The official Python core development blog, announcing Python releases, PyPI changes and related project news.
HN links it for release announcements and performance claims, and a PyPI maintainer cites it when describing improvements to the package index.
Your cynicism isn't warranted: we've made significant improvements to PyPI over the last 4 years[1][2], and I'm currently working on additional features that will make secure publishing to PyPI easier[3]. We're also working on a codesigning implementation for PyPI, based on Sigstore[4].
Security needs to be evidence and outcome-driven, first and foremost. That takes a while, but improved outcomes make it worth it.
[1]: https://pyfound.blogspot.com/2019/06/pypi-now-supports-two-factor-login-via.html
[2]: https://pythoninsider.blogspot.com/2019/07/pypi-now-supports-uploading-via-api.html
[3]: https://github.com/pypi/warehouse/issues/12465
[4]: https://www.sigstore.dev/
This is from the latest 3.11 alpha 4 release just this week:
The Faster CPython Project is already yielding some exciting results: this version of CPython 3.11 is ~ 19% faster on the geometric mean of the PyPerformance benchmarks, compared to 3.10.0.
https://pythoninsider.blogspot.com/2022/01/python-3102-3910-and-3110a4-are-now.html?m=1
So this is definitely not languishing as they are getting these changes directly into main for Python 3.11
Ok, we'll change to that from https://pythoninsider.blogspot.com/2022/09/python-releases-3107-3914-3814-and-3714.html. Thanks!
All: submitted title was "`int('1' * 4301)` will raise ValueError starting with Python 3.10.7" and comments reference that, so you might want to take a look at both URLs.
That's (the deps, not the dev deps) likely to change with pip 20.3! All hail the dependency resolver.
It's already available behind a feature flag.
https://pythoninsider.blogspot.com/2020/07/upgrade-pip-20-2-changes-20-3.html