RepoJournal
Django @django
160 wires and counting

$ follow Django

Keep up with Django in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-09
stories 7
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

DJANGO PATCHES GITHUB ACTION RACE CONDITION BREAKING CONCURRENT PRs

By RepoJournal · Filed · About Django · Composed from the cited sources · methodology

charettes
1 person shipped this
charettes @charettes 1 cited

Django fixed a critical concurrency bug in its labels workflow where edits on any pull request could kill another PR's entire label processing pipeline.

The labels.yml GitHub Action was using pull_request_target with github.ref hardcoded to main, meaning concurrent PR edits would trigger the same workflow run and cancel each other [1]. This was a follow-up fix to an earlier commit that didn't fully solve the problem. The Django team also caught and documented two missing release notes: one for Postgres 18+ virtual column support that slipped through when Oracle stored column support was added [2] [3]. Over on djangoproject.com, the team is moving to include patch links in CVE JSON records, matching Python's approach and addressing scoring penalties from the CNA [4]. These are all internal infrastructure improvements, not user-facing changes, so your deployments stay clean.

$ ls django/reviews/ # the step-back reads

the week in review CVE records can scope regressions per branch the month in review Django drops PostgreSQL 15 and PostGIS 3.2
Full archive → Weekly reviews →

Quick answers

What shipped in Django on July 9, 2026?
Django fixed a critical concurrency bug in its labels workflow where edits on any pull request could kill another PR's entire label processing pipeline. In total, 4 commits and 3 pull requests landed.
Who contributed to Django on July 9, 2026?
1 developer shipped this update, including charettes.
What were the notable Django updates?
Fixed concurrency in labels.yml GitHub Action, Refs #36277 -- Added release note for Postgres 18+ virtual column, and Refs #36277 -- Added missing release note for Postgres 18+ virtual column.
♥

$ log @django --recent

Ubuntu-latest results land in the Django benchmark suite 1 shipped cached_property deprecation lands, asgiref 3.13.0 ships 13 shipped ThreadSensitiveContext gains nesting, Q.check() escapes logged DB errors 22 shipped Windows CI gets gettext, djangosnippets drops a dead dependency 8 shipped

$ log --all # elsewhere on the wire

Alignment & Post-training GSM8K scoring parses answers as exact decimals AI Red Teaming PyRIT closes a judge-spoofing hole, promptfoo accepts Langfuse v6

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.