Tootfinder

Opt-in global Mastodon full text search. Join the index!

@heiseonline@social.heise.de
2026-06-11 14:07:00

heise | Grundlagen in Python: Dictionarys meistern und Daten effizient organisieren
Mit Schlüssel-Wert-Paaren lassen sich Daten clever strukturieren. Wir zeigen, wie Sie Python-Dictionarys effizient erstellen und steuern.

@frankel@mastodon.top
2026-06-11 09:09:12

Vulnerability and malware checks in #uv
#python

@veit@mastodon.social
2026-06-10 06:46:21

📆 On 13 August, all #Berlin #Python user groups – @…, @…

@hynek@mastodon.social
2026-06-09 04:53:34

for no particular reason whatsoever, I've updated my guide on how to measure #Python coverage across GitHub Action containers without an external service (*cough* Codecov *cough*)
hynek.me/articles/ditch-codeco

@avstockhausen@fedihum.org
2026-06-10 11:00:02

Bookmarked: Phillip B. Ströbel: Von der Pythia zu Python. Einführung in die Programmierung für die Geschichtsforschung #Jupyter

@rasterweb@mastodon.social
2026-06-12 14:11:16

@… I gave this thing a try today... 😉
codeberg.org/jjg/paxton

@fanf@mendeddrum.org
2026-08-11 14:42:04

from my link log —
Line breaks in Python and Unicode.
b-list.org/weblog/2026/aug/10/
saved 2026-08-10

@thomasrenkert@hcommons.social
2026-08-12 06:00:19

funniest thing in #LLM news. One man's month-long research to uncover the secrets of the Frontier Labs is another man's "hey I wrote this python deep_think script":
xcancel.com/_can1357/stat…

@awinkler@openbiblio.social
2026-06-11 12:24:43

Florian Thierrys #OER zu #QGIS und #Wikidata:

@stiefkind@mastodon.social
2026-06-10 09:35:43

»Hey, KI! Bestimmt erinnerst du dich noch an die 150.000 Zeilen Code, die du mir vor so sieben, acht Monaten mal in Python vibecoded hast? Der müsste jetzt bitte auf das neue API angepasst werden. Und wenn du eh schon dabei bist: portiere das doch alles auch gleich noch von Python nach Rust.« 🤡 #justthinkin

@michabbb@social.vivaldi.net
2026-07-11 00:58:19

🛡️ It also scans heredocs & inline scripts (python -c, bash -c, node -e) via AST-based analysis to catch destructive operations the outer command hides
🚀 Whitelist-first with a modular pack system; works on Linux, macOS & Windows (WSL) and auto-configures hooks for Claude Code, Codex, Gemini, Copilot & Cursor

@lpryszcz@genomic.social
2026-06-12 07:52:52

handy random string (password) generator
echo `tr --complement --delete "a-fA-F0-9" < /dev/urandom | head -c 12`
#bash #cmdline #tricks
source:

@hynek@mastodon.social
2026-07-09 10:07:54

old and busted: delete failing tests
new and hotness: delete CI configuration
this is FOSS DoS; I have no other term for it
github.com/python-attrs/attrs/

@netzschleuder@social.skewed.de
2026-08-02 19:00:08

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@frankel@mastodon.top
2026-06-09 17:05:21

Are you really expected to run five type-checkers now?
#python

@hynek@mastodon.social
2026-08-07 17:58:40

omg omg omg peps.python.org/pep-0841/

@tinoeberl@mastodon.online
2026-07-03 15:17:02

#Steady #Klimacrew
Wie lassen sich #Wechselrichterdaten vom APsystems EZ1 lokal speichern?
Für statistische Auswertungen müssen alle Daten kontinuierlich gespeichert werden. Wie…

@jhelberg@mastodon.social
2026-06-08 13:17:22

So virtualenv solves the issue of brutal incompatibilities between python stuff (at the cost of huge amounts of diskspace), but the minute uwsgi comes into play, it is overboard and there is hardly any way to activate plugins for old python interpreters. #pythonwoes

