| 843c34b | Carlton Gibson | 02 June 2021, 08:46:30 UTC | [3.2.x] Bumped version for 3.2.4 release. | 02 June 2021, 08:46:30 UTC |
| 9f75e2e | Mariusz Felisiak | 24 May 2021, 07:55:14 UTC | [3.2.x] Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses. validate_ipv4_address() was affected only on Python < 3.9.5, see [1]. URLValidator() uses a regular expressions and it was affected on all Python versions. [1] https://bugs.python.org/issue36384 | 02 June 2021, 08:44:39 UTC |
| dfaba12 | Florian Apolloner | 17 May 2021, 09:26:36 UTC | [3.2.x] Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs' TemplateDetailView. | 02 June 2021, 08:44:39 UTC |
| aed1409 | Carlton Gibson | 02 June 2021, 08:19:19 UTC | [3.2.x] Confirmed release date for Django 3.2.4, 3.1.12, and 2.2.24. Backport of f66ae7a2d5558fe88ddfe639a610573872be6628 from main | 02 June 2021, 08:20:17 UTC |
| bf08609 | Jacob Walls | 02 June 2021, 06:14:57 UTC | [3.2.x] Fixed typo in docs/internals/contributing/writing-code/coding-style.txt. Backport of 1443b5e9aca56e249d751d6486c402b3679d3c38 from main | 02 June 2021, 06:15:41 UTC |
| 94675a7 | Mariusz Felisiak | 01 June 2021, 13:11:42 UTC | [3.2.x] Fixed #32793 -- Fixed loss of precision for temporal operations with DecimalFields on MySQL. Regression in 1e38f1191de21b6e96736f58df57dfb851a28c1f. Thanks Mohsen Tamiz for the report. Backport of e703b152c6148ddda1b072a4353e9a41dca87f90 from main | 01 June 2021, 13:13:10 UTC |
| b2ff165 | Nick Pope | 26 May 2021, 19:01:09 UTC | [3.2.x] Fixed typo in MiddlewareMixin deprecation note. Backport of e513fb0e77baf2ebcbf2cbe366bdf0228d01119f from main. | 27 May 2021, 04:54:00 UTC |
| 246a31a | Mariusz Felisiak | 26 May 2021, 09:19:47 UTC | [3.2.x] Fixed #32783 -- Fixed crash of autoreloader when __main__ module doesn't have __spec__ attribute. Regression in ec6d2531c59466924b645f314ac33f54470d7ac3. Thanks JonathanNickelson for the report. Backport of 12b19a1d76e1a6f80923c8358290d605dacd65d4 from main | 26 May 2021, 09:20:05 UTC |
| 4ba4c07 | Carlton Gibson | 25 May 2021, 08:38:20 UTC | [3.2.x] Added stub release notes and date for Django 3.2.4, 3.1.12, and 2.2.24. Backport of b46dbd4e3e255223078ae0028934ea986e19ebc1 from main | 26 May 2021, 08:17:27 UTC |
| c0d506f | Hasan Ramezani | 17 May 2021, 19:53:21 UTC | [3.2.x] Fixed #32744 -- Normalized to pathlib.Path in autoreloader check for template changes. Backport of 68357b2ca9e88c40fc00d848799813241be39129 from main | 26 May 2021, 08:08:58 UTC |
| 143d2a4 | Mariusz Felisiak | 20 May 2021, 10:23:36 UTC | [3.2.x] Changed IRC references to Libera.Chat. Backport of 66491f08fe86629fa25977bb3dddda06959f65e7 from main. | 20 May 2021, 10:25:07 UTC |
| a0782f5 | Ben Sturmfels | 20 May 2021, 00:17:16 UTC | [3.2.x] Fixed note about ISP caching in docs. Regression in 7aabd6238028f4bb78d0687bbccc97bcf634e28b. Backport of 31b6ce9ff938a0968f2e526f5d5e106fd17e3dfa from main | 20 May 2021, 09:24:26 UTC |
| d5c675a | Mike Lissner | 30 July 2020, 20:49:57 UTC | [3.2.x] Added note about culling in database cache backend docs. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 6e155d280dbe4bab171619654d8abc4b7f197e78 from main | 20 May 2021, 05:02:56 UTC |
| 33dec7b | David D Lowe | 18 November 2020, 09:33:09 UTC | [3.2.x] Doc'd that HttpRequest.path doesn't contain a query string. Backport of fa4e963ee7e6876581b5432363603571839ba00c from main | 19 May 2021, 09:58:35 UTC |
