django.git/docs/releases/5.2.8.txt, branch main

Added missing ticket links in docs/releases/5.2.8.txt.

2025-11-20T22:31:31Z

Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via the _connector kwarg.

2025-11-05T12:20:57Z

Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon Charette, and Jake Howard for the reviews.

Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedirect/HttpResponsePermanentRedirect on Windows.

2025-11-05T12:20:57Z

Thanks Seokchan Yoon for the report, Markus Holtermann for the triage, and Jake Howard for the review. Follow-up to CVE-2025-27556 and 39e2297210d9d2938c75fc911d45f0e863dc4821.

Fixed #36704 -- Fixed system check error for proxy model with a composite pk.

2025-11-04T16:59:21Z

Proxy models subclassing a model with a CompositePrimaryKey were incorrectly reporting check errors because the check that requires only local fields to be used in a composite pk was evaluated against the proxy subclass, which has no fields. To fix this, composite pk field checks are not evaluated against proxy subclasses, as none of the checks are applicable to proxy subclasses. This also has the benefit of not double-reporting real check errors from an invalid superclass pk. Thanks Clifford Gama for the review.

Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26.

2025-10-29T17:57:45Z

Refs #35844 -- Doc'd Python 3.14 compatibility.

2025-10-17T17:25:02Z

Fixed #36648, Refs #33772 -- Accounted for composite pks in first()/last() when aggregating.

2025-10-14T19:48:29Z

Fixed #36646 -- Added compatibility for oracledb 3.4.0.

2025-10-11T15:15:28Z

The Database.Binary, Date, and Timestamp attributes were changed from aliases to bytes, datetime.date, and datetime.datetime to factory functions in oracle/python-oracledb@869a887819cdac7fcd610f9d9d463ade49ea7 which made their usage inadequate for isinstance checks. Thanks John Wagenleitner for the report and Natalia for the triage. Co-authored-by: Mariusz Felisiak

Added stub release notes for 5.2.8.

2025-10-01T14:30:45Z