Update Django to version 4.2 for mantic

[Lena Voytek]

With the new LTS of Django 4.2 released, future Ubuntu releases should be moved to it from 3.2. This requires any incompatible reverse-dependencies to be updated too

[Launchpad Janitor (janitor)]

This bug was fixed in the package django-mailman3 - 1.3.9-1ubuntu1

---------------
django-mailman3 (1.3.9-1ubuntu1) mantic; urgency=medium

  * Add Django 4.2 compatibility (LP: #2022089)
    - d/p/django4-compatibility.patch: Add Django 4.2 as a possible dependency
      in setup.py and provide a tox environment for it
    - d/control: Allow Django 4.2 as a dependency

 -- Lena Voytek <email address hidden> Fri, 28 Jul 2023 13:10:51 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package python-ara - 1.5.8-1.1ubuntu1

---------------
python-ara (1.5.8-1.1ubuntu1) mantic; urgency=medium

  * d/p/use-tzlocal-name-api.patch: Make ara compliant with the tzlocal 4.0 api
    to make it compatible with Django 4.2 (LP: #2022089)

 -- Lena Voytek <email address hidden> Thu, 03 Aug 2023 15:12:12 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package python-django-modelcluster - 6.0-2ubuntu1

---------------
python-django-modelcluster (6.0-2ubuntu1) mantic; urgency=medium

  * d/p/fix_test_suite_django_4plus.patch: Fix test suite to maintain
    compatibility with Django 4.2+ (LP: #2022089)

 -- Lena Voytek <email address hidden> Tue, 01 Aug 2023 15:52:22 -0700

[Lucas Kanashiro (lucaskanashiro)]

This bug was fixed in the package python-django - 3:4.2.4-1

---------------
python-django (3:4.2.4-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.2/releases/4.2.4/>

 -- Chris Lamb <email address hidden> Wed, 02 Aug 2023 07:53:39 +0100

python-django (3:4.2.3-1) experimental; urgency=medium

  * New upstream security release:

    - CVE-2023-36053: Potential regular expression denial of service
      vulnerability in EmailValidator/URLValidator.

      EmailValidator and URLValidator were subject to potential regular
      expression denial of service attack via a very large number of domain
      name labels of emails and URLs. (Closes: #1040225)

 -- Chris Lamb <email address hidden> Mon, 03 Jul 2023 17:28:20 +0100

python-django (3:4.2.2-1) experimental; urgency=medium

  * New upstream bugfix release.
    <https://docs.djangoproject.com/en/4.2/releases/4.2.2/>

 -- Chris Lamb <email address hidden> Mon, 05 Jun 2023 08:12:54 -0700

python-django (3:4.2.1-1) experimental; urgency=high

  * New upstream security release.
  * CVE-2023-31047: Prevent a potential bypass of validation when uploading
    multiple files using one form field.

    Uploading multiple files using one form field has never been supported by
    forms.FileField or forms.ImageField as only the last uploaded file was
    validated. Unfortunately, Uploading multiple files topic suggested
    otherwise. In order to avoid the vulnerability, the ClearableFileInput and
    FileInput form widgets now raise ValueError when the multiple HTML
    attribute is set on them. To prevent the exception and keep the old
    behavior, set the allow_multiple_selected attribute to True.

    For more details on using the new attribute and handling of multiple files
    through a single field, see:

      <https://docs.djangoproject.com/en/stable/topics/http/file-uploads/#uploading-multiple-files>

    (Closes: #1035467)

  * Refresh patches.

 -- Chris Lamb <email address hidden> Wed, 03 May 2023 09:13:17 -0700

python-django (3:4.2-1) experimental; urgency=medium

  * New upstream stable release:

      This version has been designated as a long-term support (LTS) release,
      which means that security and data loss fixes will be applied for at
      least the next three years. It will also receive fixes for crashing bugs,
      major functionality bugs in newly-introduced features, and regressions
      from older versions of Django for the next eight months until December
      2023.

