RepoJournal
Django

@django

Python's batteries-included web framework

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Python Full archive →

The Wire · Showcase

DJANGOPROJECT.COM SHORES UP CI TOOLING WITH ACTION UPGRADES AND PRE-COMMIT AUTOMATION

By RepoJournal · Filed · About Django

Django's website infrastructure tightened its release pipeline overnight with setup-python v7 and a new pre-commit ecosystem strategy.

The djangoproject.com repo landed two critical GitHub Actions bumps: setup-python moved to v7 with an ESM migration and dependency refresh [1], while actions/checkout jumped to 7.0.1 to skip unsafe PR checks on default inputs [2]. Alongside those patches, the team enabled pre-commit ecosystem tracking in dependabot [3], a move that lets the tool auto-update similar dependencies in future and supersedes earlier manual hook work [4]. The Django benchmarking suite added fresh ubuntu-latest results to its performance baseline [5].

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Bump actions/setup-python from 6 to 7 ↗ django/djangoproject.com
  2. [2] Bump actions/checkout from 7.0.0 to 7.0.1 ↗ django/djangoproject.com
  3. [3] Enable "pre-commit" ecosystem in dependabot django/djangoproject.com
  4. [4] Update git hooks ↗ django/djangoproject.com
  5. [5] Results for ubuntu-latest added [skip ci] django/django-asv

Quick answers

What shipped in Django on August 25, 2026?
Django's website infrastructure tightened its release pipeline overnight with setup-python v7 and a new pre-commit ecosystem strategy. In total, 3 commits and 3 pull requests landed.
Who contributed to Django on August 25, 2026?
2 developers shipped this update, including dependabot and ulgens.
What were the notable Django updates?
Bump actions/setup-python from 6 to 7, Bump actions/checkout from 7.0.0 to 7.0.1, and Enable "pre-commit" ecosystem in dependabot.

More from @django

Daily updates, in your inbox

Follow Django

Keep up with Django in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?