summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2025-09-03[5.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL ↵Jake Howard
injection in column aliases. Thanks Eyal Gabay (EyalSec) for the report. Backport of 51711717098d3f469f795dfa6bc3758b24f69ef7 from main.
2025-09-03[5.2.x] Made cosmetic edits to 5.2.6 release notes.Sarah Boyce
Backport of d044e25dc2106b94ebdedf0bfde9238be1a3765c from main.
2025-08-31[5.2.x] Removed unused import in docs/ref/models/expressions.txt example.Clifford Gama
Backport of 21603c5b50cda80610496248810bb6391f08b648 from main
2025-08-29[5.2.x] Fixed #36431 -- Returned tuples for multi-column ForeignObject in ↵SaJH
values()/values_list(). Thanks Jacob Walls and Simon Charette for tests. Signed-off-by: SaJH <wogur981208@gmail.com> Backport of bb7a7701b1a0e8fffe14dcebf5d5bac7f176c02a from main
2025-08-29[5.2.x] Fixed #35831 -- Documented the model form meta API in model form ↵Mustafa Pirbhai
reference docs. Co-authored-by: Jonathan <3218047+jernwerber@users.noreply.github.com> Co-authored-by: Mustafa <117516335+mspirbhai@users.noreply.github.com> Backport of 183fcebf88aa0762a2e28477f9b24c34341a75f4 from main.
2025-08-27[5.2.x] Added stub release notes and release date for 5.2.6, 5.1.12, and 4.2.24.Sarah Boyce
Backport of 4c71e334401a3e83c013419d0e2211543e7e873b from main.
2025-08-27[5.2.x] Corrected definition of "needsinfo" triage stage in contributing guide.Jacob Walls
Backport of 66082a7dac7ad357446168d09e6ca3b305f1faf0 from main
2025-08-23[5.2.x] Removed reference to flake8 file exclusions.Jacob Walls
Obsolete since 41384812efe209c8295a50d78b45e0ffb2992436. (six was removed in 9285926295fbfc86b70e7be8d595d4cfbe7895b8.) Backport of 165ad74c578f94f962624a40dff14e1b2e23a1f8 from main
2025-08-22[5.2.x] Refs #35530 -- Corrected deprecation message in auth.alogin().Mariusz Felisiak
Follow up to ceecd518b19044181a3598c55ebed7c2545963cc. Backport of b3166e1e15824aedb7a609dfda18ef36ea023d06 from main.
2025-08-20[5.2.x] Corrected release notes of calling format_html() without arguments.Mariusz Felisiak
Backport of bcddf641ae705209c01a4b18a9384aa91fdc94e1 from main
2025-08-19[5.2.x] Fixed spelling of "logged-in" when used as an adjective in docs.mengxun
Backport of f5c944b3141c58bb4a5c7bbca61180b2ad7c13aa from main.
2025-08-13[5.2.x] Aligned format of constraint examples in ↵David Sanders
docs/ref/models/constraints.txt. Backport of fda3c1712a1eb7b20dfc91e6c9abae32bd64d081 from main.
2025-08-11[5.2.x] Corrected code examples in topics docs.Rohit
Backport of fa804d0d14ef4547b4fe2a88ab5d89d4eed5bacd from main.
2025-08-06[5.2.x] Added stub release notes for 5.2.6.Sarah Boyce
Backport of 0bff53b4138d8c6009e9040dbb8916a1271a68d7 from main.
2025-08-06[5.2.x] Added release date for 5.2.5.Sarah Boyce
Backport of 8999b0e2bf62ffa1ea19995508712ed8eda2cc14 from main.
2025-08-05[5.2.x] Refs #36485 -- Grouped docs checks under a unified make check target.David Smith
Added a new 'check' rule to the docs Makefile which runs both the black and spelling checks. Backport of 7f9bf357feac06bb34017e1f6c7a7730b1991ede from main.
2025-08-05[5.2.x] Refs #34140 -- Added dedicated code block formatting section in ↵David Smith
docs/internals/contributing/writing-documentation.txt. Backport of cba73281966c816824c9bfa028a1bf44e188ded2 from main.
2025-08-05[5.2.x] Fixed #36530 -- Extended fields.E347 to check for ManyToManyField ↵jkhall81
involving CompositePrimaryKey on either side. Thanks to Jacob Walls for the report. Backport of 2013092b693be0ebdf36f41dc61615a2de1bbe31 from main.
