Who contributed to Django on May 19, 2026?

2 developers shipped this update, including jacobtylerwalls and codingjoe.

What were the notable Django updates?

Fixed #37097 -- Made Query.clear_ordering() clear ordering on combined queries also, Refs #37097 -- Removed compilation-time order clearing on combined queries on Oracle, and Fixed #36825 -- Included CSP nonce in templates if available.

@django

Python's batteries-included web framework

github ↗

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO PATCHES CRITICAL QUERY ORDERING BUG AFFECTING UNIONS

By RepoJournal · Filed 06:00 UTC on May 19, 2026 · About Django

2 people shipped this

jacobtylerwalls @jacobtylerwalls 1 cited

codingjoe @codingjoe 1 cited

Django fixed a regression in combined queries that broke ordering on union, intersection, and difference operations, potentially causing incorrect result sets in production.

The fix [1] addresses ticket #37097, a regression introduced in commit 087bb9e8f that drove traffic into an existing error path. When using union(), intersect(), or difference() operations with explicit order_by() calls, Django was failing to properly clear ordering on the inner combined queries, leading to unexpected result behavior. The team also removed redundant compilation-time order clearing on Oracle [2], which was handling the same issue inefficiently. In parallel, Django shipped a security-focused update [3] adding CSP nonce support to error pages, admin templates, and registration forms. All explicit script, link, and style elements in these templates now use the {% csp_nonce %} tag when available, hardening Django's default templates against inline script injection attacks.

Action items

→ Review any code using union/intersect/difference with order_by and test result ordering django/django [immediate]
→ Update to latest Django patch to get CSP nonce support in admin and error pages django/django [plan]

References

[1] Fixed #37097 -- Made Query.clear_ordering() clear ordering on combined queries also. ↗ django/django
[2] Refs #37097 -- Removed compilation-time order clearing on combined queries on Oracle. django/django
[3] Fixed #36825 -- Included CSP nonce in templates if available. ↗ django/django

Quick answers

What shipped in Django on May 19, 2026?: Django fixed a regression in combined queries that broke ordering on union, intersection, and difference operations, potentially causing incorrect result sets in production. In total, 5 commits and 2 pull requests landed.
Who contributed to Django on May 19, 2026?: 2 developers shipped this update, including jacobtylerwalls and codingjoe.
What were the notable Django updates?: Fixed #37097 -- Made Query.clear_ordering() clear ordering on combined queries also, Refs #37097 -- Removed compilation-time order clearing on combined queries on Oracle, and Fixed #36825 -- Included CSP nonce in templates if available.

DJANGO ADMIN PERMISSION CHECKS NOW CONSISTENT ACROSS ALL VIEWS

Django fixed a permission inconsistency in admin views that could have exposed data to staff users lacking proper access.

python 15 shipped 1-min read

@django 1 day ago

DJANGO TIGHTENS THREADING FOR ASYNC ERROR HANDLING, GOVERNANCE FRAMEWORK SIMPLIFIED

Django patches a critical threading issue in async error response rendering that could cause database pool exhaustion and deadlock.

python 16 shipped 2-min read

@django 2 days ago

DJANGO 6.1 SUPPORT DATES SET AS DOCUMENTATION CLEANUP CONTINUES

Django pins end-of-support windows for 6.1 while the core team documents shared features between ModelAdmin and InlineModelAdmin.

python 8 shipped 1-min read

@django 3 days ago

DJANGO KILLS SIGNUP BOT ATTACK WITH RECAPTCHA, DAPHNE GAINS WEBSOCKET CONTROL

The Django project site plugged its only unprotected registration form after automated signups tanked email reputation, while Daphne now lets you configure WebSocket message sizes in development.

python 13 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.