PyCoder’s Weekly

Issue #759: Pillow Flaw, JIT Removed, Security, and More (2026-11-03)

2026-11-03T19:30:00+00:00

#759 – NOVEMBER 3, 2026
View in Browser »

Critical Flaw in Pillow Allows Code Execution

A critical flaw was found in Pillow, the popular image library. A specially crafted EPS file could result in code execution. Pillow 13.0.0 fixed this and several other issues. This post describes the release and exploit.
SWATI KHANDELWAI

Python’s Experimental JIT to Be Removed

PEP 836 has been withdrawn and the experimental JIT is to be removed from CPython’s main branch. This article talks about the JIT’s journey and what still may be in store.
JOE BROCKMEIER

CodeAF: 78% on DeepSWE with an Open Model

With DeepSeek V4.1 Flash, CodeAF fixed 88 of 113 GitHub issues on DeepSWE. Against Codex and eight other harnesses on one open model, it ranked #1 at the lowest cost per fix. CodeAF is an open-source coding harness built for open models, and works with closed models too. Star on GitHub
AGENTFIELD sponsor

Supply Chain Security for the Age of AI-Speed Exploits

Learn Python supply chain security as AI speeds up attacks: what the LiteLLM backdoor teaches, how to check your setup, and habits that last.
REAL PYTHON

Quiz: Supply Chain Security for the Age of AI-Speed Exploits

REAL PYTHON

Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 Released

PYTHON.ORG

Move Past the Chat Window With Codex CLI

If you’re still pasting code and tracebacks into a chat, let an agent work inside your project instead. Codex CLI runs in your terminal, reads your files, runs your tests, and follows the project rules you write in an AGENTS.md file. Over two live days on November 14–15, you’ll build a full Python CLI app this way, from an empty directory to GitHub.
REAL PYTHON

Articles & Tutorials

Google Adopts Pyrefly for Typechecking

Python is one of the primary languages at Google, powering everything from machine learning research to developer infrastructure and data pipelines. Replacing previous type-checking infrastructure with Pyrefly provided significant speedups for engineers and agents alike, while substantially reducing build-system compute resources.
GOOGLEBLOG.COM • Shared by anonymous

Polars 2.0: Streaming by Default and Stricter Types

Polars 2.0 makes lazy queries faster without code changes, but its new defaults can affect existing workflows. This article compares Polars 1.x and 2.0, covering streaming performance, spill-to-disk, changes to join ordering, and stricter type checking that catches silent precision loss.
OPENTEAMS.COM • Shared by Khuyen Tran

Django as a Simple Static Site Builder

Combining three libraries: nanodjango, django-nanopages, and django-distill, you can create a static site generator in just a few lines of code. Why learn another tool when you already know Django?
RADIAC

GPT-6.1 Terra Draws a Python Reading a Book

Explore GPT-6.1 Terra’s Python code, turtle drawing, and responses to small tasks that check modern syntax, release knowledge, focused edits, and made-up functions.
REAL PYTHON

Python vs Go: A Practical Comparison for Developers

This article looks at how Python and Go differ, what surveys say about the devs who use them, and what interviews say about the trade-offs between them.
DOMINIKA STANKIEWICZ

Python Typing Survey 2026 Results

This post summarizes the results of the 2026 Python Typing survey. Type hint use changed somewhat, but the choice of type checker has changed sharply.
FACEBOOK

13 Project Ideas for Intermediate Python Developers

Try 13 Python project ideas for intermediate developers. Build web, GUI, and command-line apps that challenge you and make you a better Pythonista.
REAL PYTHON

Three Ways of Storing and Accessing Lots of Images in Python

Compare three ways of storing images in Python, as PNG files on disk, in LMDB, and in HDF5, with timings for reading and writing lots of images.
REAL PYTHON

NumPy Tutorial: Your First Steps Into Data Science in Python

Follow this NumPy tutorial to learn how to create and manipulate arrays in Python and take your first steps into data science.
REAL PYTHON

Python on My Wrist

This blog post talks about reviving PineTime smartwatch running up-to-date MicroPython and wasp-os.
MICHIEL BEIJEN

Tachyon: Sampling Profiling in Python

Learn how to use Tachyon, Python’s sampling profiler.
RODRIGO GIRÃO SERRÃO

Projects & Code

Events

Weekly Real Python Office Hours Q&A (Virtual)

November 4, 2026
REALPYTHON.COM

Canberra Python Meetup

November 5, 2026
MEETUP.COM

Sydney Python User Group (SyPy)

