Fellow Report - April 8, 2017

[Tim Graham]

Triaged

-------

https://code.djangoproject.com/ticket/28011 - Correct Field.hidden docs regarding what fields are hidden (created)

https://code.djangoproject.com/ticket/28027 - UTF-8 in help_text in models.ManyToManyField doesn't work anymore (invalid)

https://code.djangoproject.com/ticket/28031 - Documentation for uwsgi deployment mentions buggy uwsgi packages in some distros but not when they were fixed (fixed)

https://code.djangoproject.com/ticket/28037 - Incorrect return type in QueryDict.items()/values() docs examples (accepted)

https://code.djangoproject.com/ticket/28034 - Update the contributing tutorial to use a more recent patch (accepted)

https://code.djangoproject.com/ticket/28042 - mimetype Fallback for attachments passed to EmailMessage.__init__ removed (accepted)

https://code.djangoproject.com/ticket/28039 - BaseGeometryWidget.subwidgets() crashes with KeyError 'widget' (accepted)

Authored

----------

https://github.com/django/django/commit/a1f948b468b6621083a03b0d53432341b7a4d753 - Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().

https://github.com/django/django/commit/5ea48a70afac5e5684b504f09286e7defdd1a81a - Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.

Reviewed/committed

------------------

https://github.com/django/django/pull/8286 - Fixed #11854 -- Added Azimuth GIS function.

https://github.com/django/django/pull/8278 - Fixed #27928 -- Avoided SET/DROP DEFAULT unless a field changes from null to non-null.

https://github.com/django/django/pull/8287 - Fixed #27573 -- Made Distance on geodetic coordinates return a raw value on MySQL.

https://github.com/django/django/pull/8272 - Refs #27834 -- Removed Value wrapping from StrIndex's substring param.

https://github.com/django/django/pull/8270 - Fixed #27974 -- Kept resolved templates constant during one rendering cycle.

https://github.com/django/djangoproject.com/pull/758 - Used correct sphinx builder for downloadable docs

https://github.com/django/django/pull/8294 - Fixed #28001 -- Updated comment and tested context popping in ForNode.render().

https://github.com/django/django/pull/8291 - .Fixed #28006 -- Allowed using D with lookups on Distance annotations.

https://github.com/django/django/pull/8328 - Fixed #28051 -- Made migrations respect Index's name argument.

https://github.com/django/django/pull/8116 - Fixed #25406 -- Removed exception hiding in PostgreSQL test database creation.

https://github.com/django/django/pull/8317 - Fixed #28038 -- Restored casting to text of builtin lookups on PostgreSQL.

https://github.com/django/django/pull/8323 - Fixed #28042 -- Fixed crash when using a two-tuple in EmailMessage's attachments arg.

https://github.com/django/django/pull/8260 - Fixed #27972 -- Made BaseSpatialField.geodetic() use SpatialReference.geographic.

https://github.com/django/django/pull/8325 - Refs #26605 -- Added migrations state test for a swappable model inheriting an abstract model inheriting concrete model.