Triaged
-------
https://code.djangoproject.com/ticket/28550 - auth's login/logout() views drop options passed as args rather the kwargs (accepted)
https://code.djangoproject.com/ticket/28540 - When you save three or more ImageField in admin file perm = 0o600 (needsinfo)
https://code.djangoproject.com/ticket/28538 - order_with_respect_to not working when model accessed via a many-to-many related field (invalid)
https://code.djangoproject.com/ticket/28488 - Django 1.11+ raises CSRF verification failed if settings.DEBUG is False and an intermediate 404 page is requested (investigation ongoing)
https://code.djangoproject.com/ticket/28555 - Inconsistent empty value for EmailField(blank=True, null=True) due to strip after check for empty value (accepted)
https://code.djangoproject.com/ticket/28557 - docs label `to` __init__ parameter as `othermodel` for ForeignKey, OneToOneField, ManyToManyField (fixed)
Authored
----------
https://github.com/django/django/pull/8992 - Fixed #28543 -- Prevented ManyToManyField.value_from_object() from being lazy.
https://github.com/django/django/pull/9014 - Bootstrapped Django 2.1.
Reviewed/committed
------------------
https://github.com/django/django/pull/8986 - Fixed #28530 -- Prevented SelectDateWidget from localizing years in output.
https://github.com/django/django/pull/8985 - Fixed #28487 -- Fixed runserver crash with non-Unicode system encodings on Python 2 + Windows.
https://github.com/django/django/pull/8994 - Fixed #28549 -- Fixed QuerySet.defer() with super and subclass fields.
https://github.com/django/django/pull/9007 - Fixed #28559 -- Removed contrib.gis.gdal.OGRException backwards compatibility alias.
https://github.com/django/django/pull/8963 - Fixed #28525 -- Documented GDAL and GeoIP exceptions.
https://github.com/django/django/pull/8906 - Fixed #17985 -- Documented ModelAdmin.lookup_allowed().
https://github.com/django/django/pull/8920 - Fixed #28332 -- Fixed diamond inheritence example in docs.
https://github.com/django/django/pull/8932 - Fixed #28306 -- Improved test coverage for django.utils.lorem_ipsum.
https://github.com/django/django/pull/8941 - Fixed #28367 -- Doc'd how to override management commands.