Week ending 2026-10-25 (Week 43)
I focused on applying some contribution limits to Django to limit irresponsible AI contribution led behavior. This was also a security heavy week reviewing reports.
At home we were still dealing with coughs and colds - I think we’re out of the woods now though 
Triaged
- #37428 (Add support for HTTP QUERY method to CacheMiddleware/@cache_page) – Django (someday/maybe)
- #37416 (Migrations are not recorded atomically) – Django (accepted)
- #37429 (Cannot create multipart alternative mail with subparts) – Django (needsinfo)
- #37441 (Silently dropped CSP directive when nonce sentinel is the only value) – Django (duplicate)
- #37395 (Nonce-only CSP directives are omitted when the nonce is unused) – Django (accepted)
- #37437 (PostgreSQL connections time out when both assume_role and connection pooling are enabled) – Django (accepted)
- #37407 (UUIDTextMixin.process_rhs() mutates the lookup's rhs in place corrupting repeated compilation) – Django (accepted)
- #37445 (Invalid Content-Type header returns HTTP 500 instead of 400) – Django (accepted)
- #37450 (Template lexer fails on comment/verbatim tags without whitespace after {%) – Django (accepted)
- #37448 (Log sync/async adaptations in MiddlewareMixin.__acall__()) – Django (accepted)
- #37449 (Update Punjabi (pa) name_local to use its native script) – Django (accepted)
- #37446 (DatabaseError ignored in Q.check() during validate_constraints()) – Django (accepted)
- #37439 (DatabaseCache.touch() can revive expired cache entries) – Django (accepted)
Reviewed
- Make publish workflow use just-committed result by jacobtylerwalls · Pull Request #105 · django/django-asv · GitHub
- Fixed #37407 -- Prevented UUIDTextMixin from mutating the lookup in place. by cliffordgama · Pull Request #22102 · django/django · GitHub
- Fixed #37280 -- Marked CSP nonce responses Cache-Control: private by shubhamsingh941889 · Pull Request #21850 · django/django · GitHub
- Fixed test_asgeojson() on MySQL 9.5. by jacobtylerwalls · Pull Request #21887 · django/django · GitHub
- Fixed #37450 -- Fixed lexing of comment/verbatim tags without spaces. by spokodev · Pull Request #22189 · django/django · GitHub
- Fixed #37449 -- Corrected local name for Punjabi in django/conf/locale/__init__.py. by gerry132 · Pull Request #22187 · django/django · GitHub
- Fixed #37427 -- Kept generic relation queryset routing lazy. by lyova24 · Pull Request #22154 · django/django · GitHub
Authored
- Fixed #35899 -- Allowed multiline template tags. by sarahboyce · Pull Request #21982 · django/django · GitHub
- Fixed #37272 -- Documented the annual release cycle within the release process docs. by sarahboyce · Pull Request #21764 · django/django · GitHub
- Fixed #37426 -- Added a pull request limit for new contributors. by sarahboyce · Pull Request #22172 · django/django · GitHub
- Fixed #37419 -- Included CSP nonces in headers for streaming responses. by sarahboyce · Pull Request #22137 · django/django · GitHub
- #37440 (Clarify directory permission requirements for file-based sessions) – Django
- Restrict assignment before a ticket is accepted · Issue #316 · django/code.djangoproject.com · GitHub
- Restrict the total number of "Accepted" Trac tickets allowed to be assigned to a contributor · Issue #317 · django/code.djangoproject.com · GitHub
- Proposed changes to Trac to address problematic contribution patterns - please vote - #22 by sarahboyce
- Documented the "Low" ticket severity in triaging docs. by sarahboyce · Pull Request #22180 · django/django · GitHub
- Fixed #37423 -- Enforced integer expiry times for file-based sessions. by sarahboyce · Pull Request #22143 · django/django · GitHub
- #37444 (Prevent overly broad destination permissions during file_move_safe() fallback copying) – Django
- Fixed #37444 -- Restricted destination permissions during file_move_safe() fallback copying. by sarahboyce · Pull Request #22183 · django/django · GitHub
- Enforced ticket assignment limits and triage restrictions. by sarahboyce · Pull Request #318 · django/code.djangoproject.com · GitHub
Other/Misc
- Collected project ideas for GSoC
- Engaged in 6 security issues
- Added severity “Low” to Trac