Fixed #19746 -- Allow deserialization of pk-less data
Update docs/topics/class-based-views/generic-display.txt

simple typo in "Making friendly template contexts"
Updated a couple admonitions to use the warning directive.
Fixed #19852 - Updated admin fieldset example for consistency.

Thanks chris.freeman.pdx@ for the suggestion.
Added a new required ALLOWED_HOSTS setting for HTTP host header validation.

This is a security fix; disclosure and advisory coming shortly.
Restrict the XML deserializer to prevent network and entity-expansion DoS attacks.

This is a security fix. Disclosure and advisory coming shortly.
Checked object permissions on admin history view.

This is a security fix. Disclosure and advisory coming shortly.

Patch by Russell Keith-Magee.
Added a default limit to the maximum number of forms in a formset.

This is a security fix. Disclosure and advisory coming shortly.
Update 1.5 release notes for XML and formset fixes.
Merge pull request #737 from hrbonz/docs_CBV_generic_views_typo

Fixed typo in docs/topics/class-based-views/generic-display.txt
Fixes typo introduced by django/django@08dc90bccf7c4ffa8b04064d74b54c1150af5ff9. This is described in Trac ticket:19855.
Fixed #19728 - Updated API stability doc to reflect current meaning of "stable".
Merge pull request #739 from JustinTArthur/ticket-19855

Fixed typo in legacy database how to
This function is unused and should have been removed a few releases ago.
Add test for collapsible fieldset functionality in admin
Fixed #14571 -- Updated embedded jQuery from 1.4.2 to 1.9.1

Thanks dArignac for the initial patch.
Replaced the obsolete toggle event handling JS function

The toggle(func1, func2) event handling function has been removed
in jQuery 1.9.
Fixed #19598 -- Fixed jQuery tagName retrieving

Thanks rj at rudiculous.net for the report.
Added a db_constraint option to ForeignKeys.

This controls whether or not a database level cosntraint is created. This is useful in a few specialized circumstances, but in general should not be used!
Refactored negated IS NULL handling

This one cleaned up add_filter() negated filter generation. As a side
effect split_exclude() was cleaned up, too.

Refs #19849