| a173202 | Carlton Gibson | 12 May 2021, 13:22:34 UTC | [3.2.x] Fixed #32740 -- Caught possible exception when initializing colorama. Backport of c2e6047c725e26987c87e2be59f2ab4bf9828fa5 from main | 19 May 2021, 09:16:13 UTC |
| d743c37 | David Sanders | 19 May 2021, 05:28:56 UTC | [3.2.x] Fixed typo in docs/ref/contrib/admin/index.txt. Backport of dacc307d9396516e7d3609b7b91e2ec545c84ebc from main | 19 May 2021, 05:29:23 UTC |
| 41e2aa7 | Mariusz Felisiak | 14 May 2021, 09:53:17 UTC | [3.2.x] Fixed #32747 -- Prevented initialization of unused caches. Thanks Alexander Ebral for the report. Regression in 98e05ccde440cc9b768952cc10bc8285f4924e1f. Backport of 958cdf65ae90d26236d1815bbba804729595ec7a from main | 18 May 2021, 18:23:26 UTC |
| 349bb58 | Rust Saiargaliev | 10 May 2021, 20:19:29 UTC | [3.2.x] Fixed #32733 -- Skipped system check for specifying type of auto-created primary keys on abstract models. Regression in b5e12d490af3debca8c55ab3c1698189fdedbbdb. Backport of a24fed399ced6be2e9dce4cf28db00c3ee21a21c from main | 18 May 2021, 11:20:55 UTC |
| 65b680a | Girish Sontakke | 18 May 2021, 09:30:38 UTC | [3.2.x] Fixed #32755 -- Corrected Model.get_absolute_url() example in docs. Backport of 27d4573d35935bff83c28bfd68a2ce5a7a6c600a from main | 18 May 2021, 09:31:03 UTC |
| ce78bc9 | Slava Skvortsov | 17 May 2021, 11:21:50 UTC | [3.2.x] Fixed #32754 -- Made AdminSite.catch_all_view() respect SCRIPT_NAME. Regression in ba31b0103442ac891fb3cb98f316781254e366c3. Backport of f7691d4812c578e696635718e67639d2e08eac40 from main | 18 May 2021, 07:58:49 UTC |
| cb91b2d | Nick Pope | 27 April 2021, 11:09:00 UTC | [3.2.x] Refs #32720 -- Updated various links in docs to avoid redirects and use HTTPS. Backport of c156e369553c75a30c78b8ed54a57b1101865105 from main | 17 May 2021, 10:16:09 UTC |
| 55b89e8 | Nick Pope | 27 April 2021, 15:38:57 UTC | [3.2.x] Refs #32720 -- Fixed some broken links in docs. Backport of 7c4ee487c7392a3a394caf62efad355fad639655 from main | 17 May 2021, 10:14:20 UTC |
| 0c19b07 | Nick Pope | 28 April 2021, 18:37:36 UTC | [3.2.x] Refs #32720 -- Used full hashes in security archive. Backport of 1c3bbcf802e661fc599365a097532ed3b362d16b from main | 17 May 2021, 10:13:57 UTC |
| f844c0c | Mariusz Felisiak | 17 May 2021, 06:22:33 UTC | [3.2.x] Corrected commit hashes for security patches. Backport of df5c96299ae30dcf8f152cc43c331fb34d39080e from main | 17 May 2021, 10:13:44 UTC |
| 80cf193 | Nick Pope | 27 April 2021, 18:50:49 UTC | [3.2.x] Refs #32720 -- Used :commit: and :source: role in old release notes. Backport of 8c4caee76a5571c6c8050660a6a9fc30ece6678d from main | 17 May 2021, 10:13:31 UTC |
| 1037825 | Mariusz Felisiak | 13 May 2021, 07:42:26 UTC | [3.2.x] Added stub release notes for Django 3.2.4. Backport of 820408d842a07202a80e6ef7f7a57ec6258d88e6 from main | 13 May 2021, 07:45:39 UTC |
| 18525ad | Mariusz Felisiak | 13 May 2021, 07:15:40 UTC | [3.2.x] Post-release version bump. | 13 May 2021, 07:15:40 UTC |
| 9385fa2 | Mariusz Felisiak | 13 May 2021, 07:11:39 UTC | [3.2.x] Bumped version for 3.2.3 release. | 13 May 2021, 07:11:39 UTC |
