Bump wagtail from 4.2.4 to 6.1

[dependabot]

Bumps wagtail from 4.2.4 to 6.1.

Release notes

Sourced from wagtail's releases.

6.1

• Refine wording of page & collection privacy using password is a shared password and should not be used for secure content (Rohit Sharma, Jake Howard)
• Add RelatedObjectsColumn to the table UI framework (Matt Westcott)
• Reduce memory usage when rebuilding search indexes (Jake Howard)
• Support creating images in .ico format (Jake Howard)
• Add the ability to disable the usage of a shared password for enhanced security for the private pages and collections (documents) feature (Salvo Polizzi, Jake Howard)
• Add system checks to ensure that WAGTAIL_DATE_FORMAT, WAGTAIL_DATETIME_FORMAT, WAGTAIL_TIME_FORMAT are correctly configured (Rohit Sharma, Coen van der Kamp)
• Allow custom permissions with the same prefix as built-in permissions (Sage Abdullah)
• Allow displaying permissions linked to the Admin model's content type (Sage Abdullah)
• Add support for Draftail's JavaScript to use chooserUrls provided by entity options & for the Draftail widget to encode lazy URLs/ translations (Elhussein Almasri)
• Reimplement search promotions IndexView using the generic.IndexView (Rohit Sharma, Sage Abdullah, Storm Heg)
• Reimplement redirects IndexView using the generic.IndexView (Rohit Sharma, Sage Abdullah, Temidayo Azeez)
• Add PageListingViewSet for custom per-page-type page listings (Matt Westcott)
• Add ChooseParentView to PageListingViewSet to allow creating pages from custom page listings (Abdelrahman Hamada, Sage Abdullah)
• Implement new universal listings design for image listing view (Sage Abdullah)
• Implement new universal listings design for document listing view (Sage Abdullah)
• Implement new universal listings design for site and locale listing views (Sage Abdullah)
• Implement new universal listings design for page and snippet history view (Sage Abdullah)
• Implement new universal listings design for form builder submissions view (Sage Abdullah)
• Implement new universal listings design for collections listing view (Sage Abdullah)
• Implement new universal listings design for groups views (Sage Abdullah)
• Implement new universal listings design for users views (Sage Abdullah)
• Implement new universal listings design for workflow and task views (Sage Abdullah)
• Refine slim header button style to match designs (Sage Abdullah)
• Add simple admin keyboard shortcuts overview dialog, available in the help sub-menu (Karthik Ayangar, Rohit Sharma)
• Add ability to bulk toggle permissions in the user group editing view, including shift+click for multiple selections (LB (Ben) Johnston, Kalob Taulien)
• Update the minimum version of djangorestframework to 3.15.1 (Sage Abdullah)
• Add support for related fields in generic IndexView.list_display (Abdelrahman Hamada)
• Improve page fetching logic and cache route results per request (Gordon Pendleton)
• Optimise rewriting of links / embeds in rich text using bulk database lookups (Andy Chosak)
• Add normalization mechanism to StreamField so that assignments and defaults can be passed in a wider range of data types (Joshua Munn, Matt Westcott)
• Allow specifying a STORAGES alias name for WAGTAILIMAGES_RENDITION_STORAGE (Alec Baron)
• Update PASSWORD_REQUIRED_TEMPLATE setting to WAGTAIL_PASSWORD_REQUIRED_TEMPLATE with deprecation of previous naming (Saksham Misra, LB (Ben) Johnston)
• Update DOCUMENT_PASSWORD_REQUIRED_TEMPLATE setting to WAGTAILDOCS_PASSWORD_REQUIRED_TEMPLATE with deprecation of previous naming (Saksham Misra, LB (Ben) Johnston)
• When editing settings (contrib) use the same icon in the editing view that was declared when registering the setting (Vince Salvino, Rohit Sharma)
• Populate django-treebeard cache during page routing to improve performance of get_parent (Nigel van Keulen)
• Add a new user profile preference to configure user interface information density (Thibaud Colas)
• Add additional field types to Elasticsearch mapping (scott-8)
• Fix: CVE-2024-32882: Permission check bypass when editing a model with per-field restrictions through wagtail.contrib.settings or ModelViewSet (Ben Morse, Joshua Munn, Jake Howard, Sage Abdullah)
• Fix: Fix typo in __str__ for MySQL search index (Jake Howard)
• Fix: Ensure that unit tests correctly check for migrations in all core Wagtail apps (Matt Westcott)
• Fix: Correctly handle date objects on human_readable_date template tag (Jhonatan Lopes)
• Fix: Ensure re-ordering buttons work correctly when using a nested InlinePanel (Adrien Hamraoui)
• Fix: Consistently remove model's verbose_name in group edit view when listing custom permissions (Sage Abdullah, Neeraj Yetheendran, Omkar Jadhav)
• Fix: Resolve issue local development of docs when running make livehtml (Sage Abdullah)
• Fix: Resolve issue with unwanted padding in chooser modal listings (Sage Abdullah)
• Fix: Ensure form builder emails that have date or datetime fields correctly localize dates based on the configured LANGUAGE_CODE (Mark Niehues)
• Fix: Ensure the Stimulus UnsavedController checks for nested removal/additions of inputs so that the unsaved warning shows in more valid cases when editing a page (Karthik Ayangar)
• Fix: Ensure get_add_url() is always used to re-render the add button when the listing is refreshed in viewsets (Sage Abdullah)
• Fix: Ensure dropdown content cannot get higher than the viewport and add scrolling within content if needed (Chiemezuo Akujobi)

