Brett Cannon    While writing the section of my 2026 Python Packaging Council (PPC) nomination on secure supply chain, I realized that one thing related to having a...

Brett Cannon    I have decided to run for the inaugural 2026 Python packaging council (PPC). I will say I have the support of my employer (Microsoft) to do this, but...

Brett Cannon    There have been several security incidents lately that involved compromising GitHub Actions workflows. This has led some to say GitHub Actions is the...

Brett Cannon    While I decide what to do with PEP 832 after polling folks on their opinion, I thought I would write out why I’m even bothering with any of this.I’m...

Brett Cannon    A Python project got hacked where malicious releases were directly uploaded to PyPI. I said on Mastodon that had the project used trusted publishing...

Brett Cannon    It’s been a while since I posted about WASI support in CPython 😅 Up until now, most of the work I have been doing around WASI has been making...

Brett Cannon    In case you didn’t hear, PEP 810 got accepted which means Python 3.15 is going to support lazy imports One of the selling points of lazy imports is...

Brett Cannon    I want to be upfront that this blog post is for me to write down some thoughts that I have on the idea of rewriting the Python Launcher for Unix from...

Brett Cannon    I was writing some code where I was using httpx.get() and its params parameter. I decided to use a TypedDict for the dictionary I was passing as the...

Brett Cannon    This is the blog post version of my keynote from EuroPython 2025 in Prague, Czechia.)We now have a lock file format specification. That might not...

Brett Cannon    PEP 750 introduced t-strings for Python 3.14. In fact, they are so new that as of Python 3.14.0b1 there still isn’t any documentation yet for t...

Brett Cannon    I normally don’t talk about politics here, but as I write this the US has started a trade war with Canada (which is partially paused for a month, but...

Brett Cannon    When I was about to go on paternity leave, the Gleam programming language reached 1.0. It’s such a small language that I was able to learn it over...

Brett Cannon    In the past week I had two people separately tell me what they thought the Python Software Foundation Conduct WG did and both were wrong (and...

Brett Cannon    In my opinion, you should only introduce a named tuple to your code when you’re updating a preexisting API that was already returning a tuple or you...