| 224b8e5 | Mariusz Felisiak | 13 May 2021, 06:53:44 UTC | [3.2.x] Fixed #32718 -- Relaxed file name validation in FileField. - Validate filename returned by FileField.upload_to() not a filename passed to the FileField.generate_filename() (upload_to() may completely ignored passed filename). - Allow relative paths (without dot segments) in the generated filename. Thanks to Jakub Kleň for the report and review. Thanks to all folks for checking this patch on existing projects. Thanks Florian Apolloner and Markus Holtermann for the discussion and implementation idea. Regression in 0b79eb36915d178aef5c6a7bbce71b1e76d376d3. Backport of b55699968fc9ee985384c64e37f6cc74a0a23683 from main | 13 May 2021, 06:55:00 UTC |
| 386caa5 | Simon Charette | 11 May 2021, 05:19:44 UTC | [3.2.x] Fixed #32717 -- Fixed filtering of querysets combined with the | operator. Address a long standing bug in a Where.add optimization to discard equal nodes that was surfaced by implementing equality for Lookup instances in bbf141bcdc31f1324048af9233583a523ac54c94. Thanks Shaheed Haque for the report. Backport of b81c7562fc33f50166d5120138d6398dc42b13c3 from main | 13 May 2021, 05:53:56 UTC |
| d6b6eda | David Smith | 12 May 2021, 18:46:01 UTC | [3.2.x] Fixed #26721 -- Doc'd setting UTF-8 on Windows. Backport of 0456d3e42795481a186db05719300691fe2a1029 from main | 12 May 2021, 18:46:31 UTC |
| 4318e60 | Nick Pope | 10 May 2021, 20:32:10 UTC | [3.2.x] Fixed #32732 -- Removed usage of deprecated 'db' and 'passwd' connection options in MySQL backend. The 'db' and 'passwd' connection options have been deprecated, use 'database' and 'password' instead (available since mysqlclient >= 1.3.8). This also allows the 'database' option in DATABASES['OPTIONS'] on MySQL. Backport of 1061f5243646b4c9b8a758f8a36c9e2ccdded1cf from main | 12 May 2021, 11:35:13 UTC |
| cd84f7a | Nick Pope | 07 May 2021, 10:12:11 UTC | [3.2.x] Refs #32366 -- Avoided use of datetime.utcnow() in the documentation. Backport of 69ffb1acf38bd34f76707468bb592eb4b164e2da from main | 12 May 2021, 10:12:28 UTC |
| fab710d | Nick Pope | 07 May 2021, 10:14:07 UTC | [3.2.x] Fixed a typo in docs/ref/models/fields.txt. datetime.date.utcnow() doesn't exist, should be .today(). Backport of 88b3982af396a7c2eca0db9c52dfa9830045cc19 from main | 12 May 2021, 10:12:10 UTC |
| dc7b495 | Mariusz Felisiak | 12 May 2021, 08:42:01 UTC | [3.2.x] Refs #32718 -- Corrected CVE-2021-31542 release notes. Backport of d1f1417caed648db2f81a1ec28c47bf958c01958 from main | 12 May 2021, 08:42:32 UTC |
| bdd5654 | Nick Pope | 06 May 2021, 18:01:32 UTC | [3.2.x] Fixed typo in docs/internals/contributing/writing-documentation.txt. Backport of c240ceea7d88c6a8058dcacb37356c93e0a3618f from main | 06 May 2021, 18:02:11 UTC |
| 8afb677 | Mariusz Felisiak | 06 May 2021, 08:08:00 UTC | [3.2.x] Added stub release notes for Django 3.2.3. Backport of 29779075d7f5e1a8cfe0933661d5255e2d7d3cbd from main | 06 May 2021, 08:11:32 UTC |
| 0262579 | Mariusz Felisiak | 06 May 2021, 07:58:24 UTC | [3.2.x] Added CVE-2021-32052 to security archive. Backport of efebcc429f048493d6bc710399e65d98081eafd5 from main | 06 May 2021, 08:03:45 UTC |
| 40ad501 | Mariusz Felisiak | 06 May 2021, 07:03:32 UTC | [3.2.x] Post-release version bump. | 06 May 2021, 07:03:32 UTC |
| 26e033b | Mariusz Felisiak | 06 May 2021, 06:59:30 UTC | [3.2.x] Bumped version for 3.2.2 release. | 06 May 2021, 06:59:30 UTC |
