Python 3.7.12 and 3.6.15 security updates now available

Python 3.7.12 and 3.6.15,  the lastest security fix rollups for Python 3.7 and Python 3.6, are now available. You can find the release files, links to the changelogs, and more information here:

    https://www.python.org/downloads/release/python-3712/
    https://www.python.org/downloads/release/python-3615/

  

These releases are source code only; Windows and macOS binary installers are not provided for security fix releases.

Note that Python 3.9 is now the latest feature release series of Python 3. You should consider upgrading to 3.9 as soon as practical. Get the latest release of 3.9.x here.

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Python 3.7.10 and 3.6.13 security updates now available

 Python 3.7.10 and 3.6.13,  the lastest security fix rollups for Python 3.7 and Python 3.6, are now available. You can find the release files, links to the changelogs, and more information here:

    https://www.python.org/downloads/release/python-3710/
    https://www.python.org/downloads/release/python-3613/

  

These releases are source code only; Windows and macOS binary installers are not provided for security fix releases.

Note that Python 3.9 is now the latest feature release series of Python 3. You should consider upgrading to 3.9 as soon as practical. Get the latest release of 3.9.x here.

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Releasing pip 20.3, featuring new dependency resolver

On behalf of the Python Packaging Authority and the pip team, I am pleased to announce that we have just released pip 20.3, a new version of pip. You can install it by running python -m pip install --upgrade pip.

This is an important and disruptive release -- we explained why in a blog post last year. We've even made a video about it.

Highlights

• DISRUPTION: Switch to the new dependency resolver by default. Watch out for changes in handling editable installs, constraints files, and more: https://pip.pypa.io/en/latest/user_guide/#changes-to-the-pip-dependency-resolver-in-20-3-2020

• DEPRECATION: Deprecate support for Python 3.5 (to be removed in pip 21.0).

• DEPRECATION: pip freeze will stop filtering the pip, setuptools, distribute and wheel packages from pip freeze output in a future version. To keep the previous behavior, users should use the new --exclude option.

• Substantial improvements in new resolver for performance, output and error messages, avoiding infinite loops, and support for constraints files.

• Support for PEP 600: Future manylinux Platform Tags for Portable Linux Built Distributions.

• Documentation improvements: Resolver migration guide, quickstart guide, and new documentation theme.

• Add support for MacOS Big Sur compatibility tags.

The new resolver is now on by default for Python 3 users. It is significantly stricter and more consistent when it receives incompatible instructions, and reduces support for certain kinds of constraints files, so some workarounds and workflows may break. Please see our guide on how to test and migrate, and how to report issues. You can use the deprecated (old) resolver, using the flag --use-deprecated=legacy-resolver, until we remove it in the pip 21.0 release in January 2021.

You can find more details (including deprecations and removals) in the changelog.

Coming soon: end of Python 2.7 support

We aim to release pip 21.0 in January 2021, per our release cadence. At that time, pip will stop supporting Python 2.7 and will therefore stop supporting Python 2 entirely.

 

When users use pip 20.3 in a Python 2 environment, the old dependency resolver is still the default.

For more info or to contribute:

We run this project as transparently as possible, so you can:

• read and participate in GitHub issues
  
• contribute to our user experience work: sign up to become a member of the UX Studies group (after you join, we'll notify you about future UX surveys and interviews) 
• contact us in the Discourse forum or Zulip chat 
• read our meeting notes

Thank you

Thanks to our contractors on this project: Simply Secure (specifically Georgia Bullen, Bernard Tyers, Nicole Harris, Ngọc Triệu, and Karissa McKelvey), Changeset Consulting (Sumana Harihareswara), Atos (Paul F. Moore), Tzu-ping Chung, Pradyun Gedam, and Ilan Schnell. Thanks also to Ee Durbin at the Python Software Foundation for liaising with the project.

 

This award continues our relationship with Mozilla, which supported Python packaging tools with a Mozilla Open Source Support Award in 2017 for Warehouse. Thank you, Mozilla! (MOSS has a number of types of awards, which are open to different sorts of open source/free software projects. If your project will seek financial support in 2021, do check the MOSS website to see if you qualify.)

This is new funding from the Chan Zuckerberg Initiative. This project is being made possible in part by a grant from the Chan Zuckerberg Initiative DAF, an advised fund of Silicon Valley Community Foundation. Thank you, CZI! (If your free software/open source project is seeking funding and is used by researchers, check the Joint Roadmap for Open Science Tools Rapid Response Fund and consider applying.)

 

The funding for pip's overhaul will end at the end of 2020; if your organization wants to help continue improvements in Python packaging, please join the sponsorship program.

