📌 Find #Ukrainians in my starter pack that aims to list #Ukrainian#FOSS#maintainers doing #opensource on #GitHub and beyond.
bsky.app/starter-pack...#MadeInUkraine#open-source#Ukraine#StandWithUkraine#programming#freedom#python#js#php#maps#electronics#IoT#SmartHome#HomeAssistant
Cut a new security-focused release of `pypi-publish` v1.14.3. It features my deptree hash-pinning work and on top, @sethmlarson.dev also removed some revoked CAs from certifi TLS trust store in the deptree that might affect Sigstore stuff.
Upgrade, please! #Python#packaging#GitHub#security#PyPA
Cut a new security-focused release of `pypi-publish` v1.14.3. It features my deptree hash-pinning work and on top, @sethmlarson.dev also removed some revoked CAs from certifi TLS trust store in the deptree that might affect Sigstore stuff.
Upgrade, please! #Python#packaging#GitHub#security#PyPA
Saratov refinery is burning again after an overnight Ukrainian drone attack.
ㅤ
The Rosneft plant processed 5.8 million tons in 2024.
ㅤ
Russia needs fuel to attack Ukraine. Ukraine keeps cutting into that supply.
Support link is in our Bio.
🟡🐍Sviatoslove.pie♥🇺🇦#StandWithUkraine🙏 | українець на чужині reposted
That mother and child walking out of a metro station damaged by an explosion and seeing the aftermath of the strike in Kyiv go perfectly with the video of Witkoff kissing Putin’s ass till it shines and saying that, fuck, talking to him gave him some of the best memories of his life.
I love seeing your kids’ first day of school pics! All of them are beautiful! But saying this with my cybersecurity professional hat on: you probably shouldn’t be posting pictures of your kids. I’m sorry :(
Today's `passwd` output on a fresh #Gentoo box:
...
Alternatively, if no one else can see your terminal now, you can pick this as
your password: "idiot_stand!idiot".
...
#opensource#foss#security@gentoo.org 🫶
🟡🐍Sviatoslove.pie♥🇺🇦#StandWithUkraine🙏 | українець на чужині reposted
Michał Gorny, one of our developers and council members, has written up a great blog post "Why Gentoo?" - definitely worth a read!
blogs.gentoo.org/mgorny/2026/...
Germany closed its Moscow consulate after identifying a Russian Shahed drone strike on Leipzig airport overnight - runway damage confirmed, no casualties reported. Russian MoD denies involvement. 69 sources cross-referenced on factline.io.
So Volodymyr tirelessly kept releasing #opensource#wasm3 in #Kyiv after the Independence Day of #Ukraine, filling the world with innovation.
Meanwhile #ruscists kept sending missiles.
#UkrainianView#FOSS#maintenance#webassembly#russiaIsANaziState#russiaisaterrorisstate#StoprussianNazis
🎉 Wasm3 v0.9.0 is out! 🎉
It is the first major update in FIVE years.
That sounds like a software story. It isn't.
Four years ago, I wrote that my house had been destroyed by russians, and that I had to put #Wasm3 into minimal maintenance.
The war never went away.
As I was cleaning out some of my open tabs, I encountered one w/ @permutans.bsky.social's blog and saw that he's just posted about containing Claude in captivity the other day, which's been interesting to me lately. I'll want to reread this later: cog.spin.systems/claude-code-...
Here's how modern #opensource innovations survive in #Kyiv. My #wasm3 / #webassembly friend shared, after some targeted harassment by some #ruscit bots on #GitHub.
webassembly.org/features/?ca...#UkrainianView#StandWithUkraine️#russiaisaterrorisstate#russiaIsANaziState#StoprussianNazis
Got myself an #espresso tonic with a bit of a passion fruit sirup and @sirosen.net's red currant jam. So I'm now fully fueled up to review his #pip 26.2 compat PR for #pip-tools 🤟
#python#packaging#opensource#FOSS#maintenance
The Python Package Index now rejects new files published to releases older than 14 days. This mitigation prevents long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects are compromised.
blog.pypi.org/posts/2026-0...#python#security#supplychain#pypi
Please congratulate our newest PSF Fellow Members for Q2, 2026! Their continued contributions to the Python ecosystem are so very important to our community. #python
The Python Software Foundation is hiring a Security Developer. If you've got experience with Python, security, and collaborating with open source projects then we'd love to hear from you:
jobs.pyfound.org/apply/ei03ut...
