Fix/production readiness audit

.github/workflows/ci.yml

@@ -42,13 +42,14 @@ jobs:
           - "3.14"
         django-version:
           - "6.0"
+          - "6.1"
         client-library-version:
           - "latest"
 
         include:
           # Pre-release client libraries (redis-py master, valkey-py main)
           - python-version: "3.14"
-            django-version: "6.0"
+            django-version: "6.1"
             client-library-version: "dev"
 
           # Pre-release Django
@@ -84,6 +85,10 @@ jobs:
 
       - name: Run backend tests
         run: uv run pytest tests/cache/ -n auto
+        env:
+          # Guard against pyc write races on first concurrent import
+          # (intermittent xdist collection ImportError on fresh checkouts).
+          PYTHONDONTWRITEBYTECODE: "1"
 
       - name: Upload coverage to Codecov
         if: matrix.python-version == '3.14' && matrix.django-version == '6.0' && matrix.client-library-version == 'latest'
@@ -94,6 +99,10 @@ jobs:
 
   test-admin:
     runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        django-version: ["6.0", "6.1"]
     steps:
       - uses: actions/checkout@v7
 
@@ -106,11 +115,37 @@ jobs:
       - name: Install dependencies
         run: uv sync --group dev
 
-      - name: Install Django
-        run: uv pip install "Django~=6.0.0"
+      - name: Install Django ${{ matrix.django-version }}
+        run: uv pip install "Django~=${{ matrix.django-version }}.0"
 
       - name: Run admin tests
         run: uv run pytest tests/admin/ -n auto
+        env:
+          PYTHONDONTWRITEBYTECODE: "1"
+
+  test-glide-adapter:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+
+      # glide ships no free-threaded wheel, so this runs on GIL cp314 only.
+      - name: Set up Python
+        run: uv python install 3.14
+
+      - name: Install dependencies
+        run: uv sync --group dev --extra valkey-glide
+
+      # The cache fixtures skip an adapter whose client library is missing
+      # (_adapter_library_available in tests/fixtures/cache.py), and no other
+      # job installs the glide extra, so this is the only place the shared
+      # suite reaches the glide adapter.
+      - name: Run backend tests with the glide adapter
+        run: uv run pytest tests/cache/ -n auto
+        env:
+          PYTHONDONTWRITEBYTECODE: "1"
 
   build-pure-wheel:
     name: Build pure-Python wheel (django-cachex)
@@ -163,10 +198,11 @@ jobs:
         with:
           package-dir: crates/django-cachex-redis-rs
         env:
+          # No CIBW_ENABLE: cibuildwheel 4.0 dropped the cpython-freethreading
+          # group and builds 3.14t whenever CIBW_BUILD asks for it.
           CIBW_BUILD: ${{ matrix.cibw_build }}
-          CIBW_ENABLE: cpython-freethreading
           CIBW_ARCHS: ${{ matrix.cibw_archs }}
-          # Linux builds run inside manylinux containers — install Rust there.
+          # Linux builds run inside manylinux containers, so install Rust there.
           # macOS and Windows runners have rustup preinstalled.
           CIBW_BEFORE_ALL_LINUX: |
             curl --proto =https --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --profile minimal
@@ -210,6 +246,8 @@ jobs:
 
       - name: Run cache tests against built wheels
         run: uv run --no-sync pytest tests/cache/ -n auto
+        env:
+          PYTHONDONTWRITEBYTECODE: "1"
 
   smoke-test-wheel-freethreaded:
     name: Smoke-test cp314t rust wheel
@@ -239,7 +277,7 @@ jobs:
           uv pip install --no-deps wheelhouse/django_cachex_redis_rs-*-cp314-cp314t-*.whl
 
       - name: Verify FT wheel imports
-        run: uv run --no-sync python -c "import sys; from django_cachex.adapters import _redis_rs; assert not sys._is_gil_enabled(), 'GIL is enabled — not running on free-threaded build'; print('OK', _redis_rs, sys.version)"
+        run: uv run --no-sync python -c "import sys; from django_cachex.adapters import _redis_rs; assert not sys._is_gil_enabled(), 'GIL is enabled, not running on free-threaded build'; print('OK', _redis_rs, sys.version)"
 
   smoke-test-pure-only:
     name: Smoke-test opt-out (pure wheel only, no rust package)

