Mailman 3 May 2025 - Python-announce-list

Python 3.14.0 beta 2 is here!
by Hugo van Kemenade May 26, 2025

May 26, 2025

Here’s the second 3.14 beta. https://www.python.org/downloads/release/python-3140b2/ This is a beta preview of Python 3.14 Python 3.14 is still in development. This release, 3.14.0b2, is the second of four planned beta releases. Beta release previews are intended to give the wider community the opportunity to test new features and bug fixes and to prepare their projects to support the new feature release. We strongly encourage maintainers of third-party Python projects to test with 3.14 during the beta phase and report issues found to the Python bug tracker as soon as possible. While the release is planned to be feature-complete entering the beta phase, it is possible that features may be modified or, in rare cases, deleted up until the start of the release candidate phase (Tuesday 2025-07-22). Our goal is to have no ABI changes after beta 4 and as few code changes as possible after the first release candidate. To achieve that, it will be extremely important to get as much exposure for 3.14 as possible during the beta phase. This includes creating pre-release wheels for 3.14, as it helps other projects to do their own testing. However, we recommend that your regular production releases wait until 3.14.0rc1, to avoid the risk of ABI breaks. Please keep in mind that this is a preview release and its use is not recommended for production environments. Major new features of the 3.14 series, compared to 3.13 Some of the major new features and changes in Python 3.14 are: New features - PEP 649: The evaluation of type annotations is now deferred, improving the semantics of using annotations. - PEP 750: Template string literals (t-strings) for custom string processing, using the familiar syntax of f-strings. - PEP 784: A new module compression.zstd providing support for the Zstandard compression algorithm. - PEP 758: except and except* expressions may now omit the brackets. - Syntax highlighting in PyREPL, and support for color in unittest, argparse, json and calendar CLIs. - PEP 768: A zero-overhead external debugger interface for CPython. - UUID versions 6-8 are now supported by the uuid module, and generation of versions 3-5 and 8 are up to 40% faster. - PEP 765: Disallow return/break/continue that exit a finally block. - PEP 741: An improved C API for configuring Python. - A new type of interpreter. For certain newer compilers, this interpreter provides significantly better performance. Opt-in for now, requires building from source. - Improved error messages. - Builtin implementation of HMAC with formally verified code from the HACL* project. - A new command-line interface to inspect running Python processes using asynchronous tasks. - The pdb module now supports remote attaching to a running Python process. (Hey, fellow core developer, if a feature you find important is missing from this list, let Hugo know.) For more details on the changes to Python 3.14, see What’s new in Python 3.14. The next pre-release of Python 3.14 will be 3.14.0b3, scheduled for 2025-06-17. https://docs.python.org/3.14/whatsnew/3.14.html Build changes - PEP 761: Python 3.14 and onwards no longer provides PGP signatures for release artifacts. Instead, Sigstore is recommended for verifiers. - Official macOS and Windows release binaries include an experimental JIT compiler. Python install manager The installer we offer for Windows is being replaced by our new install manager, which can be installed from the Windows Store or our FTP page. See our documentation for more information. The JSON file available for download below contains the list of all the installable packages available as part of this release, including file URLs and hashes, but is not required to install the latest release. The traditional installer will remain available throughout the 3.14 and 3.15 releases. More resources - Online documentation: https://docs.python.org/3.14/ - PEP 745, 3.14 Release Schedule: https://peps.python.org/pep-0745/ - Report bugs at https://github.com/python/cpython/issues - Help fund Python and its community: https://www.python.org/psf/donations/ And now for something completely different In 1897, the State of Indiana almost passed a bill defining π as 3.2. Of course, it’s not that simple. Edwin J. Goodwin, M.D., claimed to have come up with a solution to an ancient geometrical problem called squaring the circle, first proposed in Greek mathematics. It involves trying to draw a circle and a square with the same area, using only a compass and a straight edge. It turns out to be impossible because π is transcendental (and this had been proved just 13 years earlier by Ferdinand von Lindemann), but Goodwin fudged things so the value of π was 3.2 (his writings have included at least nine different values of π: including 4, 3.236, 3.232, 3.2325… and even 9.2376…). Goodwin had copyrighted his proof and offered it to the State of Indiana to use in their educational textbooks without paying royalties, provided they endorsed it. And so Indiana Bill No. 246 was introduced to the House on 18th January 1897. It was not understood and initially referred to the House Committee on Canals, also called the Committee on Swamp Lands. They then referred it to the Committee on Education, who duly recommended on 2nd February that “said bill do pass”. It passed its second reading on the 5th and the education chair moved that they suspend the constitutional rule that required bills to be read on three separate days. This passed 72-0, and the bill itself passed 67-0. The bill was referred to the Senate on 10th February, had its first reading on the 11th, and was referred to the Committee on Temperance, whose chair on the 12th recommended “that said bill do pass”. A mathematics professor, Clarence Abiathar Waldo, happened to be in the State Capitol on the day the House passed the bill and walked in during the debate to hear an ex-teacher argue: The case is perfectly simple. If we pass this bill which establishes a new and correct value for pi , the author offers to our state without cost the use of his discovery and its free publication in our school text books, while everyone else must pay him a royalty. Waldo ensured the senators were “properly coached”; and on the 12th, during the second reading, after an unsuccessful attempt to amend the bill it was postponed indefinitely. But not before the senators had some fun. The Indiana News reported on the 13th: …the bill was brought up and made fun of. The Senators made bad puns about it, ridiculed it and laughed over it. The fun lasted half an hour. Senator Hubbell said that it was not meet for the Senate, which was costing the State $250 a day, to waste its time in such frivolity. He said that in reading the leading newspapers of Chicago and the East, he found that the Indiana State Legislature had laid itself open to ridicule by the action already taken on the bill. He thought consideration of such a proposition was not dignified or worthy of the Senate. He moved the indefinite postponement of the bill, and the motion carried. Enjoy the new release Thanks to all of the many volunteers who help make Python Development and these releases possible! Please consider supporting our efforts by volunteering yourself or through organisation contributions to the Python Software Foundation. Regards from Helsinki, still light at 10pm, Your release team, Hugo van Kemenade Ned Deily Steve Dower Łukasz Langa

