dependabot[bot]
ae35af596f
Update tlds requirement from >=2026093003 to >=2026102900 ( #6729 )
...
Updates the requirements on [tlds](https://github.com/kichik/tlds ) to permit the latest version.
- [Commits](https://github.com/kichik/tlds/commits )
---
updated-dependencies:
- dependency-name: tlds
dependency-version: '2026102900'
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 09:52:20 +01:00
Christiaan de Die le Clercq
47c3493372
Translations: Update Dutch
...
Currently translated at 96.9% (6255 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl/
powered by weblate
2026-11-04 09:52:05 +01:00
Isaac Raño
85d65d17b4
Translations: Update Galician
...
Currently translated at 18.7% (1209 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/gl/
powered by weblate
2026-11-04 09:52:05 +01:00
vihumelo
e50c845e09
Translations: Update Portuguese (Brazil)
...
Currently translated at 98.8% (257 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/pt_BR/
powered by weblate
2026-11-04 09:52:05 +01:00
vihumelo
c84d9061da
Translations: Update Portuguese (Brazil)
...
Currently translated at 92.9% (5995 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/pt_BR/
powered by weblate
2026-11-04 09:52:05 +01:00
CVZ-es
25c9659655
Translations: Update Spanish
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/
powered by weblate
2026-11-04 09:52:05 +01:00
CVZ-es
b6bce961c3
Translations: Update French
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/
powered by weblate
2026-11-04 09:52:05 +01:00
Mie Frydensbjerg
1de0455ebc
Translations: Update Danish
...
Currently translated at 62.1% (4009 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/da/
powered by weblate
2026-11-04 09:52:05 +01:00
dependabot[bot]
9fdafa57de
Update reportlab requirement from ==5.0.* to ==5.1.* ( #6730 )
...
Updates the requirements on [reportlab](https://www.reportlab.com/ ) to permit the latest version.
---
updated-dependencies:
- dependency-name: reportlab
dependency-version: 5.1.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-04 09:51:36 +01:00
50bcfc8c74
OIDC: Expose SSO attributes to customer_signed_in signal ( #6603 )
...
* OIDC: Expose SSO attributes to customer_signed_in signal
* Change OIDC claim name
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
* Document the changed signature of the customer_signed_in signal
* Put docs on right signal
* Fix test assertions
---------
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
Co-authored-by: Raphael Michel <michel@rami.io >
2026-11-04 09:48:03 +01:00
Raphael Michel
fa552fe7d1
Permissions: Add helptext for outgoingmails:read (Z#23251039) ( #6707 )
2026-11-04 09:20:29 +01:00
dependabot[bot]
cbfc24dd64
Update css-inline requirement from ==0.22.* to ==0.23.* ( #6683 )
...
Updates the requirements on [css-inline](https://github.com/Stranger6667/css-inline ) to permit the latest version.
- [Release notes](https://github.com/Stranger6667/css-inline/releases )
- [Changelog](https://github.com/Stranger6667/css-inline/blob/master/CHANGELOG.md )
- [Commits](https://github.com/Stranger6667/css-inline/compare/c-v0.22.0...c-v0.23.0 )
---
updated-dependencies:
- dependency-name: css-inline
dependency-version: 0.23.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-03 17:21:28 +01:00
dependabot[bot]
6e0c2d69a5
Bump pycparser from 3.11 to 3.12 ( #6701 )
...
Bumps [pycparser](https://github.com/eliben/pycparser ) from 3.11 to 3.12.
- [Release notes](https://github.com/eliben/pycparser/releases )
- [Commits](https://github.com/eliben/pycparser/compare/release_v3.11...release_v3.12 )
---
updated-dependencies:
- dependency-name: pycparser
dependency-version: '3.12'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-03 17:19:46 +01:00
dependabot[bot] and Raphael Michel
34ed175abe
Update dnspython requirement from ==2.8.* to ==2.9.* ( #6671 )
...
* Update dnspython requirement from ==2.8.* to ==2.9.*
Updates the requirements on [dnspython](https://github.com/rthalley/dnspython ) to permit the latest version.
