Django Fellow Report - Sarah - 2025

sarahboyce · January 6, 2025, 7:34am

Week ending 2025-01-05 (Week 1)

I was on holiday for the Christmas/New Year period

My Fellow report for 2024 can be found here: Django Fellow Report - Sarah - 2024 - #42 by sarahboyce

Triaged

#36053 (FilteredSelectMultiple label to the right of widget on a ModelMultipleChoiceField) – Django (accepted)
#36054 (Add schemes parameter to URLField for custom URL scheme validation) – Django (wontfix)
#36050 (Cannot resolve OuterRef to CompositePrimaryKey) – Django (accepted)
#36047 (`BaseConnectionHandler.close_all()` doesn't work with async clients) – Django (invalid)
#36048 (CompositePrimaryKey lookup guards raise NotSupportedError instead of a more appropriate exception) – Django (accepted)
#36055 (Admin change form object-tools buttons cover part of the h2 title when the latter occupies multiple lines) – Django (accepted)
#36058 (Improve SpatialRefSysMixin.srs error reporting and efficiency) – Django (accepted)
https://code.djangoproject.com/ticket/36044 (accepted)
#36059 (Django shows DB credentials like passwords when DEBUG is true and DB is shut down) – Django (duplicate)

Reviewed

Authored

GitHub action to label PRs with "no ticket"

sarahboyce · January 13, 2025, 8:40am

Week ending 2025-01-12 (Week 2)

Triaged

#36063 (Fields in list_display_links should always navigate to the object "change" page) – Django (accepted)
#36065 (order_by("pk") not equivalent to order_by(F("pk")) for CompositePrimaryKey) – Django (accepted)
#36066 (Document that Q objects can be used directly in annotations) – Django (accepted)
#36062 (Deserializing CompositePrimaryKey from a string raises raises ValueError) – Django (accepted)
#36064 (save() behavior for new model instance with default primary key does not apply to CompositePrimaryKey) – Django (accepted)
#36038 (Added a test case for the display_for_field function when a FileField is passed.) – Django (wontfix)
#36070 (clean_fields(exclude=["pk"]) not implemented for composite primary keys) – Django (needsinfo → accepted)
https://code.djangoproject.com/ticket/36072 (duplicate)
#36075 (Field.primary_key documentation should details its interaction with CompositePrimaryKey) – Django (accepted)
https://code.djangoproject.com/ticket/36074 (accepted)
#36073 (Custom field without get_db_prep_value() errors on updates if part of composite primary key) – Django (accepted → invalid)
#36078 (Document that Postgres normalizes a range field with no points normalizes to empty) – Django (invalid → accepted)
#36079 (Size of the object's str in TabularInline is too small) – Django (accepted)
#36080 (Add a link to navigate to the object through str in the inline form.) – Django (invalid)

Reviewed

Authored

sarahboyce · January 20, 2025, 7:16am

Week ending 2025-01-19 (Week 3)

Big week! Had the 5.2 feature freeze and released 5.2a1 - my first feature freeze as release manager. I also did my driving test last Wednesday and passed!

Triaged

#36087 (Password reset does not support a custom user model with a composite primary key) – Django (accepted)
#36080 (Cleanup the inline link format.) – Django (wontfix)
#36095 (Explicitly introduce lazy references in early sections of the docs before they are used.) – Django (accepted)
#36099 (Drop support for Python 3.10 & 3.11.) – Django (duplicate)
#36105 (Drop support for MariaDB 10.5.) – Django (accepted)
#36106 (Exclude option for the "flush" django-admin command) – Django (wontfix)
#36005 (Drop support for Python 3.10 & 3.11.) – Django (accepted)

Reviewed

Authored

sarahboyce · January 27, 2025, 7:31am

Week ending 2025-01-26 (Week 4)

