Django Fellow Report - Natalia - 2024

[nessita]

Week ending 2024-10-06 (Week 40)

Triaged

• https://code.djangoproject.com/ticket/35777 - MySQL: cannot add key limited index on TEXT columns (wontfix)
• https://code.djangoproject.com/ticket/35796 - Add setting to sign CSRF cookie (wontfix)
• https://code.djangoproject.com/ticket/35800 - Clarify SECURE_PROXY_SSL_HEADER as it relates to the wsgi.url_scheme environ (worksforme)
• https://code.djangoproject.com/ticket/35180 - PostgreSQL pattern ops indexes are dropped when changing between CharField and TextField (accepted)
• https://code.djangoproject.com/ticket/35192 - Support injecting custom context into widget templates (needsinfo)
• https://code.djangoproject.com/ticket/35806 - Allow the user to list and delete their sessions (wontfix)
• https://code.djangoproject.com/ticket/35778 - Use native JSONObject on Postgres 16+ with server side bindings (accepted)
• https://code.djangoproject.com/ticket/35530 - django.contrib.auth.login inconsistently guards request.user (accepted)
• https://code.djangoproject.com/ticket/35801 - Signals are dispatched to receivers associated with dead senders (needsinfo)(accepted)
• https://code.djangoproject.com/ticket/35809 - Background color for admin’s m2m multi-select “selected” rows is lost in dark theme (accepted)

Reviewed

• https://github.com/django/django/pull/18239 - Relocated path() explanation to docs/ref/urls.txt to simplify tutorial 1.
• https://github.com/django/django/pull/18629 - Fixed #35797 – Removed debug context processor from project template.
• https://github.com/django/django/pull/18637 - Refs #35783 – Added NumDimensions geographic database function.
• https://github.com/django/django/pull/18242 - Relocated explanation of startproject output files to simplify tutorial 1.
• https://github.com/django/django/pull/18303 - Fixed #35530 – Deprecated request.user fallback in auth.login.
• https://github.com/django/django/pull/18539 - Refs #35730: Encrypted 'uid’ parameter instead of base64-encoding to prevent possible user count leakage
• https://github.com/django/django/pull/18616 - Extended HttpResponseRedirectBase to preserve the original HTTP method with status codes 307 and 308.
• https://github.com/django/django/pull/18638 - Refs #33783 – Added IsEmpty GIS database function and __isempty lookup on SpatiaLite.
• https://github.com/django/django/pull/18646 - Update django.po

Authored

• https://github.com/django/django/pull/18378 - Added GitHub Action workflow to test all Python versions listed in the project config file. (resurfaced, reworked and landed)
• https://github.com/django/django/pull/18643 - Reindented attributes and methods for classes in docs/ref/middleware.txt.
• https://github.com/django/django/pull/18647 - [5.1.x] Updated translations from Transifex.
• https://github.com/django/django/pull/18648 - Bumped PostgreSQL to 17 in scheduled tests workflow.

Other/Misc

• Engaged in many forum topics.

[nessita]

Week ending 2024-10-13 (Week 41)

Triaged

• https://code.djangoproject.com/ticket/35817 - Regression in default_storage.save(path, source) (wontfix)
• https://code.djangoproject.com/ticket/35818 - Failing to save file with long names containing dots (wontfix)
• https://code.djangoproject.com/ticket/35829 - Update/Fix Font Awesome icons (Needs license expertise, I have reached out to the board for advice, accepted based on follow ups.)
• https://code.djangoproject.com/ticket/35828 - Switch to statically declaring version number in pyproject.toml (Waiting for more forum feedback, I engaged in conversations, closed as wontfix for now given the lack of clear consensus.)
• https://code.djangoproject.com/ticket/35757 - memcached.PyMemcacheCache reentrancy problem with ASGI-based runserver (A few rounds of coming and going, I followed up with Carlton and he closed it as needsinfo.)
• https://code.djangoproject.com/ticket/35826 - Document usage examples for decorator utils (needsinfo)

Reviewed

• https://github.com/django/django/pull/18659 - Bumped versions in pre-commit and npm configurations.
• https://github.com/django/django/pull/18658 - Fixed #35612 – Added security reporting guidelines.
• https://github.com/django/django/pull/18235 - Fixed #35502 – Changed directory name of mysite in tutorial.
• https://github.com/django/django/pull/18250/ - Explained exception to using include() within urlpatterns in tutorial 1.
• https://github.com/django/django/pull/18538 - #33171: Invalid link for readonly fields in django admin with missing permissions.
• https://github.com/django/django/pull/18626 - Restructured how-to landing page.
• https://github.com/django/django/pull/18007 - Refs #34406 – Added support for GDAL curved geometries.

