Triaged
-------
https://code.djangoproject.com/ticket/28172 - Prevent nonexistent template filter arguments from raising VariableDoesNotExist (maybe)
https://code.djangoproject.com/ticket/28217 - nested calls to functions decorated with sensitive_post_parameters produces unexpected results which parameters are considered sensitive (accepted)
https://code.djangoproject.com/ticket/28255 - URLValidator rejects hostname only URLs (duplicate)
https://code.djangoproject.com/ticket/28259 - Make bool(AnonymousUser) evaluate to false (wontfix)
https://code.djangoproject.com/ticket/28241 - module_has_submodule() doesn't work correctly if the module_name argument is a dotted path (accepted)
https://code.djangoproject.com/ticket/28262 - ModelAdmin.lookup_allowed() incorrectly raises DisallowedModelAdminLookup lookup with reverse relation to origin model (accepted)
https://code.djangoproject.com/ticket/28264 - forms.FilePathField does not return sorted subdirectories in formfield (accepted)
https://code.djangoproject.com/ticket/28271 - Debug view's AJAX response doesn't have the proper charset (accepted)
Authored
----------
https://github.com/django/django/pull/8572 - Fixed #28199 -- Fixed Subquery generating unnecessary/invalid CAST.
Reviewed/committed
------------------
https://github.com/django/django/pull/8055 - Fixed #26682 -- Added support for Oracle identity columns.
https://github.com/django/django/pull/8557 - Fixed #26823 -- Prevented update_last_login signal receiver from crashing if User model doesn't have last_login field.
https://github.com/django/django/pull/8566 - DRY'd startapp and startproject management commands.
https://github.com/django/djangoproject.com/pull/760 - Fixed #759 -- Fixed problems when using bitcoin donations.
https://github.com/django/django/pull/8509 - Fixed #28209 -- Made date-based generic views return a 404 rather than crash when given an out of range date.
https://github.com/django/django/pull/8534 - Fixed #28212 -- Allowed customizing the port that LiveServerTestCase uses.
https://github.com/django/django/pull/8486 - Fixed #28170 -- Fixed file_move_safe() crash when moving files to a CIFS mount.
https://github.com/django/django/pull/8060 - Fixed #22550 -- Prohibited QuerySet.last()/reverse() after slicing.
https://github.com/django/django/pull/8565 - Fixed #28242 -- Moved ImageField file extension validation to the form field.
https://github.com/django/django/pull/7836 - Fixed #27639 -- Added chunk_size argument to QuerySet.iterator()
https://github.com/django/django/pull/8584 - Fixed #28265 -- Prevented renderer warning on Widget.render() with **kwargs.
https://github.com/django/django/pull/8581 - Fixed #28260 -- Allowed customizing the test tablespace initial and autoextend size on Oracle.
https://github.com/django/django/pull/6720 - Fixed #26028 -- Added overriding templates howto.
https://github.com/django/django/pull/8202 - Completed test coverage for RedirectFallbackMiddleware.
https://github.com/django/django/pull/8483 - Fixed #28190 -- Clarified how include/extends treat template names.
https://github.com/django/django/pull/8490 - Fixed #28192 -- Required passing optional form field args as keyword args.