Raphael Michel
ceff9de5ee
Customer step: Fix login URL for SSO in weird domain setup ( #6687 )
...
The current code links to a 404 page if the event has a custom domain
but the organizer uses the default system domain.
2026-11-10 14:44:48 +01:00
Lukas Bockstaller
38b467cef7
Add option to auto transmit invoices after modification by the customer (Z#23251416) ( #6713 )
...
* Add option to auto transmit invoices after modification by the customer
* Add caveat for peppol etc. to setting help text
* auto retransmit invoices after change
* code style
2026-11-10 14:41:19 +01:00
Raphael Michel
ae95df7ea2
Merge branch 'ticketoutputpdf-security' into 'master'
...
[SECURITY] Fix missing permission check for ticket layout API (CVE-2026-125744)
See merge request pretix/pretix!60
2026-11-10 13:54:25 +01:00
d362f16417
Documentation for questionnaires API changes ( #6704 )
...
* Add docs pages, deprecation notes
* Add data field docs
* Items personalized deprecation
* Move paragraph
* fix indentation
* Document questionnaires resource
* Apply batched suggestions from code review
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
Co-authored-by: luelista <mira@teamwiki.de >
* rename to order_presale / position_presale
* _presale -> _purchase
* children -> rows
* change datafields API endpoint URLs
* removal of question change api endpoints
* update answers objects
* add print_on_invoice_label
* document restrictions
* Update personalized attribute
* fix inconsistent type
* Update doc/api/resources/datafields.rst
Co-authored-by: Raphael Michel <michel@pretix.eu >
* rename dependency_question -> dependency_datafield, document label/help_text fields for static text blocks
* add print_on_invoice_label to examples
* Add markers for new features
---------
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
Co-authored-by: Raphael Michel <michel@pretix.eu >
Co-authored-by: Raphael Michel <michel@rami.io >
2026-11-10 13:21:50 +01:00
Raphael Michel
7f1a0fd58f
[SECURITY] Fix missing permission check for ticket layout API (CVE-2026-125744)
2026-11-10 13:13:31 +01:00
Martin Gross
6d05cfea8b
Badges: Add Herma 9010 (Z#23253294) ( #6759 )
2026-11-10 12:29:47 +01:00
pajowu
c1b8259075
Replace deprecated chained @classmethod ( #6757 )
2026-11-10 12:14:28 +01:00
pajowu
e394054ae3
Fix duplicate default check in TicketLayoutSerializer ( #6748 )
2026-11-06 12:24:33 +01:00
Raphael Michel
dda2a18fdf
Week calendar: Fix navigation after dateutil 4.0 upgrade ( #6746 )
2026-11-06 10:03:55 +01:00
dependabot[bot]
68bd182f79
Bump arabic-reshaper from 3.0.1 to 3.1.0 ( #6744 )
...
Bumps [arabic-reshaper](https://github.com/mpcabd/python-arabic-reshaper ) from 3.0.1 to 3.1.0.
- [Release notes](https://github.com/mpcabd/python-arabic-reshaper/releases )
- [Commits](https://github.com/mpcabd/python-arabic-reshaper/compare/v3.0.1...v3.1.0 )
---
updated-dependencies:
- dependency-name: arabic-reshaper
dependency-version: 3.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-05 20:03:54 +01:00
dependabot[bot]
2ee6ea7692
Update pytest-asyncio requirement from >=1.4.1 to >=1.4.1.post1 ( #6743 )
...
Updates the requirements on [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio ) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases )
- [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.4.1...v1.4.1.post1 )
---
updated-dependencies:
- dependency-name: pytest-asyncio
dependency-version: 1.4.1.post1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-05 20:03:22 +01:00
dependabot[bot]
a37305f8f4
Update flake8 requirement from ==7.4.* to ==7.5.* ( #6745 )
...
Updates the requirements on [flake8](https://github.com/pycqa/flake8 ) to permit the latest version.
- [Commits](https://github.com/pycqa/flake8/compare/7.4.0...7.5.0 )
---
updated-dependencies:
- dependency-name: flake8
dependency-version: 7.5.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-05 20:02:57 +01:00
Richard Schreiber
bd4b049c16
Fix parameters for localization of SeatProtected errors ( #6740 )
2026-11-05 15:39:03 +01:00
Phin Wolkwitz
cb852a8fa7
Fix itemcount in list beneath cart in event series (Z#23251632) ( #6727 )
2026-11-05 13:03:44 +01:00
Richard Schreiber
86dd5619e0
Move JavaScript importmap to top ( #6734 )
2026-11-05 12:39:21 +01:00
pajowu
b1a1d66156
ticketoutputpdf api: save background to permanent file ( #6735 )
2026-11-05 10:33:08 +01:00
pajowu
e229697d2a
Fix changing sold-out addons if hide_sold_out is set ( #6714 )
...
