datasette 1.0a27

2026-04-15 · Source: Simon Willison's Weblog · Field: Technology & Digital — Software Development & Engineering, Data Science & Analytics, Cybersecurity & Data Privacy · Depth: Intermediate, quick

Summary

Datasette 1.0a27, an open-source multi-tool for data exploration and publishing, has been released with significant updates. A major change involves moving away from Django-style CSRF form tokens, now utilizing modern browser headers for enhanced security. Additionally, this alpha introduces a new RenameTableEvent, which fires whenever a table is renamed within a SQLite transaction, enabling plugins like datasette-comments to react appropriately. Other notable changes include a new "actor=" parameter for `datasette.client` methods to facilitate internal requests, a `Database(is_temp_disk=True)` option to prevent database locked errors, and the `/-/upsert` API now rejects rows with null primary key values. The `/.json` endpoint also gains an "ok": true key for API consistency.

Key takeaway

For developers building or maintaining Datasette plugins, you should review the new RenameTableEvent to ensure your plugins correctly handle table renames. Additionally, if you are performing internal requests or automated tests, utilize the new "actor=" parameter in `datasette.client` methods for better control and clarity. Be aware that the `/-/upsert` API now strictly rejects null primary key values, requiring adjustments to data insertion logic.

Key insights

Datasette 1.0a27 enhances security and plugin reactivity while refining internal database handling and API consistency.

Principles

• Modern browser headers improve CSRF protection.
• Event-driven architecture aids plugin integration.

In practice

• Use `actor=` for internal Datasette client requests.
• Avoid null primary keys in `/-/upsert` API calls.

Topics

• Datasette
• CSRF Protection
• SQLite Transactions
• Plugin Development
• API Endpoints

Code references

• datasette/datasette-comments
• simonw/datasette

Best for: Software Engineer, Data Engineer, Security Engineer

Related on AIssential

• datasette-export-database 0.3a1 — Datasette-export-database 0.3a1 updates for compatibility with Datasette 1.0a27's cookie changes.
• datasette 1.0a30 — Datasette 1.0a30 enhances data navigation and extensibility through a new customizable "Jump to" menu and plugin hook.
• Google Introduces Room 3.0: A Kotlin-First, Async, Multiplatform Persistence Library — Google has introduced Room 3.0, a significant update to Android's persistence library, which is now Kotlin-first, generating only Kotlin code and exclusively using KSP (Kotlin Symbol Processing) for processing.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Simon Willison's Weblog.