| 2d2c1d0 | Mariusz Felisiak | 04 May 2021, 18:50:12 UTC | [3.2.x] Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being accepted in URLValidator on Python 3.9.5+. In Python 3.9.5+ urllib.parse() automatically removes ASCII newlines and tabs from URLs [1, 2]. Unfortunately it created an issue in the URLValidator. URLValidator uses urllib.urlsplit() and urllib.urlunsplit() for creating a URL variant with Punycode which no longer contains newlines and tabs in Python 3.9.5+. As a consequence, the regular expression matched the URL (without unsafe characters) and the source value (with unsafe characters) was considered valid. [1] https://bugs.python.org/issue43882 and [2] https://github.com/python/cpython/commit/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4 Backport of e1e81aa1c4427411e3c68facdd761229ffea6f6f from main. | 06 May 2021, 06:48:22 UTC |
| a937d7f | Carlton Gibson | 04 May 2021, 12:44:19 UTC | [3.2.x] Refs CVE-2021-31542 -- Skipped mock AWS storage test on Windows. The validate_file_name() sanitation introduced in 0b79eb36915d178aef5c6a7bbce71b1e76d376d3 correctly rejects the example file name as containing path elements on Windows. This breaks the test introduced in 914c72be2abb1c6dd860cb9279beaa66409ae1b2 to allow path components for storages that may allow them. Test is skipped pending a discussed storage refactoring to support this use-case. Backport of a708f39ce67af174df90c5b5e50ad1976cec7cb8 from main | 06 May 2021, 05:42:21 UTC |
| 364098f | Simon Charette | 04 May 2021, 21:49:46 UTC | [3.2.x] Fixed #32714 -- Prevented recreation of migration for Meta.ordering with OrderBy expressions. Regression in c8b659430556dca0b2fe27cf2ea0f8290dbafecd. Thanks Kevin Marsh for the report. Backport of 96f55ccf798c7592a1203f798a4dffaf173a9263 from main | 05 May 2021, 06:44:37 UTC |
| df801dd | Carlton Gibson | 04 May 2021, 09:06:07 UTC | [3.2.x] Added CVE-2021-31542 to security archive. Backport of 607ebbfba915de2d84eb943aa93654f31817a709 and 62b2e8b37e37a313c63be40e3223ca4e830ebde3 from main | 04 May 2021, 09:10:50 UTC |
| 04d8ed3 | Carlton Gibson | 04 May 2021, 09:01:33 UTC | [3.2.x] Added stub release notes for Django 3.2.2. Backport of 5a43cfe24533591a020ba4e730440bad81c478db from main | 04 May 2021, 09:02:11 UTC |
| 0d57264 | Carlton Gibson | 04 May 2021, 08:43:26 UTC | [3.2.x] Post-release version bump. | 04 May 2021, 08:43:26 UTC |
| 8b300f3 | Carlton Gibson | 04 May 2021, 08:37:31 UTC | [3.2.x] Bumped version for 3.2.1 release. | 04 May 2021, 08:37:31 UTC |
| c98f446 | Florian Apolloner | 14 April 2021, 16:23:44 UTC | [3.2.x] Fixed CVE-2021-31542 -- Tightened path & file name sanitation in file uploads. | 04 May 2021, 06:43:52 UTC |
| 8e1900d | Susan Wright | 30 April 2021, 12:04:22 UTC | [3.2.x] Added spelling option to make.bat. Backport of 7582d913e7db7f32e4cdcfafc177aa77cbbf4332 from main | 30 April 2021, 12:09:59 UTC |
| ce13074 | Hasan Ramezani | 29 April 2021, 18:55:34 UTC | [3.2.x] Refs #32178 -- Doc'd DatabaseFeatures.django_test_skips/django_test_expected_failures in contributing guide. Backport of ca34db46504fca1221e27f6ab13734dfdfde6e1c from main | 29 April 2021, 18:56:08 UTC |
| bac4169 | Carlton Gibson | 29 April 2021, 08:59:14 UTC | [3.2.x] Refs #32674 -- Noted that auto-created through table PKs cannot be automatically migrated. Backport of 907d3a7ff4e12ad4ccc86af26a728007fe4d6fa2 from main | 29 April 2021, 13:14:15 UTC |
