Triaged
-------
https://code.djangoproject.com/ticket/29080 - SELECT @@SQL_AUTO_IS_NULL query for every page (invalid)
https://code.djangoproject.com/ticket/29077 - Why JSONField for MySql/MariaDB etc are not supported in Django? (invalid)
https://code.djangoproject.com/ticket/29033 - Sitemap framework does not properly detect secure requests (needsinfo)
https://code.djangoproject.com/ticket/29081 - Clarify QuerySet.select_related() example regarding "hitting the database" (fixed)
https://code.djangoproject.com/ticket/29082 - Make the test client automatically encode JSON data (accepted)
https://code.djangoproject.com/ticket/29076 - Make Model.refresh_from_db() clear cached foreign key and one to one fields, even if the related ID hasn't changed (accepted)
https://code.djangoproject.com/ticket/29036 - HTML5 required validation for SelectDateWidget doesn't work if the attribute is added by JavaScript (accepted)
https://code.djangoproject.com/ticket/29084 - Skip postgres_tests's SimpleSearchTest's that require 'english_stem' configuration if the machine's configuration is different (accepted)
https://code.djangoproject.com/ticket/29069 - Static file serving does not call request_finished signal (accepted)
https://code.djangoproject.com/ticket/29085 - Possible data loss on .save() with unsaved related model (accepted)
https://code.djangoproject.com/ticket/29086 - Add a warning when saving bytestrings to CharFields (wontfix)
https://code.djangoproject.com/ticket/29091 - makemigrations crashes if a migration directory doesn't have an __init__.py (accepted)
https://code.djangoproject.com/ticket/29103 - sqlmigrate produces byte literal in SQL for one-off string default value in TextField, CharField on MySQL (accepted)
https://code.djangoproject.com/ticket/29105 - Make Default Test Output More Verbose (And Formatted Prettier) (wontfix)
https://code.djangoproject.com/ticket/29108 - QuerySet.distinct().order_by()[slice].count() crashes with "TypeError: can only concatenate tuple (not "list") to tuple" (accepted)
https://code.djangoproject.com/ticket/29087 - Impossible to delete pending new inline in admin when invalid (delete button missing) (accepted)
https://code.djangoproject.com/ticket/29092 - Clashing table name checks don't account for database routers (wontfix)
https://code.djangoproject.com/ticket/29074 - makemessages duplicates .po file headers when fed with empty strings (accepted)
Authored
----------
https://github.com/django/django/pull/9640 - Fixed #29091 -- Fixed makemigrations crash if migration directory doesn't have __init__.py.
https://github.com/django/django/pull/9641 - [2.0.x] Fixed #29071 -- Fixed contrib.auth.authenticate() crash if a backend doesn't accept a request but a later one does.
https://github.com/django/django/pull/9647 - Fixed #29094 -- Fixed crash when entering an invalid uuid in ModelAdmin.raw_id_fields.
https://github.com/django/django/commit/af33fb250e9847f1ca8c0ba0d72671d76659704f - Fixed CVE-2018-6188 -- Fixed information leakage in AuthenticationForm.
Reviewed/committed
------------------
https://github.com/django/django/pull/9619 - Fixed #29065 -- Made django.core.validators only load Pillow if needed.
https://github.com/django/django/pull/9632 - Fixed #29036 -- Fixed HTML5 required validation on SelectDateWidget if the attribute is added by JavaScript.
https://github.com/django/django/pull/7765 - Fixed #8500 -- Allowed overriding the default admin site instance.