CGM_Public/pretix_cgo
1
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

upstream/2026.4.0 #15

Merged
simon merged 108 commits from upstream/2026.4.0 into master 2026-05-03 19:11:38 +00:00
Conversation 0 Commits 108 Files Changed 194 +66717 -62568
simon commented 2026-05-03 19:10:58 +00:00
Owner
Copy Link
No description provided.
simon added 108 commits 2026-05-03 19:10:58 +00:00
Bump version to 2026.4.0.dev0 a2cef22ea8
Update sentry-sdk requirement from ==2.56.* to ==2.57.* b2ea172a60 
Updates the requirements on [sentry-sdk](https://github.com/getsentry/sentry-python) to permit the latest version.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.56.0...2.57.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.57.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Translations: Update Portuguese (Brazil) c0df7c6142 
Currently translated at 95.1% (5980 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/pt_BR/

powered by weblate
Translations: Update Dutch (Belgium) 608b150bf8 
Currently translated at 79.6% (5007 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl_BE/

powered by weblate
Translations: Update French 438f70c730 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/

powered by weblate
Translations: Update Dutch b0714886bc 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl/

powered by weblate
Translations: Update Spanish 86b5191e8b 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/

powered by weblate
Translations: Update Dutch (informal) (nl_Informal) dcb0eb765f 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl_Informal/

powered by weblate
Translations: Update Dutch (Belgium) 719ad7104d 
Currently translated at 82.1% (5164 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl_BE/

powered by weblate
Update redis requirement from ==7.1.* to ==7.4.* 531f697b9a 
Updates the requirements on [redis](https://github.com/redis/redis-py) to permit the latest version.
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](https://github.com/redis/redis-py/compare/v7.1.0...v7.4.0)

---
updated-dependencies:
- dependency-name: redis
  dependency-version: 7.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Fix useless cart sessions being created (#6045) 8c251029b9 
* Do not create useless cart session accessing invoice address

* Skip useless code paths in CartMixin

* Do not create cart session on view with active session

* Create regression tests
Order change form: Allow to add multiple identical positions (Z#23227479) (#6044) ed1459b1dd 
* Order change form: Allow to add multiple identical positions (Z#23227479)

* New implementation
Fix password-manager username not saved on customer account creation (#6043) 8bd0665f37 
* Fix password-manager username not saved on customer account creation

* Fix tests/make email not required
Allow to configure a readonly DB connection (#5978) 666b496ab4
Update pillow requirement from ==12.1.* to ==12.2.* e70452ee47 
Updates the requirements on [pillow](https://github.com/python-pillow/Pillow) to permit the latest version.
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](https://github.com/python-pillow/Pillow/compare/12.1.0...12.2.0)

---
updated-dependencies:
- dependency-name: pillow
  dependency-version: 12.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Translations: Update Dutch (Belgium) 50c99e1239 
Currently translated at 82.8% (5210 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl_BE/

powered by weblate
Add placeholder for checked in addons (Z#23230009) b6518449d6
Dockerfile: Use Python 3.13 (#6028) 84e12fea32
Exporters: Give access to authentication infos and allow empty permissions (#5979) d411c36414 
* Exporters: Give access to authentication infos

* Allow exporters to have empty permission

* Use a protocol
Exporters: Pass state about staff_session 92d1830f3b
Fix typo 23d1673403
Log new properties when changing device fc7e8ea67a
Fix typo in test detection, improve check 2e2e57d231 
A non-empty string is truthy, making the the for-loop useless, as the first item in inspect.stack() is always the for-loop itself, which then lead to the function returning immediately.
This commit
* fixes this typo
* changes the loop to ignore the first element of instpect.stack() (which is the loop itself)
* ignores django-internal code

This should create something similar to what I suspect the code was intended to do originally.
tests: replace broken monkeypatching with TransactionTestCase a57810cf41
tests: Remove on_commit monkeypatch 444963e952
Fix copy-and-paste errors 12171e0665
Fix multi-product order edit with seats (#6063) c037fd865b
Order import: handle mixed endings of last line (Z#23230806) (#6066) 5c7104634e 
* handle mixed line endings in import

* formatting
[SECURITY] API: Add missing event filter for check-ins 221cbd15ab
Bump picomatch from 2.3.1 to 2.3.2 in /src/pretix/static/npm_dir (#6030) cb6d3967a0 
Bumps [picomatch](https://github.com/micromatch/picomatch) from 2.3.1 to 2.3.2.
- [Release notes](https://github.com/micromatch/picomatch/releases)
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/picomatch/compare/2.3.1...2.3.2)

---
updated-dependencies:
- dependency-name: picomatch
  dependency-version: 2.3.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bump brace-expansion from 1.1.12 to 1.1.13 in /src/pretix/static/npm_dir (#6050) d2ca217cd8 
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.12 to 1.1.13.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.12...v1.1.13)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 1.1.13
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Do not reset event list type automatically (Z#23226325) (#6068) aa420d4353 
Co-authored-by: Kara Engelhardt <engelhardt@pretix.eu>
adds fallback to PaymentDetailsField (PRETIXEU-D6V) (#6041) 58cce4b85e 
* adds fallback to PaymentDetailsField

* return empty object instead of info_data
Fix AttributeError when running tests with debug toolbar installed 5d7ee584d9
Waiting list: group product choices by category (#6006) 6d07530d2b 
* Group waiting list product choices by category

Use optgroups to group products by category in the waiting list selection
dropdown.

