Mailman 3 - Python-announce-list

ANN: PyData/Sparse 0.17.0 released
by Hameer Abbasi May 21, 2025

May 21, 2025

Hello all, PyData/Sparse <https://sparse.pydata.org <https://sparse.pydata.org/>> 0.17.0 is now available on GitHub <https://github.com/pydata/sparse/releases/tag/0.17.0>, pypi <https://pypi.org/project/sparse/0.17.0/> and conda-forge. PyData/Sparse provides sparse multi-dimensional arrays for the Python Ecosystem. The highlights of this release include support for the v2024 Array API standard. The full release notes can be found on GitHub. Best, Hameer

1 0

PyCA cryptography 45.0.2 released
by Alex Gaynor May 18, 2025

May 18, 2025

PyCA cryptography 45.0.2 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X.509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.11+. Changelog (https://cryptography.io/en/latest/changelog/#v45-0-2): * Fixed using ``mypy`` with ``cryptography`` on older versions of Python. Alex -- All that is necessary for evil to succeed is for good people to do nothing.

1 0

NumPy 2.2.6 released
by Charles R Harris May 17, 2025

May 17, 2025

Hi All, NumPy 2.2.6 is a patch release that fixes bugs found after the 2.2.5 release. It is a mix of typing fixes/improvements as well as the normal bug fixes and some CI maintenance. This release supports Python 3.10-3.13. Wheels can be downloaded from PyPI <https://pypi.org/project/numpy/2.2.6>; source archives, release notes, and wheel hashes are available on Github <https://github.com/numpy/numpy/releases/tag/v2.2.6>. *Contributors* A total of 8 people contributed to this release. People with a \"+\" by their names contributed a patch for the first time. - Charles Harris - Ilhan Polat - Joren Hammudoglu - Marco Gorelli + - Matti Picus - Nathan Goldbaum - Peter Hawkins - Sayed Adel *Pull requests merged* A total of 11 pull requests were merged for this release. - #28778: MAINT: Prepare 2.2.x for further development - #28851: BLD: Update vendor-meson to fix module_feature conflicts arguments\... - #28852: BUG: fix heap buffer overflow in np.strings.find - #28853: TYP: fix `NDArray[floating] + float` return type - #28864: BUG: fix stringdtype singleton thread safety - #28865: MAINT: use OpenBLAS 0.3.29 - #28889: MAINT: from_dlpack thread safety fixes - #28913: TYP: Fix non-existent `CanIndex` annotation in `ndarray.setfield` - #28915: MAINT: Avoid dereferencing/strict aliasing warnings - #28916: BUG: Fix missing check for PyErr_Occurred() in \_pyarray_correlate. - #28966: TYP: reject complex scalar types in ndarray.\_\_ifloordiv\_\_ Cheers, Charles Harris

1 0

Nikola v8.3.3 is out!
by Chris Warrick May 17, 2025

May 17, 2025

On behalf of the Nikola team, I am pleased to announce the immediate availability of Nikola v8.3.3. This is a bugfix release. We’ve had to release Nikola v8.3.3 immediately after releasing Nikola v8.3.2, as it is broken on Python 3.8. We would like to thank the Python packaging ecosystem for being an incomprehensible and incompatible trainwreck. What is Nikola? =============== Nikola is a static site and blog generator, written in Python. It can use Mako and Jinja2 templates, and input in many popular markup formats, such as reStructuredText and Markdown — and can even turn Jupyter Notebooks into blog posts! It also supports image galleries, and is multilingual. Nikola is flexible, and page builds are extremely fast, courtesy of doit (which is rebuilding only what has been changed). Find out more at the website: https://getnikola.com/ Downloads ========= Install using `pip install Nikola`. Changes from v8.3.1 =================== Features -------- * Trace template usage when an environment variable ``NIKOLA_TEMPLATES_TRACE`` is set to any non-empty value. * Give user control over the raw underlying template engine (either ``mako.lookup.TemplateLookup`` or ``jinja2.Environment``) via an optional ``conf.py`` method ``TEMPLATE_ENGINE_FACTORY``. * Switch to pyproject.toml * Add path handler ``slug_source`` linking to source of post. Bugfixes -------- * Ignore errors in parsing SVG files for shrinking them, copy original file to output instead (Issue #3785) * Restore ``annotation_helper.tmpl`` with dummy content - fix themes still mentioning it (Issue #3764, #3773) * Fix compatibility with watchdog 4 (Issue #3766) * ``nikola serve`` now works with non-root SITE_URL. * Stack traces meaningless for end users now more reliably suppressed (Issue #3838). Other ----- * Changed filter for tidy from ``tidy5`` to ``tidy``.

1 0

PyCA cryptography 45.0.1 released
by Paul Kehrer May 17, 2025

May 17, 2025

PyCA cryptography 45.0.1 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X.509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.10+. Changelog (https://cryptography.io/en/latest/changelog/#v45-0-1): * Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.0. This also includes the changes from 45.0.0: Changelog (https://cryptography.io/en/latest/changelog/#v45-0-0): * Support for Python 3.7 is deprecated and will be removed in the next cryptography release. * Updated the minimum supported Rust version (MSRV) to 1.74.0, from 1.65.0. * Added support for serialization of PKCS#12 Java truststores in serialize_java_truststore() * Added derive_phc_encoded() and verify_phc_encoded() methods to support password hashing in the PHC string format. * Added support for PKCS7 decryption and encryption using AES-256 as the content algorithm, in addition to AES-128. * BACKWARDS INCOMPATIBLE: Made SSH private key loading more consistent with other private key loading: load_ssh_private_key() now raises a TypeError if the key is unencrypted but a password is provided (previously no exception was raised), and raises a TypeError if the key is encrypted but no password is provided (previously a ValueError was raised). * We significantly refactored how private key loading ( load_pem_private_key() and load_der_private_key()) works. This is intended to be backwards compatible for all well-formed keys, therefore if you discover a key that now raises an exception, please file a bug with instructions for reproducing. * Added unsafe_skip_rsa_key_validation keyword-argument to load_ssh_private_key(). * Added XOFHash to support repeated squeeze() operations on extendable output functions. * Added add_response_by_hash() method to allow creating OCSP responses using certificate hash values rather than full certificates. * Extended the X.509 path validation API to support user-configured extension policies via the PolicyBuilder.extension_policies method. * Deprecated the subject, verification_time and max_chain_depth properties on ClientVerifier and ServerVerifier in favor of a new policy property. These properties will be removed in the next release of cryptography. * BACKWARDS INCOMPATIBLE: The VerifiedClient.subject property can now be None since a custom extension policy may allow certificates without a Subject Alternative Name extension. * Changed the behavior when the OpenSSL 3 legacy provider fails to load. Instead of raising an exception, a warning is now emitted. The CRYPTOGRAPHY_OPENSSL_NO_LEGACY environment variable can still be used to disable the legacy provider at runtime. * Added support for the CRYPTOGRAPHY_BUILD_OPENSSL_NO_LEGACY environment variable during build time, which prevents the library from ever attempting to load the legacy provider. * Added support for the PrivateKeyUsagePeriod X.509 extension. This extension defines the period during which the private key corresponding to the certificate’s public key may be used. Added support for compiling against aws-lc. * Parsing X.509 structures now more strictly enforces that Name structures do not have malformed ASN.1. * We now publish py311 wheels that utilize the faster pyo3::buffer::PyBuffer interface, resulting in significantly improved performance for operations involving small buffers. * Added ssh_key_fingerprint() for computing fingerprints of SSH public keys. * Added support for deterministic ECDSA signing via the new keyword-only argument ecdsa_deterministic in the X509 builder sign methods. -Pau Kehrer (reaperhulk)

1 0

PyCA cryptography 45.0.0 released
by Paul Kehrer May 17, 2025

May 17, 2025

PyCA cryptography 45.0.0 has been released to PyPI. cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, asymmetric algorithms, message digests, X.509, key derivation functions, and much more. We support Python 3.7+, and PyPy3 7.3.10+. Changelog (https://cryptography.io/en/latest/changelog/#v45-0-0): * Support for Python 3.7 is deprecated and will be removed in the next cryptography release. * Updated the minimum supported Rust version (MSRV) to 1.74.0, from 1.65.0. * Added support for serialization of PKCS#12 Java truststores in serialize_java_truststore() * Added derive_phc_encoded() and verify_phc_encoded() methods to support password hashing in the PHC string format. * Added support for PKCS7 decryption and encryption using AES-256 as the content algorithm, in addition to AES-128. * BACKWARDS INCOMPATIBLE: Made SSH private key loading more consistent with other private key loading: load_ssh_private_key() now raises a TypeError if the key is unencrypted but a password is provided (previously no exception was raised), and raises a TypeError if the key is encrypted but no password is provided (previously a ValueError was raised). * We significantly refactored how private key loading ( load_pem_private_key() and load_der_private_key()) works. This is intended to be backwards compatible for all well-formed keys, therefore if you discover a key that now raises an exception, please file a bug with instructions for reproducing. * Added unsafe_skip_rsa_key_validation keyword-argument to load_ssh_private_key(). * Added XOFHash to support repeated squeeze() operations on extendable output functions. * Added add_response_by_hash() method to allow creating OCSP responses using certificate hash values rather than full certificates. * Extended the X.509 path validation API to support user-configured extension policies via the PolicyBuilder.extension_policies method. * Deprecated the subject, verification_time and max_chain_depth properties on ClientVerifier and ServerVerifier in favor of a new policy property. These properties will be removed in the next release of cryptography. * BACKWARDS INCOMPATIBLE: The VerifiedClient.subject property can now be None since a custom extension policy may allow certificates without a Subject Alternative Name extension. * Changed the behavior when the OpenSSL 3 legacy provider fails to load. Instead of raising an exception, a warning is now emitted. The CRYPTOGRAPHY_OPENSSL_NO_LEGACY environment variable can still be used to disable the legacy provider at runtime. * Added support for the CRYPTOGRAPHY_BUILD_OPENSSL_NO_LEGACY environment variable during build time, which prevents the library from ever attempting to load the legacy provider. * Added support for the PrivateKeyUsagePeriod X.509 extension. This extension defines the period during which the private key corresponding to the certificate’s public key may be used. Added support for compiling against aws-lc. * Parsing X.509 structures now more strictly enforces that Name structures do not have malformed ASN.1. * We now publish py311 wheels that utilize the faster pyo3::buffer::PyBuffer interface, resulting in significantly improved performance for operations involving small buffers. * Added ssh_key_fingerprint() for computing fingerprints of SSH public keys. * Added support for deterministic ECDSA signing via the new keyword-only argument ecdsa_deterministic in the X509 builder sign methods. -Paul Kehrer (reaperhulk)

1 0

ANN: Leo 6.8.4 released
by Edward K. Ream May 16, 2025

May 16, 2025

Leo https://leo-editor.github.io/leo-editor/ 6.8.4 is now available on GitHub <https://github.com/leo-editor/leo-editor/releases> and pypi <https://pypi.org/project/leo/>. Many thanks to all those who have contributed to this release! Leo is an IDE, outliner and PIM <https://leo-editor.github.io/leo-editor/preface.html>. *The highlights of Leo 6.8.4* - Improve the Rust importer. - Allow rest comments to be colored differently from @language <https://github.com/language> rest. - Support @language typst. - Several other improvements to syntax coloring. - Add the show-buttons-and-at-commands command. - Add the find-source-for-command command. - Add the beautify-script command. - The execute-script command beautifies c.p's tree if @bool beautify-python-code-on-write = True. - Remove the join-leo-irc command. - Scripts (including @command and @button scripts) may now return a value. - Replace c.scanAllDirectives with 7 seven new Commands getters. - Deprecate c.scanAllDirectives and 17 other directives-related functions. - Call g.deprecated in all deprecated functions to issue a deprecation warning. - Several significant code cleanups. - The usual minor bug fixes. *Breaking change* - Syntax coloring for @language <https://github.com/language> rest may require a new setting in myLeoSettings.leo. See the What's new in Leo 6.8.4 for details. *Links* - Install Leo <https://leo-editor.github.io/leo-editor/installing.html> - 6.8.4 Issues <https://github.com/leo-editor/leo-editor/issues?q=is%3Aissue+milestone%3A6.…> - 6.8.4 Pull Requests <https://github.com/leo-editor/leo-editor/pulls?q=is%3Apr+milestone%3A6.8.4> - Documentation <https://leo-editor.github.io/leo-editor/leo_toc.html> - Tutorials <https://leo-editor.github.io/leo-editor/tutorial.html> - Video tutorials <https://leo-editor.github.io/leo-editor/screencasts.html> - Forum <https://groups.google.com/group/leo-editor> - Leo on GitHub <https://github.com/leo-editor/leo-editor> - LeoVue <https://github.com/kaleguy/leovue#leo-vue> - What people are saying about Leo <https://leo-editor.github.io/leo-editor/testimonials.html> - More links <https://leo-editor.github.io/leo-editor/leoLinks.html> Edward ----------------------------------------------------------------- Edward K. Ream: edreamleo(a)gmail.com Leo Editor: https://leo-editor.github.io/leo-editor/ <http://leoeditor.com/> ----------------------------------------------------------------- <P><A HREF="https://leo-editor.github.io/leo-editor/">Leo 6.8.2</A> Leo 6.8.2 released (5-15-2025)

