Who contributed to Django on July 29, 2026?

3 developers shipped this update, including Zubair Hassan, Natalia, and jacobtylerwalls.

What were the notable Django updates?

Fixed #37230 -- Fixed a crash for second-degree relations in ModelAdmin.list_display, Fixed #37230 -- Fixed a crash for second-degree relations in ModelAdmin.list_display, and Bumped minimum setuptools version to 83.

@django

Python's batteries-included web framework

github ↗

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO PATCHES ADMIN CRASH, TIGHTENS SETUPTOOLS FLOOR

By RepoJournal · Filed 06:55 UTC on July 29, 2026 · About Django

3 people shipped this

Zubair Hassan @zubairhassan652 2 cited

Natalia @nessita 2 cited

jacobtylerwalls @jacobtylerwalls 2 cited

Django shipped fixes for a ModelAdmin regression affecting second-degree relations while locking in setuptools 83 to close a theoretical vulnerability.

The critical fix lands in two places: a commit [1] and merged PR [2] both address ticket #37230, a crash in the admin panel when a double-underscore lookup path ends in a relation field. This was a regression from commit 4b2b4bf [1], caught and patched fast. Separately, Django bumped setuptools to version 83 [3], referenced to CVE-2026-59890. Django itself wasn't vulnerable (no exclude rules with non-ASCII characters), but the upgrade removes any lingering doubt [3]. The team also cleared the way for the full Python test matrix on GitHub Actions [4], ensuring regressions across all versions get caught even when Python 3.14 flakes. Release notes for Django 6.0.8 and 5.2.17 are now stubbed and dated [5]. Documentation fixtures for the 6.1 release landed on djangoproject.com [6], scheduled for merge in early August.

Action items

→ Pull the latest django/django to get the ModelAdmin fix for second-degree relations django/django [plan]
→ Upgrade setuptools to 83 when you next refresh dependencies django/django [monitor]

References

[1] Fixed #37230 -- Fixed a crash for second-degree relations in ModelAdmin.list_display. django/django
[2] Fixed #37230 -- Fixed a crash for second-degree relations in ModelAdmin.list_display. ↗ django/django
[3] Bumped minimum setuptools version to 83. ↗ django/django
[4] Allowed the full Python test matrix to run on GitHub Actions. ↗ django/django
[5] Added stub release notes and release date for 6.0.8 and 5.2.17. django/django
[6] Updated docs-related model fixtures for 6.1 release. ↗ django/djangoproject.com

Quick answers

What shipped in Django on July 29, 2026?: Django shipped fixes for a ModelAdmin regression affecting second-degree relations while locking in setuptools 83 to close a theoretical vulnerability. In total, 6 commits and 4 pull requests landed.
Who contributed to Django on July 29, 2026?: 3 developers shipped this update, including Zubair Hassan, Natalia, and jacobtylerwalls.
What were the notable Django updates?: Fixed #37230 -- Fixed a crash for second-degree relations in ModelAdmin.list_display, Fixed #37230 -- Fixed a crash for second-degree relations in ModelAdmin.list_display, and Bumped minimum setuptools version to 83.

DJANGO STATICFILES FINDER RESTORED AFTER OVERZEALOUS REMOVAL

Django's staticfiles BaseFinder.find() method is back after being mistakenly deleted, and you need to know if it affects your current version.

python 12 shipped 1-min read

@django 2 days ago

ALL QUIET ACROSS THE STACK

Django's benchmark suite logged routine performance metrics overnight with no breaking changes or security advisories in play.

python 1 shipped 1-min read

@django 4 days ago

DJANGO ADMIN PERMISSION CHECKS NOW CONSISTENT ACROSS ALL VIEWS

Django fixed a permission inconsistency in admin views that could have exposed data to staff users lacking proper access.

python 15 shipped 1-min read

@django 5 days ago

DJANGO TIGHTENS THREADING FOR ASYNC ERROR HANDLING, GOVERNANCE FRAMEWORK SIMPLIFIED

Django patches a critical threading issue in async error response rendering that could cause database pool exhaustion and deadlock.

python 16 shipped 2-min read

Elsewhere on the wire

AI Agents about 4 hours ago

LANGCHAIN CORES SHIP, ANTHROPIC THINKING BLOCKS FIXED, OPENHANDS TIGHTENS WEBSOCKET AUTH

LangChain released two core packages with critical fixes for streaming stability and environment variable handling, while OpenHands closed a security gap that left WebSocket connections unprotected.

ai-agents 119 shipped 1-min read

Local LLMs about 4 hours ago

OLLAMA RIPS OUT IMAGE GENERATION, LLAMA.CPP SHIPS SPECULATIVE DECODING

Ollama removed its entire MLX image generation pipeline overnight, while llama.cpp landed DSpark speculative decoding and fixed a critical SYCL memory bug affecting Arc GPUs.

+11

llms 239 shipped 2-min read

@CachyOS about 4 hours ago

KERNEL SCHEDULER UPDATES ACROSS BORE AND SCX TOOLING

CachyOS shipped BORE 6.8.0 patches across two kernel series while upgrading its sched-ext ecosystem in parallel, signaling major tuning work ahead.

infra 83 shipped 1-min read

Elixir & Phoenix about 4 hours ago

ELIXIR TIGHTENS ERROR HANDLING ACROSS DATE, ECTO, AND IEXHELPERS

Date.range now surfaces ArgumentError instead of Protocol.UndefinedError when passed invalid step values, catching a class of bugs that silently fail in production code.