Week ending 2026-07-05 (Week 27)
Intense week! 
I was mostly covering solo this week 
, so it was a mix of keeping everything moving and diving deep where needed. A big chunk of time went into tracking down and fixing a docs build regression for the website (thanks Carlton for spotting it and Tobias for the help debugging), which uncovered a subtle mismatch between how Django (core) builds docs and how the website consumes them. Alongside that, I spent time on a few deeper investigations that had been lingering (snoozed over and over in my inbox 
), finally unblocking design questions and follow-ups that needed proper attention. On the security side 
, I handled prenotifications and a wave of incoming reports, closing out a number of invalid ones and keeping things tidy.
Overall, a very hands-on week 
balancing throughput with some worthwhile deep dives that should pay off going forward 
.
Triaged
- #37185 (Update the deployment checklist docs to mention environment variables and secrets management) – Django - Update the deployment checklist docs to mention environment variables and secrets management (re-triaged from wontfix to accepted)
- #37194 (Update Choice widget documentation to reflect current class hierarchy) – Django - Update Choice widget documentation to reflect current class hierarchy (accepted)
- #37196 (Document SimpleTestCase.async_client_class) – Django - Document SimpleTestCase.async_client_class (accepted)
Reviewed
- Fixed docs warning/errors for duplicate target name and multiple toctrees. by sarahboyce · Pull Request #21234 · django/django · GitHub - Fixed docs warning/errors for duplicate target name and multiple toctrees.
- Fixed #34753 -- Updated documentation on email safety. by medmunds · Pull Request #21467 · django/django · GitHub - Fixed #34753 – Updated documentation on email safety.
- Fixed #37162 -- Updated ContactForm docs example to use safe practices. by medmunds · Pull Request #21522 · django/django · GitHub - Fixed #37162 – Updated ContactForm docs example to use safe practices.
- Updated howto-release-django.txt with reminder to bump asgiref. by jacobtylerwalls · Pull Request #21542 · django/django · GitHub - Updated howto-release-django.txt with reminder to bump asgiref.
- Fixed #37093 -- Edited pull request instructions and error messages. by StephanieAG · Pull Request #21565 · django/django · GitHub - Fixed #37093 – Edited pull request instructions and error messages.
- Renamed tests/migrations/test_base.py to tests/migrations/base.py. by timgraham · Pull Request #21566 · django/django · GitHub - Renamed tests/migrations/test_base.py to base.py.
Authored
- #37204 (Building the epub version of the docs results in an invalid epub with errors on pages with console directives) – Django - Building the epub version of the docs results in an invalid epub with errors on pages with console directives
- Fixed #37204 -- Rendered console directives as plain code in epub docs builds. by nessita · Pull Request #21582 · django/django · GitHub - Fixed #37204 – Rendered console directives as plain code in epub docs builds.
- Fixed #36809 -- Allowed customizing EmailValidator errors per address part. by nessita · Pull Request #21568 · django/django · GitHub - Fixed #36809 – Allowed customizing EmailValidator errors per address part.
- Disambiguated duplicate "Example" hyperlink targets in howto-release-django.txt. by nessita · Pull Request #21572 · django/django · GitHub - Disambiguated duplicate “Example” hyperlink targets in howto-release-django.txt.
- Deep dive on debugging why docs were not fully built and updates in the website:
- Fixed #2685 -- Switched update_docs management command to use html builder by nessita · Pull Request #2686 · django/djangoproject.com · GitHub - Fixed #2685 – Switched update_docs management command to use html builder
- Refs #2685 -- Isolated per-release docs via a separate process to avoid Sphinx module caching. by nessita · Pull Request #2688 · django/djangoproject.com · GitHub - Refs #2685 – Isolated per-release docs via a separate process to avoid Sphinx module caching.
- Refs #2685 -- Fixed build_doc_release subprocess call failing under "-m django". by nessita · Pull Request #2690 · django/djangoproject.com · GitHub - Refs #2685 – Fixed build_doc_release subprocess call failing under “-m django”.
- Avoid `shell=True` string-formatted subprocess call in update_docs · Issue #2691 · django/djangoproject.com · GitHub - Avoid shell=True string-formatted subprocess call in update_docs
Security
- Prepared and sent security release pre-notifications, and posted public reduced announcement.
- Triaged many security reports and closed a handful of invalid ones.
Other/Misc
- Read: Do excellent vulnerability reports | daniel.haxx.se
- Engaged in Implementing a Formal Experimental API for Django - #23 by nessita.
- Deep dive on Ticket #36809 Allow EmailValidator to customize error messages depending on the part that failed validation to answer design questions from 5 months ago
- Deep dive on Ticket #37138 Outdated docs CSS in local and preview builds to follow up PR and forum post.
- Fixed #37138 -- Replaced the custom docs HTML theme with Furo. by nessita · Pull Request #53 · nessita/django · GitHub - Fixed #37138 – Replaced the custom docs HTML theme with Furo.