Django 2.2.2 release notes

Django 2.2.2 fixes security issues and several bugs in 2.2.1.

AdminURLFieldWidget now validates the provided value using URLValidator before displaying the clickable link. You may customize the validator by passing a validator_class kwarg to AdminURLFieldWidget.__init__(), e.g. when using .

Patched bundled jQuery for CVE-2019-11358: Prototype pollution

The bundled version of jQuery used by the Django admin has been patched to allow for the select2 library’s use of jQuery.extend().

• Fixed a regression in Django 2.2 that stopped Show/Hide toggles working on dynamically added admin inlines ().
• Fixed a regression in Django 2.2 where deprecation message crashes if Meta.ordering contains an expression (#30463).
• Fixed a regression in Django 2.2 where auto-reloader doesn’t detect changes in manage.py file when using StatReloader ().
• Fixed crash of ArrayAgg and with ordering argument when used in a Subquery (#30315).
• Fixed a regression in Django 2.2.1 where auto-reloader unnecessarily reloads translation files multiple times when using ().