1.19.2 — Faster repeated secret decryption and non-pooled test projects

2026-08-25

django-mojo 1.19.2 removes repeated PBKDF2 work from hot secret-decryption paths and aligns generated test projects with the default non-pooled PostgreSQL behavior.

Changed

• Repeated AES-GCM secret decryptions now reuse a bounded 512-entry per-process PBKDF2 key cache. Encryption still derives uncached with fresh salts, and ciphertext and PBKDF2 compatibility are unchanged.
• Generated test projects now use ordinary non-pooled PostgreSQL connections, matching the production default; explicit pooling remains available for consumers that opt in.