CGM_Public/pretix_original
2
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-09 10:37:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,532 Commits 388 Branches 211 Tags
60af7e59845d80742063cf2a72fe658a5dcf5bef
Commit Graph
14532 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
simon 60af7e5984 Merge pull request 'upstream/2026.5.2' (#19) from upstream/2026.5.2 into master 
Reviewed-on: CGM_Public/pretix_cgo#19
 2026-07-01 19:27:12 +00:00
TechuserUpdatechecker ce2704f6fd Remove gendered language from de/de_Informal translations 2026-07-01 21:26:32 +02:00
TechuserUpdatechecker 04cecedffb Merge branch 'master' into upstream/2026.5.2 2026-07-01 21:21:43 +02:00
Raphael Michel 7faf6cfd80 Bump to 2026.5.2 v2026.5.2 2026-06-25 16:40:44 +02:00
Raphael Michel cdeb3609f3 [SECURITY] Properly escape HTML tags in PDF generation (CVE-2026-57535) 2026-06-25 16:40:28 +02:00
Raphael MichelandRaphael Michel 53d8aa5679 [SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535) 2026-06-25 16:40:00 +02:00
Raphael MichelandRaphael Michel 80601cc013 [SECURITY] Disable outbound and file access for reportlab (CVE-2026-57535) 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel e2661f304d [SECURITY] Fix reflected XSS in redirection page (CVE-2026-57533) 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel 71f6ade5d6 [SECURITY] Fix stored XSS in ticket confirmation page (CVE-2026-13225) 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel e087dd39b8 [SECURITY] Hardening: Don't use |safe on confirm_messages 2026-06-25 16:40:00 +02:00
Mira WellerandRaphael Michel f3a8ce39f1 [SECURITY] Fix XSS in ticket layout JSON (CVE-2026-57532) 2026-06-25 16:40:00 +02:00
TechuserUpdatechecker 54479f8f32 Update pretix domain 2026-06-20 21:33:05 +02:00
simon 8142cc8b18 Merge pull request 'upstream/2026.5.1' (#18) from upstream/2026.5.1 into master 
Reviewed-on: CGM_Public/pretix_cgo#18
 2026-06-20 19:21:33 +00:00
TechuserUpdatechecker 87c1232a38 Merge branch 'master' into upstream/2026.5.1 2026-06-20 21:00:06 +02:00
TechuserUpdatechecker f838e29400 Add claude skill 2026-06-20 20:59:23 +02:00
simon bd1e583266 Merge branch 'feature/pretix-oidc-plugin' into master 
Adds pretix-oidc plugin to Dockerfile for Keycloak SSO integration.
Plugin is only active when configured (currently cgm72 only).
 2026-06-20 20:35:55 +02:00
simonandClaude Sonnet 4.6 7a9640ddca Add pretix-oidc plugin for Keycloak SSO integration 
Enables OIDC authentication against Keycloak and automatic team assignment
via claim-based rules (pretix_scanner, pretix_shop, pretix_admin).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-06-19 22:10:45 +02:00
Raphael Michel a6c417eb2f Bump version to 2026.5.1 v2026.5.1 2026-06-09 13:22:17 +02:00
Richard SchreiberandRaphael Michel 5d449ea313 [SECURITY] Reusable media export: Respect giftcard permissions (CVE-2026-11764) (#6261) 2026-06-09 13:21:41 +02:00
simon f700b57d57 Merge pull request 'upstream/2026.5.0' (#17) from upstream/2026.5.0 into master 
Reviewed-on: CGM_Public/pretix_cgo#17
 2026-05-31 18:34:40 +00:00
TechuserUpdatecheckerandClaude Sonnet 4.6 9e2ae90b1e Merge master into upstream/2026.5.0 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-31 20:32:21 +02:00
Raphael Michel dfd388ddeb Bump version to 2026.5.0 v2026.5.0 2026-05-27 18:15:48 +02:00
Raphael Michel 8af010e5b7 Update po files 
[CI skip]

Signed-off-by: Raphael Michel <michel@rami.io>
 2026-05-27 17:49:23 +02:00
Raphael Michel 4f4ea01bc0 Untranslate vite setting 2026-05-27 17:47:17 +02:00
Raphael MichelandRaphael Michel 9e4cbcb372 Translations: Update German (informal) (de_Informal) 
Currently translated at 100.0% (6304 of 6304 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/

powered by weblate
 2026-05-27 17:47:09 +02:00
Raphael MichelandRaphael Michel 07d7264bc6 Translations: Update German 
Currently translated at 100.0% (6304 of 6304 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/

powered by weblate
 2026-05-27 17:47:09 +02:00
Raphael Michel f3b3eba8b3 Update po files 
[CI skip]

Signed-off-by: Raphael Michel <michel@rami.io>
 2026-05-27 16:47:27 +02:00
Raphael MichelandGitHub a75dbb5d62 SSRF protection: Block requests to CGNAT addresses (Z#23235334) (#6220) 2026-05-27 16:45:11 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		254f46d991 Update pytest-asyncio requirement from >=1.3.0 to >=1.4.0 (#6221) 
Updates the requirements on [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](https://github.com/pytest-dev/pytest-asyncio/compare/v1.3.0...v1.4.0)