| d716d30 | Carlton Gibson | 29 April 2021, 09:26:38 UTC | [3.2.x] Refs #32694 -- Clarified when colorama requirement is needed in Windows how-to. Backport of 4f128fcf5dd5099a5ea374a87cad64852a9b62dd from main | 29 April 2021, 09:27:39 UTC |
| 263ee44 | Adam Johnson | 28 April 2021, 18:35:05 UTC | [3.2.x] Corrected introduction to range field lookups docs. Follow up to 24b9f5082344a127147266dd52d5d2dcd1c9cb44. Backport of 68e876c0953f882e54dddd49ef727f9e38e2d0d1 from main | 28 April 2021, 18:35:28 UTC |
| d5add5d | Simon Charette | 24 April 2021, 05:07:18 UTC | [3.2.x] Fixed #32632, Fixed #32657 -- Removed flawed support for Subquery deconstruction. Subquery deconstruction support required implementing complex and expensive equality rules for sql.Query objects for little benefit as the latter cannot themselves be made deconstructible to their reference to model classes. Making Expression @deconstructible and not BaseExpression allows interested parties to conform to the "expression" API even if they are not deconstructible as it's only a requirement for expressions allowed in Model fields and meta options (e.g. constraints, indexes). Thanks Phillip Cutter for the report. This also fixes a performance regression in bbf141bcdc31f1324048af9233583a523ac54c94. Backport of c8b659430556dca0b2fe27cf2ea0f8290dbafecd from main | 28 April 2021, 18:27:42 UTC |
| 55cb3c8 | Konstantin Alekseev | 26 April 2021, 12:19:13 UTC | [3.2.x] Fixed #32687 -- Restored passing process’ environment to underlying tool in dbshell on PostgreSQL. Regression in bbe6fbb8768e8fb1aecb96d51c049d7ceaf802d3. Backport of 6e742dabc95b00ba896434293556adeb4dbaee8a from main. | 27 April 2021, 10:02:06 UTC |
| 34981f3 | Mariusz Felisiak | 26 April 2021, 07:22:46 UTC | [3.2.x] Fixed #32682 -- Made admin changelist use Exists() instead of distinct() for preventing duplicates. Thanks Zain Patel for the report and Simon Charette for reviews. The exception introduced in 6307c3f1a123f5975c73b231e8ac4f115fd72c0d revealed a possible data loss issue in the admin. Backport of 187118203197801c6cb72dc8b06b714b23b6dd3d from main | 27 April 2021, 08:39:55 UTC |
| fbea64b | Mariusz Felisiak | 26 April 2021, 07:30:40 UTC | [3.2.x] Refs #32682 -- Renamed use_distinct variable to may_have_duplicates. QuerySet.distinct() is not the only way to avoid duplicate, it's also not preferred. Backport of cd74aad90e09865ae6cd8ca0377ef0a5008d14e9 from main | 27 April 2021, 08:37:13 UTC |
| 7ad7034 | Mariusz Felisiak | 27 April 2021, 07:53:27 UTC | [3.2.x] Refs #32682 -- Fixed QuerySet.delete() crash on querysets with self-referential subqueries on MySQL. Backport of 4074f38e1dcc93b859bbbfd6abd8441c3bca36b3 from main | 27 April 2021, 08:35:42 UTC |
| 727a154 | Mariusz Felisiak | 27 April 2021, 06:40:52 UTC | [3.2.x] Refs 32637 -- Made technical 404 debug page display exception message when URL is resolved. Follow up to 3b8527e32b665df91622649550813bb1ec9a9251. Backport of d68be0494be8b82365f2a5410c9335e539d8efd6 from main | 27 April 2021, 06:41:11 UTC |
| 0dfe88e | Zain Patel | 24 April 2021, 00:50:27 UTC | [3.2.x] Fixed #32681 -- Fixed VariableDoesNotExist when rendering some admin template. Regression in 84609b3205905097d7d3038d32e6101f012c0619. Backport of 4e5bbb6ef2287126badd32842b239f4a8a7394ca from main. | 26 April 2021, 10:52:33 UTC |
