| in blog | Django News |
|---|---|
| published date | 2026-04-03 |
| original entry | Supply Chain Wake-Up Call |
A recent supply chain attack on popular PyPI packages exposed how quickly malware can spread through unpinned dependencies—and why practices like dependency locking and cooldowns are now essential for Python developers.
PyCon US 2026 heads to Long Beach with its schedule now live, alongside major Python ecosystem updates spanning security improvements, new community programs, and ongoing PSF initiatives.
DSF approved trademark renewal plans, advanced a long-awaited Code of Conduct update, and continued shaping community governance and outreach efforts.
Use Wagtail AI’s built-in LLM pipeline to bulk-generate SEO meta descriptions across your entire site in minutes with a simple Django management command.
A clever Django and Wagtail pattern for launching with a waitlist while selectively granting preview access using secure cookies and a simple passphrase gate.
Use a single Wagtail page with dynamic routing, built-in A/B testing, and campaign slug tracking to replace dozens of duplicate landing pages with one flexible, data-driven solution.
Today, "Updates to Django" is presented by Hwayoung from Djangonaut Space! 🚀
Last week we had 11 pull requests merged into Django by 9 different contributors - including 4 first-time contributors! Congratulations to Georgios Verigakis, David Ansa, Vinay Datta and Sebastian Skonieczny for having their first commits merged into Django - welcome on board!
Documentation was added to clarify how database routers handle related-object access. It explains that Django uses instance._state.db by default for related lookups and provides guidance on using the instance hint in db_for_read() to maintain routing consistency in multi-database configurations. (#29762)
From PEP 690's rejection to PEP 810's unanimous acceptance — how Python finally got explicit lazy imports after three years of real-world production evidence and a fundamental design inversion
A subtle tooling mismatch reveals how a recent update made uv.lock suddenly count as TOML, causing pre-commit to reformat it unexpectedly across environments.
A smart migration tweak reveals how AI code reviews can both catch real production risks and miss critical context, proving that combining multiple agents leads to better Django performance decisions.
After ditching template partials and full-page AJAX hacks, this deep dive shows how splitting Django views and using template includes leads to simpler code, better performance, and a more maintainable Alpine-powered stack.
A deep dive into a subtle Django ORM inefficiency shows how removing a redundant many-to-many index improves database performance and highlights the real-world journey from bug report to merged PR.
SHA pinning isn’t a silver bullet—this deep dive shows how attackers can still slip malicious code into GitHub Actions by pointing to trusted-looking but rogue commits.
AI is rapidly rewriting the world’s software, but without scalable verification like formal proofs, we risk deploying fast, flawed, and fundamentally untrusted code at global scale.
AI is rapidly rewriting the world’s software, but without scalable verification like formal proofs, we risk shipping faster code that no one truly understands or can trust.
OpenAI’s acquisition of Astral raises real concerns about the future of uv, but for now, it’s still one of the fastest and most practical Python tooling choices worth sticking with.
April 15-19 in Athens, Greece. Get a ticket if you're able to attend. Keynote speakers, workshops, and all talks available online.
Tickets are available for this annual event now in beautiful Long Beach, California.
Don't hesitate! If you can, join for five days of talks, workshops, and sprints once again in Chicago this August 24-28.
A lively chat with Adam Johnson on leveling up your GitHub workflow, from practical DX tips to cutting-edge Python tooling like ICU bindings.
Two fresh Python roles this week: one focused on open data impact, the other on client-facing architecture with a leading developer tools company.
Python Developer at Open Data Services 🆕
Solutions Architect - Python (Client-facing) at JetBrains
A call is out for someone to lead a Django sprint at PyCon DE 2026, with contributors already eager to join and help onboard newcomers.
A high-speed, low latency cache that uses S3 Express to store many objects cheaply and efficiently
Django database and media backup management commands, powered by rclone.