@mgorny@social.treehouse.systemsAnd the next big blocker for #Python 3.15 in #Gentoo is time-machine. Which is obviously broken. There's a patch but it's #slop and complex, and it's sitting for 3 months already with no reply. Because obviously patching CPython internals is so much a better idea than freezegun ever were. All these time-based tests need all the ricing you can get; portability doesn't matter.
https://github.com/adamchainz/time-machine/pull/618
@tinoeberl@mastodon.online#Steady #Klimacrew
Wie lassen sich #Wechselrichterdaten vom APsystems EZ1 lokal speichern?
Für statistische Auswertungen müssen alle Daten kontinuierlich gespeichert werden. Wie…
@hynek@mastodon.sociali'm so fucking sick of it
i've got ONE extremely simple and extremely explicit contribution rule/brown m&m test: do not delete the PR checklist
since i'm busy getting structlog out, I’ve let the attrs bug tracker a bit off the leash
go & count for yourself how many PRs opened in the past month followed that instruction.
(and of course, this is not about bureaucracy; they violate many of the important items on that list)
@heiseonline@social.heise.deNoch ein paar der zuletzt hier besonders häufig geteilten #News:
„Copy Fail“: Linux-root in allen großen Distributionen mit 732 Byte Python
@veit@mastodon.socialOn my way to a flying visit to Berlin. Tomorrow, the Python Users Berlin (@…) are meeting for a talk by Sam Bail on PySpark: https://www.meetup.com/python-users-berlin
@emilis@social.linux.pizza
@karlauerbach@sfba.socialA lot of open source projects take care to preserve compatibility with the past, so that changes do not break the projects of existing users.
But then there are others. In my list of "damn the past, full speed ahead on incompatible changes!!" are my most recent encounters:
- Python (not only was the Python 2 abandonment unforgivable and cost many of us a lot of useless conversion work, but the versions of Python 3 seem to change from one to the next to the degree that…
@netzschleuder@social.skewed.depython_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
@stf@chaos.socialwtf does everytime a new v of #python is rolled out in linux distros, all virtual envs break, and i do have to rebuild them manually. we're now 13 minor versions since py v2.7 and everything became worse since then. i have a stable app, and if python would not fuck up this i would not have to touch it in a decade, but because of this, i feel like i'm in the java ecosystem where work is gener…
@rasterweb@mastodon.socialI tried to get someone’s Python code to work and could not due to errors and I did a few searches and then gave up.
I could try using some AI chatbot bullshit to help me out but fuck that… it’s easier to just give up and walk away. Oh well.
@frankel@mastodon.topPEP 832 – Virtual environment discovery
#python
@michabbb@social.vivaldi.net🧩 Rich plugin ecosystem: hundreds of plugins run tasks anywhere — local, SSH, #Docker, #Kubernetes or serverless task runners — and code in any language including #Python, Node.js, R, Go and S…
@gray17@mastodon.social> We introduce gpusnek, a fully functional Python interpreter ported to CUDA, enabling execution of arbitrary Python code directly on the GPU by running one whole interpreter on every CUDA core/thread. This is a tremendously bad idea, but for the duration of this paper we pretend that it is not
[Josef Dean in SIGBOVIK 2026]
@heiseonline@social.heise.deEinige der zuletzt hier besonders häufig geteilten #News:
„Copy Fail“: Linux-root in allen großen Distributionen mit 732 Byte Python
@Techmeme@techhub.socialGoogle releases macOS versions of AI Edge Gallery, which lets users run open models on their devices, and AI Edge Eloquent, an on-device voice dictation app (Google Developers Blog)
https://developers.googleblog.com/brin
@veit@mastodon.socialIf uv is not available in a Python environment, you can still specify the versions using pylock.toml. We have described how to do this here: https://python-basics-tutorial.readthedocs.io/en/latest/libs/install.html#of-packages
@andres4ny@social.ridetrans.itYes, I abuse f-strings in python because "print(f'" will always make more sense to my C-poisoned brain than "print('".
@mgorny@social.treehouse.systems#Python Hypothesis package now requires #RustLang. This is a scale of reverse dependencies I can't handle. I guess this means it's the end of WD40 profiles on #Gentoo, and therefore the end of support for Alpha, ARM<v6, HPPA, M68k, i486 and some other random subsets of architectures and profiles. Thanks for all the fish, etc.
https://github.com/HypothesisWorks/hypothesis/issues/4740
@stf@chaos.socialwhy can't a minor version change not be goddamn backward compatible ffs.
