Python Releases
Python language news, releases and ecosystem updates. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 133 Python releases · Updated
- uv Releases sdkpreviewdeprecationengineer ·
uv 0.12.0 improves dependency resolution, hash checking, and environment management
The uv 0.12.0 release introduces significant improvements to dependency resolution, including a new default for handling pre-releases, making it more robust and aligned with pip's behavior. It also enhances security and correctness by enforcing stricter hash checking and validating lockfile formats. These changes primarily affect users managing Python dependencies, with most users expected to upgrade seamlessly, though some workflows might require adjustments. The release also stabilizes preview features related to project discovery and safe environment clearing.
breaking patch - Pydantic AI Releases sdkaipreviewengineerpython-agentic ·
Pydantic-AI v2.9.0: Security fix, GPT-5.6 models, usage command
Pydantic-AI v2.9.0 addresses a security advisory impacting message sanitization and backports a fix to version 1.107.1. This release also introduces new features like GPT-5.6 model support, a `/usage` command for the `clai` CLI, and exposes `usage_limits` to tools. Several bug fixes improve Anthropic Files API integration, message repr handling, FIPS compliance, agent robustness, and output strategies, affecting users of version 2.0.0 and above.
security feature patch - FastAPI Releases sdkinfradeprecationpython-web ·
FastAPI 0.137.0: Router internals refactored, new features enabled
FastAPI version 0.137.0 introduces significant internal refactoring of APIRouter and APIRoute to preserve instances, enabling features like including subrouters before defining their routes and potentially saving memory. This change alters how `router.routes` is structured, moving from a plain list to a tree-like representation, which may impact custom logic iterating directly over routes. The release also includes documentation updates and dependency version bumps.
breaking feature patch - OpenAI Agents SDK (Python) Releases sdkaipreviewengineerpython-agentic ·
OpenAI Agents Python v0.18.2: GPT-5.6 controls, multi-agent beta
This release introduces support for GPT-5.6 request controls and a hosted multi-agent beta feature, alongside several bug fixes for sandbox and real-time communication. The changes are aimed at enhancing control over model interactions and improving the stability of multi-agent systems. This patch primarily affects developers using the OpenAI agents Python library, with the multi-agent beta indicating a preview stage for this new functionality.
feature patch security - Pydantic AI Releases sdkaimediapython-agentic ·
pydantic-ai v2.5.0: Security Fix, New Features, and Bug Fixes
Version 2.5.0 of pydantic-ai addresses a moderate security vulnerability (GHSA-jpr8-2v3g-wgf9) related to message sanitization in the AG-UI serving path. This release also introduces new features like `sanitize_messages` for inbound history hardening and round-trip multimodal tool returns through AG-UI and Vercel AI adapters. The update includes numerous bug fixes across various components, impacting users of both v2 and v1 lines of the library.
security feature patch - Pydantic AI Releases sdkaiengineerpython-agentic ·
pydantic-ai v1.107.1 patches security vulnerability
Pydantic-ai v1.107.1 addresses a moderate security vulnerability (GHSA-jpr8-2v3g-wgf9) in its AG-UI serving path that could expose and execute tool calls with client-chosen arguments. This fix impacts users of `pydantic-ai` and `pydantic-ai-slim` versions >= 1.88.0 and < 2.5.0, with patches available in v1.107.1 and v2.5.0. Users can also mitigate this by configuring tools to require approval or by implementing their own argument validation and authorization.
security patch - Django Weblog blogsecuritypreviewsecurity-advisory ·
Django Releases Address Security Vulnerabilities
Django has released versions 6.0.7 and 5.2.16 to fix three low-severity security vulnerabilities. These issues could potentially lead to private data exposure, heap buffer over-reads, or header injection attacks. All users of supported Django versions are strongly encouraged to upgrade to the patched releases.
patch security - Django Weblog blogsecurity ·
Django Software Foundation Achieves CVE Numbering Authority Status
The Django Software Foundation (DSF) has become a CVE Numbering Authority (CNA), allowing it to assign CVE IDs directly for vulnerabilities in Django and select ecosystem projects. This change streamlines the advisory process, reduces administrative delays, and enhances independence in handling security incidents. While most users will notice no immediate difference, this move signifies a maturation of Django's security practices. The process, involving documentation, training, and approval from MITRE, took approximately four months.
announcement security - Python Insider blogsecurityengineer ·
Python.org download metadata API authentication bypass fixed
A critical authentication bypass vulnerability in the python.org release management API, reported on February 23rd, 2026, has been mitigated. This flaw would have allowed an attacker to modify Python release and file metadata, potentially affecting download URLs. While no exploitation has been detected, the fix ensures API requests are processed with correct privileges and hardens URL validation. The patch was developed and deployed within 48 hours of the report, followed by extensive auditing and third-party review.
security patch
About Python release tracking on ReleaseBytes
Python point releases, security fixes and end-of-life dates matter to almost every stack — including indirectly, through what Databricks runtimes and cloud services pin. ReleaseBytes tracks CPython releases and ecosystem news, and its EOL tracker shows exactly when each Python version stops receiving security fixes.
Frequently asked questions
How often are Python release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official Python release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of Python changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new Python releases? ›
Set up a free email or Slack alert filtered to Python, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the Python release data come from? ›
From the official sources: Python language news, releases and ecosystem updates. Every item links back to the original vendor announcement.