Feeds

Maui Release Briefing #7

Planet KDE - Wed, 2024-12-18 11:27

Today, we bring you a report on the brand-new release of the Maui Project.

Community

To follow the Maui Project’s development or to just say hi, you can join us on our Telegram group @mauiproject

We are present on X and Mastodon:

Thanks to the KDE contributors who have helped to translate the Maui Apps and Frameworks!

Downloads & Sources

You can get the stable release packages [APKs, AppImage, TARs] directly from the KDE downloads server at https://download.kde.org/stable/maui/

All of the Maui repositories have the newly released branches and tags. You can get the sources right from the Maui group: https://invent.kde.org/maui

MauiKit 4 Frameworks & Apps

With the previous version released, MauiKit Frameworks and Maui Apps were ported over to Qt6, however, some regressions were introduced and those bugs have now been fixed with this new revision version.

Currently, there are over 10 frameworks, with two new ones recently introduced. They all, for the most part, have been fully documented, and although, the KDE doxygen agent has some minor issues when publishing some parts, you can find the documentation online at https://api.kde.org/mauikit/ (and if you find missing parts, confusing bits, or overall sections to improve – you can open a ticket at any of the framework repos and it shall be fixed shortly after)

A brief list of changes and fixes introduced to the frameworks are the following:

For MauiKit Controls

  • MauiKit is now no longer dependent on MauiKit-Style, so any other QQC2 style can be used with Maui Apps (other styles are not supported).
  • MauiKit documentation has been updated with notes on the new attached controls properties – https://api.kde.org/mauikit/mauikit/html/classControls.html
  • MauiKit fixes the toast area notifications. The toast notifications can now take multiple contextual actions.
  • MauiKit Demo app has been updated to showcase all the new control properties
  • New controls: TextField, Popup, DropDownIndicator,
  • MauiKit fixes the template delegates and the IconItem control
  • MauiKit fixes to the Page autohide toolbars
  • Update style and custom controls to use MauiKit Controls’ attached properties for level, status, title, etc.
  • Display keyboard shortcut info in the MenuItems
  • Update MauiKit Handy properties for isMobile, isTouch, and hasTransientTouchInput and fixes to the lasso selection on touch displays
  • Added more resize areas to the BaseWindow type
  • Check for system color scheme style changes and update accordingly. This works on other systems besides Plasma or Maui, such as Gnome or Android
  • The type AppsView has been renamed to SwipeView, and AppViewLoader to SwipeViewLoader
  • Update MauiKit-Style to support MauiKit Controls attached properties and respect the flat properties in buttons
  • Fixes to the MauiKit bug in the GridBrowser scrollbars policy
  • Fixes to the action buttons layout in Dialog and PopupPage controls
  • Refresh the icon when a system icon-theme change is detected – a workaround for Plasma is used and for other systems the default Qt API

For the MauiKit Frameworks

  • FileBrowsing fixes bugs with the Tagging components
  • Fixes to the models using dates. Due to a bug in Qt getting a file date time is too slow unless the UTC timezone is specified
  • Update FileBrowsing controls to use the latest Mauikit changes
  • Added a new control: FavButton, to mark files as favorites using the Tagging component quickly
  • Update and fixes to the regressions in the other frameworks
  • ImageTools fixes the OCR page
  • TextEditor fixes the line numbers implementation.

All of the frameworks are now at version 4.0.1

All of the apps have been reviewed for the regressions previously introduced in the porting to Qt6; those issues have been solved and a few new features have been added, such as:

  • Station, now allows opening selected links externally
  • Index fixes to the file previewer and support for quickly tagging files from the previewer
  • Vvave fixes to the minimode window closing
  • Update the apps to remove usage of the Qt5Compat effects module
  • Fix issues in Fiery, Strike, and Agenda
  • Fix the issue of selecting multiple items in the apps not working
  • Clip fixes to the video thumbnail previews and the opening file dialog
  • Implement the floating viewer for Pix, Vvave, Shelf, and Clip for consistency
  • Correctly open the Station terminal at the current working directory when invoked externally
  • Among many few other details

** Index, Vvave, Pix, Nota, Buho, Station, Shelf, Clip, and Communicator versions have been bumped to 4.0.1

*** Strike and Fiery browser versions have been bumped to 2.0.1

**** Agenda and Arca versions have been bumped to 1.0.1

And as for Bonsai, Era, and other applications still under development, there is still not a ported version to Qt6 as of now

 

Maui Shell

Although Maui Shell has been ported over to Qt6 and is working with the latest MauiKit4, a lot of pending issues are still present and being worked on. The next release will be dedicated fully on Maui Shell and all of its subprojects, such as Maui Settings, Maui Core, CaskServer, etc.

That’s it for now. Until the next blog post, that will be a bit closer to the 4.0.1 stable release.

Release schedule

The post Maui Release Briefing #7 appeared first on MauiKit — #UIFramework.

Categories: FLOSS Project Planets

Freelock Blog: Make integrations with other services more resilient using a Queue

Planet Drupal - Wed, 2024-12-18 10:00
Make integrations with other services more resilient using a Queue Anonymous (not verified) Wed, 12/18/2024 - 07:00 Tags Web Development Drupal Drupal Planet reliability

One downside of automating things is dealing with outages. Sometimes services go down, and are not available for some period of time. When this happens, how does it impact your automation?