#python
@berlinbuzzwords@floss.socialKafi Streams, built on (Py)DBSP, treats streaming like batch. Strongly consistent from day one. An open source Python library for the 80% of use cases that do not need extreme scale. Ralph Matthias Debusmann will be unveiling it at #bbuzz26.
Learn more: https://2026.berlinbuzzwords.de/session/kafi-streams-complex-stream-processing-made-simple/
@netzschleuder@social.skewed.depython_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
@wraithe@mastodon.socialA user at a client contacted me over what transpired to be them trying to install a python library on a machine (that didn’t have python installed) to run an AI tool at the direction of ChatGPT.
After *I* get it installed:
User: “Ok, how does it work?”
Me: 🤷🏻♀️ (╯°□°）╯︵ ┻━┻ “never seen it before”
@rasterweb@mastodon.social @mgorny@social.treehouse.systems @frankel@mastodon.top @Techmeme@techhub.socialNature publishes a peer-reviewed paper alleging that Microsoft's 2025 quantum breakthrough claims were based on "basic Python errors" and data cherry-picking (Thomas Claburn/The Register)
https://www.theregiste…
@netzschleuder@social.skewed.depython_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
@hynek@mastodon.socialI’d like to announce the most unlikely #Python package release:
service-identity 26.1.0, the best way to verify if a certificate is valid for a hostname, IP, or URI is out!
The main change is that we were able to switch from pyasn1 (thank you for more than a decade of great service! 🫡💛) to do everything within PyCA's cryptography.
@cdonat@hostsharing.coopIs it only me, or has the hashtag #Python converted in to a LinkedIn-like wave of marketing bullshit? I really like Python, and use it a lot, but this is becoming unbearable.
@adlerweb@social.adlerweb.info
@guerda@ruhr.socialDiscovered a segfault in #FastAPI very strange, does only happen on MacOS with Python 3.14.0 ALPHA
The reason was that I was unaware that I ran an alpha version of Python 3.14.
FastAPI segfaults with Python 3.14.0 on MacOS · fastapi/fastapi · Discussion #15819
@rasterweb@mastodon.social➡️ PyPI · The Python Package Index
#bookmarks
@arXiv_csOS_bot@mastoxiv.pageAgent libOS: A Library-OS-Inspired Runtime for Long-Running, Capability-Controlled LLM Agents
Yingqi Zhang
https://arxiv.org/abs/2606.03895 https://arxiv.org/pdf/2606.03895 https://arxiv.org/html/2606.03895
arXiv:2606.03895v1 Announce Type: new
Abstract: Large language model (LLM) agents are evolving from request-response assistants into long-running software actors: they maintain state across model calls, fork subtasks, wait for external events, request human authority, generate tools, and perform side effects that must be resumed and audited. This paper presents Agent libOS, a library-OS-inspired runtime substrate for LLM agents. Agent libOS runs above a conventional host operating system; it does not implement hardware drivers, kernel-mode isolation, or a POSIX-compatible operating system. Instead, it treats an agent as an AgentProcess: a schedulable execution subject with process identity, parent-child lineage, lifecycle state, a tool table derived from an AgentImage, typed Object Memory, explicit capabilities, human queues, checkpoints, events, and audit records. Its central design rule is tools are libc-like wrappers; runtime primitives are the authority boundary. Filesystem access, object access, sleeps, human approval, JIT tool registration, and external side effects are checked at primitive boundaries under explicit capabilities and policy.
We describe the design, threat model, Python prototype, and safety-oriented evaluation. The current prototype implements async scheduling, namespace-local Object Memory, runtime-integrated human approval, one-shot permission grants, per-process working directories, shell and image-registration primitives, Deno/TypeScript JIT tools over a libOS syscall broker, filesystem/object bridge tools, an injectable Resource Provider Substrate, deterministic demos, real-model smoke scripts, and 123 regression tests at the time of writing. Rather than improving planner accuracy, Agent libOS demonstrates a runtime substrate in which long-running LLM agents can be scheduled, authorized, resumed, and audited without treating tool dispatch as the trust boundary.
