djangoproject.com.rss.xml - sfeed_tests - sfeed tests and RSS and Atom files
(HTM) git clone git://git.codemadness.org/sfeed_tests
(DIR) Log
(DIR) Files
(DIR) Refs
(DIR) README
(DIR) LICENSE
---
djangoproject.com.rss.xml (22326B)
---
1 <?xml version="1.0" encoding="utf-8"?>
2 <rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>The Django weblog</title><link>https://www.djangoproject.com/weblog/</link><description>Latest news about Django, the Python web framework.</description><atom:link href="https://www.djangoproject.com/rss/weblog/" rel="self"></atom:link><language>en-us</language><lastBuildDate>Wed, 08 Dec 2021 08:23:55 -0600</lastBuildDate><item><title>2022 DSF Board Election Results</title><link>https://www.djangoproject.com/weblog/2021/dec/08/2022-dsf-board-election-results/</link><description><p>Here are the results of this year's election in order of most votes:</p>
3 <ol class="arabic simple">
4 <li>Anna Makarudze</li>
5 <li>William Vincent</li>
6 <li>Aaron Bassett</li>
7 <li>Kátia Nakamura</li>
8 <li>Chaim Kirby</li>
9 <li>Mfon Eti-mfon</li>
10 <li>Žan Anderle</li>
11 </ol>
12 <p>Congratulations to our winners. Our board meeting next week will close out 2021 business, ratify the election, and get down to the work of forging the future of the DSF.</p>
13 <p>Special thanks to all of the candidates we had this year. It is great to see a robust desire to participate in furthering the work of the DSF. The DSF simply isn't possible without the help of all of our volunteers.</p>
14 </description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Chaim Kirby</dc:creator><pubDate>Wed, 08 Dec 2021 08:23:55 -0600</pubDate><guid>https://www.djangoproject.com/weblog/2021/dec/08/2022-dsf-board-election-results/</guid></item><item><title>Django 4.0 released</title><link>https://www.djangoproject.com/weblog/2021/dec/07/django-40-released/</link><description><p>The Django team is happy to announce the release of Django 4.0.</p>
15 <p><a class="reference external" href="https://docs.djangoproject.com/en/4.0/releases/4.0/">The release notes</a> cover the abundance of new features in detail, but a few highlights are:</p>
16 <ul class="simple">
17 <li>The new <a class="reference external" href="https://docs.djangoproject.com/en/4.0/releases/4.0/#redis-cache-backend">RedisCache backend</a> provides built-in support for caching with Redis.</li>
18 <li>To ease customization of <tt class="docutils literal">Forms</tt>, <tt class="docutils literal">Formsets</tt>, and <tt class="docutils literal">ErrorList</tt> they are now <a class="reference external" href="https://docs.djangoproject.com/en/4.0/releases/4.0/#template-based-form-rendering">rendered using the template engine</a>.</li>
19 <li>The Python standard library’s <tt class="docutils literal">zoneinfo</tt> is now the <a class="reference external" href="https://docs.djangoproject.com/en/4.0/releases/4.0/#zoneinfo-default-timezone-implementation">default timezone implementation in Django</a>.</li>
20 </ul>
21 <p>You can get Django 4.0 from <a class="reference external" href="/download/">our downloads page</a> or from <a class="reference external" href="https://pypi.python.org/pypi/Django/4.0">the
22 Python Package Index</a>. The PGP key
23 ID used for this release is Mariusz Felisiak: <a class="reference external" href="https://github.com/felixxm.gpg">2EF56372BA48CD1B</a>.</p>
24 <p>With the release of Django 4.0, Django 3.2 has reached the end of mainstream
25 support. The final minor bug fix release, <a class="reference external" href="https://docs.djangoproject.com/en/stable/releases/3.2.10/">3.2.10</a>, was issued today.
