From 8552eef95e400d5bad3261b28ad2500b57070d57 Mon Sep 17 00:00:00 2001
From: nessita <124304+nessita@users.noreply.github.com>
Date: Sat, 1 Feb 2025 22:49:07 -0300
Subject: [5.1.x] Fixed #36140 -- Allowed BaseUserCreationForm to define non
 required password fields.

Regression in e626716c28b6286f8cf0f8174077f3d2244f3eb3.

Thanks buffgecko12 for the report and Sarah Boyce for the review.

Backport of d15454a6e84a595ffc8dc1b926282f484f782a8f from main.
---
 docs/releases/5.1.6.txt | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'docs')

diff --git a/docs/releases/5.1.6.txt b/docs/releases/5.1.6.txt
index 3b23192033..10fd9aca8b 100644
--- a/docs/releases/5.1.6.txt
+++ b/docs/releases/5.1.6.txt
@@ -12,3 +12,7 @@ Bugfixes
 * Fixed a regression in Django 5.1.5 that caused ``validate_ipv6_address()``
   and ``validate_ipv46_address()`` to crash when handling non-string values
   (:ticket:`36098`).
+
+* Fixed a regression in Django 5.1 where password fields, despite being set to
+  ``required=False``, were still treated as required in forms derived from
+  :class:`~django.contrib.auth.forms.BaseUserCreationForm` (:ticket:`36140`).
-- 
cgit v1.3