From Django Weblog · 24 stories
Django Project Stops Accepting Security Reports via HackerOne
The Django project has ceased accepting new security reports through the HackerOne platform. Users should now report security vulnerabilities directly via email to security@djangoproject.com, following the process outlined in Django's security policies.
Django Releases Security Updates 6.1.2, 6.0.9, and 5.2.18 Addressing Multiple CVEs
The Django team released security updates 6.1.2, 6.0.9, and 5.2.18 to address several vulnerabilities, including potential denial-of-service issues and a request forgery vulnerability. These updates are critical for maintaining the security and stability of Django applications.
Django Software Foundation Seeks First Executive Director to Lead Operations
The Django Software Foundation (DSF) is hiring its first Executive Director, a paid position responsible for strategic direction, daily operations, and connecting stakeholders. This new role aims to mature the Foundation's internal structure and ensure the long-term viability of the Django web framework, which has existed since 2005.
Django Adopts Annual Release Cycle Starting 2028, All Releases to Receive Three Years of Support
The Django Steering Council has approved DEP 20, transitioning Django to an annual release cycle beginning in January 2028. This change means every feature release will receive three years of support, effectively retiring the "LTS" label and simplifying Python version compatibility.
Django 6.1 Released, Ending Mainstream Support for Django 6.0
The Django team has released version 6.1 of the web framework, introducing new features like model field fetch modes and database-level delete options for ForeignKey. This release also marks the end of mainstream support for Django 6.0, urging users to upgrade for continued security and bug fixes.
Django Releases Security Updates 6.0.8 and 5.2.17 to Address Multiple Vulnerabilities
The Django team released versions 6.0.8 and 5.2.17 to patch three security vulnerabilities, including a high-severity server-side file-write and request forgery flaw. Users are advised to upgrade to mitigate potential risks such as remote code execution and denial-of-service attacks.
Django Steering Council Supports Triptych Project for Enhanced HTML Standards
The Django Steering Council endorsed a funding application for the Triptych Project, proposing enhancements to HTML. The initiative aims to introduce new methods like PUT and PATCH for forms, and simpler button actions, enabling more web functionality without JavaScript dependencies.
Django Releases Security Updates 6.0.7 and 5.2.16 to Address Vulnerabilities
Django has released updates 6.0.7 and 5.2.16 to fix several low-severity security issues. The updated versions address vulnerabilities involving cookie signing, email transmission, caching behavior, and a heap buffer over-read in GDALRaster. Users are advised to upgrade promptly to maintain security and mitigate potential risks.
Django Software Foundation Receives CNA Status for Security Management
The Django Software Foundation (DSF) has achieved CNA status, enabling it to assign CVE IDs internally for vulnerabilities in Django and select community projects. This move streamlines the advisory process and enhances independence in managing security incidents.
Django Software Foundation Seeks First Executive Director With Funded Support
The Django Software Foundation (DSF) is hiring its first Executive Director, funded by a $47,500 pledge from six web development agencies. This role aims to enhance the DSF's operational capacity, which has primarily relied on volunteer efforts.
Django Software Foundation Sets Fundraising Goal of $500,000 for 2026
The Django Software Foundation aims to raise $500,000 by 2026, increasing its goal from $300,000. Funding will support community initiatives and vital programs like the Django Fellows, which manage development tasks and security issues.
Nominations Open for the 2026 Malcolm Tredinnick Memorial Prize
The Django Software Foundation has opened nominations for the 2026 Malcolm Tredinnick Memorial Prize, which recognizes individuals who exemplify community support and mentorship within the Django ecosystem. This award aims to honor Malcolm Tredinnick's contributions as an early Django core contributor and his friendly approach to new users, encouraging recipients to attend community events.
Django Project Approves New Technical Governance (DEP 19)
The Django Steering Council and Django Software Foundation (DSF) Board have approved DEP 19, implementing new technical governance for the project. This update simplifies the governance structure and aims to make participation, particularly in the Steering Council, more accessible to community members.
DSF Proposes New Voting Membership Status to Address Election Quorum Issues
The Django Software Foundation (DSF) has proposed a change to its voting membership status to define active members based on recent election participation. This change aims to make it easier to reach quorum for Board elections, as the current system counts all members, including inactive ones, making quorum increasingly difficult to achieve.
DjangoCon Europe 2027 to be held in Innsbruck, Austria, from February 17-21
DjangoCon Europe 2027 will take place in Innsbruck, Austria, from February 17–21, 2027. This annual event brings together the Django community for five days of learning, sharing, and contributing.
Django Project Releases Bugfix Version 6.1.1
The Django project has released version 6.1.1, a bugfix update for the web framework. This release provides maintenance improvements and is available for download from the official downloads page and the Python Package Index.
Django Developers Survey 2026 Results Released by Django Software Foundation
The Django Software Foundation and JetBrains PyCharm have released the results of the fifth annual Django Developers Survey for 2026. The report provides insights into current Django trends and development practices, offering data for developers and the community.
Django 6.1 Release Candidate 1 Now Available for Testing
Django 6.1 Release Candidate 1 is now available, introducing new features and usability improvements. This release marks the string freeze and is the final opportunity for community testing before the planned August 5 final release.
Django Developer Survey 2026 Nears Closing Date
The Django Developer Survey 2026 is closing on July 13, with over 3,100 responses received. This survey guides future technical and community decisions for Django, and aims to surpass 4,000 responses to better understand the community's needs.
Django Community Offers Weekly Office Hours for Contributors
The Django Software Foundation (DSF) has established weekly office hours for contributors to discuss and work on community-related topics each Wednesday at 6:00 PM UTC. This initiative helps keep community members informed about ongoing projects and developments within the Django ecosystem.
Django 6.1 beta 1 released as community testing phase progresses
Django progressed to 6.1 beta 1, featuring new improvements and urging community testing before the scheduled final release on August 5. This beta release replaces the alpha, maintaining a feature freeze and focusing on bug fixes and translations. The Django community is encouraged to test and report issues to refine the final version.
Django's Code of Conduct Working Group Details Internal Processes and Governance
Django's Code of Conduct Working Group (CoCWG) has outlined its internal mechanics for managing changes and operations, including its relationship with the Django Software Foundation (DSF) board and the Online Community Working Group. This transparency provides insight into the governance structure behind Django's community standards and how decisions are made regarding its Code of Conduct.
Djangonaut Space Opens Applications for Session 7 Mentorship Program
Djangonaut Space has opened applications for its seventh session, a free 8-week mentorship program designed to help individuals contribute to the Django framework. The program aims to develop participants' coding contributions and leadership potential within the Django community.
DjangoCon US 2026 in Chicago is One Month Away
DjangoCon US 2026, a conference for Django developers, maintainers, and educators, will take place in Chicago from August 24–28, 2026. The event offers opportunities for learning, collaboration, and networking within the Django community.