Python CA incident, LLVM AI and ClangIR debates, toolchain releases
Python maintainers issued expedited security releases after an eMudhra certificate compromise, while LLVM debated bans on AI-generated text and default-enabling ClangIR. Other threads covered Julia formalization findings, an OCaml-to-JS release, and Git branch and fetch patches.
eMudhra CA incident hits Python and certifi
A security incident involving eMudhra and emSign CA intermediates led to their removal from certifi. The compromise creates man-in-the-middle risk for Python users, prompting coordinated action to block the affected certificates in the ecosystem.
Python ships expedited security releases
Python 3.15.2, 3.14.10, 3.13.18, 3.12.16, and 3.11.18 are out as security releases. They block compromised eMudhra CA keys in the ssl module to protect pip along with tarfile and http.cookiejar.
LLVM RFC proposes ban on AI-generated text
An RFC on the LLVM discourse proposes forbidding AI-generated communication in pull requests and RFCs. The goal is to reduce low-quality submissions that overwhelm reviewers, in a lengthy and heated discussion.
ClangIR to build by default
The Clang area team accepted an RFC to enable the ClangIR and MLIR build by default. The cmake option -DCLANG_ENABLE_CIR=Off remains supported for those who need to turn it off.
Lean formalization of Julia finds many Base bugs
A thread presents an AI-assisted Lean formalization of Julia Base that uncovered more than 400 bugs. Participants discuss how to maintain the proofs alongside the corresponding code.
js_of_ocaml and wasm_of_ocaml 6.5
Js_of_ocaml and wasm_of_ocaml 6.5 add support for OCaml 5.6. The release reports 25 to 30 percent faster compilation, smaller outputs, and new Web API bindings.
Git branch --delete-merged and squash merges
A patch series proposes letting git branch --delete-merged detect squash and rebase merged branches. The maintainer asked that any such behavior stay behind an opt-in flag only.
Limited fetch for shallow Git repos
A patch series adds remote.