If you don't design your automation carefully, you might lose the data entirely. Or get spammed by hundreds of submissions when it comes back up. Handling this correctly does end up needing some understanding of how the automation works, as well as any quirks of the remote system.

Categories: FLOSS Project Planets

Real Python: Get Started With Django User Management

Planet Python - Wed, 2024-12-18 09:00

Django user management allows you to integrate user authentication and management into your web applications. By using Django, you can leverage the framework’s built-in authentication system to manage user registration, login, and logout. With just a few additional templates, you can enable users to reset and change their passwords independently.

This tutorial guides you through setting up a basic user management system with Django that you can extend later. You’ll learn how to create a dashboard, implement user registration, and connect authentication URLs, as well as customize templates for login, logout, and password management.

By the end of this tutorial, you’ll understand that:

  • Django’s user authentication is a built-in authentication system that comes with pre-configured URLs and views.
  • Authentication verifies user identity, while authorization determines user permissions within Django.
  • Registering as a user in Django requires setting up views, templates, and URLs.
  • Creating a login system in Django involves built-in authentication views and creating custom templates.
  • Resetting passwords in Django involves configuring email backends for sending reset links.

This tutorial focuses on user authentication and user management. If you want to learn more about permissions and groups, then you can check out the tutorial about managing users in Django’s admin site.

Get Your Code: Click here to download the free sample code you’ll use to set up a basic user management system with Django .

Start With the Basics

For bigger projects, you may consider creating a custom user model. In this tutorial, you’ll be using Django’s built-in user model. This is a great place to start to familiarize yourself with user authentication in general.

In this section of the tutorial, you’ll first create a small Django project with a users app. Then, you’ll make some adjustments to Django’s password validator to make your development more convenient. Finally, you’ll create an admin user to verify your setup.

Set Up the Django Project

It’s a good idea to use a virtual environment when working with Python projects. That way, you can always be sure that the python command points to the right version of Python and that the modules required by your project have the correct versions. To read more about creating virtual environments, check out Python Virtual Environments: A Primer.

Select your operating system below and use your platform-specific command to set up a virtual environment:

Windows PowerShell PS> python -m venv venv\ PS> .\venv\Scripts\activate (venv) PS> Copied! Shell $ python -m venv venv/ $ source venv/bin/activate (venv) $ Copied!

With the above commands, you create and activate a virtual environment named venv by using Python’s built-in venv module. The parenthesized (venv) in front of the prompt indicate that you’ve successfully activated the virtual environment.

Now that the environment is ready, you can install Django, start a new project, and create an application to store all your user management code:

Shell (venv) $ python -m pip install Django (venv) $ django-admin startproject user_auth_intro (venv) $ cd user_auth_intro (venv) $ python manage.py startapp users Copied!

In this example, you name your project user_auth_intro and your application users. To include the users app in your Django project, you need to add a reference to the app’s configuration class at the beginning of the INSTALLED_APPS list in settings.py:

Python user_auth_intro/settings.py 1# ... 2 3INSTALLED_APPS = [ 4 "users.apps.UsersConfig", 5 "django.contrib.admin", 6 "django.contrib.auth", 7 "django.contrib.contenttypes", 8 "django.contrib.sessions", 9 "django.contrib.messages", 10 "django.contrib.staticfiles", 11] 12 13# ... Copied!

By adding users.apps.UsersConfig, you let Django know that the users app you just created exists. If you have a look at the INSTALLED_APPS list, then you’ll spot Django’s default authentication system on line 6. In django.contrib.auth, Django stores the core of its authentication framework and the default models that you’ll build on later.

Next, apply the migrations and run the Django development server:

Shell (venv) $ python manage.py migrate (venv) $ python manage.py runserver Copied!

These commands create all default models in the database and start the Django development server.

Deactivate the Password Validator

By default, Django enforces strong passwords to make user accounts less prone to attacks. Since you’ll need to change passwords often throughout this tutorial, figuring out a strong password each time would be inconvenient.

Read the full article at https://realpython.com/django-user-management/ »

[ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered to your inbox every couple of days. >> Click here to learn more and see examples ]

Categories: FLOSS Project Planets

Web Wash: Build Layouts with Bootstrap and Layout Builder in Drupal

Planet Drupal - Wed, 2024-12-18 07:21

The above video will explore how to effectively utilize Bootstrap and Layout Builder to create powerful, responsive layouts in Drupal. Whether you’re a novice or looking to enhance your skills, this guide will walk you through the necessary steps to set up your Bootstrap theme and leverage the full potential of Layout Builder.

Layout Builder in Drupal lets users create custom layouts visually. Combined with Bootstrap’s grid system and components, it makes building responsive, attractive designs easy.

Bootstrap Layout Builder module lets you quickly access Bootstrap classes via Layout Builder to customize containers, spacing, and animations.

