While writing the section of my 2026 Python Packaging Council (PPC) nomination on secure supply chain, I realized that one thing related to having a secure supply chain that we lack is a defined way t...

I have decided to run for the inaugural/2026 Python packaging council (PPC). I will say I have the support of my employer (Microsoft) to do this, but they didn't ask me to and my usual thing that I wo...

The Gleam packages site is a great place to explore Gleam libraries, but what about applications? We're making a showcase site so folks can check out projects made with Gleam! Do you have an applicat...

Today we are proud to announce the availability of TypeScript 7, a 10x faster native port of TypeScript! Since its early days, TypeScript has promised to

npm v12 is now generally available and tagged latest. This major release turns on the install-time security defaults we announced in June, and it’s also where we begin a deprecation…

There have been several security incidents lately that involved compromising GitHub Actions workflows. This has led some to say "GitHub Actions is the weakest link" in publishing and to GitHub publish...

Everything we bring to the language is possible thanks to our sponsors. See how to become one of them and support Gleam.

Here comes the antepenultimate beta. This is a beta preview of Python 3.15 Python 3.15 is still in development. This release, 3.15.0b2, is the second of four planned beta releases. Beta release p...

Release Notes Released on 2026-05-05. Highlights auto_update.cooldown_days is now available in both the user-level global config (~/.config/prek/prek.toml on Linux and macOS, or $XDG_CONFIG_HOME/pr...

This PEP proposes two things:

Preview CLI of the native TypeScript compiler port

Apply to Sustainability Engineer, PyPI in Remote.

The abstract: This PEP sets out to help make the discovery of a project’s virtual environment easier for tools by providing a default location as well as a way for a project to point to its preferre...

After nearly five wonderful years at the Python Software Foundation as the inaugural CPython Developer in Residence, it's time for me to move on. I feel honored and honestly so lucky to have had the opportunity to kick off the program that now includes several wonderful full-time engineers. I'm glad to see the program left in good hands. The vacancy created by my departure will be filled after PyCon US as the PSF is currently focused on delivering a strong event. I'm happy to share that Meta will continue to sponsor the CPython Developer in Residence role at least through mid-2027. The program is safe.

Track Python's experimental JIT compiler performance vs the standard interpreter over time. Daily benchmarks across multiple machines using pyperformance.

A Python project got hacked where malicious releases were directly uploaded to PyPI. I said on Mastodon that had the project used trusted publishing with digital attestations, then people using a pylo...