Lightnews — Scholar-powered news

Mike Fiedler @miketheman.com · 1d

Does your org run a self-managed version of @gitlab.com and publish your own #Python packages to @pypi.org ?

If you want to try out an alpha of Trusted Publishing for GitLab Self-Managed instances, let me know via DM - I'm collecting interest now, and should have something to show soon.

5 5

Mike Fiedler @miketheman.com · 2d

Will it matter? I don't know. Especially if the software is "for me" and I can use the thing that made it to fix it when it doesn't do *exactly* what I want...

1

Mike Fiedler @miketheman.com · 2d

Maybe the friction involved in starting a fresh project helped forestall creating net new things all the time and inspired us to look for existing solutions, and potentially extend/contribute to them.

With the ability to quickly imagine your idea into reality, are we in a new era of software slop?

1 3

Mike Fiedler @miketheman.com · 7d

But, but, free! I demand more for my $0!!

1

Mike Fiedler @miketheman.com · 7d

Clear, and to the point. Great way to think about your career, from @danielleheberling.xyz

danielleheberling.xyz/blog/time-to...

Should I Stay or Should I Go? | Danielle's Blog

A framework for deciding when it's time to leave your current company, based on evaluating what you're building, who you're working with, and the technology you use.

danielleheberling.xyz

2 5

Reposted by Mike Fiedler

Hugo van Kemenade @hugovk.dev · 8d

Just released! 🚀

Please install and enjoy Python 3.14! 🥧

discuss.python.org/t/python-3-1...

#Python #Python314 #release

Two snakes enjoying a pie with 3.14 on the top and π crimping.

1 25 48

Mike Fiedler @miketheman.com · 8d

I just backed Container on @kickstarter.com www.kickstarter.com/projects/boa...

Container, GRUNTZ, and Triangulation

Out of print for far too long—the legendary Container returns! + Discover GRUNTZ's sharp duels and Triangulation's witty word-guessing.

www.kickstarter.com

1

Mike Fiedler @miketheman.com · 8d

What is this hindsight you speak of? We were all taught Hakuna Matata, never look back!

1

Mike Fiedler @miketheman.com · 10d

The final two games for @gothamderby.bsky.social home season happened last night in Brooklyn. They were both really good games, and the championship game was a close, hard-fought nail-biter with some truly awesome displays of athleticism.

Support your local #rollerderby league!

5

Mike Fiedler @miketheman.com · 11d

Root for NY Liberty 🗽 until they do!

1 2

Mike Fiedler @miketheman.com · 16d

Sadly not this year, hopefully next!

1

Mike Fiedler @miketheman.com · 17d

Not gonna lie, kinda wanna know what it tastes like

1

Mike Fiedler @miketheman.com · 19d

Add 🦎 and 🖖 for added complexity!

4

Mike Fiedler @miketheman.com · 19d

Attackers continue to find creative ways to expose credentials, often the first step in a larger scale supply chain attack.

Python Package Index @pypi.org · 19d

A campaign targeted GitHub Actions to steal PyPI tokens—PyPI wasn’t compromised and no PyPI packages were published by the attackers. Stay safe: review your tokens, rotate any exposed ones, and use short-lived, scoped GitHub Actions tokens. Details:

Token Exfiltration Campaign via GitHub Actions Workflows - The Python Package Index Blog

Incident report of a recent attack campaign targeting GitHub Actions workflows to exfiltrate PyPI tokens, our response, and steps to protect your projects.

blog.pypi.org

1 1 5

Reposted by Mike Fiedler

Python Software Foundation @python.org · 22d

The PSF joined the @openssf.org & others in signing “Open Infrastructure is Not Free.” Funding gaps in the open source industry mean critical infrastructure lacks support. Corporations benefiting from it must invest to sustain it.

Read more ➡️