Python Tooling Blog
RSS-
Ruff 0.16.0 Enables 7x More Rules by Default
Ruff's first default-ruleset expansion since v0.1.0 adds 354 rules. What changes when you upgrade, which new categories are on, and how to migrate cleanly.
-
PyPI Now Rejects New Files on Releases Older Than 14 Days
PyPI blocks new file uploads to releases older than 14 days, closing an attack that could poison a pinned version without changing its number.
-
uv's Malware Check: What It Blocks and What It Misses
Turn on uv's install-time malware check in pyproject.toml to block known-malicious packages before any of their code runs.
-
ty now checks Pydantic like Pydantic does
ty 0.0.57 added first-class Pydantic support: lax and strict validation modes, ConfigDict parsing, and Field metadata. Here is what it checks and how it changes the ty vs Pyrefly choice.
-
Python 3.15 makes UTF-8 the default encoding
Python 3.15 enables UTF-8 mode by default. On Windows, text-mode open() and subprocess calls without an explicit encoding switch from the system code page to UTF-8. Here is what breaks and how to audit your codebase.
-
uv Wants to Secure Your CLI Tools
uv is building toward vulnerability scanning for globally installed CLI tools. A preview feature in 0.11.25 starts by writing a lockfile for each tool you install.
-
uv Solved the Packaging UX, Not Packaging
uv made Python packaging fast and pleasant for everyday use. But the problems the new Packaging Council will tackle, like GPU wheels, external dependencies, and lockfile standards, live in layers uv doesn't touch.
-
Pixi Can Now Build Packages From Source
Pixi Build brings PEP 517-style build backends to the conda ecosystem, letting pixi build Python, Rust, and mixed-language packages from source inside a single project. SciPy, Xarray, Dask, and CPython are early adopters.
-
Astral Shuts Down pyx, Open-Sources the Part That Mattered
On Talk Python #552, Charlie Marsh says Astral is winding down the commercial pyx registry and open-sourcing its GPU index and prebuilt-wheel infrastructure with free artifacts.
-
Blanket 1.0: An Early Look at Larry Hastings's Deterministic Threading Tests
Larry Hastings released Blanket 1.0 at PyCon US 2026. It lets test authors script the Python thread scheduler so that threaded tests stop being flaky.