$ ls django/reviews/ # the step-back reads
Django in review
One review per week (and month): what shipped, what broke, what to act on.
Oct 26–Nov 1, 2026 weekly 8 stories
Django adds HTTP QUERY method support
Alongside it, a join promotion fix for XOR conditions and the security policy page reorganized into three sections.
Oct 19–25, 2026 weekly [plan] 8 stories
CVE records can scope regressions per branch
Django's security checklist can now name the first affected release on each branch, cutting over-broad advisory ranges; CSP nonce fixes a...
Oct 12–18, 2026 weekly [plan] 8 stories
Table-valued expressions clear Steering Council for ORM
asgiref deprecates its custom timeout for asyncio.timeout and raises its floor to Python 3.11, alongside a batch of ORM and warning fixes.
Oct 5–11, 2026 weekly [act] 8 stories
Django ships four CVEs, JSONField fixes land
Security releases cover formset action forging, spatial lookup bytes, and WKB geometry limits; JSONField value handling gets patched acro...
Oct 1–31, 2026 monthly [act] 7 stories
Django ships five security fixes, including formsets
October also landed Address objects in email settings, Oracle UUID and JSONField fixes, and HTTP QUERY method support.
Sep 28–Oct 4, 2026 weekly [plan] 8 stories
Django 6.1.2, 6.0.9, 5.2.18 dates confirmed
Async iterators now close deterministically under aclosing, and distinct(*fields) stops mangling aliases with double underscores.
Sep 21–27, 2026 weekly [act] 8 stories
Django cuts ASGI middleware context switching, drops GDAL 3.3 and 3.4
The MiddlewareMixin change fixes per-middleware context switching that defeated BaseHandler's single-transition intent; spatial users on ...
Sep 14–20, 2026 weekly [plan] 8 stories
Django drops PostgreSQL 15 and PostGIS 3.2
EmailValidator gains per-part validation, and a reverted GeneratedField system check lands with a 6.1.2 release note.
Sep 7–13, 2026 weekly [plan] 8 stories
Django bumps minimum oracledb to 4.0.2
The week's one compatibility change arrives alongside GEOS version shifts and two new security team members.
Sep 1–30, 2026 monthly [plan] 8 stories
Django drops PostgreSQL 15 and PostGIS 3.2
September also brought the 6.1.2/6.0.9/5.2.18 release dates, a batch of ORM regression fixes, and ASGI middleware context switching cut.
Aug 31–Sep 6, 2026 weekly [plan]
Django ORM fix week and calendar versioning prep
Multiple query regressions fixed and deprecations shift to calendar-based names as Django readies for versioning.
Aug 24–30, 2026 weekly
Django test suite locks down row order, benchmark CI expands to Ubuntu
Django's core test suite stopped relying on implicit SELECT ordering, and its benchmark CI now reports Ubuntu results.
Aug 1–31, 2026 monthly
Django 6.1, four CVEs, and a parallel-test fix that kills flaky runs
August closed with Django 6.1 shipping, a security team charter and $200K fundraising tier, and a parallel-test worker change that reuses...
Keep up with Django in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.