Triaged

#36113 (Enhancement Proposal: Support for Nested App Creation with `startapp` Command in Django) – Django (duplicate)
#36110 (Unable to customize kwargs passed to PasswordResetForm EmailMultiAlternatives) – Django (wontfix)
#36122 (Add sanity check against updating non-composite field with composite expression) – Django (accepted)
#36123 (Remove reference to PyPy) – Django (wontfix)
#36127 (The link is not displayed when str is blank in admin.) – Django (accepted)
#36128 (Lack of constraint validation in admin Inline with many-to-many intermediary model leads to IntegrityError) – Django (accepted)
#36126 (DisallowedModelAdminLookup on simple filters of FK fields with inheritance child model as target) – Django (worksforme)
https://code.djangoproject.com/ticket/36136 (wontfix)
#36135 (Prefetching a reverse GenericRelation raises AttributeError) – Django (accepted)
https://code.djangoproject.com/ticket/36131 (invalid)
#36130 (Add inclusion support for simple block tags) – Django (wontfix)

Reviewed

Authored

Other/Misc

Had a Django contributing process overview and Q&A meeting with the steering council

sarahboyce · February 3, 2025, 8:12am

Week ending 2025-02-02 (Week 5)

I was working from the UK this week
My little sister was hosting a Chinese new year party to celebrate the year of the snake
Also stayed with my mum while my Grandad was visiting so was nice to spend a week with them

Triaged

#36141 (After double squashing migrate command fails with InconsistentMigrationHistory) – Django (needsinfo)
#36138 (Simplify ADMINS and MANAGERS email list settings) – Django (wontfix)
#36146 (Double-squashed migration is omitted from forward migration plan after migrating backward) – Django (accepted)
#36145 (FIRST_DAY_OF_WEEK setting not changing the Admin calendar widget) – Django (accepted)
#36139 (Allow expressing JSONObject keys dynamically, as well as explicit pair-values) – Django (wontfix)
#36149 (Composite primary key subquery lookup prevent usage or specify fields and are not implemented for exact) – Django (accepted)
(spam report of ticket)
#36148 (Enable native tuple comparison lookups on Oracle >= 23.4.) – Django (accepted)
https://code.djangoproject.com/ticket/36147 (needsinfo)
#36151 (Non-editable FieldError raised when using a GenericForeignKey on a form.) – Django (accepted)
https://code.djangoproject.com/ticket/36153 (someday/maybe)
#36155 (Improve error handling when complex annotations are not passed an alias) – Django (accepted)
#36159 (Remove the example of the empty import shell customization) – Django (accepted)
#36160 (Django serve view does not respect X_FRAME_OPTIONS = "SAMEORIGIN") – Django (needsinfo)
#36158 (get_and_report_namespace() incorrectly reports the location where an object was created.) – Django (accepted)

Reviewed

Authored

sarahboyce · February 10, 2025, 8:29am

Week ending 2025-02-09 (Week 6)

This week I did some work for the Django website. I may chose to do this occasionally as I think it’s important I keep using Django (while maintaining Django).

Triaged

#36138 (Simplify ADMINS and MANAGERS email list settings) – Django (accepted)
#36161 (Deletion in reverse data migration fails with a chain of at least 3 foreign keys) – Django (accepted)
#36166 (Backwards migration to replaced migration leads to InconsistentMigrationHistory on forward migrate) – Django (accepted)
#36168 (Backwards migration to replaced migration when other app has squashed migrations can lead to FieldDoesNotExist error due to incorrect state) – Django (needsinfo → accepted)
https://code.djangoproject.com/ticket/36169 (wontfix)
https://code.djangoproject.com/ticket/36171 (invalid)

Reviewed

Authored

Other/Misc

Engaged in security topics.
Docker compose decided to be completely broken on Thursday morning (see failed to copy: httpReadSeeker: failed open: failed to do request: Get "https://production.cloudflare.docker.com/registry-v2/docker/registry/v2/blobs/sha256/24/24c63b8dcb66721062f32b893ef1027404afddd62aade87f3f39a3a6e70a74d0/data?verify=1717211225-SoFsY9MpCnMY8xiypN2ii7WhLsA%3D": EOF · Issue #7306 · docker/for-mac · GitHub) and this swallowed some time

sarahboyce · February 17, 2025, 7:11am

Week ending 2025-02-16 (Week 7)

Triaged

#36174 (Align admin pagination logic in history_view.) – Django (accepted → duplicate)
#36175 (Implement consistent pagination across admin pages.) – Django (accepted)
#36178 (Consistent quoting of object strings in admin delete confirmation messages.) – Django (accepted)
#36180 (Consider adding repeated pattern password validator) – Django (wontfix)
#36179 (hexed strings in common passwords database are not handled) – Django (invalid → accepted)
#36177 (Add a newline to the end of file when generating JSON fixtures) – Django (accepted)
https://code.djangoproject.com/ticket/36182 (accepted)
#36184 (Migrating forward to a replaced migration fails) – Django (accepted)
https://code.djangoproject.com/ticket/897 (Release blocker → normal)
https://code.djangoproject.com/ticket/36187 (accepted)
#36186 (forloop should have an accessor for the total count of the loop) – Django (accepted)

