Aug. 6, 2024 » The Django weblog » [Archived Version]
In accordance with our security release policy, the Django team is issuing releases for Django 5.0.8 and Django 4.2.15. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent. Thanks …
Read MoreAug. 2, 2024 » Django News » [Archived Version]
News Python Insider: Python 3.13.0 release candidate 1 released This is the first release candidate of Python 3.13.0. blogspot.com setuptools 72.0.0 removes the test command If you used setup.py test to test your Python packages, you will need to migrate to another test runner. After five years of deprecation warnings, the test command has finally been removed. pypa.io django-allauth 64.0.0 released A numbe…
Read MoreAug. 2, 2024 » Anže’s Blog » [Archived Version]
pip sometimes returns a checksum error when the urllib3 library is unable to parse a received TLS packet due to a network error. This pip issue will be resolved in 2025 when Python 3.9 is EOL, but you can get around it today by using wget or curl.
Read MoreJuly 31, 2024 » Matthias Kestenholz: Posts about Django » [Archived Version]
Weeknotes (2024 week 31) I have missed almost two months of weeknotes. I’ve got some catching up to do. I have tried writing a larger piece on my thoughts about CMS, but with everything going on in my personal and work life I haven’t made much progress. This weeknotes entry is me trying to get back into the groove of writing (and publishing!) regularly. django-prose-editor I have previously written about the ProseMirror-based editor for Django websites here. I have continued working…
Read MoreJuly 27, 2024 » james.walters.click » [Archived Version]
Man, I love PyOhio! Last year was my first one, and I was so thrilled to hear that this year's event was going to be in person for the first time since COVID. I absolutely wanted to be a part of it, and I'm so glad I got to be …
Read MoreJuly 24, 2024 » The Django weblog » [Archived Version]
Django 5.1 release candidate 1 is the final opportunity for you to try out a kaleidoscope of improvements before Django 5.1 is released. The release candidate stage marks the string freeze and the call for translators to submit translations. Provided no major bugs are discovered that can't be solved in the next two weeks, Django 5.1 will be released on or around August 7. Any delays will be communicated on the on the Django forum. Please use this opportunity to help find and fix bugs (which sh…
Read MoreJuly 22, 2024 » Better Simple » [Archived Version]
A thorough description of why downtime occurs during Django deployments and how to reduce it with django-safemigrate.
Read MoreJuly 20, 2024 » Josh Karamuth » [Archived Version]
CSRF token cookies are typically sent without httpOnly set to true. But is that a secure practice?
Read MoreJuly 19, 2024 » Django on Matt Layman » [Archived Version]
In this episode, we chatted about managing dependencies and the cost of maintenance. Then we got into some feature work and began building a job that will send users an email as reminder to activate their account shortly before it expires.
Read MoreJuly 19, 2024 » Django on Matt Layman » [Archived Version]
In this episode, we chatted about managing dependencies and the cost of maintenance. Then we got into some feature work and began building a job that will send users an email as reminder to activate their account shortly before it expires.
Read More