toXiv_bot_toot
@arXiv_physicsgeoph_bot@mastoxiv.pageJoint elastic full waveform inversion of multi-component geophone and distributed acoustic sensing data
Hoang Anh Nguyen, Ali Tura
https://arxiv.org/abs/2607.01649 https://arxiv.org/pdf/2607.01649 https://arxiv.org/html/2607.01649
arXiv:2607.01649v1 Announce Type: new
Abstract: Joint full waveform inversion (FWI) of distributed acoustic sensing (DAS) and ocean-bottom node (OBN) data typically requires converting measured strain to particle velocity, introducing numerical noise and spectral distortion. To eliminate this, we present an elastic multi-parameter FWI framework using a velocity-stress-strain (VSS) formulation that directly models pressure, particle velocity, and gauge-length-averaged DAS strain from a single forward simulation. Data residuals are injected additively into a single backward simulation, making computational cost independent of the active sensor subsets. We benchmark individual and combined datasets on cross-talk and elastic Marmousi models. Our results show that joint inversion recovers elastic parameters more accurately than single deployments when the sensors offer complementary information. Specifically, pairing two-component geophones with a deviated borehole DAS cable yields the most accurate parameter recovery and mitigates inter-parameter cross-talk by providing a distinct physical observable and complementary depth aperture. We release our implementation as xFWI, an open-source, Devito-based Python package for scalable, multi-deployment inversions.
toXiv_bot_toot
@arXiv_physicscompph_bot@mastoxiv.pageReplaced article(s) found for physics.comp-ph. https://arxiv.org/list/physics.comp-ph/new
[1/1]:
- Walking on Spheres and Talking to Neighbors: Variance Reduction for Laplace's Equation
Michael Czekanski, Benjamin Faber, Margaret Fairborn, Adelle Wright, David Bindel
https://arxiv.org/abs/2404.17692 https://mastoxiv.page/@arXiv_physicscompph_bot/112358997081867258
- From Experiments to Expertise: Scientific Knowledge Consolidation for AI-Driven Computational Phy...
Haonan Huang
https://arxiv.org/abs/2603.13191 https://mastoxiv.page/@arXiv_physicscompph_bot/116237798566267809
- Grounded autonomous scrutiny at scale: emergent critique from reproduction of published computati...
Haonan Huang
https://arxiv.org/abs/2604.12198 https://mastoxiv.page/@arXiv_physicscompph_bot/116407633668438262
- libwignernj: a reusable C/C /Fortran/Python library for exact Wigner symbols and related coeffic...
Susi Lehtola
https://arxiv.org/abs/2605.06634 https://mastoxiv.page/@arXiv_physicscompph_bot/116537877078468610
- An Overview of Relativistic Particle Pushers and their Extension to Arbitrary Order Accuracy
Holger Schmitz
https://arxiv.org/abs/2603.06509 https://mastoxiv.page/@arXiv_physicsplasmph_bot/116198419420211577
- paces: Parallelized Application of Co-Evolving Subspaces, a method for computing quantum dynamics...
R. Kevin Kessing
https://arxiv.org/abs/2603.07341 https://mastoxiv.page/@arXiv_quantph_bot/116204568573959976
- Topology of Plasma Wakefields Driven by Two Color Laguerre Gaussian Laser Pulses
Saumya Singh, Dinkar Mishra, Shivani Aggarwal, Bhupesh Kumar, Pallavi Jha
https://arxiv.org/abs/2605.18336 https://mastoxiv.page/@arXiv_physicsplasmph_bot/116600306625433164
- Resolved Anderson localization of light in dense three-dimensional dielectric disorder
Yevgen Grynko, Jens F\"orstner
https://arxiv.org/abs/2605.25098 https://mastoxiv.page/@arXiv_physicsoptics_bot/116639935317087700
- A Reproducible Benchmark and Evidence-Retrieval Software Framework for Silicon Detector R&D Liter...
Tianqi Gao, Ruobing Jiang, Dawei Fu, Qiang Li, Matthew Kenzie
https://arxiv.org/abs/2606.24725
- Probing Light-Matter Interaction with Topological Data Analysis
Timothy Holt, Maxim Goryachev, Jeremy Bourhill
https://arxiv.org/abs/2606.30007 https://mastoxiv.page/@arXiv_physicsappph_bot/116837978382710147
toXiv_bot_toot
@mgorny@social.treehouse.systems
@theodric@social.linux.pizzaESPHome > reading other people's brainwormed C and turning it into Python to run on the Pi3 I have in the shed and then wondering why the fuck it broke after a sysupgrade
@avstockhausen@fedihum.orgBookmarked: Phillip B. Ströbel: Von der Pythia zu Python. Einführung in die Programmierung für die Geschichtsforschung #Jupyter
@heiseonline@social.heise.de @veit@mastodon.socialNow elementary-data has also been hit: for just under half a day, a malicious version 0.23.3 was available on PyPI, which had stolen credentials such as SSH keys, AWS login details, API tokens and wallet files. The attack was carried out via a script injection vulnerability in one of the GitHub Actions workflows. Cooldown helps protect against such attacks, as we have described here:
@kubikpixel@chaos.social«YubiKey Manager — Sicherheitslücke ermöglicht Ausführung untergeschobenen Codes:
Yubico warnt vor einer Suchpfad-Schwachstelle im YubiKey Manager, libfido2 und python-fido2. Updates korrigieren die Fehler.»