26 Django 3.2 is an LTS release and will receive security and data loss fixes until April 2024. All
27 users are encouraged to upgrade before then to continue receiving fixes for
28 security issues.</p>
29 <p>Django 3.1 has reached the end of extended support. The final security release
30 (<a class="reference external" href="https://docs.djangoproject.com/en/stable/releases/3.1.14/">3.1.14</a>) was issued today. All Django 3.1 users are encouraged to <a class="reference external" href="https://docs.djangoproject.com/en/dev/howto/upgrade-version/">upgrade</a> to Django 3.2 or later.</p>
31 <p>See the <a class="reference external" href="https://www.djangoproject.com/download/#supported-versions">downloads page</a> for a table of
32 supported versions and the future release schedule.</p>
33 </description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Mariusz Felisiak</dc:creator><pubDate>Tue, 07 Dec 2021 03:26:10 -0600</pubDate><guid>https://www.djangoproject.com/weblog/2021/dec/07/django-40-released/</guid></item><item><title>Django security releases issued: 3.2.10, 3.1.14, and 2.2.25</title><link>https://www.djangoproject.com/weblog/2021/dec/07/security-releases/</link><description><p>In accordance with <a class="reference external" href="https://docs.djangoproject.com/en/dev/internals/security/">our security release policy</a>, the Django team
34 is issuing
35 <a class="reference external" href="https://docs.djangoproject.com/en/dev/releases/3.2.10/">Django 3.2.10</a>,
36 <a class="reference external" href="https://docs.djangoproject.com/en/dev/releases/3.1.14/">Django 3.1.14</a>, and
37 <a class="reference external" href="https://docs.djangoproject.com/en/dev/releases/2.2.25/">Django 2.2.25</a>.
38 These release addresses the security issue detailed below. We encourage all
39 users of Django to upgrade as soon as possible.</p>
40 <div class="section" id="s-cve-2021-44420-potential-bypass-of-an-upstream-access-control-based-on-url-paths">
41 <h3>CVE-2021-44420: Potential bypass of an upstream access control based on URL paths</h3>
42 <p>HTTP requests for URLs with trailing newlines could bypass an upstream access
43 control based on URL paths.</p>
44 <p>This issue has low severity, according to the Django security policy.</p>
45 <p>Thanks to Sjoerd Job Postmus and TengMA(&#64;te3t123) for the report.</p>
46 </div>
47 <div class="section" id="s-affected-supported-versions">
48 <h3>Affected supported versions</h3>
49 <ul class="simple">
50 <li>Django main branch</li>
51 <li>Django 4.0 (which will be released in a separate blog post later today)</li>
52 <li>Django 3.2</li>
53 <li>Django 3.1</li>
54 <li>Django 2.2</li>
55 </ul>
56 </div>
57 <div class="section" id="s-resolution">
58 <h3>Resolution</h3>
59 <p>Patches to resolve the issue have been applied to Django's main branch and
60 the 4.0, 3.2, 3.1, and 2.2 release branches. The patches may be obtained from the following changesets:</p>
61 <ul class="simple">
62 <li>On the <a class="reference external" href="https://github.com/django/django/commit/d4dcd5b9dd9e462fec8220e33e3e6c822b7e88a6">main branch</a></li>
63 <li>On the <a class="reference external" href="https://github.com/django/django/commit/20b9ad36ff0558b819659a10a9734262367750be">4.0 release branch</a></li>
64 <li>On the <a class="reference external" href="https://github.com/django/django/commit/333c65603032c377e682cdbd7388657a5463a05a">3.2 release branch</a></li>
65 <li>On the <a class="reference external" href="https://github.com/django/django/commit/22bd17488159601bf0741b70ae7932bffea8eced">3.1 release branch</a></li>
66 <li>On the <a class="reference external" href="https://github.com/django/django/commit/7cf7d74e8a754446eeb85cacf2fef1247e0cb6d7">2.2 release branch</a></li>
67 </ul>
68 <p>The following releases have been issued:</p>
69 <ul class="simple">
70 <li>Django 3.2.10 (<a class="reference external" href="https://www.djangoproject.com/m/releases/3.2/Django-3.2.10.tar.gz">download Django 3.2.10</a> | <a class="reference external" href="https://www.djangoproject.com/m/pgp/Django-3.2.10.checksum.txt">3.2.10 checksums</a>)</li>
71 <li>Django 3.1.14 (<a class="reference external" href="https://www.djangoproject.com/m/releases/3.1/Django-3.1.14.tar.gz">download Django 3.1.14</a> | <a class="reference external" href="https://www.djangoproject.com/m/pgp/Django-3.1.14.checksum.txt">3.1.14 checksums</a>)</li>
