# Django Fellow Report - Natalia - 2025

**URL:** <https://forum.djangoproject.com/t/django-fellow-report-natalia-2025/37729>\
**Category:** Django Internals\
**Created:** [January 6, 2025, 1:40pm UTC](https://forum.djangoproject.com/t/django-fellow-report-natalia-2025/37729 "2025-01-06T13:40:27Z")\
**Posts on this page:** 1\
**Showing post:** 46

<div class="post-metadata">

**Author:** ![nessita](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/nessita/32/12194_2.png) [@nessita](https://forum.djangoproject.com/u/nessita)\
**Post date:** [November 24, 2025, 1:39pm UTC](https://forum.djangoproject.com/t/django-fellow-report-natalia-2025/37729/46 "2025-11-24T13:39:39Z")

</div>

# Week ending 2025-11-23 (Week 47)

This week was again heavy on security work ⛑ . The flow of incoming security reports keeps growing 🔼, and even when many are medium to low impact, keeping up is starting to get tough: most of my time went into security report triage, patch review, and planning so we can (try to) stay on top of things. I also pushed forward the Django 6.0 RC1 release and wrapped up a few small docs and tooling updates ❤️‍🩹.

## Triaged

- [#36141 (After double squashing migrate command fails with InconsistentMigrationHistory) – Django](https://code.djangoproject.com/ticket/36141) - After double squashing migrate command fails with InconsistentMigrationHistory (accepted)
- [#36743 (Max URL length of 2048 is too conservative for redirect targets) – Django](https://code.djangoproject.com/ticket/36743) - Max URL length of 2048 is too conservative for redirect targets (accepted)
- [#36736 (Please restore h-rules on the docs home page, which were removed in the 4.2 docs.) – Django](https://code.djangoproject.com/ticket/36736) - Please restore h-rules on the docs home page, which were removed in the 4.2 docs. (invalid)
- [https://code.djangoproject.com/ticket/36744](https://code.djangoproject.com/ticket/36744) - Improve/correct scrypt password hasher documentation (accepted)

## Authored

- [Clarified forum post updates for pre-releases. by nessita · Pull Request #25 · nessita/checklist-generator · GitHub](https://github.com/nessita/checklist-generator/pull/25) - Clarified forum post updates for pre-releases.
- [A few scripts to rule them all. by nessita · Pull Request #20279 · django/django · GitHub](https://github.com/django/django/pull/20279) - A few scripts to rule them all.
- [Ensure that Sitemap.items is described as a method in docs/ref/contrib/sitemaps.txt. by nessita · Pull Request #20275 · django/django · GitHub](https://github.com/django/django/pull/20275) - Ensured that Sitemap.items is described as a method in docs/ref/contrib/sitemaps.txt.

## Other/Misc

- Biweekly meeting with Fellows and Board Liaison (Jeff Triplett).
- Biweekly meeting with Fellows and Line Manager (Andrew Godwin).
- Fellows weekly sync.
- Released Django 6.0 RC1:
  - [Django 6.0 release candidate 1 released | Weblog | Django](https://www.djangoproject.com/weblog/2025/nov/19/django-60-rc-released/)

- Engaged in multiple security topics:
  - Vulnerability reports triage, path review, security release planning.
  - Security Team governance and responsibilities conversation.
  - Brainstorming for mitigation plans for the almost-unmanageable uptick in medium-to-low-but-not-evidently-wrong security reports.

---

_[View the full topic](https://forum.djangoproject.com/t/django-fellow-report-natalia-2025/37729)._