CGM_Public/pretix_cgo
3
0 Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

Upstream/2026.8.0 #22

Merged
simon merged 252 commits from upstream/2026.8.0 into master 2026-10-03 20:10:44 +00:00
Conversation 0 Commits 252 Files Changed 422
+61694 -45047
simon commented 2026-10-03 20:10:32 +00:00
Owner
Copy link
Copy source
No description provided.
simon added 252 commits 2026-10-03 20:10:33 +00:00
Bump version to 2026.8.0.dev0 541e7412e1
Add Hungarian language 7627e4b548
Cart Manager: Round custom price to currency when adding (#6426) 01d736361d
Bump django-bootstrap3 from 26.1 to 26.2 (#6445) b70c1b02c2 
Bumps [django-bootstrap3](https://github.com/zostera/django-bootstrap3) from 26.1 to 26.2.
- [Changelog](https://github.com/zostera/django-bootstrap3/blob/main/CHANGELOG.md)
- [Commits](https://github.com/zostera/django-bootstrap3/compare/v26.1...v26.2)

---
updated-dependencies:
- dependency-name: django-bootstrap3
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bump markdown from 3.10.2 to 3.10.3 (#6442) 2c876057bf 
Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.10.2 to 3.10.3.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.10.2...3.10.3)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: 3.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update cryptography requirement from >=49.0.0 to >=50.0.0 (#6443) c369ba5f60 
Updates the requirements on [cryptography](https://github.com/pyca/cryptography) to permit the latest version.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/49.0.0...50.0.0)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Fix font enumeration e4a0bba3bc
Show correct number of currency placed in widget (Z#23241522) (#6425) b20557a996
Skip over Exporters with ExportError-Exceptions (such as ORMQL-Exporter) (Fixes PRETIXEU-F3X) c11ebb1391
isort b659534772
Prevent HTML injection in email preview (Z#23241741) e7657a3dd3
Merge branch 'html-injection-placeholder' into 'master' 288ac50600 
Prevent HTML injection in email preview (Z#23241741)

See merge request pretix/pretix!47
Devices: Store timestamp of last contact (#6453) 8133061fe1
Email settings: Fix DMARC warning (#6452) 9fe25544c1
Bulk refund: Fix only first refund being made (Z#23239965) (#6376) 407728cc55
Translations: Update Danish c4950e714d 
Currently translated at 62.7% (4011 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
Translations: Update Danish 1a6edae769 
Currently translated at 58.0% (151 of 260 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/da/

powered by weblate
Translations: Update Hungarian 1ea1c1789c 
Currently translated at 99.6% (6362 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/hu/

powered by weblate
Translations: Update Italian 5d8ba189fa 
Currently translated at 39.6% (2530 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian 7bc79337c3 
Currently translated at 99.6% (259 of 260 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/it/

powered by weblate
Translations: Update Italian b164cf44c0 
Currently translated at 39.8% (2544 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Bump django-localflavor from 5.0 to 5.1 (#6449) e3fa1aed7f
API: Make all mutating endpoints transactional (#6430) 5c448279f0 
All of our API endpoints that do something in the system do at least two
SQL queries, one for the actual change and one for the log entry. Often
many more. We want all of this to happen in a transaction so we know an
API call was executed or not at all, not half-way.
Device list: Show online status (#6455) ea792e76b2 
* Device list: Show online status

* Fixes post-review
Paypal2: handle incomming capture webhooks (Z#23240966) (#6456) 4d9dfa88fe 
* store the state of the payment regardless of the state

control.html shows the banner that the payment is in review depending on payment.info

* handle capture ressource

* Update src/pretix/plugins/paypal2/views.py

Co-authored-by: Phin Wolkwitz <wolkwitz@pretix.eu>

* add test

* cleanup logic regarding uninteresting resource_type

* store payment.info during _execute_payment asap

---------

Co-authored-by: Phin Wolkwitz <wolkwitz@pretix.eu>
Fix API-docs example for addon_to on order-change (#6451) 81f58456e5 
* Fix API-docs example for addon_to on order-change

* Update orders.rst
Add tests to prevent reintroducing CSP nonces (Z#23240534) (#6409) 958f75b109 
As discussed in PR #6387
log paypal payment durations (#6461) 4a28689690 
* log payment processing durations

* remove log noise

* fix attribute access

* remove debugging import
API: Allow to simulate check-ins (#6360) d08216d8c5 
* API: Allow to simulate check-ins

* Add missing file
Fix typo in devicesecurity blocking checkinrpc.annul (#6467) 5cf28f1b81
Fix performance issues in download reminder (#6393) f25c233e91 
* Fix performance issues in download reminder

* Update src/pretix/base/services/orders.py

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>

* Fixes after review

* Fix check in loop

---------

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Allow RelativeDate in relation to a moment of order (#6160) 7fe31634e6 
* initial implementation

* factor out _resolve_base_date

* add js to prevent illegal inputs

* fix tests

* Update src/pretix/base/reldate.py

Co-authored-by: Raphael Michel <michel@pretix.eu>

* Apply suggestions from code review

Co-authored-by: Raphael Michel <mail@raphaelmichel.de>

* move js includes of to fragment_js.html

* add type annotations

* moves logic from RelativeDateWrapper into RelativeDate and adds BaseChoice for configuring which models attributes support which relationship

