Raphael Michel
bdf3b5edf6
Fixes, fee support and total check
2026-10-30 10:55:35 +01:00
Raphael Michel
ffd3ca96ab
API: Allow pretixPOS to communicate its binding tax calculation
2026-10-29 22:30:28 +01:00
Richard Schreiber
e6f8f178af
Extend log_action filter and make recursive (Z#23247315) ( #6598 )
...
* Extend log_action filter and make recursive
* fix flake8
* fix type mismatch
* add "salt" to sensitive keys
* match "key" (e.g. see payone)
* add "auth" to sensitive keys
* clean lists recursively
* improve clean method name as it also cleans list recursively
* Add test
2026-10-29 10:52:00 +01:00
Raphael Michel
5f5380e8b1
Bump version to 2026.10.0.dev0
2026-10-29 09:59:11 +01:00
Raphael Michel
ff102d561d
Bump version to 2026.9.0
v2026.9.0
2026-10-29 09:59:06 +01:00
Raphael Michel
1c7d0233fd
Fix test failure after security patch
2026-10-28 14:41:38 +01:00
Raphael Michel
936977972e
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2026-10-28 12:15:10 +01:00
Raphael Michel
46f2baa103
Translations: Update German
...
Currently translated at 100.0% (6452 of 6452 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2026-10-28 12:15:10 +01:00
Raphael Michel
1308630f6c
Update po files
...
[CI skip]
Signed-off-by: Raphael Michel <michel@pretix.eu >
2026-10-28 11:48:31 +01:00
CVZ-es
45bd124629
Translations: Update French
...
Currently translated at 100.0% (260 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/fr/
powered by weblate
2026-10-28 11:47:55 +01:00
CVZ-es
a1b9a557e0
Translations: Update French
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/
powered by weblate
2026-10-28 11:47:55 +01:00
dependabot[bot]
1860e24f8c
Update python-dateutil requirement from ==2.9.* to ==3.0.* ( #6710 )
...
Updates the requirements on [python-dateutil](https://github.com/dateutil/dateutil ) to permit the latest version.
- [Release notes](https://github.com/dateutil/dateutil/releases )
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS )
- [Commits](https://github.com/dateutil/dateutil/compare/2.9.0...3.0.0 )
---
updated-dependencies:
- dependency-name: python-dateutil
dependency-version: 3.0.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-28 11:45:53 +01:00
Raphael Michel
cfbc903595
Customer SSO: Check values for "email_verified" without relying on the type ( #6708 )
2026-10-28 11:40:50 +01:00
Raphael Michel
9632f69edb
[SECURITY] Fix more ID lookups for file downloads (CVE-2026-101272)
2026-10-28 11:22:49 +01:00
Raphael Michel
87e3b33537
[SECURITY] Customer SSO: Fix missing validation of grant type (CVE-2026-101274, Z#23251494)
2026-10-28 11:22:49 +01:00
Kara Engelhardt
a4cbb58217
[SECURITY] Properly check gift card acceptance everywhere (CVE-2026-101273)
2026-10-28 11:22:49 +01:00
Raphael Michel
15527fc5de
Event list: Reduce disk load of SQL query ( #6505 )
2026-10-28 09:26:47 +01:00
Richard Schreiber
17fc69af18
Add support for relative date to subevents batch-edit (Z#23250805) ( #6693 )
2026-10-28 09:08:32 +01:00
Richard Schreiber
da622e6752
Fix styling for disabled buttons other than btn-default ( #6685 )
2026-10-27 10:40:50 +01:00
Tim
b18dde855c
Translations: Update Spanish
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/es/
powered by weblate
2026-10-27 10:08:20 +01:00
dependabot[bot]
9dce205e12
Bump django-bootstrap3 from 26.2 to 26.3 ( #6673 )
...
Bumps [django-bootstrap3](https://github.com/zostera/django-bootstrap3 ) from 26.2 to 26.3.
- [Changelog](https://github.com/zostera/django-bootstrap3/blob/main/CHANGELOG.md )
- [Commits](https://github.com/zostera/django-bootstrap3/compare/v26.2...v26.3 )
---
updated-dependencies:
- dependency-name: django-bootstrap3
dependency-version: '26.3'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:58:40 +01:00
dependabot[bot]
5d47ebd8b8
Update djangorestframework requirement from >=3.18.2 to >=3.18.3 ( #6698 )
...
Updates the requirements on [djangorestframework](https://github.com/encode/django-rest-framework ) to permit the latest version.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.18.2...3.18.3 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.18.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:56:33 +01:00
dependabot[bot]
c550a35e62
Bump vite from 8.0.16 to 8.3.5 ( #6690 )
...
Bumps [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite ) from 8.0.16 to 8.3.5.
- [Release notes](https://github.com/vitejs/vite/releases )
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md )
- [Commits](https://github.com/vitejs/vite/commits/v8.3.5/packages/vite )
---
updated-dependencies:
- dependency-name: vite
dependency-version: 8.3.5
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:56:22 +01:00
dependabot[bot]
76c69e785e
Bump markdown from 3.11 to 3.11.2 ( #6697 )
...
Bumps [markdown](https://github.com/Python-Markdown/markdown ) from 3.11 to 3.11.2.
- [Release notes](https://github.com/Python-Markdown/markdown/releases )
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md )
- [Commits](https://github.com/Python-Markdown/markdown/compare/3.11.0...3.11.2 )
---
updated-dependencies:
- dependency-name: markdown
dependency-version: 3.11.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-26 17:56:11 +01:00
Lukas Bockstaller
59b207b756
API: run clean_live() after updates to the event (Z#23250960) ( #6695 )
...