1 0

python-oracledb 3.1.1
by Anthony Tuininga May 15, 2025

May 15, 2025

What is python-oracledb? python-oracledb is a Python extension module that enables access to Oracle Database for Python and conforms to the Python database API 2.0 specifications with a number of enhancements. This module replaces cx_Oracle. Where do I get it? https://pypi.org/project/oracledb/3.1.1/ The easiest method to install/upgrade python-oracledb is via pip as in python -m pip install oracledb --upgrade What's new? This release addresses a number of reported issues. See the full release notes for all of the details: https://python-oracledb.readthedocs.io/en/latest/release_notes.html#oracled… Please provide any feedback via GitHub issues: https://github.com/oracle/python-oracledb/issues or discussions: https://github.com/oracle/python-oracledb/discussions

1 0

Introducing Pysonar: The New SonarScanner for Python
by Jean Jimbo May 15, 2025

May 15, 2025

We're excited to announce the general availability of the SonarScanner for Python now installable directly via PyPI: https://pypi.org/project/pysonar/ This new scanner is designed specifically for the Python ecosystem and is fully compatible with: Python 3.9 and above SonarQube Cloud SonarQube Server 10.6 and above It replaces the previous beta scanner (https://pypi.org/project/pysonar-scanner/), which is now officially unsupported and not recommended for production use. The scanner supports a wide range of popular libraries and frameworks including security rules for Django, Flask, FastAPI, and quality rules for Pytorch, Numpy, Pandas, Scikit-learn and more. Whether you’re analyzing your Python projects on SonarQube Server or SonarQube Cloud, this scanner offers a streamlined and Python-native experience. ------------------------------------------------------------------------ You can find the documentation for setup and usage here: SonarQube Server: https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/… SonarQube Cloud: https://docs.sonarsource.com/sonarqube-cloud/advanced-setup/ci-based-analys… We invite all users looking for a dedicated Python analysis solution to try out the new scanner and share your feedback in our community. Happy scanning! -Team Sonar

1 0

ANN: eGenix Antispam Bot for Telegram 0.7.1
by eGenix Team May 14, 2025

May 14, 2025

*ANNOUNCING* eGenix Antispam Bot for Telegram Version 0.7.1 A simple, yet effective bot implementation to address Telegram signup spam. This announcement is also available on our web-site for online reading: https://www.egenix.com/company/news/eGenix-Antispam-Bot-for-Telegram-0.7.1-… ------------------------------------------------------------------------ *INTRODUCTION* eGenix <https://egenix.com/> has long been running a local Python user group meeting in Düsseldorf called /Python Meeting Düsseldorf <https://pyddf.de/>/ and we are using a Telegram group for most of our communication. In the early days, the group worked well and we only had few spammers joining it, which we could well handle manually. More recently, this has changed dramatically. We are seeing between 2-5 spam signups per day, often at night. Furthermore, the signups accounts are not always easy to spot as spammers, since they often come with profile images, descriptions, etc. With the bot, we now have a more flexible way of dealing with the problem. Please see our project page for details and download links: https://www.egenix.com/library/telegram-antispam-bot/ ------------------------------------------------------------------------ *FEATURES* * Low impact mode of operation: the bot tries to keep noise in the group to a minimum * Several challenge mechanisms to choose from, more can be added as needed * Flexible and easy to use configuration * Only needs a few MB of RAM, so can easily be put into a container or run on a Raspberry Pi * Can handle quite a bit of load due to the async implementation * Works with Python 3.9+ * MIT open source licensed ------------------------------------------------------------------------ *NEWS* The 0.7.1 release fixes a few bugs and adds more features: * Added missing dependency on emoji package to setup (bug introduced in 0.7.0, fixed in 0.7.1) * Added user name check for number of emojis, since these are being used a lot by spammers * Added wheel as requirement, since this is no longer included per default * Updated copyright year It has been battle-tested in production for several years already already and is proving to be a really useful tool to help with Telegram group administration. Enjoy, -- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Experts (#1, May 14 2025) >>> Python Projects, Coaching and Support ... https://www.egenix.com/ >>> Python Product Development ... https://consulting.egenix.com/ ________________________________________________________________________ ::: We implement business ideas - efficiently in both time and costs ::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 https://www.egenix.com/company/contact/ https://www.malemburg.com/

1 0