django.git/django/db/models/sql/query.py, branch 5.2b1

[5.2.x] Fixed #36149 -- Allowed subquery values against tuple exact and in lookups.

2025-02-11T08:16:44Z

Non-tuple exact and in lookups have specialized logic for subqueries that can be adapted to properly assign select mask if unspecified and ensure the number of involved members are matching on both side of the operator. Backport of 41239fe34d64e801212dccaa4585e4802d0fac68 from main.

[5.2.x] Fixed #35677 -- Avoided non-sticky filtering of prefetched many-to-many.

2025-02-06T13:31:32Z

The original queryset._next_is_sticky() call never had the intended effect as no further filtering was applied internally after the pk__in lookup making it a noop. In order to be coherent with how related filters are applied when retrieving objects from a related manager the effects of what calling _next_is_sticky() prior to applying annotations and filters to the queryset provided for prefetching are emulated by allowing the reuse of all pre-existing JOINs. Thanks David Glenck and Thiago Bellini Ribeiro for the detailed reports and tests. Backport of 2598b371a93e21d84b7a2a99b2329535c8c0c138 from main.

[5.2.x] Fixed #36109 -- Fixed RecursionError when stacking FilteredRelation joins.

2025-01-27T09:34:16Z

Backport of 8eca4077f60fa0705ecfd9437c9ceaeef7a3808b from main.

Fixed #36029 -- Handled implicit exact lookups in condition depth checks for FilteredRelation.

2025-01-03T07:40:13Z

Fixed #373 -- Added CompositePrimaryKey.

2024-11-29T10:23:04Z

Thanks Lily Foote and Simon Charette for reviews and mentoring this Google Summer of Code 2024 project. Co-authored-by: Simon Charette Co-authored-by: Lily Foote

Fixed #35744 -- Relabelled external aliases of combined queries.

2024-10-14T23:21:48Z

Just like normal queries, combined queries' outer references might fully resolve before their reference is assigned its final alias. Refs #29338. Thanks Antony_K for the report and example, and thanks Mariusz Felisiak for the review.

Fixed #35586 -- Added support for set-returning database functions.

2024-08-12T13:35:19Z

Aggregation optimization didn't account for not referenced set-returning annotations on Postgres. Co-authored-by: Simon Charette

Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection attacks against JSON fields.

2024-08-06T06:50:08Z

Thanks Eyal (eyalgabay) for the report.

Refs #373 -- Added tuple lookups.

2024-08-01T15:26:09Z

Fixed #35585 -- Corrected Query.exists() call in Query.has_results().

2024-07-23T14:36:26Z