@tiago@social.skewed.de
2026-07-08 19:37:23

Good news everyone! 🎉
The new version 3.0 of graph-tool is just out with major improvements! See below.
graph-tool.skewed.de
graph-tool is a comprehensive and efficient Python library to work with networks, including structural, dynamical, and statistical algorithms, as well as visualiza…

@ubuntourist@mastodon.social
2026-08-08 21:34:07

Commodore Amiga: "We're not dead yet! We feel happy!" - Monty Python and the Holy Grail
Yes, but will it have a MySpace client app? 😉
#Amiga

@Techmeme@techhub.social
2026-06-24 15:56:24

Nature publishes a peer-reviewed paper alleging that Microsoft's 2025 quantum breakthrough claims were based on "basic Python errors" and data cherry-picking (Thomas Claburn/The Register)
theregiste…

@mgorny@social.treehouse.systems
2026-07-02 13:13:26

#TIL that the Python Pillow library uses the PING command as a #Windows equivalent of sleep.
#cmd

@netzschleuder@social.skewed.de
2026-08-02 02:00:09

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@publicvoit@graz.social
2026-07-28 15:51:06

#Python #uv users on #Debian: I've been using this setup:
apt install extrepo
extrepo enable uv
apt install uv
That worked perfectly for all local users using standard Debian package management …

@veit@mastodon.social
2026-06-01 05:42:17

If uv is not available in a Python environment, you can still specify the versions using pylock.toml. We have described how to do this here: python-basics-tutorial.readthe

@roland@devdilettante.com
2026-06-08 04:05:35

whoah cyclopts sounds incredible! turn any python function into a command line script!!!!! if only it could run in a browser too :-) #NotAskingMuchObvs :)

‪@mxp@mastodon.acm.org‬
2026-06-08 11:11:52

@… My PhD thesis literally was a bunch of Python classes. On some level. But that’s not the point of the thesis…

@mxp@mastodon.acm.org‬
2026-06-08 11:11:52

@… My PhD thesis literally was a bunch of Python classes. On some level. But that’s not the point of the thesis…

@CerstinMahlow@mastodon.acm.org
2026-06-08 10:25:03

Pro tip:
If your supervisor suggests to submit a paper to a venue of a field relevant for your dissertation, addressing the architecture of the system you develop and which is the heart of your dissertation, maybe, just maybe, it’s not the very best idea to say: I don’t see what could be interesting here, it’s just a bunch of Python classes

@michabbb@social.vivaldi.net
2026-07-10 07:11:25

🔧 Three pieces mirror the Python RLM design: a system prompt, a $CONTEXT file plus bash as the REPL, and the native rlm_query sub-call. Depth 0 and 1 get full tools; the leaf at max depth runs bash only. jj workspaces isolate child edits when available.
🛡️ Five guardrails guarantee termination: dollar budget, wall-clock timeout, call limit, depth limit and PATH scrubbing. Deeper agents are told to be more conservative, preferring direct action over spawning more children.

@gray17@mastodon.social
2026-06-02 18:41:15

> We introduce gpusnek, a fully functional Python interpreter ported to CUDA, enabling execution of arbitrary Python code directly on the GPU by running one whole interpreter on every CUDA core/thread. This is a tremendously bad idea, but for the duration of this paper we pretend that it is not
[Josef Dean in SIGBOVIK 2026]

@emilis@social.linux.pizza
2026-07-04 16:29:05

Who thought it was a good idea to put spinners in a shell script?
`pip install` has been running for a few minutes now at 100% CPU and all progress I see is an effing spinner on the last line.
Had to look at process list to see it's not stuck.
#python #pip

@adulau@infosec.exchange
2026-07-07 15:02:25

Working on tempolocus, a tool that analyses time-series activity patterns to infer a user’s likely location.
In @…, we work with a large volume of social-network time series. Estimating users’ locations from these patterns is often a manual task.
I prototyped a Python module that combines potential locations with yearly activity …

adulau@blakley:~/git/tempolocus$ python3 -m tempolocus samples/weekfull-chan1.json --format text  -n 10 --holiday-profile public-worker 
input_type: weekly_timeseries
confidence: 0.220
activity_type: mixed-time (0.009)
assumptions:
  - Hourly buckets are interpreted as UTC; timezone candidates are offsets that make the activity look locally human.
  - Weekly data cannot distinguish all IANA zones sharing the same offset, and daylight saving time is not inferable without dates.
probable_countrie…
@tux0r@layer8.space
2026-08-07 13:36:53

