Use Trusted Publishing instead of long-lived PyPI tokens. For other things, here's how to use 1Password with direnv to set secrets in env vars. hugovk.dev/blog/2025/se... #security #1Password #direnv #cli #PyPI

There's a nasty #OpenSource #SupplyChain worm going around named Shai-Hulud. It's also capable of exposing some projects' long-lived PyPI API Tokens. Read more on what's happening, and what you can do to protect your projects. TL,DR: Adopt Trusted Publishing 🔐🚀📦 blog.pypi.org/posts/2025-1...

🔒 #Python #security news: We're going to start disabling write access to the #CPython repo for inactive core devs. I proposed this after discussion at the 2024 #LanguageSummit. It no impact on core team nor SC voting status, and you can easily ask for it back. discuss.python.org/t/regularly-...

Join us to meet the inaugural fellows, learn lessons from the pilot year, and discuss with our expert panel on the impact of public sector fellowships for technologists. We’re setting aside spots for interested #FOSS community members. Pre-register here: events.sovereign.tech/fellowship/ 2/2

Hej allihopa! "Välkommen till Python! Detta är den officiella dokumentationen för Python 3.14.0." docs.python.org/sv/3/ The Python docs are now available in Swedish! Thanks to Daniel Nylander! To help translations of any language, see devguide.python.org/documentatio... #Python #docs #Swedish

I've updated the www.python.org/downloads/ page: Added download links to the active Python versions table. Before, you had to hunt for the one you wanted in the table below. They're redirect links, so, for example, www.python.org/downloads/la... goes to www.python.org/downloads/re... #Python

Who will maintain our digital future? On 3 Dec 2025 in Berlin, we’re hosting an event for the #SovereignTechFellowship. In 2025, this program has paid maintainers of essential open source projects, piloting a new model for supporting digital infrastructure in the public interest. 1/2

It's happening! I'm about to defend my doctoral dissertation on the linguistics of email marketing! You can follow the stream here: video.helsinki.fi/unitube/live... The puck drops at 13:15 Finnish time!

I'll be there!

I've finished my report on burnout in OSS and how to reduce it! Read more (and find the link to the full report) on the Open Source Pledge blog! Huge thanks to all the OSS devs who shared their perspectives 💜 Let's keep shining a light on this under-recognised issue!

Reminder: we’re looking for an experienced leader to join our team as the new Head of the Sovereign Tech Fund! In this role, you’ll lead a program with international impact, shape the future of open-source sustainability, and help secure the infrastructure for a democratic digital future.

Who would like Rust in CPython 3.15? @emmatyping.dev and Kirill Podoprigora propose: "Rust will initially only be allowed for writing optional extension modules, but eventually will become a required dependency of CPython..." discuss.python.org/t/pre-pep-ru... #Python #Python315 #CPython #Rust

Coming soon to your favourite new CPython 3.15 profiler 🚀

I’ve just published a deep dive on UUIDv7 with Python 3.14, Django 5.2 and PostgreSQL 18 🐍 Covers Python uuidv7, Django db_default, PostgreSQL functions, GeneratedField and UUIDv47 as a safer alternative for public identifiers 🤖 👉 www.paulox.net/2025/11/14/h... #Python #Django #PostgreSQL #UUIDv7

🎨 Old news: I added colour to argparse CLI help in last month's Python 3.14. ⭐ New news: I just added colour to ruff and ty's help so they can catch up (uv already had colour). #Python #CLI #argparse #ruff #ty #uv #colour

🆕 I made this suggestion in January last year, no-one else magically implemented it, so finally did it myself. ⬇️ There are now big buttons on #Python download pages for the thing you probably want, so in most cases you don't need to examine the full list of 12 files. www.python.org/downloads/re...

New @pypi.org blog TL, DR: - Trusted Publishing used for 25% of all files uploaded in Oct 2025 - @gitlab.com Self-Managed now in beta - Pending Publishers can be added for Organizations, too! #Python #SupplyChain #Security Read it here: blog.pypi.org/posts/2025-1...

Just published a new article about the new Python 3.14 module `compression`. This module offers a neat way to access the 5 compression modules we have in Python: 👉 bz2 👉 gzip 👉 lzma 👉 zlib 👉 zstd The first four were already available as standalone modules...

Here we are again: stunned & full of hope, because of you–each of you wonderful humans in the #Python community. Since we shared the news about our withdrawal from the NSF grant opportunity two weeks ago, we've received >$160,000 in donations across 1,937 donors, which includes 313 new Members–WOW!

New blog post! Decompression is up to 30% faster in CPython 3.15 This blog goes over a journey to find an optimization in some lower-level code in CPython that yields a speedup of 10-30% when decompressing more than 1MiB of data. emmatyping.dev/decompressio...

Looking to make a CPython contribution? I'm going to start working on maintaining a "Good First Issue" board for argparse. If you're interested, have a look and let me know on the GitHub issue if you have any questions. Happy to help 🤝🏻! github.com/orgs/python/...

➡️ Apply now: www.sovereign.tech/jobs/head-of...

Let's show up for The Carpentries!

Now we're in a pivotal phase of growth and scaling, and we're looking for an experienced leader for this key role. You'll lead a program with international impact, shape the future of #opensource sustainability, and help secure the infrastructure for a democratic digital future. 2/3

Like every first Friday of the month, a group of conference organizers get together to talk shop via Conference Chats. Open to anyone interested in conference, event, and community organizing. Today's call is at 1:00PM EST (time.is/compare/1PM_...) Details and invite link at www.conferencechats.org.

