Django security releases issued: 5.1.4, 5.0.10, and 4.2.17

News

Django security releases issued: 5.1.4, 5.0.10, and 4.2.17

Django 5.1.4 fixes one security issue with severity “high”, one security issue with severity “moderate”, and several bugs in 5.1.3.

Python 3.13.1, 3.12.8, 3.11.11, 3.10.16 and 3.9.21 are now available

Another big release day! Python 3.13.1 and 3.12.8 were regularly scheduled releases, but they do contain a few security fixes. That makes it a nice time to release the security-fix-only versions too, so everything is as secure as we can make it.

A new home for python-build-standalone

Astral is taking stewardship of python-build-standalone, Gregory Szorc's foundational project for installing portable Python distributions.

Django Software Foundation

Help us make it happen ❤️

And just like that, 2024 is almost over! If your finances allow, donate to the Django Software Foundation to support the long-term future of Django.

Updates to Django

Add support for multi-column primary keys

A 19-year-old ticket just got accepted!

Today 'Updates to Django' is presented by Velda Kiara from Djangonaut Space!

Last week we had 20 pull requests merged into Django by 15 different contributors - including 3 first-time contributors! Congratulations to Tommy Allen, Ayush Khatri , and Brock Smickley for having their first commits merged into Django - welcome on board!

Django 5.2 now supports a CompositePrimaryKey field to uniquely identify records based on multiple fields to support more complex data relationships.

Also in Django 5.2, the request.user fallback in auth.login was depreciated, and an AlterConstraint migration operation was added to allow autodetection of changes in constraints.

In Django 5.1 we had two bug fixes:

a crash in createsuperuser on Python 3.13+ caused by an unhandled OSError when the username could not be determined
a regression where relational fields were not updated when calling Model.refresh_from_db() on instances with deferred fields

Wagtail CMS

API support in Wagtail: 2024 headless survey

Are you interested in building headless / API-first websites? Wagtail needs your feedback to inform Wagtail’s direction for headless support improvements as part of our 2024 Wagtail headless survey.