Tiago Montes

Oh FFS. If you just patched /etc/ssl/cert.pem on all your macOS endpoints, rejoice: the just landed Apple OS update to 26.7.2 / 27.2 will revert that for you and put the emSign and AAA roots back. :facepalm: #emudhra

🐍🚀 Out now: security releases of #Python 3.11–3.15 🔒 They block the compromised #eMudhra intermediate CA keys in the ssl module as a last resort. Normal pip use, including upgrading pip itself, is now safe from attacks using those keys, even before pip is updated discuss.python.org/t/python-3-1...

“In science it often happens that scientists say, ’You know that’s a really good argument; my position is mistaken,’ and then they would actually change their minds [...] I cannot recall the last time something like that happened in politics or religion.” ― Carl Sagan

Announcing DuckDB 2.0.0 LTS “Cinnamon Teal” 🦆 This is the biggest #DuckDB feature release ever, and it's shipping a polished version of the Quack protocol for DuckDB-as-a-server, async I/O, a first-class VARIANT type, agent mode, triggers, an extensible SQL parser and more – read on for details.

🐍🚀 Out now: expedited security releases of Python 3.15 and 3.14, and a special security release of 3.13 They all upgrade the bundled pip to version 26.2.2, which includes certifi 2026.10.19 to address the eMudhra / emSign CA certificate security incident. discuss.python.org/t/python-3-1... #Python

In response to the eMudhra / emSign certificate security incident we've published guidance for Python users to update CA certificates: discuss.python.org/t/informatio... #security #Python #pki

The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.

we’ve released uv 0.13.4 and pip has released 26.2.2 for the eMudra CA incident. Please upgrade ASAP!

Please upgrade certifi in all Python applications to the latest version (2026.10.19) following emSign CA certificate security incident: github.com/certifi/pyth... #security #python #vulnerability

News: RHEL 10.0 and 9.6 repositories are being retired https://www.postgresql.org/about/news/rhel-100-and-96-repositories-are-being-retired-3411/ #postgresql

DuckDB 2.0 is coming tomorrow!

Please congratulate our newest PSF Fellow Members for Q3, 2026! Their continued contributions to the Python ecosystem are so very important to our community. #Python

Os melhores slides da minha palestra de hoje: speakerdeck.com/ramalho/temp...

Everyone say a hearty "Hello World" to the beginnings of Python 3.16! Python 3.16 comes paired with a film festival! You can read more about this release's pairing in the "And now for something completely different" section of the blog 🐀 🧀 blog.python.org/2026/10/pyth...

Coding agents reduce software development to a simple matter of: * specifying requirements * verifying correctness and quality * maintaining and operating software you didn't write As we all know, those have always been the easiest, most well-understood parts of the craft, so everything is fine!

A #DuckDB file doesn't have to contain any data. It can store nothing but view definitions pointing at files stored somewhere else, such as Parquet on object storage. The file stays a few hundred KBs no matter how large the data it describes. In this post, we create such a small shareable catalog:

A couple of billion years ago, cyanobacteria evolved the ability to photosynthesize. Suddenly they could turn the abundant atmospheric C02 into carbon for replicating themselves. The only side effect was the release of oxygen. It was a monumental success, but it ended up turning Earth's C02 […]

If you/your project is affected by DigitalOcean stopping their OSS credits program, please shoot me a PM immediately. Might be able to help. Boosts for visibility would be appreciated. #foss #linux

Missed this originally, but: jev + @duckdb.org ! duckdb.org/2026/09/29/jev

In July 2026 Python core developers and special guests sat down at the #Python Language Summit at #EuroPython 2026, to discuss the future of the Python programming language including free-threading, #Rust, garbage collection, and namespaces. Find a summary on the PSF blog ⬇️

🦆 DuckDB v2.0.0 ships in a few weeks. Here's an accurate depiction of our CI pipeline building the v2.0.0-dev clients. 🙌 Help us craft a great release by trying out the preview release and reporting any issues that you encounter. duckdb.org/install/?ver...

Time to upgrade your #Python versions! 🐍🛡️ 3.14.8, 3.13.16, 3.12.15, 3.11.17, and 3.10.22 were just published and contain significant security fixes (8 CVEs) including 1 critical and 2 high severity fixes. Thanks to the PSRT and RMs for coordinating. blog.python.org/2026/10/pyth... #security

I logged in to LinkedIn to see a page full of people praising DHH, got mad, and wrote this. Less than 12 hours later I got an email telling me "Your post doesn’t comply with our Professional Community Policies on bullying and harassment. It’s been removed […] [Original post on mastodon.social]

📣 Join me on Thursday, 8th October, in Lisbon for a small software engineering meetup! Looking forward to meeting more folks out there. adamj.eu/tech/2026/09... #SoftwareEngineering #Python #Django #Lisbon #Lisboa #Portugal

Still a few spots left!

