Django Fellow Report - Jacob - 2026

Django Internals
19

Week ending 2026-05-10 (Week 19)

Some delightful follow-ups trickled out of reviews this week: deprecating the no-argument form of select_related() uncovered a bug in the admin, and finalizing the design of how Media objects should render CSP nonces generated a request for clarification about caching in the MDN docs.

Triaged
#37083 (Add opt-in HTML5 date/time input types for form widgets) – Django duplicate
#28594 (Value error on related user name during save of user model) – Django accepted → duplicate
#37085 (Move object-based stylesheet media assets to the public API) – Django accepted
#37087 (Django 6.0.5 - makemessages changes POT-Creation-Date in django.po even if nothing changes) – Django needsinfo
#37091 (Add / Confirm GDAL 3.13 Support) – Django accepted
#37092 (No warning for deprecated USE_BLANK_CHOICE_DASH in settings.py) – Django accepted
Reviewed
Removed hardcoded pks in annotations and delete_regress tests. by timgraham · Pull Request #21224 · django/django · GitHub
Fixed #37078 -- Deprecated SHA-1 default for salted_hmac() and base64_hmac() algorithm by dennybiasiolli · Pull Request #21199 · django/django · GitHub
Fixed #37080 -- Use generic deprecation warnings in runtests. by Wenzeltelger · Pull Request #21216 · django/django · GitHub
https://github.com/django/django/pull/21042
Fixed #37039 -- Removed outdated note from QuerySet.iterator() docs. by MANAS225 · Pull Request #21120 · django/django · GitHub
https://github.com/django/django/pull/21010
Fixed #37074 -- Synced admin calendar today highlight with server time. by SnippyCodes · Pull Request #21206 · django/django · GitHub
Fixed #36784 -- Added csp_nonce_attr template tag for CSP nonce inclusion. by nessita · Pull Request #21235 · django/django · GitHub
Fixed #33685 -- Supported PostgreSQL service names in tests. by p-r-a-v-i-n · Pull Request #20715 · django/django · GitHub
Fixed #37060 -- Propagated AlterField through attname-based to_field … by sipa-echo-zaoa · Pull Request #21156 · django/django · GitHub
https://github.com/django/django/pull/21230
[checklists] Minor improvements following recent security release by sarahboyce · Pull Request #2612 · django/djangoproject.com · GitHub
Fixed #37085 -- Added support for object-based form media stylesheet assets. by nessita · Pull Request #21239 · django/django · GitHub
https://github.com/django/django/pull/16012
Fixed #36813 -- Raised ValueError at field init for invalid max_length/max_digits. by MehrazRumman · Pull Request #20439 · django/django · GitHub
Fixed #36938 -- Removed unnecessary ordering from compound queries. by dcsid · Pull Request #21102 · django/django · GitHub
Fixed #36593 -- Deprecated QuerySet.select_related() with no arguments. by adamchainz · Pull Request #19822 · django/django · GitHub
Authored
Refs #36439 -- Added sync_to_async() to dummy password hasher path. by jacobtylerwalls · Pull Request #21227 · django/django · GitHub
Refs #36620 -- Mentioned coverage workflow uses PostgreSQL. by jacobtylerwalls · Pull Request #21236 · django/django · GitHub
Refs #36712, #36664 -- Used annotation_format parameter of getfullargspec() on Python 3.15. by jacobtylerwalls · Pull Request #21237 · django/django · GitHub
Should we make it harder to cache responses containing CSP nonces?
Refs #15727 -- Moved security.E026 out of list of deploy=True checks. by jacobtylerwalls · Pull Request #21238 · django/django · GitHub
Evaluate using model field fetch modes (Django 6.1) · Issue #2616 · django/djangoproject.com · GitHub
Refs CVE-2025-64460 -- Removed workaround for minidom document checks. by jacobtylerwalls · Pull Request #21246 · django/django · GitHub
Refs #37060 -- Shortened app label in AlterField test for Oracle. by jacobtylerwalls · Pull Request #21248 · django/django · GitHub
Discussed
Django 6.0 Update - blocked by Trac · Issue #285 · django/code.djangoproject.com · GitHub
Misc
Fellows sync
Engaged in security reports
Monthly steering council meeting
Monthly line manager meeting
Monthly board liaison checkin
1 Like