Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: django/django
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 6.0.5
Choose a base ref
...
head repository: django/django
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 6.0.6
Choose a head ref
  • 20 commits
  • 127 files changed
  • 6 contributors

Commits on May 5, 2026

  1. Configuration menu
    Copy the full SHA
    d49799a View commit details
    Browse the repository at this point in the history
  2. [6.0.x] Added stub release notes for 6.0.6.

    Backport of fcfc4b2 from main.
    sarahboyce committed May 5, 2026
    Configuration menu
    Copy the full SHA
    81a2dc4 View commit details
    Browse the repository at this point in the history
  3. [6.0.x] Added CVE-2026-5766, CVE-2026-35192, and CVE-2026-6907 to sec…

    …urity archive.
    
    Backport of 17b93fa from main.
    sarahboyce committed May 5, 2026
    Configuration menu
    Copy the full SHA
    c6a22c3 View commit details
    Browse the repository at this point in the history

Commits on May 6, 2026

  1. [6.0.x] Refs #36862 -- Clarified security note for RemoteUserMiddleware.

    Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>
    Co-authored-by: Jake Howard <git@theorangeone.net>
    
    Backport of 90afa9b from main.
    jacobtylerwalls committed May 6, 2026
    Configuration menu
    Copy the full SHA
    5380669 View commit details
    Browse the repository at this point in the history
  2. [6.0.x] Refs #35844 -- Checked for forkserver mode when running runte…

    …sts.py with --selenium and --parallel.
    
    Backport of c60a708 from main.
    jacobtylerwalls committed May 6, 2026
    Configuration menu
    Copy the full SHA
    70f1d05 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    82545f0 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    328df8b View commit details
    Browse the repository at this point in the history

Commits on May 7, 2026

  1. [6.0.x] Refs #15727 -- Moved security.E026 out of list of deploy=True…

    … checks.
    
    Backport of 8f0abd2 from main.
    jacobtylerwalls committed May 7, 2026
    Configuration menu
    Copy the full SHA
    ffa6699 View commit details
    Browse the repository at this point in the history

Commits on May 12, 2026

  1. [6.0.x] Fixed #27825 -- Doc'd that setting model fields does not conv…

    …ert types.
    
    Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>
    
    Backport of a832365 from main.
    1wos authored and jacobtylerwalls committed May 12, 2026
    Configuration menu
    Copy the full SHA
    5c9d9af View commit details
    Browse the repository at this point in the history

Commits on May 13, 2026

  1. Configuration menu
    Copy the full SHA
    0e3eed5 View commit details
    Browse the repository at this point in the history

Commits on May 27, 2026

  1. Configuration menu
    Copy the full SHA
    c9f32a2 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    49ca2db View commit details
    Browse the repository at this point in the history

Commits on Jun 2, 2026

  1. Configuration menu
    Copy the full SHA
    dd895d6 View commit details
    Browse the repository at this point in the history
  2. [6.0.x] Included commit hash in checksum file when building artifacts…

    … for release.
    
    Backport of 7436661 from main.
    nessita committed Jun 2, 2026
    Configuration menu
    Copy the full SHA
    98a75e3 View commit details
    Browse the repository at this point in the history

Commits on Jun 3, 2026

  1. [6.0.x] Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace…

    … collisions.
    
    Made signed cookies derive their signer namespace from an injective
    encoding of `(name, salt)` while preserving compatibility with legacy
    `name + salt` cookies behind SIGNED_COOKIE_LEGACY_SALT_FALLBACK.
    
    Thanks Peng Zhou for the report, and Shai Berger, Markus Holterman,
    Jake Howard, and Paul McMillan for reviews.
    
    Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>
    Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
    
    Backport of 70d3651 from main.
    PaulMcMillan authored and nessita committed Jun 3, 2026
    Configuration menu
    Copy the full SHA
    c807d9c View commit details
    Browse the repository at this point in the history
  2. [6.0.x] Fixed CVE-2026-7666 -- Delayed setting SMTP connection until …

    …fully configured.
    
    Thanks Kasper Dupont for the report, and Jacob Walls and Natalia Bidart
    for reviews.
    
    Backport of df887f5 from main.
    nessita committed Jun 3, 2026
    Configuration menu
    Copy the full SHA
    625a670 View commit details
    Browse the repository at this point in the history
  3. [6.0.x] Fixed CVE-2026-8404 -- Used Cache-Control directives case-ins…

    …ensitively in UpdateCacheMiddleware.
    
    Thanks Ahmed Badawe for the report, and Jacob Walls for reviews.
    
    Backport of d618d7a from main.
    RealOrangeOne authored and nessita committed Jun 3, 2026
    Configuration menu
    Copy the full SHA
    b433025 View commit details
    Browse the repository at this point in the history
  4. [6.0.x] Fixed CVE-2026-35193 -- Varied on Authorization when caching …

    …non-public responses.
    
    Thanks Shai Berger for the report, and Natalia Bidart and Sarah Boyce for reviews.
    
    Backport of a2faa8e from main.
    jacobtylerwalls authored and nessita committed Jun 3, 2026
    Configuration menu
    Copy the full SHA
    664652f View commit details
    Browse the repository at this point in the history
  5. [6.0.x] Fixed CVE-2026-48587 -- Ignored whitespace padding when check…

    …ing Vary header values.
    
    Thanks to Navid Rezazadeh for the report and Jacob Walls for review.
    
    Backport of 42aa0b3 from main.
    RealOrangeOne authored and nessita committed Jun 3, 2026
    Configuration menu
    Copy the full SHA
    1721035 View commit details
    Browse the repository at this point in the history
  6. Configuration menu
    Copy the full SHA
    ee93f65 View commit details
    Browse the repository at this point in the history
Loading