New Django Fellow Position!

News

DSF calls for applicants for a Django Fellow

DSF invites experienced Django developers to apply for a new Django Fellow position focused on framework maintenance, mentoring, and security oversight.

Django bugfix releases issued: 5.2.3, 5.1.11, and 4.2.23

Django issues bugfix releases for 5.2.3, 5.1.11, and 4.2.23 to finalize mitigation for potential log injection using safer logging practices.

Python Release Python 3.13.5

Python 3.13.5 resolves critical bugs in extension building and generator expressions, complementing Python 3.13's experimental free-threaded mode and JIT for improved performance.

Updates to Django

Hello there 👋 Today 'Updates to Django' is presented by Raffaella from Djangonaut Space! 🚀

Last week we had 11 pull requests merged into Django by 10 different contributors - including 2 first-time contributors! Congratulations to myoungjinGo and Blayze for having their first commits merged into Django - welcome on board!

Fixes from last week include:

A log injection possibility: the remaining response logging is migrated to django.utils.log.log_response(), which safely escapes arguments such as the request path to prevent unsafe log output (CVE-2025-48432). This is released within 5.2.3, 5.1.11, and 4.2.23.
An issue where bulk_create() would raise an IntegrityError due to null values in the _order column when used with models having order_with_respect_to Meta option is now fixed. The fix ensures proper order values are assigned to objects during bulk creation. Special thanks to myoungjinGo for the first contribution and the long work on the PR, and to everyone who helped with the review 🥳

Articles

Announcing django-rq-cron

A Django app for running cron jobs with RQ.

Beyond htmx: building modern Django apps with Alpine AJAX

Leveraging Alpine AJAX, Django developers can achieve progressive enhancement with concise, server-rendered partial updates that simplify frontend complexity and ensure graceful degradation.

Better Django management commands with django-click and django-typer

Streamline Django management commands using django-click and django-typer for cleaner syntax, built-in argument parsing, and richer output via type annotations and customizable CLI styling.

Django, JavaScript modules and importmaps

Integrating JavaScript modules in Django with importmaps simplifies cache busting and app integration while exposing challenges with static asset storage and bundling.

Python: a quick cProfile recipe with pstats

Learn how to efficiently profile Django migrations and other Python scripts using cProfile and pstats to analyze slow functions and optimize database calls.