Python Releases
Python language news, releases and ecosystem updates. New features, breaking changes, security advisories and deprecations - each summarised in plain English and updated continuously.
Tracking 132 Python releases · Updated
- CrewAI Releases sdksecurityinfrasecurity-advisoryengineerpython-agentic ·
crewAI 1.15.7: Security patches and observability improvements
This release of crewAI addresses critical security vulnerabilities, including a patch for CVE-2026-16796 via an updated bedrock-agentcore dependency. The update also introduces enhanced observability by emitting skill usage events at runtime. These changes are primarily relevant to users of the crewAI framework, especially those concerned with security and monitoring their agent operations.
patch - Pydantic AI Releases sdkaisecuritysecurity-advisoryengineerpython-agentic ·
pydantic-ai v2.10.0: Tool pairing, OpenAI/Anthropic support, bug fixes
Version 2.10.0 of pydantic-ai enhances tool integration by improving message history provider validation and adding support for OpenAI background mode and Anthropic pauses. It also addresses several bugs, including issues with usage details, tool renaming, UTF-8 handling, event-loop affinity, and tool call attachment. A dependency update to `transformers` addresses a security vulnerability, affecting users of these libraries.
feature patch - Pydantic AI Releases sdkaisecuritysecurity-advisoryengineermediapython-agentic ·
pydantic-ai v2.6.0 adds file support, Bedrock profiles, and security fixes
Pydantic-ai version 2.6.0 introduces new features including file support for CodeExecutionTool and additional Bedrock model profiles, enhancing usability for AI development. It also addresses several bug fixes to improve stability and integrates dependency updates to mitigate known security vulnerabilities. These changes are relevant for developers building AI applications with pydantic-ai, particularly those integrating with Anthropic, OpenAI, or AWS Bedrock services.
feature patch - Pydantic AI Releases sdkaisecuritysecurity-advisoryengineerpython-agentic ·
pydantic-ai v2.9.1: Bug fixes and dependency updates
Pydantic-ai version 2.9.1 addresses several bugs related to typed composition, integer timeouts in Mistral models, and retired model handling. It also includes a crucial dependency update to address a ReDoS vulnerability in soupsieve (CVE-2026-49477). This patch is relevant for all users of the pydantic-ai library, especially those integrating with Mistral models or handling typed data compositions.
patch - Django Weblog blogsecuritypreviewsecurity-advisory ·
Django Releases Address Security Vulnerabilities
Django has released versions 6.0.7 and 5.2.16 to fix three low-severity security vulnerabilities. These issues could potentially lead to private data exposure, heap buffer over-reads, or header injection attacks. All users of supported Django versions are strongly encouraged to upgrade to the patched releases.
patch security - Django Weblog blogsecurity ·
Django Software Foundation Achieves CVE Numbering Authority Status
The Django Software Foundation (DSF) has become a CVE Numbering Authority (CNA), allowing it to assign CVE IDs directly for vulnerabilities in Django and select ecosystem projects. This change streamlines the advisory process, reduces administrative delays, and enhances independence in handling security incidents. While most users will notice no immediate difference, this move signifies a maturation of Django's security practices. The process, involving documentation, training, and approval from MITRE, took approximately four months.
announcement security - Python Insider blogsecurityengineer ·
Python.org download metadata API authentication bypass fixed
A critical authentication bypass vulnerability in the python.org release management API, reported on February 23rd, 2026, has been mitigated. This flaw would have allowed an attacker to modify Python release and file metadata, potentially affecting download URLs. While no exploitation has been detected, the fix ensures API requests are processed with correct privileges and hardens URL validation. The patch was developed and deployed within 48 hours of the report, followed by extensive auditing and third-party review.
security patch
About Python release tracking on ReleaseBytes
Python point releases, security fixes and end-of-life dates matter to almost every stack — including indirectly, through what Databricks runtimes and cloud services pin. ReleaseBytes tracks CPython releases and ecosystem news, and its EOL tracker shows exactly when each Python version stops receiving security fixes.
Frequently asked questions
How often are Python release notes updated on ReleaseBytes? ›
Continuously. ReleaseBytes monitors the official Python release channels around the clock and publishes a plain-English summary of each announcement shortly after it lands.
What kinds of Python changes does ReleaseBytes track? ›
New features, enhancements, bug fixes, security advisories, breaking changes, deprecations and end-of-life announcements. Every item is tagged by type so you can filter to just the changes that need action.
How can I get alerts for new Python releases? ›
Set up a free email or Slack alert filtered to Python, subscribe to the weekly digest, or follow the RSS feed. Teams can also install the ReleaseBytes GitHub App or connect via MCP.
Where does the Python release data come from? ›
From the official sources: Python language news, releases and ecosystem updates. Every item links back to the original vendor announcement.