Django: Weekly Recap - Command Rename, Security Hardening & ORM Fixes
Django renamed django-admin to django under DEP 16 while merging security fixes for password hashes, spatial references, and cookies. Most remaining activity fixed quiet ORM edge cases around annotations, deferred fields, and Postgres handling.
Duration: PT3M12S
Episode overview
This episode is a short developer briefing from Django.
It explains recent repository work in plain language.
- Show: Django
- Published: 2026-11-09T09:11:54Z
- Audio duration: PT3M12S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Hello, and welcome to the Django Weekly Recap for November 2nd through November 9th, 2026.
This week brought 30 pull request activity items, 27 additional commits this week.
The lead pattern is consolidation: a long-planned command rename landed, while most other work tightened security boundaries and fixed quiet ORM edge cases.
First, the command rename. PR 21260 implements Dep 16, renaming django-admin to simply django. The old name remains as an alias, but documentation, help text, and the Sphinx directives for command references now point to the shorter name. For developers, that means new tutorials and scripts should teach the django…
Second, security hardening. Two merged commits stand out. Commit f5b039a blocks password hash disclosure to view-only admin users on custom user models, closing a gap introduced in version 6. Commit 3a2ec43 blocks file and network access when setting spatial references on GDAL 3 point 9 and above, with a new system…
Third, data-layer reliability and polish. PR 21922 fixes a crash when using values queries with transforms over annotation aliases that lack a model-bound field. PR 22177 avoids overwriting locally modified or deleted rows when fetch…
Nearby episodes from Django
- Safety Checks, Debug Visibility and Cleanup
- Clearer Form Errors and Search Upgrades
- Crash Hardening and Parser Fixes
- Docs Clarify Image Validation and Windows Setup
- PostgreSQL Pool Timeout Fix
- Silent Failures and Forward-Looking Prep
- Command Rename, Query Fixes and Session Hardening
- Query Reliability Fixes and Docs Polish