72 <li>Django 2.2.25 (<a class="reference external" href="https://www.djangoproject.com/m/releases/2.2/Django-2.2.25.tar.gz">download Django 2.2.25</a> | <a class="reference external" href="https://www.djangoproject.com/m/pgp/Django-2.2.25.checksum.txt">2.2.25 checksums</a>)</li>
73 </ul>
74 <p>The PGP key ID used for this release is Mariusz Felisiak: <a class="reference external" href="https://github.com/felixxm.gpg">2EF56372BA48CD1B</a>.</p>
75 </div>
76 <div class="section" id="s-general-notes-regarding-security-reporting">
77 <h3>General notes regarding security reporting</h3>
78 <p>As always, we ask that potential security issues be reported via
79 private email to <tt class="docutils literal">security&#64;djangoproject.com</tt>, and not via Django's
80 Trac instance or the django-developers list. Please see <a class="reference external" href="https://www.djangoproject.com/security/">our security
81 policies</a> for further
82 information.</p>
83 </div>
84 </description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Mariusz Felisiak</dc:creator><pubDate>Tue, 07 Dec 2021 01:35:47 -0600</pubDate><guid>https://www.djangoproject.com/weblog/2021/dec/07/security-releases/</guid></item><item><title>Django 4.0 release candidate 1 released</title><link>https://www.djangoproject.com/weblog/2021/nov/22/django-40-rc1/</link><description><p>Django 4.0 release candidate 1 is the final opportunity for you to try out the <a class="reference external" href="https://docs.djangoproject.com/en/4.0/releases/4.0/">abundance of new features</a> before Django 4.0 is released.</p>
85 <p>The release candidate stage marks the string freeze and the call for
86 translators <a class="reference external" href="https://docs.djangoproject.com/en/dev/internals/contributing/localizing/#translations">to submit translations</a>. Provided no major bugs are discovered that can't be solved in
87 the next two weeks, Django 4.0 will be released on or around December 6. Any
88 delays will be communicated on the <a class="reference external" href="https://groups.google.com/g/django-developers/c/zoFt_7Lu2Lc">django-developers mailing list thread</a>.</p>
89 <p>Please use this opportunity to help find and fix bugs (which should be reported to <a class="reference external" href="https://code.djangoproject.com/newticket">the issue tracker</a>). You can grab a copy of the package from <a class="reference external" href="/download/">our downloads page</a> or on PyPI.</p>
90 <p>The PGP key ID used for this release is Mariusz Felisiak: <a class="reference external" href="https://github.com/felixxm.gpg">2EF56372BA48CD1B</a>.</p>
91 </description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Mariusz Felisiak</dc:creator><pubDate>Mon, 22 Nov 2021 00:39:46 -0600</pubDate><guid>https://www.djangoproject.com/weblog/2021/nov/22/django-40-rc1/</guid></item><item><title>2022 DSF Board Nominations</title><link>https://www.djangoproject.com/weblog/2021/nov/16/2022-dsf-board-nominations/</link><description><p>It is that time again to begin to elect next year’s Django Software Foundation’s Board of Directors!</p>
92
93 <p>As you know, the Board guides the direction of the marketing, governance, and outreach activities of the Django community. We provide funding, resources, and guidance to Django events on a global level. Further we provide support to the Django community with an established Code of Conduct and make decisions and enforcement recommendations for violations. We work closely with our corporate and individual members to raise funds to help support our great community.</p>
94
95 <p>In order for our community to continue to grow and advance the Django Web framework, we need your help. The Board of Directors consists of volunteers who are elected to one-year terms. This is an excellent opportunity to help advance Django. We can’t do it without volunteers, such as yourself. For the most part, the time commitment is a few hours per month. Anyone including current Board members, DSF Members, or the public at large can apply to the Board. It is open to all who wish to participate.</p>
96
97 <p>If you are interested in helping to support the development of Django we’d enjoy receiving your application for the Board of Directors. Please fill out the application form by November 30th, 2021 AoE to be considered. Once we have our candidates we will open a week-long voting period.</p>
98
99 <p>If you have any questions about applying, the work, or the process in general please don’t hesitate to reach out via email to foundation@djangoproject.com and one of us will get back to you shortly.</p>
100
