PythonHub

How to publish to PyPI using GitHub Actions securely The post gives three practical steps for publishing Python packages to PyPI more securely from GitHub Actions: run zizmor, use Trusted Publishing, and require manual approval through GitHub environments. It focuses on reducing credential risk by removing long-lived PyPI tokens, pinning actions, limiting workflow permissions, disabling persisted checkout credentials, and adding a human ap... https://snarky.ca/how-to-publish-to-pypi-using-github-actions-securely/

Serving a Frontend with FastAPI: A Practical Guide A practical guide to FastAPI's new app.frontend(), SPA fallback, API route priority, and a complete mini dashboard example. https://modernpython.io/serving-a-frontend-with-fastapi-a-practical-guide/

planning-with-files Persistent file-based planning for AI coding agents and long-running agentic tasks. Crash-proof markdown plans that survive context loss and /clear, plus a deterministic completion gate and multi-agent shared state on disk. Manus-style. Works with Claude Code, Codex CLI, Cursor, Kiro, OpenCode and 60+ agents via the SKILL.md standard. https://github.com/OthmanAdi/planning-with-files

Python Hub Weekly Digest for 2026-07-12 https://pythonhub.dev/digest/2026-07-12/

Django security releases issued: 6.0.7 and 5.2.16 Django 6.0.7 and 5.2.16 fix three low-severity security issues involving cached Set-Cookie responses, GDALRaster heap buffer over-read, and DomainNameValidator accepting newlines. The Django team recommends upgrading supported versions as soon as possible, with patches applied to main, 6.1 beta, 6.0, and 5.2 branches. https://www.djangoproject.com/weblog/2026/jul/07/security-releases/

Boffin claims Microsoft's "quantum leap" is invalid due to "basic Python errors" https://www.theregister.com/research/2026/06/24/boffin-claims-microsofts-supposed-quantum-leap-does-not-compute-due-to-basic-python-errors/5260489

rommapp / romm A beautiful, powerful, self-hosted rom manager and player. https://github.com/rommapp/romm

Backon – Python retry (zero deps, circuit breaker, async native) https://github.com/Llucs/backon

microsoft / skills-for-fabric A collection of skills and MCP systems to enable users of CLI, VSCode, Claude to operate over Microsoft Fabric https://github.com/microsoft/skills-for-fabric

A small matrix task runner for Python projects using Astral uv. uv-matrix runs the same project tasks across Python versions, dependency variants, extras and arbitrary task variants defined in pyproject.toml. https://github.com/atsuoishimoto/uv-matrix

Scripting good practices in Python SummaryYou can make your scripts just a little nicer with some tweaks:Use inline dependencies if ... https://www.bitecode.dev/p/scripting-good-practices-in-python

Python 3.14 compiled to metal – no interpreter https://github.com/can1357/pon

Have your agent record video demos of its work with shot-scraper video shot-scraper video is a new command introduced in today's shot-scraper 1.10 release which ... https://simonwillison.net/2026/Jun/30/shot-scraper-video/#atom-tag

OpenKB Open LLM Knowledge Base. https://github.com/VectifyAI/OpenKB

Python Hub Weekly Digest for 2026-07-05 https://pythonhub.dev/digest/2026-07-05/

Building AI Agents You Can Trust & Evaluate | Agentic RAG Live Series Hands-on live series building Agentic RAG systems with retrieval, tool calling, evaluations, traces, and production engineering practices. 140 min marathon https://youtube.com/live/_44x_yL7Q-s?feature=share

Unlimited-OCR Unlimited-OCR is Baidu’s open-source OCR model for one-shot long-horizon document parsing, designed to read multi-page documents in a single pass instead of chunking them. https://github.com/baidu/Unlimited-OCR

Build real agentic apps using CUGA: two dozen working examples on a lightweight harness Building an agent is mostly plumbing: tools, state, guardrails, scaling from one agent to many. CUGA (pip install cuga), short for Configurable Generalist Agent, the Agent Harness for the Enterprise from IBM handles that, so you write just a tool list and a prompt. We built two-dozen single-file apps to prove it. Read one end to end here, then see how the same agent runs sovereign and go... https://huggingface.co/blog/ibm-research/cuga-apps

Build and Deploy a Remote MCP Server to GKE in 30 Minutes Learn to build and deploy a secure remote MCP server on Google Kubernetes Engine (GKE) in 30 minutes. Streamline your AgenticAI workflows with standard protocols. https://cloud.google.com/blog/topics/developers-practitioners/build-and-deploy-a-remote-mcp-server-to-gke-in-30-minutes/

gzipt A compression based language model. https://github.com/nathan-barry/gzipt