April 8, 2026 » Matthias Kestenholz » [Archived Version]
Switching all of my Python packages to PyPI trusted publishing As I have teased on Mastodon, I’m switching all of my packages to PyPI trusted publishing. I have been using it to release the django-debug-toolbar a few times but never set it up myself. The process seemed tedious. The malicious releases uploaded to PyPI two weeks ago and the blog post about digital attestations in pylock.toml finally pushed me to make the switch. All of my PyPI tokens have been revoked so there is no quick shortcu…
Read MoreApril 8, 2026 » Software Crafts » [Archived Version]
Understanding the interaction between Django apps as you build
Read MoreApril 7, 2026 » @ch4n3.yoon » [Archived Version]
Django의 `MultiPartParser`에서, `Content-Transfer-Encoding: base64` 파일 파트의 본문이 공백 위주로 구성되어 있을 때 발생하는 단일 요청 기반 CPU exhaustion 취약점을 다룹니다. 약 2.5MB 크기의 예시 요청 한 건으로 워커 하나가 약 5.3초간 묶입니다. 정상 요청 대비 약 2,100배 증폭됩니다.
Read MoreApril 7, 2026 » The Django weblog » [Archived Version]
In accordance with our security release policy, the Django team is issuing releases for Django 6.0.4, Django 5.2.13, and Django 4.2.30. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. Django 4.2 has reached the end of extended support Note that with this release, Django 4.2 has reached the end of extended support. All Django 4.2 users are encouraged to upgrade to Django 5.2 or later to continue receiving fixes for secu…
Read MoreApril 7, 2026 » The Django weblog » [Archived Version]
We are looking for the next group of organizers to own and lead the 2027 DjangoCon Europe conference. Could your town's football stadium, theatre, cinema, city hall, circus tent or a private island host this wonderful community event? DjangoCon Europe is a major pillar of the Django community, as people from across the world meet and share. Many qualities make it a unique event: Unconventional and conventional venues, creative happenings, a feast of talks and a dedication to inclusion and diver…
Read MoreApril 6, 2026 » Better Simple » [Archived Version]
Not sure how to get involved in the Django community? This guide covers everything from triaging tickets to organizing conferences, and even how to choose where to start.
Read MoreApril 3, 2026 » Django News » [Archived Version]
News Incident Report: LiteLLM/Telnyx supply-chain attacks, with guidance A recent supply chain attack on popular PyPI packages exposed how quickly malware can spread through unpinned dependencies—and why practices like dependency locking and cooldowns are now essential for Python developers. The PyCon US 2026 schedule is live 🌴🐍 plus security updates, community programs & more PyCon US 2026 heads to Long Beach with its schedule now live, alongside major Python ecosystem updates spanning securit…
Read MoreApril 2, 2026 » Better Simple » [Archived Version]
A review of Karen Tracey's DjangoCon US talk on better preparing for your next product launch.
Read MoreMarch 27, 2026 » Django News » [Archived Version]
News Calling for research participants from Django, Laravel, Ruby on Rails, Next.js and Spring Boot communities Former DSF President and researcher Anna Makarudze is seeking Django developers to share insights on dependency vulnerabilities and supply chain risks in open source. Djangonaut Space News Djangonaut Space Financial Report 2025 Djangonaut Space’s 2025 report highlights a community-powered year of $2.2k in donations funding tools and conference access, while setting sights on sending c…
Read MoreMarch 25, 2026 » Matthias Kestenholz » [Archived Version]
LLMs for Open Source maintenance: a cautious case When ChatGPT appeared on the scene I was very annoyed at all the hype surrounding it. Since I’m working in the fast moving and low margin business of communication and campaigning agencies I’m surrounded by people eager to jump on the hype train when a tool promises to lessen the workload and take stuff from everyone’s plate. These discussions coupled with the fact that the training of these tools required unfathomable amounts of stealing were t…
Read More