mastodon.ie

Hugo van Kemenade<a href="https://mastodon.social/@treyhunner" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@treyhunner</a> <a href="https://mastodon.social/@webology" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@webology</a> Likewise! Worktrees are useful for projects like CPython where we have `main`, `3.14`, `3.13` branches and so on.The guide I wrote:<a href="https://devguide.python.org/getting-started/git-boot-camp/#git-worktree" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://devguide.python.org/getting-started/git-boot-camp/#git-worktree</a> <a href="https://mastodon.social/tags/Git" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Git</a> <a href="https://mastodon.social/tags/worktree" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#worktree</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a>

Hugo van KemenadeJust released: Python 3.14.0 beta 3! 🚀🐍🥧 All the good stuff of b2 but also:🥧 Free-threaded Python is officially supported! (PEP 779)🥧 Subinterpreters in the stdlib! (PEP 734)Do you maintain a Python package? Please test 3.14.If you find a bug now, we can fix it before October, which helps everyone. And you might find some places in your code to update as well, which helps you.<a href="https://discuss.python.org/t/python-3-14-0-beta-3-is-here/95843?u=hugovk" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discuss.python.org/t/python-3-14-0-beta-3-is-here/95843?u=hugovk</a><a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/Python314" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python314</a> <a href="https://mastodon.social/tags/release" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#release</a> <a href="https://mastodon.social/tags/PEP779" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PEP779</a> <a href="https://mastodon.social/tags/PEP734" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PEP734</a> <a href="https://mastodon.social/tags/FreeThreaded" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FreeThreaded</a> <a href="https://mastodon.social/tags/subinterpreters" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#subinterpreters</a>

mgorny-nyan (on) :autism:🙀🚂🐧Ciekawostki o Pythonowym "limited API" i "stable ABI".1. <a href="https://pol.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> ma "limited API". Jak się tego używa, to kompilowane rozszerzenia są zgodne ze wskazaną wersją i wersjami nowszymi. Takie rozszerzenia dostają sufiks `.abi3.so` (albo podobny) zamiast np. `.cpython-313-x86_64-linux-gnu.so`.2. Wsparcie podzielone jest między CPythona i systemy budowania <a href="https://pol.social/tags/PEP517" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PEP517</a>. Np. w <a href="https://pol.social/tags/setuptools" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#setuptools</a> podaje się `py_limited_api=`, i wówczas przy budowaniu dodawane są odpowiednie flagi kompilatora i podmieniany jest sufiks rozszerzeń. <a href="https://pol.social/tags/Meson" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Meson</a> ma coś podobnego.3. Ale wersja "freethreading" aktualnie nie obsługuje "stable ABI", więc przy budowaniu z "limited API" dostaje się błąd kompilacji. Podobnie, setuptools rzuca błąd jeżeli z interpreterem freethreading podamy `py_limited_api`, a Meson po prostu pozwala się wysypać kompilacji. Tak więc autorzy paczek muszą sami sprawdzać, czy użyto kompilatora "freethreading", i wyłączyć wówczas "limited API".4. Bliżej nieokreślona przyszła wersja CPythona naprawi to wsparcie. Nie przyglądałem się tematowi dokładnie, ale podejrzewam, że będzie to tylko możliwe, jeżeli będziemy budować rozszerzenia dla tej bądź nowszej wersji. Więc ludzie pewnie będą musieli budować dwie wersje — tę dla starszych CPythonów, i dla nowszych + "freethreading". No i oczywiście będzie trzeba odpowiednio zaktualizować warunkowe załączanie "limited API".5. No i jest jeszcze <a href="https://pol.social/tags/PyPy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PyPy</a>. PyPy nie ma "stable ABI", ale pozwala budować rozszerzenia z "limited API". Setuptools i Meson po prostu wykrywają, że interpreter nie obsługuje sufiksu `.abi3.so`, i buduje rozszerzenia z normalnym sufiksem.<a href="https://pol.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>

danzinSo, what's next for fuzzing CPython with fusil?The results point to interesting future ideas, including expanding fuzzing to new environments like subinterpreters, using more tools like Thread Sanitizer, and developing more advanced fuzzing techniques.A huge thank you to everyone who contributed!And thank you for reading!P.S.: if you have a C/Rust extension, we can fuzz it too: <a href="https://mastodon.social/@danzin/114383188014599269" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://mastodon.social/@danzin/114383188014599269</a>(5/5)<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> <a href="https://mastodon.social/tags/fuzzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzer</a> <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>

