Triaged
-------
https://code.djangoproject.com/ticket/28753 - Unit tests documentation does not specify non-python requirements (worksforme)
https://code.djangoproject.com/ticket/28756 - QuerySet API .extra( ) usage for FIELD + ORDER BY of queryset (invalid)
https://code.djangoproject.com/ticket/28757 - Allow using forms of contrib.auth without installing contrib.auth (accepted)
https://code.djangoproject.com/ticket/28746 - Model missing custom Meta option in migrations (invalid)
https://code.djangoproject.com/ticket/28745 - Add first page and last page links to paginator docs example (fixed)
https://code.djangoproject.com/ticket/28764 - Store staticfiles.json with code (duplicate)
Authored
----------
https://github.com/django/django/pull/9327 - Fixed #28770 -- Warned that quoting a placeholder in a raw SQL string can lead to SQL injection.
Reviewed/committed
------------------
https://github.com/django/django/pull/9305 - Fixed #28742 -- Fixed AttributeError crash when assigning None to cached reverse relations.
https://github.com/django/django/pull/9311 - Fixed #28760 -- Removed DummyCache's unnecessary get/set/delete_many().
https://github.com/django/django/pull/9306 - Fixed #28750 -- Allowed models to define Meta.manager_inheritance_from_future for backwards compatibility.
https://github.com/django/django/pull/9300 - Fixed #28749 -- Added subquery support for ArrayField's __in lookup.
https://github.com/django/django/pull/9259 -Fixed #28723 -- Fixed RelatedManager's prefetch_related() cache name.
https://github.com/django/django/pull/9050 - Fixed #28571 -- Added a prompt to bypass password validation in createsuperuser.
https://github.com/django/django/pull/9319 - Refs #17448, #28632 -- Fixes related to usage of raw SQL with GIS.