django.git/django/db/models/query_utils.py, branch fix-31295

Fixed #36912 -- Added connector validation to Q.create().

2026-04-28T10:42:49Z

Co-authored-by: Jacob Walls

Fixed #37057 -- Adjusted UniqueConstraint handling of UNKNOWN condition.

2026-04-22T21:28:35Z

When we adjusted UNKNOWN handling for CheckConstraint in refs #33996 we assumed that all usage of Q.check would benefit from this approach. However while CHECK constraints enforcement do ignore conditions involving NULL that resolve to UNKNOWN it's not the case for other type of constraints such as UNIQUE ones. Given how UNKNOWN should be treated depends on the callers context it appears that a better strategy for COALESCE wrapping is to force them to apply it if necessary. Thanks Drew Shapiro for the report.

Fixed #37036 -- Added missing flat=True arg in DeferredAttribute.fetch_many().

2026-04-18T13:39:50Z

Fixed #37016 -- Avoided propagating invalid arguments from When() to Q().

2026-04-03T13:37:32Z

Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via the _connector kwarg.

2025-11-05T12:20:57Z

Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon Charette, and Jake Howard for the reviews.

Fixed #28586 -- Added model field fetch modes.

2025-10-16T18:52:22Z

May your database queries be much reduced with minimal effort. co-authored-by: Andreas Pelme co-authored-by: Simon Charette co-authored-by: Jacob Walls

Fixed #34871, #36518 -- Implemented unresolved lookups expression replacement.

2025-08-04T07:22:53Z

This allows the proper resolving of lookups when performing constraint validation involving Q and Case objects. Thanks Andrew Roberts for the report and Sarah for the tests and review.

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23T23:17:55Z

Rewrapped long docstrings and block comments to 79 characters + newline using script from https://github.com/medmunds/autofix-w505.

Fixed #33312 -- Raised explicit exception when copying deferred model instances.

2025-05-16T06:13:57Z

Previously save() would crash with an attempted forced update message, and both save(force_insert=True) and bulk_create() would crash with DoesNotExist errors trying to retrieve rows with an empty primary key (id IS NULL). Implementing deferred field model instance copying might be doable in certain cases (e.g. when all the deferred fields are db generated) but that's not trivial to implement in a backward compatible way. Thanks Adam Sołtysik for the report and test and Clifford for the review.

Refs #373 -- Added Model._is_pk_set() abstraction to check if a Model's PK is set.

2024-09-09T20:46:50Z