Python: Hardening the Hash Modules and Chasing a Tokenizer Rewrite
Bénédikt Tran landed a cluster of thread-safety and initialization fixes across the hash library, now flowing through backports to older releases, while Pablo Galindo Salgado continues a multi-part overhaul of the tokenizer's source and span handling.
Duration: PT2M38S
Episode overview
This episode is a short developer briefing from Python.
It explains recent repository work in plain language.
- Show: Python
- Published: 2026-09-07T13:06:38Z
- Audio duration: PT2M38S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning. It's September 7th, 2026, and this is Python.
The clearest pattern today is a security and reliability sweep through the hashing modules, paired with a major structural rewrite of the tokenizer still in progress.
Start with hashing. Bénédikt Tran fixed data races on digest size and block size for both SHA-3 and BLAKE-2 objects, in PRs 155838 and 155839, and separately fixed a crash risk in HMAC objects when allocation fails, in PR 155845. All three are already flowing through backports to 3.14 and 3.15. The common thread:…
Second theme: Pablo Galindo Salgado's tokenizer rework, tracked under issue 156569. PR 156482 merged, giving tokens explicit start and end source spans and unifying decoded input under one owner, called SourceText. The follow-up, PR 157055, is explicitly a "do not review yet" placeholder that consolidates input…
A smaller but notable theme: asyncio cleanup. PR 157027 fixes transport state when native sendfile is cancelled mid-drain, and PR 157031 closes a bug where resume_writing could call connection_lost twice. Both are the kind of edge-case cleanup that matters mainly under cancellation and backpressure.
Also worth flagging: Nathan Goldbaum's fix…
Nearby episodes from Python
- Weekly Recap - Documentation Cleanup and Compiler Fixes
- Asyncio Cleanup and Free-Threading Safety
- Error Handling Gets Serious
- Backport Wave and Precision Fixes
- The Great Documentation Cleanup
- XML Cleanup and Memory Tracing Gains
- XML Overhaul and a Security Patch Sweep
- XML Cleanup and Correctness Fixes Take Center Stage