1 0

NumPy 2.3.0rc1 Released
by Charles R Harris May 25, 2025

May 25, 2025

Hi All, On behalf of the NumPy team, I'm pleased to announce the release of NumPy 2.3.0rc1. The NumPy 2.3.0rc1 release continues the work to improve free threaded Python support and annotations together with the usual set of bug fixes. It is unusual in the number of expired deprecations and the number of code modernizations and style cleanups. The latter may not be visible to users, but is important for code maintenance over the long term. Note that we have also upgraded from manylinux2014 to manylinux_2_28. There are known test failures in the rc1 release involving MyPy and PyPy. The cause of both has been determined and fixes will be applied before the final release. The current Windows on ARM wheels also lack OpenBLAS, but they should suffice for initial downstream testing. OpenBLAS will be incorporated in those wheels when it becomes available. Highlights for this release are: - Interactive examples in the NumPy documentation. - Building NumPy with OpenMP Parallelization. - Preliminary support for Windows on ARM. - Improved support for free threaded Python. - Improved annotations. This release supports Python 3.10-3.13. Wheels can be downloaded from PyPI <https://pypi.org/project/numpy/2.3.0rc1>; source archives, release notes, and wheel hashes are available on Github <https://github.com/numpy/numpy/releases/tag/v2.3.0rc1>. Cheers, Charles Harris

1 0

PyCA cryptography 45.0.3 released
by Alex Gaynor May 25, 2025

May 25, 2025

PyCA cryptography 45.0.3 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X.509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.11+. Changelog (https://cryptography.io/en/latest/changelog/#v45-0-3): * Fixed decrypting PKCS#8 files encrypted with long salts (this impacts keys encrypted by Bouncy Castle). * Fixed decrypting PKCS#8 files encrypted with DES-CBC-MD5. While wildly insecure, this remains prevalent. Alex -- All that is necessary for evil to succeed is for good people to do nothing.