| fc9cbad | Clumart.G | 23 April 2021, 13:24:16 UTC | [3.2.x] Refs #28034 -- Corrected docs example in contributing tutorial. Backport of 67bb1f516cf507feb141fd4ef746456e1ef67c4a from main | 23 April 2021, 13:25:12 UTC |
| 1cf0989 | Mariusz Felisiak | 22 April 2021, 08:47:10 UTC | [3.2.x] Used assertCountEqual() in ExcludeTests.test_exclude_subquery(). Backport of c3278bb71fe03132704525abcdf29bb4f1b3f143 from main | 22 April 2021, 12:42:47 UTC |
| 4c63459 | Carlton Gibson | 10 April 2021, 15:29:32 UTC | [3.2.x] Added note to update docs config when creating new stable branch. django_next_version in docs/conf.py should be bumped when creating a new stable branch. Backport of 6a7af38b072f97d15e06aba87c673c16ecafe5a8 from main | 22 April 2021, 07:02:59 UTC |
| 7d7c6d9 | Abhyudai | 21 April 2021, 14:40:04 UTC | [3.2.x] Fixed #32667 -- Added link to labeling checks in BaseCommand.requires_system_checks docs. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 4a77aeb1f86bc06e18023cac10109e067ed20800 from main | 21 April 2021, 14:40:33 UTC |
| 48e19ba | Simon Charette | 21 April 2021, 02:25:52 UTC | [3.2.x] Fixed #32650 -- Fixed handling subquery aliasing on queryset combination. This issue started manifesting itself when nesting a combined subquery relying on exclude() since 8593e162c9cb63a6c0b06daf045bc1c21eb4d7c1 but sql.Query.combine never properly handled subqueries outer refs in the first place, see QuerySetBitwiseOperationTests.test_subquery_aliases() (refs #27149). Thanks Raffaele Salmaso for the report. Backport of 6d0cbe42c3d382e5393d4af48185c546bb0ada1f from main | 21 April 2021, 08:32:39 UTC |
| 1cc2eaf | Mariusz Felisiak | 21 April 2021, 07:41:37 UTC | [3.2.x] Fixed #32665 -- Fixed caches system check crash when STATICFILES_DIRS is a list of 2-tuples. Thanks Jared Lockhart for the report. Regression in c36075ac1dddfa986340b1a5e15fe48833322372. Backport of 34d1905712d33e72c76b3a55a4fc24abbd11be6c from main | 21 April 2021, 07:42:43 UTC |
| 54d5bfa | Carlton Gibson | 15 April 2021, 15:15:28 UTC | [3.2.x] Fixed #32647 -- Restored multi-row select with shift-modifier in admin changelist. Regression in 30e59705fc3e3e9e8370b965af794ad6173bf92b. Backport of 5c73fbb6a93ee214678f02ba4027f18dff49337b from main | 21 April 2021, 07:08:34 UTC |
| 4acce4d | Adam Johnson | 15 April 2021, 15:42:06 UTC | [3.2.x] Corrected File, ContentFile, and ImageFile signatures in docs. Backport of 725ca1fb60da2ef1bb6db146cd2d735591e75fbd from main | 16 April 2021, 08:32:54 UTC |
| 99ea737 | Carlton Gibson | 14 April 2021, 18:23:21 UTC | [3.2.x] Fixed #32652 -- Fixed links to new contributors FAQ. Backport of e3e2276e6fe6fd77e4fbdeeb2a287288d31de3bb from main | 15 April 2021, 15:16:22 UTC |
| 539d005 | Florian Apolloner | 14 April 2021, 11:45:24 UTC | [3.2.x] Fixed #32643 -- Fixed decoding of messages in the pre-Django 3.2 format. Thanks Jan Pieter Waagmeester for the report. Regression in 2d6179c819010f6a9d00835d5893c4593c0b85a0. Backport of 4511d1459810037b91faa5b506e4f75c77aa72be from main. | 15 April 2021, 05:58:48 UTC |
| 208e722 | Mariusz Felisiak | 14 April 2021, 19:11:17 UTC | [3.2.x] Fixed #32645 -- Fixed QuerySet.update() crash when ordered by joined fields on MySQL/MariaDB. Thanks Matt Westcott for the report. Regression in 779e615e362108862f1681f965ee9e4f1d0ae6d2. Backport of ca9872905559026af82000e46cde6f7dedc897b6 from main | 14 April 2021, 19:13:27 UTC |
