| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-10-01 | Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via ↵ | Sarah Boyce | |
| archive.extract(). Thanks stackered for the report. Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23. | |||
| 2025-10-01 | Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), ↵ | Mariusz Felisiak | |
| and extra() against SQL injection in column aliases on MySQL/MariaDB. Thanks sw0rd1ight for the report. Follow up to 93cae5cb2f9a4ef1514cf1a41f714fef08005200. | |||
| 2025-09-30 | Made cosmetic edits to 5.2.7 release notes. | Jacob Walls | |
| 2025-09-30 | Fixed #36614 -- Deprecated QuerySet.values_list(flat=True) without a field. | Adam Johnson | |
| Thanks to Jacob Walls and Simon Charette for their input. co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> | |||
| 2025-09-29 | Fixed #36587 -- Clarified usage of `list.insert()` for upload handlers. | okaybro | |
| Thanks Baptiste Mispelon for the report Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> | |||
| 2025-09-29 | Fixed #36277 -- Fixed DatabaseFeatures.supports_virtual_generated_columns on ↵ | arsalan64 | |
| PostgreSQL 18+. | |||
| 2025-09-29 | Fixed #35877, Refs #36128 -- Documented unique constraint when migrating a ↵ | Samriddha9619 | |
| m2m field to use a through model. | |||
| 2025-09-25 | Fixed #36605 -- Added support for QuerySet.in_bulk() after .values() or ↵ | John Parton | |
| .values_list(). co-authored-by: Adam Johnson <me@adamj.eu> co-authored-by: Simon Charette <charette.s@gmail.com> | |||
| 2025-09-24 | Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25. | Mariusz Felisiak | |
| 2025-09-24 | Refs #36163 -- Removed currentmodule directive from 6.0 release notes. | Adam Johnson | |
| 2025-09-24 | Refs #36163 -- Removed duplicated release note paragraph. | Adam Johnson | |
| 2025-09-24 | Refs #35859 -- Mentioned tasks in the docs index. | Mariusz Felisiak | |
| 2025-09-23 | Fixed #36616 -- Added DatabaseOperations.adapt_durationfield_value(). | Tim Graham | |
| 2025-09-23 | Refs #25508 -- Used QuerySet.__repr__ in docs/ref/contrib/postgres/search.txt. | Jacob Walls | |
| 2025-09-23 | Fixed #36609 -- Added Haitian Creole (ht) language. | Jean Patrick Prenis | |
| Thanks Rebecca Conley for the review. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> | |||
| 2025-09-22 | Refs #33783 -- Added IsEmpty GIS database function and __isempty lookup on ↵ | David Smith | |
| SpatiaLite. | |||
| 2025-09-18 | Clarified feature freeze and alpha release steps in ↵ | Natalia | |
| docs/internals/howto-release-django.txt. | |||
| 2025-09-18 | Refs #28586 -- Split descriptor from GenericForeignKey. | Adam Johnson | |
| This makes GenericForeignKey more similar to other fields which act as descriptors, preparing it to add “fetcher protocol” support in a clear and consistent way. | |||
| 2025-09-18 | Fixed #36581 -- Updated serialization examples from XML to JSON. | CodingWithSaksham | |
| 2025-09-18 | Updated translations from Transifex. | Natalia | |
| Forwardport of 2a2936c3e6444a0f37156773ca405cedaf28dea7 from stable/5.2.x. | |||
| 2025-09-17 | Added backticks to email addresses in docs. | Mariusz Felisiak | |
| 2025-09-17 | Advanced deprecation warnings for Django 6.1. | Jacob Walls | |
| 2025-09-17 | Increased the default PBKDF2 iterations for Django 6.1. | Jacob Walls | |
| 2025-09-17 | Refs #36390 -- Removed support for RemoteUserMiddleware subclasses missing ↵ | Jacob Walls | |
| aprocess_request(). Per deprecation timeline. | |||
| 2025-09-17 | Refs #35444 -- Removed contrib.postgres aggregates ordering kwarg per ↵ | Jacob Walls | |
| deprecation timeline. | |||
| 2025-09-17 | Refs #35530 -- Removed request.user or auser() fallback in auth.login and ↵ | Jacob Walls | |
| auth.alogin. Per deprecation timeline. | |||
| 2025-09-17 | Refs #22712 -- Removed all parameter from ↵ | Jacob Walls | |
| django.contrib.staticfiles.finders.find(). Per deprecation timeline. | |||
