Tessera
Folgen

Veit Schiele

@veit-schiele.de

Author of Python for Data Science, Jupyter Tutorial and PyViz tutorial • pyberlin organiser • Development, consulting and operation of privacy compliant web services at cusy​. #Python #Jupyter #PyViz #DataScience

252 Posts457 Follower388 Folgt
Veit Schiele@veit-schiele.de · 2d ago

I’m still completely blown away by yesterday’s BBQ for all the Berlin Python user groups – I met so many new people and had some great conversations. Many thanks also to our host, @c-base.org, for their ongoing support: www.meetup.com/python-users... #Python #Berlin

Python in Berlin BBQ @ c-base, Thu, Aug 13, 2026, 7:00 PM | Meetup

Normally we announce our talks here, but this time we are taking a short summer break and therefore invite you to a barbecue at the Spree. The BBQ is for all Berlin Python

meetup.com

Veit Schiele@veit-schiele.de · 3d ago

In a supply chain attack on the popular LiteLLM library in March this year, around 434,000 build pipelines – which were in use at more than 2,500 companies – are believed to have been compromised: www.cloudsek.com/blog/ai-supp... #Python #ITSecurity #SupplyChain #LiteLLM

2,500+ Companies and 434,000 CI/CD Pipelines Exposed in the Largest AI Supply Chain Breach of 2026 | CloudSEK

CloudSEK’s latest research examines the LiteLLM AI supply-chain attack, which potentially exposed 2,500+ organisations and 434,000 CI/CD pipelines worldwide. The report details the risks to cloud cred...

cloudsek.com

Python4DataScience@python4data.science · 2w ago

• How can you make your code more secure? • How can you ensure separation of concerns? • How can you continuously verify the security of your dependencies? • How do you create SBOMs? www.python4data.science/en/latest/pr... #Python #SupplyChain #Vulnerability #SBOM

Security

As of July 2026, PyPI hosts over 750,000 packages, and this number is growing daily. An average Python project includes dozens of additional dependencies – packages that you have never explicitly c...

python4data.science

Mike Fiedler@miketheman.com · 3w ago

The maintainers considered this a breaking change, hence the version bump, probably because it flips existing expectations. If you expected that the Action was caching downloads before, now it actually does, so it's a logical fix in that regard. Read more: github.com/astral-sh/se...

Release v9.0.0 🌈 Change `prune-cache` default to `false` · astral-sh/setup-uv

Changes This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher ...

github.com

Python Package Index@pypi.org · 3w ago

The Python Package Index now rejects new files published to releases older than 14 days. This mitigation prevents long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects are compromised. blog.pypi.org/posts/2026-0... #python #security #supplychain #pypi

Releases now reject new files after 14 days - The Python Package Index Blog

PyPI no longer allows publishing new files to releases older than 14 days.

blog.pypi.org

Python4DataScience@python4data.science · 4w ago

Software Bill of Materials (SBOMs) are commonly used to check software and its dependencies for vulnerabilities using CVE and OSV. We have described how to create these for Python packages here: python4data.science/en/latest/pr... #Python #SBOM #Vulnerability

Software Bill of Materials (SBOM)

A Software Bill of Materials (SBOM) is a document used to exchange information about software and its composition. This format is primarily used in the security field to check software and its depe...

python4data.science

Python4DataScience@python4data.science · 4w ago

Specification-Driven Development (SDD) was developed to improve the predictability and maintainability of agentic software development. In particular, we are continuing to give OpenSpec a chance: agentic-software-engineering.readthedocs.io/en/latest/pr... #CodingAgent #SDD #DX

Spec-Driven Development

Development teams are increasingly facing challenges regarding predictability and maintainability when requirements and context are stored exclusively in short-lived chat threads. To address this i...

agentic-software-engineering.readthedocs.io

Veit Schiele@veit-schiele.de · 4w ago

The #AI platform #HuggingFace appears to have been attacked by autonomous, AI-driven offensive tooling – and was also detected and analysed by AI tools. They advises users to revoke access credentials and tokens, and to check for any recent activity on their accounts: huggingface.co/blog/securit...

