Django: Weekly Recap - Python 3.15 Alignment and CSP Hardening

41 pull request items and 27 commits centered on Python 3.15 compatibility and security defaults. Django aligned stdlib behavior and closed content security policy gaps alongside ORM correctness fixes.

Duration: PT3M43S

Episode overview

This episode is a short developer briefing from Django.

It explains recent repository work in plain language.

  • Show: Django
  • Published: 2026-10-26T09:20:52Z
  • Audio duration: PT3M43S

Transcript excerpt

This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.

Hello, this is your Django briefing for October nineteenth through twenty-sixth.

41 pull request activity items, 27 additional commits this week.

The lead pattern is convergence: Django aligning with Python 3.15 behavior while tightening security defaults.

First, Python 3.15 readiness. PR 22155 documents compatibility, and several fixes follow from platform changes. PR 22095 retires Django's vendored directory creation in favor of the standard make directories function on 3.15 and later, which now supports parent directory modes. That means upload storage and file…

Second, security hardening. PR 22137 includes content security policy nonces in headers for streaming responses, which previously missed them. PR 22179 closes a fail-open case: when a directive's only source is an unused nonce, Django now emits none instead of dropping the directive and falling back to broader…

Third, correctness and process. PR 22154 keeps generic relation database routing lazy, preventing false cross-database subquery errors when an outer query uses another connection. PR 22102 stops U U I D lookup handling from mutating queries in place. PR 21887 adjusts Geo J SON tests for MySQL 9.5, which added…

Nearby episodes from Django

  1. Silent Data Fixes and Validation Tightening
  2. Multiline Templates and Epub Validation
  3. Query Method Support and ORM Correctness Fixes
  4. Template Parsing and Query Routing Fixes
  5. Background Email Delivery and Contributor Docs
  6. Cached Property Deprecation and Docs Accessibility
  7. Python 3.15 Adjustments and Fail-Closed Security
  8. Test Stability Fixes and 6.1 Upgrade Note