Shipping Breaking Changes as the Most Downloaded Python Package
summary
urllib3 claims the title of most-downloaded Python package at about 2.3 billion downloads and is shipping a v2 that actually removes legacy support: dropping Python 2.7 and 3.5, adding type hints for all public APIs, and enforcing modern TLS by default (TLS 1.2+, dropping CommonName). Security fixes continue on 1.26.x backed by Tidelift, PyOpenSSL is being discouraged, and release testing runs Requests and Boto Core test suites to catch breakage early.
AI-written summary · about
chapters (11)
- 0:00Intro
- 2:03The life of a dependency
- 2:46What is urllib3?
- 3:03Why not use httplib?
- 4:11HTTP: Helps Transfer Tabby Pictures
- 8:34Pythons HTTP Story Must be Good
- 9:21Dropping Python 2.7+3.5
- 12:07Type Hints for Public APIS
- 13:37Modern Security by Default
- 17:10The best mitigations are often not code
- 18:52What now?
related talks
32mHow (not) to upgrade a platform
01h 12mPython 3: the Next Generation (is here already)
43mPython 3: ten years later
26mShipping Python Extensions in Rust Two Million Times a Day
41mYou should switch to Python 3 (two years ago)
26mPython 2 to 3: How to Upgrade and What Features to Start Using
30mThe Evolutionary Saga of Python Packaging
26mPython 2 is dead! Drag your old code into the modern age