Enough already!!! Punctuation, silly women and soundbite science debuk.wordpress.com/2025/11/06/e...

We're #hiring a new Head of the Sovereign Tech Fund! 🚀 The #SovereignTechFund is the flagship program of the Sovereign Tech Agency. Since 2022, we've invested in critical #opensource infrastructure—from curl to FreeBSD to technologies like DNS powering the web—to strengthen #digitalsovereignty. 1/3

There’s been several interesting jobs in tech/open come available lately (OSI, EFF) but with no offense to those other orgs, this one may be the most interesting.

Forget about supporting the PSF, too abstract. Pip installs from PyPI. It would be bad if `pip install` stopped working. Support the org that runs PyPI. Surprise, it's the PSF! Your company depends on #Python. You want it to keep working and keep being good. python.org/psf/sponsors/

Now that @europython.eu talks are live, I want to plug some of the very cool things™ my friends presented: - @diegor.it's talk on the JIT: www.youtube.com/watch?v=5si4... - @maureira.dev's talk on what comes after Rust in the Python ecosystem: www.youtube.com/watch?v=yJPX... (🧵 Cont'd below!)

Wooo, unanimous acceptance of 810! Python is getting lazy imports! So excited about this! discuss.python.org/t/pep-810-ex...

The all-contributors GitHub bot project is looking for new maintainers. Could this be you? github.com/all-contribu... #OpenSource

Lazy Imports are coming to #Python! This is huge for CLIs written in Python :) discuss.python.org/t/pep-810-ex...

Help shape Europe’s Digital Commons — Open position for EDIC Director (F/M/X) Last week, the European Commission announced the creation of the EDIC Digital Commons, a new initiative to support open, interoperable digital commons and strengthen digital sovereignty for 450 million Europeans. 1/3

If you’re interested in donating or becoming a member and would like to *double* your contribution, make sure you jump on the matching campaign generously organized by Glyph and others. It ends tomorrow (Nov 4th), so don’t wait! mastodon.social/@glyph/11545...

Now for some ✨fun✨ updates! Since we posted last Monday about our withdrawal from the NSF grant opportunity, we have received $134K+ in donations across 1700+ donors, which includes 270 new Supporting Members 🤯

The Steering Council has accepted PEP 810 (explicit lazy imports) for Python 3.15! discuss.python.org/t/pep-810-ex... #Python #PEP810 #LazyImports #lazy #Python315

I wrote a bit about what went on at the recent Python Core Sprint at #Arm in Cambridge, plus some bonus @pyconuk.org highlights. hugovk.dev/blog/2025/py... #Python #CoreSprint #PyConUK

We're so happy to annouce that we have an open source design devroom and we're now accepting calls for talks via the FOSDEM pretalx system. Call for participation details and link here: opensourcedesign.net/2025/10/01/f... #opensource #fosdem26 #opensourcedesign #design #oss #fosdem #cfp

This week, the #python Software Foundation rejected a $1.5MM NSF grant, due to a requirement that the PSF abandon diversity work. So I joined forces with Python folks (@offby1, @petrillic, @amethyst) and we're matching up to $12,000 of donations to the PSF. 🧵

I've published a new white paper with Alpha-Omega about mitigating vulnerabilities in the many implementations of ZIP and tar, archive formats that are used by packaging ecosystems like #Python, #NPM, #NuGet, #Ruby, #Rust, and others. #security #oss #opensource #pypi

Archive formats like ZIP and tar can be abused to undermine the integrity of Python package users 📦 Learn how PSF Developer-in-Residence Seth Larson is strengthening Python's security with the #Python community in the new white paper "Slippery ZIPs and Sticky tar-pits" with Alpha-Omega:

Pull requests wanted! I've just opened a whole bunch of issues in the PyLadiesCon Portal repo and all of these are up for grabs. Check it out if you know some Python, Django, and maybe a little of HTML or CSS. github.com/pyladies/pyl... #Python #Django #OpenSource

Python 3.9 is officially EOL! Congratulations to @lukasz.langa.pl on a wonderful run as release manager! 🖤 discuss.python.org/t/the-final-...

🎥 The Thursday conference talks are now live! ✨ Watch them now on our YouTube channel: www.youtube.com/@EuroPythonC...

Python Morsels now supports #Python 3.14! 🎉

These are signals recorded on stations in Alaska. To the left for the 27 February 2022 event and to the right 27 October 2025. There are pairs of signals in all plots. If these are so-called depth phases this would prove that the event was about 25 km deep - and hence without doubt an earthquake.

Every time I post a picture of a seismic signal, I am using #python software. Please read this thread from @python.org (I here have screenshotted the three posts that I think contain what you need to know.) I applaud the Python Software Foundation for taking this stand.

USGS report a seismic event at 41.76, 88.48 just over an hour ago - near the Chinese Lop Nor nuclear test site. earthquake.usgs.gov/earthquakes/... I ran for the map and waveforms from our paper on the February 27, 2022, Lop Nor earthquake ( doi.org/10.1785/0320... ) to get a map and waveform plots.

TLDR; The PSF has made the decision to put our community and our shared diversity, equity, and inclusion values ahead of seeking $1.5M in new revenue. Please read and share. pyfound.blogspot.com/2025/10/NSF-... 🧵