Authored

• https://github.com/django/django/pull/18656 - Fixed #35809 – Set background color for selected rows in the admin’s form select widget.
• https://github.com/django/django/pull/18662 - [4.2.x] Added GitHub Action workflow to test all Python versions listed in the project config file.

Other/Misc

• Issued Django 5.1.2 release:
  • https://www.djangoproject.com/weblog/2024/oct/08/bugfix-releases/
• Initial chat with @andrewgodwin regarding The Fellowship (of the ) and ongoing pain points. The meeting goal was to establish a shared and clear understanding of the current issues, then iterate on them to find improvements and solutions. Looking forward to more of these discussions!
• Catch up on security issues:
  • Sync with Sarah specifically on this topic.
  • Replies to pending reports.
  • Started conversation with the DSF Board about potentially becoming a CNA (CVE Numbering Authority, for example Python is a CNA already).

[nessita]

Week ending 2024-10-20 (Week 42)

Triaged

• https://code.djangoproject.com/ticket/35837 - Missing alters_data=True on QuerySet and UserManager (accepted)
• https://code.djangoproject.com/ticket/35842 - JSONField has_key, has_keys, has_any_keys lookups do not properly handle quotes on Oracle and SQLite (accepted)
• https://code.djangoproject.com/ticket/35850 - Default success messages for CreateView/UpdateView/DeleteView/… (wontfix)
• https://code.djangoproject.com/ticket/35851 - django.test.client.ClientMixin._login doest not set enviorn like REMOTE_ADDR can cause test failures in certain situations (wontfix)
• https://code.djangoproject.com/ticket/35849 - ParallelTestSuite reports error occurred in arbitrary test instead of setUpClass (accepted)

Reviewed

• https://github.com/django/django/pull/18555 - Fixed #35744 – Relabelled external aliases of combined queries.
• https://github.com/django/django/pull/1867 - Fixed #26322 – Updated lazy model reference section of fields docs.
• https://github.com/django/django/pull/18652 - Fixed #35795 – Updated “Delete” button semantics and accessibility
• https://github.com/django/django/pull/18677 - Fixed #35841 – Re-enabled support for DB-IP databases in GeoIP2.
• https://github.com/django/django/pull/18686 - Refs #35844 – Added Python 3.14 to daily builds.
• https://github.com/django/django/pull/18680 - Refs #35844 – Used asgiref.sync.iscoroutinefunction() instead of deprecated asyncio.iscoroutinefunction().
• https://github.com/django/django/pull/18685 - Refs #35844 – Fixed tests for test --parallel option on Python 3.14+.
• https://github.com/django/django/pull/18640 - Fixed #35674 – Added system check for deprecated settings variables.

Other/Misc

• Completed setup of new computer! Very excited: running the Django test suite is almost 6x times faster:
  • Before: Ran 17598 tests in 272.753s
  • After: Ran 17598 tests in 46.621s
• Attended the DSF Board Office Hours, very rich and valuable conversations.
• Security reports analysis and follow up.
• Restarted work on revisiting the Storage API. Reference: https://forum.djangoproject.com/t/issue-when-saving-files-with-long-names-containing-dot-in-django-5-1/35494/.
• Engaged in (the future of) Steering Council conversations.

[thibaudcolas]

It was great to have you at the office hours!

[nessita]

Week ending 2024-10-27 (Week 43)

I’ll be on holiday for the next two weeks, hopefully celebrating some birthdays with a long time friend from university who now lives in Spain.