Kinder lernen Programmieren heute oft mit Python, versäumen aber als Erwachsene das Upgrade auf eine richtige Programmiersprache.
Das ist, als würde ich mit Duplo spielen.
(Abweichende Meinungen möglich, aber sinnlos.)

@chrysn@chaos.social
2026-07-15 14:04:26

A cool recent #Python change is PEP 783 <#pyodide

A browser window with a Python repl:

Welcome to the Pyodide 314.1.0.dev0 terminal emulator 🐍
Python 3.14.2 (main, Jul  8 2026 22:58:50) on WebAssembly/Emscripten
Type "help", "copyright", "credits" or "license" for more information.
>>> import micropip
>>> await micropip.install("cbor-diag >= 1.1.5")
>>> micropip.list()
Name      | Version | Source
micropip  | 0.11.1  | pyodide
cbor-diag | 1.1.5   | pypi
>>> import cbor_diag
>>> cbor_diag.diag2cbor("1, 2, 3", seq=…
@tinoeberl@mastodon.online
2026-07-09 15:17:02

#Steady #Klimacrew
Vom Puristen zum #IDE-Nutzer
Ganz langsam. 😁 Wie verändert sich der Workflow, wenn man statt eines simplen Editors mit einer IDE arbeitet? Als Hobby-Entwickler hat mir Notepa…

@veit@mastodon.social
2026-07-01 06:56:09

On my way to a flying visit to Berlin. Tomorrow, the Python Users Berlin (@…) are meeting for a talk by Sam Bail on PySpark: meetup.com/python-users-berlin

@mszll@datasci.social
2026-08-05 08:55:21

City2Graph: A Python library for Heterogeneous Graph Neural Networks and spatial analysis in urban systems
sciencedirect.com/science/arti
Looks very interesting!

Conceptual diagram of the City2Graph framework.
@netzschleuder@social.skewed.de
2026-06-01 11:00:06

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@rasterweb@mastodon.social
2026-06-30 04:00:01

➡️ Python f-string Tips & Cheat Sheets
#bookmarks

@frankel@mastodon.top
2026-06-26 17:01:54

PEP 832 – Virtual environment discovery
#python

@mot@chaos.social
2026-07-27 00:15:36

I got nerd sniped so hard by this CTF puzzle in my feed and tried to solve it for the better part of the weekend...
infosec.exchange/@rebane2001/1

Screenshot of "Python Crossword" from https://crossword.pyjail.club filled in with solutions (redacted):

"Made by @lydxn ❤️
Inspired by Lyra Rebane's JS Crossword ✨

How to Play

    Every clue in the crossword is a Python expression that evaluates to its answer.
    Each expression runs in a browser-sandboxed, 64-bit WASM build of Python 3.14.4.
    All input characters must match the regex /[!-~]/.
    All squares in the crossword must be filled, leaving no empty spaces.
    Please do not pu…
@andres4ny@social.ridetrans.it
2026-07-04 03:06:11

Yes, I abuse f-strings in python because "print(f'" will always make more sense to my C-poisoned brain than "print('".

@fanf@mendeddrum.org
2026-07-25 08:42:03

from my link log —
SIMD within a bignum in pure Python.
da.vidbuchanan.co.uk/blog/pyth
saved 2026-07-25

@hynek@mastodon.social
2026-06-03 04:43:34

i'm so fucking sick of it
i've got ONE extremely simple and extremely explicit contribution rule/brown m&m test: do not delete the PR checklist
since i'm busy getting structlog out, I’ve let the attrs bug tracker a bit off the leash
go & count for yourself how many PRs opened in the past month followed that instruction.
(and of course, this is not about bureaucracy; they violate many of the important items on that list)