.github/workflows/dependabot-automerge.yml

@@ -10,9 +10,41 @@ jobs:
   automerge:
     runs-on: ubuntu-latest
     if: github.actor == 'dependabot[bot]'
+    timeout-minutes: 30
     steps:
-      - name: Enable auto-merge
-        run: gh pr merge --auto --squash "$PR_URL"
+      # Without required status checks on main, `gh pr merge --auto` merges
+      # immediately, red CI included. Wait for every workflow run on this PR
+      # head instead, and merge only once they have all succeeded.
+      #
+      # Poll check suites, not check runs: a `needs:`-gated job gets no check
+      # run until its dependencies finish, so a poll landing in that gap sees
+      # nothing pending and merges before the wheel tests have even started.
+      # A suite stays in progress across the gap. This job's own suite is
+      # excluded so it does not wait on itself forever.
+      - name: Wait for CI
+        run: |
+          sha=$(gh pr view "$PR_URL" --json headRefOid --jq .headRefOid)
+          own=$(gh api "repos/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID" --jq .check_suite_id)
+          while true; do
+            suites=$(gh api "repos/$GITHUB_REPOSITORY/commits/$sha/check-suites?per_page=100" \
+              --jq "[.check_suites[] | select(.id != $own) | {status, conclusion}]" || true)
+            [ -n "$suites" ] || suites='[]'
+            bad=$(jq -c '[.[] | select(.conclusion != null and ([.conclusion] | inside(["success", "neutral", "skipped"]) | not))]' <<<"$suites")
+            if [ "$(jq 'length' <<<"$bad")" -gt 0 ]; then
+              echo "CI did not pass: $bad"
+              exit 1
+            fi
+            if [ "$(jq 'length' <<<"$suites")" -gt 0 ] && [ "$(jq '[.[] | select(.status != "completed")] | length' <<<"$suites")" -eq 0 ]; then
+              break
+            fi
+            sleep 30
+          done
+        env:
+          PR_URL: ${{ github.event.pull_request.html_url }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Merge
+        run: gh pr merge --squash "$PR_URL"
         env:
           PR_URL: ${{ github.event.pull_request.html_url }}
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/publish.yml

@@ -66,14 +66,15 @@ jobs:
         with:
           package-dir: crates/django-cachex-redis-rs
         env:
+          # No CIBW_ENABLE: cibuildwheel 4.0 dropped the cpython-freethreading
+          # group and builds 3.14t whenever CIBW_BUILD asks for it.
           CIBW_BUILD: ${{ matrix.cibw_build }}
-          CIBW_ENABLE: cpython-freethreading
           CIBW_ARCHS: ${{ matrix.cibw_archs }}
           CIBW_BEFORE_ALL_LINUX: |
             curl --proto =https --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --default-toolchain stable --profile minimal
           CIBW_ENVIRONMENT_LINUX: PATH="$HOME/.cargo/bin:$PATH"
 
-      # sdist is a single artifact — only build it once on the Linux x86_64 leg.
+      # sdist is a single artifact, so only build it once on the Linux x86_64 leg.
       - name: Build Rust sdist
         if: matrix.label == 'linux-x86_64'
         uses: PyO3/maturin-action@v1

.github/workflows/tag.yml

@@ -23,7 +23,7 @@ jobs:
 
           if curl -s "https://pypi.org/pypi/django-cachex/$CURRENT_VERSION/json" | grep -q '"version"'; then
             echo "should_release=false" >> $GITHUB_OUTPUT
-            echo "Version $CURRENT_VERSION already on PyPI — nothing to do"
+            echo "Version $CURRENT_VERSION already on PyPI, nothing to do"
             exit 0
           fi
 
@@ -33,7 +33,7 @@ jobs:
           git fetch --tags
           if git rev-parse "v$CURRENT_VERSION" >/dev/null 2>&1; then
             echo "should_release=false" >> $GITHUB_OUTPUT
-            echo "Tag v$CURRENT_VERSION already exists — delete it manually to re-release"
+            echo "Tag v$CURRENT_VERSION already exists; delete it manually to re-release"
             exit 0
           fi
 
@@ -70,6 +70,10 @@ jobs:
 
