Cool, I've just started using Django so it's good to see it's still being developed.
http://code.djangoproject.com/timeline
Looks like the 1.2.2 security release they did earlier this week was a bit rushed, partially because the security issue was reported via the public bug tracker instead of the security contact address.