611. :meth:`~django.template.backends.base.Template.render()` method.
  612. * :doc:`Template response APIs </ref/template-response>` enforce the use of
  613. :class:`dict` and backend-dependent template objects instead of
  614. :class:`~django.template.Context` and :class:`~django.template.Template`
  615. respectively.
  616. * The ``current_app`` parameter for the following function and classes is
  617. removed:
  618. * ``django.shortcuts.render()``
  619. * ``django.template.Context()``
  620. * ``django.template.RequestContext()``
  621. * ``django.template.response.TemplateResponse()``
  622. * The ``dictionary`` and ``context_instance`` parameters for the following
  623. functions are removed:
  624. * ``django.shortcuts.render()``
  625. * ``django.shortcuts.render_to_response()``
  626. * ``django.template.loader.render_to_string()``
  627. * The ``dirs`` parameter for the following functions is removed:
  628. * ``django.template.loader.get_template()``
  629. * ``django.template.loader.select_template()``
  630. * ``django.shortcuts.render()``
  631. * ``django.shortcuts.render_to_response()``
  632. * Session verification is enabled regardless of whether or not
  633. ``'django.contrib.auth.middleware.SessionAuthenticationMiddleware'`` is in
  634. ``MIDDLEWARE_CLASSES``. ``SessionAuthenticationMiddleware`` no longer has
  635. any purpose and can be removed from ``MIDDLEWARE_CLASSES``. It's kept as
  636. a stub until Django 2.0 as a courtesy for users who don't read this note.
  637. * Private attribute ``django.db.models.Field.related`` is removed.
  638. * The ``--list`` option of the ``migrate`` management command is removed.
  639. * The ``ssi`` template tag is removed.
  640. * Support for the ``=`` comparison operator in the ``if`` template tag is
  641. removed.
  642. * The backwards compatibility shims to allow ``Storage.get_available_name()``
  643. and ``Storage.save()`` to be defined without a ``max_length`` argument are
  644. removed.
  645. * Support for the legacy ``%(<foo>)s`` syntax in ``ModelFormMixin.success_url``
  646. is removed.
  647. * ``GeoQuerySet`` aggregate methods ``collect()``, ``extent()``, ``extent3d()``,
  648. ``make_line()``, and ``unionagg()`` are removed.
  649. * The ability to specify ``ContentType.name`` when creating a content type
  650. instance is removed.
  651. * Support for the old signature of ``allow_migrate`` is removed.
  652. * Support for the syntax of ``{% cycle %}`` that uses comma-separated arguments
  653. is removed.
  654. * The warning that :class:`~django.core.signing.Signer` issued when given an
  655. invalid separator is now a ``ValueError``.