Reviewed

Authored

Other/Misc

Engaged in security reports, this took a significant amount of the work week.

sarahboyce · February 24, 2025, 6:41am

Week ending 2025-02-23 (Week 8)

Triaged

#36190 (High memory usage of CommonPasswordValidator) – Django (needsinfo → wontfix)
#36192 (Use semantic HTML for buttons in Django Admin) – Django (accepted)
#36195 (redirect_to_login Misinterprets next Parameter with Multiple Query Parameters) – Django (worksforme)
#36194 (add async support to ManyToManyField) – Django (wontfix)
#36193 (AssertionError: Invalid ASGI message after request body: http.request) – Django (invalid)
#36197 (Model.relatedmanager.count() always 0 for custom ManyToMany relationships with through model with to_fields) – Django (accepted)
#36198 (Unique Constraints defined with __date lookups on F expressions fail validation but create database constraints sucessfully) – Django (accepted)
https://code.djangoproject.com/ticket/36196 (accepted)
#36200 (Mention that RemoteUserMiddleware should be replaced when using custom header middleware with RemoteUserBackend) – Django (accepted)
https://code.djangoproject.com/ticket/36201 (accepted)
#36202 (Add examples with nested arrays/objects to JSONField docs for __contains and __contained_by) – Django (accepted)
#36203 (AdminSplitDateTime labels are not associated with their inputs) – Django (accepted)
#36204 (Request to Add User Login & Authentication Example to the Official Django First Steps tutorial) – Django (invalid)
#36205 (Date format issue in Django 5.1.6) – Django (duplicate)

Reviewed

Authored

Other/Misc

Engaged in security reports which took a significant amount of time.
Released Django 5.2 beta 1: Django 5.2 beta 1 released | Weblog | Django
Outlined a possible fellow update for 2024 for the DSF annual report
Followed up on Update startproject with default login/signup/logout options - #26 by sarahboyce with my expectation of next steps

sarahboyce · March 3, 2025, 7:16am

Week ending 2025-03-02 (Week 9)

Triaged

#36207 (refresh_from_db() doesn't clear cached ForeignObject relations) – Django (release blocker → normal)
#36210 (Support queries where lhs is CompositePrimaryKey and rhs is Subquery) – Django (accepted)
#36211 (Subclassing the "runserver" handler doesn't serve static files) – Django (invalid)
#36212 (How about providing type safe access to form field data?) – Django (wontfix)
#36183 (Model o2o inheritance with abstract models does not "evaluate" a lazy relationship) – Django (accepted → wontfix)
#36213 (Document that QuerySet.update can execute two separate SQL queries when using MySQL) – Django (accepted)
https://code.djangoproject.com/ticket/36214 (invalid)
#35572 (Improve performance replacing os.listdir() with os.scandir()) – Django (wontfix)
https://code.djangoproject.com/ticket/36217 (accepted)

Reviewed

Authored

Fixed page header structure and used semantic HTML. by sarahboyce · Pull Request #1967 · django/djangoproject.com · GitHub

Other/Misc

Engaged in security reports.
Engaged in the 5.2 testing from django-crispy-forms: Confirmed support for Django 5.2. by smithdc1 · Pull Request #200 · django-crispy-forms/crispy-bootstrap5 · GitHub
Polished: Added code references to search results. by sarahboyce · Pull Request #1947 · django/djangoproject.com · GitHub
Prepped for upcoming security releases and sent pre-notification emails
djangoci.com was down Thursday and Friday, this made reviewing/merging PRs for django difficult.

sarahboyce · March 10, 2025, 7:08am

Week ending 2025-03-09 (Week 10)

