@mgorny@social.treehouse.systemsOh, in other news, Wheel Variants (formerly PEP 817) is being split into smaller PEPs that will be easier to comprehend. The draft of the first split part, PEP 825, titled "Wheel Variants: Package Format" has been merged. We'd appreciate your feedback!
#Python #packaging
@elduvelle@neuromatch.social @mgorny@social.treehouse.systems
@lpryszcz@genomic.social
@tinoeberl@mastodon.online#Steady #Klimacrew
#BahnMonitor-Projekt: 7. Zufall ist nicht gleich Zufall. 🤭
Nach der Verspätungsmeldung kommt ein Wissenshäppchen. Der
@cybertailor@craba.cab
@frankel@mastodon.top
@joe@toot.worksOnly $1.5mil?
#Python #Anthropic
@qbi@freie-re.deThonny, Python IDE for beginners
#IDEsofMarch #python
@ellie@ellieayla.net
@michabbb@social.vivaldi.net#ZenOfAICoding: 16 theses on the future of #softwaredevelopment in the #AI era — a homage to the Zen of
@stsquad@mastodon.org.uk
@scottmiller42@mstdn.socialIn #Python, you could write sensible and transparent code, like this:
if (curNode):
curNode = curNode.next
But if you prefer something that is functionally identical, but harder to read, try this:
curNode and (curNode := curNode.next)
Follow me for more great tips on how to make life hell for the next person working with your code (which could be you).
@rasterweb@mastodon.social @tinoeberl@mastodon.online#Steady #Klimacrew
#BahnMonitor-Projekt: 5. Automatisierte Skripte brauchen Kontrolle – besonders bei API-Aufrufen.
Jetzt bekommt das
@datascience@genomic.socialVideo tutorials for modern ideas and open source tools. #python
@guerda@ruhr.social @ellie@ellieayla.netAh yes, brew upgraded some ssl-related .so file and broke the python binaries linked against it. Again. So many venvs now lay in ruins.
There has got to be a better way.
(Why do pyenv-built pythons seem to habitually get built using the brew-provided libraries? There's no way for brew to know about that dependency.)
#brew #python #macdev #complaining #askfedi
@mgorny@social.treehouse.systemsAaand we're seeing the first '#setuptools < 82' runtime dependencies in random packages because they are trying hard to workaround breakage due to pkg_resources removal.
#Python
@hynek@mastodon.socialSanta #Python came super early in 2026!
With build 1.4.0, it is now possible to easily dump effective package metadata!
So getting the version of a package in the current directory is now as easy as `pipx run build --metadata 2>/dev/null | jq -r .version`.
This is NOT like parsing pyproject.toml or whatever. It builds the package and looks at the result. So it works even with…
@ellie@ellieayla.net @mgorny@social.treehouse.systems#PythonPoetry is yet another project that disrespectfully treats human bug reporters with #slop:
#NoAI #NoLLM
@nobodyinperson@fosstodon.orgI made a utility to bulk-upload calendar entries to a #CalDAV server from a JSON file:
https://pypi.org/project/caldav-event-pusher/
@michabbb@social.vivaldi.net📋 #SkillSeekers - #Python tool automatically transforms documentation, #GitHub repos & PDFs into production-ready AI skills
@ellie@ellieayla.net @mgorny@social.treehouse.systems> The next great […] library for #Python
Checks.
> Last commit: 4 years ago. Already broken.
@gla@mastodon.socialMapToPoster is a beautiful utility to create minimalist posters of the (water)ways of a city.
If you have uv installed, it takes a moment to get going
#python
@hynek@mastodon.socialhow did i not know about tox’s version range syntax!? (i.e., 3{9-14} == 3{9,10,11,12,13,14}) 😍
(added in tox 4.25.0 on 2025-03-27) #python
@mgorny@social.treehouse.systems#Python is just doing great. We're not having impossible constraints, as some projects need old #setuptools for pkg_resources, and other projects are starting to require newer setuptools for some fancy new features. And ofc after promising to release pkg_resources standalone over a month ago, setuptools upstream didn't deliver.
#Gentoo
@ellie@ellieayla.netFinally put together type stubs for an old (last release 2017!) python library I've been depending on for years. And now wondering whether it would have been easier to just contribute types to the library directly. I thought it abandoned but then the maintainer responded up on an unrelated ticket.
(Though there's no CI infra actually working anymore. Makes testing contributions painful. Wonder whether building that first would be worthwhile & welcome...)
#python #packaging
@iam_jfnklstrm@social.linux.pizza @mgorny@social.treehouse.systemsDid you know that #PEP425 ("Compatibility Tags for Built Distributions") said:
> Why isn’t there a . in the Python version number?
>
> CPython has lasted 20 years without a 3-digit major release. This should continue for some time. Other implementations may use _ as a delimiter, since both - and . delimit the surrounding filename.
This didn't age well.
#Python
@mgorny@social.treehouse.systemsSometimes I wonder why do I even bother. I mean, people are perfectly happy to let statistical models designed as bullshit generators do their coding. Why do I even bother running their test suites and inspecting the failures as a human, if these tests may well be complete bullshit?
#FreeSoftware #OpenSource #Gentoo #Python #AI #LLM #NoAI #NoLLM #VibeCoding
@mgorny@social.treehouse.systemsFun case of circular logic in #Python #standards:
https://discuss.python.org/t/spaces-not-considered-a-valid-verbatim-character-for-glob-patterns/106463
1. Use "globs" in the specification.
2. Decide that "glob" may be ambiguous, so add severe restrictions on what's supported.
3. Because of the severe restrictions, people may have reinvented the wheel instead of using system `glob` module.
4. Since people may have used their custom implementations, just relaxing the spec is a problem.
@castarco@hachyderm.ioIt's not like I'm entirely surprised by this #OpenAI. That's the kind of software that we should build as a community.
