Triaged
-------
https://code.djangoproject.com/ticket/26183 - PostgreSQL backend: TimeField is created without time zone (wontfix)
https://code.djangoproject.com/ticket/26184 - Unable to use custom lookups or transforms in admin `search_fields` (accepted)
https://code.djangoproject.com/ticket/26185 - values_list throws interesting error when ordering by an extra column (wontfix)
https://code.djangoproject.com/ticket/26191 - Custom Where Clause when Extra is Deprecated (needsinfo)
https://code.djangoproject.com/ticket/26189 - DecimalFields with float values raise errors on calling full_clean (invalid)
https://code.djangoproject.com/ticket/26192 - Cannot order query by constant value on PostgreSQL (accepted)
https://code.djangoproject.com/ticket/26193 - urlize doesn't handle extra punctuation after the link properly (accepted)
https://code.djangoproject.com/ticket/26197 - DEFAULT_DB_ALIAS in settings (duplicate)
https://code.djangoproject.com/ticket/26201 - Document the consequences of rotating the CSRF token on login (accepted)
https://code.djangoproject.com/ticket/26213 - Admin list_editable and ForeignKeys: Applying widget attributes with specific forms lead to strange off-by-one effects (duplicate)
https://code.djangoproject.com/ticket/26208 - Squashing migrations in which unique=True is added and then removed for Charfield cannot migrate backwards on Postgres (needsinfo)
Authored
--------
https://github.com/django/django/pull/6114 - Fixed #26188 -- Documented how to wrap password hashers.
https://github.com/django/django/pull/6123 - Fixed #26204 -- Reallowed dashes in top-level domains for URLValidator.
https://github.com/django/djangoproject.com/pull/633 - Fixed #607 -- Added admin option to filter heros based on donation date.
https://github.com/django/djangoproject.com/pull/634 - Added a wrapped password hasher to upgrade SHA1 hashes.
Reviewed/committed
------------------
https://github.com/django/django/pull/6080 - Fixed #26173 -- Prevented localize_input() from formatting booleans as numbers.
https://github.com/django/django/pull/5113 - Fixed #26014 -- Added WSGIRequest content_type and content_params attributes
https://github.com/django/django/pull/6063 - Fixed #26153 -- Reallowed Q-objects in ForeignObject.get_extra_descriptor_filter().
https://github.com/django/django/pull/6115 - Fixed #26179 -- Removed null assignment check for non-nullable foreign key fields.
https://github.com/django/django/pull/6117 - Fixed #26196 -- Made sure __in lookups use to_field as default.
https://github.com/django/django/pull/6122 - Fixed #26209 -- Masked sensitive settings in debug reports regardless of case.
https://github.com/django/django/pull/6126 - Fixed #26111 -- Clarified that fixtures are loaded once per TestCase.
https://github.com/django/django/pull/5643 - Fixed #25304 -- Allowed management commands to check if migrations are applied.
https://github.com/django/django/pull/6083 - Fixed #11665 -- Made TestCase check deferrable constraints after each test.
Reviews of core dev work
------------------------
https://github.com/django/django/pull/6041 - Refs #26112 -- Fixed aggregate GIS test on Oracle
https://github.com/django/django/pull/6100 - Fixed #26162 -- Checked query name clashes of hidden relationships.