Triaged

#36222 (ExclusionConstraint.validate() crashes when exclude includes a field in condition.) – Django (accepted)
#36221 (Greatest() argument count guards do not align with certain database backends) – Django (wontfix)
#36223 (Iframe Issue in django Project for PowerBI cloud reports) – Django (invalid)
#36224 (django-admin shell raises AppRegistryNotReady) – Django (accepted)
#36225 (User profile models with nullable emails cannot use createsuperuser command) – Django (duplicate)
#36226 (Only PBKDF2PasswordHasher supports str and bytes password) – Django (accepted)
https://code.djangoproject.com/ticket/36227 (accepted)
#36229 (Forced colors mode icon color in default_urlconf “congratulations” view) – Django (accepted)
https://code.djangoproject.com/ticket/36230 (accepted)
https://code.djangoproject.com/ticket/36228 (invalid)
#36235 (RelatedManager.all().get_or_create() does not work) – Django (accepted)

Reviewed

Authored

Other/Misc

Engaged in security topics
Released Django 5.1.7, 5.0.13, and 4.2.20

sarahboyce · March 17, 2025, 7:37am

Week ending 2025-03-16 (Week 11)

Triaged

#36239 (ManyToManyField check error with invalid "to" when passing through/through_fields) – Django (accepted)
#36240 (Store original choices Enum on the model field) – Django (wontfix)
#36243 (Potential issue with the defaults.server_error method) – Django (needsinfo)
#36225 (USERNAME_FIELD must be unique in order to use createsuperuser command) – Django (accepted)
#36245 (Implement Configurable Content Type Parsing `request.data` to Modernize the HTTPRequest) – Django (duplicate)
#36246 (BaseGeometryWidget.deserialize() does not catch GDALException from malformed GeoJSON) – Django (accepted)
#36249 (Typo in KT() example in docs/topics/db/queries.txt) – Django (accepted)
https://code.djangoproject.com/ticket/36247 (accepted)
#36251 (BaseInlineFormSet modifies Meta.fields of passed form class if Meta.fields is type list) – Django (accepted)
https://code.djangoproject.com/ticket/36250 (accepted)
https://code.djangoproject.com/ticket/36253 (duplicate)
#36254 (Documentation 'Selecting the current time zone' code error) – Django (accepted)

Reviewed

Authored

Other/Misc

Discussed and gave feedback on Added file fields for a release's tarball and checksum by bmispelon · Pull Request #1801 · django/djangoproject.com · GitHub
Setup locally and gave feedback on GitHub - nessita/checklist-generator
Did a talk on doing your first Django contribution for Djangonaut Space: https://www.youtube.com/watch?v=A-3eTMNQ3rM
Investigated the mixture of languages in built docs on docs.djangoproject.com

sarahboyce · March 24, 2025, 7:32am

Week ending 2025-03-23 (Week 12)

Triaged

#36255 (Rename Django Admin's "Go" button and remove its title attribute) – Django (accepted)
#36256 (Remove unnecessary title attributes from the Django Admin) – Django (accepted)
#36259 (Unsaved related object with primary_key=True field does not raise unsaved object error) – Django (accepted)
#36262 (GeneratedField.db_persist defaults to None but is required to be set as either True or False) – Django (accepted)
#36264 (keep_parents=True does not exclude proxy neighbors) – Django (invalid → accepted)
#36265 (Add support for serializing zoneinfo.ZoneInfo objects in migrations) – Django (accepted)
https://code.djangoproject.com/ticket/36266 (accepted)
https://code.djangoproject.com/ticket/36269 (accepted)
#36271 ({% extends %} tag causes AttributeError if origin is None and path is relative) – Django (accepted)

Reviewed

Authored

Other/Misc

Added Jake Howard to the Django security team
Released Django 5.2 rc1: Django 5.2 release candidate 1 released | Weblog | Django
Documented a welcome email for new members of the Django security team
Documented basic guidelines for what to do if a report is disclosed publicly
Drafted content for Django to be featured in the JetBrains blog.
Gave some GSoC feedback:
- GSoC 25 Proposal Draft: Automate Processes Within Django Contribution Workflow - #4 by sarahboyce
- Automating Django Contribution Workflow – Input Needed

sarahboyce · March 31, 2025, 7:14am

Week ending 2025-03-30 (Week 13)

Triaged

#36272 ([MacOS] geoip aka libgeoip disabled on 2024-12-12) – Django (accepted)
#36276 (Omit size=None from ArrayField.deconstruct()) – Django (accepted)
#36277 (Add GeneratedField(db_persist=False) support on PostgreSQL 18+) – Django (someday/maybe)
#36279 (translatable path without a name attribute does not translate in django.urls.base.translate_url) – Django (accepted)
#36280 (Replace cm.exception.messages with assertRaisesMessage() in tests) – Django (accepted)

Reviewed

Authored

Other/Misc

Feedback of GSoC: GSoC 25 Proposal Draft: Automate Processes Within Django Contribution Workflow - #6 by sarahboyce
Prepped for upcoming security release
Engaged in security reports

sarahboyce · April 7, 2025, 6:27am

Week ending 2025-04-06 (Week 14)

Triaged

#36283 (Filtering sidebar jump out of context when navigation sidebar is visible.) – Django (accepted)
#36289 (Postgres bulk_create error when geometry is null or a different SRID) – Django (accepted)
#36294 (Offline doc file django-docs-5.2-en.zip has "Django 5.1.7 documentation" as Title) – Django (invalid)
#36291 (ManyToManyField empty when setting related_name and related_query_name to "+") – Django (worksforme)
#36295 (Unable to Override GenericForeignKey in Inherited Abstract Class) – Django (accepted)
#36296 (Constraint validation of models with generated fields using Q crashes with AttributeError: 'Q' object has no attribute 'replace_expressions') – Django (duplicate)
#36299 (Calling alias after values_list adds the aliased value to the result set) – Django (accepted)
#36300 (request.META["HTTP_" + self.header] in RemoteUserMiddleware __acall__ does not sound correct) – Django (needsinfo)

Reviewed

Authored

Other/Misc

Engaged in security reports
Updated [5.2.x] Updated translations from Transifex. by sarahboyce · Pull Request #19311 · django/django · GitHub to be ready for review
Released Django 5.1.8 and 5.0.14: Django security releases issued: 5.1.8 and 5.0.14 | Weblog | Django
Released Django 5.2: Django 5.2 released | Weblog | Django
Investigated djangoproject.com overwriting file issue: (see Updating Release.tarball with a smaller file does not truncate the previous file · Issue #2015 · django/djangoproject.com · GitHub)

sarahboyce · April 14, 2025, 7:00am

Week ending 2025-04-13 (Week 15)

Had a day off this week

Triaged

#36302 (Reusable form templates documentation is incomplete and results in an error when used as documented) – Django (duplicate)
#36308 (Parallel testing fails reporting unit test combining subTest and assertNumQueries) – Django (needsinfo)
#36307 (Support passing depth to naturaltime, timesince and timeuntil filters) – Django (accepted)
#36311 (Inconsistent spelling in docs for a few words) – Django (accepted)
#36309 (EmailAlternative is not serializable) – Django (accepted)
#36319 (facing issue where when i change a model field from PENDING to VERIFIED for some reason on next set of code some VERIFIED are changing back to PENDING) – Django (invalid)

Reviewed

Authored

Other/Misc

Engaged in security topics
Discussed Django CSP PR with Rob and Natalia
Did some admin for the triage and review team
DjangoCon Europe talk practice

sarahboyce · April 26, 2025, 8:07am

Week ending 2025-04-20 (Week 16)

Week before DjangoCon Europe
I had a day off on Friday for Easter Friday

Triaged

#36322 ("Enhance manage.py CLI: Suggest alternatives for unknown commands (typo correction)") – Django (duplicate)
#36326 (Add support for CompositePrimaryKey in QuerySet.raw()) – Django (accepted)
#36331 (Object tools moved out of content block breaks custom admin templates) – Django (accepted)
#36330 (Allow specifying DATABASES["default"]["TEST"]["ENGINE"] and ["TEST"]["OPTIONS"]) – Django (wontfix)
#36332 (Usage notes and examples for HttpRequest.path and HttpRequest.path_info in docs are mixed up) – Django (accepted)

Reviewed

Authored

Other/Misc

Reviewed GSoC proposals
Engaged in security reports
DjangoCon Europe talk practise
Investigated selenium test failures

sarahboyce · April 29, 2025, 7:31am

Week ending 2025-04-27 (Week 17)

I was in DjangoCon Europe this week
Was really lovely seeing people from the community and there were some fantastic talks

