RepoJournal
Django

@django

Python's batteries-included web framework

Pick a date

  1. Thu 21 may
  2. Sat 23 may
  3. Sun 24 may
  4. Mon 25 may
  5. Tue 26 may
  6. Wed 27 may
  7. Thu 28 may
  8. Fri 29 may
  9. Sat 30 may
  10. Sun 31 may
  11. Mon 1 jun
  12. Mon 8 jun
  13. Tue 9 jun
  14. Wed 10 jun
  15. Thu 11 jun
  16. Fri 12 jun
  17. Sat 13 jun
  18. Sun 14 jun
  19. Mon 15 jun
  20. Tue 16 jun
  21. Wed 17 jun
  22. Thu 18 jun
  23. Fri 19 jun
  24. Sat 27 jun
  25. Sun 28 jun
  26. Mon 29 jun
  27. Tue 30 jun
  28. Wed 1 jul
  29. Thu 2 jul
  30. Today 3 jul

The Wire · Showcase

DJANGO FIXES PREFETCH_RELATED ASYNC TRAP AND ADMIN DEFAULT DISPLAY BUG

By RepoJournal · Filed · About Django

Django patched a critical async iteration bug that silently multiplies database queries when prefetch_related is used without an explicit chunk_size parameter.

The async iterator bug [1] is the kind of silent performance killer that survives code review: QuerySet.aiterator() was missing the same validation that the synchronous iterator() received months ago, so developers using prefetch_related could accidentally trigger a query explosion without any warning. This lands alongside a fix [2] to the admin interface, where database default values now correctly display as empty rather than showing raw defaults, improving the user experience for anyone managing records with computed fields. The django/djangoproject.com team also shipped FontAwesome icon replacements [3] for the dark mode toggle, removing inline SVG sprites from the base template for cleaner rendering. On the dependency front, the site bumped codecov-action to 6.0.1 [4] which patches a template injection vulnerability (VULN-1652), requests to 2.34.2 [5], and sentry-sdk to 2.60.0 [6] for improved gen_ai span handling.

Action items

References

  1. [1] Fixed #37143 -- Added missing chunk_size=None check to QuerySet.aiterator(). ↗ django/django
  2. [2] Fixed #37168 -- Made admin display database defaults as empty values. ↗ django/django
  3. [3] Changed dark mode theme switcher to FontAwesome icons. (#2652) django/djangoproject.com
  4. [4] Bump codecov/codecov-action from 6 to 6.0.1 ↗ django/djangoproject.com
  5. [5] Bump requests from 2.33.1 to 2.34.2 in /requirements ↗ django/djangoproject.com
  6. [6] Bump sentry-sdk from 2.59.0 to 2.60.0 in /requirements ↗ django/djangoproject.com

FAQ

What changed in Django on June 19, 2026?
Django patched a critical async iteration bug that silently multiplies database queries when prefetch_related is used without an explicit chunk_size parameter.
What should Django teams do about it?
Review any code using prefetch_related with aiterator() - ensure chunk_size is explicitly set to avoid query spikes • Merge the admin defaults display fix into your next patch release • Update codecov-action to 6.0.1 to close template injection vulnerability
Which Django repositories shipped on June 19, 2026?
django/django, django/djangoproject.com

Related across the cluster

For your repos

The showcase is a teaser.
Your wire is the product.

Same engine. Different stack. Below: what changes when the wire is yours.

Showcase wire

  • •14 famous open source orgs
  • •One wire per day
  • •Public, generic
  • •Read on the web, when you remember

Your wire

  • →Up to 1,500 of your repos - orgs, deps, vendors
  • →Morning and evening briefs
  • →Action items routed to your team
  • →Slack delivery, email, breaking-news CVE alerts

Want a hands-on demo first? Ask a current user for an invite link.