summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2025-11-18[6.0.x] Fixed #36733 -- Escaped attributes in Stylesheet.__str__().varunkasyap
Thanks Mustafa Barakat for the report, Baptiste Mispelon for the triage, and Jake Howard for the review. Backport of e05f2a75695b5f5faa7682d4053db4776d4d6f93 from main.
2025-11-17[6.0.x] Fixed #26379 -- Doc'd that the first filter() on a many-to-many ↵Annabelle Wiegart
relation is sticky. Backport of 3c005b5f79bf6d71f3f4c3692ed670e1722b0fb6 from main.
2025-11-13[6.0.x] Fixed #36686 -- Clarified Meta.ordering is ignored in GROUP BY queries.Kasyap Pentamaraju
Backport of 7e765a68598b2b798e49bf1f4b431a7bcac085a4 from main.
2025-11-10[6.0.x] Fixed typo in docs/ref/databases.txt.Clifford Gama
Backport of 2b0f24e6223bf7e294fba63741f58eb7b0bf49ff from main.
2025-11-10[6.0.x] Clarified "get_db_prep_value" default result in ↵Clifford Gama
docs/ref/models/fields.txt. Backport of c135be349ddd9fd71b15d4b20e7fc46814e4ca7c from main.
2025-11-10[6.0.x] Clarified EmailValidator docs to specify it validates an email address.Hong Xu
Updated the EmailValidator docs in docs/ref/validators.txt to explicitly state that it validates an email address, to avoid confusion with validating email message content. Backport of a4f76741340fb23566795e83f830a3f2d49acce0 from main.
2025-11-06[6.0.x] Removed community packages admonition from settings docs.Tim Schilling
Backport of 5ef870fbc5a65cce65b42a8f9cdb208a32d3dd31 from main.
2025-11-06[6.0.x] Added community package email backends mention to docs.Tim Schilling
Co-authored-by: Clifford Gama <cliffygamy@gmail.com> Backport of 47ac64ed8bba4de98376b961c739036b3199394b from main.
2025-11-05[6.0.x] Added CVE-2025-64458 and CVE-2025-64459 to security archive.Natalia
Backport of c5a107e8248813f07325ae65232b5e53e9ac4238 from main.
2025-11-05[6.0.x] Added stub release notes for 5.2.9.Natalia
Backport of 6e18c078d5c044a1d22dd6a64ace11d9e5f6d0bc from main.
2025-11-05[6.0.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via ↵Jacob Walls
the _connector kwarg. Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon Charette, and Jake Howard for the reviews. Backport of 98e642c69181c942d60a10ca0085d48c6b3068bb from main.
2025-11-05[6.0.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in ↵Jacob Walls
HttpResponseRedirect/HttpResponsePermanentRedirect on Windows. Thanks Seokchan Yoon for the report, Markus Holtermann for the triage, and Jake Howard for the review. Follow-up to CVE-2025-27556 and 39e2297210d9d2938c75fc911d45f0e863dc4821. Backport of c880530ddd4fabd5939bab0e148bebe36699432a from main.
2025-11-04[6.0.x] Fixed #36704 -- Fixed system check error for proxy model with a ↵Hal Blackburn
composite pk. Proxy models subclassing a model with a CompositePrimaryKey were incorrectly reporting check errors because the check that requires only local fields to be used in a composite pk was evaluated against the proxy subclass, which has no fields. To fix this, composite pk field checks are not evaluated against proxy subclasses, as none of the checks are applicable to proxy subclasses. This also has the benefit of not double-reporting real check errors from an invalid superclass pk. Thanks Clifford Gama for the review. Backport of 74564946c3b42a2ef7d087047e49873847a7e1d9 from main.
2025-11-04[6.0.x] Updated ticket triage process diagram and contributing docs.ontowhee
Backport of eaf7b563a5d3861026242fdb503a58f71acf17f6 from main.
2025-10-30[6.0.x] Added community package storage backends mention to docs.Tim Schilling
Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com> Backport of 340e4f832e1ea74a27770e38635bbc781979f2e0 from main.