As with all pip releases, a significant amount of the work was contributed by pip's user community. Huge thanks to all who have contributed, whether through code, documentation, issue reports and/or discussion. Your help keeps pip improving, and is hugely appreciated. Thank you to the pip and PyPA maintainers, to the PSF and the Packaging WG, and to all the contributors and volunteers who work on or use Python packaging tools.

 

-Sumana Harihareswara, pip project manager

Python 3.7.9 and 3.6.12 security updates now available

Python 3.7.9 and 3.6.12,  the lastest security fix rollups for Python 3.7 and Python 3.6, are now available. You can find the release files including updated binary installers for 3.7.9, links to the changelogs, and more information here:

    https://www.python.org/downloads/release/python-379/
    https://www.python.org/downloads/release/python-3612/

  

Note that Python 3.8 is now the latest feature release series of Python 3. You should consider upgrading to 3.8 as soon as practical. Get the latest release of 3.8.x here.

Binary installers are normally not provided for security fix releases. However, since 3.7.8 was the last 3.7.x bugfix release and there are security fixes published in 3.7.9 that apply to users of some of the binary installers provided with 3.7.8, we have made an exception and are also updating the Windows and macOS binary installers for 3.7.9.  We do not plan to provide further binary updates for future 3.7.x security releases.

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Upgrade to pip 20.2, plus, changes coming in 20.3

On behalf of the Python Packaging Authority, I am pleased to announce that we have just released pip 20.2, a new version of pip. You can install it by running python -m pip install --upgrade pip.

The highlights for this release are:

- The beta of the next-generation dependency resolver is available -- please test
- Faster installations from wheel files
- Improved handling of wheels containing non-ASCII file contents
- Faster pip list using parallelized network operations
- Installed packages now contain metadata about whether they were directly requested by the user (PEP 376’s REQUESTED file)

The new dependency resolver is off by default because it is in beta and not yet ready for everyday use. The new dependency resolver is significantly stricter and more consistent when it receives incompatible instructions, and reduces support for certain kinds of constraints files, so some workarounds and workflows may break. Please test it with the --use-feature=2020-resolver flag. Please see our guide on how to test and migrate, how to report issues, and context for the change.

Please report bugs through the resolver testing survey.

Thanks to all who tested the alpha of the new resolver in pip 20.1 for feedback that helped us get it to the beta stage.

We are preparing to change the default dependency resolution behavior and make the new resolver the default in pip 20.3 (in October 2020).

This release also partially optimizes pip’s network usage during installation (as part of a Google Summer of Code project by McSinyx). Please test it with pip install --use-feature=2020-resolver --use-feature=fast-deps and report bugs to the issue tracker. This functionality is still experimental and not ready for everyday use.

You can find more details (including deprecations and removals) in the changelog.

As with all pip releases, a significant amount of the work was contributed by pip’s user community. Huge thanks to all who have contributed, whether through code, documentation, issue reports and/or discussion. Your help keeps pip improving, and is hugely appreciated. Specific thanks go to Mozilla (through its Mozilla Open Source Support Awards) and to the Chan Zuckerberg Initiative DAF, an advised fund of Silicon Valley Community Foundation, for their funding that enabled substantial work on the new resolver.

Python 3.7.8 and 3.6.11 now available - last 3.7.x bugfix release

Python 3.7.8, the next bugfix release of Python 3.7, is now available. You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-378/

   

Note that Python 3.8 is now the latest feature release series of Python 3. After two years of quarterly 3.7.x bugfix releases and with the successful release and adoption of Python 3.8 over the last year, 3.7.8 is expected to be the last bugfix release in the 3.7 series. You should consider upgrading to 3.8 as soon as practical. Get the latest release of 3.8.x here.

Following our release support policy, after 3.7.8 we plan to provide security fixes for 3.7 as needed until mid-year 2023, five years after its initial release. More details are available in PEP 537, the Python 3.7 Release Schedule.

In addition to 3.7.8, the lastest security fix rollup for Python 3.6, 3.6.11, is also now available.  You can download its source release here:
    https://www.python.org/downloads/release/python-3611/

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Pip 20.1 has been released

On behalf of the PyPA, I am pleased to announce that a new version of pip, pip 20.1, has been released.

To install pip 20.1, you can run:

python -m pip install --upgrade pip

The highlights for this release are:

• Significant speedups when building local directories, by changing behavior to perform in-place builds, instead of copying to temporary directories.
• Significant speedups in pip list --outdated, by parallelizing network access. This is the first instance of parallel code within pip's codebase.
• A new pip cache command, which makes it possible to introspect and manage pip's cache directory.
• Better pip freeze for packages installed from direct URLs, enabled by the implementation of PEP 610.