101 <p>Thank you for your time and we look forward to working with you in 2022.</p>
102
103 <p>The 2021 DSF Board of Directors</p>
104
105 <p><a href="https://docs.google.com/forms/d/e/1FAIpQLSc_ObkztokBFvf-yTIzgCEkFkM67CeuEHLLgg0-5gngGfyt5w/viewform">Application Form.</a></p></description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Anna Makarudze</dc:creator><pubDate>Tue, 16 Nov 2021 00:00:30 -0600</pubDate><guid>https://www.djangoproject.com/weblog/2021/nov/16/2022-dsf-board-nominations/</guid></item><item><title>Nominations for 2021 Malcolm Tredinnick Memorial Prize</title><link>https://www.djangoproject.com/weblog/2021/nov/12/nominations-2021-malcolm-tredinnick-memorial-prize/</link><description><p>Hello Everyone!</p>
106
107 <p>It is that time of year again when we recognize someone from our community in memory of our friend Malcolm.</p>
108
109 <p>Malcolm was an early core contributor to Django and had both a huge influence and impact on Django as we know it today. Besides being knowledgeable he was also especially friendly to new users and contributors. He exemplified what it means to be an amazing Open Source contributor. We still miss him to this day.</p>
110
111 <p>The <a href="https://www.djangoproject.com/foundation/prizes/">DSF Prize</a> page summarizes the prize nicely:</p>
112
113 <p>The Malcolm Tredinnick Memorial Prize is a monetary prize, awarded annually, to the person who best exemplifies the spirit of Malcolm’s work - someone who welcomes, supports and nurtures newcomers; freely gives feedback and assistance to others, and helps to grow the community. The hope is that the recipient of the award will use the award stipend as a contribution to travel to a community event -- a DjangoCon, a PyCon, a sprint -- and continue in Malcolm’s footsteps.</p>
114
115 <p>We will take nominations until Thursday, November 26th, 2021 AoE and will announce the winner soon after the next DSF Board meeting in December.</p>
116
117 <p>Please make your nominations using this <a href="https://docs.google.com/forms/d/1ohM5w-FpjhVJKUiu_x_lwRGrtJljbbe9GOw_vf3Tv-Y">google form</a>.</p>
118
119 If you have any questions please reach out to the DSF Board at <a href="mailto:foundation@djangoproject.com">foundation@djangoproject.com</a>.</description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Anna Makarudze</dc:creator><pubDate>Fri, 12 Nov 2021 00:00:30 -0600</pubDate><guid>https://www.djangoproject.com/weblog/2021/nov/12/nominations-2021-malcolm-tredinnick-memorial-prize/</guid></item><item><title>Django bugfix release: 3.2.9</title><link>https://www.djangoproject.com/weblog/2021/nov/01/bugfix-release/</link><description><p>Today we've issued the <a class="reference external" href="https://docs.djangoproject.com/en/stable/releases/3.2.9/">3.2.9</a> bugfix release.</p>
120 <p>The release package and checksums are available from <a class="reference external" href="/download/">our downloads page</a>, as well as from the Python Package Index. The PGP key ID used for this release is Mariusz Felisiak: <a class="reference external" href="https://github.com/felixxm.gpg">2EF56372BA48CD1B</a>.</p>
121 </description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Mariusz Felisiak</dc:creator><pubDate>Mon, 01 Nov 2021 04:28:25 -0500</pubDate><guid>https://www.djangoproject.com/weblog/2021/nov/01/bugfix-release/</guid></item><item><title>Django 4.0 beta 1 released</title><link>https://www.djangoproject.com/weblog/2021/oct/25/django-40-beta-1-released/</link><description><p>Django 4.0 beta 1 is now available. It represents the second stage in the 4.0
122 release cycle and is an opportunity for you to try out the changes coming in
123 Django 4.0.</p>
124 <p>Django 4.0 has an abundance of new features which you can read about in
125 <a class="reference external" href="https://docs.djangoproject.com/en/4.0/releases/4.0/">the in-development 4.0 release notes</a>.</p>
126 <p>Only bugs in new features and regressions from earlier versions of Django will be
127 fixed between now and 4.0 final (also, translations will be updated following the
128 &quot;string freeze&quot; when the release candidate is issued). The <a class="reference external" href="https://code.djangoproject.com/wiki/Version4.0Roadmap#schedule">current
129 release schedule</a> calls for a release candidate in a month from now with the
130 final release to follow about two weeks after that around December 6. Early and often
131 testing from the community will help minimize the number of bugs in the release.
