The Wire · Showcase
DJANGOPROJECT.COM SHORES UP CI TOOLING WITH ACTION UPGRADES AND PRE-COMMIT AUTOMATION
By RepoJournal · Filed · About Django
Django's website infrastructure tightened its release pipeline overnight with setup-python v7 and a new pre-commit ecosystem strategy.
The djangoproject.com repo landed two critical GitHub Actions bumps: setup-python moved to v7 with an ESM migration and dependency refresh [1], while actions/checkout jumped to 7.0.1 to skip unsafe PR checks on default inputs [2]. Alongside those patches, the team enabled pre-commit ecosystem tracking in dependabot [3], a move that lets the tool auto-update similar dependencies in future and supersedes earlier manual hook work [4]. The Django benchmarking suite added fresh ubuntu-latest results to its performance baseline [5].
One email a day. Unsubscribe in one click.
Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Review pre-commit hook updates in your local fork and sync with djangoproject.com django/djangoproject.com [plan]
- → Monitor dependabot pre-commit ecosystem PRs in the coming weeks for stability django/djangoproject.com [monitor]
References
- [1] Bump actions/setup-python from 6 to 7 ↗ django/djangoproject.com
- [2] Bump actions/checkout from 7.0.0 to 7.0.1 ↗ django/djangoproject.com
- [3] Enable "pre-commit" ecosystem in dependabot django/djangoproject.com
- [4] Update git hooks ↗ django/djangoproject.com
- [5] Results for ubuntu-latest added [skip ci] django/django-asv