2025-10-29[6.0.x] Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26.Jacob Walls
Backport of ab108bf94dfc06c311d7dc81866b848fe5b5ee6c from main.
2025-10-27[6.0.x] Fixed #36681 -- Removed English pluralization bias from example in ↵Kasyap Pentamaraju
docs/topics/i18n/translation.txt. Backport of 0ea01101c3a35568bc43e9707ac058b9874bd425 from main.
2025-10-23[6.0.x] Fixed #35095 -- Clarified Swiss number formatting in ↵Annabelle Wiegart
docs/topics/i18n/formatting.txt. Co-authored-by: Ahmed Nassar <a.moh.nassar00@gmail.com> Backport of 74239181252ca73bebb84789856f5d8937d421b4 from main.
2025-10-22[6.0.x] Made cosmetic edits to docs/releases/6.0.txt.Natalia
Backport of 42d6e20feba81fb1182c8111d0c18e492fbe4e87 from main.
2025-10-19[6.0.x] Refs #36005 -- Bumped minimum supported versions of docutils to 0.22.Mariusz Felisiak
Backport of ca3e0484ef31d13053af6a9d50667813e22fc282 from main.
2025-10-17[6.0.x] Refs #35844 -- Doc'd Python 3.14 compatibility.Mariusz Felisiak
Backport of 56977b466c33ca3da14a1ed2609172425a76a34e from main.
2025-10-17[6.0.x] Fixed #36669 -- Doc'd that negative indexes are not supported in F() ↵aj2s
slices. Backport of f715bc8990b5b8a1df948c2b71e8edbdda47e7db from main.
2025-10-16[6.0.x] Bumped minimum isort version to 7.0.0.Jacob Walls
Added ignores relating to https://github.com/PyCQA/isort/issues/2352. Backport of d980d68609448a4c85763fa34e471ff80540888b from main.
2025-10-14[6.0.x] Fixed #36648, Refs #33772 -- Accounted for composite pks in ↵Jacob Walls
first()/last() when aggregating. Backport of 02eed4f37879b2077496f86bb1378a076b981233 from main.
2025-10-14[6.0.x] Removed pre-release wheel-only advice in ↵Jacob Walls
docs/internals/howto-release-django.txt. The practice since 2.2a1 (2019) has been to upload source distributions as well. Backport of cc9df52666b90e2e6fdebd2213493c1c396e804a from main.
2025-10-14[6.0.x] Removed mention of setuptools in ↵Jacob Walls
docs/internals/contributing/writing-code/unit-tests.txt. Backport of 19101158070429c8d314926a67ec22a88220f316 from main.
2025-10-13[6.0.x] Cautioned against multi-level relative imports in coding style docs.lyova24
Backport of a545eb0c1ad5dcbb4e4cf22ce6cf486224c0ba8a from main.
2025-10-13[6.0.x] Added notes about automatic roadmap generation for next version in ↵Natalia
docs/internals/howto-release-django.txt. Backport of d5543a23d32d6438edae060081a054f617193341 from main.
2025-10-13[6.0.x] Fixed #36625 -- Mentioned exit() in tutorial's instruction to ↵arsalan64
restart the shell. Backport of 92d0c21e69901cb7b749040670d3e6611353e1fa from main.
2025-10-13[6.0.x] Fixed #36611, Refs #36580 -- Added system check for multicolumn ↵Sarah Boyce
ForeignObject in Meta.indexes/constraints/unique_together. ForeignObjects with multiple `from_fields` are not supported in these options. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com> Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 5b51e6f759f2ba993219347435149173c756c478 from main.
2025-10-11[6.0.x] Fixed #36646 -- Added compatibility for oracledb 3.4.0.Simon Charette
The Database.Binary, Date, and Timestamp attributes were changed from aliases to bytes, datetime.date, and datetime.datetime to factory functions in oracle/python-oracledb@869a887819cdac7fcd610f9d9d463ade49ea7 which made their usage inadequate for isinstance checks. Thanks John Wagenleitner for the report and Natalia for the triage. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 315dbe675df338ae66c8fa43274a76ecbed7ef67 from main
2025-10-09[6.0.x] Corrected admin check IDs in docs.Mariusz Felisiak
Backport of 1167cd1d639c3fee69dbdef351d31e8a17d1fedf from main
2025-10-08[6.0.x] Fixed #36526 -- Doc'd QuerySet.bulk_update() memory usage when batching.Natalia
Thanks Simon Charette for the review. Backport of 608d3ebc8889863d43be1090d634b9507fe4a85e from main.
