Topics covered in this episode:
- **[GitHub action security: zizmor](https://nedbatchelder.com/blog/202410/github_action_security_zizmor.html?featured_on=pythonbytes))**
Extras
Joke
Watch on YouTube)
About the show
Sponsored by:
Connect with the hosts
Michael: @[email protected])
Brian: @[email protected])
Show: @[email protected])
Join us on YouTube at pythonbytes.fm/live) to be part of the audience. Usually Monday at 10am PT. Older video versions available there too.
Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list), we'll never share it.
Brian #1: GitHub action security: zizmor)
Article: Ned Batchelder
zizmor: William Woodruff & others
“a new tool to check your GitHub action workflows for security concerns.”
Install with cargo or brew, then point it at workflow yml files.
It reports security concerns.
Michael #2: Python is now the top language on GitHub)
Thanks to Pat Decker for the heads up.
A rapidly growing number of developers worldwide
This suggests AI isn’t just helping more people learn to write code or build software faster—it’s also attracting and helping more people become developers. First-time open source contributors continue to show wide-scale interest in AI projects. But we aren’t seeing signs that AI has hurt open source with low-quality contributions.
Python is now the most used language on GitHub as global open source activity continues to extend beyond traditional software development.
The rise in Python usage correlates with large communities of people joining the open source community from across the STEM world rather than the traditional community of software developers.
There’s a continued increase in first-time contributors to open source projects. 1.4 million new developers globally joined open source with a majority contributing to commercially backed and generative AI projects.
Notably, we did not see a rise in rejected pull requests. This could indicate that quality remains high despite the influx of new contributors.
Brian #3: Python 3.13, what didn't make the headlines)
Some pretty cool updates to pdb : the command line Python debugger
multiline editing
code completion
pathlib has a bunch of performance updates
python -m venv adds a .gitignore file that auto ignores the venv.
Michael #4: PyCon US 2025)
Site is live with CFP and dates
Health code) is finally reasonable: “Masks are Encouraged but not Required”
PyCon US 2025 Dates
Tutorials - May 14-15, 2025
Sponsor Presentations - May 15, 2025
Opening Reception - May 15, 2025
Main Conference and Online - May 16-18, 2025
Job Fair - May 18, 2025
Sprints - May 19-May 22, 2025
Extras
Brian:
Michael:
Just spoke with Sefanie Molin about pre-commit hooks on Talk Python)
We have moved to hetzner)
free-threaded Python is now available via uv)
`uv self update
uv python install --python-preference only-managed 3.13t
`
Joke: Debugging char)