Python CA security releases, LLVM AI text ban, Git policy votes
Security work led the day as Python shipped expedited releases across five branches over compromised CA material, with follow-on pressure on certifi and packaging tools. LLVM debated an outright ban on AI-generated review text, while Git contributors weighed AI policy votes and shallow-fetch limits, and smaller formal-methods and OCaml toolchain notes rounded out the section.
Python ships expedited security releases on five branches
Python 3.15.2, 3.14.10, 3.13.18, 3.12.16 and 3.11.18 were released as coordinated security updates. The builds block compromised eMudhra CA keys in the ssl module and correct issues in tarfile and http.cookiejar. Maintainers of long-lived Python deployments should treat the set as urgent.
eMudhra incident drives certifi removal and tool upgrades
The same eMudhra and emSign CA compromise forced removal of the emSign root from certifi. Discussion on the Python discourse stressed that pip, uv and related installers need immediate upgrades to close man-in-the-middle exposure. The thread drew broad participation as operators coordinated the cut-over.
LLVM RFC seeks to forbid AI-generated PR and RFC text
An RFC on the LLVM discourse proposes banning AI-generated communication in pull requests and design documents. Proponents argue that low-quality machine text is overwhelming reviewers. The thread grew heated, with more than a hundred messages from dozens of participants.
Binutils hardens ELF relaxation against size underflow
A second-round patch series for binutils adds a shared bounds check around in-place relaxation byte deletion. The change is intended to protect eighteen ELF linker relaxation backends from underflow that can lead to heap corruption. Linker maintainers tracking memory-safety fixes have a concrete series to review.
Git summit notes reopen AI contribution policy and voting rules
Notes from the 2026 Git Contributor's Summit circulated on the project list. Conversation centered on a secret vote covering AI contribution policy and on who is eligible to cast ballots. The exchange highlights unresolved governance questions around automated patches.
Lean model of Julia Base reports hundreds of bugs
An early project is encoding Julia Base in Lean 4 so that properties can be proved formally. The authors report finding more than four hundred bugs in the modeled code. Even at this preliminary stage the work is of interest to formal-methods and language-runtime audiences.
Js_of_ocaml and Wasm_of_ocaml 6.5 land with OCaml 5.6 support
Js_of_ocaml and Wasm_of_ocaml 6.5 were announced on the OCaml discourse. The release adds OCaml 5.6 support, compilation that is 25 to 30 percent faster, smaller outputs, and fresh Web API bindings. Developers shipping OCaml to browsers or WebAssembly gain a straightforward upgrade.
Git patch limits full-branch fetches in shallow clones
A patch series proposes remote.