RepoJournal
Django

@django

Python's batteries-included web framework

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO FIXES MIGRATION CRASH, TIGHTENS COLLECTSTATIC

By RepoJournal · Filed · About Django

1 person shipped this

Django's sqlmigrate command no longer crashes when renaming models with self-referential foreign keys, while the build system cuts false positives in static file collection.

The migration engine had a critical blind spot: when collecting SQL for operations like sqlmigrate, RenameModel operations weren't recording table renames, so subsequent field alterations tried to introspect tables that didn't exist yet [1]. On MySQL this threw an error; on PostgreSQL it silently dropped self-referential foreign key constraints. That's fixed. Simultaneously, the collectstatic command got smarter about what it ignores [2]. It now treats strings as legitimate content in both CSS and JavaScript, drastically reducing false positives where import statements in code got mangled during collection. Both patches land in the next release. The djangoproject.com site itself picked up security hygiene improvements, adding PyPI token revocation to the release checklist [3] and fixing deprecated HTML attributes in the module index [4]. Release documentation also got hardened with formal security standards [5], signaling tighter controls on how Django ships.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Fixed #33185 -- Fixed sqlmigrate crash for RenameModel with a self-referential foreign key. django/django
  2. [2] Fixed #36969, #35371 -- Reduced false positives in strings during collectstatic. ↗ django/django
  3. [3] [checklists] Added PyPI token revocation to checklist. django/djangoproject.com
  4. [4] Replaced deprecated name attribute with id in py-modindex.html. django/djangoproject.com
  5. [5] Doc'd security standards in howto-release-django.txt. django/django

Quick answers

What shipped in Django on June 12, 2026?
Django's sqlmigrate command no longer crashes when renaming models with self-referential foreign keys, while the build system cuts false positives in static file collection. In total, 11 commits and 9 pull requests landed.
Who contributed to Django on June 12, 2026?
1 developer shipped this update, including blighj.
What were the notable Django updates?
Fixed #33185 -- Fixed sqlmigrate crash for RenameModel with a self-referential foreign key, Fixed #36969, #35371 -- Reduced false positives in strings during collectstatic, and [checklists] Added PyPI token revocation to checklist.

More from @django

Daily updates, in your inbox

Follow Django

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.