* fix tests

* test upgrade behaviour

* Apply suggestions from code review

Co-authored-by: Raphael Michel <mail@raphaelmichel.de>

* move reldate.js include in correct file

* add OptionAttrsSelect to allow select options with their own attributes per value

* add a little bit of information to the tests for future reference

* rewrite reldate.js use data-attributes

* general cleanup

* add test for order.subevents cases

* use correct choice format

* remove order.subevent variants

* various cleanup

* Apply suggestions from code review

Co-authored-by: Raphael Michel <mail@raphaelmichel.de>

* remove empty docstrings

* add depreciation warning

* change event listener to pretix:bind-forms

---------

Co-authored-by: Raphael Michel <michel@pretix.eu>
Co-authored-by: Raphael Michel <mail@raphaelmichel.de>
Replace deprecated redis setex call 4e5fbacf6d
BasePaymentProvider & PayPal2: allow to cancel pending payments on a per payment basis (Z#23240966) (#6472) c4a5a9a84d 
* move payment into pending on PENDING_REVIEW webhook

* mark approved payment as pending

* extend BasePaymentProvider to gate aborting pending payments on a payment per payment basis

* add timeout to paypal after which a pending payment can be canceled

* formatting

* add missing negation

* cleanup abort_pending_allowed methods

* Apply suggestions from code review

Co-authored-by: pajowu <pajowu@pajowu.de>

* check all capture elements

* rename method and change defaults

* remove left over Constant

* flake8 .

---------

Co-authored-by: pajowu <pajowu@pajowu.de>
paypal change default for allow_retries_during_compliance_hold b8b02de283
Stripe/Wero: Do not send payment_method_data 488f731396
Revert "Stripe/Wero: Do not send payment_method_data" 7b1558b22e 
This reverts commit 488f731396.
Fix safari blocking widget opening error url in new tab (Z#23243124) (#6477) b241adb7d0 
* Fix safari blocking widget opening error url in new tab (Z#23243124)

* Fix autofocus in vue3 widget

autofocus no longer works as the elements are added dynamically

* fix eslint

* rename v-focus to v-autofocus

---------

Co-authored-by: Richard Schreiber <schreiber@rami.io>
Order-level questions (#6471) f8cc31b120 
* New CheckoutSession model, created and deleted throught cart lifetime but only used for order-level question answers so far
* Order-level QuestionAnswers (relations to CheckoutSession / Order)
* New container_type field on Question model to specify whether Question belongs to order or orderposition
* Order-level questions are currently experimental, UI is hidden behind feature flag

---------

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Fix typo in event’s default download reminder attendee (#6473) 4cb9d76281
Fix attendee addresses for country requiring state in address (#6480) 4dd6e1a19f
Fix sendmail/scheduled-mails preview event-based placeholders f9ea9de078 
* Fix sendmail/scheduled-mails placeholders

* Add event_or_subevent to context

* Add placeholders to tests

* fix and improve test

* Revert "fix and improve test"

This reverts commit 874a11e982.

* undo placeholder-tests

* add test
Add event_begin_time & event_end_time to scheduledmail templates (Z#23241932) (#6484) 1c17c35b16
Widget: fix hiding taxline when rate is 0 (Z#23243324) (#6486) 3c17d05d05
Widget: fix missing item-id in pricebox (Z#23243324) (#6485) eceeb9caa7
handle captures that are declined (PRETIXEU-F8X & PRETIXEU-F93) (#6482) 0b319d201c 
* handle captures that are declined

* handle failed captures not stored in sale

* further fixes

* fix tests
Fix widget not regenerating (#6474) 4969c12c0a 
* Fix widget not regenerating

Adds support for use_vite variant to updateassets management command and unifies widget generation code

* Simplify DEBUG-mode handling

* fix should_save if file does not exist

---------

Co-authored-by: Richard Schreiber <schreiber@rami.io>
Seating: Set subevents to None if event has no subevents for _seat_allowed annotation (Z#23243880) (#6487) 91a3993cef
Allow to set payment term per sales channel (#6459) 58f331ba1f 
* Allow to set payment term per sales channel

* Apply suggestion from @luelista

Co-authored-by: luelista <weller@rami.io>

---------

Co-authored-by: luelista <weller@rami.io>
Translations: Update French 7703c04954 
Currently translated at 99.8% (6380 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/

powered by weblate
Translations: Update French 011487404c 
Currently translated at 100.0% (260 of 260 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/fr/

powered by weblate
Translations: Update Swedish cb5182f21c 
Currently translated at 86.2% (5510 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/sv/

powered by weblate
Translations: Update Swedish b124cb6aad 
Currently translated at 98.4% (256 of 260 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/sv/

powered by weblate
Translations: Update Japanese 08356feea1 
Currently translated at 100.0% (6387 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Translations: Update Chinese (Traditional Han script) 1e78bfbc4c 
Currently translated at 88.4% (5647 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/zh_Hant/

