| Age | Commit message (Expand) | Author |
| 4 days | Fixed #37317 -- Deprecated passing table names to createcachetable. | Dmitri Leiko |
| 4 days | Fixed #33752 -- Added support for exception groups to technical 500 debug pages. | krystof |
| 4 days | Fixed #37471 -- Made models.E050 detect generic relations with database-level... | Akshat |
| 9 days | Fixed #30306 -- Added input_type to Textarea widget. | Hossein |
| 10 days | Fixed #36022 -- Renamed django-admin to django. | Ryan Hiebert |
| 12 days | Added CVE-2026-108147, CVE-2026-111211, CVE-2026-111362, CVE-2026-113593, CVE... | Jacob Walls |
| 12 days | Added stub release notes for 6.1.4. | Jacob Walls |
| 12 days | Fixed CVE-2026-114582 -- Blocked file and network access when setting SRS on ... | Jacob Walls |
| 12 days | Fixed CVE-2026-113733 -- Fixed password hash disclosure to "view only" admin ... | Natalia |
| 12 days | Fixed CVE-2026-113593 -- Differentiated empty and missing headers in response... | Andrew James Gonzalez |
| 12 days | Fixed CVE-2026-111362 -- Blocked external CRS values in GeoJSON geometries. | Jacob Walls |
| 12 days | Fixed CVE-2026-111211 -- Escaped log messages in BaseGeometryWidget.deseriali... | David Smith |
| 12 days | Fixed CVE-2026-108147 -- Bounded memory use of base64 file uploads in MultiPa... | Natalia |
| 13 days | Fixed #37436 -- Avoided overwriting when FETCH_PEERS fetches deferred fields. | Namraa Patel |
| 2026-10-30 | Refs #35514, #37293 -- Corrected removal version for EMAIL_* settings in 6.1 ... | Natalia |
| 2026-10-29 | Fixed #37463 -- Fixed attrs mutation in legend_tag(). | Jacob Walls |
| 2026-10-28 | Fixed #37089 -- Made ignore_warnings() match substrings by default. | HelmiDev03 |
| 2026-10-28 | Refs #35899 -- Added allow_multiline_tags transitional template option to dis... | =?UTF-8?q?Anders=20Hovm=C3=B6ller?= |
| 2026-10-28 | Fixed #35899 -- Allowed multiline template tags. | =?UTF-8?q?Anders=20Hovm=C3=B6ller?= |
| 2026-10-27 | Confirmed release date for 6.1.3, 6.0.10, and 5.2.19. | Jacob Walls |
| 2026-10-26 | Fixed #37232 -- Added support for the HTTP QUERY method. | Michiel W. Beijen |
| 2026-10-23 | Updated asgiref dependency. | Carlton Gibson |
| 2026-10-23 | Fixed #30949 -- Deprecated django.utils.functional.cached_property. | Jacob Rief |
| 2026-10-23 | Refs #30949 -- Replaced django.utils.functional.cached_property with functool... | Jacob Rief |
| 2026-10-22 | Fixed #37447 -- Fixed makemessages with non-ASCII file names on Windows. | Natalia |
| 2026-10-22 | Fixed #37395 -- Emitted 'none' for CSP directives left empty by an unused nonce. | Sanskar Kharya |
| 2026-10-22 | Fixed #37401 -- Aligned safe_makedirs() with os.makedirs() semantics. | Natalia |
| 2026-10-22 | Fixed #37433 -- Escaped database error messages logged by Q.check(). | Natalia |
| 2026-10-21 | Refs #36717 -- Noted RedirectURLMixin signature changes in 6.1 release notes. | Adam Johnson |
| 2026-10-21 | Fixed #37419 -- Included CSP nonces in headers for streaming responses. | Sarah Boyce |
| 2026-10-20 | Fixed #36664 -- Doc'd Python 3.15 compatibility. | Mariusz Felisiak |
| 2026-10-11 | Fixed #37411 -- Added compatibility for oracledb 26.0.0+. | Jacob Walls |
| 2026-10-09 | Fixed #37412, Refs #34041 -- Added backwards incompatible note for admin brea... | Sarah Boyce |
| 2026-10-09 | Fixed #37118 -- Added variable support to the {% now %} template tag. | zhengkangyang |
| 2026-10-09 | Added follow-up to CVE-2026-15830 to security archive. | Sarah Boyce |
| 2026-10-08 | Fixed #37403 -- Fixed JSONField __in crash on SQLite with Value(None) express... | Clifford Gama |
| 2026-10-06 | Fixed #37405 -- Fixed crash if sort_keys option is used with YAML serializer. | Jacob Walls |
| 2026-10-06 | Added trailing newline to 6.1.3.txt. | Jacob Walls |
| 2026-10-06 | Removed reference to 6.0.8 from 6.1.2 and 5.2.18 release notes. | Jacob Walls |
| 2026-10-06 | Added CVE-2026-77050, CVE-2026-84429, CVE-2026-87890, and CVE-2026-87975 to s... | Sarah Boyce |
| 2026-10-06 | Added stub release notes for 6.1.3. | Sarah Boyce |
| 2026-10-06 | Refs CVE-2026-15830 -- Fixed WKB geometry collection limit bypasses. | Jacob Walls |
| 2026-10-06 | Fixed CVE-2026-87975 -- Prevented forging actions in model formsets with edit... | Jacob Walls |
| 2026-10-06 | Fixed CVE-2026-87890 -- Blocked bytes in spatial lookups. | Sarah Boyce |
| 2026-10-06 | Fixed CVE-2026-84429 -- Simplified parse_header_parameters by leveraging stdl... | Natalia |
| 2026-10-06 | Fixed CVE-2026-77050 -- Prevented memory exhaustion in get_supported_language... | Sarah Boyce |
| 2026-10-05 | Fixed #37322 -- Avoided transforms on spatial fields with srid=None. | Yassin Bahri |
| 2026-10-05 | Fixed #37377 -- Fixed JSONField __in crash/wrong result for Value() primitives. | Clifford Gama |
| 2026-10-05 | Fixed #37386 -- Observed delete_confirmation_max_display=0 for inlines. | Jacob Walls |
| 2026-10-02 | Fixed #37361 -- Fixed permission renames for chained RenameModel operations. | Md. Saikat Islam |