Raphael Michel
15d4676f98
Bump version to 2026.6.0.dev0
2026-05-27 18:16:01 +02:00
Raphael Michel
dfd388ddeb
Bump version to 2026.5.0
v2026.5.0
2026-05-27 18:15:48 +02:00
Raphael Michel
8af010e5b7
Update po files
...
[CI skip]
Signed-off-by: Raphael Michel <michel@rami.io >
2026-05-27 17:49:23 +02:00
Raphael Michel
4f4ea01bc0
Untranslate vite setting
2026-05-27 17:47:17 +02:00
Raphael Michel
9e4cbcb372
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6304 of 6304 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2026-05-27 17:47:09 +02:00
Raphael Michel
07d7264bc6
Translations: Update German
...
Currently translated at 100.0% (6304 of 6304 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2026-05-27 17:47:09 +02:00
Raphael Michel
f3b3eba8b3
Update po files
...
[CI skip]
Signed-off-by: Raphael Michel <michel@rami.io >
2026-05-27 16:47:27 +02:00
Raphael Michel
a75dbb5d62
SSRF protection: Block requests to CGNAT addresses (Z#23235334) ( #6220 )
2026-05-27 16:45:11 +02:00
dependabot[bot]
254f46d991
Update pytest-asyncio requirement from >=1.3.0 to >=1.4.0 ( #6221 )
...
Updates the requirements on [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio ) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases )
- [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: pytest-asyncio
dependency-version: 1.4.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-27 16:44:46 +02:00
Nikolai
59d15b0411
Translations: Update Danish
...
Currently translated at 60.8% (3830 of 6295 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/
powered by weblate
2026-05-27 16:44:38 +02:00
Hijiri Umemoto
f0778df911
Translations: Update Chinese (Traditional Han script)
...
Currently translated at 95.7% (245 of 256 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/zh_Hant/
powered by weblate
2026-05-27 16:44:38 +02:00
Hijiri Umemoto
eb4d85c83d
Translations: Update Chinese (Traditional Han script)
...
Currently translated at 90.2% (5680 of 6295 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/zh_Hant/
powered by weblate
2026-05-27 16:44:38 +02:00
Raphael Michel
0fe00fed27
Update GitLab CI instructions
2026-05-27 16:40:54 +02:00
Raphael Michel
7b9d095f4e
[SECURITY] Add missing session check for cached files (CVE-2026-9712)
2026-05-27 16:27:42 +02:00
rash
94aec6f511
fixes bug in checkin rules editor where jquery select2 does not get removed correctly from DOM ( #6206 )
2026-05-26 19:33:31 +02:00
dependabot[bot]
ed25a8b073
Update protobuf requirement from ==7.34.* to ==7.35.* ( #6197 )
...
Updates the requirements on [protobuf](https://github.com/protocolbuffers/protobuf ) to permit the latest version.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases )
- [Commits](https://github.com/protocolbuffers/protobuf/commits )
---
updated-dependencies:
- dependency-name: protobuf
dependency-version: 7.35.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:58:09 +02:00
dependabot[bot]
c9eb936d45
Update pyjwt requirement from ==2.12.* to ==2.13.* ( #6213 )
...
Updates the requirements on [pyjwt](https://github.com/jpadilla/pyjwt ) to permit the latest version.
- [Release notes](https://github.com/jpadilla/pyjwt/releases )
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst )
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.12.0...2.13.0 )
---
updated-dependencies:
- dependency-name: pyjwt
dependency-version: 2.13.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-26 11:57:58 +02:00
luelista
7237ece1ca
Remove duplicated csrftoken cookies ( #6212 )
...
Due to a Safari bug, in some browser, two csrftoken cookies with different values
exist: one unpartitioned, one partitioned ("CHIPS"). This function generates an
additional Set-Cookie header to get rid of the unpartitioned one.
As Django usually only allows one Set-Cookie header per cookie name, we
need to manually create a cookie 'Morsel' for the deletion and store it
in the HttpResponse's cookie dictionary under a different name, so it is
not overwritten by the actual, correct Set-Cookie header. This works
because the code in django.core.handlers.wsgi/asgi, that generates the
actual Set-Cookie headers, only iterates over cookie.values(), ignoring
the keys.
