summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-11-19[6.0.x] Bumped version for 6.0 release candidate 1 release.6.0rc1Natalia
2025-11-18[6.0.x] Fixed #36733 -- Escaped attributes in Stylesheet.__str__().varunkasyap
Thanks Mustafa Barakat for the report, Baptiste Mispelon for the triage, and Jake Howard for the review. Backport of e05f2a75695b5f5faa7682d4053db4776d4d6f93 from main.
2025-11-18[6.0.x] Fixed #36141 -- Checked for applied replaced migrations recursively.Georgi Yanchev
Regression in 64b1ac7292c72d3551b2ad70b2a78c8fe4af3249. Backport of b07298a73a8d444b3618aad8005055bee5ead8cb from main.
2025-11-17[6.0.x] Fixed #26379 -- Doc'd that the first filter() on a many-to-many ↵Annabelle Wiegart
relation is sticky. Backport of 3c005b5f79bf6d71f3f4c3692ed670e1722b0fb6 from main.
2025-11-13[6.0.x] Fixed #36686 -- Clarified Meta.ordering is ignored in GROUP BY queries.Kasyap Pentamaraju
Backport of 7e765a68598b2b798e49bf1f4b431a7bcac085a4 from main.
2025-11-13[6.0.x] Fixed #36730 -- Fixed constraint validation crash for excluded FK ↵Adam Johnson
attnames. Regression in e44e8327d3d88d86895735c0e427102063ff5b55. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of abfa4619fb818ff694c22e962a280673e085239e from main
2025-11-10[6.0.x] Fixed typo in docs/ref/databases.txt.Clifford Gama
Backport of 2b0f24e6223bf7e294fba63741f58eb7b0bf49ff from main.
2025-11-10Refs #36680 -- Avoided manipulating PATH in AdminScriptTestCase.Jacob Walls
This mostly reverts 6436ec321073bf0622af815e0af08f54c97f9b30, which was fragile. Instead, if black is present, we use it to format the expected and actual results, instead of hard-coding the expected formatted value. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2025-11-10[6.0.x] Fixed unsafe variable interpolation in GitHub Action workflow.Markus Holtermann
Thank you Davide Netti for the report and initial patch. Co-authored-by: Davide Netti <davide.netti4@gmail.com> Backport of 01c70ba14899409e86dc3f6c6bcae0afc48094e7 from main.
2025-11-10[6.0.x] Clarified "get_db_prep_value" default result in ↵Clifford Gama
docs/ref/models/fields.txt. Backport of c135be349ddd9fd71b15d4b20e7fc46814e4ca7c from main.
2025-11-10[6.0.x] Clarified EmailValidator docs to specify it validates an email address.Hong Xu
Updated the EmailValidator docs in docs/ref/validators.txt to explicitly state that it validates an email address, to avoid confusion with validating email message content. Backport of a4f76741340fb23566795e83f830a3f2d49acce0 from main.
2025-11-06[6.0.x] Removed community packages admonition from settings docs.Tim Schilling
Backport of 5ef870fbc5a65cce65b42a8f9cdb208a32d3dd31 from main.
2025-11-06[6.0.x] Added community package email backends mention to docs.Tim Schilling
Co-authored-by: Clifford Gama <cliffygamy@gmail.com> Backport of 47ac64ed8bba4de98376b961c739036b3199394b from main.
2025-11-05[6.0.x] Fixed #36710 -- Fixed a regression in urlize for multipart domain names.Mehraz Hossain Rumman
Thanks Mehraz Hossain Rumman for the report and Bruno Alla for the triage. Regression in a9fe98d5bd4212d069afe8316101984aadecfbb2. Backport of 125b63ca745bace1e098ed3c7362d59136f68a8b from main.
2025-11-05[6.0.x] Added CVE-2025-64458 and CVE-2025-64459 to security archive.Natalia
Backport of c5a107e8248813f07325ae65232b5e53e9ac4238 from main.
2025-11-05[6.0.x] Added stub release notes for 5.2.9.Natalia
Backport of 6e18c078d5c044a1d22dd6a64ace11d9e5f6d0bc from main.
2025-11-05[6.0.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on ↵Jacob Walls
dictionary expansion. Backport of 3c3f46357718166069948625354b8315a8505262 from main.
2025-11-05[6.0.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via ↵Jacob Walls
the _connector kwarg. Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon Charette, and Jake Howard for the reviews. Backport of 98e642c69181c942d60a10ca0085d48c6b3068bb from main.
2025-11-05[6.0.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in ↵Jacob Walls
HttpResponseRedirect/HttpResponsePermanentRedirect on Windows. Thanks Seokchan Yoon for the report, Markus Holtermann for the triage, and Jake Howard for the review. Follow-up to CVE-2025-27556 and 39e2297210d9d2938c75fc911d45f0e863dc4821. Backport of c880530ddd4fabd5939bab0e148bebe36699432a from main.