132 Updates on the release schedule schedule are available <a class="reference external" href="https://groups.google.com/g/django-developers/c/zoFt_7Lu2Lc">on the django-developers mailing list</a>.</p>
133 <p>As with all alpha and beta packages, this is <strong>not</strong> for production use. But
134 if you'd like to take some of the new features for a spin, or to help find and
135 fix bugs (which should be reported to <a class="reference external" href="https://code.djangoproject.com/newticket">the issue tracker</a>), you can grab a
136 copy of the beta package from <a class="reference external" href="/download/">our downloads page</a> or on PyPI.</p>
137 <p>The PGP key ID used for this release is Mariusz Felisiak: <a class="reference external" href="https://github.com/felixxm.gpg">2EF56372BA48CD1B</a>.</p>
138 </description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Mariusz Felisiak</dc:creator><pubDate>Mon, 25 Oct 2021 04:14:33 -0500</pubDate><guid>https://www.djangoproject.com/weblog/2021/oct/25/django-40-beta-1-released/</guid></item><item><title>Django bugfix release: 3.2.8</title><link>https://www.djangoproject.com/weblog/2021/oct/05/bugfix-release/</link><description><p>Today we've issued the <a class="reference external" href="https://docs.djangoproject.com/en/stable/releases/3.2.8/">3.2.8</a> bugfix release.</p>
139 <p>The release package and checksums are available from <a class="reference external" href="/download/">our downloads page</a>, as well as from the Python Package Index. The PGP key ID used
140 for this release is Carlton Gibson: <a class="reference external" href="https://github.com/carltongibson.gpg">E17DF5C82B4F9D00</a></p>
141 </description><dc:creator xmlns:dc="http://purl.org/dc/elements/1.1/">Carlton Gibson</dc:creator><pubDate>Tue, 05 Oct 2021 02:54:58 -0500</pubDate><guid>https://www.djangoproject.com/weblog/2021/oct/05/bugfix-release/</guid></item><item><title>Django 4.0 alpha 1 released</title><link>https://www.djangoproject.com/weblog/2021/sep/21/django-40-alpha-1-released/</link><description><p>Django 4.0 alpha 1 is now available. It represents the first stage in the 4.0
142 release cycle and is an opportunity for you to try out the changes coming in
143 Django 4.0.</p>
144 <p>Django 4.0 has an abundance of new features which you can read about in <a class="reference external" href="https://docs.djangoproject.com/en/dev/releases/4.0/">the
145 in-development 4.0 release notes</a>.</p>
146 <p>This alpha milestone marks the feature freeze. The <a class="reference external" href="https://code.djangoproject.com/wiki/Version4.0Roadmap#schedule">current
147 release schedule</a> calls for a beta release in about a month and a release
148 candidate about a month from then. We'll only be able to keep this schedule
149 if we get early and often testing from the community. Updates on the release
150 schedule are available <a class="reference external" href="https://groups.google.com/g/django-developers/c/zoFt_7Lu2Lc">on the django-developers mailing list</a>.</p>
151 <p>As with all alpha and beta packages, this is <strong>not</strong> for production use. But
152 if you'd like to take some of the new features for a spin, or to help find and
153 fix bugs (which should be reported to <a class="reference external" href="https://code.djangoproject.com/newticket">the issue tracker</a>), you can grab a
154 copy of the alpha package from <a class="reference external" href="/download/">our downloads page</a> or on PyPI.</p>
155 <p>The PGP key ID used for this release is Mariusz Felisiak: <a class="reference external" href="https://github.com/felixxm.gpg">2EF56372BA48CD1B</a>.</p>
156