| Age | Commit message (Expand) | Author |
| 2 days | Fixed #37257, Refs #35738 -- Prevented double-dot deprecation warnings for te... | Adam Johnson |
| 7 days | Added stub release notes for 6.1.1. | Jacob Walls |
| 7 days | Finalized release notes for Django 6.1. | Jacob Walls |
| 8 days | Added CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, and CVE-2026-15920 to s... | Natalia |
| 9 days | Fixed CVE-2026-15920 -- Made display_for_field() validate URLs before renderi... | Natalia |
| 9 days | Fixed CVE-2026-15830 -- Mitigated potential DoS via nested geometry collections. | Jacob Walls |
| 9 days | Fixed CVE-2026-15337 -- Mitigated potential DoS in check_for_language(). | Natalia |
| 9 days | Fixed CVE-2026-15307 -- Blocked raster strings and dicts in spatial lookups. | Jacob Walls |
| 9 days | Refs #28586 -- Renamed RAISE fetch mode to FETCH_RAISE. | Jacob Walls |
| 12 days | Fixed #36626 -- Preserved milliseconds in DataSource time fields. | Francesco Bruni |
| 13 days | Refs #37139 -- Doc'd _is_pk_set() handling of DatabaseDefault. | Jacob Walls |
| 13 days | Fixed #37235 -- Added compatibility for sqlparse 0.5.5. | Sarah Boyce |
| 2026-07-29 | Fixed #37234 -- Fixed bulk_create() for late-saved related primary keys. | Filip Sedlák |
| 2026-07-28 | Added stub release notes and release date for 6.0.8 and 5.2.17. | Natalia |
| 2026-07-24 | Fixed #37160 -- Made admin views raise PermissionDenied consistently. | Natalia |
| 2026-07-24 | Fixed minor typos and grammatical errors in docs and docstrings. | Jacob Walls |
| 2026-07-23 | Fixed #36027 -- Made error response rendering thread-sensitive. | Carlton Gibson |
| 2026-07-22 | Added expected end of support dates for 6.1. | Jacob Walls |
| 2026-07-16 | Fixed #32915 -- Suppressed fewer ImportErrors in management commands. | Ben Cail |
| 2026-07-15 | Updated asgiref dependency. | Carlton Gibson |
| 2026-07-13 | Fixed #37178 -- Moved MiddlewareMixin out of utils.deprecation. | CharulL00 |
| 2026-07-10 | Fixed #36864 -- Supported modules and submodules in import_string(). | Leland |
| 2026-07-10 | Fixed #35813 -- Made migrations track all changes to unmanaged models. | Hanny |
| 2026-07-08 | Refs #36277 -- Added release note for Postgres 18+ virtual column. | Simon Charette |
| 2026-07-07 | Added CVE-2026-48588, CVE-2026-53877, and CVE-2026-53878 to security archive. | Jacob Walls |
| 2026-07-07 | Added stub release notes for 6.0.8. | Jacob Walls |
| 2026-07-06 | Fixed CVE-2026-53878 -- Prevented newlines from being accepted in DomainNameV... | Natalia |
| 2026-07-06 | Fixed CVE-2026-53877 -- Prevented heap buffer over-read when creating GDALRas... | Jacob Walls |
| 2026-07-06 | Fixed CVE-2026-48588 -- Prevented caching of responses that set cookies and v... | Natalia |
| 2026-06-30 | Added stub release notes and release date for 6.0.7 and 5.2.16. | Jacob Walls |
| 2026-06-26 | Fixed #37184 -- Allowed non-UTF-8 bytes passwords in the PBKDF2 and MD5 passw... | Jacob Walls |
| 2026-06-24 | Refs #35514 -- Added migration guide link to `AdminEmailHandler` deprecation ... | Adam Johnson |
| 2026-06-24 | Refs #35870 -- Mentioned transitional setting in BLANK_CHOICE_DASH release note. | Jacob Walls |
| 2026-06-24 | Refs #37101, #37174 -- Added release note for cache misses when varying on ar... | Jacob Walls |
| 2026-06-23 | Fixed #37166 -- Added deploy system check for dev-only 'default' MAILERS. | Mike Edmunds |
| 2026-06-22 | Fixed #37161 -- Warned via system check on missing "default" entry in MAILERS... | badereddinebenhirt |
| 2026-06-22 | Refs #32785 -- Fixed Sphinx reference in release note. | Jacob Walls |
| 2026-06-18 | Fixed #37143 -- Added missing chunk_size=None check to QuerySet.aiterator(). | zhengkangyang |
| 2026-06-16 | Fixed #37152 -- Raised ValueError when Bcc is used in EmailMessage headers. | diaxoaine |
| 2026-06-16 | Refs #37142 -- Removed docs for django.utils.warnings.django_file_prefixes(). | Natalia |
| 2026-06-11 | Fixed #37141 -- Added --using option to sendtestemail command. | NagaKartheekReddy |
| 2026-06-11 | Fixed #36837 -- Skipped backends not implementing (a)get_user() in (a)force_l... | Sezer BOZKIR |
| 2026-06-10 | Fixed #37142 -- Moved django_file_prefixes() to django.utils.warnings. | zhengkangyang |
| 2026-06-08 | Fixed #32785 -- Optimized cull frequency for DBCache. | eevelweezel |
| 2026-06-05 | Fixed #36984 -- Made inline formset error messages respect delete_confirmatio... | Karolis Ryselis |
| 2026-06-03 | Refs CVE-2026-6873 -- Defaulted SIGNED_COOKIE_LEGACY_SALT_FALLBACK transition... | Jacob Walls |
| 2026-06-03 | Added CVE-2026-6873, CVE-2026-7666, CVE-2026-8404, CVE-2026-35193, and CVE-20... | Natalia |
| 2026-06-03 | Added stub release notes for 6.0.7. | Natalia |
| 2026-06-03 | Fixed CVE-2026-48587 -- Ignored whitespace padding when checking Vary header ... | Jake Howard |
| 2026-06-03 | Fixed CVE-2026-35193 -- Varied on Authorization when caching non-public respo... | Jacob Walls |