@arXiv_eessIV_bot@mastoxiv.page
2026-08-06 07:33:55

DefoEye: Python-Based Software for Facilitating Time-Series InSAR Analysis of Sentinel-1 Remote-Sensing Data
Alireza Taheri Dehkordi, Hossein Hashemi, Amir Naghibi
arxiv.org/abs/2608.04915 arxiv.org/pdf/2608.04915 arxiv.org/html/2608.04915
arXiv:2608.04915v1 Announce Type: new
Abstract: Many existing time-series Interferometric Synthetic Aperture Radar (TS-InSAR) software tools have limitations, including restricted geographic applicability, commercial licensing, and incomplete end-to-end processing support. Although GMTSAR avoids some of these constraints, it still requires substantial manual intervention and C-shell commands, lacks a user-friendly graphical interface, and omits important steps such as interferogram network pruning and anchoring of unwrapped interferograms. This paper introduces DefoEye (v1), an open-source Python-based software package that wraps GMTSAR and provides a unified, user-friendly TS-InSAR workflow for Sentinel-1 data. DefoEye supports parallel job execution, interferogram network pruning, and multiple anchoring options. Its performance was evaluated from 2020 to 2024 in four regions with different geological settings, deformation mechanisms, and atmospheric and climatic conditions. In Bologna, Italy; Gotland, Sweden; and Houston, USA, DefoEye results were compared with observations from 10 GNSS stations and showed strong agreement, with RMSE values of 4.3-11.9 mm and Pearson correlation coefficients of 0.63-0.95. In Karaj, Iran, where GNSS observations were unavailable, DefoEye was compared with other widely used processing tools and achieved similarly close agreement, with an RMSE of 4.8 mm/yr and a Pearson correlation coefficient of 0.98. These results demonstrate that DefoEye provides reliable TS-InSAR products for geological, hydrological, and environmental applications.
toXiv_bot_toot

@mgorny@social.treehouse.systems
2026-07-04 04:49:14

#Python Hypothesis package now requires #RustLang. This is a scale of reverse dependencies I can't handle. I guess this means it's the end of WD40 profiles on #Gentoo, and therefore the end of support for Alpha, ARM<v6, HPPA, M68k, i486 and some other random subsets of architectures and profiles. Thanks for all the fish, etc.
github.com/HypothesisWorks/hyp

@cdonat@hostsharing.coop
2026-05-25 12:12:44

Is it only me, or has the hashtag #Python converted in to a LinkedIn-like wave of marketing bullshit? I really like Python, and use it a lot, but this is becoming unbearable.

@guerda@ruhr.social
2026-06-21 13:05:45

Discovered a segfault in #FastAPI very strange, does only happen on MacOS with Python 3.14.0 ALPHA
The reason was that I was unaware that I ran an alpha version of Python 3.14.
FastAPI segfaults with Python 3.14.0 on MacOS · fastapi/fastapi · Discussion #15819

@nobodyinperson@fosstodon.org
2026-07-16 10:40:38

It's 2026 and :python: #Python's standard library *still* does not have a flatten function? 🤨
(Yes, more-itertools, that's not the point)

@publicvoit@graz.social
2026-07-31 14:27:47

In 1979, #MontyPython released their epic #film "Monty Python's Life of Brian": en.wikipedia.org/wiki/Life_of_

@netzschleuder@social.skewed.de
2026-06-28 23:00:07

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@rasterweb@mastodon.social
2026-05-28 04:58:41

➡️ PyPI · The Python Package Index
#bookmarks

@frankel@mastodon.top
2026-06-09 17:05:21

Are you really expected to run five type-checkers now?
#python

@berlinbuzzwords@floss.social
2026-06-03 06:45:13

Kafi Streams, built on (Py)DBSP, treats streaming like batch. Strongly consistent from day one. An open source Python library for the 80% of use cases that do not need extreme scale. Ralph Matthias Debusmann will be unveiling it at #bbuzz26.
Learn more: 2026.berlinbuzzwords.de/sessio