... (truncated)

Changelog

Sourced from wagtail's changelog.

6.1 (01.05.2024)

 * Refine wording of page & collection privacy using password is a shared password and should not be used for secure content (Rohit Sharma, Jake Howard)
 * Add RelatedObjectsColumn to the table UI framework (Matt Westcott)
 * Reduce memory usage when rebuilding search indexes (Jake Howard)
 * Support creating images in .ico format (Jake Howard)
 * Add the ability to disable the usage of a shared password for enhanced security for the private pages and collections (documents) feature (Salvo Polizzi, Jake Howard)
 * Add system checks to ensure that `WAGTAIL_DATE_FORMAT`, `WAGTAIL_DATETIME_FORMAT`, `WAGTAIL_TIME_FORMAT` are correctly configured (Rohit Sharma, Coen van der Kamp)
 * Allow custom permissions with the same prefix as built-in permissions (Sage Abdullah)
 * Allow displaying permissions linked to the Admin model's content type (Sage Abdullah)
 * Add support for Draftail's JavaScript to use chooserUrls provided by entity options & for the Draftail widget to encode lazy URLs/ translations (Elhussein Almasri)
 * Reimplement search promotions `IndexView` using the `generic.IndexView` (Rohit Sharma, Sage Abdullah, Storm Heg)
 * Reimplement redirects `IndexView` using the `generic.IndexView` (Rohit Sharma, Sage Abdullah, Temidayo Azeez)
 * Add `PageListingViewSet` for custom per-page-type page listings (Matt Westcott)
 * Add `ChooseParentView` to `PageListingViewSet` to allow creating pages from custom page listings (Abdelrahman Hamada, Sage Abdullah)
 * Implement new universal listings design for image listing view (Sage Abdullah)
 * Implement new universal listings design for document listing view (Sage Abdullah)
 * Implement new universal listings design for site and locale listing views (Sage Abdullah)
 * Implement new universal listings design for page and snippet history view (Sage Abdullah)
 * Implement new universal listings design for form builder submissions view (Sage Abdullah)
 * Implement new universal listings design for collections listing view (Sage Abdullah)
 * Implement new universal listings design for groups views (Sage Abdullah)
 * Implement new universal listings design for users views (Sage Abdullah)
 * Implement new universal listings design for workflow and task views (Sage Abdullah)
 * Refine slim header button style to match designs (Sage Abdullah)
 * Add simple admin keyboard shortcuts overview dialog, available in the help sub-menu (Karthik Ayangar, Rohit Sharma)
 * Add ability to bulk toggle permissions in the user group editing view, including shift+click for multiple selections (LB (Ben) Johnston, Kalob Taulien)
 * Update the minimum version of `djangorestframework` to 3.15.1 (Sage Abdullah)
 * Add support for related fields in generic `IndexView.list_display` (Abdelrahman Hamada)
 * Improve page fetching logic and cache route results per request (Gordon Pendleton)