Products are normally separated in the UI by category grouping, but this
context is lost in the waiting list form. When multiple products share the
same name, this can make it difficult for customers to distinguish between
them.

* Add tests for waiting list initial selection with optgroups

Verify that the initial product selection (via `?item=` and `?var=`
query parameters) works correctly when choices are grouped by category
into `<optgroup>`s. Covers both plain items and items with variations.
Add default protection for SSRF bb450e1be9
Fix crash on build f50548cd02
Email: Check custom SMTP IP at usage time 0bb04ca8f0
customer login: open pw reset link in new tab (Z#23231027) (#6074) e80b4b560b 
This way customers don't have to break their checkout flow and the link works in a widgets iframe
Translations: Update Japanese 49729d2c87 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Translations: Update Dutch (Belgium) 6c7163406e 
Currently translated at 82.9% (5214 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl_BE/

powered by weblate
Fix AttributeError in CheckPrivateNetworkMixin (#6076) 3473fa738d
Translations: Update Danish f46fc7fa69 
Currently translated at 44.2% (2784 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Allow buttons to reuse cart (Z#23226853) (#6047) 059ff6c99b 
* Allow buttons to reuse cart (Z#23226853)

* Always keep cart of buttons with items set
Do not force PDFs to be downloaded (Z#23225892) (#5994) 5682d3ed56 
* Display invoice and tickets inline in browser (Z#23225892)

* Use FileResponse filename for AnswerDownload

* Use inline for PDF-view in pretix-control editor

* use as_attachment for API FileResponses

* do not ignore csp even for disposition=inline

* use as_attachment for file responses in control

* remove unused code

* improve code style

* Invoice preview inline

* do not force download on tickets in backend

* do not force download on AnswerDownload

* imrpove code style

* improve code style

* fix missing int str conversion

* Apply suggestions from code review

Co-authored-by: luelista <mira@teamwiki.de>

---------

Co-authored-by: luelista <mira@teamwiki.de>
Do not show payment text of canceled and failed payments on invoice (Z#23231070) (#6075) 8690d65e99
API: fix PDF-download name (Z#23231496) efd887b439
PPv2: Fix permission-check for ISU (event.settings.general:write to event.settings.payment:write) 0f2ebb8687
Giftcard/Reusable Media API: fix expand permission check (Z#23230608) (#6091) e3ffd66691 
* add failing tests

* add permission checks in to_representation

* only overwrite final representation not the serializer

* styling

* include review
Translations: Update Danish b3bb9fccb5 
Currently translated at 44.2% (2784 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Danish 5e49df0ef6 
Currently translated at 46.1% (2904 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Danish 4beea63b49 
Currently translated at 46.5% (2925 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Spanish 2f9ac05184 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/

powered by weblate
Translations: Update Danish baeec92203 
Currently translated at 47.7% (3004 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Spanish a8fe6f505e 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/

powered by weblate
Translations: Update Spanish 58ea7c8656 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/

powered by weblate
Translations: Update Danish 0715144a31 
Currently translated at 48.5% (3055 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Japanese 640518c1b3 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Translations: Update Japanese b968266611 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Translations: Update Japanese 4530d864d3 
Currently translated at 100.0% (6287 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Update tlds requirement from >=2020041600 to >=2026021400 (#6088) d9000c2a66
Update sentry-sdk requirement from ==2.57.* to ==2.58.* (#6095) ee1a8420a5 
Updates the requirements on [sentry-sdk](https://github.com/getsentry/sentry-python) to permit the latest version.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.57.0...2.58.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.58.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update cryptography requirement from >=44.0.0 to >=46.0.7 (#6084) c04be5c0d9 
Updates the requirements on [cryptography](https://github.com/pyca/cryptography) to permit the latest version.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/44.0.0...46.0.7)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Delete unused code (#6026) d0d76ffddc 
* Delete unused code

* Delete template
Add invoice numbers to paymentlist export (Z#23227966) (#6097) b7d3e8a80a
Update tlds requirement from >=2026021400 to >=2026041800 (#6104) 4fe405886e 
Updates the requirements on [tlds](https://github.com/kichik/tlds) to permit the latest version.
- [Commits](https://github.com/kichik/tlds/commits)

---
updated-dependencies:
- dependency-name: tlds
  dependency-version: '2026041800'
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update defusedcsv requirement from >=1.1.0 to >=3.0.0 (#6105) 6d255bb9cc 
Updates the requirements on [defusedcsv](https://github.com/raphaelm/defusedcsv) to permit the latest version.
- [Commits](https://github.com/raphaelm/defusedcsv/compare/v1.1.0...v3.0.0)