2025-11-04[6.0.x] Fixed #36704 -- Fixed system check error for proxy model with a ↵Hal Blackburn
composite pk. Proxy models subclassing a model with a CompositePrimaryKey were incorrectly reporting check errors because the check that requires only local fields to be used in a composite pk was evaluated against the proxy subclass, which has no fields. To fix this, composite pk field checks are not evaluated against proxy subclasses, as none of the checks are applicable to proxy subclasses. This also has the benefit of not double-reporting real check errors from an invalid superclass pk. Thanks Clifford Gama for the review. Backport of 74564946c3b42a2ef7d087047e49873847a7e1d9 from main.
2025-11-04[6.0.x] Updated ticket triage process diagram and contributing docs.ontowhee
Backport of eaf7b563a5d3861026242fdb503a58f71acf17f6 from main.
2025-10-31[6.0.x] Fixed #36696 -- Fixed NameError when inspecting functions with ↵Patrick Rauscher
deferred annotations. In Python 3.14, annotations are deferred by default, so we should not assume that the names in them have been imported unconditionally. Backport of 601914722956cc41f1f2c53972d669ddee6ffc04 from main.
2025-10-30[6.0.x] Added community package storage backends mention to docs.Tim Schilling
Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com> Backport of 340e4f832e1ea74a27770e38635bbc781979f2e0 from main.
2025-10-30[6.0.x] Refs #36680 -- Fixed admin_scripts tests crash when black is not ↵Mariusz Felisiak
installed. Regression in 6436ec321073bf0622af815e0af08f54c97f9b30. Backport of 3939cd279569fde44f557d79f20bb5b1a02440af from main.
2025-10-29[6.0.x] Fixed #36596 -- Made parallel test runner respect django_test_skips ↵Mariusz Felisiak
and django_test_expected_failures. Backport of 9ba3f74a46d15f9f2f45ad4ef8cdd245a888e58e from main.
2025-10-29[6.0.x] Fixed #36680 -- Parametrized formatter discovery in AdminScriptTestCase.Jacob Walls
Backport of 6436ec321073bf0622af815e0af08f54c97f9b30 from main.
2025-10-29[6.0.x] Fixed parameter names in in "New contributor" GitHub action.Mariusz Felisiak
Follow up to 407ab793573ce82c93cfdc86e5a0a7fa804f60f5. Backport of 37df013195c4ddc8aa7c4334126419a358149d3c from main.
2025-10-29[6.0.x] Pinned "New contributor" GitHub action to v1.Jacob Walls
Later versions misidentify all contributors as new ones if the project does not enable issues. Follow-up to b7507bad7730e5f6558cfcce29976f65890083ca. Backport of 407ab793573ce82c93cfdc86e5a0a7fa804f60f5 from main.
2025-10-29[6.0.x] Added required "issue_message" input to "New contributor" GitHub action.Tim Kamanin
Backport of dfb04d94723b5b1e4d552a53b5bb328a7c6ca517 from main.
2025-10-29[6.0.x] Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26.Jacob Walls
Backport of ab108bf94dfc06c311d7dc81866b848fe5b5ee6c from main.
2025-10-29[6.0.x] Fixed #36678 -- Limited retries in ParallelTestRunner.Jacob Walls
Thanks Natalia Bidart for the review. Backport of 1aa69a7491ce7f7f1f164a26a3dfaaa1aeeab217 from main.
2025-10-27[6.0.x] Fixed #36681 -- Removed English pluralization bias from example in ↵Kasyap Pentamaraju
docs/topics/i18n/translation.txt. Backport of 0ea01101c3a35568bc43e9707ac058b9874bd425 from main.
2025-10-23[6.0.x] Fixed #35095 -- Clarified Swiss number formatting in ↵Annabelle Wiegart
docs/topics/i18n/formatting.txt. Co-authored-by: Ahmed Nassar <a.moh.nassar00@gmail.com> Backport of 74239181252ca73bebb84789856f5d8937d421b4 from main.
2025-10-22[6.0.x] Bumped version for 6.0 beta 1 release.6.0b1Natalia
2025-10-22[6.0.x] Made cosmetic edits to docs/releases/6.0.txt.Natalia
Backport of 42d6e20feba81fb1182c8111d0c18e492fbe4e87 from main.
2025-10-21[6.0.x] Fixed #36677 -- Fixed scheduling of system checks in ↵Jacob Walls
ParallelTestSuite workers. Running system checks in workers must happen after database aliases are set up. Regression in 606fc352799e372928fa2c978ab99f0fb6d6017c. Backport of b6c9246d0a3ef5f9a40b15cc289b495351eae109 from main.