Triaged

• https://code.djangoproject.com/ticket/35854 - Order of “choices” on CharField randomly changing forcing new migrations despite no changes. (duplicate)
• https://code.djangoproject.com/ticket/35853 - Disable garbage collection during transaction.atomic. (wontfix)
• https://code.djangoproject.com/ticket/35852 - intcomma not locale aware when given a decimal as string (accepted)
• https://code.djangoproject.com/ticket/35855 - Add a disclaimer about PDF accessibility issues in docs (accepted)
• https://code.djangoproject.com/ticket/35856 - Add support for MEMORY/SERIALIZE option to QuerySet.explain() on PostgreSQL 17+. (accepted)
• https://code.djangoproject.com/ticket/35860 - Search not working for 5.1 on docs.djangoproject.com (invalid)
• https://code.djangoproject.com/ticket/26609 - Add system check for field choices using unorderable iterables (reopened, accepted)
• https://code.djangoproject.com/ticket/35861 - Documentation browser does not work (invalid)
• https://code.djangoproject.com/ticket/26214 - Better error message for RuntimeError: populate() isn’t reentrant
• https://code.djangoproject.com/ticket/35862 - invalid token in plural form: EXPRESSION on django/contrib/auth/locale/ru_RU and some other ru_RU file when running manage.py compilemessages -l ru_RU command (invalid)
• https://code.djangoproject.com/ticket/35866 - Django documentaion style guide on models is unclear what to do with any other Python dunder methods that the model class might have (accpted)

Reviewed

• https://github.com/django/django/pull/18692 - Updated tutorial part count from 7 to 8 in docs/intro/reusable-apps.txt.
• https://github.com/django/django/pull/18597 - Fixed #35308 – Caught and logged OSError when launching black.
• https://github.com/django/django/pull/18626 - Restructured how-to landing page.
• https://github.com/django/django/pull/18007 - Refs #34406 – Added support for GDAL curved geometries.
• https://github.com/django/django/pull/18671 - Disambiguated the purpose of refs docs for contributors.
• https://github.com/django/django/pull/18676 - Improved reproducibility on staticfiles manifests
• https://github.com/django/django/pull/18283 - Doc’d that unusable passwords are defined by metadata in the password field.
• https://github.com/django/django/pull/18291 - Exclude pylibmc on MacOS and Windows
• https://github.com/django/django/pull/18685 - Refs #35844 – Fixed tests for test --parallel option on Python 3.14+.
• https://github.com/django/django/pull/18277 - Refs #26029 – Extended docs for the StorageHandler default instance.

Authored

• https://forum.djangoproject.com/t/docs-seem-to-go-missing-for-a-given-version-when-there-are-docs-changes/35861

Other/Misc

• Engaged in forum topics and (the future of) Steering Council conversations.
• Attended DSF Office Hours.
• Completed DjangoCon US survey.

[nessita]

Week ending 2024-11-03 (Week 44)

Holidays.

Week ending 2024-11-10 (Week 45)

Holidays.

[nessita]

Week ending 2024-11-17 (Week 46)

It’s been a busy week getting back up to speed after the holidays, with a lot of meetings and a considerable amount of information to process. I also found the recent news (recent to me at least) about the Steering Council drama a bit unsettling, but I’m glad to see that the DSF Board and other community members have been actively working on mitigation actions. Thank you!

Triaged

• https://code.djangoproject.com/ticket/35901 - settings.DEBUG could reject non-empty string values (or in particular “off”, “no”, “0”, “disabled”, “false”, “False”) (wontfix)
• https://code.djangoproject.com/ticket/35900 - staticfiles: Make staticfiles.json location unguessable for security (by obscurity!) (wontfix)
• https://code.djangoproject.com/ticket/35903 - “view on site” URL doesn’t accept non-integer ContentType pks (accepted)
• https://code.djangoproject.com/ticket/35749 - AlterIndexTogether raising TypeError: ‘class Meta’ got invalid attribute(s): index_together (duplicate)

Reviewed

• https://github.com/django/django/pull/18690 - Fixed #35843 – Simplified explanation of formsets iteration behavior.
• https://github.com/django/django/pull/18616 - Fixed #35784 – Extended HttpResponseRedirectBase to preserve the original HTTP method with status codes 307 and 308.
• https://github.com/django/django/pull/18343 - Fixed #35535 – Added template tag decorator simple_block_tag().
• https://github.com/django/django/pull/18689 - Refs #18392 – Changed default mysql encoding to “utf8mb4”.
  • Requires some updates to our Django Jenkins config, proposed PR.

