Who contributed to Django on July 2, 2026?

2 developers shipped this update, including medmunds and nessita.

What were the notable Django updates?

Fixed #34753 -- Extended security and safety remarks in email topics docs, Fixed #34753 -- Updated documentation on email safety, and Fixed #2685 -- Switched update_docs management command to use html builder.

@django

Python's batteries-included web framework

github ↗

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO DOCS OVERHAUL FIXES EMAIL INJECTION GAPS AND BUILD PIPELINE

By RepoJournal · Filed 06:00 UTC on July 2, 2026 · About Django

2 people shipped this

medmunds @medmunds 1 cited

nessita @nessita 1 cited

Django's documentation team shipped critical updates to email safety guidance while fixing a broken docs build pipeline that's been blocking releases.

The core docs got a significant refresh on email handling [1][2], reworking the outdated "Preventing header injection" section with new guidance on safely formatting email addresses with variable display names to block injection attacks. The update clarifies what Django itself prevents (CRLF injection via Python) versus what developers need to handle in their own code. Meanwhile, the djangoproject.com build pipeline was failing because Django core removed the custom "djangohtml" Sphinx builder [3], leaving the docs update_docs management command broken on release builds. The site's maintainers switched to the standard HTML builder to fix the blockage. Both changes landed within 24 hours, suggesting the docs team is working in tight coordination with core.

Action items

→ Review email formatting patterns in your codebase against the new Django docs django/django [plan]
→ If you maintain Django docs tooling, migrate to standard Sphinx HTML builder before next release django/djangoproject.com [immediate]

References

[1] Fixed #34753 -- Extended security and safety remarks in email topics docs. django/django
[2] Fixed #34753 -- Updated documentation on email safety. ↗ django/django
[3] Fixed #2685 -- Switched update_docs management command to use html builder ↗ django/djangoproject.com

Quick answers

What shipped in Django on July 2, 2026?: Django's documentation team shipped critical updates to email safety guidance while fixing a broken docs build pipeline that's been blocking releases. In total, 2 commits and 2 pull requests landed.
Who contributed to Django on July 2, 2026?: 2 developers shipped this update, including medmunds and nessita.
What were the notable Django updates?: Fixed #34753 -- Extended security and safety remarks in email topics docs, Fixed #34753 -- Updated documentation on email safety, and Fixed #2685 -- Switched update_docs management command to use html builder.

ALL QUIET ACROSS THE STACK

Django's benchmark suite logged routine performance metrics overnight with no breaking changes or security advisories in play.

python 1 shipped 1-min read

@django 3 days ago

DJANGO ADMIN PERMISSION CHECKS NOW CONSISTENT ACROSS ALL VIEWS

Django fixed a permission inconsistency in admin views that could have exposed data to staff users lacking proper access.

python 15 shipped 1-min read

@django 4 days ago

DJANGO TIGHTENS THREADING FOR ASYNC ERROR HANDLING, GOVERNANCE FRAMEWORK SIMPLIFIED

Django patches a critical threading issue in async error response rendering that could cause database pool exhaustion and deadlock.

python 16 shipped 2-min read

@django 5 days ago

DJANGO 6.1 SUPPORT DATES SET AS DOCUMENTATION CLEANUP CONTINUES

Django pins end-of-support windows for 6.1 while the core team documents shared features between ModelAdmin and InlineModelAdmin.

python 8 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.