 * Optimise rewriting of links / embeds in rich text using bulk database lookups (Andy Chosak)
 * Add normalization mechanism to StreamField so that assignments and defaults can be passed in a wider range of data types (Joshua Munn, Matt Westcott)
 * Allow specifying a `STORAGES` alias name for `WAGTAILIMAGES_RENDITION_STORAGE` (Alec Baron)
 * Update `PASSWORD_REQUIRED_TEMPLATE` setting to `WAGTAIL_PASSWORD_REQUIRED_TEMPLATE` with deprecation of previous naming (Saksham Misra, LB (Ben) Johnston)
 * Update `DOCUMENT_PASSWORD_REQUIRED_TEMPLATE` setting to `WAGTAILDOCS_PASSWORD_REQUIRED_TEMPLATE` with deprecation of previous naming (Saksham Misra, LB (Ben) Johnston)
 * When editing settings (contrib) use the same icon in the editing view that was declared when registering the setting (Vince Salvino, Rohit Sharma)
 * Populate django-treebeard cache during page routing to improve performance of `get_parent` (Nigel van Keulen)
 * Add a new user profile preference to configure user interface information density (Thibaud Colas)
 * Add additional field types to Elasticsearch mapping (scott-8)
 * Fix: CVE-2024-32882: Permission check bypass when editing a model with per-field restrictions through `wagtail.contrib.settings` or `ModelViewSet` (Ben Morse, Joshua Munn, Jake Howard, Sage Abdullah)
 * Fix: Fix typo in `__str__` for MySQL search index (Jake Howard)
 * Fix: Ensure that unit tests correctly check for migrations in all core Wagtail apps (Matt Westcott)
 * Fix: Correctly handle `date` objects on `human_readable_date` template tag (Jhonatan Lopes)
 * Fix: Ensure re-ordering buttons work correctly when using a nested InlinePanel (Adrien Hamraoui)
 * Fix: Consistently remove model's `verbose_name` in group edit view when listing custom permissions (Sage Abdullah, Neeraj Yetheendran, Omkar Jadhav)
 * Fix: Resolve issue local development of docs when running `make livehtml` (Sage Abdullah)
 * Fix: Resolve issue with unwanted padding in chooser modal listings (Sage Abdullah)
 * Fix: Ensure form builder emails that have date or datetime fields correctly localize dates based on the configured `LANGUAGE_CODE` (Mark Niehues)
 * Fix: Ensure the Stimulus `UnsavedController` checks for nested removal/additions of inputs so that the unsaved warning shows in more valid cases when editing a page (Karthik Ayangar)
</tr></table> 

... (truncated)

Commits

• fc4d2d0 Release note for CopyView fix (cherry-picked from e3d9233f4dc26003de131c563aa...
• f776089 Version bump to 6.1 final
• 28922b0 Fill in release date for 6.1 final
• 93b2b25 Fill in release date for 6.0.3
• 54b33e8 Release note for CVE-2024-32882 in 6.1
• 6f88076 Release note for CVE-2024-32882 in 6.0.3
• ad74c97 Merge pull request from GHSA-w2v8-php4-p8hc
• f822e8e Fetch new translations from Transifex
• cee4c61 Release note for #11912 in 6.1
• 6570dc2 Typo - this features -> these features
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1829.