* API: run `clean_live()` after updates to the event
* raise correct validation error
* add test cases for required meta_properties and going live
2026-10-26 11:34:59 +01:00
dependabot[bot] and Lukas Bockstaller
c9f7bf8680
Update djangorestframework requirement from ==3.17.* to ==3.18.* ( #6470 )
...
* Update djangorestframework requirement from ==3.17.* to ==3.18.*
Updates the requirements on [djangorestframework](https://github.com/encode/django-rest-framework ) to permit the latest version.
- [Release notes](https://github.com/encode/django-rest-framework/releases )
- [Commits](https://github.com/encode/django-rest-framework/compare/3.17.0...3.18.0 )
---
updated-dependencies:
- dependency-name: djangorestframework
dependency-version: 3.18.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
* RestFramework: use LIST_SERIALIZER_ERRORS_AS_DICT compatibility option
* set lower bound for djangorestframework
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Lukas Bockstaller <bockstaller@pretix.eu >
2026-10-23 16:05:54 +02:00
Martin Gross
2fcb51bf2f
Translations: Update Basque
...
Currently translated at 46.5% (121 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/eu/
powered by weblate
2026-10-23 15:03:21 +02:00
Martin Gross
6a762854e2
Translations: Update Basque
...
Currently translated at 48.0% (3093 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/
powered by weblate
2026-10-23 15:03:21 +02:00
IÑIGO ANSA
b29fb69790
Translations: Update Basque
...
Currently translated at 48.0% (3093 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/
powered by weblate
2026-10-23 13:21:10 +02:00
IÑIGO ANSA
c7a23da055
Translations: Update Basque
...
Currently translated at 45.7% (119 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/eu/
powered by weblate
2026-10-23 13:21:10 +02:00
IÑIGO ANSA
a3704c54e9
Translations: Update Basque
...
Currently translated at 47.9% (3091 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/eu/
powered by weblate
2026-10-23 13:21:10 +02:00
Daniel Jaraud
764d49482a
Translations: Update French
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/fr/
powered by weblate
2026-10-23 13:21:10 +02:00
Raphael Michel
e188796a81
Bump Pillow to 13.0.* ( #6694 )
2026-10-22 15:44:57 +02:00
Lukas Bockstaller
1ca41269cd
test: unset EMAIL_HOST_USER and EMAIL_HOST_PASSWORD for smtp tests ( #6688 )
...
Harden tests so that they don't fail locally when the config values are set in pretix.cfg
2026-10-22 12:03:57 +02:00
Lukas Bockstaller
9581c08949
put last_seen attribute into the defaults parameter of the get_or_create ( #6689 )
2026-10-22 12:00:35 +02:00
luelista
5393aff5f0
Attempt to make customer account SSO configuration a bit less confusing ( #6586 )
...
* More explanation text, better titles
* Direct links to docs
* Add all information to copy/paste in one place
2026-10-22 10:57:37 +02:00
Raphael Michel
03e488ef20
Add comment on known permission issue
2026-10-21 13:55:13 +02:00
Douwe Somers
619c68e51a
Fix interpolate function ( #6672 )
2026-10-21 10:59:46 +02:00
Richard Schreiber
10c1d5106d
API: make bundle_variation optional when creating items with bundles ( #6681 )
...
* API: make bundle_variation optional when creating items with bundles
* Add test
2026-10-21 10:32:15 +02:00
Martin Gross
876566759d
Stripe: Reenable Continue button for Affirm/Klarna even if CC-element is not present
2026-10-21 10:05:34 +02:00
Christiaan de Die le Clercq
c6a0e06e87
Translations: Update Dutch
...
Currently translated at 96.9% (6247 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/nl/
powered by weblate
2026-10-20 12:09:18 +02:00
Martin Gross
39e4a6c9f7
Translations: Update Luxembourgish
...
Currently translated at 25.1% (1619 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/lb/
powered by weblate
2026-10-20 12:09:18 +02:00
Martin Gross
431bd038fc
Translations: Update German
...
Currently translated at 100.0% (260 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/de/
powered by weblate
2026-10-20 12:09:18 +02:00
Martin Gross
2374a33424
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2026-10-20 12:09:18 +02:00
Martin Gross
463de6ae12
Translations: Update German
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2026-10-20 12:09:18 +02:00
Jakob
117b300c86
Translations: Update Luxembourgish
...
Currently translated at 25.1% (1619 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/lb/
powered by weblate
2026-10-20 12:09:18 +02:00
Jakob
36d7f684c3
Translations: Update German
...
Currently translated at 100.0% (260 of 260 strings)
Translation: pretix/pretix (JavaScript parts)
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix-js/de/
powered by weblate
2026-10-20 12:09:18 +02:00
Jakob
9ceab479a4
Translations: Update German (informal) (de_Informal)
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de_Informal/
powered by weblate
2026-10-20 12:09:18 +02:00
Jakob
6229b4a848
Translations: Update German
...
Currently translated at 100.0% (6442 of 6442 strings)
Translation: pretix/pretix
Translate-URL: https://translate.pretix.eu/projects/pretix/pretix/de/
powered by weblate
2026-10-20 12:09:18 +02:00
dependabot[bot]
16d0f17587
Bump pycparser from 3.0 to 3.11 ( #6669 )
...
Bumps [pycparser](https://github.com/eliben/pycparser ) from 3.0 to 3.11.
- [Release notes](https://github.com/eliben/pycparser/releases )
- [Commits](https://github.com/eliben/pycparser/compare/release_v3.00...release_v3.11 )
---
updated-dependencies:
- dependency-name: pycparser
dependency-version: '3.11'
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-10-20 12:03:58 +02:00