November 5, 2026
SYPY.ORG

PyCon ES 2026

November 6 to November 9, 2026
PYCON.ORG

Python El Salvador Vuelve

November 7, 2026
PYTHON.ORG.SV

PyCon Chile 2026

November 14 to November 16, 2026
PYCON.CL

Happy Pythoning!
This was PyCoder’s Weekly Issue #759.
View in Browser »

[ Subscribe to 🐍 PyCoder’s Weekly 💌 – Get the best Python news, articles, and tutorials delivered to your inbox once a week >> Click here to learn more ]

Issue #758: Security, Optimization, itertools, and More (2026-10-27)

2026-10-27T19:30:00+00:00

#758 – OCTOBER 27, 2026
View in Browser »

The Future of Python Security

How is the Python ecosystem adapting to the modern landscape of software security and supply chain defense? This week on the show, we sit down with Seth Larson, the Python Software Foundation’s Security Developer in Residence.
REAL PYTHON podcast

Python Performance Optimization: A Practical Guide

Learn practical Python performance optimization techniques, from confirming a bottleneck with timeit to picking the fix that makes your program faster.
REAL PYTHON

Quiz: Python Performance Optimization: A Practical Guide

REAL PYTHON

Current vs. Historical Memory in Python Agents

Your Python agent stores a preference, the user changes it, and vector search can return both versions. The fix is linking the new memory to the old one, so the old one is marked historical and stays available. Explore the walkthrough and notebook
ORACLE sponsor

Python `itertools` by Example

Combine Python’s itertools functions into memory-efficient pipelines as you deal cards, analyze stock data, and pick relay teams.
REAL PYTHON course

PSF Fellow Members for Q3 2026!

PYTHON.ORG

PEP 850: Wheel Variants: Providers (Draft)

PYTHON.ORG

PEP 836: JIT Go Brrr: The Path to a Supported JIT Compiler for CPython (Withdrawn)

PYTHON.ORG

Python 3.15.1, 3.14.9 and 3.13.17 Released

PYTHON.ORG

Articles & Tutorials

PyPI Now Limits Versions to 128 Characters

Across roughly 10 million releases, only two have version strings longer than 128 characters, so this change doesn’t really effect anyone. The new limit is mostly to keep page rendering for projects to be reasonable and the rule is only for PyPI and won’t be enforced by tools such as pip or uv.
PYPI.ORG

PSF Wikis: Relaunched

“In February 2026, the Python Software Foundation (PSF) made the PSF, Python, and Jython wikis read-only due to excessive automated traffic and security concerns on outdated infrastructure.” After much work, they are being made available again. This post describes what happened.
PYTHON SOFTWARE FOUNDATION

Unblock Your Coding Agent’s Web Access

Ask Claude Code or Cursor to fetch a page and it often comes back blocked, half-rendered, or buried in markup. Zyte MCP, from the maintainers of Scrapy, connects your agent to Zyte API for rendered pages, clean Markdown, and structured data in the same session. It’s hosted, connects with one command Connect Zyte MCP in one command →
ZYTE sponsor

How I Decide Which Python and Django Versions I Support

Matthias is the maintainer of several popular Django and Python packages. This post describes how he decides which versions of the libraries to maintain across his projects.
MATTHIAS KESTENHOLZ

How to Use Claude Code Skills for Better Python Docstrings

Learn how to use Claude Code skills to write consistent Python docstrings, with style references and a helper script you can reuse in every project.
REAL PYTHON

Practical Software Architecture for Python Developers

A summary of a talk at Python NL given by Henk-Jan van Hasselaar. It discusses how coupling and cohesion effect your architectural choices.
REINOUT VAN REES

Bringing `uv` and `ty` Together

Experimental uv-ty integration enables first-class support for Python scripts on the CLI and in the editor, and a unified uv check command.
SARA SKLENKA

Building an AI Agent With LangGraph and Python

Learn LangGraph in Python with this hands-on video course and build a stateful AI agent using state graphs, nodes, and conditional edges.
REAL PYTHON course

Django Quarterly Contributor Outreach Oct 2026

An update on what is going on in the Django community, including new features added and areas of discussion needing community feedback.
DJANGO SOFTWARE FOUNDATION

Module Profiling Overview

Learn about the new module profiling that was introduced in Python 3.15 to organise the built-in profiling tools.
RODRIGO GIRÃO SERRÃO

