Jacob Walls 
							
						 
					 
					
						
						
							
						
						8baee531d4 
					 
					
						
						
							
							[5.2.x]  Fixed   #36648 , Refs  #33772  -- Accounted for composite pks in first()/last() when aggregating.  
						
						... 
						
						
						
						Backport of 02eed4f378 
						
						
					 
					
						2025-10-14 15:50:26 -04:00 
						 
				 
			
				
					
						
							
							
								arsalan64 
							
						 
					 
					
						
						
							
						
						94cbd67d9e 
					 
					
						
						
							
							[5.2.x]  Fixed   #36625  -- Mentioned exit() in tutorial's instruction to restart the shell.  
						
						... 
						
						
						
						Backport of 92d0c21e69 
						
						
					 
					
						2025-10-13 16:23:12 -04:00 
						 
				 
			
				
					
						
							
							
								Simon Charette 
							
						 
					 
					
						
						
							
						
						88ef9ea6c5 
					 
					
						
						
							
							[5.2.x]  Fixed   #36646  -- Added compatibility for oracledb 3.4.0.  
						
						... 
						
						
						
						The Database.Binary, Date, and Timestamp attributes were changed from
aliases to bytes, datetime.date, and datetime.datetime to factory
functions in oracle/python-oracledb@869a887819 
which made their usage inadequate for isinstance checks.
Thanks John Wagenleitner for the report and Natalia for the triage.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com >
Backport of 315dbe675d 
						
						
					 
					
						2025-10-11 19:03:27 +02:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						713e9d8f53 
					 
					
						
						
							
							[5.2.x] Corrected admin check IDs in docs.  
						
						... 
						
						
						
						Backport of 1167cd1d63 
						
						
					 
					
						2025-10-09 20:03:00 +02:00 
						 
				 
			
				
					
						
							
							
								Natalia 
							
						 
					 
					
						
						
							
						
						80b9c8f529 
					 
					
						
						
							
							[5.2.x]  Fixed   #36526  -- Doc'd QuerySet.bulk_update() memory usage when batching.  
						
						... 
						
						
						
						Thanks Simon Charette for the review.
Backport of 608d3ebc88 
						
						
					 
					
						2025-10-08 18:33:02 -03:00 
						 
				 
			
				
					
						
							
							
								Michiel W. Beijen 
							
						 
					 
					
						
						
							
						
						c05c5b80a6 
					 
					
						
						
							
							[5.2.x]  Fixed   #35961  -- Migrated license metadata in pyproject.toml to conform PEP 639.  
						
						... 
						
						
						
						See https://peps.python.org/pep-0639/  and
https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license-and-license-files .
Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com >
Backport of 96a7a65216 
						
						
					 
					
						2025-10-08 16:42:36 -03:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						084cbe1217 
					 
					
						
						
							
							[5.2.x] Added missing backticks in docs/ref/models/fields.txt.  
						
						... 
						
						
						
						Backport of 4a8ca8bd69 
						
						
					 
					
						2025-10-08 11:01:02 +02:00 
						 
				 
			
				
					
						
							
							
								Dani Fornons 
							
						 
					 
					
						
						
							
						
						2d2e1a6a9d 
					 
					
						
						
							
							[5.2.x]  Fixed   #36636 , Refs  #15902  -- Removed session-based storage reference from set_language() docs.  
						
						... 
						
						
						
						Backport of 2514857e3f 
						
						
					 
					
						2025-10-03 15:18:00 -04:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						41bcb54bff 
					 
					
						
						
							
							[5.2.x] Refs  #36143 ,  #28596  -- Avoided mentioning exact query parameter limit in bulk_create() docs.  
						
						... 
						
						
						
						Backport of 0a09c60e97 
						
						
					 
					
						2025-10-03 11:27:05 -04:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						2fc538af33 
					 
					
						
						
							
							[5.2.x] Rewrapped security archive at 79 chars.  
						
						... 
						