powered by weblate
Translations: Update Italian d10afbd080 
Currently translated at 40.3% (2579 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian 266104f4af 
Currently translated at 42.5% (2720 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update French 2178dee6db 
Currently translated at 99.9% (6382 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/

powered by weblate
Translations: Update Japanese c1a830e54d 
Currently translated at 100.0% (6387 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Translations: Update Polish b7ac8fc4ef 
Currently translated at 89.3% (5706 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/pl/

powered by weblate
Translations: Update Italian 7db3b47889 
Currently translated at 43.3% (2767 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Chinese (Simplified Han script) 1ebbae2b5b 
Currently translated at 44.7% (2859 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/zh_Hans/

powered by weblate
Translations: Update Italian c79a7002a6 
Currently translated at 45.5% (2907 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian b74e2fa3e1 
Currently translated at 48.3% (3087 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian e38ae32028 
Currently translated at 51.4% (3287 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian 606e3f1c0f 
Currently translated at 99.6% (259 of 260 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/it/

powered by weblate
Translations: Update Italian 5a06f9416c 
Currently translated at 53.0% (3387 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Japanese f3e0e7f4ac 
Currently translated at 100.0% (6387 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Translations: Update Chinese (Simplified Han script) cf272bf575 
Currently translated at 44.7% (2861 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/zh_Hans/

powered by weblate
Translations: Update Italian a47768312b 
Currently translated at 57.5% (3676 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian 55a0db3a32 
Currently translated at 57.7% (3687 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian c73f2f77cf 
Currently translated at 59.2% (3787 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian 73c29fc3b9 
Currently translated at 60.1% (3842 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian 5622c1ddaa 
Currently translated at 60.7% (3877 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Translations: Update Italian 64a5361dba 
Currently translated at 60.8% (3887 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/it/

powered by weblate
Transmit invoices generated due to paymentprovider changes (Z#23242806) 0593172146
Update sentry-sdk requirement from ==2.66.* to ==2.68.* d481574d42 
Updates the requirements on [sentry-sdk](https://github.com/getsentry/sentry-python) to permit the latest version.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.66.0...2.68.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.68.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Sentry: enable_logs is removed d5a8d71ed3
Do not hide subevent list if filtered list is empty (#6460) b809d93bdc 
* Do not hide subevent list if filtered list is empty

* Event calendar: Allow to show a message if no events are found

* Apply suggestion from @luelista

Co-authored-by: luelista <weller@rami.io>

* Fix failures on org level

* add aria-hidden if no subevents

* Update src/pretix/base/settings.py

* Update src/pretix/base/settings.py

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>

---------

Co-authored-by: luelista <weller@rami.io>
Co-authored-by: Richard Schreiber <schreiber@rami.io>
Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Translations: Update Basque 5af9be6ef0 
Currently translated at 48.2% (3083 of 6387 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/

powered by weblate
Update po files 44a7bfceab 
[CI skip]

Signed-off-by: Raphael Michel <michel@pretix.eu>
Update po files 9f8ba28cda 
[CI skip]

Signed-off-by: Raphael Michel <michel@pretix.eu>
Fix typos b74371bef1
Fix typos and extend wordlist 2af60b499f
Translations: Update German 3fbd63e80a 
Currently translated at 100.0% (6421 of 6421 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German (informal) (de_Informal) bf85789efd 
Currently translated at 100.0% (6421 of 6421 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Update po files f476ce7696 
[CI skip]

Signed-off-by: Raphael Michel <michel@pretix.eu>
Translations: Update word list 4755e7af0e
Questions: add min-length to string/text type questions (#6488) 6d4aba6e3d 
* Questions: add min-length to string/text type questions

* fix test
API: fix writing old permissions on teams (#6489) dbd971cc22
API: fix tax rules create default handling (#6490) d7aae65777 
* API: fix tax rules create default handling

* fix flake8
Translations: Update German 4b4a301e6e 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German (informal) (de_Informal) 0a6b8c0493 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Translations: Update French 1414c22eb6 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/

powered by weblate
Translations: Update Spanish aa583a291f 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/

powered by weblate
Update protobuf requirement from ==7.35.* to ==7.36.* 19cd0a7f43 
Updates the requirements on [protobuf](https://github.com/protocolbuffers/protobuf) to permit the latest version.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-version: 7.36.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
SBOM creation and upload (#6499) 2e8e6a6b07 
* Build and upload SBOM

* Merge SBOMs

* Use official cli

* Remove matrix

* Merge SBOMs to array

* Use newer sbom-submit

* debug

* Remove debug

* Explicitly setup node

* Add npm location

* Add test

* REmove test call
CI: add tracing for e2e tests during failure (#6491) e6572344ca 
* collect and upload traces on failure

* include deps for pw install
Fix customer password reset rate limit (#6501) 023f9104ef
PayPal: validate that the sale has any captures before marking paid (#6498) 9d53cf840b 
* validate that the sale has any captures before marking paid

* code style
Add label-overrides to contact_form_fields_overrides and question_form_fields_overrides (Z#23244154) (#6504) 4390403b9a
Vite: Add dev CORS (#6511) a84a02c298
Widget: fix show taxline for 0 or 0.00 tax-rate (#6502) 58a58eff83
set the _required attribute on the ModelMultipleChoiceField (#6514) 7d93cae2a9 
setting _required forces the CheckoutFieldRenderer to add the "required" bit to the label.
We only need to remove it from the widget attrs to avoid the html input field validation that would force us to check every single box
VAT ID validation: Alternative API for German shops (#6507) caa6fb187b
Event calendar: consider events without products "not available" for filtering (#6515) dc7d5c6029 
* Event calendar: consider events without products "not available" for filtering

Also, drop the help text of the flag that is no longer accurate.