This release also contains an alpha version of pip's next generation resolver. It is off by default because it is unstable and not ready for everyday use. If you're curious about this, please visit this GitHub issue about the resolver, what doesn't work yet, and what kind of testing would help us out. We plan to release a version of pip that includes a beta of the new resolver in May.

The full changelog is available.

As with all pip releases, a significant amount of the work was contributed by pip's user community. Huge thanks to all who have contributed, whether through code, documentation, issue reports and/or discussion. Your help keeps pip improving, and is hugely appreciated.

Thank you to the pip and PyPA maintainers, and to all the contributors and volunteers who work on or use Python packaging tools.

And thank you to Mozilla (through its Mozilla Open Source Support Awards) and to the Chan Zuckerberg Initiative DAF, an advised fund of Silicon Valley Community Foundation, for funding enabling work on the new resolver, and thanks to the PSF and the Packaging WG for obtaining and administering that funding.

Python 3.7.7rc1 is now available for testing

Python 3.7.7rc1, the release preview of the next maintenance release of Python 3.7, is now available for testing. Assuming no critical problems are found prior to 2020-02-10, no code changes are planned between this release candidate and the final release. The release candidate is intended to give you the opportunity to test the new security and bug fixes in 3.7.7. While we strive to not introduce any incompatibilities in new maintenance releases, we encourage you to test your projects and report issues found to bugs.python.org as soon as possible. Please keep in mind that, since this is a preview release, its use is not recommended for production environments.

You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-377rc1/

   

Python 3.7.6rc1 and 3.6.10rc1 are now available for testing

Python 3.7.6rc1 and 3.6.10rc1 are now available. 3.7.6rc1 is the release preview of the next maintenance release of Python 3.7;  3.6.10rc1 is the release preview of the next security-fix release of Python 3.6. Assuming no critical problems are found prior to 2019-12-18, no code changes are planned between these release candidates and the final releases. These release candidates are intended to give you the opportunity to test the new security and bug fixes in 3.7.6 and security fixes in 3.6.10. While we strive to not introduce any incompatibilities in new maintenance and security releases, we encourage you to test your projects and report issues found to bugs.python.org as soon as possible. Please keep in mind that these are preview releases and, thus, their use is not recommended for production environments.

You can find the release files, a link to their changelogs, and more information here:

    https://www.python.org/downloads/release/python-376rc1/

    https://www.python.org/downloads/release/python-3610rc1/

Python 3.7.5 is now available

Python 3.7.5 is now available, the next maintenance release of Python 3.7.  You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-375/

Note that the next feature release of Python 3, Python 3.8.0, is also now available.  Python 3.8 contains many new features and optimizations. You should consider upgrading to it. We plan to continue regular bugfix releases of Python 3.7.x through mid-year 2020 and provide security fixes for it until mid-year 2023.  More details are available in PEP 537, the Python 3.7 Release Schedule (https://www.python.org/dev/peps/pep-0537/).

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Python 3.7.5rc1 is now available for testing

Python 3.7.5rc1 is now available for testing. 3.7.5rc1 is the release preview of the next maintenance release of Python 3.7, the latest feature release of Python. Assuming no critical problems are found prior to 2019-10-14, no code changes are planned between now and the final release. This release candidate is intended to give you the opportunity to test the new security and bug fixes in 3.7.5. We strongly encourage you to test your projects and report issues found to bugs.python.org as soon as possible. Please keep in mind that this is a preview release and, thus, its use is not recommended for production environments.

You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-375rc1/

Python 3.7.4 is now available

Python 3.7.4 is now available. 3.7.4 is the next maintenance release of Python 3.7, the latest feature release of Python.  You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-374/

See the What’s New In Python 3.7 document for more information about the many new features and optimizations included in the 3.7 series.  Detailed information about the changes made in 3.7.4 can be found in its change log.

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Python 3.7.4rc2 is now available for testing

Python 3.7.4rc2 is now available. 3.7.4rc2 is the second release preview of the next maintenance release of Python 3.7, the latest feature release of Python. Assuming no further critical problems are found prior to 2019-07-08, no code changes are planned between this release candidate and the final release. The release candidate is intended to give you the opportunity to test the new security and bug fixes in 3.7.4. Because of the small number of changes between rc1, the original release preview, and rc2, we are planning on an abbreviated exposure cycle so we can get the final release to you as soon as possible.  We strongly encourage you to test your projects and report issues found to bugs.python.org as soon as possible.  Please keep in mind that this is a preview release and, thus, is not recommended for production environments.