        -- <https://www.djangoproject.com/weblog/2023/apr/03/django-42-released/>

  * Bump Standards-Version to 4.6.2.

 -- Chris Lamb <email address hidden> Mon, 03 Apr 2023 12:10:10 +0100

python-django (3:4.2~rc1-1) experimental; urgency=medium

  * New upstream release candidate.

 -- Chris Lamb <email address hidden> Mon, 20 Mar 2023 08:12:25 +0000

python-django (3:4.2~beta1-1) experimental; urgency=medium

  * New upstream beta release.
    <https://www.djangoproject.com/weblog/2023/feb/20/django-42-beta-1-released/>

 -- Chris Lamb <email address hidden> Mon, 20 Feb 2023 07:39:15 -0800

python-django (3:4.2~alpha1-1) experimental; urgency=medium

  * New up...

[Lena Voytek (lvoytek)]

python-django-compressor is breaking horizon with Django 4 and therefore all the dashboards too. The issue has been solved in debian though so this just needs a merge

[Launchpad Janitor (janitor)]

This bug was fixed in the package python-django-compressor - 4.0-2ubuntu1

---------------
python-django-compressor (4.0-2ubuntu1) mantic; urgency=medium

  * Merge with Debian unstable (LP: #2022089). Remaining changes:
    - d/control: Drop runtime dependency on python-calmjs to a Suggests
      as it is an optional dependency and rjsmin already provides the
      default JS minifier implementation.

 -- Lena Voytek <email address hidden> Wed, 16 Aug 2023 13:08:46 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package django-dbbackup - 4.0.2-0ubuntu1

---------------
django-dbbackup (4.0.2-0ubuntu1) mantic; urgency=medium

  * New upstream release 4.0.2
  * d/p/disable-gpg-tests.patch: Refresh for new version
  * d/control: remove six as a build dependency as it is no longer needed
  * d/p/test_set_options-support-django4.patch: Fix test suite for Django 4.2
    (LP: #2022089)

 -- Lena Voytek <email address hidden> Wed, 16 Aug 2023 07:43:30 -0700

[Lena Voytek (lvoytek)]

Marking django-menu-generator-ng as wont-fix as we removed the package instead

[Launchpad Janitor (janitor)]

This bug was fixed in the package python-django-tagging - 1:0.5.0-4ubuntu1

---------------
python-django-tagging (1:0.5.0-4ubuntu1) mantic; urgency=medium

   * d/p/django-4.x-fixes/Check-FullResultSet-exception.patch: Fix
     compatibility with Django 4 by handling FullResultSet exception introduced
     in version 4.2 (LP: #2022089)

 -- Lena Voytek <email address hidden> Fri, 18 Aug 2023 14:32:42 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package django-assets - 2.0-2.1ubuntu1

---------------
django-assets (2.0-2.1ubuntu1) mantic; urgency=medium

  * d/p/django4-compatibility.patch: Fix Django 4 compatibility by updating the
    deprecated field requires_system_checks (LP: #2022089)
  * d/p/fix-node-iteration.patch: Fix TypeError when iterating over Nodes
  * d/p/01-webassets_version.patch: Remove - fixed upstream through __init__.py

 -- Lena Voytek <email address hidden> Mon, 31 Jul 2023 12:07:24 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package hyperkitty - 1.3.7-1ubuntu2

---------------
hyperkitty (1.3.7-1ubuntu2) mantic; urgency=medium

  * d/control: Update Django runtime dependency to match build dependency,
    allowing Django 4.2

 -- Lena Voytek <email address hidden> Fri, 25 Aug 2023 08:56:15 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package factory-boy - 2.11.1-5ubuntu1

---------------
factory-boy (2.11.1-5ubuntu1) mantic; urgency=medium

  * d/p/demo-django4-compatibility.patch: Fix Django 4 compatibility in the
    example application used in the django-example autopkgtest (LP: #2022089)

