|
Posted
about 12 hours
ago
by
Adam Fast
Back in July, we celebrated a very special occasion: Django’s 20th birthday 🎉 To mark the occasion, three amateur radio operators (including myself) spent the next 14 days, operating evenings and weekends, broadcasting a special event call sign: W2D.
... [More]
Over those two weeks, we completed 1,026 radio contacts with radio operators in 47 geopolitical entities (for example, the continental US, Alaska and Hawaii are considered separate entities). The US Federal Communications Commission (FCC) issues special event "call signs" for these types of events. We selected W2D for 20 years of Django, but the reference to "Web 2.0" during Django's early years was a bonus!
Over 7,000 lookups were counted on a main callsign lookup site as radio operators checked into what W2D was about. Ham radio is a very popular activity, with more than 750,000 licensed hams in the US!
We created a custom certificate inspired by the design of the Django admin interface for those who made contact with us (certificates are common / expected for events like this in the radio hobby). Here is a sample one, other amateurs contacting the event were able to generate/download their own Django admin inspired certificate from a Django site (which does repeat for those who contacted us multiple times):
Thank you to the amateur radio operators who made the event possible and of course those who contacted us! Thanks to you this was a fun time for us all. Additionally, thank you to the Django Software Foundation and its members who make the Django Web Framework and its community possible.
This screenshot shows 3 other stations (ON7EQ from Belgium, PC2J from the Netherlands, and WA4NFO from the US all calling W2D on "20 meters" (14 MHz, so named because the wavelength would be 20 meters long per wave) All of the orange bubbles in the map show the other stations receiving the signal from W2D being transmitted with 30 watts of RF power. The antenna is an approximately 63 foot long piece of wire running between a balcony and a fence post.
This map shows approximate locations of each geopolitical entity worked during the special event and a count of contacts made in each.
Check out our birthday website for more events – up next, PyDay + Cumple Django organized by PyLadies Colombia in Bogotá 🇨🇴 💛💙❤️ [Less]
|
|
Posted
3 days
ago
by
Thibaud Colas and JetBrains
We are excited to share the news about our annual fundraiser – and a new way for you to benefit from it. We need your help to support key initiatives such as:
Django Fellows: Ensuring the rapid development and maintenance of Django.
Djangonaut
... [More]
Space: Onboarding new contributors to the Django project.
Django Girls: Making the Django community accessible to programming beginners around the world.
From today to November 11, you have a unique opportunity to support Django through our "Buy PyCharm, Support Django" campaign. By purchasing PyCharm, you benefit in two powerful ways:
Enhance your development: Gain access to a professional tool designed to maximize your productivity with features like first-class database management, API management, and frontend support.
Support Django ✨: Contribute directly to the Django Software Foundation. When you purchase PyCharm at a 30% discount through our special campaign link, JetBrains will donate an equal amount to the Django Software Foundation.
Get 30% off PyCharm, Support Django
This is a wonderful opportunity to contribute to the community that supports you and improve your own development process with a top-notch tool.
Thank you for your ongoing support and dedication to Django. Together, we can ensure the continued success and growth of the framework we all rely on.
Other ways to donate
If you would like to donate in another way, especially if you are already a PyCharm customer, here are other ways to donate to the DSF:
On our website via credit card
Via GitHub Sponsors
For those able to make a larger donation as corporate sponsors ($2000+), check out our corporate sponsors form
[Less]
|
|
Posted
4 days
ago
by
Natalia Bidart
Django 6.0 beta 1 is now available. It represents the second
stage in the 6.0 release cycle and is an opportunity to try out
the changes coming in Django 6.0.
Django 6.0 assembles a mosaic of modern tools and thoughtful design, which you
can read
... [More]
about in the in-development 6.0 release notes.
Only bugs in new features and regressions from earlier Django versions will be
fixed between now and the 6.0 final release. Translations will
be updated following the "string freeze", which occurs when the release
candidate is issued. The current release schedule calls
for a release candidate in about a month, with the final release scheduled
roughly two weeks later on December 3.
Early and frequent testing from the community will help minimize the number of
bugs in the release. Updates on the release schedule are available on the
Django forum.
As with all alpha and beta packages, this release is not for production
use. However, if you'd like to try some of the new features or help find and
fix bugs (which should be reported to the issue tracker), you can grab a copy of the beta
package from our downloads page or
on PyPI.
The PGP key ID used for this release is Natalia Bidart: 2EE82A8D9470983E
[Less]
|
|
Posted
15 days
ago
by
Thibaud Colas
Nominations are open for the elections of the 2026 Django Software Foundation Board of Directors. The Board guides the direction of the marketing, governance and outreach activities of the Django community. We provide funding, resources, and guidance
... [More]
to Django events on a global level.
The Board of Directors consists of seven volunteers who are elected to two-year terms. This is an excellent opportunity to help advance Django. We can’t do it without volunteers, such as yourself. Anyone including current Board members, DSF Members, or the public at large can apply to the Board. It is open to all.