* Update src/pretix/presale/views/organizer.py

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>

---------

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Payment step: Allow to postpone payment choice on some sales channels (#6516) edb4069e18 
* Payment step: Allow to postpone payment choice on some sales channels

* Add tests

* handle payment provider (de-)selection and partial payments (#6526)

---------

Co-authored-by: Lukas Bockstaller <bockstaller@pretix.eu>
Event Settings: Make contact_url and imprint_url I18nURLField (Z#23238623) (#6506) 2c15d8b074 
* Event Settings: Make contact_url and imprint_url I18nURLField (Z#23238623)

* isort

* Update doc/api/resources/events.rst

---------

Co-authored-by: Raphael Michel <michel@pretix.eu>
Password reset: Prevent race condition that uses token twice (Z#23242132) (#6448) e91718e73b 
* Password reset: Prevent race condition that uses token twice

* Apply suggestion from @luelista

Co-authored-by: luelista <weller@rami.io>

---------

Co-authored-by: luelista <weller@rami.io>
CachedFileField: Bind file access to session (Z#23242301) (#6447) 42c5de895c 
* CachedFileField: Bind file access to session (Z#23242301)

* Apply suggestion from @luelista

Co-authored-by: luelista <weller@rami.io>

---------

Co-authored-by: luelista <weller@rami.io>
PDF editor: Harden cached file access for background (Z#23242291) (#6446) dd0d78242e
RRuleForm: allow selecting the fourth occurence of a weekday of a month (Z#23245893) 2aadfa2ce4 
The fourth often is the same as the last, but not always. A weekday can appear five times in a month
Widget: Add data-fix equivalent for attendee data (Z#23202714) (#6533) 3635f6fb0c 
* Widget: Add data-fix equivalent for attendee data (Z#23202714)

* Update src/pretix/presale/checkoutflow.py

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>

* Update src/pretix/presale/checkoutflow.py

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>

* Update src/pretix/presale/checkoutflow.py

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>

---------

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Update django-statici18n requirement from ==2.7.* to ==2.8.* (#6529) 23a3412154 
Updates the requirements on [django-statici18n](https://github.com/zyegfryed/django-statici18n) to permit the latest version.
- [Changelog](https://github.com/zyegfryed/django-statici18n/blob/main/docs/changelog.rst)
- [Commits](https://github.com/zyegfryed/django-statici18n/compare/v2.7.0...v2.8.0)

---
updated-dependencies:
- dependency-name: django-statici18n
  dependency-version: 2.8.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Product pictures: fix CSS to always fit image to viewport (#6527) 6025c7942f
Event index: Add subevent time and name to <title> (Z#23246174) (#6542) 50c00b47ae 
* Event index: Add subevent time and name to <title> (Z#23246174)

* Update src/pretix/presale/templates/pretixpresale/event/index.html

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>

---------

Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
sendmail: fix quadratic checkin query b78de6386b
sendmail: code cleanup c358f412fd
sendmail: small performance winds in checkin query fb948cc7f4
Fix incomplete warning message d9b5fa5b16
ESlint: Ignore vendored and pre-vue code (#6541) d85e52c83e 
* ESlint: Ignore vendored and pre-vue code

* Format pre-vue code with eslint where possible

---------

Co-authored-by: Kara Engelhardt <engelhardt@pretix.eu>
Translations: Update Japanese 96ed6fe1a6 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Translations: Update Portuguese (Brazil) 24e7db7ddd 
Currently translated at 92.4% (5937 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/pt_BR/

powered by weblate
Translations: Update Swedish 88bb1f4008 
Currently translated at 85.8% (5509 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/sv/

powered by weblate
Translations: Update Swedish b9b951e56b 
Currently translated at 98.0% (255 of 260 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/sv/

powered by weblate
Translations: Update Basque e399a49c8b 
Currently translated at 48.0% (3086 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/

powered by weblate
Translations: Update Japanese c05dee7af5 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ja/

powered by weblate
Add git-blame-ignore-revs file (see #6541) 742a69f09f
Widget: serve vite by default, origin-whitelist for vue2 (#6403) 86cc719651
Discounts: Fix ManyToMany fields when cloning (#6547) 1aea5633eb
Show payment-QR-codes on mobile (#6503) c7290b614e
Phone number input: Fix workaround for prefixes shared between countries (fixes #6544) (#6545) eab1efd5f4 
* Phone number input: Fix workaround for prefixes shared between countries (fixes #6544)

