RepoJournal
Django

@django

Python's batteries-included web framework

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Thu 18 jun
  2. Fri 19 jun
  3. Sat 27 jun
  4. Sun 28 jun
  5. Mon 29 jun
  6. Tue 30 jun
  7. Wed 1 jul
  8. Thu 2 jul
  9. Fri 3 jul
  10. Sat 4 jul
  11. Sun 5 jul
  12. Tue 7 jul
  13. Wed 8 jul
  14. Thu 9 jul
  15. Fri 10 jul
  16. Sat 11 jul
  17. Mon 13 jul
  18. Tue 14 jul
  19. Wed 15 jul
  20. Thu 16 jul
  21. Fri 17 jul
  22. Sat 18 jul
  23. Sun 19 jul
  24. Mon 20 jul
  25. Tue 21 jul
  26. Wed 22 jul
  27. Thu 23 jul
  28. Fri 24 jul
  29. Sat 25 jul
  30. Mon 27 jul
Topics: Python Full archive →

The Wire · Showcase

DJANGO PATCHES GITHUB ACTION RACE CONDITION BREAKING CONCURRENT PRs

By RepoJournal · Filed · About Django

charettes
1 person shipped this
charettes @charettes 1 cited

Django fixed a critical concurrency bug in its labels workflow where edits on any pull request could kill another PR's entire label processing pipeline.

The labels.yml GitHub Action was using pull_request_target with github.ref hardcoded to main, meaning concurrent PR edits would trigger the same workflow run and cancel each other [1]. This was a follow-up fix to an earlier commit that didn't fully solve the problem. The Django team also caught and documented two missing release notes: one for Postgres 18+ virtual column support that slipped through when Oracle stored column support was added [2] [3]. Over on djangoproject.com, the team is moving to include patch links in CVE JSON records, matching Python's approach and addressing scoring penalties from the CNA [4]. These are all internal infrastructure improvements, not user-facing changes, so your deployments stay clean.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Fixed concurrency in labels.yml GitHub Action. django/django
  2. [2] Refs #36277 -- Added release note for Postgres 18+ virtual column. django/django
  3. [3] Refs #36277 -- Added missing release note for Postgres 18+ virtual column. ↗ django/django
  4. [4] [checklists] Include links to patches in CVE JSON django/djangoproject.com

Quick answers

What shipped in Django on July 9, 2026?
Django fixed a critical concurrency bug in its labels workflow where edits on any pull request could kill another PR's entire label processing pipeline. In total, 4 commits and 3 pull requests landed.
Who contributed to Django on July 9, 2026?
1 developer shipped this update, including charettes.
What were the notable Django updates?
Fixed concurrency in labels.yml GitHub Action, Refs #36277 -- Added release note for Postgres 18+ virtual column, and Refs #36277 -- Added missing release note for Postgres 18+ virtual column.

More from @django

Django @django

ALL QUIET ACROSS THE STACK

Django's benchmark suite logged routine performance metrics overnight with no breaking changes or security advisories in play.

python 1 shipped 1-min read
Django @django

DJANGO ADMIN PERMISSION CHECKS NOW CONSISTENT ACROSS ALL VIEWS

Django fixed a permission inconsistency in admin views that could have exposed data to staff users lacking proper access.

nessita jacobtylerwalls Mike Edmunds dependabot
python 15 shipped 1-min read
Django @django

DJANGO TIGHTENS THREADING FOR ASYNC ERROR HANDLING, GOVERNANCE FRAMEWORK SIMPLIFIED

Django patches a critical threading issue in async error response rendering that could cause database pool exhaustion and deadlock.

Jacob Walls carltongibson M0nd0R Tim Schilling
python 16 shipped 2-min read
Django @django

DJANGO 6.1 SUPPORT DATES SET AS DOCUMENTATION CLEANUP CONTINUES

Django pins end-of-support windows for 6.1 while the core team documents shared features between ModelAdmin and InlineModelAdmin.

James Aylett Jacob Walls Jeff Triplett tobiasmcnulty
python 8 shipped 1-min read

Daily updates, in your inbox

Follow Django

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

langchain-oss-model-profiles langchain-oss-model-profiles[bot] saoudrizwan
ai-agents 16 shipped 2-min read
Local LLMs Local LLMs

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

github-actions[bot] dhiltgen timkhronos Pascal +10
llms 125 shipped 1-min read
CachyOS @CachyOS

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

Piotr Gorski github-actions Vladislav Nepogodin ptr1337 +7
infra 97 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.

Benjamin Milde Alexander Gubarev lukaszsamson makoto-developer
elixir 10 shipped 1-min read
Want every project, not just this one?

We use privacy-friendly analytics (Google Analytics, IP-anonymized) to see which pages help readers. No ads, and we never sell your data. See our Privacy Policy.