Michal Čihař

@cihar.com

https://weblate.org/ / https://apartmancvikov.cz/

I’ve probably broken some things with social-auth-core 6.0.0 🙂 Security fixes required API changes, so I took the opportunity to tackle other issues too: better error handling, request handling in pipelines, token refresh fixes, backend metadata and more. github.com/python-socia...

Release 6.0.0 · python-social-auth/social-core

Security OpenID Connect nonces expire after 30 minutes by default. Configure SOCIAL_AUTH_<BACKEND>_NONCE_LIFETIME to change the duration. Storage integrations must persist issued and lifetime; sto...

github.com

Apparently I’ve become a (co-)maintainer of yet another Python library we use at Weblate 🙂 This time it’s mistletoe. More helping hands are definitely welcome—whether by contributing to the project or funding its maintenance.

Looking for new maintainer(s) · Issue #288 · miyuchina/mistletoe

Hi Community, it have definitely been interesting 5 years maintaining mistletoe. But my life priorities have shifted over the years. So the time has come to pass the baton to someone else. I would ...

github.com

Editing source strings sounds obvious—until the “source” is actually the identifier used to update the translation files. Weblate 2026.10 finally closes that gap: source strings and translation keys can now be edited while preserving translations and history.

feat(translations): support editing source strings and keys by nijel · Pull Request #21755 · WeblateOrg/weblate

Let maintainers correct source text and rename keys without recreating strings or losing their translations and history. Fixes #10304 Fixes #9729

github.com

Not tired of AI features yet? 😄 Weblate 2026.10 will bring AI-powered translation quality evaluation. It can review existing translations for accuracy, fluency, terminology, style, and formatting—and report findings as regular Weblate checks.

feat(addons): add batched AI quality evaluation by nijel · Pull Request #21718 · WeblateOrg/weblate

Evaluate existing translations asynchronously using configured LLM services and their existing batch sizes. Store findings as standard checks, validate structured responses, and discard stale batch...

github.com

🔐 Another round of authentication fixes landed in social-auth-core 5.1.1, including a security fix for VK and improvements for OIDC, Auth0, and SAML. We’re also considering moving to PySAML2—feedback from SAML users is welcome at github.com/python-so...

Migrate to PySAML2 · Issue #1993 · python-social-auth/social-core

We currently use python3-saml which hasn&#39;t received any update for 3 years. Lack of maintenance indicates that there will be unhandled security issues underneath. Recently, SAML-Toolkits/python...

github.com

🚀 Release day! While the Weblate release is on the way, Python Social Auth (social-auth-core 4.8.2) is already out with compatibility fixes and cleanup of backends for services that no longer exist.

Release Release 4.8.2 · python-social-auth/social-core

Changed The timeout parameter can be again configured Refactored HTTP authentication code Loosened some type checks for better downstream compatibility ID_KEY is now configurable Improved token ex...

github.com

My first ever #Rust code! I never planned to write any, but after the Unicode-segmentation module I used disappeared overnight, I built a replacement—and rewrote the gettext wrapping while at it, since that was the real bottleneck when updating PO files.

Release v0.2.0 · WeblateOrg/unicode-segmentation-rs

What&#39;s Changed feat: add type annotations by @nijel in #18 chore(pre-commit): use native gitleaks instead of docker by @nijel in #20 feat(ci): run testsuite by @nijel in #19 chore(deps): updat...

github.com