Eine IT-Security Meldung die wirklich sicher ist und Updates nun wirklich sofort vor dem Wochenende gemacht werden müssen.
🔐
@grahamperrin@bsd.cafe@… @… @…
An ideal is that it should not happen.
The reality might be Python-related in…
@grumpybozo@toad.socialRE: https://seattle.pink/@mxchara/116750125454729237
The fact that (so far) Python is in the lead makes me sad.
Python is unfit for system administration. You’ll only convince me otherwise when every fucking Python program doesn’t need its own bespoke …
@fanf@mendeddrum.orgfrom my link log —
Someone’s been messing with Python’s floating point subnormals!
https://moyix.blogspot.com/2022/09/someones-been-messing-with-my-subnormals.html
saved 2022-09-06
@rasterweb@mastodon.social➡️ fstring.help: Python f-string Guide
#bookmarks
@tinoeberl@mastodon.online @mgorny@social.treehouse.systemsI have a #Python favor to ask. Could someone look at Python 3.15 test failures in itsdangerous? It's blocking quite a large part of package dependency graph in #Gentoo, and the failure looks, errr, dangerous.
https://github.com/pallets/itsdangerous/issues/420
@compfu@mograph.socialMy current task for our #VFXPipeline is to accomodate Windows users in a Linux pipeline. Easiest option: give every Photoshop artist a Linux workstation for Nuke. Seems to be a common thing. But out of curiosity (and to be prudent with hardware) I‘m trying to get everything working on Windows. A constant source of sadness I have to say, worse than UTF8 strings in Python 2.
@tiotasram@kolektiva.socialIdea: statically typed language (or Python type checker?) Where types aren't declared, but can only be assigned by providing tests/examples that use that type. Examples could provide explicit type info where necessary, but code could not.
If it's not documented with an example, it's not safe to use with those types.
@krone@frawas.deLäufer knipste Python - Würgeschlange mitten in der Steiermark gesichtet #News #Nachrichten
@Techmeme@techhub.socialAnalysis: the share of entry-level hiring in India's tech sector fell to ~15% in 2025 from 28% in 2024 as companies shifted focus to AI and automation roles (Tanya Pandey/The Economic Times)
https://economictimes.i…
@datascience@genomic.socialVideo tutorials for modern ideas and open source tools. #python
@veit@mastodon.socialI’m organising the next @… meet-up, featuring a talk by Sam Bail on PySpark: https://www.meetup.com/python-users-berlin-pub/events/315354198…
@mgorny@social.treehouse.systemsIt's always important to have a consistent #security policy.
For example, a policy of "If somebody filed a CVE, it's an important security issue, and we will fix it as such, no matter how meaningless the fix is. If nobody did, it's just a glorified bug fix, no matter how serious the bug was."
So we've just seen a #pip security release over "installing random packages can overwrite pip's files and pip can lazy-import some of them immediately afterwards", with a fix of "pip will no longer load them until you run it again" (leaving the underlying security issue of "any #Python package can override files installed by any other Python package" as intended behavior). As Eli Schwartz beautifully put it, you are not expected to be using the virtual environment; you should create it, install packages into it (at most once!), and then frame it and put it on the wall to admire.
Now we're seeing a "bug fix" for "malicious entry point names can write outside of virtual environment". If nobody filed a CVE, it's obviously not a security issue at all. At least upstream graced us with fixing it without correcting the spec to forbid that first.
https://github.com/pypa/pip/issues/14000
@inthehands@hachyderm.ioOne last example:
The first LLM code example that really made my eyes pop was early after the release of GPT, when somebody got it to combine Breakout with Conway’s Game of Life (a truly delightful idea). It worked!