2025-10-21[6.0.x] Made RemoteTestResultTest.test_pickle_errors_detection() compatible ↵Mariusz Felisiak
with tblib 3.2+. tblib 3.2+ makes exception subclasses with __init__() and the default __reduce__() picklable. This broke the test for RemoteTestResult._confirm_picklable(), which expects a specific exception to fail unpickling. https://github.com/ionelmc/python-tblib/blob/master/CHANGELOG.rst#320-2025-10-21 This fix defines ExceptionThatFailsUnpickling.__reduce__() in a way that pickle.dumps(obj) succeeds, but pickle.loads(pickle.dumps(obj)) raises TypeError. Refs #27301. This preserves the intent of the regression test from 52188a5ca6bafea0a66f17baacb315d61c7b99cd without skipping it. Backport of 548209e620b3ca34396a360453f07c8dbb8aa6c7 from main.
2025-10-21[6.0.x] Fixed #36656 -- Avoided truncating async streaming responses in ↵Adam Johnson
GZipMiddleware. Backport of a0323a0c44135c28134672e6e633e5f4a7a68d5d from main.
2025-10-20[6.0.x] Fixed #36470 -- Prevented log injection in runserver when handling ↵YashRaj1506
NOT FOUND. Migrated `WSGIRequestHandler.log_message()` to use a more robust `log_message()` helper, which was based of `log_response()` via factoring out the common bits. Refs CVE-2025-48432. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 9bb83925d6c231e964f8b54efbc982fb1333da27 from main.
2025-10-20[6.0.x] Removed duplicate display_raw key in expected data in ↵Emmanuel Ferdman
GeometryWidgetTests. Signed-off-by: Emmanuel Ferdman <emmanuelferdman@gmail.com> Backport of 5625bd590766e5ca8c2c76ba2307b98f7450ff83 from main.
2025-10-20[6.0.x] Fixed RelatedGeoModelTest.test_related_union_aggregate() test on ↵Mariusz Felisiak
Oracle and GEOS 3.12+. Backport of 344ae16e1e21ab7c0b594d755519738f7f16eaf1 from main
2025-10-19[6.0.x] Refs #36005 -- Bumped minimum supported versions of docutils to 0.22.Mariusz Felisiak
Backport of ca3e0484ef31d13053af6a9d50667813e22fc282 from main.
2025-10-17[6.0.x] Refs #35844 -- Doc'd Python 3.14 compatibility.Mariusz Felisiak
Backport of 56977b466c33ca3da14a1ed2609172425a76a34e from main.
2025-10-17[6.0.x] Refs #35844 -- Relaxed GEOSIOTest.test02_wktwriter() test assertion.Mariusz Felisiak
Backport of 2d9c194d5a0d9ae746e16ee5f641e30d544dc31b from main
2025-10-17[6.0.x] Fixed #36669 -- Doc'd that negative indexes are not supported in F() ↵aj2s
slices. Backport of f715bc8990b5b8a1df948c2b71e8edbdda47e7db from main.
2025-10-16[6.0.x] Bumped minimum isort version to 7.0.0.Jacob Walls
Added ignores relating to https://github.com/PyCQA/isort/issues/2352. Backport of d980d68609448a4c85763fa34e471ff80540888b from main.
2025-10-15[6.0.x] Refs #36648 -- Removed hardcoded pk in CompositePKAggregateTests.Jacob Walls
Backport of bee64561a6e8cd22995c2b1254bab66dae892a6d from main.
2025-10-15[6.0.x] Fixed 36622 -- Prevented LazyObject FileField storages from ↵Clifford Gama
evaluating at boot time. Co-authored-by: Fabien MICHEL <fmichel@adista.fr> Backport of 6862d46dd96d71d80d6d2fa9873a93d811b39562 from main.
2025-10-15[6.0.x] Fixed #36659 -- Fixed flatpage content selector in admin forms.css.Baptiste Mispelon
Regression in bb145e2c47d71b7f68280c00ced727442d2effa2. Backport of 2b62951fecf0024ce9ce0ce9f5be512c10747c0d from main.
2025-10-15Skipped GISFunctionsTests.test_geometry_type() test for MultiPoint on ↵Mariusz Felisiak
MariaDB and GEOS 3.12+. GEOSWKTWriter_write() behavior was changed in GEOS 3.12+ to include parentheses for sub-members (https://github.com/libgeos/geos/pull/903). MariaDB doesn't accept WKT representations with additional parentheses for MultiPoint. This is an accepted bug (MDEV-36166) in MariaDB that should be fixed in the future: - https://jira.mariadb.org/browse/MDEV-36166
generated by cgit v1.3 (git 2.53.0) at 2026-07-08 15:27:00 +0000