* Update src/pretix/base/forms/questions.py

Co-authored-by: pajowu <engelhardt@pretix.eu>

---------

Co-authored-by: pajowu <engelhardt@pretix.eu>
[A11y] Form JavaScript: Support for <button formnovalidate> (#6536) 4a9da40028
PDF reports: Fix headers for overlong event names (Z#23239566) (#6521) ce3e59e020
Force Django update c240ebcb8e
sendmail: fix query performance when filtering on checkin (Z#23244045) 47096f7f1b
Voucher list: Add budget and budget used to CSV export (Z#23237857) (#6520) bcacff2ee7 
* Voucher list: Add budget and budget used to CSV export (Z#23237857)

* Fix failing test
Bump smol-toml from 1.6.1 to 1.7.1 (#6546) 8b10534c74 
Bumps [smol-toml](https://github.com/squirrelchat/smol-toml) from 1.6.1 to 1.7.1.
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](https://github.com/squirrelchat/smol-toml/compare/v1.6.1...v1.7.1)

---
updated-dependencies:
- dependency-name: smol-toml
  dependency-version: 1.7.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update pypdf requirement from ==6.5.* to ==6.11.* (#6176) efdc83f72a 
* Update pypdf requirement from ==6.5.* to ==6.11.*

Updates the requirements on [pypdf](https://github.com/py-pdf/pypdf) to permit the latest version.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/py-pdf/pypdf/compare/6.5.0...6.11.0)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.11.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Try to adjust code

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@rami.io>
Hotfix for JS issue when submit() is called from JS 6c40daa863
PDF: fix inline merge_background on fg_pdf instead of its own PdfWriter (#6555) 689b99c3aa 
* PDF: fix inline merge_background on fg_pdf instead of its own PdfWriter

* fix pdf_header

* fix flake8
Fix deanonymizing emails with multiple dots (#6559) 3648ef28d7
Invoice export: Add transmission-specific data (Z#23239732) (#6522) d3cbfcd4da
Update sentry-sdk requirement from ==2.68.* to ==2.69.* (#6556) ca77467e48 
Updates the requirements on [sentry-sdk](https://github.com/getsentry/sentry-python) to permit the latest version.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.68.0...2.69.1)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.69.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update pyjwt requirement from ==2.13.* to ==2.14.* (#6557) e2a78100af 
Updates the requirements on [pyjwt](https://github.com/jpadilla/pyjwt) to permit the latest version.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.13.0...2.14.0)

---
updated-dependencies:
- dependency-name: pyjwt
  dependency-version: 2.14.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Translations: Update German 7143b877c8 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Update django-countries requirement from ==9.0.* to ==9.1.* (#6562) 289cbe5bfc 
Updates the requirements on [django-countries](https://github.com/SmileyChris/django-countries) to permit the latest version.
- [Changelog](https://github.com/SmileyChris/django-countries/blob/main/CHANGES.md)
- [Commits](https://github.com/SmileyChris/django-countries/compare/v9.0.0...v9.1.0)

---
updated-dependencies:
- dependency-name: django-countries
  dependency-version: 9.1.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Fix missing translatable field label 8e39b67ee9
PDF: use artbox before trimbox before mediabox from background-PDF as size for canvas 7fc527135d
pdf: calculate sizebox based on cropbox and mediabox 82cffd1519
PDF: Fix background page being rotated multiple times df69656364 
transfer_rotation_to_content (or rather add_transformation/replace_content) do not properly duplicate the contentstream they're modifying. this means that if you pass a pdf-level copy of the same bg_page multiple times, the content will be rotated multiple times but the rotation-property ('/Rotate') will only be changed for the first page

pypdfs docs explicitly say that you should not to add_transformation + merge, but instead use merge_transformed_page, which this now does for everything
Money representation in templates: Allow more precision (#6454) aa14505d2c 
* Money representation in templates: Allow more precision

When rendering money in templates, we used to have the following logic:

- When the decimal places fit the currency, render with Babel
- When they don't, e.g. we stored 123.67 JPY, even though there are no
  fractional Yens, render without Babel with a custom format, but render
  the fractional Yens because we'd rather *show* wrong data and make the
  bug obvious than hide it.

However, we only did that up to a prevision of two places, we never
showed more. This is still sufficient for core pretix, but we have
plugins that need to operate in fractional cents. Also, we CAN render
everything through babel for consistent formatting.

There is one **risk**: This might cause weird results on SQLite. Since
SQLite has no concept of precise decimal math, results of in-SQL
computations can sometimes experience floating point errors and show
with A LOT of decimal palces. This used to be invisible since the UI
performed the rounding. With this PR – not any more. We'll need to see
how annoying it is, but it should only affect development mode.

This PR also fixes a bug in tax_rate_format that for some reason did not
do what it was supposed to do, even though I tested it back then, weird.
Might even be a Python version thing?