       - name: Run tests
         run: uv run pytest tests/cache/ -n auto
+        env:
+          # Guard against pyc write races on first concurrent import
+          # (intermittent xdist collection ImportError on fresh checkouts).
+          PYTHONDONTWRITEBYTECODE: "1"
 
   tag-and-trigger:
     needs: [check-version, test]
@@ -90,8 +94,8 @@ jobs:
           git tag "v$VERSION"
           git push origin "v$VERSION"
 
-      # GITHUB_TOKEN-pushed tags don't trigger downstream workflows — explicit
-      # dispatch is required.
+      # GITHUB_TOKEN-pushed tags don't trigger downstream workflows, so an
+      # explicit dispatch is required.
       - name: Trigger publish workflow
         run: gh workflow run publish.yml -f version=$VERSION -R ${{ github.repository }}
         env:

.pre-commit-config.yaml

@@ -9,7 +9,7 @@ default_language_version:
 
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v5.0.0
+    rev: v6.0.0
     hooks:
       - id: check-ast
       - id: check-case-conflict
@@ -54,6 +54,15 @@ repos:
         entry: uv run ruff format
         language: system
         pass_filenames: false
+      # `-` makes djLint take its file list from `files` in [tool.djlint]; it
+      # ignores anything pre-commit would append, so don't pass filenames.
+      # PYTHON_GIL=1 because djLint's compiled module initialises unsafely on
+      # the free-threaded build and dies with a NameError on _LINE_PATTERN.
+      - id: djlint
+        name: djlint
+        entry: env PYTHON_GIL=1 uv run djlint - --lint
+        language: system
+        pass_filenames: false
 
   - repo: local
     hooks:

README.md

@@ -36,8 +36,8 @@ CACHES = {
 - Cache stampede prevention (TTL-based XFetch).
 - Two composite backends: `StreamCache` (cross-pod stream-synchronized in-memory cache) and `TieredCache` (L1/L2 with TTL propagation).
 - Django `LocMemCache` and `DatabaseCache` extensions with the same data-structure ops and admin support.
-- Optional Rust I/O driver (PyO3 + tokio + redis-rs) under the same `RespCache` API. Free-threaded CPython (3.14t) supported.
-- Optional `valkey-glide` adapter: Valkey's official Rust-cored client, exposed as `ValkeyGlideCache`.
+- Optional Rust I/O driver (PyO3 + tokio + redis-rs) under the same `RespCache` API. Free-threaded CPython (3.14t) supported. Experimental.
+- Optional `valkey-glide` adapter: Valkey's official Rust-cored client, exposed as `ValkeyGlideCache`. Experimental.
 - Django admin UI for browsing keys, inspecting values, editing, and flushing. See below.
 
 ## Cache Admin
@@ -78,15 +78,18 @@ Full documentation at [oliverhaas.github.io/django-cachex](https://oliverhaas.gi
 - Valkey 7.0+ or Redis 6.0+ on the server (the admin's compare-and-swap
   edits use `SET ... KEEPTTL`, which lands in Redis 6.0)
 
-The Rust I/O driver is optional. To opt in, install with the `redis-rs`
+The Rust I/O driver is optional and experimental: interfaces and
+behavior may still change, and it has seen less production testing than
+the redis-py/valkey-py paths. To opt in, install with the `redis-rs`
 extra (`pip install django-cachex[redis-rs]`); this pulls in the
 `django-cachex-redis-rs` companion package. Prebuilt wheels are published
 for Linux x86_64, Linux aarch64, macOS arm64, and Windows amd64, on
 both cp314 and cp314t (free-threaded). Without the extra, the
 `RedisRsCache` backends are unavailable but everything else works.
 
-The `valkey-glide` adapter is also optional. Install with the
-`valkey-glide` extra (`pip install django-cachex[valkey-glide]`) to enable
+The `valkey-glide` adapter is also optional and experimental, with the
+same caveats. Install with the `valkey-glide` extra
+(`pip install django-cachex[valkey-glide]`) to enable
 `ValkeyGlideCache`; it pulls in `valkey-glide-sync` and `valkey-glide`,
 the official Rust-cored Valkey client. cp314 GIL only; no free-threaded
 wheels yet. Cluster is supported via `ValkeyGlideClusterCache`; Sentinel