What's Changed
Security
- GHSA-33wh-fxxf-88vv: Harden content negotiation against large
Acceptheaders by @jisung-02 in 148ab65. Thanks @jisung-02 for the report. - GHSA-3547-9m27-7rxg: Refuse non-text encoding charsets by @syrull in 3c26345. Thanks @syrull and @jisung-02 who both reported the problem.
- GHSA-xw6w-gcfp-cf8m: Make
TokenProxydeletion actually delete the token by @syrull in af3fabf. Thanks @syrull for the report.
Features
- Add support for Python 3.15 by @p-r-a-v-i-n in #10025
Bug fixes
- Fix
blank=Truefields in unique constraints being treated as required by @MehrazRumman in #10039 - Fix
UniqueConstraintvalidation with conditional fields by @majidkhazaei in #10021
New Contributors
- @olitreadwell made their first contribution in #10038
- @majidkhazaei made their first contribution in #10021
- @rblotsky made their first contribution in #10045
- @mrchatam made their first contribution in #10042
- @haimingZZ made their first contribution in #10052
- @jisung-02 made their first contribution in 148ab65
- @syrull made their first contribution in 3c26345
Full Changelog: 3.18.1...3.18.2