| in blog | Django News |
|---|---|
| published date | 2026-02-06 |
| original entry | Django security releases issued: 6.0.2, 5.2.11, and 4.2.28 |
Django releases 6.0.2, 5.2.11, and 4.2.28 patch multiple security bugs, including PostGIS SQL injection, ASGI and Truncator denial of service, and timing and user enumeration.
Django Commons is recruiting new admins to manage projects, membership, governance, and infrastructure; apply via the Admin Interest Form by March 16, 2026, AOE.
Django Security Team sees many repeat vulnerability variations, leading to consistent patching and consideration of rearchitecting areas to reduce low-impact reports.
Update django-health-check to v4 by removing sub-apps and HEALTH_CHECK settings, reverting test model migration, and using HealthCheckView with explicit checks.
Python 3.14.3 (and 3.13.12) was released with deferred annotations, free-threaded support, improved async tooling, and other features that impact Django development and deployment.
This year marks the ninth iteration of the official Python Developers Survey.
Wagtail published an agent skill to plan and optionally perform safe, documentation-driven upgrades to new Wagtail releases while keeping a human in the loop.
Wagtail 7.3 adds StreamField block settings and ordering controls for cleaner custom block UIs, plus autosave, greener image defaults, accessibility rules, and docs in markdown.
Today, "Updates to Django" is presented by Raffaella from Djangonaut Space! 🚀
Last week we had 17 pull requests merged into Django by 11 different contributors - including 2 first-time contributors! Congratulations to Jaffar Khan and Mark for having their first commits merged into Django - welcome on board!
INSERT operations, due to incorrect parameters passed to field.pre_save() (#36847).Recommend Django's built-in test runner for predictable, minimal magic testing; use parameterized for inputs and switch to pytest only when required.
How to switch project type checking from mypy to Astral's ty, including installation, configuration via pyproject.toml, CI GitHub Actions, and pre-commit workarounds.
Practical toolchain and workflows for making Python packages ready for production: reproducible installs, testing, linting, type checking, security scans, CI, and documentation.
On the importance of light-weight websites on this bloated internet.
Indexing a QuerySet can return nondeterministic rows because slicing does not add ordering, unlike first, which orders by primary key.
An opinionated approach to documentation so that it works for developers and AI alike.
Three new backend gigs worth a click, from shipping REST APIs to going all-in on Django:
Python Developer REST APIs - Immediate Start at Worx-ai 🆕
Backend Software Developer at Chartwell Resource Group Ltd.
Senior Django Developer at SKYCATCHFIRE
A Django dead code analysis tool that tracks relationships between templates, URLs, and views to help identify and remove unused code.
Django BM25 full-text search using PostgreSQL - a lightweight Elasticsearch alternative.
A website and repo with 39 common antipatterns, listing them as well as suggested changes. Worth a look!