2025-08-04[5.2.x] Fixed #36535 -- Ensured compatibility with docutils 0.19 through 0.22.Natalia
Regression in 65ab92f6a83644bbb555d0eff3a02d8d9301aba4. Backport of 9cec8d9f55d90fbc162fde23d6ea7a34e322fcae from main.
2025-08-04[5.2.x] Corrected assertNumQueries() example in docs/topics/testing/tools.txt.Adam Zapletal
Backport of dca8284a376128c64bd0e0792ad12391ae3e7202 from main.
2025-08-04[5.2.x] Fixed #34871, #36518 -- Implemented unresolved lookups expression ↵Simon Charette
replacement. This allows the proper resolving of lookups when performing constraint validation involving Q and Case objects. Thanks Andrew Roberts for the report and Sarah for the tests and review. Backport of 079d31e698fa08dd92e2bc4f3fe9b4817a214419 from main.
2025-07-28[5.2.x] Fixed #36522 -- Added support for filtering composite pks using a ↵Simon Charette
tuple of expressions. Thanks Jacob Walls for the report, and Sarah Boyce and Mariusz Felisiak for reviews. Backport of 0a4999b422702c64e21f5a10a4d60300b7074401 from main.
2025-07-28[5.2.x] Moved manual testing instructions from intro to submitting patches docs.Jordan Bae
The section on manual testing, including how to use a local checkout of Django, is moved from the contribution intro to the submitting patches docs. This makes it easier for reviewers and authors to follow best practices. Backport of fdeca380724d523330db9d816c4cda50cda320fd from main.
2025-07-25[5.2.x] Fixed typo in docs/topics/email.txt.Mike Edmunds
Backport of f551aeb003ee7f43efffb0e312b014362ce1d7c4 from main.
2025-07-23[5.2.x] Added accessibility guidelines for contributors.Thibaud Colas
Backport of 5527df91921b54b9fd1eb9aca3aabe91ec58a9c7 from main.
2025-07-17[5.2.x] Fixed get_connection() signature in docs/topics/email.txt.Mike Edmunds
django.core.mail.get_connection() has always supported only variable keyword arguments (never variable positional arguments). Backport of 5289ce65b9a1963707767cc11c476679ab445135 from main.
2025-07-13[5.2.x] Fixed typo in docs/ref/utils.txt.Clifford Gama
Backport of ac2d907f459b2cb7ddea7451764e7020ffee08e6 from main
2025-07-13[5.2.x] Added Django ecosystem page to the documentation.Tim Schilling
Backport of 395e498553e4e01da1ba0ddb5c4708ad9cb8a16a from main
2025-07-10[5.2.x] Fixed #36502 -- Restored UNNEST strategy for foreign key bulk ↵Simon Charette
inserts on PostgreSQL. Regression in 764af7a3d6c0b543dcf659a2c327f214da768fe4. Backport of 0fe218842e0e396e3ab3982bd21227968a9e7fd8 from main.
2025-07-02[5.2.x] Added release date for 5.2.4.Natalia
Backport of 94ebcf8366d62f6360851b40e9c4dfe3f71d202f from main.
2025-07-02[5.2.x] Added stub release notes for 5.2.5.Natalia
Backport of 7ab6b863da9c8c41dd86bfd1ede1e48e79c719bd from main.
2025-06-30[5.2.x] Fixed #36464 -- Fixed "__in" tuple lookup on backends lacking native ↵Simon Charette
support. When native support for tuple lookups is missing in a DB backend, it can be emulated with an EXISTS clause. This is controlled by the backend feature flag "supports_tuple_lookups". The mishandling of subquery right-hand side in `TupleIn` (added to support `CompositePrimaryKey` in Refs #373) was likely missed because the only core backend we test with the feature flag disabled (Oracle < 23.4) supports it natively. Thanks to Nandana Raol for the report, and to Sarah Boyce, Jacob Walls, and Natalia Bidart for reviews. Backport of 192bc7a7be92e20cc250907fb4083df689715679 from main.
2025-06-18[5.2.x] Clarified that only latest dependency versions are valid for ↵Jake Howard
security reports. Backport of bc1bfe12b613334bd625aeb36fd44af96d186c10 from main.
2025-06-17[5.2.x] Added guidance on AI-assisted security reports to ↵nessita
docs/internals/security.txt. Co-authored-by: Shai Berger <shai@platonix.com> Co-authored-by: Mike Edmunds <medmunds@gmail.com> Backport of 0f60102444d8a2cfb662a7b11b3911b52567ee54 from main.