| 2025-09-17 | Removed versionadded/changed annotations for 5.2. | Jacob Walls | |
| 2025-09-17 | Added stub release notes for 6.1. | Jacob Walls | |
| 2025-09-17 | Bumped version; main is now 6.1 pre-alpha. | Jacob Walls | |
| 2025-09-17 | Made cosmetic edits to docs/releases/6.0.txt. | Natalia | |
| 2025-09-17 | Removed empty sections from 6.0 release notes. | Natalia | |
| 2025-09-17 | Updated man page for Django 6.0 alpha 1. | Natalia | |
| 2025-09-17 | Refs #35859 -- Removed support for Task enqueuing on transaction commit. | Jacob Walls | |
| This removes the ability to configure Task enqueueing via a setting, since the proposed `ENQUEUE_ON_COMMIT` did not support multi-database setups. Thanks to Simon Charette for the report. Follow-up to 4289966d1b8e848e5e460b7c782dac009d746b20. | |||
| 2025-09-17 | Refs #35859 -- Included Task backends in system checks docs. | Jacob Walls | |
| 2025-09-17 | Fixed #36601 -- Fixed color contrast of FilteredSelectMultiple widget chosen ↵ | antoliny0919 | |
| labels in TabularInlines. Regression in a0f50c2a483678d31bd1ad6f08fd3a0b8399e27b. | |||
| 2025-09-16 | Fixed #35859 -- Added background Tasks framework interface. | Jake Howard | |
| This work implements what was defined in DEP 14 (https://github.com/django/deps/blob/main/accepted/0014-background-workers.rst). Thanks to Raphael Gaschignard, Eric Holscher, Ran Benita, Sarah Boyce, Jacob Walls, and Natalia Bidart for the reviews. | |||
| 2025-09-16 | Fixed #28041 -- Added Lexeme expression to contrib.postgres.search. | GappleBee | |
| This expression automatically escapes its input and allows fine-grained control over prefix matching and term weighting via logical combinations. Thanks Mariusz Felisiak, Adam Zapletal, Paolo Melchiorre, Jacob Walls, Adam Johnson, and Simon Charette for reviews. Co-authored-by: joetsoi <joetsoi@users.noreply.github.com> Co-authored-by: Karl Hobley <karl@kaed.uk> Co-authored-by: Alexandr Tatarinov <tatarinov1997@gmail.com> | |||
| 2025-09-16 | Fixed #36426 -- Added support for further iterables in ↵ | blingblin-g | |
| prefetch_related_objects(). Thanks Sarah Boyce for the review. | |||
| 2025-09-15 | Fixed #36591 -- Removed unnecessary dotted paths in email docs. | Dani Fornons | |
| 2025-09-14 | Fixed #27222 -- Refreshed model field values assigned expressions on save(). | Simon Charette | |
| Removed the can_return_columns_from_insert skip gates on existing field_defaults tests to confirm the expected number of queries are performed and that returning field overrides are respected. | |||
| 2025-09-14 | Refs #27222 -- Refreshed GeneratedFields values on save() initiated update. | Simon Charette | |
| This required implementing UPDATE RETURNING machinery that heavily borrows from the INSERT one. | |||
| 2025-09-13 | Fixed typo in docs/ref/contrib/contenttypes.txt. | Jacob Walls | |
| 2025-09-13 | Refs #35667 -- Corrected usage of skip_file_prefixes in contributing docs. | Clifford Gama | |
| 2025-09-12 | Fixed #36597 -- Corrected directives for functions from email module in docs. | Mridul Dhall | |
| Thanks Mike Edmunds for the report. | |||
| 2025-09-12 | Refs #35667 -- Updated contributing guide to use django_file_prefixes on ↵ | nessita | |
| deprecations. | |||
| 2025-09-09 | Fixed #36486 -- Added MongoDB to list of third-party DB backends. | Salman | |
| 2025-09-08 | Refs #36410 -- Added link to migration guide for template-partials. | Carlton Gibson | |
| 2025-09-05 | Fixed #36524 -- Enabled docs cross references to EmailMessage methods. | Mike Edmunds | |
| Updated docs for class django.core.mail.EmailMessage to use Sphinx `method::` directives, allowing cross references to those methods elsewhere in the docs. Updated references to those methods in the email docs and 6.0 release notes to link directly to the specific methods. | |||
| 2025-09-05 | Removed redundant directive in email docs. | Mike Edmunds | |
| docs/topics/email.txt declares `module:: django.core.mail`. Removed unnecessary `currentmodule::` pointing to the same module. | |||
