django.git/docs/releases/4.2.5.txt, branch main

Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().

2023-09-04T09:58:37Z

Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report. Co-authored-by: nessita <124304+nessita@users.noreply.github.com>

Fixed #34803 -- Fixed queryset crash when filtering againts deeply nested OuterRef annotations.

2023-09-01T08:44:20Z

Thanks Pierre-Nicolas Rigal for the report. Regression in c67ea79aa981ae82595d89f8018a41fcd842e7c9.

Added stub release notes and release date for 4.2.5, 4.1.11, and 3.2.21.

2023-08-28T04:10:20Z

Fixed #34779 -- Avoided unnecessary selection of non-nullable m2m fields without natural keys during serialization.

2023-08-19T08:29:43Z

By using `select_related(None)` instead of `select_related()`, the unnecessary joins are completely avoided. Note that the current tests already covers the change, when the field is not `null=True`. Regression in f9936deed1ff13b20e18bd9ca2b0750b52706b6c.

Fixed #34773 -- Fixed syncing DEFAULT_FILE_STORAGE/STATICFILES_STORAGE settings with STORAGES.

2023-08-18T16:11:24Z

Thanks Petr Dlouhý for the report. Bug in 32940d390a00a30a6409282d314d617667892841.

Fixed #34754 -- Fixed JSONField check constraints validation on NULL values.

2023-08-04T08:14:03Z

The __isnull lookup of JSONField must special case Value(None, JSONField()) left-hand-side in order to be coherent with its convoluted null handling. Since psycopg>=3 offers no way to pass a NULL::jsonb the issue is resolved by optimizing IsNull(Value(None), True | False) to True | False. Regression in 5c23d9f0c32f166c81ecb6f3f01d5077a6084318. Thanks Alexandre Collet for the report.

Added stub release notes for 4.2.5.

2023-08-01T17:52:36Z