@grumpybozo@toad.social
2026-06-14 23:12:55

RE: seattle.pink/@mxchara/11675012
The fact that (so far) Python is in the lead makes me sad.
Python is unfit for system administration. You’ll only convince me otherwise when every fucking Python program doesn’t need its own bespoke …

@ellie@ellieayla.net
2026-07-14 01:42:36

What are we using to package up Python application & dependencies into a single distributable file now?
I'm thinking of bundlers like RollupJS.
PEX? Zipapp? Docker image? Trying really dang hard to only use stdlib and shipping a boring wheel?
#python #packaging #askfedi

@mgorny@social.treehouse.systems
2026-07-04 13:51:09

And the next big blocker for #Python 3.15 in #Gentoo is time-machine. Which is obviously broken. There's a patch but it's #slop and complex, and it's sitting for 3 months already with no reply. Because obviously patching CPython internals is so much a better idea than freezegun ever were. All these time-based tests need all the ricing you can get; portability doesn't matter.
github.com/adamchainz/time-mac

@Techmeme@techhub.social
2026-05-27 06:15:51

Analysis: the share of entry-level hiring in India's tech sector fell to ~15% in 2025 from 28% in 2024 as companies shifted focus to AI and automation roles (Tanya Pandey/The Economic Times)
economictimes.i…

@hynek@mastodon.social
2026-07-30 06:16:42

Happy to announce v3.0.0 of my build-and-inspect-python-package GitHub Action that does what the name says.
If u maintain a Python pkg u should really give it a look! Much, much fewer broken pkgs have been pushed to PyPI & who doesn't love automatic trove classifier − GHA test matrix conversion‽
This release brings you Twine 7 & with that packaging metadata 2.5 & PEP 794 (Import Name Metadata) – also a new release procedure: no more trailing v3 tags – only full ve…

@netzschleuder@social.skewed.de
2026-05-27 17:00:06

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@frankel@mastodon.top
2026-06-23 09:13:33

#Python 3.15 #Lazy #Imports: Faster Startup Times and the Design Behind PEP 810

@tinoeberl@mastodon.online
2026-07-07 15:17:22

#Steady #Klimacrew
Was tun, wenn falsche Einträge im #Marktstammdatenregister die Auswertung ruinieren?
Das Register ist berüchtigt für Fehleinträge durch Anlagenbetreiber. …

@mgorny@social.treehouse.systems
2026-06-30 13:07:57

The conclusion from a big #Python 3.15 #Gentoo porting run today: the most common kind of #NIH Python package is one providing colorful output on the terminal…

@michabbb@social.vivaldi.net
2026-07-04 01:55:57

🧩 Rich plugin ecosystem: hundreds of plugins run tasks anywhere — local, SSH, #Docker, #Kubernetes or serverless task runners — and code in any language including #Python, Node.js, R, Go and S…

@veit@mastodon.social
2026-06-21 14:27:46

I’m organising the next @… meet-up, featuring a talk by Sam Bail on PySpark: meetup.com/python-users-berlin

@netzschleuder@social.skewed.de
2026-07-27 02:00:08

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@rasterweb@mastodon.social
2026-06-29 04:00:03

➡️ fstring.help: Python f-string Guide
#bookmarks

@tinoeberl@mastodon.online
2026-07-21 15:17:03

#Steady #Klimacrew
#BahnMonitor-Projekt: 7. Zufall ist nicht gleich Zufall. 🤭
Nach der Verspätungsmeldung kommt ein Wissenshäppchen. Der

@Techmeme@techhub.social
2026-06-04 00:36:01

Google releases macOS versions of AI Edge Gallery, which lets users run open models on their devices, and AI Edge Eloquent, an on-device voice dictation app (Google Developers Blog)
developers.googleblog.com/brin

@mgorny@social.treehouse.systems
2026-06-29 12:42:29

I have a #Python favor to ask. Could someone look at Python 3.15 test failures in itsdangerous? It's blocking quite a large part of package dependency graph in #Gentoo, and the failure looks, errr, dangerous.
github.com/pallets/itsdangerou

