Django Fellow Report - Jacob - 2026

Django Internals
15

Week ending 2026-04-12 (Week 15)

Sending off last week’s report before heading to DjangoCon Europe! Hope to see some of you there!

Triaged
#36837 (Client.force_login won't work for permission-only backends inheriting from BaseBackend) – Django needsnewfeatureprocess → accepted
#36626 (Support sub-second resolution in GDAL Features' datetime fields) – Django needsnewfeatureprocess → accepted
#37027 (refresh_from_db() with from_queryset + prefetch does not persist result in instance) – Django wontfix
Reviewed
Fixed #37021 -- Added user_perm_str helper property to the Permission model. by Mariatta · Pull Request #21051 · django/django · GitHub
Fixed #37009 -- Fixed filter action icon alignment in admin changelist. by yeongbin05 · Pull Request #21013 · django/django · GitHub
Fixed #37023 -- Made XML serializer put each ManyToManyField object on its own line. by timgraham · Pull Request #21056 · django/django · GitHub
Fixed #36816 -- Allowed **kwargs in @task decorator to support custom Task subclasses by nileshpahari · Pull Request #20456 · django/django · GitHub
Fixed #31317 -- Avoided crash in CreateModel with unique_together and AlterUniqueTogether. by David-Wobrock · Pull Request #20929 · django/django · GitHub
Fixed #36458 -- Fixed focus within the admin widget popup for calendar and clock. by Skyiesac · Pull Request #21042 · django/django · GitHub
Fixed #37013 -- Omitted tzinfo argument to Trunc & Extract with USE_TZ = True and TIME_ZONE != UTC creates ambiguity for migrations by Huwaiza · Pull Request #21064 · django/django · GitHub
Fixed two issues in release helper scripts/verify_release.sh. by nessita · Pull Request #21068 · django/django · GitHub
Removed superfluous request.user assignment in RemoteUserMiddleware. by jaap3 · Pull Request #18310 · django/django · GitHub
[checklists] Set of 3 independent fixes, see commits. by nessita · Pull Request #2584 · django/djangoproject.com · GitHub
Fixed `#15759` - Excluded formset fields by per-object permissions by artirix1927 · Pull Request #19743 · django/django · GitHub
Added automated quality checks for PRs as a GitHub Actions workflow. by nessita · Pull Request #21077 · django/django · GitHub
Fixed #36953 -- Refactored mail tests. by medmunds · Pull Request #20948 · django/django · GitHub
Fixed #35738 -- Deprecated double-dot variable lookups. by smithdc1 · Pull Request #19534 · django/django · GitHub
Authored
Checklists: Severity is re-appended to blog post draft · Issue #2583 · django/djangoproject.com · GitHub
#37025 (RemoteUserMiddleware.header does not correspond to request.META in the async path) – Django
Removed PY38 and PY39 version constants. by jacobtylerwalls · Pull Request #21070 · django/django · GitHub
Refs CVE-2026-4292 -- Isolated new test in AdminViewListEditable. by jacobtylerwalls · Pull Request #21075 · django/django · GitHub
#37026 (edit_only not implemented for formsets in GenericInlineModelAdmin) – Django
Fixed #37025 -- Doc'd that RemoteUserMiddleware.header does not correspond to request.META under ASGI. by jacobtylerwalls · Pull Request #21079 · django/django · GitHub
Removed checkout step from labels.yml. by jacobtylerwalls · Pull Request #21082 · django/django · GitHub
Moved Django 4.2 to unsupported versions table. by jacobtylerwalls · Pull Request #2591 · django/djangoproject.com · GitHub
[checklists] Compile CVSS score & vector into CVE JSON · Issue #2592 · django/djangoproject.com · GitHub
Updated release procedure with new CVE workflows. by jacobtylerwalls · Pull Request #21087 · django/django · GitHub
[checklists] Add support for End-of-life (EOL) announcements · Issue #2593 · django/djangoproject.com · GitHub
Discussed
#36542 (AdminSite views (such as login) leak sensitive POST data) – Django
Misc
Issued security releases
Engaged in security reports
Fellows weekly sync
Fellows security sync
Monthly steering council meeting
Monthly board liaison meeting
2 Likes