Raphael Michel and GitHub
f3ffce4e5b
Question form: Allow to unset required boolean questions (Z#23239887) ( #6382 )
...
Proper fix for #6366
2026-07-28 10:59:34 +02:00
Albizuri and Raphael Michel
5c98dc16b7
Translations: Update Basque
...
Currently translated at 48.3% (3077 of 6362 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/
powered by weblate
2026-07-28 10:11:51 +02:00
Nikolai and Raphael Michel
d814b40fcd
Translations: Update Danish
...
Currently translated at 61.8% (3932 of 6362 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/
powered by weblate
2026-07-28 10:11:51 +02:00
a696c493e2
PayPal: Drop maximum length of client ID ( #6424 )
...
* Update PayPal max_length to 82 characters
* Apply suggestions from code review
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
---------
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
2026-07-28 09:13:45 +02:00
Raphael Michel and GitHub
163cf85c86
Orders: Fix N+1 query issues on order detail and change page ( #6390 )
...
* rders: Fix N+1 query issues on order detail and change page
There is one I couldn't fix: Loading the list of tax rules for every
select box on the OrderChange page. Unfortunately, Django has a
cache-breaking .all() in ModelChoiceField and that would need nasty
patching that didn't feel worth it
* Fix isort
* Fix N+1 query in gate call
* Fix leftovers
* Add local cache for objects referenced in log entries
* Update src/pretix/control/views/orders.py
2026-07-28 09:08:14 +02:00
pajowu and GitHub
55b6887c5e
Show new login time in users timezone (Z#23241469) ( #6420 )
2026-07-28 09:08:00 +02:00
Raphael Michel and GitHub
47b632eabe
RejectInvalidInputMiddleware: Ignore invalid charsets on body ( #6314 )
2026-07-28 09:07:16 +02:00
Raphael Michel and GitHub
7f2e957092
Security profiles: Ensure default profile is always listed first ( #6266 )
2026-07-28 09:06:59 +02:00
Raphael Michel and GitHub
1ff9742a08
Customer export: Add memberships tab (Z#23228422) ( #6253 )
2026-07-28 09:06:45 +02:00
Raphael Michel and GitHub
d9f8679647
Waiting list: Redirect back after voucher edit (Z#23230178) ( #6252 )
2026-07-27 23:19:10 +02:00
1a7e36a144
Event-dashboard: Lazy-load warnings ( #6421 )
...
* Event-dashboard: Lazy-load warnings
I don't like this, it's not pretty, but we have no quick way of fixing
the overpaid orders check otherwise and a slow query on the event
dashboard feels really bad, because even if you don't wanna see the
dashboard ou are always going through it in navigation and that can get
very annoying very quickly.
* Update src/pretix/control/templates/pretixcontrol/event/dashboard_partial_warnings.html
Co-authored-by: pajowu <engelhardt@pretix.eu >
---------
Co-authored-by: pajowu <engelhardt@pretix.eu >
2026-07-27 14:40:34 +02:00
9afc71c245
Update src/pretix/control/views/checkin.py
...
Co-authored-by: pajowu <engelhardt@pretix.eu >
2026-07-27 13:54:06 +02:00
Raphael Michel and pajowu
1087db9529
Check-in history: Avoid JOINs
...
On a test dataset, this was a speedup from 18s to 900ms
2026-07-27 13:54:06 +02:00
Kara Engelhardt and pajowu
6d62284d87
Add global id field to order
2026-07-27 13:22:42 +02:00
szurofkamarciidfbe08444ef04788 and Raphael Michel
db147280fd
Translations: Update Hungarian
...
Currently translated at 100.0% (6362 of 6362 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/hu/
powered by weblate
2026-07-24 13:45:01 +02:00
szurofkamarciidfbe08444ef04788 and Raphael Michel
d1ce4566a7
Translations: Update Hungarian
...
Currently translated at 63.8% (4060 of 6362 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/hu/
powered by weblate
2026-07-24 13:45:01 +02:00
Raphael Michel and GitHub
92e7069a8e
Improve performance of overpayment checks (Z#23241035) ( #6410 )
...
* Improve performance of overpayment checks
* Upgrade django-scopes
2026-07-24 13:42:33 +02:00
Raphael Michel and GitHub
351d2055f8
Log view: Disable counting the number of pages (Z#23241035) ( #6414 )
2026-07-24 12:17:48 +02:00
ca03a2556d
Log view: New filter form ( #6412 )
...
* Rework filter form for event log view
* Log view: New filter form
* isort
* Update src/pretix/control/forms/filter.py
Co-authored-by: luelista <weller@rami.io >
---------
Co-authored-by: luelista <weller@rami.io >
2026-07-23 17:35:18 +02:00
Richard Schreiber and GitHub
2381af4267
Widget: re-create vue2-behaviour to replace container instead of setting innerHTML ( #6405 )
...
* Widget: replace container instead of setting innerHTML
* remove console.log call
* fix code-style
2026-07-23 11:36:06 +02:00
Raphael Michel
9fd570a53d
Add cautionary comment about vobject bug
2026-07-22 14:49:53 +02:00
Kara Engelhardt and pajowu
072c17c91a
Banktransfer: Notify incomplete payments after manual assignment (Z#23241009)
2026-07-22 14:15:14 +02:00
Raphael Michel and GitHub
003bfb707d
Fix scoping for OrderPosition.objects (follow-up to #4278 ) ( #6407 )
2026-07-22 14:10:34 +02:00
Raphael Michel and Raphael Michel
faf8a6b1d2
Translations: Update Arabic
...