Categories: FLOSS Project Planets

Real Python: Quiz: How to Remove Items From Lists in Python

Planet Python - Wed, 2024-12-18 07:00

In this quiz, you’ll test your understanding of How to Remove Items From Lists in Python.

By working through this quiz, you’ll revisit the different approaches to removing items from a list in Python, including .pop(), .remove(), the del statement, and more.

[ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered to your inbox every couple of days. >> Click here to learn more and see examples ]

Categories: FLOSS Project Planets

LostCarPark Drupal Blog: Drupal Advent Calendar day 18 - Content Publishing Workflows

Planet Drupal - Wed, 2024-12-18 04:00
Drupal Advent Calendar day 18 - Content Publishing Workflows james Wed, 12/18/2024 - 09:00

Welcome back for day 18, as we enter the last week to the big day - I mean the arrival of Father Christmas, not the launch of Drupal CMS!

Today we are looking at publishing workflows in Drupal CMS. 

Something that many content management systems have offered out-of-the-box is the ability to specify a date and time when a piece of content will be published. This has also been available in Drupal for a very long time, but has always required installation of extra modules - until now.

With Drupal CMS, every content type created by the base install, and any recipes within Drupal CMS, automatically…

Tags
Categories: FLOSS Project Planets

EuroPython: EuroPython 2025 is Staying in Prague 🎉 - Join as a Contributor!

Planet Python - Wed, 2024-12-18 03:00

📅 Save the Date: 14th - 20th July 2025 📍


After an amazing year in Prague, we’re thrilled to announce that EuroPython 2025 is heading back to this beautiful city! 🎉 Mark your calendars for another epic week of learning, collaboration, and community vibes.

🚀 What’s Happening?
  • 🗓️ Monday & Tuesday (14th-15th): Tutorials & Workshops
  • 🎤 Wednesday to Friday (16th-18th): Main Conference Talks
  • 👨‍💻 Saturday & Sunday (19th-20th): Community Sprints
🤔 What would you like to see at EuroPython?

We’d love to hear your thoughts! We’ve put together a short form with just three quick questions—it’ll take less than a few minutes to complete. Your input will help us make EuroPython 2025 an amazing experience for everyone! 

👉 Form: https://forms.gle/Ne2FFd26MVqHKNa16

🤝 Join Us as a Contributor!

EuroPython thrives on the energy of passionate volunteers. 💪 Whether you’re experienced or joining for the first time, we’d love to have you on board!

🗓️ Deadline to Apply: Sunday, 22nd
📝 Fill out the form: https://forms.gle/kY7jqSJTjEhFccWJ6

POV: You are just a chill EuroPython Volunteer💼 Want to Sponsor?

EuroPython is one of Europe’s largest Python community conferences, and we couldn’t do it without our amazing sponsors! 🤝 Interested? Reach out to us at sponsoring@europython.eu.

📣 Stay Updated!

🔗 Visit our website: https://ep2025.europython.eu/
📬 Subscribe to our newsletter for the latest updates

We can’t wait to see you in Prague next year! 🇨🇿✨

Mia, on behalf of the EuroPython Organizing Team

Categories: FLOSS Project Planets

Tag1 Consulting: Tag1 D7ES Adds Full Support for CKEditor 5 in Drupal 7

Planet Drupal - Wed, 2024-12-18 02:04

CKEditor 4.x reached end-of-life (EOL) in June 2023, creating a significant challenge for Drupal 7 users: their trusted WYSIWYG editor now has known vulnerabilities that are no longer patched in the open-source community version. Upgrading to v5 is essential for maintaining security, but the only option has been paid support from CKSource. All Tag1's Drupal 7 Extended Support Service plans now include free CKEditor v5 support, providing significantly more value at a much lower cost! Planning to run D7 beyond its January 2025 end-of-life? Sign up for Tag1 D7ES to keep your site secure with ongoing core and module updates, including critical compatibility updates for CKEditor and jQuery. Learn more at D7ES.Tag1.com. Do your sites run on Pantheon.io? Tag1 is the exclusive provider of D7ES for Pantheon.io. All Pantheon users get the self-service version of Tag1 D7ES at no additional cost. Pantheon users looking to upgrade to the premium or enterprise Tag1 D7ES service can do so online at https://d7es.tag1.com/plans. ## Enter CKEditor 5 for Drupal 7 Through the Tag1 D7ES Service, which enables Drupal 7 sites to continue operating securely after D7 goes end-of-life in January 2025, Tag1 developed a new module that brings CKEditor 5 support to Drupal...

michaelemeyers Wed, 12/18/2024 - 10:26
Categories: FLOSS Project Planets

The Drop Times: Breaking Barriers, Busting Bubbles, and Building the Future of Drupal in Singapore

Planet Drupal - Wed, 2024-12-18 01:11
Alex Moreno shares his personal experience from DrupalCon Singapore 2024, offering insights on AI-driven Drupal innovations, the upcoming Experience Builder release, and the growing momentum in Asia’s Drupal market. From roundtable discussions to contribution highlights, get an inside look at the key moments shaping Drupal’s future.
Categories: FLOSS Project Planets

Wingware: Wing Python IDE Version 10.0.8 - December 18, 2024

Planet Python - Tue, 2024-12-17 20:00

This release fixes AI Chat to continue to work after OpenAI drops v1 API support this month, uses the configured AI model also for AI Chat, fixes the debugger to work when two or more versions of Python are loaded into a process, improves OpenAI Assistant, File, and Vector Store resource management, reduces debugger stack space usage, fixes using ${WING:PROJECT_DIR} and other environment variable references in a Python File OS Commands, and fixes several other minor usage issues.