						
						
						Backport of 1499c95d99 
						
						
					 
					
						2025-10-01 16:25:11 -04:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						071afc3d01 
					 
					
						
						
							
							[5.2.x] Added CVE-2025-59681 and CVE-2025-59682 to security archive.  
						
						... 
						
						
						
						Backport of 43d84aef04 
						
						
					 
					
						2025-10-01 10:39:44 -04:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						f94449ef69 
					 
					
						
						
							
							[5.2.x] Added stub release notes for 5.2.8.  
						
						... 
						
						
						
						Backport of 1324d9037e 
						
						
					 
					
						2025-10-01 10:34:11 -04:00 
						 
				 
			
				
					
						
							
							
								Sarah Boyce 
							
						 
					 
					
						
						
							
						
						ed8fc39d77 
					 
					
						
						
							
							[5.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract().  
						
						... 
						
						
						
						Thanks stackered for the report.
Follow up to 05413afa8c924a0c092e 
						
						
					 
					
						2025-10-01 08:25:20 -04:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						52fbae0a4d 
					 
					
						
						
							
							[5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB.  
						
						... 
						
						
						
						Thanks sw0rd1ight for the report.
Follow up to 93cae5cb2f41b43c74bd 
						
						
					 
					
						2025-10-01 08:24:18 -04:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						1794cbf961 
					 
					
						
						
							
							[5.2.x] Made cosmetic edits to 5.2.7 release notes.  
						
						... 
						
						
						
						Backport of 6c82b0bc91 
						
						
					 
					
						2025-09-30 16:34:43 -04:00 
						 
				 
			
				
					
						
							
							
								okaybro 
							
						 
					 
					
						
						
							
						
						81625a141e 
					 
					
						
						
							
							[5.2.x]  Fixed   #36587  -- Clarified usage of list.insert() for upload handlers.  
						
						... 
						
						
						
						Thanks Baptiste Mispelon for the report
Co-authored-by: Natalia <124304+nessita@users.noreply.github.com >
Backport of afe6634146 
						
						
					 
					
						2025-09-29 14:51:44 +02:00 
						 
				 
			
				
					
						
							
							
								Samriddha9619 
							
						 
					 
					
						
						
							
						
						6f3813e4b6 
					 
					
						
						
							
							[5.2.x]  Fixed   #35877 , Refs  #36128  -- Documented unique constraint when migrating a m2m field to use a through model.  
						
						... 
						
						
						
						Backport of daba609a9b 
						
						
					 
					
						2025-09-29 09:00:19 +02:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						10a2d3b837 
					 
					
						
						
							
							[5.2.x] Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25.  
						
						... 
						
						
						
						Backport of 00174507f8 
						
						
					 
					
						2025-09-24 11:41:04 -04:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						b2773a39a3 
					 
					
						
						
							
							[5.2.x] Refs  #25508  -- Used QuerySet.__repr__ in docs/ref/contrib/postgres/search.txt.  
						
						... 
						
						
						
						Backport of efb96138b4 
						
						
					 
					
						2025-09-23 10:09:18 -04:00 
						 
				 
			
				
					
						
							
							
								CodingWithSaksham 
							
						 
					 
					
						
						
							
						
						7554c54e5f 
					 
					
						
						
							
							[5.2.x]  Fixed   #36581  -- Updated serialization examples from XML to JSON.  
						
						... 
						
						
						
						Backport of 762d3be8c5 
						
						
					 
					
						2025-09-18 15:47:20 +02:00 
						 
				 
			
				
					
						
							
							
								Natalia 
							
						 
					 
					
						
						
							
						
						2a2936c3e6 
					 
					
						
						
							
							[5.2.x] Updated translations from Transifex.  
						
						
						
						
					 
					
						2025-09-18 09:50:46 -03:00 
						 
				 
			
				
					
						
							
							
								antoliny0919 
							
						 
					 
					
						
						
							
						
						d8e9dec1ad 
					 
					
						
						
							
							[5.2.x]  Fixed   #36601  -- Fixed color contrast of FilteredSelectMultiple widget chosen labels in TabularInlines.  
						
						... 
						
						
						
						Regression in a0f50c2a481e7728888d 
						
						
					 
					
						2025-09-17 10:01:37 +02:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						1dbf415a18 
					 
					
						
						
							
							[5.2.x] Fixed typo in docs/ref/contrib/contenttypes.txt.  
						
						... 
						
						
						
						Backport of c48904a225 
						
						
					 
					
						2025-09-13 11:29:40 -04:00 
						 
				 
			
				
					
						
							
							
								Mridul Dhall 
							
						 
					 
					
						
						
							
						
						b8df1eb7c2 
					 
					
						
						
							
							[5.2.x]  Fixed   #36597  -- Corrected directives for functions from email module in docs.  
						
						... 
						
						
						
						Thanks Mike Edmunds for the report.
Backport of e183d6c26c 
						
						
					 
					
						2025-09-12 18:59:58 +02:00 
						 
				 
			
				
					
						
							
							
								Salman 
							
						 
					 
					
						
						
							
						
						adc80dd81e 
					 
					
						
						
							
							[5.2.x]  Fixed   #36486  -- Added MongoDB to list of third-party DB backends.  
						
						... 
						
						
						
						Backport of 46fdeb1373 
						
						
					 
					
						2025-09-09 08:24:11 +02:00 
						 
				 
			
				
					
						
							
							
								Jake Howard 
							
						 
					 
					
						
						
							
						
						fbced43cf8 
					 
					
						
						
							
							[5.2.x] Refs  #36588  -- Warned about using external templates in startapp/startproject commands.  
						
						... 
						
						
						
						Clarified that custom templates provided via `--template` for `starapp`
and `startproject` are used as-is, adding a warning that malicious or
poorly constructed templates may introduce security issues.
Backport of 4e7a991c12 
						
						
					 
					
						2025-09-04 13:38:31 -03:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						e2d83a2076 
					 
					
						
						
							
							[5.2.x] Added missing backticks in docs/releases/security.txt.  
						
						... 
						
						
						
						Backport of 686a8a62ae 
						
						
					 
					
						2025-09-04 11:10:33 +02:00 
						 
				 
			
				
					
						
							
							
								Sarah Boyce 
							
						 
					 
					
						
						
							
						
						18c6bc5db2 
					 
					
						
						
							
							[5.2.x] Added CVE-2025-57833 to security archive.  
						
						... 
						
						
						
						Backport of f0c05a40d2 
						
						
					 
					
						2025-09-03 15:28:27 +02:00 
						 
				 
			
				
					
						
							
							
								Sarah Boyce 
							
						 
					 
					
						
						
							
						
						db13f7fbcb 
					 
					
						
						
							
							[5.2.x] Added stub release notes for 5.2.7.  
						
						... 
						
						
						
						Backport of ab7c7dd99b 
						
						
					 
					
						2025-09-03 15:22:02 +02:00 
						 
				 
			
				
					
						
							
							
								Jake Howard 
							
						 
					 
					
						
						
							
						
						4c044fcc86 
					 
					
						
						
							
							[5.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL injection in column aliases.  
						
						... 
						
						
						
						Thanks Eyal Gabay (EyalSec) for the report.
Backport of 5171171709 
						
						
					 
					
						2025-09-03 13:15:55 +02:00 
						 
				 
			
				
					
						
							
							
								Sarah Boyce 
							
						 
					 
					
						
						
							
						
						e87ca3d6fa 
					 
					
						
						
							
							[5.2.x] Made cosmetic edits to 5.2.6 release notes.  
						
						... 
						
						
						
						Backport of d044e25dc2 
						
						
					 
					
						2025-09-03 12:19:46 +02:00 
						 
				 
			
				
					
						
							
							
								Clifford Gama 
							
						 
					 
					
						
						
							
						
						ebec2c9323 
					 
					
						
						
							
							[5.2.x] Removed unused import in docs/ref/models/expressions.txt example.  
						