Did you know that, since #DuckDB v0.10.3 (~May 2024), you can point a SELECT at a dataset on the Hugging Face Hub⁠, using the DuckDB `hf://` protocol, and query it, without downloading it first? 🤗 🦆 This blog post covers how that Hugging Face + DuckDB integration works and the use cases it fits:

E a IA? Qual IA? A IA uai! Faz meses que estou ruminando este texto. Hoje saiu! Nele falo sobre os 2 tipos de "IA", e os 2 tipos de "robô humanoide". Os robôs humanoides dividem-se entre inúteis e fictícios. Sobre os 2 tipos de "IA", melhor dar uma lida: ramalho.org/posts/eaia/

Worried about AI Robots? All you need is more ram, and a dogged determination to overcome.

Two weeks until Python 3.15.0 final! hugovk.dev/next-release/ #Python #python315

The PSF is pleased to announce the results of the inaugural election for the Python Packaging Council! Sending a big thank you to the candidates and our community for participating in this long awaited election. We're excited to see the council start its work! #Python

The PSF is excited to announce the results of the 2026 election for the PSF Board! Sending a big thank you to the candidates, our outgoing Board members, and our community for participating this year- we are so grateful to be in community with all of you 💙💛 #Python

Initial conditions: m1=8.9 m2=107.8 m3=54.9 (solar masses) v1x=-6.699 v1y=-4.939 v2x=5.067 v2y=-6.021 v3x=-6.714 v3y=2.308 (km/s) x1=-31.0 y1=-30.0 x2=-2.0 y2=-29.0 x3=12.0 y3=10.0 (AU from center) Music: Dune (2021) Medley – Zimmer

Going through some personal tasks, I'm just never going to get around to this, so if anyone wants to pick up "make a PR to Homebrew to make Python keg-only" (i.e.: not installed onto $PATH), please go for it. https://github.com/orgs/Homebrew/discussions/5517#discussioncomment-10184126

Why is 'lb' the abbreviation for 'pound'?

🗳️ I've voted in @ThePSF@fosstodon.org board election! 🗳️ And in the inaugural Packaging Council election! 🗳️ Remember to vote! #Python #PSF #election #packaging #PackagingCouncil #vote

Do you know your regular expressions in Python? Do you know the unusual thing re.match() does? Or what soft deprecation is? I've written about the changes coming up in Python 3.15 to help clear things up a bit. hugovk.dev/blog/2026/so... #Python #python315 #SoftDeprecation #regex

JOMO: the joy of missing out

🐣 DuckDB v2.0 is around the corner! We started publishing alpha releases and encourage our community to give them a go. If you encounter any issues, we're more than happy to fix them before the release in October. duckdb.org/2026/09/02/t...

Just noticed the ChatGPT desktop app (previously named Codex) bundles a full copy of the LibreOffice open source office suite, tucked away in a hidden folder in the ~/.cache directory

🐍🚀 Out now: final Python 3.15 release candidate! 😎 It's your last chance to help before the big day on 1st Oct! How? 💡 Try out new features 💡 Test your project 💡 Add 3.15 to your CI 💡 Library maintainer? Upload wheels 🐞 Report bugs! discuss.python.org/t/python-3-1... #Python #Python315 #release

Maintain an open source project? YOU can help test the next release of Python. It is really helpful to catch bugs and other issues before we release!

If you're brand new to writing automated tests, I recommend these 2 talks on getting started with testing: • Carl Meyer's testing talk: www.youtube.com/watch?v=ukm6... • Ned Batchelder's testing talk: www.youtube.com/watch?v=FxSs...

the social contract that allows the web to exist at all is literally collapsing in real time https://people.kernel.org/monsieuricon/creepy-crawlies

Some big news: @ducklabs.com is joining AWS, with the move expected to complete by early September. Our team will stay together in Amsterdam, with more resources to take DuckDB, DuckLake and Quack further - while the open-source Duck Stack remains free under MIT license ducklabs.com/news/2026/08...

We could really use some help with Twisted's #Python #XMPP and #Jabber implementation. Could you DM if these terms of are of interest to you and if you have any spare capacity to review a little bit of code? It would be much appreciated.

Wrote a blog post about what gaps exist which prevent having reproducible builds for Python. snarky.ca/whats-missin... This came to me while writing my nomination statement for the PPC.

ugh forgot the link: www.youtube.com/watch?v=V_qz...