@veit@mastodon.social
2026-06-16 21:39:22

Taking Measure spoke to Guido van Rossum to find out more about #Python, what he gets up to in his spare time, and his brief spell at #nist

@mgorny@social.treehouse.systems
2026-06-01 02:39:46

It's always important to have a consistent #security policy.
For example, a policy of "If somebody filed a CVE, it's an important security issue, and we will fix it as such, no matter how meaningless the fix is. If nobody did, it's just a glorified bug fix, no matter how serious the bug was."
So we've just seen a #pip security release over "installing random packages can overwrite pip's files and pip can lazy-import some of them immediately afterwards", with a fix of "pip will no longer load them until you run it again" (leaving the underlying security issue of "any #Python package can override files installed by any other Python package" as intended behavior). As Eli Schwartz beautifully put it, you are not expected to be using the virtual environment; you should create it, install packages into it (at most once!), and then frame it and put it on the wall to admire.
Now we're seeing a "bug fix" for "malicious entry point names can write outside of virtual environment". If nobody filed a CVE, it's obviously not a security issue at all. At least upstream graced us with fixing it without correcting the spec to forbid that first.
github.com/pypa/pip/issues/140

@rasterweb@mastodon.social
2026-06-05 14:41:30

I tried to get someone’s Python code to work and could not due to errors and I did a few searches and then gave up.
I could try using some AI chatbot bullshit to help me out but fuck that… it’s easier to just give up and walk away. Oh well.

@tinoeberl@mastodon.online
2026-07-19 15:17:02

#Steady #Klimacrew
#BahnMonitor-Projekt: 5. Automatisierte Skripte brauchen Kontrolle – besonders bei API-Aufrufen.
Jetzt bekommt das

@netzschleuder@social.skewed.de
2026-07-19 19:00:06

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@hynek@mastodon.social
2026-05-30 12:08:13

I’d like to announce the most unlikely #Python package release:
service-identity 26.1.0, the best way to verify if a certificate is valid for a hostname, IP, or URI is out!
The main change is that we were able to switch from pyasn1 (thank you for more than a decade of great service! 🫡💛) to do everything within PyCA's cryptography.

@rasterweb@mastodon.social
2026-06-28 00:53:59

I got some Python code working yesterday after being convinced I could not figure it out… but figured it out!
Realized I needed extra code today, thought it would be a pain but figured it out in no time.
Maybe I can write Python okay…

@netzschleuder@social.skewed.de
2026-07-19 08:00:06

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@veit@mastodon.social
2026-07-26 14:49:22

On my way to Cologne for the next workshop on test-driven development with Python.
#TDD #Python #Testing

@mgorny@social.treehouse.systems
2026-06-01 12:39:41

The #Gentoo #Python 3.14 switch / 3.11 3.13t removal PR is green. Doing some final testing locally before merging it (one that involves 350 "merge wait" packages, what could possibly go wrong…).
codeberg.org/gentoo/gentoo/pul

@Techmeme@techhub.social
2026-05-27 16:50:55

Starlette, an open-source Python framework underpinning FastAPI, has a vulnerability, called BadHost, that can allow hackers to bypass authorization (Dan Goodin/Ars Technica)
arstechnica.com/information-te

@netzschleuder@social.skewed.de
2026-06-15 10:00:06

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@tinoeberl@mastodon.online
2026-07-17 15:17:01

#Steady #Klimacrew
#BahnMonitor-Projekt: 3. Klappt der erste Zugriff auf die Bahn-API?
Im nächsten Schritt wurde die API-Abfrage getestet udn geprüft, ob die zurückgelieferten Datenstru…

@mgorny@social.treehouse.systems
2026-07-25 16:44:55

Also, zero days (well, minus a lot of days because I've been slacking) since a random #Python package got a new #NIH dependency on another Python package which is actually a "fastest" #RustLang package which cannot be built because the author thinks it a great idea to require a nightly Rust compiler.
…and of course it's full of "unsafe" calls. Because Rust is obviously such a great language for making secure code.
github.com/awolverp/cachebox/i

