$ the-wire · showcase
Dynamic {% now %} formatting, async support in @non_atomic_requests
By RepoJournal · Filed · About Django · Composed from the cited sources · methodology
Django's template and view-decorator corners got two behavioral changes worth reading before the next upgrade, while the CVE-2026-15830 archive and test-coverage work continued behind them.
Fixed #37118 -- Added variable support to the {% now %} template tag. django/django
The {% now %} tag resolves its format string through parser.compile_filter(), so it accepts context variables and expressions rather than only a quoted literal. The old implementation stripped quotes with a hardcoded [1:-1] slice, which silently produced malformed output when quotes were absent; that failure mode is gone.
Fixed #37382, Refs #29303 -- Made @non_atomic_requests recognize async views. django/django
@non_atomic_requests now recognizes async views, fixing a regression introduced in bdbda29c3e126754c3ae04ceb5c5d35d49aae01c. If you serve async views behind that decorator, this is the fix for transaction handling that had stopped being skipped as intended.
Refs CVE-2026-15830 -- Increased coverage for WKT depth check in GEOS limiter. django/django
Jacob Walls extended the WKT depth check in the GEOS limiter, widening test coverage that references CVE-2026-15830. The underlying archive entry also picked up a follow-up commit, and nobody has published a fixed version number yet, so there is nothing to pin to today.
Removed new contributor GitHub Action workflow. django/django
Jacob Walls removed the new contributor GitHub Action workflow from the repository, retiring the automation that greeted first-time contributors.
Results for ubuntu-latest added [skip ci] django/django-asv
by Github Bot
django-asv picked up results for ubuntu-latest, the only other movement on the board today.