| d026769 | Jonathan Richards | 14 March 2021, 21:00:40 UTC | [3.2.x] Fixed #32548 -- Fixed crash when combining Q() objects with boolean expressions. Backport of 00b0786de533dbb3f6208d8d5eaddbf765b4e5b8 from main. Regression in 466920f6d726eee90d5566e0a9948e92b33a122e. | 14 April 2021, 17:46:45 UTC |
| 65dfb06 | Arthur Jovart | 14 April 2021, 12:50:01 UTC | [3.2.x] Fixed #32648 -- Fixed VariableDoesNotExist rendering sitemaps template. Backport of 08c60cce3b13f6e60d7588206da2d3c71228f378 from main | 14 April 2021, 17:44:10 UTC |
| 59cce82 | Mariusz Felisiak | 14 April 2021, 10:23:47 UTC | [3.2.x] Fixed #32649 -- Fixed ModelAdmin.search_fields crash when searching against phrases with unbalanced quotes. Thanks Dlis for the report. Regression in 26a413507abb38f7eee4cf62f2ee9727fdc7bf8d. Backport of 23fa29f6a6659e0f600d216de6bcb79e7f6818c9 from main | 14 April 2021, 10:24:11 UTC |
| 700356f | Hasan Ramezani | 13 April 2021, 09:51:19 UTC | [3.2.x] Fixed #32635 -- Fixed system check crash for reverse o2o relations in CheckConstraint.check and UniqueConstraint.condition. Regression in b7b7df5fbcf44e6598396905136cab5a19e9faff. Thanks Szymon Zmilczak for the report. Backport of a77c9a4229cfef790ec18001b2cd18bd9c4aedbc from main | 14 April 2021, 08:32:07 UTC |
| d6314c4 | Mariusz Felisiak | 13 April 2021, 07:15:04 UTC | [3.2.x] Fixed #32637 -- Restored exception message on technical 404 debug page. Thanks Atul Varma for the report. Backport of 3b8527e32b665df91622649550813bb1ec9a9251 from main | 13 April 2021, 07:15:25 UTC |
| b245845 | Iuri de Silvio | 08 April 2021, 19:31:45 UTC | [3.2.x] Fixed #32627 -- Fixed QuerySet.values()/values_list() crash on combined querysets ordered by unannotated columns. Backport of 9760e262f85ae57df39abe2799eff48a82b14474 from main | 13 April 2021, 04:16:19 UTC |
| 98db3c7 | Carlton Gibson | 10 April 2021, 15:08:22 UTC | [3.2.x] Bumped django_next_version in docs config. | 10 April 2021, 17:06:18 UTC |
| 078bcd5 | Hasan Ramezani | 09 April 2021, 19:34:44 UTC | [3.2.x] Fixed #32618 -- Added link to conditional aggregation in aggregation topic guide. Backport of 1351f2ee163145df2cf5471eb3e57289f8853512 from main | 09 April 2021, 19:35:43 UTC |
| 0abbdc8 | Hasan Ramezani | 09 April 2021, 08:47:46 UTC | [3.2.x] Fixed #32535 -- Added note about DEBUG_PROPAGATE_EXCEPTIONS setting to middleware docs. Backport of fc268c8648d0d0375d01d36aa1f05f1172ff1566 from main | 09 April 2021, 08:48:10 UTC |
| 49e618f | Adam Johnson | 08 April 2021, 10:40:16 UTC | [3.2.x] Fixed #32620 -- Allowed subclasses of Big/SmallAutoField for DEFAULT_AUTO_FIELD. Backport of 45a58c31e64dbfdecab1178b1d00a3803a90ea2d from main | 08 April 2021, 11:44:21 UTC |
| 55da044 | Carlton Gibson | 07 April 2021, 17:44:29 UTC | [3.2.x] Corrected release number format in 3.2.1 release notes. Backport of 3f2920ae1d91e67ebf677d407da528c04188384e from main | 07 April 2021, 17:45:29 UTC |
| 5eb17d3 | Claude Paroz | 03 April 2021, 12:47:27 UTC | [3.2.x] Fixed #32544 -- Confirmed support for GDAL 3.2 and GEOS 3.9. Backport of e3cfba0029516aafe40f963378e234df2c0d33bb from main. | 07 April 2021, 15:04:10 UTC |
| a3a4a0b | Carlton Gibson | 07 April 2021, 05:27:31 UTC | [3.2.x] Corrected wrapping in 3.2 release notes. Partially reverts 0802b404a210862e6765a6c7dee6cba61085d7a6. Backport of 5b05a45c62f4702a6039cd3de290320c232cb808 from main | 07 April 2021, 05:28:09 UTC |
