I made a Jack-o‘-Lantern carving game with my son. Give it a whirl for a bit of spooky fun, and have a Happy Halloween this weekend!

https://adamj.eu/games/jack-o-lantern-maker/

#halloween #jackolantern #game #javascript

django-tui 26.2 needs no setup 🎉

cd into any Django project and run:

uvx django-tui

No pip install, no INSTALLED_APPS. It finds your manage.py (even from a subdirectory), loads your .env files and uses the project’s own virtualenv, so your Django version and apps are the ones running.

Then browse and run your management commands, or query your models in the shell.

https://github.com/anze3db/django-tui

#Django #Python #uv

Briefcase 0.4.7 has been released! This is a security release, addressing 2 high-impact vulnerabilities:

1. Preventing the use of eMudhra intermediate certificates
2. A vulnerability that potentially allows arbitrary filesystem access under Windows when downloading assets.

There are no other changes in this release. We strongly advise all Briefcase users to upgrade. https://pypi.org/project/briefcase/0.4.7/

Hello Python 3.15, goodbye 3.10, and now I can use 3.11

https://simonwillison.net/2026/Oct/12/python-3-15/

#Python #Programming #OpenSource

Yes. That is the #python logo in a double-sided scarf. The obverse has the matching design in reversed colors. #knitter.

Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 are out

blog.python.org/2026/10/python-3152-31410-31318-31216-31118

Five expedited security releases to distrust the compromised eMudhra intermediate CA keys.

I’m currently on medical leave from my day job so I can focus on the cancer treatment I’m going through. That being said, there’s only so much napping, TV Show / Movie / Sports watching, and reading I can do. So, I’m working through learning more about various tech that I use, or would like to use, and am writing it up as I go. I expect to post weekly(ish) but we’ll see.

Today’s installment … Have you heard the good news about just?

https://ryancheley.com/2026/10/26/have-you-heard-the-good-news-about-just/

I redid my personal website and I was so excited, I felt like I needed to do a new blog post. This was one I promised the Djangocon folks this year to explain my excitement at them moving to a single track conference, along with open spaces, which is the best type of conference. I explain why here:

https://www.ericholscher.com/blog/2026/oct/25/single-track-conferences/

🐍🚀 Out now: a full sweep of security releases of Python 3.11-3.15

🔒📜 They address the compromised eMudhra intermediate CA keys. These keys are now blocked by the ssl module as a last resort against their use. Normal uses of pip, including to upgrade pip itself, are now safe from attacks based on those compromised keys, even if pip hasn’t been updated yet.

https://discuss.python.org/t/python-3-15-2-3-14-10-3-13-18-3-12-16-and-3-11-18-are-out/109678

#Python #release #Python315 #Python314 #Python313 #Python312 #Python311 #eMudhra

The question of "Why do open source?" came up in the @djangonaut conversation. Humbled to see my talk from a couple of years ago recommended 😊

https://www.youtube.com/watch?v=YOZWF86TGmo

GitHub CLI: Opt in to expiring, auto-refreshing OAuth tokens https://github.blog/changelog/2026-10-21-github-cli-opt-in-to-expiring-auto-refreshing-oauth-tokens
#github

I feel like the people naming RCEs are getting lazy about naming. Someone cleverly pointed out that maybe we should name the pattern.

So, here it is: https://2shell2furio.us

I was a guest on the @realpython podcast to talk about #security and #Python 🐍🛡️

Thanks @digiglean for having me on the show!

https://realpython.com/podcasts/rpp/316/

(recorded before cybersecurity awareness month hit its full stride this week…)

A bit of Pluto

Relevant again (and again and again, ad nauseam):
https://bugzilla.mozilla.org/show_bug.cgi?id=647959

#emudhra #tls

tl;dr https://www.python-a2z.info/ is a website I created for myself because the online #Python docs need a jump page.

Ever tried to search the online docs for the builtin "set" type? You get every page that has the word "set" in it, and "set" is a pretty popular word!

Same story for "list", "dict", and many more. "f-strings"? Unless you know to look for "Formatted String Literals", you'll be searching for a while.

On another machine:

$ mo purge
...
Estimated space freed: 109.73GB | Items: 936

About 34 GB and 30 GB for the `target` dirs of uv and ruff!

CfP here: https://aldm-devroom.github.io/cfp/

2027 will be my first #FOSDEM & I'm delighted to be part of the devroom "Archives, Libraries, and Digital Memory", spearheaded by Software Heritage 🎉
(@SafeguardingResearch got invited & we gladly joined forces)
https://fosdem.org/2027/news/accepted-developer-rooms/

And to be clear, 'preserving what for whom' is on the forefront of my mind - in this sense, I would have talked about so called DEI topics regardless.
But I gladly take the FOSDEM pledge @janl proposed: https://writing.jan.io/2026/10/22/the-fosdem-pledge.html

People doing computational research: please remember to update your #Python package manager installations!

Due to the last security issue with CA certificates, packages like pip and uv had to be patched. It is important to update in all your virtual environments so everything it's safe. It's just a single command, written here, takes literally 5 seconds 😀

https://discuss.python.org/t/information-for-python-users-regarding-emudhra-emsign-ca-certificate-security-incident/109576

The PSF Diversity & Inclusion Workgroup monthly office hours are next week on the PSF Discord! Join us on Tuesday October 27th, 10 PM UTC, in #psf-diversity to chat, ask questions, and share what you're working on 🐍🗺️ #Python https://pyfound.blogspot.com/2026/07/the-psf-d-workgroup-are-starting-office.html