2025-10-08[6.0.x] Fixed #35961 -- Migrated license metadata in pyproject.toml to ↵Michiel W. Beijen
conform PEP 639. See https://peps.python.org/pep-0639/ and https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license-and-license-files. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com> Backport of 96a7a652166bece8acc96d6335ebb8091de2f496 from main.
2025-10-08[6.0.x] Added missing backticks in docs/ref/models/fields.txt.Mariusz Felisiak
Backport of 4a8ca8bd6906b705c4445bc915d71beda2fc4b84 from main
2025-10-03[6.0.x] Fixed #36636, Refs #15902 -- Removed session-based storage reference ↵Dani Fornons
from set_language() docs. Backport of 2514857e3fae831106832cca8823237801cf2cad from main.
2025-10-03[6.0.x] Refs #36143, #28596 -- Avoided mentioning exact query parameter ↵Jacob Walls
limit in bulk_create() docs. Backport of 0a09c60e97166e0188717ff340b4d93b72207e96 from main.
2025-10-01[6.0.x] Rewrapped security archive at 79 chars.Mariusz Felisiak
Backport of 1499c95d990fb776c39ad60e43228cbbbfcad3a8 from main.
2025-10-01[6.0.x] Added CVE-2025-59681 and CVE-2025-59682 to security archive.Jacob Walls
Backport of 43d84aef04a9e71164c21a74885996981857e66e from main.
2025-10-01[6.0.x] Added stub release notes for 5.2.8.Jacob Walls
Backport of 1324d9037e9281ec0fdd88c15b20881c7a6ea8b9 from main.
2025-10-01[6.0.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal ↵Sarah Boyce
via archive.extract(). Thanks stackered for the report. Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23. Backport of 924a0c092e65fa2d0953fd1855d2dc8786d94de2 from main.
2025-10-01[6.0.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), ↵Mariusz Felisiak
aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB. Thanks sw0rd1ight for the report. Follow up to 93cae5cb2f9a4ef1514cf1a41f714fef08005200. Backport of 41b43c74bda19753c757036673ea9db74acf494a from main.
2025-09-30[6.0.x] Made cosmetic edits to 5.2.7 release notes.Jacob Walls
Backport of 6c82b0bc91fc650891b0b411ac4a5a86cf0cf3e8 from main.
2025-09-29[6.0.x] Fixed #36587 -- Clarified usage of `list.insert()` for upload handlers.okaybro
Thanks Baptiste Mispelon for the report Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of afe6634146d0fe70498976c49d2eb4d745aa9064 from main.
2025-09-29[6.0.x] Fixed #35877, Refs #36128 -- Documented unique constraint when ↵Samriddha9619
migrating a m2m field to use a through model. Backport of daba609a9bdc7a97bcf327c7ba0a5f7b3540b46e from main.
2025-09-24[6.0.x] Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25.Mariusz Felisiak
Backport of 00174507f8a91e9577ae233c58af561b379f2695 from main.
2025-09-24[6.0.x] Refs #36163 -- Removed currentmodule directive from 6.0 release notes.Adam Johnson
Backport of f2e02198671a4c099744efdc166f98525cbae4c1 from main
2025-09-24[6.0.x] Refs #36163 -- Removed duplicated release note paragraph.Adam Johnson
Backport of 2e870c60718888067249f7f2c2e40e8eac3d13bc from main
2025-09-24[6.0.x] Refs #35859 -- Mentioned tasks in the docs index.Mariusz Felisiak
Backport of 44addbf4e7e0cc4211c4c3418469800cd275c886 from main
2025-09-23[6.0.x] Refs #25508 -- Used QuerySet.__repr__ in ↵Jacob Walls
docs/ref/contrib/postgres/search.txt. Backport of efb96138b4af774c22ae6e949410b45d69960357 from main.