Funny thing: the Breakout code and the Life code had a •completely• different style and flavor. Red flag. In about 15 minutes of web searching, I was able to find one of the projects (can’t remember if it was the Breakout or the Life half) which it had copied wholesale, with just a few variable renames. And the other half? It was in Python, but it used dictionaries where it really should have used objects — tons of `thing["prop"]` where it should have said `thing.prop`, and lots of other un-Pythonic stuff besides. It was a machine translate of code from another language, very likely Javascript.
The entire thing was a plagiarized Breakout and a plagiarized Game of Life, one transpiled, and all stuck together in a single run loop. To be fair, figuring out how to (1) run both halves of the logic from a single loop and (2) count the Life cells as Breakout bricks is work I'd cheer on from a second-semester intro CS student! It's not, however, quite what's being sold by these companies.
6/
@todbot@mastodon.socialI was on the #teachingpython podcast! I got to talk with Kelly and Julian about Python, #CircuitPython, UF2 bootloader troubles, and #embedded systems in general. It was a lot of fun.
@todbot@mastodon.socialI was on the #teachingpython podcast! I got to talk with Kelly and Julian about Python, #CircuitPython, UF2 bootloader troubles, and #embedded systems in general. It was a lot of fun.
@askans@bonn.socialWarum gibt es kein Python-only LLM?
Oder gibt es eins?
@stiefkind@mastodon.social»Hey, KI! Bestimmt erinnerst du dich noch an die 150.000 Zeilen Code, die du mir vor so sieben, acht Monaten mal in Python vibecoded hast? Der müsste jetzt bitte auf das neue API angepasst werden. Und wenn du eh schon dabei bist: portiere das doch alles auch gleich noch von Python nach Rust.« 🤡 #justthinkin
@cwensel@fosstodon.orgfunny, codex is writing perl scripts where claude probably would be writing python scripts to solve bulk find/edit issues
@ellie@ellieayla.netRealization that 90% of the time I'm searching "the internet" I'm actually looking for results from the same 10 websites. All of which have their own search. Like wikipedia. Or docs.python.org. And I already know which one I want to search.
Most of what I want from a unified search head can be delivered by parsing out some prefix (wp, pydoc) and redirecting the rest onward. No mouse. No UI.
Thinking a browser is unnecessary until a result url is selected - I just want https://qsapp.com.
@hynek@mastodon.socialfor no particular reason whatsoever, I've updated my guide on how to measure #Python coverage across GitHub Action containers without an external service (*cough* Codecov *cough*)
https://hynek.me/articles/ditch-codeco
@mgorny@social.treehouse.systemsThe #Gentoo #Python 3.14 switch / 3.11 3.13t removal PR is green. Doing some final testing locally before merging it (one that involves 350 "merge wait" packages, what could possibly go wrong…).
https://codeberg.org/gentoo/gentoo/pulls/1031
@netzschleuder@social.skewed.depython_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
@rasterweb@mastodon.socialI got some Python code working yesterday after being convinced I could not figure it out… but figured it out!
Realized I needed extra code today, thought it would be a pain but figured it out in no time.
Maybe I can write Python okay…
@veit@mastodon.social @fanf@mendeddrum.orgfrom my link log —
Inside SPy: language semantics for a statically-typed compiled variant of Python.
https://antocuni.eu/2026/03/25/inside-spy-part-2-language-semantics/
saved 2026-05-23
@mgorny@social.treehouse.systems @frankel@mastodon.top @Techmeme@techhub.socialStarlette, an open-source Python framework underpinning FastAPI, has a vulnerability, called BadHost, that can allow hackers to bypass authorization (Dan Goodin/Ars Technica)
https://arstechnica.com/information-te
@grahamperrin@bsd.cafe@… thanks!
Marimo OSS Python Notebook RCE: From Disclosure to Exploitation in Under 10 Hours | Sysdig — <https://www.
@datascience@genomic.socialPolars is a lightning fast DataFrame library/in-memory query engine with parallel execution and cache efficiency. And now you can use is with the tidyverse syntax: #rstats
@arXiv_physicscompph_bot@mastoxiv.pageReplaced article(s) found for physics.comp-ph. https://arxiv.org/list/physics.comp-ph/new
[1/1]:
- Learning Stiff Dynamical Operators: Scaling, Fast-Slow Excitation, and Eigen-Consistent Neural Mo...
