Trust-store incident, review caps, and toolchain fixes

A certificate-authority incident is forcing expedited Python and pip releases, while LLVM debates limits on non-committer pull requests amid AI-driven review load. Elsewhere, Julia shows up in an ESA lunar-lander simulator and a Lean formalization that reports hundreds of Base bugs, alongside security patches for glibc and Git and a Swift Evolution review.

Python removes eMudhra intermediates after CA incident

A security incident involving eMudhra and emSign certificate-authority intermediates is forcing their removal from certifi. Expedited Python and pip releases are intended to block man-in-the-middle risk for users of the bundled trust store. The discussion on discuss.python.org is the day's largest languages thread.

LLVM RFC proposes pull-request limits for non-committers

An LLVM RFC would cap concurrent pull requests from people who are not committers. The stated aim is to curb AI-driven overload and maintainer burnout. The proposal has drawn a heated response on the LLVM discourse.

ESA team presents Julia simulator for Argonaut lander

An ESA team presented ATLAS, a Julia guidance, navigation, and control simulator for the Argonaut lunar lander. The thread discusses performance trade-offs against MATLAB. It is a concrete case of Julia in flight-dynamics tooling rather than a language release.

glibc patch randomizes thread-heap alignment

A fourth revision of a malloc patch randomizes thread-heap alignment modulo HEAP_MAX_SIZE. The change is meant to restore ASLR entropy and address a long-standing weakness tracked as BZ #22853 and CVE-2019-1010025. The series is under review on libc-alpha.

Git series fixes segfaults on valueless settings

A 15-patch series fixes multiple NULL-dereference segfaults when Git configuration keys are given without a value. Reviewers have commented on error handling. The fixes matter to anyone whose config or automation can emit bare keys.

Swift reviews deployment-target conditional compilation

Swift Evolution is reviewing SE-0554, which would allow deployment-target conditions in conditional compilation. Core-team comments focus on how those conditions propagate through the build system and on language tradeoffs. The review has drawn substantial technical discussion on the Swift forums.

Symbolic Julia announcements reopen maintainer dispute

Announcements of GruntzLimit.jl, RischIntegrate.jl, RUBISymbolicIntegration.jl, and SymJ.jl set off a dispute in the Symbolics.jl ecosystem. The argument centers on AI-generated pull requests, stalled reviews, and maintainer overload. The packages themselves are secondary to that process fight.

Lean model of Julia Base reports more than 400 bugs

A thread proposes formally modeling Julia Base in Lean 4 and reports more than 400 bugs found that way. Participants debated how specifications would be maintained alongside the code. The claim, if it holds, is a large defect list for the standard library rather than a finished specification.