See the change log for details.

Important Note: Users of the AI Chat beta in Wing version 10.0.7.1 and earlier may find many untitled Vector Stores in their OpenAI account, which were left as a side effect of Wing's earlier use of the beta Assistants API. OpenAI may start charging for these or other resources in your OpenAI account at the end of 2024. These resources can be removed by invoking internal-ai-delete-resources(untitled_vector_stores=True) from the Edit > Command by Name menu. This runs in the background, may take several minutes to finish, and will be terminated if Wing is quit before it completes. Use caution if you have other applications that call OpenAI's Assistants API, as this cannot distinguish the Vector Stores created by Wing and other applications. Once resources have been deleted, you will need to restart all instances of Wing before AI Chat will work again. Afterward, you should not see any further accumulation of Vector Stores or other resources in your OpenAI account, other than those that are actively in use. However, please note that Wing's AI Chat is based on API that is still being flagged as 'beta' by OpenAI.

Download Wing 10 Now: Wing Pro | Wing Personal | Wing 101 | Compare Products


What's New in Wing 10

AI Assisted Development

Wing Pro 10 takes advantage of recent advances in the capabilities of generative AI to provide powerful AI assisted development, including AI code suggestion, AI driven code refactoring, description-driven development, and AI chat. You can ask Wing to use AI to (1) implement missing code at the current input position, (2) refactor, enhance, or extend existing code by describing the changes that you want to make, (3) write new code from a description of its functionality and design, or (4) chat in order to work through understanding and making changes to code.

Examples of requests you can make include:

"Add a docstring to this method" "Create unit tests for class SearchEngine" "Add a phone number field to the Person class" "Clean up this code" "Convert this into a Python generator" "Create an RPC server that exposes all the public methods in class BuildingManager" "Change this method to wait asynchronously for data and return the result with a callback" "Rewrite this threaded code to instead run asynchronously"

Yes, really!

Your role changes to one of directing an intelligent assistant capable of completing a wide range of programming tasks in relatively short periods of time. Instead of typing out code by hand every step of the way, you are essentially directing someone else to work through the details of manageable steps in the software development process.

Read More

Support for Python 3.12, 3.13, and ARM64 Linux

Wing 10 adds support for Python 3.12 and 3.13, including (1) faster debugging with PEP 669 low impact monitoring API, (2) PEP 695 parameterized classes, functions and methods, (3) PEP 695 type statements, and (4) PEP 701 style f-strings.

Wing 10 also adds support for running Wing on ARM64 Linux systems.

Poetry Package Management

Wing Pro 10 adds support for Poetry package management in the New Project dialog and the Packages tool in the Tools menu. Poetry is an easy-to-use cross-platform dependency and package manager for Python, similar to pipenv.

Ruff Code Warnings & Reformatting

Wing Pro 10 adds support for Ruff as an external code checker in the Code Warnings tool, accessed from the Tools menu. Ruff can also be used as a code reformatter in the Source > Reformatting menu group. Ruff is an incredibly fast Python code checker that can replace or supplement flake8, pylint, pep8, and mypy.


Try Wing 10 Now!

Wing 10 is a ground-breaking new release in Wingware's Python IDE product line. Find out how Wing 10 can turbocharge your Python development by trying it today.

Downloads: Wing Pro | Wing Personal | Wing 101 | Compare Products

See Upgrading for details on upgrading from Wing 9 and earlier, and Migrating from Older Versions for a list of compatibility notes.

Categories: FLOSS Project Planets

Ruqola 2.4.0

Planet KDE - Tue, 2024-12-17 19:00

Ruqola 2.4.0 is a feature and bugfix release of the Rocket.chat messenger app.

Some of the new features in this release of Ruqola include:

  • Allow to clean up room history when room was not opened for a long time.
  • Add restore button in administrator server settings dialog.
  • Improve changing password (show validation info).
  • Improve register new account (Add reason support).
  • Implement mute/unmute user.
  • Add color to the text in the account tab.
  • Allow to show private installed applications.

Some bug fixing:

  • Fix editing message.
  • Show permissions in Rocket.Chat Marketplace.
  • Fix reconnect server.
  • Fix single application on Windows/MacOs
  • Fix select created room/discussion/teams
  • Fix filter discussion in administrator mode
  • Fix message video support
  • Fix highlight text in quoted message
  • Fix open discussion channel
  • Allow to show application market settings

URL: https://download.kde.org/stable/ruqola/
Source: ruqola-2.4.0.tar.xz
SHA256: f532e421ae731dfc2e88b78ab61de01e0e367a31a4fe34497664a66fc737225c
Signed by: E0A3EB202F8E57528E13E72FD7574483BB57B18D Jonathan Riddell jr@jriddell.org
https://jriddell.org/jriddell.pgp

Categories: FLOSS Project Planets

Michael Foord: New Course: Object Oriented Programming Theory with Python

Planet Python - Tue, 2024-12-17 19:00

A practical two day course on the object oriented features of Python. Perfect for programmers with some experience of Python looking to use objects and classes and to understand them. An excellent course for data scientists, devops engineers and those self taught with Python looking to move beyond scripting into programming.