2026-05-22 17:22:56 +02:00
luelista
18485f5d95
Only show "valid VAT ID" checkmark if VAT ID was entered (Z#23235033) ( #6200 )
2026-05-22 15:57:21 +02:00
Richard Schreiber
909ce5b27d
Add NoUrlValidator to validators ( #6208 )
2026-05-22 13:51:28 +02:00
Raphael Michel
c7b82fdc97
Subevent update: Save SubEvent model before saving plugin forms ( #6209 )
2026-05-22 13:22:04 +02:00
pajowu
da380ed75e
Show invoice_dirty status on order details page (Z#23230731) ( #6174 )
2026-05-22 10:25:30 +02:00
George Hickman
687c7e3ccf
Pin node version to 24 with .node-version ( #6207 )
2026-05-22 09:34:30 +02:00
robbi5
484b7141d9
Show device name on order print log ( #6198 )
2026-05-22 09:02:59 +02:00
Richard Schreiber
f60031d67b
Make disable_url optional for notifications ( #6202 )
2026-05-22 07:59:56 +02:00
pajowu
dd29063a84
banktransfer import: Fix prefix confusion if shorter event name contains dash (Z#23234167) ( #6189 )
...
Co-authored-by: luelista <weller@rami.io >
2026-05-21 13:03:30 +02:00
Phumraphee Sae-tang
f37dfbd21a
Translations: Update Thai
...
Currently translated at 100.0% (256 of 256 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/th/
powered by weblate
2026-05-21 10:59:46 +02:00
Phumraphee Sae-tang
bb8ef00d49
Translations: Update Thai
...
Currently translated at 36.4% (2297 of 6295 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/
powered by weblate
2026-05-21 10:59:46 +02:00
Nikolai
d13c654596
Translations: Update Danish
...
Currently translated at 60.7% (3825 of 6295 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/
powered by weblate
2026-05-21 10:59:46 +02:00
Khalid Shaheen
2cc73baa99
Translations: Update Arabic
...
Currently translated at 58.3% (3673 of 6295 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ar/
powered by weblate
2026-05-21 10:59:46 +02:00
Richard Schreiber
f740d46d47
Add template-filter human_readable_locale ( #6193 )
2026-05-20 12:57:57 +02:00
Martin Gross
412a5adf8f
Control: Fix typo in gateSelectURL
2026-05-19 22:03:35 +02:00
dependabot[bot]
e4da2e5e03
Update reportlab requirement from ==4.4.* to ==4.5.* ( #6138 )
...
Updates the requirements on [reportlab](https://www.reportlab.com/ ) to permit the latest version.
---
updated-dependencies:
- dependency-name: reportlab
dependency-version: 4.5.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-19 18:03:32 +02:00
Richard Schreiber
9d7038b127
Force async_task_is_download to be downloaded if in iframe (Z#23234427) ( #6194 )
...
* Force async_task_is_download to be downloaded if in iframe (Z#23234427)
* Update src/pretix/static/pretixbase/js/asynctask.js
Co-authored-by: luelista <weller@rami.io >
---------
Co-authored-by: luelista <weller@rami.io >
2026-05-19 17:07:54 +02:00
Richard Schreiber
ce5af572cc
Improve error messages for name-parts inputs (Z#23234440) ( #6187 )
...
* Improve error messages for name-parts inputs (Z#23234440)
* fix isort after flake8
* correct spelling of .med in user-provided title/name
* fix search instead of match
2026-05-19 15:23:30 +02:00
dependabot[bot]
6d293e544e
Bump django-formtools from 2.5.1 to 2.6.1 ( #6191 )
...
Bumps [django-formtools](https://github.com/jazzband/django-formtools ) from 2.5.1 to 2.6.1.
- [Changelog](https://github.com/jazzband/django-formtools/blob/master/docs/changelog.rst )
- [Commits](https://github.com/jazzband/django-formtools/compare/2.5.1...2.6.1 )
---
updated-dependencies:
- dependency-name: django-formtools
dependency-version: 2.6.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-19 11:36:49 +02:00
dependabot[bot]
28a8032adf
Update sentry-sdk requirement from ==2.59.* to ==2.60.* ( #6190 )
...
Updates the requirements on [sentry-sdk](https://github.com/getsentry/sentry-python ) to permit the latest version.
- [Release notes](https://github.com/getsentry/sentry-python/releases )
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getsentry/sentry-python/compare/2.59.0a1...2.60.0 )
---
updated-dependencies:
- dependency-name: sentry-sdk
dependency-version: 2.60.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-19 11:36:25 +02:00
dependabot[bot]
d765a89139
Update djangorestframework requirement from ==3.16.* to ==3.17.* ( #6013 )
...
* Update djangorestframework requirement from ==3.16.* to ==3.17.*
Updates the requirements on [djangorestframework](https://github.com/encode/django-rest-framework ) to permit the latest version.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.16.0...3.17.0 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.17.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix failing test
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@rami.io >
2026-05-18 17:58:43 +02:00
Richard Schreiber
3df5b1d075
Add cssclass for footer-nav and improve button-style in footer ( #6167 )
2026-05-18 13:16:50 +02:00
Martin Gross
857791445f
Docs: Add Exhibitor API docs (Z#23225216) ( #6184 )
...