@hynek@mastodon.social
2026-07-26 06:41:50

Good morning! Since it's become a drag to support in mainline, I've extracted svcs's Pyramid support into an own package svcs-pyramid.
That means, the next svcs version will ship WITHOUT a `svcs.pyramid` module.
You can start using svcs-pyramid TODAY to avoid breakage the moment 26.2.0 drops – there are no code changes, just adjust the import statement:

@netzschleuder@social.skewed.de
2026-07-14 08:00:06

python_dependency: Python Dependency Network
Python's package dependency networks. Nodes in the network are Python's packages registered to PyPI and edges are dependencies among packages.
This network has 58743 nodes and 108399 edges.
Tags: Technological, Software, Unweighted
networks.sk…

python_dependency: Python Dependency Network. 58743 nodes, 108399 edges. https://networks.skewed.de/net/python_dependency
@tinoeberl@mastodon.online
2026-07-16 15:17:02

#Steady #Klimacrew
#BahnMonitor-Projekt: 2. Welche Architektur sollte der Bot haben?
Bevor es ans Coden geht, ist etwas Grübeln über eine sinnvolle Gliederung der Module ratsam. Wie sie…

@hynek@mastodon.social
2026-07-31 13:03:49

Looks like I'm attending PyBeach because apparently I didn’t have enough SoCal in 2026!?
Looking forward to a cozy conference with friends abound!
2026.pybeach.org

@mgorny@social.treehouse.systems
2026-05-30 04:06:44

0 days since we went from "we should replace `setup.py` with a bunch of standardized #PEP517 backends" to "every package must have its own local PEP517 backend".
#Python

@tinoeberl@mastodon.online
2026-07-15 15:17:02

#Steady #Klimacrew
#BahnMonitor-Projekt: 1. Wie kommt man an Live-Daten der Deutschen Bahn?
Im November konnte ich per Zufall mit einem

@mgorny@social.treehouse.systems
2026-05-28 03:38:25

> No significant changes.
Looks inside.
> Significant changes.
#Python

@hynek@mastodon.social
2026-07-22 09:31:30

speaking of slophub, here's environ-config 26.1.0 (my #Python take on loading config from env variables and secrets from safe places) a minor modernization update. thanks so much to every single name in the thanking section and to github who made it possible:

@mgorny@social.treehouse.systems
2026-07-14 08:56:19

I wish #mypy would slow down with adding new features to mypyc, and instead focused on fixing the train wreck that mypyc is right now (since 2023 at least). Like, if your code crashes hard with assertions enabled, then it's broken, period. Ignoring proper testing and shoving the issue under the carpet doesn't make it right.
#Python

@mgorny@social.treehouse.systems
2026-05-25 19:42:28

I've been sad about the upcoming removal of #PyPy from #Gentoo, but given how many regressions I've been seeing recently in a variety of #Python packages, I'm eagerly waiting for the day when I'll remove the support and be able to stop having to deal with the test failures somehow. Not that at this point any other way of dealing besides skipping them makes any sense.

@mgorny@social.treehouse.systems
2026-07-26 02:06:59

Zero days since I've discovered a random #CPython bug that triggers in very specific circumstances and I don't really have time to report it, nor can expect anyone to do it for me.
This time it's a test failure and refcounts being broken while running fastjsonschema's test suite on #Python 3.15 freethreading with pytest's --junit-xml option enabled 😱. And of course removing --junit-xml makes all tests pass.
EDIT: and of course I cannot reproduce outside Portage. Yet inside, it reliably crashes every single time.

@mgorny@social.treehouse.systems
2026-05-22 03:11:10

If #Python package releases continue at this rate, I'm going to have to start getting up earlier.
Or just stop doing all of them in the morning.
#Gentoo

@mgorny@social.treehouse.systems
2026-05-21 11:06:01

> #Python Stable ABI
> makes extensions unstable (they start segfaulting)
github.com/pikepdf/pikepdf/iss

@mgorny@social.treehouse.systems
2026-05-19 05:12:35

Always appreciate #Python package developers being responsible about API stability, and… [checks notes]… raising the major version number over a "minor API tweak", then delaying the release until a security fix demanded one.
#packaging