The old item was shown in the frontend and you could de-select it, but this change was never applied
2026-11-04 20:37:05 +01:00
dependabot[bot]
f9c7378da7
Update fakeredis requirement from ==2.39.* to ==2.40.* ( #6737 )
...
Updates the requirements on [fakeredis](https://github.com/cunla/fakeredis-py ) to permit the latest version.
- [Release notes](https://github.com/cunla/fakeredis-py/releases )
- [Commits](https://github.com/cunla/fakeredis-py/compare/v2.39.0...v2.40.0 )
---
updated-dependencies:
- dependency-name: fakeredis
dependency-version: 2.40.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 20:21:03 +01:00
dependabot[bot]
86152a182a
Update python-dateutil requirement from ==3.0.* to ==4.0.* ( #6736 )
...
Updates the requirements on [python-dateutil](https://github.com/dateutil/dateutil ) to permit the latest version.
- [Release notes](https://github.com/dateutil/dateutil/releases )
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS )
- [Commits](https://github.com/dateutil/dateutil/compare/3.0.0...4.0.0 )
---
updated-dependencies:
- dependency-name: python-dateutil
dependency-version: 4.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 20:20:12 +01:00
dependabot[bot]
76899600b0
Update pytest-asyncio requirement from >=1.4.0 to >=1.4.1 ( #6739 )
...
Updates the requirements on [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio ) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases )
- [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.4.0...v1.4.1 )
---
updated-dependencies:
- dependency-name: pytest-asyncio
dependency-version: 1.4.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 20:17:40 +01:00
pajowu
04a0b009a6
Accept a list of sales_channels in (Sub)Event.annotated, filter_available (Z#23252067) ( #6723 )
2026-11-04 18:49:19 +01:00
pajowu
4e9d60d238
Fix tests loading local pretix.cfg ( #6705 )
...
test/sqlite.cfg does not exist, so pretix.testutils.settings never set PRETIX_CONFIG_FILE, leading to pretix.settings loading the local pretix.cfg
Not setting VITE_DEV_MODE outside CI only worked because most devs probably have set django.debug=on in their pretix.cfg
2026-11-04 17:44:11 +01:00
Raphael Michel
fe0d0ceb2e
Drop importlib_metadata dependency ( #6720 )
...
No longer needed as a polyfill and starts to break things
2026-11-04 17:44:02 +01:00
dependabot[bot]
8457603555
Update sphinx requirement from ==9.1.* to ==9.0.* ( #6731 )
...
Updates the requirements on [sphinx](https://github.com/sphinx-doc/sphinx ) to permit the latest version.
- [Release notes](https://github.com/sphinx-doc/sphinx/releases )
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/v9.0.4/CHANGES.rst )
- [Commits](https://github.com/sphinx-doc/sphinx/compare/v9.1.0rc1...v9.0.4 )
---
updated-dependencies:
- dependency-name: sphinx
dependency-version: 9.0.4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 09:52:27 +01:00
dependabot[bot]
ae35af596f
Update tlds requirement from >=2026093003 to >=2026102900 ( #6729 )
...
Updates the requirements on [tlds](https://github.com/kichik/tlds ) to permit the latest version.
- [Commits](https://github.com/kichik/tlds/commits )
---
updated-dependencies:
- dependency-name: tlds
dependency-version: '2026102900'
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 09:52:20 +01:00
Christiaan de Die le Clercq
47c3493372
Translations: Update Dutch
...
Currently translated at 96.9% (6255 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl/
powered by weblate
2026-11-04 09:52:05 +01:00
Isaac Raño
85d65d17b4
Translations: Update Galician
...
Currently translated at 18.7% (1209 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/gl/
powered by weblate
2026-11-04 09:52:05 +01:00
vihumelo
e50c845e09
Translations: Update Portuguese (Brazil)
...
Currently translated at 98.8% (257 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/pt_BR/
powered by weblate
2026-11-04 09:52:05 +01:00
vihumelo
c84d9061da
Translations: Update Portuguese (Brazil)
...
Currently translated at 92.9% (5995 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/pt_BR/
powered by weblate
2026-11-04 09:52:05 +01:00
CVZ-es
25c9659655
Translations: Update Spanish
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/
powered by weblate
2026-11-04 09:52:05 +01:00
CVZ-es
b6bce961c3
Translations: Update French
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/
powered by weblate
2026-11-04 09:52:05 +01:00
Mie Frydensbjerg
1de0455ebc
Translations: Update Danish
...
Currently translated at 62.1% (4009 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/
powered by weblate
2026-11-04 09:52:05 +01:00
dependabot[bot]
9fdafa57de
Update reportlab requirement from ==5.0.* to ==5.1.* ( #6730 )
...
Updates the requirements on [reportlab](https://www.reportlab.com/ ) to permit the latest version.
---
updated-dependencies:
- dependency-name: reportlab
dependency-version: 5.1.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 09:51:36 +01:00
50bcfc8c74
OIDC: Expose SSO attributes to customer_signed_in signal ( #6603 )
...
