Cert trust purge, Git voting push, PEP 824

Security fixes and process debates led the day across Python, Go, and Git. Certificate trust changes, a pre-announced parser fix, language syntax proposals, and maintainer governance questions dominated the threads.

emSign root removal from certifi

A security incident involving the eMudhra emSign CA has forced removal of its root from the certifi bundle used by Python. Maintainers of pip, uv, and related packaging tools are shipping updates so that TLS verification no longer trusts the compromised root and cannot be bypassed by man-in-the-middle attacks. Users must upgrade those tools promptly to keep package downloads and HTTPS clients safe.

Git summit floats formal voting

Notes from the 2026 Git Contributor's Summit record maintainers proposing a formal voting process for contentious policy decisions such as rules on AI-assisted contributions. Discussion turned heated over who would be eligible to vote and whether ballots should remain secret. The exchange marks a push toward structured governance as the project confronts polarized process questions.

PEP 824 None-coalescing operators

PEP 824 proposes adding the ?? and ??= None-coalescing operators to Python. The discuss.python.org thread ran to dozens of messages and included detailed feedback from Guido van Rossum. The operators would give a concise spelling for the common pattern of supplying a default when an expression evaluates to None.

Go x/net/html security fix pre-announced

The Go team pre-announced an upcoming security fix for golang.org/x/net/html that addresses CVE-2026-97045. Parallel notices appeared on the golang-nuts and golang-dev lists. Consumers of the HTML parsing package should plan to update as soon as the patched module is tagged.

Git pluggable object storage proposal

A seven-patch series introduces an object storage extension controlled by extensions.objectStorage and GIT_OBJECT_STORAGE_FORMAT. The design would allow pluggable object-database backends, starting with a files:// payload that points at an alternate object directory. The change aims to let repositories adopt alternate storage layouts without altering core Git logic.

Python 3.16.0a1 and Windows installer shift

Python 3.16.0 alpha 1 has been released. The build drops legacy Windows installers in favor of a new install manager, already producing tool breakage and user questions. Early adopters need to revalidate installer and packaging workflows against the replacement manager.

Broader git branch --delete-merged detection

A patch series would let git branch --delete-merged recognize branches that were squash-merged or rebase-merged. The maintainer asked that any expanded behavior stay behind an explicit opt-in flag. The feature would clear leftover local branches after contemporary merge styles while keeping the default conservative.