django.git/django/db/models/query_utils.py, branch stable/5.2.x

[5.2.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via the _connector kwarg.

2025-11-05T12:33:15Z

Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon Charette, and Jake Howard for the reviews. Backport of c880530ddd4fabd5939bab0e148bebe36699432a from main.

[5.2.x] Fixed #34871, #36518 -- Implemented unresolved lookups expression replacement.

2025-08-04T07:42:32Z

This allows the proper resolving of lookups when performing constraint validation involving Q and Case objects. Thanks Andrew Roberts for the report and Sarah for the tests and review. Backport of 079d31e698fa08dd92e2bc4f3fe9b4817a214419 from main.

Refs #373 -- Added Model._is_pk_set() abstraction to check if a Model's PK is set.

2024-09-09T20:46:50Z

Fixed #35712 -- Prevented Q.check() from leaving the connection in an unusable state.

2024-09-02T15:00:55Z

Co-authored-by: Simon Charette

Refs #34007, Refs #35359 -- Added Q.referenced_based_fields property.

2024-05-02T17:05:13Z

Thank you to Mariusz Felisiak and Natalia Bidart for the reviews.

Refs #35356 -- Clarified select related with masked field logic.

2024-04-23T16:17:17Z

By always including related objects in the select mask via adjusting the defer logic (_get_defer_select_mask()), it becomes possible for select_related_descend() to treat forward and reverse relationships indistinctively. This work also simplifies and adds comments to select_related_descend() to make it easier to understand.

Fixed #35241 -- Cached model's full parent list.

2024-02-26T04:38:31Z

co-authored-by: Keryn Knight co-authored-by: Natalia <124304+nessita@users.noreply.github.com> co-authored-by: David Smith co-authored-by: Paolo Melchiorre

Applied Black's 2024 stable style.

2024-01-26T11:45:07Z

https://github.com/psf/black/releases/tag/24.1.0

Fixed #34842 -- Fixed ModelAdmin.readonly_fields crash with GeneratedFields.

2023-09-16T18:13:02Z

Fixed #31300 -- Added GeneratedField model field.

2023-09-07T04:19:08Z

Thanks Adam Johnson and Paolo Melchiorre for reviews. Co-Authored-By: Lily Foote Co-Authored-By: Mariusz Felisiak