 -- Lena Voytek <email address hidden> Thu, 24 Aug 2023 13:57:01 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package django-tables - 2.6.0-1ubuntu1

---------------
django-tables (2.6.0-1ubuntu1) mantic; urgency=medium

  * d/t/test-run-py3: Update test to be compatible with Django 4 using re_path
    instead of the removed url function (LP: #2022089)

 -- Lena Voytek <email address hidden> Wed, 23 Aug 2023 11:58:47 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package djangorestframework-filters - 1.0.0.dev2-2ubuntu1

---------------
djangorestframework-filters (1.0.0.dev2-2ubuntu1) mantic; urgency=medium

  * d/p/fix-testapp-django4-compatibility.patch: Update test suite to be
    compatible with Django 4 using re_path instead of the removed url
    function (LP: #2022089)

 -- Lena Voytek <email address hidden> Wed, 23 Aug 2023 15:43:38 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package django-oauth-toolkit - 1.7.0-2ubuntu1

---------------
django-oauth-toolkit (1.7.0-2ubuntu1) mantic; urgency=medium

  * d/p/remove-bulk_create-testsuite-for-django4.patch: Remove use of
    bulk_create in testsuite to maintain compatibility with Django 4
    (LP: #2022089)

 -- Lena Voytek <email address hidden> Mon, 28 Aug 2023 14:29:04 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package django-cachalot - 2.4.3-2ubuntu1

---------------
django-cachalot (2.4.3-2ubuntu1) mantic; urgency=medium

  * d/control: Remove restriction on later Django versions, allowing 4.0+
    (LP: #2022089)
  * d/t/control: Replace autodep8 test, using cachalot as the module name
    rather than django_cachalot

 -- Lena Voytek <email address hidden> Fri, 25 Aug 2023 12:35:25 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package psycopg3 - 3.1.8-0ubuntu1

---------------
psycopg3 (3.1.8-0ubuntu1) mantic; urgency=medium

  * New upstream release 3.1.8 (LP: #2022089)
    - This release update makes psycopg3 compatible with Django 4.2, see:
      https://docs.djangoproject.com/en/4.2/releases/4.2/#psycopg-3-support
    - Updates:
      + Don't pollute server logs when types looked for by TypeInfo.fetch()
        are not found.
      + Set Cursor.rowcount to the number of rows of each result set from
        Cursor.executemany() when called with !returning=True.
      + Fix TypeInfo.fetch() when used with ClientCursor

 -- Lena Voytek <email address hidden> Wed, 30 Aug 2023 07:23:06 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package python-django-celery-results - 2.5.1-1ubuntu1

---------------
python-django-celery-results (2.5.1-1ubuntu1) mantic; urgency=medium

  * d/control: Upgrade to psycopg 3 for compatibility with Django 4 in test
    suite (LP: #2022089)
  * d/t/upstream: Add pytest conftest file when running upstream test suite.
    Including the file tells pytest to not run benchmarks as intended.

 -- Lena Voytek <email address hidden> Mon, 28 Aug 2023 12:59:01 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package django-cte - 1.3.0-1ubuntu1

---------------
django-cte (1.3.0-1ubuntu1) mantic; urgency=medium

  * d/p/fix-column-alias-django4.patch: Remove SQL column aliases as a
    workaround for Django 4 introducing aliases that break access to
    rootmap.name (LP: #2022089)

 -- Lena Voytek <email address hidden> Thu, 31 Aug 2023 09:19:08 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package python-django-crispy-forms - 1.14.0-4ubuntu1

---------------
python-django-crispy-forms (1.14.0-4ubuntu1) mantic; urgency=medium

  * d/p/support-django4.patch: Support Django 4.1 and 4.2 by overriding
    template settings to fix template loading in the
    keepcontext_context_manager test (LP: #2022089)

 -- Lena Voytek <email address hidden> Thu, 31 Aug 2023 11:55:04 -0700