Course Contents

Fundamentals: Classes and methods

  • Computer architecture and programming languages
  • Python as a high-level, object-oriented language
  • Objects as abstractions, for thinking
  • The class statement
  • The explicit self
  • The initialiser method __init__
  • Bound methods
  • Attributes and the built-in attribute access functions
  • References and assignment (how Python works)
  • Mutable objects (and call by object)
  • Object copying

Object Oriented Features

  • Class attributes
  • Class methods
  • Properties
  • Private attributes
  • Single inheritance
  • Inheritance to extend and modify the parent
  • The use of super
  • Cooperative multiple inheritance
  • Mixin Classes
  • Attribute lookup and the method resolution order
  • The type system: isinstance and issubclass

Inside Python Objects

  • The instance dictionary
  • Slots
  • Class dictionaries
  • The descriptor protocol

Python Protocols

  • Magic methods and Python protocols
  • Operator overloading
  • The string representation protocol
  • The container protocols
  • Implementing custom containers
  • Inheriting from collections.abc.MutableSequence

Alternative Approaches

  • namedtuples
  • dataclasses
  • type as a class factory

Object oriented theory:

  • History of Object Oriented Programming
  • The pillars of OOP
  • Abstraction
  • Inheritance
  • Encapsulation
  • Polymorphism
  • Object oriented design principles
  • Design patterns
  • The Liskov Substitution Principle
  • Composition versus inheritance

Optional advanced section (third day):

  1. Advanced OOP Concepts

    • Interfaces and API design
    • Abstract base classes and protocols
    • Type hints and static typing with mypy
    • Class decorators
    • Decoration via inheritance with __init_sublass__
    • Metaclasses
    • Context managers and the with statement
    • Weak references and destructors
    • The descriptor protocol
  2. OOP Design Principles

    • SOLID principles
    • Law of Demeter
    • Liskov Substitution Principle
    • Composition vs inheritance
    • Domain Driven Design
    • Test Driven Development
    • Stop writing classes
    • The hexagon pattern (microservices)
    • The C4 Model for system architecture
Categories: FLOSS Project Planets

Michael Foord: New Course: Secure Python Web Application Development

Planet Python - Tue, 2024-12-17 19:00

This two day course covers Full Stack Security with the Defence in Depth approach. It covers important security principles, and mitigating specific vulnerabilities including The OWASP Top Ten, but is focused on secure Python web application development.

Course Contents

This is a practical and hands on, two day, course. Learn how to use the security tools that come in the Python standard library. Modules covered include:

  • hashlib
  • hmac
  • secrets
  • random
  • socket
  • ssl

Web application frameworks:

  • Security features in web application frameworks for API servers and web applications
  • How to secure data in Django, Flask and other popular web application frameworks
  • Secure deployment practises with containers and application servers (WSGI or ASGI)

Third party libraries for cryptography and secure network access:

  • authlib
  • cryptography
  • httpx and requests
  • websocket
  • jwt
  • OpenZiti for application level zero trust architecture
  • certifi for TLS certification verification

Tooling for secure Python development and as part of your CI pipelines:

  • uv/pipenv
  • pip-audit
  • bandit
  • ruff
  • mypy
  • dependabot/renovate
  • Security testing

Network security with TLS:

  • How, why and when to use TLS
  • How TLS works
  • mTLS for enhanced security
  • Generating self-signed certificates for local development, with the cryptography library

Michael Foord has been a Python application developer for over twenty years, is a Python core developer and the creator of unittest.mock in the Python standard library, and is the author of The Absolute Minimum Every Python Web Application Developer Must Know About Security.

