Who contributed to Django on July 28, 2026?

4 developers shipped this update, including Nick Pope, joseanoxp, Vishy, and dependabot.

What were the notable Django updates?

Refs #22712 -- Restored django.contrib.staticfiles.finders.BaseFinder.find(), Fixed #20023 -- Added custom validation example for admin inlines, and Fixed #37198 -- Fixed content_disposition_header() quoting of filenames ending with newlines.

@django

Python's batteries-included web framework

github ↗

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO STATICFILES FINDER RESTORED AFTER OVERZEALOUS REMOVAL

By RepoJournal · Filed 06:55 UTC on July 28, 2026 · About Django

4 people shipped this

dependabot @dependabot 4 cited

Nick Pope @ngnpope 2 cited

joseanoxp @joseanoxp 1 cited

Vishy @vishy0 1 cited

Django's staticfiles BaseFinder.find() method is back after being mistakenly deleted, and you need to know if it affects your current version.

Nick Pope restored django.contrib.staticfiles.finders.BaseFinder.find() [1], which was overzealously removed in a previous commit and will need backporting to the 6.1 stable branch [8]. This is the most consequential change across the stack in the last 24 hours. Separately, the Django documentation gained a practical example for custom validation in admin inlines [2], showing how to assign a custom ModelForm to InlineModelAdmin.form with both model and form declared. A separate fix landed for content_disposition_header() to properly quote filenames ending with newlines [3], addressing a specific edge case in file handling. Over on djangoproject.com, six dependency updates rolled in via Dependabot: actions/setup-python jumped to 7.0.0 with an ESM migration [4], actions/checkout got a patch to 7.0.1 [5], coverage upgraded to 7.15.2 with a memory use fix [6], and sentry-sdk advanced to 2.66.0 with new tracing options [7].

Action items

→ Check if you're using BaseFinder.find() directly - if so, verify your version includes the restoration django/django [plan]
→ Review the new admin inlines validation example in docs if you maintain custom form logic django/django [monitor]
→ Update djangoproject.com dependencies on next deploy - nothing breaks, all routine maintenance django/djangoproject.com [plan]

References

[1] Refs #22712 -- Restored django.contrib.staticfiles.finders.BaseFinder.find(). django/django
[2] Fixed #20023 -- Added custom validation example for admin inlines. django/django
[3] Fixed #37198 -- Fixed content_disposition_header() quoting of filenames ending with newlines. django/django
[4] Bump actions/setup-python from 6.3.0 to 7.0.0 ↗ django/djangoproject.com
[5] Bump actions/checkout from 7.0.0 to 7.0.1 ↗ django/djangoproject.com
[6] Bump coverage from 7.15.1 to 7.15.2 in /requirements ↗ django/djangoproject.com
[7] Bump sentry-sdk from 2.64.0 to 2.66.0 in /requirements ↗ django/djangoproject.com
[8] Refs #22712 -- Restored django.contrib.staticfiles.finders.BaseFinder.find(). ↗ django/django

Quick answers

What shipped in Django on July 28, 2026?: Django's staticfiles BaseFinder.find() method is back after being mistakenly deleted, and you need to know if it affects your current version. In total, 4 commits and 8 pull requests landed.
Who contributed to Django on July 28, 2026?: 4 developers shipped this update, including Nick Pope, joseanoxp, Vishy, and dependabot.
What were the notable Django updates?: Refs #22712 -- Restored django.contrib.staticfiles.finders.BaseFinder.find(), Fixed #20023 -- Added custom validation example for admin inlines, and Fixed #37198 -- Fixed content_disposition_header() quoting of filenames ending with newlines.

DJANGO PATCHES ADMIN CRASH, TIGHTENS SETUPTOOLS FLOOR

Django shipped fixes for a ModelAdmin regression affecting second-degree relations while locking in setuptools 83 to close a theoretical vulnerability.

python 10 shipped 1-min read

@django 2 days ago

ALL QUIET ACROSS THE STACK

Django's benchmark suite logged routine performance metrics overnight with no breaking changes or security advisories in play.

python 1 shipped 1-min read

@django 4 days ago

DJANGO ADMIN PERMISSION CHECKS NOW CONSISTENT ACROSS ALL VIEWS

Django fixed a permission inconsistency in admin views that could have exposed data to staff users lacking proper access.

python 15 shipped 1-min read

@django 5 days ago

DJANGO TIGHTENS THREADING FOR ASYNC ERROR HANDLING, GOVERNANCE FRAMEWORK SIMPLIFIED

Django patches a critical threading issue in async error response rendering that could cause database pool exhaustion and deadlock.

python 16 shipped 2-min read

Elsewhere on the wire

AI Agents about 3 hours ago

LANGCHAIN CORES SHIP, ANTHROPIC THINKING BLOCKS FIXED, OPENHANDS TIGHTENS WEBSOCKET AUTH

LangChain released two core packages with critical fixes for streaming stability and environment variable handling, while OpenHands closed a security gap that left WebSocket connections unprotected.

ai-agents 119 shipped 1-min read

Local LLMs about 3 hours ago

OLLAMA RIPS OUT IMAGE GENERATION, LLAMA.CPP SHIPS SPECULATIVE DECODING

Ollama removed its entire MLX image generation pipeline overnight, while llama.cpp landed DSpark speculative decoding and fixed a critical SYCL memory bug affecting Arc GPUs.

+11

llms 239 shipped 2-min read

@CachyOS about 3 hours ago

KERNEL SCHEDULER UPDATES ACROSS BORE AND SCX TOOLING

CachyOS shipped BORE 6.8.0 patches across two kernel series while upgrading its sched-ext ecosystem in parallel, signaling major tuning work ahead.

infra 83 shipped 1-min read

Elixir & Phoenix about 3 hours ago

ELIXIR TIGHTENS ERROR HANDLING ACROSS DATE, ECTO, AND IEXHELPERS

Date.range now surfaces ArgumentError instead of Protocol.UndefinedError when passed invalid step values, catching a class of bugs that silently fail in production code.