Mauro Valorani
https://arxiv.org/abs/2601.01632 https://mastoxiv.page/@arXiv_physicscompph_bot/115847284915795620
- How Physical Dynamics Shape the Properties of Ising Machines: Evaluating Oscillators vs. Bistable...
Abir Hasan, Nikhil Shukla
https://arxiv.org/abs/2603.06843 https://mastoxiv.page/@arXiv_physicscompph_bot/116204003660873932
- Quantum metric-induced generalized magneto-optical effects in $\mathcal{PT}$-symmetric antiferrom...
Yongpan Li, Yichen Liu, Cheng-Cheng Liu
https://arxiv.org/abs/2503.04312 https://mastoxiv.page/@arXiv_condmatmtrlsci_bot/114120036631640231
- Filtered Quantum Phase Estimation
Gwonhak Lee, Minhyeok Kang, Jungsoo Hong, Stepan Fomichev, Joonsuk Huh
https://arxiv.org/abs/2510.04294 https://mastoxiv.page/@arXiv_quantph_bot/115332659452746830
- NAVIS: A LAMMPS-Python framework for efficient computation of nanochannel velocity and thermal in...
Sleeba Varghese, Sobin Alosious, Jesper Schmidt Hansen, Billy Dean Todd
https://arxiv.org/abs/2601.11391 https://mastoxiv.page/@arXiv_condmatsoft_bot/115920990500539102
- Fast proton transport and neutron production in proton therapy using Fourier neural operators
Blangiardi, Ratliff, Teichert, Ytre-Hauge, Langer, Meric
https://arxiv.org/abs/2603.03912 https://mastoxiv.page/@arXiv_physicsmedph_bot/116175752411043510
- Smoluchowski Coagulation Equation and the Evolution of Primordial Black Hole Clusters
Borui Zhang, Wei-Xiang Feng, Haipeng An
https://arxiv.org/abs/2604.01684 https://mastoxiv.page/@arXiv_astrophCO_bot/116339761602853235
- Identical Particle Systems : Hierarchical Spectral Reconstruction
Hovan Lee, R\'emi Lef\`evre, Gr\'egoire Ithier
https://arxiv.org/abs/2605.02864 https://mastoxiv.page/@arXiv_quantph_bot/116521159694499994
- A matrix free action of the Ashtekar-Lewandowski volume operator of loop quantum gravity
Waleed Sherif
https://arxiv.org/abs/2606.18397 https://mastoxiv.page/@arXiv_grqc_bot/116770027887442756
toXiv_bot_toot
@netzschleuder@social.skewed.depython_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
https://networks.sk…
@veit@mastodon.social @rasterweb@mastodon.social @mgorny@social.treehouse.systems @hynek@mastodon.socialI’m shocked I haven’t sold out PyTexas yet! What’s up Austin, I even got a fresh haircut! #Python
https://pretix.eu/pytexas/2026/
@fanf@mendeddrum.orgfrom my link log —
Plotnine: grammar of graphics for Python.
https://plotnine.org/
saved 2026-04-20 https://dotat.at/:/96VP8.html…
@heiseonline@social.heise.de#TGIQF: „Das Leben des Brian“ — Das Quiz rund zu Monty Pythons Filmklassiker
Die Komödie "Das Leben des Brian" sorgte 1979 für reichlich Gelächter und kirchliche Pikiertheit. Wir würdigen den Monty-Python-Klassiker mit einem Quiz.
@mgorny@social.treehouse.systems#Python #cryptography library (yes, the one that criticizes everything and everyone) is now vibecoded. Our future is truly bright!
Noticed because apparently "Claude" wrote a test that OOM-ed my system. But hey, #RustLang protects against memory errors, so it's fine to vibecode your security critical components.
#security #AI #LLM #NoAI #NoLLM
@hynek@mastodon.socialHere’s stamina 26.1.0, my opinionated #Python retry package, that now supports more than 1024 retries for the cases when you need A LOT of stamina: https://github.com/hynek/stamina/releases/tag/26…
@frankel@mastodon.topThe Java Geek Weekly special "pneumonia during a heatwave" 🥵🤒 edition is out.
Get it before it's too late!
https://blog.frankel.ch/java-geek-weekly/142/
@mgorny@social.treehouse.systems> No significant changes.
Looks inside.
> Significant changes.