Authored

• https://github.com/django/django/pull/18815 - Made cosmetic edits to 5.2 release notes, including line wrapping at 79 cols.

Other/Misc

• Security Reports triage, review and further follow up.
• Sync meetings with:
  • 1-1 with Sarah.
  • Fellows catchup with Sarah and Andrew.
  • DSF Office Hours.

[nessita]

Week ending 2024-11-24 (Week 47)

Triaged

• https://code.djangoproject.com/ticket/35925 - FilteredSelectMultiple filter icon missing padding in RTL (accepted)
• https://code.djangoproject.com/ticket/35926 - Support capturing the remainder of a command-line arguments in BaseCommand (wontfix)
• https://code.djangoproject.com/ticket/35927 - utils/encoding.py force_string, smart_string, force_bytes, and smart_bytes should verify encoding parameter is not None (invalid)

Reviewed

• https://github.com/django/django/pull/18817 - Refs #32339 – Updated formset docs to reflect default rendering as as_div.
• https://github.com/django/code.djangoproject.com/pull/224 - Renamed “patch” to “pull request”
• https://github.com/django/djangoproject.com/pull/1729 - Fixed #1724 – Renamed “patch” to “pull request”
• https://github.com/django/django/pull/18780 - Fixed #35894 – Reduced the usage of “patch” when referring to a code contribution.
• https://github.com/django/django/pull/18343 - Fixed #35535 – Added template tag decorator simple_block_tag().
• https://github.com/django/django/pull/18810 - Enabled fail_on_warning on RTD builds.
• https://github.com/django/django/pull/18266 - Fixed #35521 – Added possibility to override BoundField
• https://github.com/django/django/pull/18424 - Fixed #35440 – Updated parse_header_parameters logic.
• https://github.com/django/django/pull/18597 - Fixed #35308 – Caught and logged OSError when launching formatters.
• https://github.com/django/django/pull/18805 - Fixed #35899 – Allowed multiline template tags.

Authored

• https://github.com/django/django/pull/18487 - Refs #10941 – Added tests for querystring template tag. (Resurfaced after contributor ping, thank you @sarahboyce for your patience on this one )

Other/Misc

• Engaged in security reports, patches, and other related conversations.
• Engaged in forum topics.
• Completed the 2024 Django Developers Survey.
• Learned a lot about the ORM thanks to Simon Charette: Demystifying the Django ORM.

[nessita]

Week ending 2024-12-01 (Week 48)

Triaged

• https://code.djangoproject.com/ticket/35934 - Migrations tests fail and leave behind files if tests/migrations/migrations exists (needsinfo)
• https://code.djangoproject.com/ticket/35935 - sqlmigrate prevents normal colorization of system checks (accepted)
• https://code.djangoproject.com/ticket/35941 - Add composite GenericForeignKey support (accepted)
• https://code.djangoproject.com/ticket/35940 - SelectFilter choose/remove buttons missing keyboard-friendly state management (accepted)
• https://code.djangoproject.com/ticket/35930 - Database password visible on debug page in local variable (needsinfo) more triaging and testing (accepted)
• https://code.djangoproject.com/ticket/35943 - Remove deprecated ‘unload’ event listener (accepted)

Reviewed

• https://github.com/django/django/pull/18852 - Fixed #35942 – Fixed createsuperuser management command crash on Python 3.13+.
• https://github.com/django/django/pull/18842 - Added missing backticks to class-based views docs.
• https://github.com/django/django/pull/18597 - Fixed #35308 – Caught and logged OSError when launching formatters.
• https://github.com/django/django/pull/18855 - Added stub release notes and release date for 5.1.4, 5.0.10, and 4.2.17.
• https://github.com/django/django/pull/18669 - Made reverse() docs more self-contained.
• https://github.com/django/django/pull/18856 - Fixed trailing whitespaces in documentation
• https://github.com/django/django/pull/18843 - Removed trailing whitespace in docs.
• https://github.com/django/django/pull/18683 - Fixed #35667 – Improved deprecation warning handling by replacing stacklevel with skip_file_prefixes.
• https://github.com/django/django/pull/18810 - Upgraded to Python 3.12, Ubuntu 24.04, and enabled fail_on_warning for docs builds.
• https://github.com/django/django/pull/18721 - Fixed Sphinx’s ‘doctest’ builder in docs.
• https://github.com/django/django/pull/18720 - Added parallelism support via --jobs to docs build Makefile rule.
• https://github.com/django/django/pull/18630 - Update docs.yml
• https://github.com/django/django/pull/18859 - Refactored tests.serializers.test_data.

