Triaged
-------
https://code.djangoproject.com/ticket/28401 - Allow hashlib.md5() calls to work with FIPS kernels (accepted)
https://code.djangoproject.com/ticket/28402 - Provide 'temporary_file_path' for InMemoryUploadedFile (wontfix)
https://code.djangoproject.com/ticket/28408 - Incorrect error message with QuerySet.update() that requires a join on an annotated F expression (accepted)
https://code.djangoproject.com/ticket/28415 - Clarify what characters ASCIIUsernameValidator and UnicodeUsernameValidator accept (fixed)
https://code.djangoproject.com/ticket/28407 - Allow inspectdb to introspect db column comments (accepted)
https://code.djangoproject.com/ticket/28417 - django.db.migrations.DeleteModel doesn't delete corresponding permissions (wontfix)
https://code.djangoproject.com/ticket/28403 - Improve the example for FORMAT_MODULE_PATH and add missing formats (accepted)
https://code.djangoproject.com/ticket/28426 - startproject with a remote template gives an authentication prompt on Python 2 but 401: Unauthorized on Python 3 (accepted)
https://code.djangoproject.com/ticket/28425 - Prefetch can execute an UPDATE statement if a certain to_attr is given (accepted)
Reviewed/committed
------------------
https://github.com/django/django/pull/8754 - Fixed #28391 -- Fixed Cast() with CharField and max_length on MySQL.
https://github.com/django/django/pull/8784 - Fixed #28414 -- Fixed ClearableFileInput rendering as subwidget of MultiWidget.
https://github.com/django/django/pull/8261 - Fixed #27970 -- Allowed QuerySet.in_bulk() to fetch on fields besides primary key.
https://github.com/django/django/pull/8667 - Fixed #28377 -- Made combining form Media retain relative asset order.
https://github.com/django/django/pull/8795 - Refs #23919 -- Updated contrib.admin's compress.py to use pathlib.
https://github.com/django/django/pull/8792 - Fixed #28418 -- Fixed queryset crash when using a GenericRelation to a proxy model.