* OIDC: Expose SSO attributes to customer_signed_in signal
* Change OIDC claim name
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
* Document the changed signature of the customer_signed_in signal
* Put docs on right signal
* Fix test assertions
---------
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
Co-authored-by: Raphael Michel <michel@rami.io >
2026-11-04 09:48:03 +01:00
Raphael Michel
fa552fe7d1
Permissions: Add helptext for outgoingmails:read (Z#23251039) ( #6707 )
2026-11-04 09:20:29 +01:00
dependabot[bot]
cbfc24dd64
Update css-inline requirement from ==0.22.* to ==0.23.* ( #6683 )
...
Updates the requirements on [css-inline](https://github.com/Stranger6667/css-inline ) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/css-inline/releases )
- [Changelog](https://github.com/Stranger6667/css-inline/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Stranger6667/css-inline/compare/c-v0.22.0...c-v0.23.0 )
---
updated-dependencies:
- dependency-name: css-inline
dependency-version: 0.23.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-03 17:21:28 +01:00
dependabot[bot]
6e0c2d69a5
Bump pycparser from 3.11 to 3.12 ( #6701 )
...
Bumps [pycparser](https://github.com/eliben/pycparser ) from 3.11 to 3.12.
- [Release notes](https://github.com/eliben/pycparser/releases )
- [Commits](https://github.com/eliben/pycparser/compare/release_v3.11...release_v3.12 )
---
updated-dependencies:
- dependency-name: pycparser
dependency-version: '3.12'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-03 17:19:46 +01:00
dependabot[bot] and Raphael Michel
34ed175abe
Update dnspython requirement from ==2.8.* to ==2.9.* ( #6671 )
...
* Update dnspython requirement from ==2.8.* to ==2.9.*
Updates the requirements on [dnspython](https://github.com/rthalley/dnspython ) to permit the latest version.
- [Release notes](https://github.com/rthalley/dnspython/releases )
- [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst )
- [Commits](https://github.com/rthalley/dnspython/compare/v2.8.0rc1...v2.9.0 )
---
updated-dependencies:
- dependency-name: dnspython
dependency-version: 2.9.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* Update pyproject.toml
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@pretix.eu >
2026-11-03 17:19:17 +01:00
dependabot[bot]
a9aaf8638e
Update pytest-mock requirement from ==3.16.* to ==3.17.* ( #6715 )
...
Updates the requirements on [pytest-mock](https://github.com/pytest-dev/pytest-mock ) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases )
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.16.0...v3.17.0 )
---
updated-dependencies:
- dependency-name: pytest-mock
dependency-version: 3.17.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-03 17:18:21 +01:00
Raphael Michel and Raphael Michel
a613affa05
Sentry: Scrub secrets from event details ( #6218 )
...
* Sentry: Scrub secrets from event details
* Apply suggestions from code review
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
2026-11-03 16:45:35 +01:00
Raphael Michel
cd0ed78b76
Tests: Do not rely on actual DNS for peppol validation ( #6711 )
2026-11-03 16:44:31 +01:00
Raphael Michel
4889abd75c
PDF editor: Warn about missing scannable QR code ( #6726 )
...
* PDF editor: Warn about missing scannable QR code
* Fix
2026-11-03 16:43:59 +01:00
Raphael Michel
0a73faa8bd
Bump to i18nfield 1.12.0
2026-11-03 10:38:37 +01:00
Tobias Kunze
def5042661
Ignore spaces in bank transfer queries ( #6724 )
...
When copying an order code from e.g. the order list, it's easy to
include spaces when pasting, and then this does not match anything. And
as the JavaScript side of the search *does* compare the stripped string
(normalizeQuery), just deleting the whitespace does not trigger the
order to be found either, you have delete one more letter.
2026-11-03 09:12:38 +01:00
Richard Schreiber
e6f8f178af
Extend log_action filter and make recursive (Z#23247315) ( #6598 )
...
* Extend log_action filter and make recursive
* fix flake8
* fix type mismatch
* add "salt" to sensitive keys
* match "key" (e.g. see payone)
* add "auth" to sensitive keys
* clean lists recursively
* improve clean method name as it also cleans list recursively
* Add test
2026-10-29 10:52:00 +01:00
Raphael Michel
5f5380e8b1
Bump version to 2026.10.0.dev0
2026-10-29 09:59:11 +01:00
Raphael Michel
ff102d561d
Bump version to 2026.9.0
v2026.9.0
2026-10-29 09:59:06 +01:00
Raphael Michel
1c7d0233fd
Fix test failure after security patch
2026-10-28 14:41:38 +01:00
Raphael Michel
936977972e
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2026-10-28 12:15:10 +01:00
Raphael Michel
46f2baa103
Translations: Update German
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2026-10-28 12:15:10 +01:00