Other/Misc

• Biweekly sync about the Fellowship with Andrew Godwin.
• Attended DSF Working Hours.
• Engaged with https://code.djangoproject.com/ticket/35870, read the commentary and provided further advice.
• Read and broadcasted Thoughts on Django’s Core • Buttondown.

[nessita]

Week ending 2024-12-08 (Week 49)

Short week for me since I wasn’t feeling great when it started, and my ability to stay up was lost by Thursday . I’m at 60% today, which is like 12 times better than last week!

Triaged

• https://code.djangoproject.com/ticket/35957 - Allow AutoFields in composite primary keys (accepted with caveats)
• https://code.djangoproject.com/ticket/8576 - Multiple AutoFields in a model (restored wontfix)
• https://code.djangoproject.com/ticket/35963 - Add option to makemigrations to skip checking consistent history (duplicate)
• https://code.djangoproject.com/ticket/35968 - src layout and startapp (invalid)

Reviewed

• https://github.com/django/django/pull/18683 - Fixed #35667 – Improved deprecation warning handling by replacing stacklevel with skip_file_prefixes.
• https://github.com/django/django/pull/18862 - Removed question marks from headings in docs/topics/db/fixtures.txt.
• https://github.com/django/django/pull/18158 - Fixed #35515 – Added auto-importing to shell command.
  • Deep dive on this new feature, with the goal of finalizing it and have it ready to be merged before Django Feature Freeze (Jan 15th).
  • I found some issues that IMHO needs further community discussion so I resurfaced Salvo’s thread in this comment. If you are a Django shell user and care about the default auto import experience, PLEASE comment!
  • I have a local working branch that splits the work in the original PR in two, one without the “models modules alias auto import” and a follow up commit that adds it. Will push to Salvo’s PR soon for better review and understanding.

Authored

• https://github.com/nessita/django/pull/18 - Fixed #35667 – Improved deprecation warning handling by replacing stacklevel with skip_file_prefixes. (study of a potential better approach)

Other/Misc

• Reviewed security reports.
• Prepared and sent hours invoice and monthly report.

[nessita]

Week ending 2024-12-15 (Week 50)

I’m still recovering from last week’s illness (frustratingly still undiagnosed), though progress has been slow. My brain feels foggy, and my body still aches. Hopefully, I’ll feel better by next (this) week!

Triaged

• https://code.djangoproject.com/ticket/35985 - FORCE_SCRIPT_NAME ignored when running reverse() on non-main thread (wontfix)
• https://code.djangoproject.com/ticket/35997 - Migrations crash on constraints/indexes with CompositePrimaryKey in fields. (accepted)
• https://code.djangoproject.com/ticket/35995 - Suggestion: update reference to Yslow (accepted)
• https://code.djangoproject.com/ticket/35998 - Add caching to urlize (accepted)
• https://code.djangoproject.com/ticket/35999 - Remove references of the #django IRC channel as a place to get help/place to promote things (accepted)

Reviewed

• https://github.com/django/djangoproject.com/pull/1801 - Added file fields for a release’s tarball and checksum
• https://github.com/django/django/pull/18848 - Fixed #25582 – Added support for query and fragment to django.urls.reverse().
• https://github.com/django/django/pull/18918 - Removed links to outdated tools in docs/topics/performance.txt.

Authored

• https://github.com/django/django/pull/18912 - Clarified feature freeze tasks in docs/internals/howto-release-django.txt.

