Who contributed to Django on August 15, 2026?

3 developers shipped this update, including Jacob Walls, karansthr, and Adam Johnson.

What were the notable Django updates?

Fixed #37248 -- Skipped unique validation on fields with unresolved dynamic db_default, Fixed #37260 -- Avoided DDL when altering only Python-level on_delete options, and Fixed #37262 -- Restored rendering of html-safe strings in form media.

@django

Python's batteries-included web framework

github ↗

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGO FIXES UNIQUE VALIDATION REGRESSION AND SCHEMA BLOAT

By RepoJournal · Filed 06:55 UTC on August 15, 2026 · About Django

3 people shipped this

Adam Johnson @adamchainz 2 cited

Jacob Walls @jacobtylerwalls 1 cited

karansthr @karansthr 1 cited

Django patches a critical validation bug that embeds unresolved database defaults into uniqueness checks, forcing sequential scans on every insert.

The fix addresses a regression where `Model._perform_unique_checks()` and `UniqueConstraint.validate()` embedded unresolved `db_default` expressions into uniqueness queries during `full_clean()` [1]. The database generates the actual value on INSERT and cannot know it beforehand, so the query tested a different value from what gets stored; with volatile defaults like `uuidv7()` it also forced sequential scans on every insert [1]. A second critical fix eliminates unnecessary schema changes when altering only Python-level `on_delete` options like `CASCADE` to `PROTECT` [2]. The regression came from removing "on_delete" from `Field.non_db_attrs` to support new database-level options, which inadvertently forced DDL whenever a Python-only delete option changed [2]. Separately, form media rendering now correctly handles html-safe strings passed via `mark_safe()`, restoring the documented pattern for including complete asset tags without percent-encoding [3]. One security-related test refactor tightens GIS lookup coverage [4]. These fixes span 7 commits and 7 PRs across the core repository.

Action items

→ Update to latest Django if you use db_default with volatile expressions or run frequent unique validation checks django/django [immediate]
→ Review any AlterField operations changing on_delete options to confirm no unnecessary migrations are queued django/django [plan]
→ Test form media rendering if you use mark_safe() for asset tags django/django [monitor]

References

[1] Fixed #37248 -- Skipped unique validation on fields with unresolved dynamic db_default. ↗ django/django
[2] Fixed #37260 -- Avoided DDL when altering only Python-level on_delete options. ↗ django/django
[3] Fixed #37262 -- Restored rendering of html-safe strings in form media. ↗ django/django
[4] Refs CVE-2026-15307 -- Used a more common lookup in raster lookup tests. django/django

Quick answers

What shipped in Django on August 15, 2026?: Django patches a critical validation bug that embeds unresolved database defaults into uniqueness checks, forcing sequential scans on every insert. In total, 7 commits and 7 pull requests landed.
Who contributed to Django on August 15, 2026?: 3 developers shipped this update, including Jacob Walls, karansthr, and Adam Johnson.
What were the notable Django updates?: Fixed #37248 -- Skipped unique validation on fields with unresolved dynamic db_default, Fixed #37260 -- Avoided DDL when altering only Python-level on_delete options, and Fixed #37262 -- Restored rendering of html-safe strings in form media.

DJANGO QUERYSETS GET SMARTER ABOUT ALIASES, DJANGOPROJECT.COM STANDARDIZES ON UV

Django fixed a QuerySet optimization gap where pure field aliases weren't recognized as orderable, while the project website itself migrated to modern Python packaging with uv and pyproject.toml.

python 7 shipped

@django Aug 14

DJANGO SECURITY TEAM GETS FORMAL CHARTER, FUNDRAISING TIER LAUNCHES AT $200K

The Django Security Team now has a written charter to scale operations, while the DSF opens a new Sponsored Fellow corporate membership level as part of a broader fundraising refresh.

python 8 shipped

@django Aug 13

DJANGO FIXES MODEL ADMIN DISPLAY BUG, UPDATES DOWNLOAD PAGE FOR CALENDAR VERSIONING

Django patched a regression in second-degree relation rendering across ModelAdmin while rolling out DEP-20's new calendar versioning scheme to the website.

python 19 shipped

@django Aug 12

DJANGO 6.1 LANDS. SECURITY PATCHES SHIPPED. ADMIN BUGS FIXED.

Django 6.1 is live across the djangoproject.com infrastructure [ref:8], while a critical CVE-2026-53878 patch lands in 5.2.16 [ref:2] to block newline injection attacks.

python 9 shipped

Elsewhere on the wire

AI Agents Aug 16

OPENHANDS PINS CLIENT DEPENDENCY, ADDS STRUCTURED ERROR HANDLING

OpenHands locked its TypeScript client to exact version 1.37.0 and merged canvas error outcome improvements in a single commit cycle.

ai-agents 2 shipped

Local LLMs Aug 16

LLAMA.CPP OVERHAULS INFERENCE FLAGS, VLLM PATCHES DEEPSEEK SPARSE MLA

llama.cpp deprecates mmap flags in favor of unified load-mode, while vllm fixes critical issues blocking DeepSeek-V4-Flash across all decode paths.

+11

llms 136 shipped

@CachyOS Aug 16

DASHBOARD SEO OVERHAUL SHIPS AS PACKAGE TRAIN ROLLS FORWARD

CachyOS public-dashboard refactored routes with canonical metadata and improved crawler visibility [ref:18] while 61 commits across five repos kept the AUR pipeline humming.

infra 72 shipped

Elixir & Phoenix Aug 16

ELIXIR CORE CUTS ALLOCATIONS ACROSS STRING AND AST OPERATIONS

Thomas Cioppettini landed four performance wins overnight that eliminate unnecessary allocations in List.myers_difference, String case conversion, and Macro tree walkers.

elixir 17 shipped

Want every project, not just this one?

Follow @django