1 0

ANN: PyData/Sparse 0.17.0 released
by Hameer Abbasi May 21, 2025

May 21, 2025

Hello all, PyData/Sparse <https://sparse.pydata.org <https://sparse.pydata.org/>> 0.17.0 is now available on GitHub <https://github.com/pydata/sparse/releases/tag/0.17.0>, pypi <https://pypi.org/project/sparse/0.17.0/> and conda-forge. PyData/Sparse provides sparse multi-dimensional arrays for the Python Ecosystem. The highlights of this release include support for the v2024 Array API standard. The full release notes can be found on GitHub. Best, Hameer

1 0

PyCA cryptography 45.0.2 released
by Alex Gaynor May 18, 2025

May 18, 2025

PyCA cryptography 45.0.2 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X.509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.11+. Changelog (https://cryptography.io/en/latest/changelog/#v45-0-2): * Fixed using ``mypy`` with ``cryptography`` on older versions of Python. Alex -- All that is necessary for evil to succeed is for good people to do nothing.

1 0

NumPy 2.2.6 released
by Charles R Harris May 17, 2025

May 17, 2025

Hi All, NumPy 2.2.6 is a patch release that fixes bugs found after the 2.2.5 release. It is a mix of typing fixes/improvements as well as the normal bug fixes and some CI maintenance. This release supports Python 3.10-3.13. Wheels can be downloaded from PyPI <https://pypi.org/project/numpy/2.2.6>; source archives, release notes, and wheel hashes are available on Github <https://github.com/numpy/numpy/releases/tag/v2.2.6>. *Contributors* A total of 8 people contributed to this release. People with a \"+\" by their names contributed a patch for the first time. - Charles Harris - Ilhan Polat - Joren Hammudoglu - Marco Gorelli + - Matti Picus - Nathan Goldbaum - Peter Hawkins - Sayed Adel *Pull requests merged* A total of 11 pull requests were merged for this release. - #28778: MAINT: Prepare 2.2.x for further development - #28851: BLD: Update vendor-meson to fix module_feature conflicts arguments\... - #28852: BUG: fix heap buffer overflow in np.strings.find - #28853: TYP: fix `NDArray[floating] + float` return type - #28864: BUG: fix stringdtype singleton thread safety - #28865: MAINT: use OpenBLAS 0.3.29 - #28889: MAINT: from_dlpack thread safety fixes - #28913: TYP: Fix non-existent `CanIndex` annotation in `ndarray.setfield` - #28915: MAINT: Avoid dereferencing/strict aliasing warnings - #28916: BUG: Fix missing check for PyErr_Occurred() in \_pyarray_correlate. - #28966: TYP: reject complex scalar types in ndarray.\_\_ifloordiv\_\_ Cheers, Charles Harris

1 0

Nikola v8.3.3 is out!
by Chris Warrick May 17, 2025

May 17, 2025

On behalf of the Nikola team, I am pleased to announce the immediate availability of Nikola v8.3.3. This is a bugfix release. We’ve had to release Nikola v8.3.3 immediately after releasing Nikola v8.3.2, as it is broken on Python 3.8. We would like to thank the Python packaging ecosystem for being an incomprehensible and incompatible trainwreck. What is Nikola? =============== Nikola is a static site and blog generator, written in Python. It can use Mako and Jinja2 templates, and input in many popular markup formats, such as reStructuredText and Markdown — and can even turn Jupyter Notebooks into blog posts! It also supports image galleries, and is multilingual. Nikola is flexible, and page builds are extremely fast, courtesy of doit (which is rebuilding only what has been changed). Find out more at the website: https://getnikola.com/ Downloads ========= Install using `pip install Nikola`. Changes from v8.3.1 =================== Features -------- * Trace template usage when an environment variable ``NIKOLA_TEMPLATES_TRACE`` is set to any non-empty value. * Give user control over the raw underlying template engine (either ``mako.lookup.TemplateLookup`` or ``jinja2.Environment``) via an optional ``conf.py`` method ``TEMPLATE_ENGINE_FACTORY``. * Switch to pyproject.toml * Add path handler ``slug_source`` linking to source of post. Bugfixes -------- * Ignore errors in parsing SVG files for shrinking them, copy original file to output instead (Issue #3785) * Restore ``annotation_helper.tmpl`` with dummy content - fix themes still mentioning it (Issue #3764, #3773) * Fix compatibility with watchdog 4 (Issue #3766) * ``nikola serve`` now works with non-root SITE_URL. * Stack traces meaningless for end users now more reliably suppressed (Issue #3838). Other ----- * Changed filter for tidy from ``tidy5`` to ``tidy``.