						... 
						
						
						
						Backport of 21603c5b50 
						
						
					 
					
						2025-08-31 08:16:09 +02:00 
						 
				 
			
				
					
						
							
							
								SaJH 
							
						 
					 
					
						
						
							
						
						ace59cb83b 
					 
					
						
						
							
							[5.2.x]  Fixed   #36431  -- Returned tuples for multi-column ForeignObject in values()/values_list().  
						
						... 
						
						
						
						Thanks Jacob Walls and Simon Charette for tests.
Signed-off-by: SaJH <wogur981208@gmail.com >
Backport of bb7a7701b1 
						
						
					 
					
						2025-08-29 15:36:09 -04:00 
						 
				 
			
				
					
						
							
							
								Mustafa Pirbhai 
							
						 
					 
					
						
						
							
						
						16a12a9799 
					 
					
						
						
							
							[5.2.x]  Fixed   #35831  -- Documented the model form meta API in model form reference docs.  
						
						... 
						
						
						
						Co-authored-by: Jonathan <3218047+jernwerber@users.noreply.github.com >
Co-authored-by: Mustafa <117516335+mspirbhai@users.noreply.github.com >
Backport of 183fcebf88 
						
						
					 
					
						2025-08-29 09:00:37 +02:00 
						 
				 
			
				
					
						
							
							
								Sarah Boyce 
							
						 
					 
					
						
						
							
						
						51753bc809 
					 
					
						
						
							
							[5.2.x] Added stub release notes and release date for 5.2.6, 5.1.12, and 4.2.24.  
						
						... 
						
						
						
						Backport of 4c71e33440 
						
						
					 
					
						2025-08-27 16:07:46 +02:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						a486455125 
					 
					
						
						
							
							[5.2.x] Corrected definition of "needsinfo" triage stage in contributing guide.  
						
						... 
						
						
						
						Backport of 66082a7dac 
						
						
					 
					
						2025-08-27 09:22:26 -04:00 
						 
				 
			
				
					
						
							
							
								Jacob Walls 
							
						 
					 
					
						
						
							
						
						f8e572e843 
					 
					
						
						
							
							[5.2.x] Removed reference to flake8 file exclusions.  
						
						... 
						
						
						
						Obsolete since 41384812ef165ad74c57 
						
						
					 
					
						2025-08-23 20:06:54 +02:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						9c9ed6fd7a 
					 
					
						
						
							
							[5.2.x] Refs  #35530  -- Corrected deprecation message in auth.alogin().  
						
						... 
						
						
						
						Follow up to ceecd518b1b3166e1e15 
						
						
					 
					
						2025-08-22 16:15:42 +02:00 
						 
				 
			
				
					
						
							
							
								Mariusz Felisiak 
							
						 
					 
					
						
						
							
						
						98972b53aa 
					 
					
						
						
							
							[5.2.x] Corrected release notes of calling format_html() without arguments.  
						
						... 
						
						
						
						Backport of bcddf641ae 
						
						
					 
					
						2025-08-20 07:35:30 +02:00 
						 
				 
			
				
					
						
							
							
								mengxun 
							
						 
					 
					
						
						
							
						
						38844c348b 
					 
					
						
						
							
							[5.2.x] Fixed spelling of "logged-in" when used as an adjective in docs.  
						
						... 
						
						
						
						Backport of f5c944b314 
						
						
					 
					
						2025-08-19 12:43:52 -03:00 
						 
				 
			
				
					
						
							
							
								David Sanders 
							
						 
					 
					
						
						
							
						
						4926591343 
					 
					
						
						
							
							[5.2.x] Aligned format of constraint examples in docs/ref/models/constraints.txt.  
						
						... 
						