---
updated-dependencies:
- dependency-name: defusedcsv
  dependency-version: 3.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Customer Accounts: Limit length; reject URLs in name 447cffa7a8
Move validation into form field. 1b88a84a83
isort 5faa85ed40
Set max_length to 70 but for all name fields together and not only every single one. 7e457f7430
Overhaul contribution guide & add a AI policy (#6038) 35e1df28d9 
* Overhaul contribution guide & add a AI policy

* Fix broken links
Handle existing cart with empty session in presale views (PRETIXEU-D9Y) ba75de7e7d
Invoices: Allow to use currency rates from National Bank of Poland (#6100) b000dff134
Subevent selection: Order by date before name (Z#23231460) (#6111) a6a9eb6a6a
Backend: Support are-you-sure for dynamically added form parts (Z#23232506) (#6109) 97904d8567
Limit widget frame inner height to 100dvh (Z#23231969) ff77a2125a 
Fixes a bug where the submit buttons were obscured by the browsers elements on some ios devices
Update pytest-asyncio requirement from >=0.24 to >=1.3.0 (#6108) 82a14a4f83 
Updates the requirements on [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v0.24.0...v1.3.0)

---
updated-dependencies:
- dependency-name: pytest-asyncio
  dependency-version: 1.3.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Subevents: Allow to skip conflicting dates in bulk-creation (Z#23217384) (#6079) 88165c098e 
* Subevents: Allow to skip conflicting dates in bulk-creation

* Update src/pretix/control/templates/pretixcontrol/subevents/bulk.html

* Fix overlap calc for consecutive subevents

* Add test for skipping conflicting dates in bulk-creation

---------

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Co-authored-by: Richard Schreiber <schreiber@rami.io>
Co-authored-by: Kara Engelhardt <engelhardt@pretix.eu>
Navigation: suggest event or organizer by domain (Z#23231404) (#6107) 496591bb3b
Turn attendee emails on by default for new events (Z#23213656) (#5598) 771f4f5d1e 
* Turn attendee emails on by default for new events (Z#23213656)

I think the thing that makes me most unhappy is that *most* organizers will
probably want to turn off mail_send_order_paid_attendee when they set
ticket_download_pending and I don't think organizers will remember that, but
it also seems complex and weird to create an automatism for it?

* Update src/pretix/base/models/event.py

Co-authored-by: Martin Gross <gross@rami.io>

---------

Co-authored-by: Martin Gross <gross@rami.io>
Events/subevents: Fix missing logging for meta changes (Z#23232443) (#6110) 1157e2aeed 
* Events/subevents: Fix missing logging for meta changes (Z#23232443)

* Fix logging
Prevent nullbytes in input data globally (#6071) 8426a68760 
* Prevent nullbytes in input data globally

* Only on urlencoded POST

* Split middleware
Validate id for async tasks 1c7ce4b1ca
Remove unused download of all tickets of an order in pretix-control (#6086) 217744a9f2 
* Remove unused code for ticket download of whole order in pretix-control

* fix flake8

* fix isort
Translations: Update Danish 75660600f4 
Currently translated at 50.1% (3153 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Danish 8fd366be76 
Currently translated at 52.2% (3284 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Galician 4767cb38fc 
Currently translated at 17.6% (1111 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/gl/

powered by weblate
Translations: Update Danish 90800f219b 
Currently translated at 54.3% (3414 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Galician bd90badc54 
Currently translated at 19.0% (1196 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/gl/

powered by weblate
Translations: Update Galician c061179f37 
Currently translated at 19.1% (1207 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/gl/

powered by weblate
Translations: Update Danish 27398c08c7 
Currently translated at 54.5% (3428 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Danish 7f6b5d7331 
Currently translated at 56.3% (3542 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Danish fd0b3bac3c 
Currently translated at 58.9% (151 of 256 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/da/

powered by weblate
Translations: Update Danish a13bb630d5 
Currently translated at 58.4% (3676 of 6287 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Update po files d6fe29210a 
[CI skip]

Signed-off-by: Raphael Michel <michel@pretix.eu>
Update cryptography requirement from >=46.0.7 to >=47.0.0 653f83fc90 
Updates the requirements on [cryptography](https://github.com/pyca/cryptography) to permit the latest version.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.7...47.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 47.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Translations: Update wordlist ff434f4384
Translations: Update German 96e10bcd71 
Currently translated at 100.0% (6295 of 6295 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German (informal) (de_Informal) 08df3d828d 
Currently translated at 100.0% (6295 of 6295 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Allow dash character in pdf placeholders 2d31c62812
AddOnsStep: Use post data as initial data if exists (Z#23232311) 49f692c666
AddOnsStep: Expand selected variants 448d2e70d5
Thumbnails: Perform color space transform before resizing (Z#23232101) (#6120) 921fd801e5
Bump version to 2025.4.0 1adec102e6
Bump version to 2025.5.0.dev0 10789f097d
Bump version to 2026.4.0 75c8f97080
Merge with Master
All checks were successful
Build Deploy email notification tool / Apply-Kubernetes-Resources (push) Successful in 2m59s
Details
dfe94e09cc
simon merged commit a37e6c8270 into master 2026-05-03 19:11:38 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
philipp simon
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: CGM_Public/pretix_cgo#15
No description provided.
Delete Branch "upstream/2026.4.0"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?