1 0

PyCA cryptography 45.0.1 released
by Paul Kehrer May 17, 2025

May 17, 2025

PyCA cryptography 45.0.1 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X.509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.10+. Changelog (https://cryptography.io/en/latest/changelog/#v45-0-1): * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.0. This also includes the changes from 45.0.0: Changelog (https://cryptography.io/en/latest/changelog/#v45-0-0): * Support for Python 3.7 is deprecated and will be removed in the next cryptography release. * Updated the minimum supported Rust version (MSRV) to 1.74.0, from 1.65.0. * Added support for serialization of PKCS#12 Java truststores in serialize_java_truststore() * Added derive_phc_encoded() and verify_phc_encoded() methods to support password hashing in the PHC string format. * Added support for PKCS7 decryption and encryption using AES-256 as the content algorithm, in addition to AES-128. * BACKWARDS INCOMPATIBLE: Made SSH private key loading more consistent with other private key loading: load_ssh_private_key() now raises a TypeError if the key is unencrypted but a password is provided (previously no exception was raised), and raises a TypeError if the key is encrypted but no password is provided (previously a ValueError was raised). * We significantly refactored how private key loading ( load_pem_private_key() and load_der_private_key()) works. This is intended to be backwards compatible for all well-formed keys, therefore if you discover a key that now raises an exception, please file a bug with instructions for reproducing. * Added unsafe_skip_rsa_key_validation keyword-argument to load_ssh_private_key(). * Added XOFHash to support repeated squeeze() operations on extendable output functions. * Added add_response_by_hash() method to allow creating OCSP responses using certificate hash values rather than full certificates. * Extended the X.509 path validation API to support user-configured extension policies via the PolicyBuilder.extension_policies method. * Deprecated the subject, verification_time and max_chain_depth properties on ClientVerifier and ServerVerifier in favor of a new policy property. These properties will be removed in the next release of cryptography. * BACKWARDS INCOMPATIBLE: The VerifiedClient.subject property can now be None since a custom extension policy may allow certificates without a Subject Alternative Name extension. * Changed the behavior when the OpenSSL 3 legacy provider fails to load. Instead of raising an exception, a warning is now emitted. The CRYPTOGRAPHY_OPENSSL_NO_LEGACY environment variable can still be used to disable the legacy provider at runtime. * Added support for the CRYPTOGRAPHY_BUILD_OPENSSL_NO_LEGACY environment variable during build time, which prevents the library from ever attempting to load the legacy provider. * Added support for the PrivateKeyUsagePeriod X.509 extension. This extension defines the period during which the private key corresponding to the certificate’s public key may be used. Added support for compiling against aws-lc. * Parsing X.509 structures now more strictly enforces that Name structures do not have malformed ASN.1. * We now publish py311 wheels that utilize the faster pyo3::buffer::PyBuffer interface, resulting in significantly improved performance for operations involving small buffers. * Added ssh_key_fingerprint() for computing fingerprints of SSH public keys. * Added support for deterministic ECDSA signing via the new keyword-only argument ecdsa_deterministic in the X509 builder sign methods. -Pau Kehrer (reaperhulk)