* Docs: Add Exhibitor API docs
* Docs: Add Resource-table for Exhibitor vouchers
2026-05-18 12:02:27 +02:00
dependabot[bot]
52b28997a2
Update fakeredis requirement from ==2.34.* to ==2.35.* ( #6072 )
...
* Update fakeredis requirement from ==2.34.* to ==2.35.*
Updates the requirements on [fakeredis](https://github.com/cunla/fakeredis-py ) to permit the latest version.
- [Release notes](https://github.com/cunla/fakeredis-py/releases )
- [Commits](https://github.com/cunla/fakeredis-py/compare/v2.34.0...v2.35.0 )
---
updated-dependencies:
- dependency-name: fakeredis
dependency-version: 2.35.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
* Update class name
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@rami.io >
2026-05-18 09:48:51 +02:00
dependabot[bot]
f65a6aa11f
Update cryptography requirement from >=47.0.0 to >=48.0.0 ( #6177 )
...
Updates the requirements on [cryptography](https://github.com/pyca/cryptography ) to permit the latest version.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pyca/cryptography/compare/47.0.0...48.0.0 )
---
updated-dependencies:
- dependency-name: cryptography
dependency-version: 48.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-17 16:39:18 +02:00
dependabot[bot]
9faca5ea24
Update sentry-sdk requirement from ==2.58.* to ==2.59.*
...
Updates the requirements on [sentry-sdk](https://github.com/getsentry/sentry-python ) to permit the latest version.
- [Release notes](https://github.com/getsentry/sentry-python/releases )
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md )
- [Commits](https://github.com/getsentry/sentry-python/compare/2.58.0a1...2.59.0 )
---
updated-dependencies:
- dependency-name: sentry-sdk
dependency-version: 2.59.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-17 16:36:35 +02:00
dependabot[bot]
867512eee5
Bump picomatch
...
Bumps and [picomatch](https://github.com/micromatch/picomatch ). These dependencies needed to be updated together.
Updates `picomatch` from 4.0.3 to 4.0.4
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4 )
Updates `picomatch` from 2.3.1 to 2.3.2
- [Release notes](https://github.com/micromatch/picomatch/releases )
- [Changelog](https://github.com/micromatch/picomatch/blob/master/CHANGELOG.md )
- [Commits](https://github.com/micromatch/picomatch/compare/4.0.3...4.0.4 )
---
updated-dependencies:
- dependency-name: picomatch
dependency-version: 4.0.4
dependency-type: indirect
- dependency-name: picomatch
dependency-version: 2.3.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-17 16:34:46 +02:00
Raphael Michel
1436b65347
Add webhooks for quota changes (Z#23232443)
2026-05-17 16:33:20 +02:00
sweenu
cc06588991
Rephrase refund info paragraph
2026-05-17 16:33:15 +02:00
dependabot[bot]
32bd9fa265
Bump vite from 8.0.0 to 8.0.12
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 8.0.0 to 8.0.12.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.0.12/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.0.12
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-17 16:32:56 +02:00
dependabot[bot]
bdc9b155f9
Bump flatted from 3.3.3 to 3.4.2
...
Bumps [flatted](https://github.com/WebReflection/flatted ) from 3.3.3 to 3.4.2.
- [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2 )
---
updated-dependencies:
- dependency-name: flatted
dependency-version: 3.4.2
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-17 16:32:49 +02:00
dependabot[bot]
1af2941594
Bump postcss from 8.5.8 to 8.5.14
...
Bumps [postcss](https://github.com/postcss/postcss ) from 8.5.8 to 8.5.14.
- [Release notes](https://github.com/postcss/postcss/releases )
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md )
- [Commits](https://github.com/postcss/postcss/compare/8.5.8...8.5.14 )
---
updated-dependencies:
- dependency-name: postcss
dependency-version: 8.5.14
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-17 16:32:45 +02:00
dependabot[bot]
11dc1e6f70
Bump arabic-reshaper from 3.0.0 to 3.0.1
...
Bumps [arabic-reshaper](https://github.com/mpcabd/python-arabic-reshaper ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/mpcabd/python-arabic-reshaper/releases )
- [Commits](https://github.com/mpcabd/python-arabic-reshaper/compare/v3.0.0...v3.0.1 )
---
updated-dependencies:
- dependency-name: arabic-reshaper
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-05-17 16:17:45 +02:00