Projects & Code

Flowmpeg: FFmpeg Workflows for Python

GITHUB.COM/IMANM02 • Shared by Iman Mohammadi

Citeprobe: Evidence-First Academic Reference Verification

GITHUB.COM/IMANM02 • Shared by Iman Mohammadi

HeyUtils Python Regex Tester

HEYUTILS.COM • Shared by Carter Domenic (HeyUtils)

terrahour: World Clock With a Day/Night Map for the Terminal

GITHUB.COM/ACOCI86 • Shared by Alessio Coci

pre-commit: Manage Multi-Language Pre-Commit Hooks

GITHUB.COM/PRE-COMMIT

Events

Weekly Real Python Office Hours Q&A (Virtual)

October 28, 2026
REALPYTHON.COM

FastAPI Conf 2026

October 28 to October 29, 2026
FASTAPICONF.COM

PyConFR 2026

October 29 to November 2, 2026
PYCON.FR

PyDelhi User Group Meetup

October 31, 2026
MEETUP.COM

Melbourne Python Users Group, Australia

November 2, 2026
J.MP

PyCon ES 2026

November 6 to November 9, 2026
PYCON.ORG

Happy Pythoning!
This was PyCoder’s Weekly Issue #758.
View in Browser »

[ Subscribe to 🐍 PyCoder’s Weekly 💌 – Get the best Python news, articles, and tutorials delivered to your inbox once a week >> Click here to learn more ]

Issue #757: Django Migrations, Functional Programming, MVC, and More (2026-10-20)

2026-10-20T19:30:00+00:00

#757 – OCTOBER 20, 2026
View in Browser »

Django ORM, Migrations and `makemigrations`

This tutorial builds a small coffee and tea store one migration at a time, then breaks it on purpose. You’ll backfill a required field, roll a migration back, untangle two developers’ migrations and fix a slow page with Django 6.1’s new fetch modes.
MY-SPACE.IO • Shared by Mirza Ishraq Yeahia

Functional Programming in Python: When and How to Use It

See how Python supports functional programming, what the paradigm actually is, and where it fits in the code you write day to day.
REAL PYTHON

MCP Auth That Passes the Security Review

When your customers connect AI agents to your product, their security team will have questions. PropelAuth has the answers built in: role-gated scopes, enterprise SSO through Okta and Entra ID, phishing-resistant consent screens, and an audit log of every agent connection. Learn More →
PROPELAUTH sponsor

Exploring the MVC Pattern in Python

Learn how the Model-View-Controller pattern organizes Python web apps, then build a small Flask app using models, views, and controllers.
REAL PYTHON course

Quiz: Exploring the MVC Pattern in Python

REAL PYTHON

Python 3.16.0 Alpha 1 Is Now Available

PYTHON.ORG

Python Bytes Podcast Hits Episode 500!

PYTHON BYTES

PyPy v8.0.1 Release

PYPY.ORG

Claude Code Course: Stop Copy-Pasting From ChatGPT

Build a complete Python CLI app from an empty directory with Claude Code, in two live 4-hour sessions on October 24–25. You’ll plan features, run tests, manage git, and debug AI-generated code.
REAL PYTHON

Articles & Tutorials

PyTorch Year in Review: OpenTeams’ Contributions in 2026

OpenTeams’ PyTorch team reviews their 2026 contributions, in a year when PyTorch received 58% more pull requests than the same period of 2025, a growing share of them written with AI coding agents. Highlights include a redesign of the symbolic interpreter in torch.compile, day 1 compiler support for Python 3.15, a new operator, and a build backend re-write!
ANDREW JAMES • Shared by Andrew James

Bayesian Optimization for Efficient Hyperparameter Search

Instead of testing every hyperparameter combination, Bayesian optimization uses results from earlier trials to decide what to try next. This hands-on tutorial builds it step by step with scikit-learn’s GaussianProcessRegressor and a custom Expected Improvement function, plotting the model’s predictions and uncertainty along with each point the search picks.
KHUYEN TRAN • Shared by Khuyen Tran

Pendulum and the Most Cursed `+` Operator in All of Python

Pendulum, a popular Python datetime library, has a + operator that inspects the call stack to decide which answer to give you. The post explains how it ended up there, and why the design behind it, a “drop-in” subclass of datetime, still matters for your code now that the hack itself has been patched.
ARIE BOVENBERG • Shared by Arie Bovenberg

Checking Email Reputation, and Allowing Outlook Again

Two years ago, PyPI prohibited Outlook email domains in the registration of new accounts due to a large malware campaign. With an update to how email reputation is calculated, addresses from outlook.com and hotmail.com can once more be used.
MIKE FIEDLER

[ Subscribe to 🐍 PyCoder’s Weekly 💌 – Get the best Python news, articles, and tutorials delivered to your inbox once a week >> Click here to learn more ]