Who contributed to Django on May 29, 2026?

4 developers shipped this update, including babbitt, nessita, github-actions[bot], and dryan.

What were the notable Django updates?

Removed unnecessary direct dev dependency on puppeteer, Fixed #36225 - Made implementation of natural_key optional on User Model Manager, and Fixed #36225 -- Coped with lack of get_by_natural_key() in createsuperuser.

@django

Python's batteries-included web framework

github ↗

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO CLEANS UP BUILD DEPENDENCIES WHILE FIXING CUSTOM USER MODEL EDGE CASES

By RepoJournal · Filed 06:00 UTC on May 29, 2026 · About Django

4 people shipped this

babbitt @babbitt 1 cited

nessita @nessita 1 cited

github-actions[bot] @github-actions[bot] 1 cited

dryan @dryan 1 cited

Django core removed a mistaken puppeteer direct dependency that was supposed to be managed through npm overrides, while simultaneously fixing createsuperuser to handle custom user models without natural keys.

The build pipeline got lighter today with the removal of an unnecessary puppeteer dependency [1] that was added in error. The original intent was to pin versions through npm overrides, not direct dependencies, creating duplicate package entries that npm ls flagged. Meanwhile, on the user model front, Django fixed a critical issue where createsuperuser would fail against custom user implementations that lack a natural_key method [2] [3]. This matters because nullable username fields are a documented and supported configuration, yet the command's uniqueness check was hardcoded to call get_by_natural_key(), breaking legitimate setups. The djangoproject.com team also tightened security release checklists by eliminating severity duplication in notifications [4] [5]. Previously, announcing five low-severity fixes would read as 'low, low, low, low, and low' - now it collapses cleanly. Code of Conduct expanded its scope to include Djangonaut Space as an affiliated program [7], formalized in updated documentation [6] [8].

Action items

→ Pull the latest django/django main if you maintain custom user models django/django [plan]
→ Review your npm build output to verify no duplicate puppeteer entries remain django/django [monitor]

References

[1] Removed unnecessary direct dev dependency on puppeteer. django/django
[2] Fixed #36225 - Made implementation of natural_key optional on User Model Manager ↗ django/django
[3] Fixed #36225 -- Coped with lack of get_by_natural_key() in createsuperuser. django/django
[4] [checklists] Ensure that issue severity is not duplicated in prenotification django/djangoproject.com
[5] [checklists] Remove severity duplication in security release checklist ↗ django/djangoproject.com
[6] Update changelog ↗ django/code-of-conduct
[7] Add Djangonaut Space as an affiliated program ↗ django/code-of-conduct
[8] Merge pull request #107 from django/changelog-update-14 django/code-of-conduct

Quick answers

What shipped in Django on May 29, 2026?: Django core removed a mistaken puppeteer direct dependency that was supposed to be managed through npm overrides, while simultaneously fixing createsuperuser to handle custom user models without natural keys. In total, 8 commits and 5 pull requests landed.
Who contributed to Django on May 29, 2026?: 4 developers shipped this update, including babbitt, nessita, github-actions[bot], and dryan.
What were the notable Django updates?: Removed unnecessary direct dev dependency on puppeteer, Fixed #36225 - Made implementation of natural_key optional on User Model Manager, and Fixed #36225 -- Coped with lack of get_by_natural_key() in createsuperuser.

DJANGO ADMIN PERMISSION CHECKS NOW CONSISTENT ACROSS ALL VIEWS

Django fixed a permission inconsistency in admin views that could have exposed data to staff users lacking proper access.

python 15 shipped 1-min read

@django 1 day ago

DJANGO TIGHTENS THREADING FOR ASYNC ERROR HANDLING, GOVERNANCE FRAMEWORK SIMPLIFIED

Django patches a critical threading issue in async error response rendering that could cause database pool exhaustion and deadlock.

python 16 shipped 2-min read

@django 2 days ago

DJANGO 6.1 SUPPORT DATES SET AS DOCUMENTATION CLEANUP CONTINUES

Django pins end-of-support windows for 6.1 while the core team documents shared features between ModelAdmin and InlineModelAdmin.

python 8 shipped 1-min read

@django 3 days ago

DJANGO KILLS SIGNUP BOT ATTACK WITH RECAPTCHA, DAPHNE GAINS WEBSOCKET CONTROL

The Django project site plugged its only unprotected registration form after automated signups tanked email reputation, while Daphne now lets you configure WebSocket message sizes in development.

python 13 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.