Topics Covered: Core Python Security Fundamentals
  • Security principles and defence in depth strategies with Python frameworks
  • Implementing OWASP Top 10 protections in Django, Flask and FastAPI applications
  • Security principles and defence in depth strategies
  • Principles from The OWASP Web Security Testing Guide
  • Threat modelling and the security requirements document
  • The principles of least privilege and deny by default
  • Zero trust architecture fundamentals
  • Building zero trust architecture with OpenZiti’s Python SDK
Cryptography and Data Security
  • Hashing, encryption, and digital signatures
  • Symmetric encryption and public key encryption
  • Secure password storage and management
  • Using Python’s hashlib and hmac modules for secure hashing
  • Using Python’s cryptography libraries correctly
  • Data encryption at rest and in transit
  • Data encryption at rest using Django’s encrypted model fields and SQLAlchemy StringEncryptedType
Authentication and Authorization
  • Secure session management
  • OAuth 2.0 and JWT for authentication
  • Oauth2 with the Python library authlib
  • JWT handling with PyJWT and managing token lifecycles
  • Role-based access control (RBAC), plus alternatives
  • Multi-factor authentication
  • Managing access tokens and permissions
Secure Coding Practices
  • Proven security with modern cryptography algorithms
  • Protection against SQL injection
  • Input validation and sanitisation
  • Using secrets vs random for cryptographic operations
  • Sanitizing logs in Python applications
  • Django template escaping and Flask/Jinja2 for XSS prevention
  • Preventing timing attacks and token prediction attacks
  • Cryptographically secure randomness
  • Cross-site scripting (XSS) prevention
  • Cross-site request forgery (CSRF) protection
  • Secure file handling and upload validation
  • Preventing TLS downgrade attacks
Network Security
  • Networking fundamentals
  • TLS/SSL implementation and certificate management
  • Secure API design and implementation
  • WebSocket security
  • Network architecture and segmentation
  • Firewalls, routers, network interfaces
  • Protocols, HTTP & TLS, with the Python standard library
  • Application deployment
  • Software Defined Networking
Infrastructure Security
  • Container security best practices
  • Secure deployment patterns
  • Network interfaces and routing
  • Building DMZ architectures for Python web applications
  • Virtual private networks (VPN)
Security Tools and Testing
  • Static analysis with bandit and ruff
  • Dependency scanning using pip-audit
  • Automated security testing integration
  • Container scanning and runtime protection
  • Code review practices for security
Operational Security
  • Live security alerts
  • Statutory duties around security
  • Monitoring Python applications for security issues
  • Security patch management for Python applications
  • Updating and patching strategies

The course includes practical exercises throughout, with participants implementing secure coding patterns, identifying vulnerabilities in sample code, and building secure components.

Categories: FLOSS Project Planets

FSF Blogs: Fresh off the digital Gutenberg: The fall 2024 Bulletin is now online

GNU Planet! - Tue, 2024-12-17 17:37
The latest issue of the Free Software Bulletin is now online. We've got a line-up of articles about abandonware traps, tools for cleaning up the Internet, and more!
Categories: FLOSS Project Planets

Fresh off the digital Gutenberg: The fall 2024 Bulletin is now online

FSF Blogs - Tue, 2024-12-17 17:37
The latest issue of the Free Software Bulletin is now online. We've got a line-up of articles about abandonware traps, tools for cleaning up the Internet, and more!
Categories: FLOSS Project Planets

Dirk Eddelbuettel: BH 1.87.0-1 on CRAN: New Upstream

Planet Debian - Tue, 2024-12-17 17:34

Boost is a very large and comprehensive set of (peer-reviewed) libraries for the C++ programming language, containing well over one hundred individual libraries. The BH package provides a sizeable subset of header-only libraries for (easier, no linking required) use by R. It is fairly widely used: the (partial) CRAN mirror logs (aggregated from the cloud mirrors) show over 38.5 million package downloads.

Version 1.87.0 of Boost was released last week following the regular Boost release schedule of April, August and December releases. As before, we packaged it almost immediately and started testing following our annual update cycle which strives to balance being close enough to upstream and not stressing CRAN and the user base too much. The reverse depends check revealed six packages requiring changes or adjustments. We opened issue #103 to coordinate the issue (just as we did in previous years). Our sincere thanks to Matt Fidler who fixed two packages pretty much immediately.

As I had not heard back from the other maintainers since filing the issue, I uploaded the package to CRAN suggesting that the coming winter break may be a good opportunity for the four other packages to catch up. CRAN concurred, and 1.87.0-1 is now available there.

There are no other changes apart from cosmetics in the DESCRIPTION file. For once, we did not add any new Boost libraries. The short NEWS entry follows.

Changes in version 1.87.0-1 (2024-12-17)
  • Upgrade to Boost 1.87.0, patched as usual to comment-out diagnostic suppression messages per the request of CRAN

  • Switched to Authors@R

Via my CRANberries, there is a diffstat report relative to the previous release. Comments and suggestions about BH are welcome via the issue tracker at the GitHub repo.

This post by Dirk Eddelbuettel originated on his Thinking inside the box blog. If you like this or other open-source work I do, you can now sponsor me at GitHub.

Categories: FLOSS Project Planets

PyCoder’s Weekly: Issue #660 (Dec. 17, 2024)

Planet Python - Tue, 2024-12-17 14:30

#660 – DECEMBER 17, 2024
View in Browser »

PyMyFlySpy: Track Your Flight Using Its Headrest Data

Robert is the creator of PySkyWiFi, a “completely free, unbelievably stupid wi-fi on long-haul flights” and he is back. This time getting flight data information if you aren’t on a plane with seat-back monitors showing you where you are.
ROBERT HEATON

Python Set Comprehensions: How and When to Use Them

In this tutorial, you’ll learn how to write set comprehensions in Python. You’ll also explore the most common use cases for set comprehensions and learn about some bad practices that you should avoid when using them in your code.
REAL PYTHON

Free Workshop: Temporal 101 With Python

🚀 Unlock power of Temporal in our Python 101 Workshop on January 8th! Join us to explore how to build resilient workflows effortlessly, handle complex scenarios, and automate tasks like a pro. Perfect for developers of all skill levels. Reserve your spot and elevate your coding game →
TEMPORAL TECHNOLOGIES sponsor

Typed Python in 2024

This article discusses the results from a survey on the usage of Typing features in Python. It discusses how much the feature has been adopted and what stands in coders’ way of using it.
AARON POLLACK

JupyterLab 4.3 and Notebook 7.3 Are Available!