* Update src/pretix/base/templatetags/money.py

Co-authored-by: pajowu <engelhardt@pretix.eu>

* Apply suggestion from @pajowu

Co-authored-by: pajowu <engelhardt@pretix.eu>

* Fix typing stuff

* Fix precision issue

---------

Co-authored-by: pajowu <engelhardt@pretix.eu>
Update fakeredis requirement from ==2.37.* to ==2.38.* (#6563) bfbabe0e58 
Updates the requirements on [fakeredis](https://github.com/cunla/fakeredis-py) to permit the latest version.
- [Release notes](https://github.com/cunla/fakeredis-py/releases)
- [Commits](https://github.com/cunla/fakeredis-py/compare/v2.37.0...v2.38.0)

---
updated-dependencies:
- dependency-name: fakeredis
  dependency-version: 2.38.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bump @humanfs/node from 0.16.7 to 0.16.8 (#6517) aa90c5b3b1 
Bumps [@humanfs/node](https://github.com/humanwhocodes/humanfs/tree/HEAD/packages/node) from 0.16.7 to 0.16.8.
- [Release notes](https://github.com/humanwhocodes/humanfs/releases)
- [Changelog](https://github.com/humanwhocodes/humanfs/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/humanwhocodes/humanfs/commits/node-v0.16.8/packages/node)

---
updated-dependencies:
- dependency-name: "@humanfs/node"
  dependency-version: 0.16.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bump postcss-selector-parser from 7.1.1 to 7.1.5 (#6513) 6bbd808aaa 
Bumps [postcss-selector-parser](https://github.com/postcss/postcss-selector-parser) from 7.1.1 to 7.1.5.
- [Release notes](https://github.com/postcss/postcss-selector-parser/releases)
- [Changelog](https://github.com/postcss/postcss-selector-parser/blob/main/CHANGELOG.md)
- [Commits](https://github.com/postcss/postcss-selector-parser/compare/v7.1.1...7.1.5)

---
updated-dependencies:
- dependency-name: postcss-selector-parser
  dependency-version: 7.1.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update cryptography requirement from >=50.0.0 to >=50.0.1 (#6509) 1741d08c2c 
Updates the requirements on [cryptography](https://github.com/pyca/cryptography) to permit the latest version.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/50.0.0...50.0.1)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Update isort requirement from ==8.0.* to ==9.0.* (#6510) c0474604a1 
* Update isort requirement from ==8.0.* to ==9.0.*

Updates the requirements on [isort](https://github.com/PyCQA/isort) to permit the latest version.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/8.0.0...9.0.1)

---
updated-dependencies:
- dependency-name: isort
  dependency-version: 9.0.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

* Run isort

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@pretix.eu>
Translations: Update Thai 688c434c4f 
Currently translated at 37.1% (2387 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update Catalan 0eaa5a081c 
Currently translated at 29.4% (1892 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ca/

powered by weblate
Update pypdf requirement from ==6.11.* to ==6.19.* (#6570) 0bc1aed1a0 
* Update pypdf requirement from ==6.11.* to ==6.18.*

Updates the requirements on [pypdf](https://github.com/py-pdf/pypdf) to permit the latest version.
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](https://github.com/py-pdf/pypdf/compare/6.11.0...6.18.1)

---
updated-dependencies:
- dependency-name: pypdf
  dependency-version: 6.18.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update pyproject.toml

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Checkout: Fix VAT ID revalidation after country change (#6575) bc0a6b662b
Plugin configuration: Allow organizers to see all events (#6576) 5c6b0eef6f
Event metadata: Fix server-side validation of write protection (#6578) 365051cc21
InvoiceShredder: Fix shredding of new fields (#6577) 29614db1e2 
* InvoiceShredder: Fix shredding of new fields

* Update src/pretix/base/migrations/0311_fix_unshredded_invoices.py
2FA: Show info on throttled request (#6581) d77a179606 
* 2FA: Show info on throttled request

* Round up the time
Offset refund: Do not allow to offset to order without access to e5c44e7aed
Merge branch 'refund-offset-perm-check' into 'master' 58023381b9 
Offset refund: Do not allow to offset to order without access to

See merge request pretix/pretix!52
Refund form: Do not allow individual negative amounts (#6579) 7d7474c07d
Customer area: Hide password change link for SSO users (fixes #6572) (#6580) a826b0a1bd
Prevent Sentry SDK from being loaded during tests 3029a6839b
Conditionally import sentry SDK during error page rendering b3e0892d76
Delete PayPal integration v1 (#6530) 59026da06b 
* Delete PayPal integration v1

Leaving only migrations behind

* Try to fix CI

* Fix tests some more

* Rename more plugin name instances in tests and docs

---------

Co-authored-by: Martin Gross <martin@pc-coholic.de>
Translations: Update Thai 71b6bf630f 
Currently translated at 45.6% (2930 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update Thai 1af0b5e442 
Currently translated at 51.8% (3330 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update Thai 993a3f96e9 
Currently translated at 52.1% (3346 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update Thai f3068e627a 
Currently translated at 52.2% (3356 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Email settings: Collapse attendee texts if unused (Z#23243417) (#6535) 81764278ae
Voucher API: Add search parameter (Z#23240589) (#6523) b8e1ab8258
Event header: Remove date directly above other date (Z#23245589) (#6524) 0723e6015c 
* Event header: Fix wrapping of date in h2 header (Z#23245589)

This was already correct if the header was a h1

* Revert "Event header: Fix wrapping of date in h2 header (Z#23245589)"

This reverts commit 3d25316fe3.