How to apply
If you are interested in helping to support the development of Django we’d enjoy receiving your application for the Board of Directors. Please fill out the 2026 DSF Board Nomination form by 23:59 on October 31, 2025 Anywhere on Earth to be considered.
Submit your nomination for the 2026 Board
If you have any questions about applying, the work, or the process in general please don’t hesitate to reach out on the Django forum or via email to [email protected].
Thank you for your time, and we look forward to working with you in 2026!
The 2025 DSF Board of Directors. [Less]
|
|
Posted
16 days
ago
by
Sarah Abderemane & Thibaud Colas
We are pleased to announce that the 2025 Malcolm Tredinnick Memorial Prize has been awarded to Tim Schilling!
Tim embodies the values that define the Django community: generosity, respect, thoughtfulness, and a deep commitment to supporting others.
... [More]
He is a tireless community leader who creates spaces where newcomers thrive ❤️ exactly in the spirit of our prize and Malcolm Tredinnick’s work.
About Tim
As a co-founder of Djangonaut Space, Tim has encouraged countless people to take their first steps as contributors. With the overall program but also specific initiatives like co-writing sessions, Space Reviewers, Cosmic Contributors. Many community members trace their involvement in Django back to Tim’s encouragement and support.
Beyond Djangonaut Space, Tim serves on the Django Steering Council, is one of the founders of Django Commons, and is an active member of DEFNA, supporting DjangoCon US. He is known for thoughtful feedback, amplifying others’ work, and encouraging people to step forward for leadership roles.
Quotes
Here is some of what people said about Tim’s involvement with the community:
Tim exemplifies all the values the Django community is known for. He is incredibly supportive of newcomers, respectful, and generous. Always ready to give constructive feedback and lend a hand where needed, be it through a pull review or the many Django-related forums he participates in, Tim is a natural leader, someone that the community looks up to.
– Felipe Villegas
Every time he spots a chance to help, he doesn't need to think twice. He's a welcoming person not only with newcomers, as in Djangonaut Space, but also with maintainers through Django Commons. Tim is also very creative, finding different ways to contribute. For example, inside the Djangonaut Space community, the "Space Reviewers" team was formed to host a live stream to help people become reviewers by sharing the process and also actually reviewing a ticket that needs some attention. The Django community is much more than blessed to have Tim, who exemplifies dedication, respect, and support for others.
– Raffaella
Tim just has this way of making sure newcomers feel welcome and get the support they need. He doesn't just talk about community building - he actually does the work to make it happen.
– Abe Hanoka
Tim is a thoughtful and caring community leader. He engages with newcomers in a warm and welcoming manner. In his roles as the admin for Djangonaut Space, the admin of Django Commons, and a member of the Steering Council, he strategically identifies the gaps in the community, collaborates with other members to develop an action plan, and follows through with the execution. He's doing some of the hardest work out there. Not only is Tim nurturing newcomers, he's also growing the community by bridging the gap between newcomers and experienced open source contributors. Tim's actions speak louder than words.
– Lilian
Other nominees
Other nominations for this year included:
Adam Hill and Sangeeta Jadoonanan
Anna Makarudze
Baptiste Mispelon
Bhuvnesh Sharma
Carlton Gibson
David Smith
Ester Beltrami
Jake Howard
Lilian
Mike Edmunds
Mike Edwards
Noah Maina
Raymond Penners
Simon Charette
Will Vincent
Malcolm would be very proud of the legacy he has fostered in our community. Each year we receive many nominations, and it is always hard to pick the winner. If your nominee didn’t make it this year, you can always nominate them again next year!
Congratulations Tim on the well-deserved honor! [Less]
|
|
Posted
25 days
ago
by
Jacob Walls
In accordance with our security release policy, the Django team
is issuing releases for
Django 5.2.7,
Django 5.1.13, and
Django 4.2.25.
These releases address the security issues detailed below. We encourage all
users of Django to upgrade as soon as
... [More]
possible.
CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB
QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods on MySQL and MariaDB.
Thanks to sw0rd1ight for the report.
This issue has severity "high" according to the Django security policy.
CVE-2025-59682: Potential partial directory-traversal via archive.extract()
The django.utils.archive.extract() function, used by startapp --template and startproject --template, allowed partial directory-traversal via an archive with file paths sharing a common prefix with the target directory.
Thanks to stackered for the report.
This issue has severity "low" according to the Django security policy.
Affected supported versions
Django main
Django 6.0 (currently at alpha status)
Django 5.2
Django 5.1
Django 4.2
Resolution
Patches to resolve the issue have been applied to Django's
main, 6.0 (currently at alpha status), 5.2, 5.1, and 4.2 branches.
The patches may be obtained from the following changesets.
CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB
On the main branch
On the 6.0 branch
On the 5.2 branch
On the 5.1 branch
On the 4.2 branch
CVE-2025-59682: Potential partial directory-traversal via archive.extract()
On the main branch
On the 6.0 branch
On the 5.2 branch
On the 5.1 branch
On the 4.2 branch
The following releases have been issued
Django 5.2.7 (download Django 5.2.7 |
5.2.7 checksums)
Django 5.1.13 (download Django 5.1.13 |
5.1.13 checksums)
Django 4.2.25 (download Django 4.2.25 |
4.2.25 checksums)
The PGP key ID used for this release is Jacob Walls: 131403F4D16D8DC7
General notes regarding security reporting
As always, we ask that potential security issues be reported via private email
to [email protected], and not via Django's Trac instance, nor via
the Django Forum. Please see our security policies for further information.
[Less]
|
|
Posted
about 1 month
ago
by
Sarah Boyce
Hello Djangonauts,
At the end of this month, I'll be stepping away from my role as Django Fellow for some time while I'm on maternity leave.
During this period, I don't anticipate being active on Trac, in PR reviews, on the Forum, or on Discord. I
... [More]
would appreciate folks giving me space to settle in with my new baby.
Django will be well looked after by our Fellows, Natalia Bidart and Jacob Walls, who will continue supporting the project and community while I'm away.
I'm grateful to be part of such a wonderful community, and I look forward to returning after I have settled into this new chapter of my life. Thank you all for your support in keeping Django thriving.
Sarah Boyce
Django Fellow, mum-to-be [Less]
|
|
Posted
about 1 month
ago
by
Natalia Bidart
Django 6.0 alpha 1 is now available. It represents the first
stage in the 6.0 release cycle and is an opportunity to try out
the changes coming in Django 6.0.
Django 6.0 assembles a mosaic of modern tools and thoughtful design, which you
can read
... [More]
about in the in-development 6.0 release notes.
This alpha milestone marks the feature freeze. The current release schedule calls
for a beta release in about a month and a release candidate roughly a month
after that. We'll only be able to keep this schedule with early and frequent
testing from the community. Updates on the release schedule are available on
the Django forum.
As with all alpha and beta packages, this release is not for production
use. However, if you'd like to take some of the new features for a spin, or
help find and fix bugs (which should be reported to the issue tracker), you can grab a copy of the alpha
package from our downloads page or
on PyPI.
The PGP key ID used for this release is Natalia Bidart: 2EE82A8D9470983E
[Less]
|
|
Posted
about 1 month
ago
by
Sarah Abderemane
Hello Everyone 👋 It is that time of year again when we recognize someone from our community in memory of our friend Malcolm.
Malcolm was an early core contributor to Django and had a huge influence on Django as we know it today. Besides being
... [More]
knowledgeable he was also especially friendly to new users and contributors. He exemplified what it means to be an amazing Open Source contributor. We still miss him to this day.
The prize
Our prizes page summarizes it nicely:
The Malcolm Tredinnick Memorial Prize is a monetary prize, awarded annually, to the person who best exemplifies the spirit of Malcolm’s work - someone who welcomes, supports, and nurtures newcomers; freely gives feedback and assistance to others, and helps to grow the community.
The hope is that the recipient of the award will use the award stipend as a contribution to travel to a community event -- a DjangoCon, a PyCon, a sprint -- and continue in Malcolm’s footsteps.
Please make your nominations using our form: 2025 Malcolm Tredinnick Memorial Prize nominations. Nominations are welcome from everyone.
Submit a nomination
We will take nominations until Saturday, September 27th, 2025, 23:59 Anywhere on Earth, and will announce the results in early October. If you have any questions please use our dedicated forum thread or contact the DSF Board. [Less]
|
|
Posted
about 1 month
ago
by
Sarah Abderemane
Hello Everyone 👋 It is that time of year again when we recognize someone from our community in memory of our friend Malcolm.
Malcolm was an early core contributor to Django and had a huge influence on Django as we know it today. Besides being
... [More]
knowledgeable he was also especially friendly to new users and contributors. He exemplified what it means to be an amazing Open Source contributor. We still miss him to this day.
The prize
Our prizes page summarizes it nicely:
The Malcolm Tredinnick Memorial Prize is a monetary prize, awarded annually, to the person who best exemplifies the spirit of Malcolm’s work - someone who welcomes, supports, and nurtures newcomers; freely gives feedback and assistance to others, and helps to grow the community.
The hope is that the recipient of the award will use the award stipend as a contribution to travel to a community event -- a DjangoCon, a PyCon, a sprint -- and continue in Malcolm’s footsteps.
Please make your nominations using our form: 2025 Malcolm Tredinnick Memorial Prize nominations. Nominations are welcome from everyone.
Submit a nomination
We will take nominations until Saturday, September 27th, 2025, 23:59 Anywhere on Earth, and will announce the results in early October. If you have any questions please use our dedicated forum thread or contact the DSF Board. [Less]
|