2025-06-16[5.2.x] Fixed #36453 -- Made When.condition resolve with for_save=False.Clifford Gama
Value(None, JSONField()) when used in When.condition incorrectly resolved with for_save=True, resulting in the value being serialized as SQL NULL instead of JSON null. Regression in c1fa3fdd040718356e5a3b9a0fe699d73f47a940. Thanks to Thomas McKay for the report, and to David Sanders and Simon Charettes for the review. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> Backport of 104cbfd44b9eff010daf0ef0e1ce434385855b13 from main.
2025-06-16[5.2.x] Fixed #36447 -- Selected preferred media type based on quality.Jake Howard
When matching which entry in the `Accept` header should be used for a given media type, the specificity matters. However once those are resolved, only the quality matters when selecting preference. Regression in c075508b4de8edf9db553b409f8a8ed2f26ecead. Thank you to Anders Kaseorg for the report. Backport of 12c1557060fc94fe5e1fbddc4578a4e29d38f77c from main.
2025-06-13[5.2.x] Corrected jsonfield fieldlookup references.Sarah Boyce
Backport of 8e2249bc79a74d96f9ad20c89f82a89c78d4b648 from main.
2025-06-12[5.2.x] Fixed #36463 -- Fixed grammar in docs/intro/contributing.txt.Sulove Bista
Backport of e80b33ae4d6f93375b10b2fe50bd6f588f1246ad from main.
2025-06-12[5.2.x] Fixed #36454 -- Fixed typo in docs/intro/tutorial08.txt.ruvilonix
Backport of 87a5ae6c5b55da922e47226e6d54c6d26466a0bd from main.
2025-06-11[5.2.x] Fixed #36425 -- Standardized integer fields descriptions.junghwan16
Backport of 091f66e51aa900f7d7650529621bdc8e4b0dee68 from main.
2025-06-10[5.2.x] Added follow-up to CVE-2025-48432 to security archive.Sarah Boyce
Backport of 2714bc3f2c8675d32caae764c874ac381c836c7f from main.
2025-06-10[5.2.x] Added stub release notes for 5.2.4.Sarah Boyce
Backport of 7fcc7b1a0cc7e7c542b37a094731bbf632636f1f from main.
2025-06-10[5.2.x] Refs #373 -- Doc'd that on_delete is ignored for ForeignObject.Jacob Walls
Backport of 76e1ca77bc9cdfa12df9541c32b75af926dbdfea from main.
2025-06-10[5.2.x] Fixed #36449 -- Fixed field types in example model using ForeignObject.Jacob Walls
Backport of 59427547692b433bef3640a96cc0f6601f57532f from main.
2025-06-09[5.2.x] Fixed #36446 -- Restored "q" in internal MediaType.params property.Natalia
The "q" key was removed while addressing ticket #36411. Despite `MediaType.params` is undocumented and considered internal, it was used in third-party projects (Zulip reported breakage), so this work restored the `q` key in `params`. Thanks Anders Kaseorg for the report. Regression in c075508b4de8edf9db553b409f8a8ed2f26ecead. Backport of cf5f36bf903a2854f5e395149cee707115b83744 from main.
2025-06-06[5.2.x] Fixed #36419 -- Ensured for_save was propagated when resolving ↵Clifford Gama
expressions. The for_save flag wasn't properly propagated when resolving expressions, which prevented get_db_prep_save() from being called in some cases. This affected fields like JSONField where None would be saved as JSON null instead of SQL NULL. Regression in 00c690efbc0b10f67924687f24a7b30397bf47d9. Thanks to David Sanders and Simon Charette for reviews. Co-authored-by: Adam Johnson <me@adamj.eu> Backport of c1fa3fdd040718356e5a3b9a0fe699d73f47a940 from main.
2025-06-06[5.2.x] Refs CVE-2025-48432 -- Prevented log injection in remaining response ↵Jake Howard
logging. Migrated remaining response-related logging to use the `log_response()` helper to avoid potential log injection, to ensure untrusted values like request paths are safely escaped. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 957951755259b412d5113333b32bf85871d29814 from main.
2025-06-06[5.2.x] Updated translations from Transifex.Sarah Boyce
2025-06-04[5.2.x] Added CVE-2025-48432 to security archive.Natalia
Backport of 51923c576a596ad00214e44028f9dee9748bce95 from main.
2025-06-04[5.2.x] Added stub release notes for 5.2.3.Natalia
Backport of 1f19c36e2d57607b82476cc90bc881ac2586d2d5 from main.
generated by cgit v1.3 (git 2.53.0) at 2026-07-03 15:25:49 +0000