#Python
@fanf@mendeddrum.orgfrom my link log —
Nornir: an automation framework in Python.
https://nornir.readthedocs.io/en/latest/
saved 2020-03-23 https://dotat.a…
@hynek@mastodon.socialMaintainer friends of wheel-heavy #Python packages: do we already have some practical, standard way to automatically upload all the cibuildwheel output across all architectures? My current workflow is a) a pain in the ass and b) requires me to have one last PyPI upload token.
@rasterweb@mastodon.social➡️ Beautiful Soup - Python Screen-Scraping
#bookmarks
@mgorny@social.treehouse.systemsWell, we've finally packaged #Valkey (another #Redis fork) in #Gentoo, along with its #Python bindings.
Not that we wanted to, but #FakeRedis now started requiring it for tests so heavily that it was too much effort to patch it out. Just to be clear, it just requires the Python bindings, because its test suite happily runs against either Redis or Valkey, and literally doesn't support testing against both simultaneously. But to add the bindings, we needed the database to test them against. And since I've added the package too, I've put a lot of effort (and swearing) to test FakeRedis against both servers.
Should you be using Valkey? Well, let's put it like this. You shouldn't be using Redis, because it's enterprise quality shit. Valkey is roughly what happens when you fork enterprise quality shit and have no clue what you're doing. Though you are able to mostly get renaming right (one valkey-py test failed over the server calling itself "Valkey" rather than "Redis").
Disclaimer: I've only looked at the Python bindings. Maybe the maintainers are more knowledgeable with the server itself.
@frankel@mastodon.top @mgorny@social.treehouse.systemsI've been sad about the upcoming removal of #PyPy from #Gentoo, but given how many regressions I've been seeing recently in a variety of #Python packages, I'm eagerly waiting for the day when I'll remove the support and be able to stop having to deal with the test failures somehow. Not that at this point any other way of dealing besides skipping them makes any sense.
@mgorny@social.treehouse.systems @mgorny@social.treehouse.systems> #Python Stable ABI
> makes extensions unstable (they start segfaulting)
https://github.com/pikepdf/pikepdf/issues/723#issuecomment-4507472913
@mgorny@social.treehouse.systemsAlways appreciate #Python package developers being responsible about API stability, and… [checks notes]… raising the major version number over a "minor API tweak", then delaying the release until a security fix demanded one.
#packaging
@mgorny@social.treehouse.systems @mgorny@social.treehouse.systemsHow to get a package removed from #Gentoo?
1. Add a new #NIH dependency.
2. The dependency turns out to use coherent.build. Nightmare! Oh, wait, apparently coherent.build generates source distributions that use flit.core (understandable; coherent.build is unusable).
3. The dependency depends on chardet (the project famous for GPL copywashing). Okay, technically it works with the older version, and the dependency is optional with poor person's fallback, so I guess it would be fine.
4. But hey, this package is not used by anything, and the last package using it in Gentoo was removed in 2020, after not being touched for 4 years already. Also, that package is not maintained upstream since 2017, so I guess there's negligible risk of it ever coming back.
#Python
@mgorny@social.treehouse.systems @mgorny@social.treehouse.systemsYes, please reinvent more wheels by rewriting #Python logic in #RustLang. What could possibly go wrong?!
https://github.com/awolverp/cachebox/issues/51
@mgorny@social.treehouse.systemsFun fact: #Azure Pipelines don't support #YAML files with anchors/aliases.
Also fun fact: both #PyYAML and #RuamelYAML *insist* on emitting anchors/aliases, and at least the PyYAML authors seem pretty, errr, opinionated on emitting them.
#Python
@mgorny@social.treehouse.systemsThe state of #security these days: #Python #virtualenv package now includes SHA256 sums of their bundled wheels, declaring that it protects against "supply-chain compromise". Because obviously there are so many attack vectors that permit you to alter a .whl file but not the .py file in the same directory.
No, I'm not saying verifying checksum makes no sense, because indeed it can save some pain if fs is damaged somehow. However, calling this a "security" feature is a misnomer at best, and openly giving people false sense of security at worst.
@mgorny@social.treehouse.systemsOne of my strong suites in all the packaging work is the knowledge in my head.
"Why don't you write it down for others to benefit from, then?", you'd ask.
The thing is, this knowledge is basically "hot cache". I'm bumping hundreds of #Python packages in #Gentoo, so I remember stuff. And because of that, I can quickly notice some things or answer some questions.
If that were written down, the effort needed to find it would diminish all the gain. I mean, technically *it is* already written down, and the whole point is that I have it "cached".
