-
-
Notifications
You must be signed in to change notification settings - Fork 33.8k
Comparing changes
Open a pull request
base repository: django/django
base: 5.2.11
head repository: django/django
compare: 5.2.12
- 15 commits
- 39 files changed
- 4 contributors
Commits on Feb 3, 2026
-
Configuration menu - View commit details
-
Copy full SHA for 7d796de - Browse repository at this point
Copy the full SHA 7d796deView commit details -
[5.2.x] Added CVE-2025-13473, CVE-2025-14550, CVE-2026-1207, CVE-2026…
…-1285, CVE-2026-1287, and CVE-2026-1312 to security archive. Backport of af361d3 from main.
Configuration menu - View commit details
-
Copy full SHA for dc32c07 - Browse repository at this point
Copy the full SHA dc32c07View commit details
Commits on Feb 10, 2026
-
[5.2.x] Refs #35961 -- Restored AUTHORS in wheel.
As a side effect from adding explicit license files to conform to PEP 639, the AUTHORS file got dropped from the wheel. The tarball still contained this file. In the "Python Packaging User Guide" (https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license-files) the AUTHORS file is modeled to be included in license-files. Follow-up to 96a7a65. Backport of 220db1c from main.
Configuration menu - View commit details
-
Copy full SHA for 420c707 - Browse repository at this point
Copy the full SHA 420c707View commit details -
[5.2.x] Added stub release notes for 5.2.12.
Backport of 2c2d363 from main.
Configuration menu - View commit details
-
Copy full SHA for e9b8537 - Browse repository at this point
Copy the full SHA e9b8537View commit details -
[5.2.x] Fixed #36903 -- Fixed further NameErrors when inspecting func…
Configuration menu - View commit details
-
Copy full SHA for a4999ef - Browse repository at this point
Copy the full SHA a4999efView commit details
Commits on Feb 24, 2026
-
[5.2.x] Added stub release notes and release date for 5.2.12 and 4.2.29.
Backport of acd0bec from main.
Configuration menu - View commit details
-
Copy full SHA for 2bc009b - Browse repository at this point
Copy the full SHA 2bc009bView commit details -
[5.2.x] Bumped minimum isort version to 7.0.0.
Added ignores relating to PyCQA/isort#2352. Backport of d980d68 from main.
Configuration menu - View commit details
-
Copy full SHA for 490e495 - Browse repository at this point
Copy the full SHA 490e495View commit details -
Configuration menu - View commit details
-
Copy full SHA for a73eed2 - Browse repository at this point
Copy the full SHA a73eed2View commit details
Commits on Feb 25, 2026
-
[5.2.x] Fixed #36944 -- Removed MAX_LENGTH_HTML and related 5M chars …
…limit references from HTML truncation docs. Backport of bbc6818 from main.
Configuration menu - View commit details
-
Copy full SHA for 703777c - Browse repository at this point
Copy the full SHA 703777cView commit details
Commits on Mar 2, 2026
-
[5.2.x] Aligned docs checks between GitHub Actions and local developm…
…ent. Backport of 3f21cb0 from main.
Configuration menu - View commit details
-
Copy full SHA for 1db60ed - Browse repository at this point
Copy the full SHA 1db60edView commit details -
Configuration menu - View commit details
-
Copy full SHA for 951fe8b - Browse repository at this point
Copy the full SHA 951fe8bView commit details -
[5.2.x] Refs #36944 -- Added missing versionchanged annotation for MA…
…X_LENGTH_HTML change.
Configuration menu - View commit details
-
Copy full SHA for 94e7f17 - Browse repository at this point
Copy the full SHA 94e7f17View commit details
Commits on Mar 3, 2026
-
[5.2.x] Fixed CVE-2026-25673 -- Simplified URLField scheme detection.
This simplicaftion mitigates a potential DoS in URLField on Windows. The usage of `urlsplit()` in `URLField.to_python()` was replaced with `str.partition(":")` for URL scheme detection. On Windows, `urlsplit()` performs Unicode normalization which is slow for certain characters, making `URLField` vulnerable to DoS via specially crafted POST payloads. Thanks Seokchan Yoon for the report, and Jake Howard and Shai Berger for the review. Refs #36923. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com> Backport of 951ffb3 from main.Configuration menu - View commit details
-
Copy full SHA for 4d3c184 - Browse repository at this point
Copy the full SHA 4d3c184View commit details -
[5.2.x] Fixed CVE-2026-25674 -- Prevented potentially incorrect permi…
…ssions on file system object creation. This fix introduces `safe_makedirs()` in the `os` utils as a safer alternative to `os.makedirs()` that avoids umask-related race conditions in multi-threaded environments. This is a workaround for python/cpython#86533 and the solution is based on the fix being proposed for CPython. Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com> Co-authored-by: Zackery Spytz <zspytz@gmail.com> Refs CVE-2020-24583 and #31921. Thanks Tarek Nakkouch for the report, and Jake Howard, Jacob Walls, and Shai Berger for reviews. Backport of 019e44f from main.
Configuration menu - View commit details
-
Copy full SHA for b07ed2a - Browse repository at this point
Copy the full SHA b07ed2aView commit details -
Configuration menu - View commit details
-
Copy full SHA for 4f382ca - Browse repository at this point
Copy the full SHA 4f382caView commit details
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff 5.2.11...5.2.12