- [Release notes](https://github.com/rthalley/dnspython/releases )
- [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst )
- [Commits](https://github.com/rthalley/dnspython/compare/v2.8.0rc1...v2.9.0 )
---
updated-dependencies:
- dependency-name: dnspython
dependency-version: 2.9.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* Update pyproject.toml
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Raphael Michel <michel@pretix.eu >
2026-11-03 17:19:17 +01:00
dependabot[bot]
a9aaf8638e
Update pytest-mock requirement from ==3.16.* to ==3.17.* ( #6715 )
...
Updates the requirements on [pytest-mock](https://github.com/pytest-dev/pytest-mock ) to permit the latest version.
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases )
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst )
- [Commits](https://github.com/pytest-dev/pytest-mock/compare/v3.16.0...v3.17.0 )
---
updated-dependencies:
- dependency-name: pytest-mock
dependency-version: 3.17.0
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-11-03 17:18:21 +01:00
Raphael Michel and Raphael Michel
a613affa05
Sentry: Scrub secrets from event details ( #6218 )
...
* Sentry: Scrub secrets from event details
* Apply suggestions from code review
Co-authored-by: Raphael Michel <mail@raphaelmichel.de >
2026-11-03 16:45:35 +01:00
Raphael Michel
cd0ed78b76
Tests: Do not rely on actual DNS for peppol validation ( #6711 )
2026-11-03 16:44:31 +01:00
Raphael Michel
4889abd75c
PDF editor: Warn about missing scannable QR code ( #6726 )
...
* PDF editor: Warn about missing scannable QR code
* Fix
2026-11-03 16:43:59 +01:00
Raphael Michel
0a73faa8bd
Bump to i18nfield 1.12.0
2026-11-03 10:38:37 +01:00
Tobias Kunze
def5042661
Ignore spaces in bank transfer queries ( #6724 )
...
When copying an order code from e.g. the order list, it's easy to
include spaces when pasting, and then this does not match anything. And
as the JavaScript side of the search *does* compare the stripped string
(normalizeQuery), just deleting the whitespace does not trigger the
order to be found either, you have delete one more letter.
2026-11-03 09:12:38 +01:00
Richard Schreiber
e6f8f178af
Extend log_action filter and make recursive (Z#23247315) ( #6598 )
...
* Extend log_action filter and make recursive
* fix flake8
* fix type mismatch
* add "salt" to sensitive keys
* match "key" (e.g. see payone)
* add "auth" to sensitive keys
* clean lists recursively
* improve clean method name as it also cleans list recursively
* Add test
2026-10-29 10:52:00 +01:00
Raphael Michel
5f5380e8b1
Bump version to 2026.10.0.dev0
2026-10-29 09:59:11 +01:00
Raphael Michel
ff102d561d
Bump version to 2026.9.0
v2026.9.0
2026-10-29 09:59:06 +01:00
Raphael Michel
1c7d0233fd
Fix test failure after security patch
2026-10-28 14:41:38 +01:00
Raphael Michel
936977972e
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2026-10-28 12:15:10 +01:00
Raphael Michel
46f2baa103
Translations: Update German
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2026-10-28 12:15:10 +01:00
Raphael Michel
1308630f6c
Update po files
...
[CI skip]
Signed-off-by: Raphael Michel <michel@pretix.eu >
2026-10-28 11:48:31 +01:00
CVZ-es
45bd124629
Translations: Update French
...
Currently translated at 100.0% (260 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/fr/
powered by weblate
2026-10-28 11:47:55 +01:00
CVZ-es
a1b9a557e0
Translations: Update French
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/
powered by weblate
2026-10-28 11:47:55 +01:00
dependabot[bot]
1860e24f8c
Update python-dateutil requirement from ==2.9.* to ==3.0.* ( #6710 )
...
Updates the requirements on [python-dateutil](https://github.com/dateutil/dateutil ) to permit the latest version.
