RepoJournal
Django

@django

Python's batteries-included web framework

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO DOCUMENTATION STANDARDS CLEANUP UNDERWAY AS CVE METADATA HANDLING TIGHTENS

By RepoJournal · Filed · About Django

Django's core team is systematically removing version numbers from outside deprecation blocks while the website team fixes critical security CVE metadata rendering issues.

The documentation cleanup is a deliberate push to enforce contributing guidelines [1]. Version numbers no longer appear in example outputs [2] and deprecated notices have been repositioned for clarity [3], with a second pass already underway to catch remaining violations [4]. Over on djangoproject.com, the security infrastructure got tighter: CVE descriptions now properly include the word 'Django' before version ranges [5], inline code backticks convert to HTML tags instead of rendering raw, and the tuple helper text bug is fixed [6]. The website team also added patch verification requests to the security release checklist [7] and improved how CWE and CAPEC IDs are handled in CVE metadata [8]. Version bumps across pre-commit, npm, and GitHub Actions suggest a feature release cycle is underway [9]. This is all infrastructure work, not features, but it matters: tighter security docs mean clearer vulnerability disclosures, and stricter documentation standards prevent future confusion.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Refs #35514 -- Removed specific Django versions from outside deprecated blocks. django/django
  2. [2] Removed version numbers from example tox -l output. django/django
  3. [3] Refs #35870 -- Moved deprecated notice at the bottom for USE_BLANK_CHOICE_DASH. django/django
  4. [4] Refs #35870, Refs #35514 -- Fixed a couple of issues for deprecation notices in 6.1 docs. ↗ django/django
  5. [5] [checklists] Fixed CVE description to include product name and render inline code in HTML. ↗ django/djangoproject.com
  6. [6] [checklists] Fixed CVE description to include product name and render inline code in HTML. django/djangoproject.com
  7. [7] [checklists] Include request for patch verification in security checklist. django/djangoproject.com
  8. [8] [checklists] Handle lists of CWE and CAPEC ids when building CVE metadata. django/djangoproject.com
  9. [9] Bumped versions in pre-commit, npm, and GitHub Actions configurations. ↗ django/django

Quick answers

What shipped in Django on May 27, 2026?
Django's core team is systematically removing version numbers from outside deprecation blocks while the website team fixes critical security CVE metadata rendering issues. In total, 11 commits and 3 pull requests landed.
Who contributed to Django on May 27, 2026?
2 developers shipped this update, including nessita and jacobtylerwalls.
What were the notable Django updates?
Refs #35514 -- Removed specific Django versions from outside deprecated blocks, Removed version numbers from example tox -l output, and Refs #35870 -- Moved deprecated notice at the bottom for USE_BLANK_CHOICE_DASH.

More from @django

Daily updates, in your inbox

Follow Django

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?