1 0

PyCA cryptography 45.0.0 released
by Paul Kehrer May 17, 2025

May 17, 2025

PyCA cryptography 45.0.0 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X.509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.10+. Changelog (https://cryptography.io/en/latest/changelog/#v45-0-0): * Support for Python 3.7 is deprecated and will be removed in the next cryptography release. * Updated the minimum supported Rust version (MSRV) to 1.74.0, from 1.65.0. * Added support for serialization of PKCS#12 Java truststores in serialize_java_truststore() * Added derive_phc_encoded() and verify_phc_encoded() methods to support password hashing in the PHC string format. * Added support for PKCS7 decryption and encryption using AES-256 as the content algorithm, in addition to AES-128. * BACKWARDS INCOMPATIBLE: Made SSH private key loading more consistent with other private key loading: load_ssh_private_key() now raises a TypeError if the key is unencrypted but a password is provided (previously no exception was raised), and raises a TypeError if the key is encrypted but no password is provided (previously a ValueError was raised). * We significantly refactored how private key loading ( load_pem_private_key() and load_der_private_key()) works. This is intended to be backwards compatible for all well-formed keys, therefore if you discover a key that now raises an exception, please file a bug with instructions for reproducing. * Added unsafe_skip_rsa_key_validation keyword-argument to load_ssh_private_key(). * Added XOFHash to support repeated squeeze() operations on extendable output functions. * Added add_response_by_hash() method to allow creating OCSP responses using certificate hash values rather than full certificates. * Extended the X.509 path validation API to support user-configured extension policies via the PolicyBuilder.extension_policies method. * Deprecated the subject, verification_time and max_chain_depth properties on ClientVerifier and ServerVerifier in favor of a new policy property. These properties will be removed in the next release of cryptography. * BACKWARDS INCOMPATIBLE: The VerifiedClient.subject property can now be None since a custom extension policy may allow certificates without a Subject Alternative Name extension. * Changed the behavior when the OpenSSL 3 legacy provider fails to load. Instead of raising an exception, a warning is now emitted. The CRYPTOGRAPHY_OPENSSL_NO_LEGACY environment variable can still be used to disable the legacy provider at runtime. * Added support for the CRYPTOGRAPHY_BUILD_OPENSSL_NO_LEGACY environment variable during build time, which prevents the library from ever attempting to load the legacy provider. * Added support for the PrivateKeyUsagePeriod X.509 extension. This extension defines the period during which the private key corresponding to the certificate’s public key may be used. Added support for compiling against aws-lc. * Parsing X.509 structures now more strictly enforces that Name structures do not have malformed ASN.1. * We now publish py311 wheels that utilize the faster pyo3::buffer::PyBuffer interface, resulting in significantly improved performance for operations involving small buffers. * Added ssh_key_fingerprint() for computing fingerprints of SSH public keys. * Added support for deterministic ECDSA signing via the new keyword-only argument ecdsa_deterministic in the X509 builder sign methods. -Paul Kehrer (reaperhulk)

1 0

ANN: Leo 6.8.4 released
by Edward K. Ream May 16, 2025

May 16, 2025

Leo https://leo-editor.github.io/leo-editor/ 6.8.4 is now available on GitHub <https://github.com/leo-editor/leo-editor/releases> and pypi <https://pypi.org/project/leo/>. Many thanks to all those who have contributed to this release! Leo is an IDE, outliner and PIM <https://leo-editor.github.io/leo-editor/preface.html>. *The highlights of Leo 6.8.4* - Improve the Rust importer. - Allow rest comments to be colored differently from @language <https://github.com/language> rest. - Support @language typst. - Several other improvements to syntax coloring. - Add the show-buttons-and-at-commands command. - Add the find-source-for-command command. - Add the beautify-script command. - The execute-script command beautifies c.p's tree if @bool beautify-python-code-on-write = True. - Remove the join-leo-irc command. - Scripts (including @command and @button scripts) may now return a value. - Replace c.scanAllDirectives with 7 seven new Commands getters. - Deprecate c.scanAllDirectives and 17 other directives-related functions. - Call g.deprecated in all deprecated functions to issue a deprecation warning. - Several significant code cleanups. - The usual minor bug fixes. *Breaking change* - Syntax coloring for @language <https://github.com/language> rest may require a new setting in myLeoSettings.leo. See the What's new in Leo 6.8.4 for details. *Links* - Install Leo <https://leo-editor.github.io/leo-editor/installing.html> - 6.8.4 Issues <https://github.com/leo-editor/leo-editor/issues?q=is%3Aissue+milestone%3A6.…> - 6.8.4 Pull Requests <https://github.com/leo-editor/leo-editor/pulls?q=is%3Apr+milestone%3A6.8.4> - Documentation <https://leo-editor.github.io/leo-editor/leo_toc.html> - Tutorials <https://leo-editor.github.io/leo-editor/tutorial.html> - Video tutorials <https://leo-editor.github.io/leo-editor/screencasts.html> - Forum <https://groups.google.com/group/leo-editor> - Leo on GitHub <https://github.com/leo-editor/leo-editor> - LeoVue <https://github.com/kaleguy/leovue#leo-vue> - What people are saying about Leo <https://leo-editor.github.io/leo-editor/testimonials.html> - More links <https://leo-editor.github.io/leo-editor/leoLinks.html> Edward ----------------------------------------------------------------- Edward K. Ream: edreamleo(a)gmail.com Leo Editor: https://leo-editor.github.io/leo-editor/ <http://leoeditor.com/> ----------------------------------------------------------------- <P><A HREF="https://leo-editor.github.io/leo-editor/">Leo 6.8.2</A> Leo 6.8.2 released (5-15-2025)

1 0