Triaged

#36354 (Remove unneeded JS from contrib.admin password forms) – Django (accepted)
#36353 (Add `content` to `Script` media asset) – Django (wontfix)
#36352 (values() raises a FieldError when multiple values() of annotated values are chained) – Django (needsinfo)
#36352 (values() raises a FieldError when multiple values() of annotated values are chained) – Django (needsinfo → accepted)

Reviewed

Other/Misc

Helped individuals contribute to Django or get started with code review for the project
Discussed GSoC proposals

sarahboyce · May 5, 2025, 8:25am

Week ending 2025-05-04 (Week 18)

Recovering from DjangoCon EU where I caught a cold
Short week last week and I think will also take it easy this week

Triaged

#36358 (Tables with composite primary keys including integer columns improperly get introspected as AutoField on SQLite) – Django (accepted)
#17834 (ETag generated from empty content can break http caching) – Django (fixed)
#36363 (List duplicated fields in '(admin.E012) There are duplicate field(s)' error message.) – Django (accepted)

Reviewed

Other/Misc

Shared contacts with the DSF from DjangoCon Europe of potential sponsors or sponsors in-kind
Engaged in security topics
Discussed Djangonaut Space future governance

sarahboyce · May 12, 2025, 7:24am

Week ending 2025-05-11 (Week 19)

I was on sick leave for the first half of the week but feeling better!

Triaged

#36367 (Improving the accessibility of the date_hierarchy layout in the admin.) – Django (accepted)
#36366 (Improving the accessibility of the pagination layout in the admin.) – Django (accepted)
#36364 (Migration executor cannot handle AlterField operation on ForeignObject) – Django (accepted)
#35518 (Avoid regex search for simple route patterns) – Django (accepted)
#36375 (Template rendering error for user model on admin interface) – Django (worksforme)
#36376 (Use argparse colorized help on Python 3.14+) – Django (someday/maybe)
#36378 (Error message in MinimumLengthValidator.get_error_message is not translated) – Django (invalid)

Reviewed

Other/Misc

Engaged in security reports

sarahboyce · May 19, 2025, 7:19am

Week ending 2025-05-18 (Week 20)

Triaged

#36381 (Improve tutorial's voting template to show a message when no choices are available) – Django (wontfix)
#36379 (add TSTZRANGE postgres function to django.contrib.postgres.functions) – Django (wontfix)
#36383 (Improve migration serialization of functools.partial and functools.partialmethod) – Django (accepted)
#36372 (refresh_from_db with explicit fields can't clear a relation by it's query name unless it's prefetched) – Django (wontfix)
#36384 (update_dimension_fields blocks getting model instances from the database when the external storage has issues) – Django (worksforme)
#36386 (New styles for admin INFO and DEBUG messages) – Django (accepted)
#36387 (Offline doc file django-docs-4.2-en.zip has "Django 5.2 documentation" as Title) – Django (invalid)
https://code.djangoproject.com/ticket/36388 (accepted)
#5899 (Allow admin fieldsets to be collapsible but not initially collapsed) – Django (wontfix)
https://code.djangoproject.com/ticket/36390 (accepted)
#36389 (GenericRelation uses read connection for writes) – Django (accepted)
#36394 (Accessibility improvements for anchor tags in the admin page.) – Django (duplicate)
#36393 (_5C in pk of related model turns into back slash (\) in admin url) – Django (duplicate)
#36395 (翻译错误) – Django (needsinfo)
#36396 (Chinese document translation errors) – Django (invalid)
#36399 (Missing cookies when using ASGI and HTTP/2) – Django (accepted)
#36398 (select_for_update(of=...) ignores "self" when using values_list() when not selecting a column from the model) – Django (needsinfo)
https://code.djangoproject.com/ticket/13879 (wontfix)

Reviewed

Other/Misc

Engaged in security topics
Reviewed fellow related documents
Represented Django in application for GitHub Secure Open Source Fund

Topic		Replies	Views
Django Fellow Report - Sarah - 2024 Django Internals	43	1429	January 6, 2025
Django Fellow Report - Natalia - 2025 Django Internals	22	654	June 16, 2025
Django Fellow Report - Natalia Django Internals	49	2641	January 9, 2024
Django Updates: January 2025 Show & Tell	0	73	February 3, 2025
2024 Django Developers Survey Announcements	10	318	January 9, 2025