* Event header: Remove date directly above other date

This removes the date from the <h2> option used when a header image is
uploaded and the header should still be shown. Rendering the date here
makes little sense, since the infobox with the date is always just a few
lines below. It still makes sense for the <h1> option where it becomes
part of the site header.
Product list: Fix edge case in dependent availabilities (Z#23243701) (#6532) 69e541e5af
User details: Show list of 2FA devices and allow to reset drift (#6569) 806d0a5748 
* User details: Show list of 2FA devices

* Add reset button

* Reset throttle

* Refactoring

* Fix delete paths in tests
API: Add additional tests for modifying meta data (Z#23247634) b8f8e49cce
Translations: Update Thai d353384555 
Currently translated at 53.0% (3407 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translate OAuth buttons (#6590) 9324887790 
* Translate OAuth buttons

* Revert .po changes
Organizer API: Add endpoint for event-meta-properties 9aeb4b9731 
* Add API-endpoint for event-meta-properties

* Add new doc-file to index, fix spelling and description

* Fix logentry

* Fix logentry again

* validate and add tests

* add meta_properties from organizer only

* fix choices validation

* filter unknown keys from choices due to django-formsets

* Apply batched suggestions from code review

Co-authored-by: Richard Schreiber <wiffbi@gmail.com>

* add safe-guard normalization to None to to_representation

* Apply batched suggestions from code review

Co-authored-by: Raphael Michel <mail@raphaelmichel.de>

* update tests to check for error-messages as well

* fix flake8

* fix permission tests

* Make ObjectListField more flexibel for re-use

* fix validation result

* Improve validation

* Change to I18nField for validation

* update MetaPropertyDictField

* fix docs for i18n strings

* make label_child configurable if MetaPropertyDictField should contain non-localized stuff

* undo test changes in events test

* fix flake8

* Apply batched suggestions from code review

Co-authored-by: Raphael Michel <mail@raphaelmichel.de>

* improve code formatting

---------

Co-authored-by: Richard Schreiber <schreiber@rami.io>
Co-authored-by: Richard Schreiber <schreiber@pretix.eu>
Co-authored-by: Richard Schreiber <wiffbi@gmail.com>
Co-authored-by: Raphael Michel <mail@raphaelmichel.de>
Widget: fix calendar view showing old events due to non-unique key (Z#23247433) (#6585) ed68719731 
* Widget: fix calendar view showing old events due to cache-key (Z#23247433)

* Update EventCalendarCell.vue
Celery: Fix missing log if workers are recycled due to RAM usage (#6588) 2791d5e49e
Add pdf render tests (#6566) 2af8d29ca9 
* Add pdf tests

* pdf tests: Save temporary pdfs for failed test debugging

* Review comments
Control: do not fail on missing reason when user confirm (#6602) b06c9ef463
Monkeypatch stock csrfmiddleware (#6401) 7e1e472691 
* Monkeypatch stock csrfmiddleware

* Add test for ensure_csrf_cookie
Use fragment_product_list in voucher redemption view (Z#23246929) (#6567) 558bf910fd 
* Use fragment_product_list in voucher redemption view (Z#23246929)

* Formatting

* Fix usage in templates

* Review comments

* handle form prefix in fragment_product_list.html

---------

Co-authored-by: Raphael Michel <michel@pretix.eu>
Fix API documentation bug ca40b09080
PayPal2: Drop maximum length of client ID (Rel: #6424) 2ebdd048c2
Fix crash on too old time machine date (Z#23245824) (#6599) c875d758f9 
* Fix crash on too old time machine date (Z#23245824)

dateutil.parser seems to reject dates with second-precision timezone-offsets, which datetime produces for some dates aroung the year 200. datetime.fromisoformat has no problem parsing them

* Review comments

* Add min date
Remove Vue2-based widget (#6610) df74cbf5fc 
* Remove Vue2-based widget

* move floatformat.js

* Delete docready.js

* Update widget.py
Fix typo: then -> than (#6615) 4b320b6dab
Update flake8 requirement from ==7.3.* to ==7.4.* (#6609) b68c324389 
Updates the requirements on [flake8](https://github.com/pycqa/flake8) to permit the latest version.
- [Commits](https://github.com/pycqa/flake8/compare/7.3.0...7.4.1)

---
updated-dependencies:
- dependency-name: flake8
  dependency-version: 7.4.1
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bump markdown from 3.10.3 to 3.11 (#6608) b249c7b417 
Bumps [markdown](https://github.com/Python-Markdown/markdown) from 3.10.3 to 3.11.
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.10.3...3.11.0)

---
updated-dependencies:
- dependency-name: markdown
  dependency-version: '3.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Banktransfer: Make actionvie atomic (Z#23246414) (#6604) 43e5b62db3
Plugin List: Apply search filter if prefilled by browser (#6543) 3440ee16f2 
* Plugin List: Apply searchfilter if prefilled by browser

Browsers often prefill the form fields, e.g. with their old content when reloading or going back from the previous page. However these filters were not applied until you changed one of the form fields

