#430 Or you go to jail

Python Bytes

Content provided by Michael Kennedy and Brian Okken. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Michael Kennedy and Brian Okken or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://staging.podcastplayer.com/legal.

23 days ago 29:11

MP3•Episode home

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on May 19, 2025 20:09 (1d ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

Topics covered in this episode:

pip 25.1 has dependency groups, pylock.toml, plus more
aiohttp goes free threaded
uv 0.6.15 supports pylock.toml
Whenever
Extras
Joke

Watch on YouTube
About the show

Sponsored by Porkbun! Use our link pythonbytes.fm/porkbun and get a .app or .dev domain for $5.99 at Porkbun.

Connect with the hosts

Michael: @mkennedy@fosstodon.org / @mkennedy.codes (bsky)
Brian: @brianokken@fosstodon.org / @brianokken.bsky.social
Show: @pythonbytes@fosstodon.org / @pythonbytes.fm (bsky)

Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Monday at 10am PT. Older video versions available there too.

Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it.

Brian #1: pip 25.1 has dependency groups, pylock.toml, plus more

post What's new in pip 25.1 - Dependency groups!
Richard Si
Discovered this through Hugo van Kemenade

Dependency groups, PEP 735, supported

# pyproject.toml [dependency-groups] test = ["pytest", "pytest-xdist"] lint = ["mypy", "isort"] # Dependency Groups can include other groups! ✨ dev = [ {include-group = "test"}, {include-group = "lint"} ]

Package installation progress bar
Resumable downloads
Experimental lockfile generation, PEP 751, with pip lock
- so cool
pip index versions is stable, no longer experimental
- use this to get a list of available versions
- ex: python3 -m pip index versions pytest-check
- combine with --json to get a nice script readable output

Michael #2: aiohttp goes free threaded

Thanks to months of consistent contributions by Lysandros Nikolaou, all of the mandatory dependencies of #aiohttp now ship free-threaded variants of #wheels!
This unlocks the same in aiohttp!

Brian #3: uv 0.6.15 supports pylock.toml

Discovered through Brett Cannon
So far, these projects support pylock.toml
- pip
- pip-audit
- pdm
- uv
With uv
- To export a uv.lock to the pylock.toml format,
  - run: uv export -o pylock.toml
- To generate a pylock.toml file from a set of requirements,
  - run: uv pip compile -o pylock.toml -r requirements.in
- To install from a pylock.toml file,
  - run: uv pip sync pylock.toml or uv pip install -r pylock.toml

Michael #4: Whenever

via Pat Decker
Typed and DST-safe datetimes for Python, available in Rust or pure Python.
Whenever helps you write correct and type checked datetime code.
It's also way faster than other third-party libraries—and usually the standard library as well.

Extras

Brian:

Every UUID

Michael:

New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize Code Agents via Brian Skinn
And typosquatting in the AI age
Firefox Send alternatives
- file.pizza via @rafaelwo
- bitwarden send

Joke: Can you Vibe?

436 episodes

#Python #Prog Languages #Michael Kennedy #Brian Okken #Tech #News #Tech News #Open Source