Feb. 6, 2026

Django News - Django security releases issued: 6.0.2, 5.2.11, and 4.2.28 - Feb 6th 2026

News

Django security releases issued: 6.0.2, 5.2.11, and 4.2.28

Django releases 6.0.2, 5.2.11, and 4.2.28 patch multiple security bugs, including PostGIS SQL injection, ASGI and Truncator denial of service, and timing and user enumeration.

djangoproject.com

Django Commons: We're recruiting new admins!

Django Commons is recruiting new admins to manage projects, membership, governance, and infrastructure; apply via the Admin Interest Form by March 16, 2026, AOE.

django-commons.org

Recent trends in the work of the Django Security Team

Django Security Team sees many repeat vulnerability variations, leading to consistent patching and consideration of rearchitecting areas to reduce low-impact reports.

djangoproject.com

Releases

Django HealthCheck: Migration to v4.x

Update django-health-check to v4 by removing sub-apps and HEALTH_CHECK settings, reverting test model migration, and using HealthCheckView with explicit checks.

codingjoe.dev

Python Insider: Python 3.14.3 and 3.13.12 are now available!

Python 3.14.3 (and 3.13.12) was released with deferred annotations, free-threaded support, improved async tooling, and other features that impact Django development and deployment.

blogspot.com

Python Software Foundation

Your Python. Your Voice. Join the Python Developers Survey 2026!

This year marks the ninth iteration of the official Python Developers Survey.

blogspot.com

Wagtail CMS News

An agent skill to upgrade your Wagtail site

Wagtail published an agent skill to plan and optionally perform safe, documentation-driven upgrades to new Wagtail releases while keeping a human in the loop.

wagtail.org

Autosave is here in Wagtail 7.3 (and many other great things!)

Wagtail 7.3 adds StreamField block settings and ordering controls for cleaner custom block UIs, plus autosave, greener image defaults, accessibility rules, and docs in markdown.

wagtail.org

Updates to Django

Today, "Updates to Django" is presented by Raffaella from Djangonaut Space! πŸš€

Last week we had 17 pull requests merged into Django by 11 different contributors - including 2 first-time contributors! Congratulations to Jaffar Khan and Mark for having their first commits merged into Django - welcome on board!

  • Fixed a regression in Django 6.0 where auto_now_add field values were not populated during INSERT operations, due to incorrect parameters passed to field.pre_save() (#36847).
  • Fixed a visual regression in Django 6.0 that caused the admin filter sidebar to wrap below the changelist when filter elements contained long text (#36850).
  • Triaging tickets documentation is updated with a new "Reviewing patches" section, and the "Triage workflow" section is updated to invite more people to start the review process πŸŽ‰

Django Newsletter

Articles

Loopwerk: Django's test runner is underrated

Recommend Django's built-in test runner for predictable, minimal magic testing; use parameterized for inputs and switch to pytest only when required.

loopwerk.io

How to Switch to ty from Mypy

How to switch project type checking from mypy to Astral's ty, including installation, configuration via pyproject.toml, CI GitHub Actions, and pre-commit workarounds.

pythonlibrary.org

From Good Code to Reliable Software: A Practical Guide to Production-Ready Python Packages

Practical toolchain and workflows for making Python packages ready for production: reproducible installs, testing, linting, type checking, security scans, CI, and documentation.

scribe.rip

Why light-weight websites may one day save your life

On the importance of light-weight websites on this bloated internet.

marijkeluttekes.dev

Why using [n] on a Django QuerySet can be unsafe?

Indexing a QuerySet can return nondeterministic rows because slicing does not add ordering, unlike first, which orders by primary key.

github.io

Docs or it’s built differenlty β€” Priming AI with atomic docs

An opinionated approach to documentation so that it works for developers and AI alike.

scribe.rip

Django Job Board

Three new backend gigs worth a click, from shipping REST APIs to going all-in on Django:

Python Developer REST APIs - Immediate Start at Worx-ai πŸ†•

Backend Software Developer at Chartwell Resource Group Ltd.

Senior Django Developer at SKYCATCHFIRE

Django Newsletter

Projects

nanorepublica/django-deadcode

A Django dead code analysis tool that tracks relationships between templates, URLs, and views to help identify and remove unused code.

github.com

FarhanAliRaza/django-hawkeye

Django BM25 full-text search using PostgreSQL - a lightweight Elasticsearch alternative.

github.com

Django (anti)patterns

A website and repo with 39 common antipatterns, listing them as well as suggested changes. Worth a look!

django-antipatterns.com


This RSS feed is published on https://django-news.com/. You can also subscribe via email.