chango.git/docs/internals, branch main

Fixed #35738 -- Deprecated double-dot variable lookups.

2026-04-28T17:07:11Z

Fixed #35870 -- Made blank choice label in forms more accessible.

2026-04-22T21:06:29Z

Added new constant django.db.models.fields.BLANK_CHOICE_LABEL for an accessible and translatable blank choice label in forms. Deprecated django.db.models.fields.BLANK_CHOICE_DASH constant. Added the immediately deprecated transitional setting USE_BLANK_CHOICE_DASH. Co-Authored-By: Marijke Luttekes

Fixed #35007 -- Replaced ESLint with Biome for JavaScript linting and formatting.

2026-04-19T10:45:56Z

Updated release procedure with new CVE workflows.

2026-04-19T09:30:30Z

Now that the DSF is a CVE Numbering Authority (CNA), we manage our own CVE assignments.

Fixed #37028 -- Added BitAnd(), BitOr(), and BitXor() aggregates.

2026-04-18T06:53:21Z

Clarified that reporters shouldn't set their own tickets as "Accepted".

2026-04-17T20:26:55Z

Fixed #37020 -- Removed guidance to edit fetched .po files by hand.

2026-04-10T17:37:12Z

Altering the .po files by hand was causing incorrect line numbers and plural forms. Since our fetching procedure does not recompile any hand-edited .po files to .mo files for production use, just accept Transifex's plural forms as a source of truth. https://forum.djangoproject.com/t/discourage-releasers-from-editing-po-files-by-hand/44441

Refs #37020 -- Corrected example command to update translation catalogs.

2026-04-10T17:37:12Z

Passing the --domain flag again just overwrites the prior value.

Added section for respecting maintainer time to the security policy.

2026-04-02T14:36:26Z

This follows a post from Seth Larson (Security Developer-in-Residence at the PSF): https://sethmlarson.dev/respecting-maintainer-time-should-be-in-security-policies

Fixed #36862 -- Doc'd the need for a proxy when deploying RemoteUserMiddleware under ASGI.

2026-04-02T13:19:07Z

We have a flood of nuisance security reports describing ASGI deployments using RemoteUserMiddleware without a fronting proxy, which is not realistic.