danzinOne finding I really like is the bug discovery pattern.There wasn't a steady stream of bugs, but spikes of findings: 1st, a huge number of crashes as I started testing a CPython that hadn't been fuzzed by fusil in a decade.Later, a new wave of issues tied to the addition of new features to the fuzzer, like support for "weird classes" and typing objects.So periodic campaigns may have better cost-benefit than continuous fuzzing.(4/5)<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> <a href="https://mastodon.social/tags/fuzzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzer</a> <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>

danzinThe credit for fusil's effective design goes all to Victor Stinner (<a href="https://mamot.fr/@vstinner" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@vstinner</a>), who created it nearly two decades ago. It was responsible for finding release blockers way back in 2008. I just contributed a little to revive and enhance it. Some enhancements included running generated code in threads and adopting new "interesting" objects and values as inputs, helping to discover more crashes.(3/5)<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> <a href="https://mastodon.social/tags/fuzzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzer</a> <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>

danzinAll this was only possible due to the great response from the Python community.Thanks to the developers efforts to triage, diagnose, and fix the problems, the campaign became a collaborative effort to improve Python.The impact was considerable, mobilizing Core Devs and contributors to create 98 PRs to fix these bugs. The average time to fix an issue was about 20 days, with a median of just five days.(2/5)<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> <a href="https://mastodon.social/tags/fuzzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzer</a> <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>

danzinHappy to share the results of a fuzzing campaign targeting CPython that ran from Oct 2024 to May 2025. Using the fusil fuzzer, the goal was to find crashes and improve CPython's robustness.I really like the results we got: the effort uncovered 52 unique crash-related issues. These reports approached 30% of all "type-crash" issues filed during that period. One of the crashes was classified as a Release Blocker, that was a nice result! :)(1/5)<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> <a href="https://mastodon.social/tags/fuzzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzer</a> <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>

danzinSo, my technical report on fuzzing CPython with fusil is almost done.I'd really appreciate some help categorizing the found issues by relevance/severity/importance or any other name for impact.Do you have the chops to help with that? And do you have time and interest? Please get in touch if so! And please boost if you can :)A plot, some tables, links to the report and some discussion are available in this thread:<a href="https://discuss.python.org/t/feedback-on-the-recent-fusil-fuzzing-campaign-of-cpython/91737" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discuss.python.org/t/feedback-on-the-recent-fusil-fuzzing-campaign-of-cpython/91737</a><a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> <a href="https://mastodon.social/tags/fuzzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzer</a> <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>

mgorny-nyan (on) :autism:🙀🚂🐧Kiedy poświęcasz godzinę na zaciągnięcie poprawek bezpieczeństwa do wszystkich wersji Pythona w <a href="https://pol.social/tags/Gentoo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gentoo</a>, bo właśnie weszły do repozytorium CPythona i nie było nowych wydań w planach — a kilka godzin później znów poświęcasz czas na zaktualizowanie paczek do nowych wersji, które jednak wydano.No i oczywiście po drodze dziwisz się, dlaczego nie zamaskowałeś 3.8 poprzednim razem, i drugi raz popełniasz tę samą gafę.A, no i zaktualizujcie CPythona i PyPy na swoich komputerach (poprawki bezpieczeństwa dla PyPy tylko w Gentoo).<a href="https://pol.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://pol.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://pol.social/tags/bezpiecze%C5%84stwo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#bezpieczeństwo</a>

Hugo van KemenadeJust released: Python 3.14.0 beta 2! 🚀🐍🥧 Deferred type annotation evaluation! 🥧 T-strings! 🥧 Zstandard! 🥧 Syntax highlighting in the REPL! 🥧 Colour in unittest, argparse, json and calendar CLIs! 🥧 UUID v6-8! 🥧 And much more!Do you maintain a Python package? Please test 3.14. If you find a bug now, we can fix it before October, which helps everyone. And you might find some places in your code to update as well, which helps you.<a href="https://discuss.python.org/t/python-3-14-0-beta-2-is-here/93396?u=hugovk" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discuss.python.org/t/python-3-14-0-beta-2-is-here/93396?u=hugovk</a><a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/Python314" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python314</a> <a href="https://mastodon.social/tags/release" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#release</a>

danzinToday's activity in the <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> repository is awesome. Go sprinters!<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>