JUPYTER.ORG

PEP 757: C API to Import-Export Python Integers (Accepted)

PYTHON.ORG

NumPy Release 2.2.0

GITHUB.COM/NUMPY

PSF Year End Fundraiser / Membership Drive

PYTHON.ORG

Articles & Tutorials Check if a Point Is in a Cylinder

Luke’s current project requires a fair amount of geometry. He wasn’t happy with solutions posted on the web so her wrote his own. This article covers the geometry involved in finding if a point is in a cylinder and the corresponding Python code to do the calculation.
LUKE PLANT

Build Your Own AI Assistant with Edge AI

Simplify workloads and elevate customer service. Build customized AI assistants that respond to voice prompts with powerful language and comprehension capabilities. Personalized AI assistance based on your unique needs with Intel’s OpenVINO toolkit.
INTEL CORPORATION sponsor

Customising Pattern Matching Behaviour

Jamie has been doing the Advent of Code and two techniques that come up a lot in Python are iteration and pattern matching. This post talks about how they don’t work well together and what you can do about it.
JAMIE CHANG

Major Releases of Plotly and Dash

Four of Plotly’s open-source libraries are getting major releases. Includes: lightning-fast server-side performance with Narwhals in Plotly.py, a new hooks system for Dash, a new design for Kaleido, and more.
PLOTLY.COM • Shared by Marco Gorelli

The State of Python 2024

This is a guest post on the PyCharm blog by Talk Python host Michael Kennedy who talks about the current state of Python in 2024. Topics include language usage, web frameworks, uv, and more.
MICHAEL KENNEDY

PEP 768: Safe External Debugger Interface for CPython

“This PEP proposes adding a zero-overhead debugging interface to CPython that allows debuggers and profilers to safely attach to running Python processes.”
PYTHON.ORG

Trusted Publishing

It has never been easier to publish your Python packages. This post explains how to setup a workflow that uses Trusted Publishing through GitHub Actions.
CHRISTIAN LEDERMANN

Lazy Self-Installing Python Scripts With uv

This post talks about how to manage all of your one-off small scripts using uv, especially if they have need of third party libraries.
TREY HUNNER

Django 2024 Year in Review

Carlton is a core contributor to Django and this post talks about what happened in 2024 with your favorite web framework.
CARLTON GIBSON

Multimodal Data With LanceDB

Talk Python interviews Chang She and they talk about LanceDB, and open source database for AI.
KENNEDY & SHE podcast

Write pydantic Testing Models as Dictionaries

GITHUB.COM/KKLUONAITIS • Shared by Karolis Kluonaitis podcast

Projects & Code Bagels: Powerful TUI Expense Tracker

GITHUB.COM/ENHANCEDJAX

moka-py: High Performance Caching Library

GITHUB.COM/DELIRO

ridgeplot: Beautiful Ridgeline Plots in Python

GITHUB.COM/TPVASCONCELOS

ddmin-python: Python Version of Delta Debugging Tool

GITHUB.COM/ANDREWCHAMBERS

django-removals: Check for Django Removals and Deprecations

GITHUB.COM/AMBIENT-INNOVATION

Events Weekly Real Python Office Hours Q&A (Virtual)

December 18, 2024
REALPYTHON.COM

PyData Bristol Meetup

December 19, 2024
MEETUP.COM

PyLadies Dublin

December 19, 2024
PYLADIES.COM

Chattanooga Python User Group

December 20 to December 21, 2024
MEETUP.COM

PyKla Monthly Meetup

December 25, 2024
MEETUP.COM

SPb Python Drinkup

December 26, 2024
MEETUP.COM

Happy Pythoning!
This was PyCoder’s Weekly Issue #660.
View in Browser »

[ Subscribe to 🐍 PyCoder’s Weekly 💌 – Get the best Python news, articles, and tutorials delivered to your inbox once a week >> Click here to learn more ]

Categories: FLOSS Project Planets

Freelock Blog: Automatically update a spreadsheet of active products

Planet Drupal - Tue, 2024-12-17 10:00
Automatically update a spreadsheet of active products Anonymous (not verified) Tue, 12/17/2024 - 07:00 Tags Drupal Website management E-Commerce Drupal Planet

One of our e-commerce clients has several thousand active products. As a distributor, their clients are retailers, some of which like having an up-to-date product spreadsheet.

Using the Events, Conditions, and Actions (ECA) module along with a Views Data Export view of all products, we created a view of all the relevant fields that exports a spreadsheet of all their products, and saves it in their private media system once per day.

Categories: FLOSS Project Planets

Real Python: Programming Sockets in Python

Planet Python - Tue, 2024-12-17 09:00

Sockets and the socket API are used to send messages across a network. They provide a form of inter-process communication (IPC). The network can be a logical, local network to the computer, or one that’s physically connected to an external network with its own connections to other networks. The obvious example is the Internet, which you connect to via your ISP.

