Django Fellow Report - Jacob - 2026

[jacobtylerwalls]

Week ending 2026-06-14 (Week 24)

In this four-day week (I headed out Friday for a college reunion), everything got a little bit better. First, check out @blighj’s estimate showing that collectstatic’s import statement detection reliability (needed to rewrite URLs) improves in Django 6.1 from 88% to 99%. Meanwhile @felixxm is stress-testing database defaults and landing fixes needed for using Django 6.1’s UUID4()/UUID7() functions. Finally, we made the test client more friendly for third-party permission packages like django-guardian and django-rules. @sage also spotted a breakage in DRF in the upcoming Django 6.1 beta, since Wagtail tests against Django’s main branch. I expect the fix to land before the beta is even out. Be like wagtail and test main!

Triaged
#37152 (EmailMessage should block `bcc` in `extra_headers` and docs should not suggest `bcc` is a header) – Django	accepted
#37153 (Store the cache alias on the cache backend instance) – Django	duplicate
#37154 (Switch to Playwright tests for integration testing) – Django	accepted
#29187 (test_delete_signals occasionally fails when running all django tests) – Django	Someday/Maybe → accepted
#37146 (README links to /newticket on Trac, which requires being logged in) – Django	accepted
#37158 ("All tickets" section of contributor checklist is below the fold) – Django	accepted
https://code.djangoproject.com/ticket/35659	accepted → duplicate

Reviewed
Refs #16281 -- Fixed isolation of admin_views.ViewOnSiteTests. by jacobtylerwalls · Pull Request #21437 · django/django · GitHub
Fixed #37130 -- Skipped DB cache deletion when culling offset is zero. by vishy0 · Pull Request #21426 · django/django · GitHub
Fixed #37013 -- Omitted tzinfo argument to Trunc & Extract with USE_TZ = True and TIME_ZONE != UTC creates ambiguity for migrations by Huwaiza · Pull Request #21064 · django/django · GitHub
Fixed #37106 -- Clarified pylibmc workaround in unit test docs. by kikobarr · Pull Request #21436 · django/django · GitHub
Fixed #36900 -- Used safe_join() on downloaded template archive. by jacobtylerwalls · Pull Request #21439 · django/django · GitHub
Refs CVE-2026-48587 -- Added helper to properly split header values. by nessita · Pull Request #21438 · django/django · GitHub
Fixed #37147 -- Fixed rendering empty values for models with db_default on primary key. by felixxm · Pull Request #21427 · django/django · GitHub
Fixed #37142 -- Moved django_file_prefixes() to django.utils.warnings. by ZhengKangYang · Pull Request #21424 · django/django · GitHub
Fixed #36864 -- Added support for module and submodule loading in import_string. by lboeman · Pull Request #21317 · django/django · GitHub
https://github.com/django/django/pull/19890
Fixed #36104 -- Returned NotImplemented in Media.__add__ for non-Media RHS. by matthiask · Pull Request #19058 · django/django · GitHub
Fixed #33185 -- Fixed sqlmigrate crash for RenameModel with a self-referential foreign key. by dcsid · Pull Request #21372 · django/django · GitHub
Fixed #36837 -- Skipped backends not implementing (a)get_user() in (a)force_login(). by Natgho · Pull Request #21065 · django/django · GitHub
https://github.com/django/django/pull/20585
Fixed #36626 -- geodjango -- Preserved milliseconds when parsing GPX … by brunifrancesco · Pull Request #21310 · django/django · GitHub
Fixed #37102 -- Used **kwargs instead of *kwargs in CountsDict.init(). by SnippyCodes · Pull Request #21321 · django/django · GitHub
Fixed #37146 -- Improved new-user experience of README's Trac Link. by MaggieFero · Pull Request #21450 · django/django · GitHub
Fixed #36979 -- Made GenericInlineModelAdmin.get_formset() use get_exclude(). by MANAS225 · Pull Request #20883 · django/django · GitHub
Fixed #37143 -- Added missing chunk_size=None check to QuerySet.aiter… by ZhengKangYang · Pull Request #21425 · django/django · GitHub
https://github.com/django/django/pull/20942
Fixed #37129 -- Clarified database cache culling behavior in docs. by VIZZARD-X · Pull Request #21454 · django/django · GitHub

Authored
Refs #36560, CVE-2026-35193 -- Replaced substring check on Cache-control directives in UpdateCacheMiddleware. by jacobtylerwalls · Pull Request #21441 · django/django · GitHub
Import of submodule shadowing parent module attribute fails under lazy_imports mode · Issue #151208 · python/cpython · GitHub
Fixed #29187 -- Fixed flaky receiver count assertion in signals tests. by jacobtylerwalls · Pull Request #21445 · django/django · GitHub
Updated link to release roadmap. by jacobtylerwalls · Pull Request #2656 · django/djangoproject.com · GitHub
Fixed #36104 -- Returned NotImplemented in Media.__add__ for non-Media RHS. by jacobtylerwalls · Pull Request #21447 · django/django · GitHub
#37159 (Implement reproducible artifact builds) – Django
#37160 (Make admin views consistently raise PermissionDenied (403) when lacking model permissions) – Django
#37161 (Implement a system check for no default MAILERS configuration) – Django

Discussed
Implementing a Formal Experimental API for Django - #19 by jacobtylerwalls

Misc
Fellows sync
Engaged in security reports
1-1 with GSoC mentee (Pravin)
Adjusted forum CSS
Monthly ops team office hours
Monthly security team meeting