---
updated-dependencies:
- dependency-name: pytest-asyncio
  dependency-version: 1.4.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-27 16:44:46 +02:00
NikolaiandRaphael Michel 59d15b0411 Translations: Update Danish 
Currently translated at 60.8% (3830 of 6295 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
 2026-05-27 16:44:38 +02:00
Hijiri UmemotoandRaphael Michel f0778df911 Translations: Update Chinese (Traditional Han script) 
Currently translated at 95.7% (245 of 256 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/zh_Hant/

powered by weblate
 2026-05-27 16:44:38 +02:00
Hijiri UmemotoandRaphael Michel eb4d85c83d Translations: Update Chinese (Traditional Han script) 
Currently translated at 90.2% (5680 of 6295 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/zh_Hant/

powered by weblate
 2026-05-27 16:44:38 +02:00
Raphael Michel 0fe00fed27 Update GitLab CI instructions 2026-05-27 16:40:54 +02:00
Raphael Michel 7b9d095f4e [SECURITY] Add missing session check for cached files (CVE-2026-9712) 2026-05-27 16:27:42 +02:00
rashandGitHub 94aec6f511 fixes bug in checkin rules editor where jquery select2 does not get removed correctly from DOM (#6206) 2026-05-26 19:33:31 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		ed25a8b073 Update protobuf requirement from ==7.34.* to ==7.35.* (#6197) 
Updates the requirements on [protobuf](https://github.com/protocolbuffers/protobuf) to permit the latest version.
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

---
updated-dependencies:
- dependency-name: protobuf
  dependency-version: 7.35.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-26 11:58:09 +02:00
dependabot[bot]GitHubdependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 		c9eb936d45 Update pyjwt requirement from ==2.12.* to ==2.13.* (#6213) 
Updates the requirements on [pyjwt](https://github.com/jpadilla/pyjwt) to permit the latest version.
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/jpadilla/pyjwt/compare/2.12.0...2.13.0)

---
updated-dependencies:
- dependency-name: pyjwt
  dependency-version: 2.13.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-05-26 11:57:58 +02:00
luelistaandGitHub 7237ece1ca Remove duplicated csrftoken cookies (#6212) 
Due to a Safari bug, in some browser, two csrftoken cookies with different values
exist: one unpartitioned, one partitioned ("CHIPS"). This function generates an
additional Set-Cookie header to get rid of the unpartitioned one.

As Django usually only allows one Set-Cookie header per cookie name, we
need to manually create a cookie 'Morsel' for the deletion and store it
in the HttpResponse's cookie dictionary under a different name, so it is
not overwritten by the actual, correct Set-Cookie header. This works
because the code in django.core.handlers.wsgi/asgi, that generates the
actual Set-Cookie headers, only iterates over cookie.values(), ignoring
the keys.
 2026-05-22 17:22:56 +02:00
luelistaandGitHub 18485f5d95 Only show "valid VAT ID" checkmark if VAT ID was entered (Z#23235033) (#6200) 2026-05-22 15:57:21 +02:00
Richard SchreiberandGitHub 909ce5b27d Add NoUrlValidator to validators (#6208) 2026-05-22 13:51:28 +02:00
Raphael MichelandGitHub c7b82fdc97 Subevent update: Save SubEvent model before saving plugin forms (#6209) 2026-05-22 13:22:04 +02:00
pajowuandGitHub da380ed75e Show invoice_dirty status on order details page (Z#23230731) (#6174) 2026-05-22 10:25:30 +02:00
George HickmanandGitHub 687c7e3ccf Pin node version to 24 with .node-version (#6207) 2026-05-22 09:34:30 +02:00
robbi5andGitHub 484b7141d9 Show device name on order print log (#6198) 2026-05-22 09:02:59 +02:00
Richard SchreiberandGitHub f60031d67b Make disable_url optional for notifications (#6202) 2026-05-22 07:59:56 +02:00
pajowuGitHubluelista
 		dd29063a84 banktransfer import: Fix prefix confusion if shorter event name contains dash (Z#23234167) (#6189) 
Co-authored-by: luelista <weller@rami.io>
 2026-05-21 13:03:30 +02:00
Phumraphee Sae-tangandRaphael Michel f37dfbd21a Translations: Update Thai 
Currently translated at 100.0% (256 of 256 strings)

Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/th/

powered by weblate
 2026-05-21 10:59:46 +02:00
Phumraphee Sae-tangandRaphael Michel bb8ef00d49 Translations: Update Thai 
Currently translated at 36.4% (2297 of 6295 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/th/

powered by weblate
 2026-05-21 10:59:46 +02:00
NikolaiandRaphael Michel d13c654596 Translations: Update Danish 
Currently translated at 60.7% (3825 of 6295 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/

powered by weblate
 2026-05-21 10:59:46 +02:00
Khalid ShaheenandRaphael Michel 2cc73baa99 Translations: Update Arabic 
Currently translated at 58.3% (3673 of 6295 strings)

Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/ar/

powered by weblate
 2026-05-21 10:59:46 +02:00