#502 Introducing chameleon-rs

About this episode

Topics covered in this episode: • PHP wasn’t the only problem last week • chameleon-rs • Bringing uv and ty together • Stlite runs Streamlit apps entirely in the browser • Extras • Joke Watch on YouTube About the show Connect with the hosts • Michael: Mastodon / BlueSky / X / LinkedIn • Calvin: Mastodon / BlueSky / X / LinkedIn • Show: Mastodon / BlueSky / X Join us on YouTube at pythonbytes.fm/live to be part of the audience. Usually Tuesday at 7am PT. Older video versions available there too. Finally, if you want an artisanal, hand-crafted digest of every week of the show notes in email form? Add your name and email to our friends of the show list, we'll never share it. Calvin #1: PHP wasn’t the only problem last week • Three security incidents in one week, each at a different layer: CA trust (eMudhra), the release pipeline (LiteLLM) and a C decoder (Brotli). All three have fixes released. • eMudhra CA: the keys of a compromised eMudhra intermediate CA are now distrusted by CPython. 3.15.1, 3.14.9 and 3.13.17 shipped Oct 21. 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 followed Oct 26 (CVE-2026-115557) and also fix a tarfile filter bypass. Python's