Other/Misc

• Deep dive in Make Django binaries PEP 625 compliant to become owner and driver of the change.
• Security related work:
  • Email reports analysis and further follow up.
  • Started conversations to assess the potential for an in-kind sponsorship to provide a security consultant for the Security Team.
• Shell auto imports feature redefinition, plan proposal to progress it and follow up.
• Voted for the Steering Council elections.
• Read https://sethmlarson.dev/slop-security-reports
  • “LLM-hallucinated security reports”
• Attended DSF Office Hours.
• Helped with the setting up of new DSF Board members (permissions and groups). Removed access to departing members.
• Watched Open Source for the long-haul - Carlton Gibson

[nessita]

Week ending 2024-12-22 (Week 51)

Happy Holidays to those who celebrate!

Finally I started feeling better health-wise, so we travelled to Argentina to visit family. Therefore, I’ll be taking Mon-Wed off the week of the 23th and also Mon-Wed the week of the 30th. I will try to at least catch up with security reports and ticket triaging, unsure if I’ll be able to do any PR reviews… Will try though!

Triaged

• https://code.djangoproject.com/ticket/35904 - Speed up fixture loading by adding options bulk insert/create (wontfix)
• https://code.djangoproject.com/ticket/36013 - Inconsistent handling of IDNs in urlize and AdminURLFieldWidget (accepted)
• https://code.djangoproject.com/ticket/36022 - make django an alias of django-admin (wontfix)
• https://code.djangoproject.com/ticket/36021 - Add option to configure the settings module from pyproject.toml (wontfix)
• https://code.djangoproject.com/ticket/36023 - Update content_disposition_header to handle control chars. (needsinfo)
• https://code.djangoproject.com/ticket/36030 - Rendering decimal to SQL is incoherent and leads to bugs. It relays on str formating not type. (needsinfo)
• https://code.djangoproject.com/ticket/36028 - Add option to choose a specific template engine for Django Admin (wontfix)

Reviewed

• https://github.com/django/django/pull/18368 - Fixed #35529 – Added support for dicts and multiple args in querystring.
• https://github.com/django/django/pull/18948 - Added DatabaseFeatures.rounds_to_even.
• https://github.com/django/django/pull/18553 - Fixed #35705 – Added Rotate GIS database function to rotate geometries.
• https://github.com/django/django/pull/18158 - Fixed #35515 – Added auto-importing to shell command. (ongoing, will push edits and merge before feature freeze)

Other/Misc

• Security related work:
  • Follow up on reports and iterations on a patch.
  • Got an initial call for a possible in-kind security-related sponsorship.
• Engaged in forum topics, this one took a good hour to analyze, ponder and reply:
  • https://forum.djangoproject.com/t/name-the-main-command-django/37230/
• Initial kick off call with our new Fellows-Board liaison, Jeff Triplett has accepted fulfilling this role and we are very very happy!

[nessita]

Week ending 2024-12-29 (Week 52)

Short week for me (only Thu and Fri), and last report for 2024. Happy New Year everyone!

Triaged

• https://code.djangoproject.com/ticket/36036 - Support the 4th dimension (M) in the GEOS API (needsinfo)
• https://code.djangoproject.com/ticket/36038 - Added a test case for the display_for_field function when a FileField is passed. (accepted)
• https://code.djangoproject.com/ticket/36032 - Apply a link to the URLField value on the admin app index page. (accepted)
• https://code.djangoproject.com/ticket/36031 - DecimalRangeField __contains query for a value causes DataError (accepted)

Reviewed

• https://github.com/django/django/pull/18963 - Fixed #36030 Bug fixed inconsistent decimal for DIV operation
• https://github.com/django/django/pull/18972 - Fixed #36032 – Add a link to the URLField value on the app index page.
• https://github.com/django/django/pull/18967 - Refs #373 – Fixed false failure of test_error_on_comment_pk_conflict.
• https://github.com/django/django/pull/18960 - Fixed #35991 – Fixed crash when adding non-nullable field after renaming part of CompositePrimaryKey on SQLite.
• https://github.com/django/django/pull/18936 - Fixed #35891 – Confirmed support for GDAL 3.10.
• https://github.com/django/django/pull/18892 - Fixed #35961 - - Implement PEP 639 license tags in pyproject.toml
• https://github.com/django/django/pull/18914 - #35829 Update/Fix Font Awesome icons (review still ongoing)

Other/Misc

• Security reports follow up.
• Engaged in forum topics.

[nessita]

I created a new topic for 2025 reports.