#Astral #Python #Capitalism #floss
@mgorny@social.treehouse.systems @ellie@ellieayla.net @michabbb@social.vivaldi.net🧠 #Headroom - The Context Optimization Layer for #LLM Applications #opensource #Python
…
@mgorny@social.treehouse.systemsAlways grateful for the new levels of stability and reliability that #RustLang rewrites of #Python stuff bring.
> a = Tibs.from_i(-1, 128)
^^^^^^^^^^^^^^^^^^^^
E pyo3_runtime.PanicException: attempt to negate with overflow
https://github.com/scott-griffiths/tibs/issues/1
@mgorny@social.treehouse.systemsSo, remember how all the cool kids dumped #Sphinx and went for the shiny #MkDocs thing? And then used the shiny Material for MkDocs theme?
Well, apparently MkDocs 1.x is dead, and MkDocs 2.0 is coming with no support for plugins, incompatible theming system, closed contribution model and unclear licensing.
So which hype train are the cool kids jumping to these days?
#Python
@mgorny@social.treehouse.systemsI'm looking at Repology, and I think most of the distributions and other downstreams have rightfully boycotted #Python #chardet #copywashing. Of course, there's the possibility that some of them are simply out-of-date, though.
So far chardet-7 is distributed by #Chromebrew, #CondaForge (not on Repology), #Homebrew, #KaOS, #OpenIndiana, #openmamba, #Ravenports, #Spack and #T2 SDE. Shame on you!
https://repology.org/project/chardet/versions
https://repology.org/project/python:chardet/versions
@mgorny@social.treehouse.systems @ellie@ellieayla.net @mgorny@social.treehouse.systemsThere's a new piece explaining "The Slow Collapse of #MkDocs": "How personality clashes, an absent founder, and a controversial redesign fractured one of Python's most popular projects."
#httpx?
Well, turns out no, not at all. It looks like encode has already crumbled and became immensely toxic.
httpx is not allowing bug reports anymore, apparently because of "absurdly skewed gender representation", whatever that means.
#OpenSource.
#FreeSoftware #Python
@mgorny@social.treehouse.systems @mgorny@social.treehouse.systemsProper #security nightmare time.
#LMDB is a database that's designed to operate on trusted input. Upstream has historically rejected all bug reports regarding problems with malformed input.
Py-LMDB project provides #Python bindings to LMDB that are normally built against bundled LMDB. Someone recently started mass-filing "untrusted input" vulnerabilities against py-lmdb, and py-lmdb started #slop - coding fixes to their bundled LMDB. Of course, nobody even bothered reporting most of these bugs upstream, and the one that I've seen reported was rejected as "don't do that".
Py-LMDB supports building against system LMDB, and #Gentoo was doing that so far. However, now we are facing a problem: system LMDB operates under the assumption that it is working on trusted input, while py-lmdb (and its bundled LMDB) operates under the assumption that it may be working with untrusted input. The guarantees no longer align.
If we continue to use system LMDB (and skip all the added slop tests that literally cause Python to crash), then Gentoo's py-lmdb package will now have different input expectations than upstream py-lmdb. And of course we can't just remove that crap because someone added exactly one package (TorchVision, i.e. part of the plagiarism machine suite) depending on it.
https://bugs.gentoo.org/971352
@ellie@ellieayla.netBinary partitioning with k-d trees is silly amazing. And with OSM data in radians and pretending the planet is a perfect sphere, scikit-learn's BallTree works wonderfully for quickly finding things nearby some reference point.
Like how far away the nearest bicycle_parking is for every building in a city.
#IMadeAThing #python #osm #overpassql
@mgorny@social.treehouse.systems @mgorny@social.treehouse.systems @mgorny@social.treehouse.systemsI hear that #Python folk are going to enjoy their Monday.
#setuptools removed pkg_resources.
Thanks to Eli Schwartz for the advance warning. We're going to mask it in #Gentoo.
@mgorny@social.treehouse.systems> Concretely, we expect to add ML-KEM and ML-DSA APIs that are only available with #LibreSSL/#BoringSSL/AWS-LC, and not with #OpenSSL.
(from #Cryptography and #Qt simultaneously, right? (Qt rejected LibreSSL support.)
#Python
@mgorny@social.treehouse.systemsLet's get this straight: it is entirely normal for a #OpenSource project to accumulate bug reports over time. They're not a thing to be ashamed of.
On the contrary, if you see a nontrivial project with a very small number of bug reports, it usually means one of the following:
a. you've hit a malicious fake,
b. the project is very young and it doesn't have many users (so it's likely buggy),
c. the project is actively shoving issues under the carpet.
None of that is a good sign. You don't want to use that (except for b., if you're ready to be the beta tester).
#FreeSoftware #Gentoo #GitHub #Python
@mgorny@social.treehouse.systemsHow to absolutely *not* do #OpenSource: require people to commit to work on other issues with your project in order to file bugs. So, sorry, #Typer, I won't be filing bugs. You figure out how you messed up your release yourself.
Also, please don't use #FastAPI. They are clearly bothered by the fact that people dare use their projects and waste their precious time with support requests.
#Python #FreeSoftware #Gentoo