* Fix linting errors in plugins.js

* Apply review suggestions
Always base64-encode email attachments (Z#23242540) (#6476) ff4d3cd403 
It might sound unneccesary to base64-encode plaintext attachments, but some smtp providers modify them otherwise
Revert "Always base64-encode email attachments (Z#23242540) (#6476)" ae9a744fd9 
This reverts commit ff4d3cd403.
[SECURITY] Fix checkout validation bypass (CVE-2026-101266, Z#23245008) d43032274b
[SECURITY] Fix information leak in widgets.json on dashboard (CVE-2026-101267, Z#23247172) 48f5a7c8cc 
Thanks to Wenhao Wu, Southeast University
[SECURITY] Fix customer session fixation on cross-domain login (CVE-2026-101268, Z#23247268) ae9bb68645
[SECURITY] Escape help texts (CVE-2026-101270) b1ae638394
[SECURITY] OAuth: Disable existing tokens when deactivating Application (CVE-2026-101271, Z#23247296) 4edd3c4654
Fix inefficient loop in compute_validity (Z#23245937 / PRT-013) c7d6630979
Fix potential infinite loop in pdf render (Z#23245937 / PRT-021) 9c0fef3d72
Prevent parsing non-standard-compliant JSON float values (Z#23245937 / PRT-021) d78d5b52fa
Block out of bounds image crop dimensions (Z#23245937 / PRT-009) bbf391f7d5
[SECURITY] API: Fix session validation for uploaded files (CVE-2026-101269, Z#23247174) 74332faa7b
Fix customer logout when: d2b58d428e 
- event on custom domain (MODE_EVENT_DOMAIN or MODE_ORG_ALT_DOMAIN)
- organizer on system domain
Fix redirect to customer login page when: e54cd6af44 
- event on custom domain (MODE_EVENT_DOMAIN or MODE_ORG_ALT_DOMAIN)
- organizer on system domain
Fix various redirects for events on MODE_ORG_ALT_DOMAIN 2ba74b1697
Translations: Update Thai fa40ccc623 
Currently translated at 55.9% (3593 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update Spanish 149b4f23aa 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/

powered by weblate
Translations: Update Thai 649eee3025 
Currently translated at 65.8% (4230 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update Thai 12d405d861 
Currently translated at 69.5% (4463 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update Thai 695689ed06 
Currently translated at 98.8% (257 of 260 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/th/

powered by weblate
Translations: Update Thai e9f89d5d92 
Currently translated at 70.0% (4494 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Update sentry-sdk requirement from ==2.69.* to ==2.70.* (#6600) 5802153101 
Updates the requirements on [sentry-sdk](https://github.com/getsentry/sentry-python) to permit the latest version.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](https://github.com/getsentry/sentry-python/compare/2.69.0...2.70.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.70.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Add missing licenseheader 470621b5cb
Fix linter errors eeea01b31a
Presale: add js-helper to disable submit for x seconds (#6592) 6a380c9356 
* Presale: add js-helper to disable submit for x seconds

* Remove disabled-class from button, if any

* Use Intl.RelativeTimeFormat for time formatting
Add HERMA 9012 90 x 90mm Badge format (Z#23248189) (#6619) 3c95f1fee7
Scheduled export: Fix copying of email subject and text (Z#23221224) (#6616) cb15559ac6
Hotfix: Perform validation on the selected step, not on all steps before d339e1d594
Translations: Update Russian eb9d6ad9a3 
Currently translated at 20.0% (1285 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ru/

powered by weblate
Translations: Update Russian 5ce2957965 
Currently translated at 20.0% (1285 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ru/

powered by weblate
Translations: Update Thai 582f9ac642 
Currently translated at 81.1% (5206 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
Translations: Update French 33df9d13be 
Currently translated at 100.0% (6419 of 6419 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/

powered by weblate
Update po files da6753b53f 
[CI skip]

Signed-off-by: Raphael Michel <michel@pretix.eu>
Email: always use quoted-printable (#6617) 7bdb2c1555
Translations: Update wordlist 9718d1ee83
Translations: Update German ca9d9faef4 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German (informal) (de_Informal) fa60c320b9 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Translations: Update German 6ff37796c3 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German (informal) (de_Informal) 6c83b4288a 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Translations: Update German 3328dc28c7 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German e4782ff217 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German d1186c83ef 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German 7547d64dea 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German 8601f62581 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
Translations: Update German (informal) (de_Informal) 824624cce6 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Translations: Update German (informal) (de_Informal) ba9bba49c6 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Translations: Update German (informal) (de_Informal) b4d000379c 
Currently translated at 100.0% (6442 of 6442 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
Update pyjwt requirement from ==2.14.* to ==2.15.* (#6620) a388391f06
DE: Update Wordlist 89318bcc24
Revert "DE: Update Wordlist" fc3150fecc 
This reverts commit 89318bcc24.
Bump version to 2026.8.0 f7863c9fee
Merge branch 'master' into upstream/2026.8.0
Build Deploy email notification tool / Apply-Kubernetes-Resources (push) Successful in 1m34s
Details
fdde93c8d3
simon merged commit 35655a4036 into master 2026-10-03 20:10:44 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Assignees
Clear assignees
LucFelicio (Luc Felicio) philipp (Philipp Kern) simon (Simon J)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: CGM_Public/pretix_cgo#22