| 42fea5d | Mariusz Felisiak | 06 April 2021, 10:44:40 UTC | [3.2.x] Refs #30156 -- Corrected version in SpatiaLite install instructions. Backport of da542ccab6d61e1467199b52f77f64a2d72f5faf from main | 06 April 2021, 10:45:15 UTC |
| 2e8ff5f | Carlton Gibson | 06 April 2021, 09:49:48 UTC | [3.2.x] Added stub release notes for Django 3.2.1. Backport of df0a9e6d5ce00fc7890545d854dbea876bd07d9b from main | 06 April 2021, 09:50:23 UTC |
| f0630e7 | Carlton Gibson | 06 April 2021, 09:32:07 UTC | [3.2.x] Post-release version bump. | 06 April 2021, 09:32:07 UTC |
| b6475d7 | Carlton Gibson | 06 April 2021, 09:27:22 UTC | [3.2.x] Bumped version for 3.2 release. | 06 April 2021, 09:27:22 UTC |
| 8df29fc | Carlton Gibson | 06 April 2021, 09:20:59 UTC | [3.2.x] Added release date for Django 3.2. Adjusted wrapping in release notes where needed. Backport of 0802b404a210862e6765a6c7dee6cba61085d7a6 from main | 06 April 2021, 09:21:32 UTC |
| 09c0b1a | Carlton Gibson | 06 April 2021, 09:02:06 UTC | [3.2.x] Updated manpage for Django 3.2 final. | 06 April 2021, 09:02:06 UTC |
| 011b92c | Carlton Gibson | 06 April 2021, 08:08:05 UTC | [3.2.x] Updated asgiref dependency for 3.2 release series. Backport of 5aea50e57f6c1bd725db36a0664e21b2be91b591 from main | 06 April 2021, 08:43:40 UTC |
| 29e2df2 | Mariusz Felisiak | 06 April 2021, 07:42:31 UTC | [3.2.x] Added CVE-2021-28658 to security archive. Backport of 1eac8468cbde790fecb51dd055a439f4947d01e9 from main | 06 April 2021, 07:45:23 UTC |
| 2820fd1 | Mariusz Felisiak | 16 March 2021, 09:19:00 UTC | [3.2.x] Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files. Thanks Claude Paroz for the initial patch. Thanks Dennis Brinkrolf for the report. Backport of d4d800ca1addc4141e03c5440a849bb64d1582cd from main. | 06 April 2021, 06:24:01 UTC |
| eb7c0a7 | Mariusz Felisiak | 06 April 2021, 06:03:43 UTC | [3.2.x] Fixed #32614 -- Fixed MiddlewareSyncAsyncTests tests with asgiref 3.3.2+. Backport of 78fea27f690028204c03c28d821cb0c0240a7398 from main | 06 April 2021, 06:04:07 UTC |
| 1ea5e98 | Claude Paroz | 06 April 2021, 04:17:47 UTC | [3.2.x] Updated translations from Transifex. | 06 April 2021, 04:17:47 UTC |
| a118564 | William Schwartz | 30 March 2021, 20:57:33 UTC | [3.2.x] Refs #32105 -- Moved ExceptionReporter template paths to properties. Refs #32316. Backport of 7248afe12f40361870388ecdd7e0038eb0d58e47 from main | 31 March 2021, 07:11:39 UTC |
| d67d48e | Mariusz Felisiak | 29 March 2021, 08:10:19 UTC | [3.2.x] Fixed #32595 -- Fixed SchemaEditor.quote_value() crash with bytes. Backport of f6018c1e63a04e0c12e2ca759e76e05ccf5e09de from main | 30 March 2021, 09:47:49 UTC |
| 682eba5 | Mariusz Felisiak | 27 March 2021, 11:01:49 UTC | [3.2.x] Refs #32595 -- Added MySQL's SchemaEditor.quote_value() tests for values with Unicode chars. Backport of 3c75f1f3cac7985e8a134fc1c33eb6e01639a04b from main | 30 March 2021, 09:47:41 UTC |
| 1f48d38 | arcanemachine | 26 March 2021, 20:50:27 UTC | [3.2.x] Removed dead link in docs/topics/http/sessions.txt. Backport of 4a80d0f22021bb0af842f038eba45958e9576bec from main | 30 March 2021, 04:42:12 UTC |
| 57d4563 | John | 26 March 2021, 07:04:59 UTC | [3.2.x] Added missing mode="rb" argument to open() call in Client.post() example in docs. Backport of 509d266c6aae5e4d5738fe2a2cba0bde581aac2b from main | 26 March 2021, 07:05:22 UTC |
