# Django Fellow Report - Natalia - 2026

**URL:** <https://forum.djangoproject.com/t/django-fellow-report-natalia-2026/43850>\
**Category:** Django Internals\
**Created:** [January 5, 2026, 1:02pm UTC](https://forum.djangoproject.com/t/django-fellow-report-natalia-2026/43850 "2026-01-05T13:02:52Z")\
**Posts on this page:** 1\
**Showing post:** 26

<div class="post-metadata">

**Author:** ![nessita](https://sea2.discourse-cdn.com/flex026/user_avatar/forum.djangoproject.com/nessita/32/12194_2.png) [@nessita](https://forum.djangoproject.com/u/nessita)\
**Post date:** [June 29, 2026, 5:18pm UTC](https://forum.djangoproject.com/t/django-fellow-report-natalia-2026/43850/26 "2026-06-29T17:18:16Z")

</div>

# Week ending 2026-06-28 (Week 26)

This week had a bit of a rush-high “everything coming together at once” ⛑ feel, with the 6.1 beta going out last Wed 🚀 and preparation for the upcoming security release, with prenotification emails and patches 🩹 going out tomorrow 💨. Most of the effort went into landing as many bugfixes as possible for the βeta, and polishing patches for confirmed security vulnerabilities, which meant careful reviews, backports, double-checking details, and aligning on CVE scoring and metadata 🤓.

## Triaged

- [#37175 (Add database backend methods to get hardcoded or nonexistent primary key values for tests) – Django](https://code.djangoproject.com/ticket/37175) - Add database backend methods to get hardcoded or nonexistent primary key values for tests (accepted)
- [#37185 (Update the deployment checklist docs to mention environment variables and secrets management) – Django](https://code.djangoproject.com/ticket/37185) - Update settings documentation topic with environment variable (wontfix)

## Reviewed

- [Fixed #37161 -- Added system check for default MAILERS configuration. by BaderEddineBenhirt · Pull Request #21478 · django/django · GitHub](https://github.com/django/django/pull/21478) - Fixed #37161 – Added system check for default MAILERS configuration.
- [Fixed #37170 -- Applied the no-argument form of sensitive\_post\_parameters to MultiValueDict. by jacobtylerwalls · Pull Request #21510 · django/django · GitHub](https://github.com/django/django/pull/21510) - Fixed #37170 – Applied the no-argument form of sensitive\_post\_parameters to MultiValueDict.
- [Fixed #37101, #37174 -- Used netstring delimiter to prevent collisions in cache keys. by jacobtylerwalls · Pull Request #21516 · django/django · GitHub](https://github.com/django/django/pull/21516) - Fixed #37101, #37174 – Used netstring delimiter to prevent collisions in cache keys.
- [Refs #36983 -- Skipped GC specific tests when GIL disabled. by carltongibson · Pull Request #21521 · django/django · GitHub](https://github.com/django/django/pull/21521) - Refs #36983 – Skipped GC specific tests when GIL disabled.
- [Refs #32785 -- Fixed Sphinx reference in release note. by jacobtylerwalls · Pull Request #21526 · django/django · GitHub](https://github.com/django/django/pull/21526) - Refs #32785 – Fixed line wrapping in release note.
- [Fixed #37166 -- Added system check for non-production EmailBackend. by medmunds · Pull Request #21530 · django/django · GitHub](https://github.com/django/django/pull/21530) - Fixed #37166 – Added system check for non-production EmailBackend.
- [Fixed #37183 -- Prevented writing unserializable attributes in syndication entries. by jacobtylerwalls · Pull Request #21531 · django/django · GitHub](https://github.com/django/django/pull/21531) - Fixed #37183 – Prevented writing unserializable attributes in syndication entries.
- [Refs #35870 -- Mentioned transitional setting in BLANK\_CHOICE\_DASH release note. by jacobtylerwalls · Pull Request #21539 · django/django · GitHub](https://github.com/django/django/pull/21539) - Refs #35870 – Mentioned transitional setting in BLANK\_CHOICE\_DASH release note.
- [Fixed #37184 -- Allowed non-UTF-8 bytes passwords in the PBKDF2 and MD5 password hashers. by jacobtylerwalls · Pull Request #21552 · django/django · GitHub](https://github.com/django/django/pull/21552) - Fixed #37184 – Allowed non-UTF-8 bytes passwords in the PBKDF2 and MD5 password hashers.
- [Clarified "plaintext" vs. "plain-text" in password hashers docs. by medmunds · Pull Request #21548 · django/django · GitHub](https://github.com/django/django/pull/21548) - Clarified “plaintext” vs. “plain-text” in password hashers docs.

## Authored

- [Fixed a pair of issues in the do\_django\_release.py script. by nessita · Pull Request #21543 · django/django · GitHub](https://github.com/django/django/pull/21543) - Fixed a pair of issues in the do\_django\_release.py script.

## Security

- Triaged new reports.
- Review one security patch and review CVE metadata for 3 confirmed vulnerabilities.
- Invested some time together with Jacob to discuss how to use/score the CVSS 3.1 and 4.0 vectors.

## Other/Misc

- Weekly Fellows meeting.
- Attended DSF Office Hours.
- Met with Oracle regarding the Test Pilot Program.

---

_[View the full topic](https://forum.djangoproject.com/t/django-fellow-report-natalia-2026/43850)._