Kevin Brown-SilvaLet's see if I can get a list of the projects who are planning on sprinting at <a href="https://mastodon.brown-silva.social/tags/PyConUS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PyConUS</a> this week:* <a href="https://fosstodon.org/@beeware" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@beeware</a> (Room 317) * <a href="https://fosstodon.org/@pyladiescon" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@pyladiescon</a> Web Portal * Pallets Projects (<a href="https://mastodon.brown-silva.social/tags/Flask" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Flask</a>, <a href="https://mastodon.brown-silva.social/tags/Jinja" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Jinja</a>, etc.) * <a href="https://mastodon.brown-silva.social/tags/GNU" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GNU</a> <a href="https://mastodon.brown-silva.social/tags/Mailman" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Mailman</a> (Room 310) * Project Mesa * Read The Docs * SOSW * <a href="https://fosstodon.org/@blackpythondevs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@blackpythondevs</a> Website * Core <a href="https://mastodon.brown-silva.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> (2 rooms) * Python Community and Conference Organizers Kit (Room 310) * Python Packaging * <a href="https://fosstodon.org/@aio_libs" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@aio_libs</a> / <a href="https://fosstodon.org/@aiohttp" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@aiohttp</a> * Free Threaded Python Community Support(continued in replies)<a href="https://mastodon.brown-silva.social/tags/PyConUS2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PyConUS2025</a>

danzinTrying to gather feedback/opinions, especially from <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> Core Developers, on the recent <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> campaign using <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>.<a href="https://discuss.python.org/t/feedback-on-the-recent-fusil-fuzzing-campaign-of-cpython/91737" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discuss.python.org/t/feedback-on-the-recent-fusil-fuzzing-campaign-of-cpython/91737</a>I'm writing a little tech report on the effort, and having some data about whether it's considered useful, a nuisance, impactful, low value etc. would make it much more interesting.Please boost for visibility :)<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/fuzzer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzer</a>

danzinAnother tidbit from the report I'm writing about <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>:The 52 issues filled correspond roughly to 30% of all the crashes (issues with "type-crash" label) and 2% of all issues (features requests, bugs and invalid issues) reported in the <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> issue tracker during the six months period covered by the report.Hits and new issues don't appear at a steady pace. It seems that there are long periods of no or nearly no new issues, followed by rapid finding of new results.<a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a> <a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>

Feoh<a href="https://mastodon.social/@ambv" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ambv</a> Hi! Couldn't help but notice that <a href="https://oldbytes.space/tags/cpython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cpython</a> isn't in the list of dev sprints happening this year at Pycon.Will you folks be sprinting? :) No worries in any case, just trying to make a stab at a plan for my sprint days :)

Hugo van KemenadeJust released: Python 3.14.0 beta 1! 🚀🐍🥧 Deferred type annotation evaluation! 🥧 T-strings! 🥧 Zstandard! 🥧 Syntax highlighting in the REPL! 🥧 Colour in unittest, argparse, json and calendar CLIs! 🥧 UUID v6-8! 🥧 And much more!<a href="https://discuss.python.org/t/python-3-14-0-beta-1-is-here/91117?u=hugovk" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://discuss.python.org/t/python-3-14-0-beta-1-is-here/91117?u=hugovk</a><a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/Python314" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python314</a> <a href="https://mastodon.social/tags/release" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#release</a>

danzinWriting about <a href="https://mastodon.social/tags/fusil" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fusil</a>. Some bits:Fuzzing <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> with fusil shows it to be a valuable tool for finding and fixing crashers. It started in October 2024 and is ongoing, using free tier cloud instances and personal computers.Results: - Fuzzing time: > 25.000 hours - Fuzzing sessions: > 1.000.000 - Hits: > 50.000 - Issues filled: 52The original design of fusil makes it well-suited for fuzzing CPython, finding both deep, relevant bugs as well as shallow, low value crashes.<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/fuzzing" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#fuzzing</a>

danzinVery busy day at the <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> repository as tomorrow's feature freeze for the first beta of version 3.14 approaches: <a href="https://github.com/python/cpython/issues?q=sort%3Aupdated-desc" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/python/cpython/issues?q=sort%3Aupdated-desc</a>Tons of neat features and improvements landing today.<a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a>

Hugo van KemenadeWe all know the number of stars on GitHub is an excellent metric for understanding how many people has starred a repo.⭐⭐⭐ CPython now has 66.6k stars ⭐⭐⭐❯ gh repo view python/cpython --json stargazerCount { "stargazerCount": 66645 }Can exactly 21 people, and no more, star it to get to 66666?<a href="https://github.com/python/cpython/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/python/cpython/</a><a href="https://mastodon.social/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.social/tags/CPython" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CPython</a> <a href="https://mastodon.social/tags/GitHub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GitHub</a> <a href="https://mastodon.social/tags/stargazers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#stargazers</a> #⭐

Recent searches

Search options

Administered by:

Server stats:

#cpython