Security incident disclosure — July 2026

We’re on a journey to advance and democratize artificial intelligence through open source and open science.

huggingface.co

Python4DataScience@python4data.science · last mo.

We are switching from pre-commit to prek. Whilst prek is also faster, the decisive factors were the security-related features: pinned SHA revisions and cooldown: www.python4data.science/en/latest/pr... #Python #DX #DevOps #DevSecOps #Security

prek

prek is a variant of pre-commit, written in Rust, for managing and maintaining multilingual commit hooks. An essential task is to make the same scripts available to the entire development team. pre...

python4data.science

Python4DataScience@python4data.science · last mo.

We have added the `errors` argument to the instructions for reading and writing files, so that files with encoding issues can be read more effectively. And, fortunately, UTF-8 becomes the default in Python 3.15: python-basics-tutorial.readthedocs.io/en/latest/sa... #Python

Files and Directories

pathlib implements path operations using pathlib.PurePath and pathlib.Path objects. The os and os.path modules, on the other hand, provide functions that work at a low level with str and bytes, whi...

python-basics-tutorial.readthedocs.io

Python4DataScience@python4data.science · last mo.

We have released a new version. As well as the usual software updates, it includes agent-based code generation and securing the software supply chain: www.python4data.science/en/26.1.0/ #Python #DataScience #AgenticCoding #Claude #SoftwareEngineering #SoftwareSupplyChain #SupplyChain

Python for Data Science

This is a tutorial on Data Science with Python. This immediately raises the question: What is Data Science? The term has become ubiquitous, but there is no single definition. Some even consider the...

python4data.science

Veit Schiele@veit-schiele.de · 2mo ago

On my way to a flying visit to Berlin. Tomorrow, the Python Users Berlin (@python.berlin) are meeting for a talk by Sam Bail on PySpark: www.meetup.com/python-users... #Python #Berlin

Python Users Berlin (PUB): An introduction to PySpark, Thu, Jul 2, 2026, 7:00 PM | Meetup

📆 Agenda * 19:00 Welcome to the PUB (Python Users Berlin) – setting up * 19:15 Main talk * 20:00 Lightning talks * 20:30 Social gathering 🎙 Main talk by [Sam Bail](http

meetup.com

Hugo van Kemenade@hugovk.dev · 2mo ago

🐍🚀 Out now: Python 3.15 beta 3! 💤 Lazy imports! 🧊 frozendict builtin! 💂 sentinel builtin! 📉 Tachyon profiler! 🖼️ Frame pointers everywhere! 🎨 More colour! 🚌 & more! Library maintainer? Add 3.15 to your CI and send us those bugs reports! discuss.python.org/t/python-3-1... #Python #Python315 #release

Python 3.15.0 beta 3 is here!

Here comes the penultimate beta. This is a beta preview of Python 3.15 Python 3.15 is still in development. This release, 3.15.0b3, is the third of four planned beta releases, containing around 19...

discuss.python.org

Veit Schiele@veit-schiele.de · 2mo ago

Guardrails enable you to defend against prompt injection or jailbreak attacks by your coding agents. In our tutorial, we show you the options available to you for this purpose: agentic-software-engineering.readthedocs.io/en/latest/se... #PromptInjection #Jailbreak #AI #Agentic #Coding #ITSecurity

Guardrails

The term AI guardrails first appeared in 2023, when ChatGPT launched its consumer service. The initial versions contained numerous security and privacy vulnerabilities, which ultimately prompted ma...

agentic-software-engineering.readthedocs.io

Spack@spackpm.bsky.social · 2mo ago

Spack v1.2.0 is out, loaded with features and performance improvements! Highlights: 🧵Parallel installer 🛠️Concretization groups 🧠Concretization caching 📝SBOMs 🔒spack isolate 🏖️ experimental sandboxing Get it now! github.com/spack/spack/... Demo: asciinema.org/a/755827

Release v1.2.0 (2026-06-21) · spack/spack

v1.2.0 is a major feature release. The main changes you'll notice are the new, parallel installer and the many performance improvements we've added. There are also usability features like concretiz...

github.com