						
						
						Backport of fda3c1712a 
						
						
					 
					
						2025-08-13 09:16:06 +02:00 
						 
				 
			
				
					
						
							
							
								Rohit 
							
						 
					 
					
						
						
							
						
						1d9f6c3270 
					 
					
						
						
							
							[5.2.x] Corrected code examples in topics docs.  
						
						... 
						
						
						
						Backport of fa804d0d14 
						
						
					 
					
						2025-08-11 10:14:43 +02:00 
						 
				 
			
				
					
						
							
							
								Sarah Boyce 
							
						 
					 
					
						
						
							
						
						ad836aa0c5 
					 
					
						
						
							
							[5.2.x] Added stub release notes for 5.2.6.  
						
						... 
						
						
						
						Backport of 0bff53b413 
						
						
					 
					
						2025-08-06 10:36:46 +02:00 
						 
				 
			
				
					
						
							
							
								Sarah Boyce 
							
						 
					 
					
						
						
							
						
						0489f54e8b 
					 
					
						
						
							
							[5.2.x] Added release date for 5.2.5.  
						
						... 
						
						
						
						Backport of 8999b0e2bf 
						
						
					 
					
						2025-08-06 09:59:50 +02:00 
						 
				 
			
				
					
						
							
							
								David Smith 
							
						 
					 
					
						
						
							
						
						a9c7d4b703 
					 
					
						
						
							
							[5.2.x] Refs  #36485  -- Grouped docs checks under a unified make check target.  
						
						... 
						
						
						
						Added a new 'check' rule to the docs Makefile which runs both the black
and spelling checks.
Backport of 7f9bf357fe 
						
						
					 
					
						2025-08-05 12:20:13 -03:00 
						 
				 
			
				
					
						
							
							
								David Smith 
							
						 
					 
					
						
						
							
						
						5ad6d43cd9 
					 
					
						
						
							
							[5.2.x] Refs  #34140  -- Added dedicated code block formatting section in docs/internals/contributing/writing-documentation.txt.  
						
						... 
						
						
						
						Backport of cba7328196 
						
						
					 
					
						2025-08-05 12:20:04 -03:00 
						 
				 
			
				
					
						
							
							
								jkhall81 
							
						 
					 
					
						
						
							
						
						bdc3f9e350 
					 
					
						
						
							
							[5.2.x]  Fixed   #36530  -- Extended fields.E347 to check for ManyToManyField involving CompositePrimaryKey on either side.  
						
						... 
						
						
						
						Thanks to Jacob Walls for the report.
Backport of 2013092b69 
						
						
					 
					
						2025-08-05 08:46:56 -03:00 
						 
				 
			
				
					
						
							
							
								Natalia 
							
						 
					 
					
						
						
							
						
						f01ceae477 
					 
					
						
						
							
							[5.2.x]  Fixed   #36535  -- Ensured compatibility with docutils 0.19 through 0.22.  
						
						... 
						
						
						
						Regression in 65ab92f6a89cec8d9f55 
						
						
					 
					
						2025-08-04 21:53:33 -03:00 
						 
				 
			
				
					
						
							
							
								Adam Zapletal 
							
						 
					 
					
						
						
							
						
						5ca58ce3d0 
					 
					
						
						
							
							[5.2.x] Corrected assertNumQueries() example in docs/topics/testing/tools.txt.  
						
						... 
						
						
						
						Backport of dca8284a37 
						
						
					 
					
						2025-08-04 15:08:53 +02:00 
						 
				 
			
				
					
						
							
							
								Simon Charette 
							
						 
					 
					
						
						
							
						
						b3bb7230e1 
					 
					
						
						
							
							[5.2.x]  Fixed   #34871 ,  #36518  -- Implemented unresolved lookups expression replacement.  
						
						... 
						
						
						
						This allows the proper resolving of lookups when performing constraint
validation involving Q and Case objects.
Thanks Andrew Roberts for the report and Sarah for the tests and review.
Backport of 079d31e698 
						
						
					 
					
						2025-08-04 09:42:32 +02:00