In this video course, you’ll create:

  • A simple socket server and client
  • An improved version that handles multiple connections simultaneously
  • A server-client application that functions like a full-fledged socket application, complete with its own custom header and content

[ Improve Your Python With 🐍 Python Tricks 💌 – Get a short & sweet Python Trick delivered to your inbox every couple of days. >> Click here to learn more and see examples ]

Categories: FLOSS Project Planets

Qt 6.9 - Android Updates

Planet KDE - Tue, 2024-12-17 08:31

Qt 6.9 brings some useful new features to improve the development process for developers targeting the Android platform. Keep in mind that the following list is not exhaustive of all changes around Qt for Android, and some other features might get their own blog.

Support for Uncompressed Native Libraries

Android 6 and above produces uncompressed native libraries that are only part of the APK by default. However, Qt had this behavior explicitly disabled with the following setting under build.gradle:

android {
...
   packagingOptions.jniLibs.useLegacyPackaging true
...
}

Or via the now deprecated extractNativeLibs manifest flag, because Qt didn't support loading libraries directly from the APK. With this release, such support for reading and loading shared libraries directly from the APK without having them extracted to disk but rather, map those shared libraries to memory. Qt apps and APIs such as QLibrary and QPluginLoader should work the same as before and iterate libraries under the native libraries' directory.

There are few things to consider when this mode is enabled (it's enabled by default on 6.9+). For example, QCoreApplication::applicationDirPath() would now return a path that points to a shared library filename that's inside the app's APK, usually in the form:

/data/data/package-path/base.apk!/lib/arm64-v8a/libmyapp_arm64_v8a.so

Paths returned by similar API calls might have previously returned a writable path, after this however, the returned paths won't be writable.

Enabling this might increase slightly the total size of produced APKs, but saves on disk space after installation and also on update sizes from the Play Store and slightly faster startups. For more information, see Improvements for smaller app downloads on Google Play.

Apps with the older way using compressed libraries still work as before if the relevant flag is explicitly enabled as mentioned above.

New Command-Line App/Test Runner

When developing for Android, you're expected for the most part to be using an IDE that handles the build and deployment and running the app. That process doesn't need to be that complicated, because of that we've added wrapper scripts that handle that job for you. Especially, on CI environments or if you're one of the people who can get by using a lightweight code editor and a terminal for development, this can be quite handy for you. All you need to do is build your project's APK and run the app as follows:

cd build
qt-cmake -S .. -B . -GNinja
cmake --build . --target apk
MY_ENV_VAR=value ./my_app --install --my_arg value

This last command would handle all the underlying adb commands behind the scenes by installing the app to the device, starting it and printing the logcat of the app, making it a more seamless experience and hassle free. For Windows, the runner has the .bat file extension.

You can pass environment variables directly from your shell so they end up being passed to the app's runtime on the device. The same applies for command line arguments, where arguments not reserved by the runner are passed as app's arguments. For all parameters that the wrapper accepts, call it with --help.

The same applies for auto tests, you would be able to simply do the following:

cd build
QTEST_FUNCTION_TIMEOUT=900000 ./tst_android test_case_1

And that would simply handle everything with androidtestrunner under the hood. In this case, you don't need to manually issue the APK build command because androidtestrunner takes care of that.

CMake Android APIs

We keep improving the integration of Android builds with CMake to make it easier to manage and maintain Android-specific requirements. Here’s what’s new:

Add App Permissions

Managing permissions for Android apps often requires manual edits to the AndroidManifest.xml. The newqt_add_android_permission() function removes this hassle by letting you declare permissions directly within your CMakeLists file. This function still allows auto inclusion of Qt modules' managed permissions. This approach simplifies project management, making it more straightforward by keeping project configurations in one place.

Setting an App's Name and Icon

Setting the app's name is now as simple as specifying it with QT_ANDROID_APP_NAME in your CMake configuration. No more manual setting of the app's name in the AndroidManifest.xml file. Similarly, you can now define your app's icon drawable/mipmap in your project's CMake configuration with QT_ANDROID_APP_ICON. This expects the icon drawables to be under the appropriate Android resource directory hierarchy and the use of QT_ANDROID_PACKAGE_SOURCE_DIR.

Setting Java/Kotlin Compile SDK Level

The new property QT_ANDROID_COMPILE_SDK_VERSION allows you to specify the Android SDK version for compiling Java code. With this property, you can ensure your project is always built against the desired API level.

Improved Background Event Management

Background processes, particularly those involving UI updates, can be a source of performance bottlenecks if not managed properly. To address this, now it's possible for developers to set a maximum limit for queued background UI events by setting the new environment variable QT_ANDROID_BACKGROUND_ACTIONS_QUEUE_SIZE.

This enhancement prevents potential memory overload caused by an excessive number of tasks waiting in the queue. By defining a limit, developers can ensure smoother performance and prevent lagging or unresponsive behavior in their apps.

That's all from me this time! As always, we continue to improve Qt for Android, and we welcome your feedback and suggestions on this blog post or over bugreports.qt.io.

 

Categories: FLOSS Project Planets

Pages