You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-374rc2/

    

Python 3.6.9 security-fix release is now available

Python 3.6.9 is now available. 3.6.9 is the first security-only-fix release of Python 3.6. Python 3.6 has now entered the security fix phase of its life cycle. Only security-related issues are accepted and addressed during this phase. We plan to provide security fixes for Python 3.6 as needed through 2021, five years following its initial release. Security fix releases are produced periodically as needed and only provided in source code form; binary installers are not provided.  We urge you to consider upgrading to the latest release of Python 3.7, the current fully-supported version.

You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-369/

Python 3.7.4rc1 and 3.6.9rc1 are now available

Python 3.7.4rc1 and 3.6.9rc1 are now available. 3.7.4rc1 is the release preview of the next maintenance release of Python 3.7, the latest feature release of Python. 3.6.9rc1 is the release preview of the first security-fix release of Python 3.6. Assuming no critical problems are found prior to 2019-06-28, no code changes are planned between these release candidates and the final releases. These release candidates are intended to give you the opportunity to test the new security and bug fixes in 3.7.4 and security fixes in 3.6.9. We strongly encourage you to test your projects and report issues found to bugs.python.org as soon as possible. Please keep in mind that these are preview releases and, thus, their use is not recommended for production environments.

You can find the release files, a link to their changelogs, and more information here:

    https://www.python.org/downloads/release/python-374rc1/

    https://www.python.org/downloads/release/python-369rc1/

Python 3.7.3 is now available

Python 3.7.3 is now available. 3.7.3 is the next maintenance release of Python 3.7, the latest feature release of Python.  You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-373/

See the What’s New In Python 3.7 document for more information about the many new features and optimizations included in the 3.7 series.  Detailed information about the changes made in 3.7.3 can be found in its change log.

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Python 3.7.3rc1 is now available for testing

Python 3.7.3rc1 is now available for testing. 3.7.3rc1 is the release preview of the next maintenance release of Python 3.7, the latest feature release of Python. Assuming no critical problems are found prior to 2019-03-25, no code changes are planned between now and the final release. This release candidate is intended to give you the opportunity to test the new security and bug fixes in 3.7.3. We strongly encourage you to test your projects and report issues found to bugs.python.org as soon as possible. Please keep in mind that this is a preview release and, thus, its use is not recommended for production environments.

You can find the release files, a link to the changelog, and more information here:

    https://www.python.org/downloads/release/python-373rc1/

Python 3.7.2 and 3.6.8 are now available

Python 3.7.2 and 3.6.8 are now available.  Python 3.7.2 is the next maintenance release of Python 3.7, the latest feature release of Python.  You can find Python 3.7.2 here:

    https://www.python.org/downloads/release/python-372/

See the What’s New In Python 3.7 document for more information about the many new features and optimizations included in the 3.7 series.  Detailed information about the changes made in 3.7.2 can be found in its change log.

We are also happy to announce the availability of Python 3.6.8:

    https://www.python.org/downloads/release/python-368/

Python 3.6.8 is planned to be the last bugfix release of Python 3.6. Per our support policy, we plan to provide security fixes for Python 3.6 as needed through 2021, five years following its initial release.

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.

Python 3.7.2rc1 and 3.6.8rc1 now available for testing

Python 3.7.2rc1 and 3.6.8rc1 are now available. 3.7.2rc1 is the release preview of the next maintenance release of Python 3.7, the latest feature release of Python. 3.6.8rc1 is the release preview of the next and last maintenance release of Python 3.6, the previous feature release of Python. Assuming no critical problems are found prior to 2018-12-20, no code changes are planned between these release candidates and the final releases. These release candidates are intended to give you the opportunity to test the new security and bug fixes in 3.7.2 and 3.6.8. We strongly encourage you to test your projects and report issues found to bugs.python.org as soon as possible. Please keep in mind that these are preview releases and, thus, their use is not recommended for production environments.

You can find these releases and more information here:

    https://www.python.org/downloads/release/python-372rc1/

    https://www.python.org/downloads/release/python-368rc1/

Python 3.7.1 and 3.6.7 are now available

Python 3.7.1 and 3.6.7 are now available. Python 3.7.1 is the first maintenance release of the newest feature release of the Python language. You can find Python 3.7.1 here:

    https://www.python.org/downloads/release/python-371/

See the What’s New In Python 3.7 document for more information about the many new features and optimizations included in the 3.7 series.  Detailed information about the changes made in 3.7.1 can be found in its change log.

We are also happy to announce the availability of Python 3.6.7, the next maintenance release of Python 3.6:

    https://www.python.org/downloads/release/python-367/

Thanks to all of the many volunteers who help make Python Development and these releases possible!  Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation.