summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2025-10-01Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via ↵Sarah Boyce
archive.extract(). Thanks stackered for the report. Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23.
2025-10-01Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), ↵Mariusz Felisiak
and extra() against SQL injection in column aliases on MySQL/MariaDB. Thanks sw0rd1ight for the report. Follow up to 93cae5cb2f9a4ef1514cf1a41f714fef08005200.
2025-09-30Made cosmetic edits to 5.2.7 release notes.Jacob Walls
2025-09-30Fixed #36614 -- Deprecated QuerySet.values_list(flat=True) without a field.Adam Johnson
Thanks to Jacob Walls and Simon Charette for their input. co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
2025-09-29Fixed #36587 -- Clarified usage of `list.insert()` for upload handlers.okaybro
Thanks Baptiste Mispelon for the report Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2025-09-29Fixed #36277 -- Fixed DatabaseFeatures.supports_virtual_generated_columns on ↵arsalan64
PostgreSQL 18+.
2025-09-29Fixed #35877, Refs #36128 -- Documented unique constraint when migrating a ↵Samriddha9619
m2m field to use a through model.
2025-09-25Fixed #36605 -- Added support for QuerySet.in_bulk() after .values() or ↵John Parton
.values_list(). co-authored-by: Adam Johnson <me@adamj.eu> co-authored-by: Simon Charette <charette.s@gmail.com>
2025-09-24Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25.Mariusz Felisiak
2025-09-24Refs #36163 -- Removed currentmodule directive from 6.0 release notes.Adam Johnson
2025-09-24Refs #36163 -- Removed duplicated release note paragraph.Adam Johnson
2025-09-24Refs #35859 -- Mentioned tasks in the docs index.Mariusz Felisiak
2025-09-23Fixed #36616 -- Added DatabaseOperations.adapt_durationfield_value().Tim Graham
2025-09-23Refs #25508 -- Used QuerySet.__repr__ in docs/ref/contrib/postgres/search.txt.Jacob Walls
2025-09-23Fixed #36609 -- Added Haitian Creole (ht) language.Jean Patrick Prenis
Thanks Rebecca Conley for the review. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2025-09-22Refs #33783 -- Added IsEmpty GIS database function and __isempty lookup on ↵David Smith
SpatiaLite.
2025-09-18Clarified feature freeze and alpha release steps in ↵Natalia
docs/internals/howto-release-django.txt.
2025-09-18Refs #28586 -- Split descriptor from GenericForeignKey.Adam Johnson
This makes GenericForeignKey more similar to other fields which act as descriptors, preparing it to add “fetcher protocol” support in a clear and consistent way.
2025-09-18Fixed #36581 -- Updated serialization examples from XML to JSON.CodingWithSaksham
2025-09-18Updated translations from Transifex.Natalia
Forwardport of 2a2936c3e6444a0f37156773ca405cedaf28dea7 from stable/5.2.x.
2025-09-17Added backticks to email addresses in docs.Mariusz Felisiak
2025-09-17Advanced deprecation warnings for Django 6.1.Jacob Walls
2025-09-17Increased the default PBKDF2 iterations for Django 6.1.Jacob Walls
2025-09-17Refs #36390 -- Removed support for RemoteUserMiddleware subclasses missing ↵Jacob Walls
aprocess_request(). Per deprecation timeline.
2025-09-17Refs #35444 -- Removed contrib.postgres aggregates ordering kwarg per ↵Jacob Walls
deprecation timeline.
2025-09-17Refs #35530 -- Removed request.user or auser() fallback in auth.login and ↵Jacob Walls
auth.alogin. Per deprecation timeline.
2025-09-17Refs #22712 -- Removed all parameter from ↵Jacob Walls
django.contrib.staticfiles.finders.find(). Per deprecation timeline.
2025-09-17Removed versionadded/changed annotations for 5.2.Jacob Walls
2025-09-17Added stub release notes for 6.1.Jacob Walls
2025-09-17Bumped version; main is now 6.1 pre-alpha.Jacob Walls
2025-09-17Made cosmetic edits to docs/releases/6.0.txt.Natalia
2025-09-17Removed empty sections from 6.0 release notes.Natalia
2025-09-17Updated man page for Django 6.0 alpha 1.Natalia
2025-09-17Refs #35859 -- Removed support for Task enqueuing on transaction commit.Jacob Walls
This removes the ability to configure Task enqueueing via a setting, since the proposed `ENQUEUE_ON_COMMIT` did not support multi-database setups. Thanks to Simon Charette for the report. Follow-up to 4289966d1b8e848e5e460b7c782dac009d746b20.
2025-09-17Refs #35859 -- Included Task backends in system checks docs.Jacob Walls
2025-09-17Fixed #36601 -- Fixed color contrast of FilteredSelectMultiple widget chosen ↵antoliny0919
labels in TabularInlines. Regression in a0f50c2a483678d31bd1ad6f08fd3a0b8399e27b.
2025-09-16Fixed #35859 -- Added background Tasks framework interface.Jake Howard
This work implements what was defined in DEP 14 (https://github.com/django/deps/blob/main/accepted/0014-background-workers.rst). Thanks to Raphael Gaschignard, Eric Holscher, Ran Benita, Sarah Boyce, Jacob Walls, and Natalia Bidart for the reviews.
2025-09-16Fixed #28041 -- Added Lexeme expression to contrib.postgres.search.GappleBee
This expression automatically escapes its input and allows fine-grained control over prefix matching and term weighting via logical combinations. Thanks Mariusz Felisiak, Adam Zapletal, Paolo Melchiorre, Jacob Walls, Adam Johnson, and Simon Charette for reviews. Co-authored-by: joetsoi <joetsoi@users.noreply.github.com> Co-authored-by: Karl Hobley <karl@kaed.uk> Co-authored-by: Alexandr Tatarinov <tatarinov1997@gmail.com>
2025-09-16Fixed #36426 -- Added support for further iterables in ↵blingblin-g
prefetch_related_objects(). Thanks Sarah Boyce for the review.
2025-09-15Fixed #36591 -- Removed unnecessary dotted paths in email docs.Dani Fornons
2025-09-14Fixed #27222 -- Refreshed model field values assigned expressions on save().Simon Charette
Removed the can_return_columns_from_insert skip gates on existing field_defaults tests to confirm the expected number of queries are performed and that returning field overrides are respected.
2025-09-14Refs #27222 -- Refreshed GeneratedFields values on save() initiated update.Simon Charette
This required implementing UPDATE RETURNING machinery that heavily borrows from the INSERT one.
2025-09-13Fixed typo in docs/ref/contrib/contenttypes.txt.Jacob Walls
2025-09-13Refs #35667 -- Corrected usage of skip_file_prefixes in contributing docs.Clifford Gama
2025-09-12Fixed #36597 -- Corrected directives for functions from email module in docs.Mridul Dhall
Thanks Mike Edmunds for the report.
2025-09-12Refs #35667 -- Updated contributing guide to use django_file_prefixes on ↵nessita
deprecations.
2025-09-09Fixed #36486 -- Added MongoDB to list of third-party DB backends.Salman
2025-09-08Refs #36410 -- Added link to migration guide for template-partials.Carlton Gibson
2025-09-05Fixed #36524 -- Enabled docs cross references to EmailMessage methods.Mike Edmunds
Updated docs for class django.core.mail.EmailMessage to use Sphinx `method::` directives, allowing cross references to those methods elsewhere in the docs. Updated references to those methods in the email docs and 6.0 release notes to link directly to the specific methods.
2025-09-05Removed redundant directive in email docs.Mike Edmunds
docs/topics/email.txt declares `module:: django.core.mail`. Removed unnecessary `currentmodule::` pointing to the same module.