Trusted Publishing gives provenance of which repo the files were uploaded from, the workflow file, and commit. For example:
https://pypi.org/project/urllib3/2.3.0/#urllib3-2.3.0-py3-none-any.whl
Downstream verification for installers such as pip is the next step:
https://blog.trailofbits.com/2024/11/14/attestations-a-new-generation-of-signatures-on-pypi/
Just released! Python Docs Sphinx Theme 2024.10 ๐
https://pypi.org/project/python-docs-theme/2024.10/
๐ Add support for Python 3.13
๐ Drop support for Python 3.8
๐ Add script for handling translations
๐ Generate digital attestations for PyPI (PEP 740)
This is the theme used by docs sites such https://docs.python.org and https://typing.readthedocs.io
#Python #docs #Sphinx #PythonDocsTheme #PythonDocsSphinxTheme #PEP740
Just released: blurb 1.3.0 ๐
blurb is the CLI we use for managing CPython's news/changelog entries.
๐๏ธ Add support for Python 3.13
๐๏ธ Drop support for Python 3.8
๐๏ธ Generate digital attestations for PyPI (PEP 740)
๐๏ธ Allow running blurb test from blurb-* directories by
๐๏ธ Add version subcommand
๐๏ธ Generate __version__ at build to avoid slow importlib.metadata
https://pypi.org/project/blurb/1.3.0/
#Python #CPython #blurb #release #CLI #changelog #news #PEP740 #Python313 #Python38
Just released: pepotron 1.3.0 ๐
๐ฉ Generate digital attestations for PyPI (PEP 740)
๐ฉ Drop support for Python 3.8
๐ฉ Generate __version__ at build to avoid slow importlib.metadata
๐ฉ Test on CI with uv
https://pypi.org/project/pepotron/1.3.0/
Pepotron is a CLI for opening PEPs in your browser. For example, try:
$ pep 8
$ pep 3.14
$ pep dead batteries
$ pep calendar
Just released: pypistats 1.7.0 ๐
๐ Generate digital attestations for PyPI (PEP 740)
๐ Drop support for EOL Python 3.8
๐ Generate __version__ at build to avoid slow importlib.metadata
Just released: #cherry_picker 2.3.0 ๐
This tool creates backports for CPython when the Miss Islington bot can't, usually due to a merge conflict.
๐ Add support for #Python 3.13, drop EOL 3.8
๐ Resolve usernames when remote ends with a trailing slash
๐ Optimize validate_sha() with --max-count=1
๐ Remove multiple commit prefixes
๐ Handle whitespace when calculating usernames
๐ Publish to PyPI using #TrustedPublishers
๐ Generate #PEP740 attestations
๐ And more!
Just released: termcolor 2.5.0: ANSI colour formatting for terminal output
๐๐ฅ๏ธ๐จ
๐ฅ๏ธ Added `strike` attribute
๐ฅ๏ธ Now generates and uploads #PEP740 attestations to PyPI
๐ฅ๏ธ Dropped support for oh-so-very-nearly-EOL Python 3.8
๐๐โโก๏ธ๐โโก๏ธ๐โโก๏ธ๐โโก๏ธ๐โโก๏ธ Heading home soon after a hugely productive #Python #CoreDevSprint. Huge shout out to Itamar Oren & Meta for organising!
Friday:
๐๏ธ I was on the #core.py podcast with @ambv & Pablo! Expect a special edition soon featuring many sprinters
๐งโ๐ Discussed ideas for docs tooling to refresh the tutorial with @mariatta, Jelle Zijlstra, Petr Viktorin and @freakboy3742
๐ Made demo using PyData Theme for the docs
* Created 6 PRs (including adding #PEP740 attestations to PyPI packages), reviewed 11
Hugo van Kemenade