Currently translated at 99.7% (6348 of 6362 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ar/
powered by weblate
2026-07-22 14:09:38 +02:00
Kara Engelhardt and pajowu
a4d10d9550
Sendmail: clarify order status labels (Z#23230149)
2026-07-22 13:43:07 +02:00
Richard Schreiber and pajowu
baf3cf04ec
fix import and missing license-header
2026-07-21 18:39:07 +02:00
Kara Engelhardt and pajowu
fa2009ed03
Add central helper for ssrf address protection
2026-07-21 18:39:07 +02:00
luelista and GitHub
cc082e2001
Improve CSP handling in vite integration; refactor CSP handling into helper functions (Z#23240534) ( #6387 )
2026-07-21 13:20:31 +02:00
Raphael Michel
930e153db4
Security profiles: Add missing annul checkpoint
2026-07-21 12:30:37 +02:00
Raphael Michel and GitHub
d47c435489
LocaleMiddleware: Always render error pages in cookie or browser language ( #6277 )
2026-07-20 15:18:14 +02:00
Raphael Michel and GitHub
32e0e31b15
Redirection plugin: Improve validation to avoid ReDoS ( #6395 )
...
* Redirection plugin: Improve validation to avoid ReDoS
* Stricter regex
2026-07-20 13:39:15 +02:00
Raphael Michel and GitHub
ea819530f9
Escape HTML arguments to translation strings ( #6399 )
2026-07-20 13:15:09 +02:00
Raphael Michel and GitHub
09aef94376
Vouchers: Fix race condition that allows budget to be exceeded ( #6396 )
2026-07-20 13:14:49 +02:00
Kara Engelhardt and pajowu
39fbd25fbb
Ignore expiry date for payments created via api (Z#23232671)
2026-07-20 12:46:50 +02:00
Kara Engelhardt and pajowu
214ea5fcd3
Show end time in subevent list (Z#23237612)
2026-07-20 12:00:22 +02:00
Raphael Michel
2de032c2be
Fix test failure on PostgreSQL
2026-07-17 19:22:50 +02:00
Raphael Michel
2574b31afd
Fix unused import
2026-07-17 18:44:33 +02:00
5f2264daeb
User email verifications: Add rate limiting (Z#23232834) ( #6219 )
...
* User email verifications: Add rate limiting (Z#23232834)
Also, refactor rate limiting into a central utility
* Make ip block work in dev
* Review notes
* Update src/pretix/base/forms/user.py
Co-authored-by: luelista <weller@rami.io >
* Apply suggestions from code review
Co-authored-by: luelista <mira@teamwiki.de >
* Add rate limit reset
---------
Co-authored-by: luelista <weller@rami.io >
Co-authored-by: luelista <mira@teamwiki.de >
2026-07-17 18:35:03 +02:00
Raphael Michel
4295b02406
Fix tests after hierarkey update
2026-07-17 18:33:20 +02:00
Raphael Michel and GitHub
49247062bc
Drop second component from many time picker fields ( #6150 )
2026-07-17 17:42:51 +02:00
luelista and GitHub
83e607b88d
Fix double escaping in dashboard widgets (Z#23240769) ( #6394 )
2026-07-17 17:03:09 +02:00
Raphael Michel and GitHub
4372aa6725
Devices: Allow admins to inspect raw info data ( #6389 )
2026-07-16 19:22:31 +02:00
luelista and GitHub
71488f0a02
Fix migration conflict ( #6388 )
2026-07-16 17:07:25 +02:00
52a4381277
Enforce uniqueness of EventMetaProperty names in DB (Z#23231419) ( #6106 )
...
After enforcing this on application level in commit 4c37351mail@raphaelmichel.de >
2026-07-16 15:44:58 +02:00
luelista and GitHub
bf066909a7
Remove more usages of |safe ( #6363 )
...
* Replace |safe with |escapejson where appropriate
* Use JSON encoding for data-replace-with-qr
2026-07-16 13:14:37 +02:00
luelista and GitHub
1399d37827
UX improvement for enabling payment provider plugins ( #6364 )
...
Make flow of enabling new payment plugin smoother by redirecting back to
payment settings, and highlighting the newly enabled provider.
2026-07-16 12:59:29 +02:00
luelista and GitHub
0c0842c9db
Remove dead code in orderchange.js ( #6384 )
2026-07-16 12:58:09 +02:00
luelista and GitHub
6e647b41e4
Use format_html in dashboard widgets ( #6369 )
...
This changes the API of pretix.control.signals.event_dashboard_widgets and
pretix.control.signals.user_dashboard_widgets, such that the "content" key of
returned dictionaries must contain a SafeString if HTML therein is to be
rendered.
2026-07-16 12:56:39 +02:00
7cff4321e0
Order change: Fix crash if addon has hidden_if_item_available (Z#23236380) ( #6357 )
...
* Fix crash in rebooking if addon has hidden_if_item_available
* Move get_grouped_items into its own file and rename to prepare_item_list_for_shop
(but keep a reference under original name for plugin compatibility)
* Make Item[Variation].unavailability_reason helper functions next to get_grouped_items
* Use current_unavailability_reason attribute instead of unavailability_reason()
* Add test case for:
Order has product with addon 1; Addon 1 is hidden if Addon 2 is available; When order is changed, Addon 1 should not be removable
* Fix special case if addon product is now set to require a voucher (vouchers for addons are not supported)
---------
Co-authored-by: Kara Engelhardt <engelhardt@pretix.eu >
2026-07-16 12:52:08 +02:00
luelista and GitHub
fe5d095ae7
Prevent changing ticket secret of gift-card-issuing order positions ( #6281 )
2026-07-16 12:41:27 +02:00
