Week ending 2025-11-16 (Week 46)
Security work was again the main theme this week, with a higher-than-usual stream of reports and follow-up tasks (though this higher incoming flow may be the new normal
). A nice milestone on the side: the DSF was confirmed as an official PyPI organization, which makes Django’s package ownership story cleaner and more robust, and less tied to individual accounts
. The rest was the usual mix of triage, reviews, and a bit of debugging, but the week was definitely security-heavy overall
.
Triaged
- #36717 (Admin login should redirect already logged-in users to page specified in next parameter) – Django - Admin login should redirect already logged-in users to page specified in next parameter (accepted)
- #36729 (Pre-compile regular expressions as standard) – Django - Pre-compile regular expressions as standard (accepted)
- #36728 (Validate template tag context argument at definition time, rather than compile time) – Django - Validate template tag context argument at definition time, rather than compile time (accepted)
Reviewed
- https://github.com/django/django/pull/20059 - Refs #36680 – Avoided manipulating PATH in AdminScriptTestCase.
- https://github.com/django/django/pull/19703 - Clarified EmailValidator docs to specify it validates an email address.
- Fixed typo in docs/ref/models/fields.txt. by cliffordgama · Pull Request #20073 · django/django · GitHub - Clarified “get_db_prep_value” default result in docs/ref/models/fields.txt.
- Fixed typo in docs/ref/databases.txt. by cliffordgama · Pull Request #20068 · django/django · GitHub - Fixed typo in docs/ref/databases.txt.
- Fixed #36717 -- Redirect authenticated users on admin login view to next URL. by beheh · Pull Request #20076 · django/django · GitHub - Fixed #36717 – Redirect authenticated users on admin login view to next URL.
- https://github.com/django/django/pull/20001/ - Fixed #36686 – Clarified Meta.ordering is ignored in GROUP BY queries.
- Refs #28877 -- Eased ordinal translations for languages like French. by JulienPalard · Pull Request #20028 · django/django · GitHub - Refs #28877 – Eased ordinal translations for languages like French.
- Added community package upgrade utilities mention to docs. by tim-schilling · Pull Request #20093 · django/django · GitHub - Added community package upgrade utilities mention to docs.
Authored
- Should we adjust Django's versioning to use a form of CalVer? - #35 by nessita - Concrete proposal for “Should we adjust Django’s versioning to use a form of CalVer?”
- https://github.com/django/online-community-working-group/pull/27 - Improve README structure and wording, adding details about the repo and project board.
Other/Misc
- Fellows weekly sync.
- Monthly Ops call.
- Did some debugging for https://code.djangoproject.com/ticket/36720 (was not able to reproduce).
- Engaged in security topics:
- Reviewed request from a company to be added to the security prenotification list.
- Merged security patches for one of our GitHub Actions.
- Worked on confirmed vulnerabilities.
- Built script for migrating EOL stable branches to be tags instead.
- Received confirmation that the DSF was accepted as an organization in PyPI. Made some team/user configuration cleanup.
- Attended DSF Office Hours