Django Fellow Report - Jacob - 2026

Week ending 2026-09-27 (Week 39)

When @pauloxnet wasn’t otherwise showing us around Abruzzo last week at Django on the Med :beach_with_umbrella:, I had the pleasure of supporting a number of groups there, spanning:

  • frontend topics (subresource integrity and importmaps)
  • backend topics (temporal constraints and django-subatomic)
  • performance topics (a benchmarking group kicked off, and @carltongibson got me to commit to auditing our free-threading readiness)
  • documentation topics, and …, and …, and …

Special thanks to @annalauraw and @charettes for taking up my suggestion to pair on some delicate issues around NULL handling in the ORM. They each have PRs I’m excited to review, and the three of us now have more context for tackling whatever comes next in this area.

Some other things in the usual categories got folded in around the travel:

Misc
  • Engaged in security reports and drafted a fix for a confirmed one
6 Likes

Week ending 2026-10-04 (Week 40)

Just a heads-down week closing release blockers before this week’s Django 6.1.2. :writing_hand:

Authored
Refs #37136 -- Fixed test skips for Oracle Test Pilot. by jacobtylerwalls · Pull Request #22045 · django/django · GitHub
#37376 (UUID4() function on Oracle persists data in uppercase hex but queries in lowercase hex) – Django
#37377 (JSONIn lookup crashes or returns wrong result for primitives) – Django
#37378 (Extra empty breadcrumb in admindocs model_index.html) – Django
#37380 (FromWKB() and FromWKT() should support the SRID param on Oracle) – Django
Fixed #37380 -- Observed the `srid` param in FromWKB()/FromWKT() on Oracle. by jacobtylerwalls · Pull Request #22050 · django/django · GitHub
#37382 (@non_atomic_requests no longer works on async views) – Django
#37383 (Add support for using F("pk") as the LHS of a tuple lookup when the RHS is a Query) – Django
#37384 (Iterating F("pk") can hang) – Django
#37386 (Inconsistent treatment of 0 by ModelAdmin.delete_confirmation_max_display attribute) – Django
Fixed #37386 -- Observed delete_confirmation_max_display=0 for inlines. by jacobtylerwalls · Pull Request #22055 · django/django · GitHub
#37387 (admindocs: model_index.html table missing full width) – Django
Fixed #37376 -- Made UUID4() persist data in lowercase on Oracle. by jacobtylerwalls · Pull Request #22057 · django/django · GitHub
#37391 (Set minimum version of Oracle for Django 6.2) – Django
Fixed decimal comparison in RelatedGeoModelTest.test_related_union_aggregate(). by jacobtylerwalls · Pull Request #22066 · django/django · GitHub
Limited postgis.yml CI action to GIS tests. by jacobtylerwalls · Pull Request #22067 · django/django · GitHub
Misc
Fellows sync
Engaged in security reports
Repaired failing MySQL jobs on Jenkins
Sent prenotifications for security releases
4 Likes

Week ending 2026-10-11 (Week 41)

Some deep dives this week included: preparatory fixes before supporting multiline template tags, JSON primitive handling, and fixes in the Oracle backend to unblock CI jobs.

We had a spike of release blockers to clear for this week’s 6.1.2 release, but all but two of them were found internally, using a model.