📢 TIL 📑
The python `watchfiles` library by @sa.muelcolvin.com is a handy alternative to hook into filesystem notifications.
I recently used it to implement a file syncer and it worked great!
fabridamicelli.com/til/watchfil...
Last week at #EuroSciPy - eventhough I was excused after #EuroPython I was still glad to meet a lot of great minds
youtube.com/shorts/Ty-rx...#Python#DataScience#Science
🟡🐍Sviatoslove.pie♥🇺🇦#StandWithUkraine🙏 | українець на чужині reposted
Even the code or prose that sounds ok today, if reviewed tomorrow, will likely seem like gibberish. I notice it in areas of my expertise. So it’s terrifying to trust it too much in areas where I’m not the expert.
Peter's Law of Chatbot Accuracy*: "everything you read that's produced by an LLM is absolutely true, except for the rare output about which you happen have expert knowledge".
*Remixed from Knoll's Law of Media Accuracy, where the exact same rules apply!
Googling "sunset" used to give you the sunset time.
Googling "sunset" now gives you an AI summarized definition explaining what the sunset is.
The future!
Cut a new release of `pypi-publish` v1.14.2 to fix @davidbrochart.bsky.social-reported obscure @github.com's OIDC identity expiration in projects with a lot of wheels. Weird.
github.com/pypa/gh-acti... /
github.com/pypa/gh-acti...#python#Packaging#GitHub
Cut a new release of `pypi-publish` v1.14.1 at the #EuroPython 2026 Sprints over the weekend!
It handles the Node.js runtime warning, nothing much.
github.com/pypa/gh-acti... / github.com/pypa/gh-acti...#python#Packaging
Join Sviatoslav Sydorenko (Святослав Сидоренко) (@webknjaz.me) at EuroPython for "Defending Open Source from "AI" Slop: A Maintainer's Practical Guide" talk: ep2026.europython.eu/ZHCNDY
Join Sviatoslav Sydorenko (Святослав Сидоренко) (@webknjaz.me) at EuroPython for "reusable-tox.yml: Five Patterns to Eliminate CI/CD Boilerplate" session: ep2026.europython.eu/BX77EE
Watch PSF PyPI Safety & Security Engineer @miketheman.com's talk from Open Source Summit NA 2026: Trusted Publishing uses OIDC to generate short-lived tokens from CI/CD. No passwords. No tokens to rotate. No secrets in repos.
www.youtube.com/watch?v=i0BW...#Python#PyPI#OSSummit#Security
Just published pre-releases of the first-ever #tox plugins that inject pre-defined envs:
$ pip install tox-pre-commit tox-towncrier
$ tox list
additional environments:
pre-commit
make-changelog
check-changelog
draft-changelog
$ tox run -e pre-commit
#Python#FOSS#CI#testing
Happy to see the AI models learned the chauvinism and imperial blindness as well.
Had Claude review my write-up, it did and explained how some mistakes are clearly attributed to my Russian background.
I went WTF I'm Ukrainian, it said oh yeah I assumed from your surname...
My surname is Armenian.
🟡🐍Sviatoslove.pie♥🇺🇦#StandWithUkraine🙏 | українець на чужині reposted
APPLEBAUM: If you are leader of Russia or China, what's thing that's most threatening to you? Language of liberal democracy.
All this stuff we find boring and we're used to, like idea of freedom of speech, separation of powers, rule of law, all those things we take for granted in our societies
On the way home from #PyConUS 2026. Quite an experience this year; very intense. No point in sugar-coating the part where there is a pervasive vibe-sickness, open source is suffering a massive sustainability crisis, slop security PRs are overwhelming everyone (etc etc). But there was a lot of […]
@bdraco.org is at the
@pycon.us sprint already.
📍 Seaside Ballroom A, third table from the door @ #PyConUS sprints venue
Also join the online community @ matrix.to#/#aio-libs:m...#PyConUS2026#Python
👋 @bdraco.org is going to be running a
@pycon.us sprint on Monday.
Come by and say hi!
The sprint link is us.pycon.org/2026/events/.... It has pointers to getting started.
We've also started a GH project to organize possible ideas: github.com/orgs/aio-lib....
#PyConUS#PyConUS2026#Python
Last PyCon US hotel nudge: Marriott and Courtyard block reservations close tomorrow. ⏳
If you still need a room, now is a good time to book through the official flow in your dashboard. #PyConUS