- [Release notes](https://github.com/dateutil/dateutil/releases )
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS )
- [Commits](https://github.com/dateutil/dateutil/compare/2.9.0...3.0.0 )
---
updated-dependencies:
- dependency-name: python-dateutil
dependency-version: 3.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-28 11:45:53 +01:00
Raphael Michel
cfbc903595
Customer SSO: Check values for "email_verified" without relying on the type ( #6708 )
2026-10-28 11:40:50 +01:00
Raphael Michel
9632f69edb
[SECURITY] Fix more ID lookups for file downloads (CVE-2026-101272)
2026-10-28 11:22:49 +01:00
Raphael Michel
87e3b33537
[SECURITY] Customer SSO: Fix missing validation of grant type (CVE-2026-101274, Z#23251494)
2026-10-28 11:22:49 +01:00
Kara Engelhardt
a4cbb58217
[SECURITY] Properly check gift card acceptance everywhere (CVE-2026-101273)
2026-10-28 11:22:49 +01:00
Raphael Michel
15527fc5de
Event list: Reduce disk load of SQL query ( #6505 )
2026-10-28 09:26:47 +01:00
Richard Schreiber
17fc69af18
Add support for relative date to subevents batch-edit (Z#23250805) ( #6693 )
2026-10-28 09:08:32 +01:00
Richard Schreiber
da622e6752
Fix styling for disabled buttons other than btn-default ( #6685 )
2026-10-27 10:40:50 +01:00
Tim
b18dde855c
Translations: Update Spanish
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/
powered by weblate
2026-10-27 10:08:20 +01:00
dependabot[bot]
9dce205e12
Bump django-bootstrap3 from 26.2 to 26.3 ( #6673 )
...
Bumps [django-bootstrap3](https://github.com/zostera/django-bootstrap3 ) from 26.2 to 26.3.
- [Changelog](https://github.com/zostera/django-bootstrap3/blob/main/CHANGELOG.md )
- [Commits](https://github.com/zostera/django-bootstrap3/compare/v26.2...v26.3 )
---
updated-dependencies:
- dependency-name: django-bootstrap3
dependency-version: '26.3'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:58:40 +01:00
dependabot[bot]
5d47ebd8b8
Update djangorestframework requirement from >=3.18.2 to >=3.18.3 ( #6698 )
...
Updates the requirements on [djangorestframework](https://github.com/encode/django-rest-framework ) to permit the latest version.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.18.2...3.18.3 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.18.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:56:33 +01:00
dependabot[bot]
c550a35e62
Bump vite from 8.0.16 to 8.3.5 ( #6690 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 8.0.16 to 8.3.5.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.3.5
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:56:22 +01:00
dependabot[bot]
76c69e785e
Bump markdown from 3.11 to 3.11.2 ( #6697 )
...
Bumps [markdown](https://github.com/Python-Markdown/markdown ) from 3.11 to 3.11.2.
- [Release notes](https://github.com/Python-Markdown/markdown/releases )
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md )
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.11.0...3.11.2 )
---
updated-dependencies:
- dependency-name: markdown
dependency-version: 3.11.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:56:11 +01:00
Lukas Bockstaller
59b207b756
API: run clean_live() after updates to the event (Z#23250960) ( #6695 )
...
* API: run `clean_live()` after updates to the event
* raise correct validation error
* add test cases for required meta_properties and going live
2026-10-26 11:34:59 +01:00
dependabot[bot] and Lukas Bockstaller
c9f7bf8680
Update djangorestframework requirement from ==3.17.* to ==3.18.* ( #6470 )
...
* Update djangorestframework requirement from ==3.17.* to ==3.18.*
Updates the requirements on [djangorestframework](https://github.com/encode/django-rest-framework ) to permit the latest version.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.17.0...3.18.0 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.18.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* RestFramework: use LIST_SERIALIZER_ERRORS_AS_DICT compatibility option
* set lower bound for djangorestframework
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lukas Bockstaller <bockstaller@pretix.eu >
2026-10-23 16:05:54 +02:00
Martin Gross
2fcb51bf2f
Translations: Update Basque
...
Currently translated at 46.5% (121 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/eu/
powered by weblate
2026-10-23 15:03:21 +02:00
Martin Gross
6a762854e2
Translations: Update Basque
...
Currently translated at 48.0% (3093 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/
powered by weblate
2026-10-23 15:03:21 +02:00
IÑIGO ANSA
b29fb69790
Translations: Update Basque
...
Currently translated at 48.0% (3093 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/
powered by weblate
2026-10-23 13:21:10 +02:00
IÑIGO ANSA
c7a23da055
Translations: Update Basque
...
Currently translated at 45.7% (119 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/eu/
powered by weblate
2026-10-23 13:21:10 +02:00
IÑIGO ANSA
a3704c54e9
Translations: Update Basque
...
Currently translated at 47.9% (3091 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/
powered by weblate
2026-10-23 13:21:10 +02:00
Daniel Jaraud
764d49482a
Translations: Update French
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/
powered by weblate
2026-10-23 13:21:10 +02:00