Python 3.12.14, 3.11.16, and 3.10.21 have been released as security-fix-only updates. These releases address multiple critical vulnerabilities including tarfile hardening, path-traversal bypasses, and various CVEs related to Python's standard library. Users on these versions, especially those handling untrusted tarballs, are strongly advised to update.Codeberg's recent ban on projects primarily generated by AI is being examined for its implications as a potential GitHub alternative. This policy raises questions about whether code hosting platforms should regulate the creation process of software versus focusing on its behavior and impact. The difficulty in defining and enforcing "mostly generated" code presents a significant challenge to this approach.Brett Cannon has highlighted missing components for achieving reproducible builds on PyPI. Currently, there's no standardized method to record the exact source code a distribution originated from or the specific build tools used. Implementing solutions for these gaps would involve modifying sdist metadata and potentially introducing an sdist version 2.A major focus in reproducible builds is ensuring the integrity of the software supply chain. The goal is to make reproduction a seamless process for creators while empowering build backends and installers with the necessary information. This could lead to PyPI displaying independently reproduced builds, offering enhanced trust for users.Pydantic Logfire is sponsoring the episode, offering observability for AI applications. It provides unified tracing across agents, LLMs, APIs, and databases, down to the infrastructure level. Logfire utilizes OpenTelemetry and allows querying all data with Postgres-compatible SQL.The sponsor emphasizes that even AI applications are fundamentally engineering efforts. They offer a free tier and an easy onboarding process for developers to integrate Logfire into their applications.In other news, uv has transitioned to preferring post-quantum key exchange for enhanced security in its operations. This update reflects a growing trend towards incorporating future-proof cryptographic methods.Other "extra" items include upgrades to MCP servers, syncing agentsview via postgres, new offerings for Talk Python courses, and the release of the "Lean TDD" audiobook. The episode concludes with a brief joke about a dog.