Reviewed
Fixed #37322 -- Avoided transforms on spatial fields with srid=None. by yassinbahri · Pull Request #21890 · django/django · GitHub
Fixed #37377 -- Fixed JSONField __in crash/incorrect results for bare Value() primitives. by cliffordgama · Pull Request #22051 · django/django · GitHub
Added a 24 hour grace period for automated PR quality checks. by sarahboyce · Pull Request #22087 · django/django · GitHub
Fixed #37403 -- Fixed JSONField __in crash on SQLite with Value(None) expressions. by cliffordgama · Pull Request #22094 · django/django · GitHub
Added follow-up to CVE-2026-15830 to security archive. by sarahboyce · Pull Request #22108 · django/django · GitHub
Fixed #37401 -- Used os.makedirs() for safe_makedirs() on Python 3.15+. by nessita · Pull Request #22095 · django/django · GitHub
[checklists] Adapted the release checklists to DEP 20. by nessita · Pull Request #2825 · django/djangoproject.com · GitHub
Fixed #29504 -- Documented limitations of integer-like keys in JSONField. by abheetsharma09 · Pull Request #22107 · django/django · GitHub
Fixed #37280 -- Marked CSP nonce responses Cache-Control: private by shubhamsingh941889 · Pull Request #21850 · django/django · GitHub
Fixed #37387 -- Made admindocs model index table full width. by VAIBHAVPANT07 · Pull Request #22060 · django/django · GitHub
Fixed #23424 -- Corrected tokenization of raw template blocks. by sarahboyce · Pull Request #22039 · django/django · GitHub
Fixed #37330 -- Fixed crash on transforms over unbound annotation fields. by kunalKumar-13 · Pull Request #21922 · django/django · GitHub
Fixed #37412, Refs #34041 -- Added backwards incompatible note for admin breadcrumb changes. by sarahboyce · Pull Request #22114 · django/django · GitHub
Authored
Removed reference to 6.0.8 from 6.1.2 and 5.2.18 release notes. by jacobtylerwalls · Pull Request #22089 · django/django · GitHub
Allowed full stops inside quotes in commit messages. by jacobtylerwalls · Pull Request #22090 · django/django · GitHub
#37402 (AttributeError when calling first()/last() on an unordered queryset performing aggregation and grouping by an annotation) – Django
#37403 (JSONIn crashes at database level when preparing a models.Value(None, models.CharField()) on SQLite) – Django
#37405 (Using sort_keys kwarg no longer possible with YAML serializer) – Django
Fixed #37405 -- Fixed crash if sort_keys option is used with YAML serializer. by jacobtylerwalls · Pull Request #22096 · django/django · GitHub
Refs #37065 -- Added missing await in method_decorator example. by jacobtylerwalls · Pull Request #22098 · django/django · GitHub
26.0: setinputsizes(DB_TYPE_CLOB) no longer sufficient for passing large string parameter · Issue #618 · oracle/python-oracledb · GitHub
#37411 (Add support for python-oracledb version 26) – Django
[6.0.x] Refs #37411 -- Doc'd that oracledb < 26.0.0 is required. by jacobtylerwalls · Pull Request #22110 · django/django · GitHub
Fixed #37411 -- Added compatibility for oracledb 26.0.0+. by jacobtylerwalls · Pull Request #22112 · django/django · GitHub
Fixed GeoQuerySetTest.test_unionagg_tolerance() to accept either merged point. by jacobtylerwalls · Pull Request #22118 · django/django · GitHub
Replaced RST links named in English with explicit URLs. by jacobtylerwalls · Pull Request #22121 · django/django · GitHub
Removed new contributor welcome message action. by jacobtylerwalls · Pull Request #22122 · django/django · GitHub
Misc
Fellows sync
Engaged in security reports
Monthly steering council meeting
Monthly ops team meeting
Line manager checkin
Board liaison checkin
Applied for renewal of AWS credits
3 Likes

Week ending 2026-10-18 (Week 42)

Chasing a forum thread this week led to merging a nice performance improvement for queries on m2m fields. Other highlights included spotting final tweaks needed in the multiline template tags support and drafting a security fix that needed sustained attention.

Misc
Fellows sync
Engaged in security reports
Fellows line manager checkin
Monthly security team meeting
First triage & review team meeting
Informational meeting with Sovereign Tech Agency
3 Likes

Week ending 2026-10-25 (Week 43)

Fittingly enough for a week when security had high mindshare everywhere, I spent a lot of time developing security patches. Still, before sending off this report I was able to merge the initial support for the HTTP QUERY method and approve Sarah’s final tweaks on the multiline template tags feature!

Misc
Fellows sync
Engaged in security reports
Fellows line manager checkin
4 Likes

Week ending 2026-11-01 (Week 44)

The fellows met with finalists for the Executive Director position this week. In addition to participating in that interview process, I finalized the patches for the November security releases, including sending prenotifications, and then turned next to drafting two patches for the next set of security releases. That left not so much time for reviews on the public backlog, but I did manage to squeeze in a re-review for a Djangonaut Space participant.

Misc
Fellows sync
Engaged in security reports
Executive director interviews and debriefs
Sent security prenotifications
Configured a GitHub Actions policy for django/django
2 Likes

Week ending 2026-11-08 (Week 45)

After release blocker & security work, I managed a small “Trac sprint” to review Sarah’s changes to improve triage workflows as well as this year’s Google Summer of Code project on adding a dark mode. I also followed up with the GDAL maintainers on findings that fell out of the security releases. And we renamed the main command django!

Reviewed
Fixed #37436 -- Avoided overwriting when FETCH_PEERS fetches deferred fields. by Namraa310806 · Pull Request #22177 · django/django · GitHub
Fixed #37468 -- Clarified the effects of changing primary keys to existing values. by sarahboyce · Pull Request #22233 · django/django · GitHub
Enforced ticket assignment limits and triage restrictions. by sarahboyce · Pull Request #318 · django/code.djangoproject.com · GitHub
Add Dark Mode and Theme Toggle Support to Trac by kehach07 · Pull Request #309 · django/code.djangoproject.com · GitHub
Changed merge and build status of a ticket to render as icons. by smallsaucepan · Pull Request #314 · django/code.djangoproject.com · GitHub
Fixed #37469 -- Made psycopg adapter UTF8Dumper handle None by francoisfreitag · Pull Request #22241 · django/django · GitHub
Refs #37371 -- Added test databases to .gitignore. by medmunds · Pull Request #22068 · django/django · GitHub
https://github.com/django/django/pull/21260
Fixed #37324 -- Cannot assign expressions to spatial fields. by saikat709 · Pull Request #21893 · django/django · GitHub
Fixed #37330 -- Fixed crash on transforms over unbound annotation fields. by kunalKumar-13 · Pull Request #21922 · django/django · GitHub
Fixed #34746 -- Used reprlib to limit variable size in debug reports. by abdullahmujahidali · Pull Request #20578 · django/django · GitHub
Fixed #36642 -- Fixed capitalization of locale suggestions in makemessages. by kihuni · Pull Request #19984 · django/django · GitHub
Fixed #37481 -- Avoided reference cycle in test client responses. by mpasternak · Pull Request #22256 · django/django · GitHub
Fixed #37482 -- Corrected parse_time() docs about UTC offsets. by ines-besrour · Pull Request #22257 · django/django · GitHub
Fixed #36067 -- Remove 'DELETE?' and delete checkbox in TabularInline… by ahmedlemine · Pull Request #22208 · django/django · GitHub
Fixed #30306 -- Added input_type to Textarea widget. by HosseineShams · Pull Request #21857 · django/django · GitHub
Fixed #37137 -- Suggested using Func() for time zone conversions in settings docs. by vishy0 · Pull Request #21488 · django/django · GitHub
Refs #37159 -- Documented building release wheel reproducibly. by charlesroelli · Pull Request #21760 · django/django · GitHub
Add charter for Translators team. by tim-schilling · Pull Request #98 · django/dsf-working-groups · GitHub
Misc
Fellows sync
Engaged in security reports
Issued security releases
Monthly steering council meeting
Chat with line manager (Andrew Godwin)
Rotated Oracle Test Pilot access token
Monthly board liaison checkin
Added Johannes to Triage & Review Team
Fixed duplicate ReadTheDocs builds
2 Likes