3.18.2

What's Changed

Security

• GHSA-33wh-fxxf-88vv: Harden content negotiation against large Accept headers by @jisung-02 in 148ab65. Thanks @jisung-02 for the report.
• GHSA-3547-9m27-7rxg: Refuse non-text encoding charsets by @syrull in 3c26345. Thanks @syrull and @jisung-02 who both reported the problem.
• GHSA-xw6w-gcfp-cf8m: Make TokenProxy deletion actually delete the token by @syrull in af3fabf. Thanks @syrull for the report.

Features

• Add support for Python 3.15 by @p-r-a-v-i-n in #10025

Bug fixes

• Fix blank=True fields in unique constraints being treated as required by @MehrazRumman in #10039
• Fix UniqueConstraint validation with conditional fields by @majidkhazaei in #10021

New Contributors

• @olitreadwell made their first contribution in #10038
• @majidkhazaei made their first contribution in #10021
• @rblotsky made their first contribution in #10045
• @mrchatam made their first contribution in #10042
• @haimingZZ made their first contribution in #10052
• @jisung-02 made their first contribution in 148ab65
• @syrull made their first contribution in 3c26345

Full Changelog: 3.18.1...3.18.2