#408: python-preference only-managed 3.13t

Topics covered in this episode:

• GitHub action security: zizmor
• Python is now the top language on GitHub
• Python 3.13, what didn't make the headlines
• PyCon US 2025
• Extras
• Joke

About the show

Sponsored by:

• ScoutAPM - Django Application Performance Monitoring
• Codeium - Free AI Code Completion & Chat

Connect with the hosts

• Michael: @mkennedy@fosstodon.org
• Brian: @brianokken@fosstodon.org
• Show: @pythonbytes@fosstodon.org

Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Monday at 10am PT. Older video versions available there too.

Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it.

Brian #1: GitHub action security: zizmor

• Article: Ned Batchelder
• zizmor: William Woodruff & others
• “a new tool to check your GitHub action workflows for security concerns.”
• Install with cargo or brew, then point it at workflow yml files.
• It reports security concerns.

Michael #2: Python is now the top language on GitHub

• Thanks to Pat Decker for the heads up.
• A rapidly growing number of developers worldwide
  • This suggests AI isn’t just helping more people learn to write code or build software faster—it’s also attracting and helping more people become developers. First-time open source contributors continue to show wide-scale interest in AI projects. But we aren’t seeing signs that AI has hurt open source with low-quality contributions.
• Python is now the most used language on GitHub as global open source activity continues to extend beyond traditional software development.
  • The rise in Python usage correlates with large communities of people joining the open source community from across the STEM world rather than the traditional community of software developers.
• There’s a continued increase in first-time contributors to open source projects. 1.4 million new developers globally joined open source with a majority contributing to commercially backed and generative AI projects.
  • Notably, we did not see a rise in rejected pull requests. This could indicate that quality remains high despite the influx of new contributors.

Brian #3: