added missing changelog entries (#6884)

CHANGELOG.rst

@@ -70,6 +70,12 @@ Changelog
 * Fixed override ``urlconf_module`` so that Django system checks don't crash.
 
 
+3.6.1 (2020-07-21)
+==================
+
+* Fixed a security vulnerability in the plugin_type url parameter to insert JavaScript code.
+
+
 3.6.0 (2019-01-29)
 ==================
 
@@ -84,6 +90,12 @@ Changelog
 * Introduced Django 2.1 support.
 
 
+3.5.4 (2020-07-21)
+==================
+
+* Fixed a security vulnerability in the plugin_type url parameter to insert JavaScript code.
+
+
 3.5.3 (2018-11-20)
 ==================
 
@@ -159,6 +171,37 @@ Changelog
 * Prevent users from passing a public page as parent in ``create_page`` api function
 
 
+3.4.7 (2020-07-21)
+==================
+
+* Removed extra quotation mark from the sideframe button template
+* Fixed a bug where xframe options were processed by clickjacking middleware
+  when page was served from cache, rather then get this value from cache
+* Fixed a bug where cached page permissions overrides global permissions
+* Fixed a bug where editing pages with primary keys greater than 9999 would throw an
+  exception.
+* Fixed broken wizard page creation when no language is set within the template context (see #5828).
+* Fixed a security vulnerability in the plugin_type url parameter to insert JavaScript code.
+
+
+3.4.6 (2018-03-26)
+==================
+
+* Changed the way drag and drop works in the page tree. The page has to be
+  selected first before moving.
+* Fixed a bug where the cms alias plugin leaks context into the rendered aliased plugins.
+* Fixed a bug where users without the "Change advanced settings" permission could still
+  change a page's template.
+* Added ``on_delete`` to ``ForeignKey`` and ``OneToOneField`` to silence Django
+  deprecation warnings.
+* Fixed a bug where the sitemap would ignore the ``public`` setting of the site languages
+  and thus display hidden languages.
+* Fixed an ``AttributeError`` raised when adding or removing apphooks in Django 1.11.
+* Fixed an ``InconsistentMigrationHistory`` error raised when the contenttypes app
+  has a pending migration after the user has applied the ``0010_migrate_use_structure`` migration.
+* Fixed a bug where plugins rendered multiple times won't be editable
+
+
 3.4.5 (2017-10-12)
 ==================
 

docs/upgrade/3.4.5.rst

@@ -0,0 +1,34 @@
+.. _upgrade-to-3.4.5:
+
+###################
+3.4.5 release notes
+###################
+
+This version of django CMS is the first to introduce compatibility with Django 1.11, itself also a Long-Term Support release.
+
+*******************
+What's new in 3.4.5
+*******************
+
+Bug Fixes
+=========
+
+* Fixed a bug where slug wouldn't be generated in the creation wizard
+* Fixed a bug where the add page endpoint rendered ``Change page`` as the html title.
+* Fixed an issue where non-staff users could request the wizard create endpoint.
+* Fixed an issue where the ``Edit page`` toolbar button wouldn't show on non-cms pages
+  with placeholders.
+* Fixed a bug where placeholder inheritance wouldn't work if the inherited placeholder
+  is cached in an ancestor page.
+* Fixed a regression where the code following a ``{% placeholder x or %}`` declaration,
+  was rendered before attempting to inherit content from parent pages.
+* Changed page/placeholder cache keys to use sha1 hash instead of md5 to be FIPS compliant.
+* Fixed a bug where the change of a slug would not propagate to all descendant pages
+* Fixed a ``ValueError`` raised when using ``ManifestStaticFilesStorage`` or similar for static files.
+  This only affects Django >= 1.10
+
+
+Improvements and new features
+=============================
+
+* Introduced Django 1.11 compatibility

docs/upgrade/3.4.6.rst

@@ -0,0 +1,27 @@
+.. _upgrade-to-3.4.6:
+
+###################
+3.4.6 release notes
+###################
+
+
+
+*******************
+What's new in 3.4.6
+*******************
+
+Bug Fixes
+=========
+
+* Changed the way drag and drop works in the page tree. The page has to be
+  selected first before moving.
+* Fixed a bug where the cms alias plugin leaks context into the rendered aliased plugins.
+* Fixed a bug where users without the "Change advanced settings" permission could still
+  change a page's template.
+* Added ``on_delete`` to ``ForeignKey`` and ``OneToOneField`` to silence Django
+  deprecation warnings.
+* Fixed a bug where the sitemap would ignore the ``public`` setting of the site languages
+  and thus display hidden languages.
+* Fixed an ``AttributeError`` raised when adding or removing apphooks in Django 1.11.
+* Fixed an ``InconsistentMigrationHistory`` error raised when the contenttypes app
+  has a pending migration after the user has applied the ``0010_migrate_use_structure`` migration.

docs/upgrade/3.4.7.rst

@@ -0,0 +1,22 @@
+.. _upgrade-to-3.4.7:
+
+###################
+3.4.7 release notes
+###################
+
+
+*******************
+What's new in 3.4.7
+*******************
+
+Bug Fixes
+=========
+
+* Removed extra quotation mark from the sideframe button template
+* Fixed a bug where xframe options were processed by clickjacking middleware
+  when page was served from cache, rather then get this value from cache
+* Fixed a bug where cached page permissions overrides global permissions
+* Fixed a bug where editing pages with primary keys greater than 9999 would throw an
+  exception.
+* Fixed broken wizard page creation when no language is set within the template context (see #5828).
+* Fixed a security vulnerability in the plugin_type url parameter to insert JavaScript code.

docs/upgrade/3.5.4.rst

@@ -0,0 +1,14 @@
+.. _upgrade-to-3.5.4:
+
+###################
+3.5.4 release notes
+###################
+
+*******************
+What's new in 3.5.4
+*******************
+
+Bug Fixes
+=========
+
+* Fixed a security vulnerability in the plugin_type url parameter to insert JavaScript code.

docs/upgrade/3.6.1.rst

@@ -0,0 +1,14 @@
+.. _upgrade-to-3.6.1:
+
+###################
+3.6.1 release notes
+###################
+
+*******************
+What's new in 3.6.1
+*******************
+
+Bug Fixes
+=========
+
+* Fixed a security vulnerability in the plugin_type url parameter to insert JavaScript code.

docs/upgrade/index.rst

@@ -18,11 +18,16 @@ makes changes to your database.
     3.7.2
     3.7.1
     3.7
+    3.6.1
     3.6
+    3.5.4
     3.5.3
     3.5.2
     3.5.1
     3.5
+    3.4.7
+    3.4.6
+    3.4.5
     3.4.4
     3.4.3
     3.4.2