Vulnerability and malware checks in uv
https://astral.sh/blog/uv-audit
Published: June 8, 2026 00:00
Find vulnerabilities in your Python dependencies with uv audit and prevent installation of known malware with uv's experimental malware detection.
@astral.sh.blog@rss-parrot.net
I'm an automated parrot! I relay a website's RSS feed to the Fediverse. Every time a new post appears in the feed, I toot about it. Follow me to get all new posts in your Mastodon timeline! Brought to you by the RSS Parrot.
---
Astral builds high-performance developer tools for the Python ecosystem: Ruff, ty, and uv, an extremely fast Python package manager, written in Rust.
Site URL: astral.sh/blog
Feed URL: astral.sh/blog/rss.xml
Posts: 37
Followers: 1
Vulnerability and malware checks in uv
https://astral.sh/blog/uv-audit
Published: June 8, 2026 00:00
Find vulnerabilities in your Python dependencies with uv audit and prevent installation of known malware with uv's experimental malware detection.
Open source security at Astral
https://astral.sh/blog/open-source-security-at-astral
Published: April 8, 2026 00:00
Insights and guidance from our engineering team on how Astral secures its tools.
Astral to join OpenAI
Published: March 19, 2026 00:00
Astral has entered into an agreement to join OpenAI as part of the Codex team.
Ruff v0.15.0
https://astral.sh/blog/ruff-v0.15.0
Published: February 3, 2026 00:00
The next stable version of Ruff is out now.
ty: An extremely fast Python type checker and LSP
Published: December 16, 2025 00:00
ty is an extremely fast Python type checker and language server, written in Rust, and designed as an alternative to mypy, Pyright, and Pylance.
Python 3.14
https://astral.sh/blog/python-3.14
Published: October 7, 2025 00:00
Python 3.14 is out today along with updates for Ruff and uv.
Ruff v0.13.0
https://astral.sh/blog/ruff-v0.13.0
Published: September 10, 2025 00:00
The next stable version of Ruff is out now.
Astral OSS Fund: One Year Later
https://astral.sh/blog/astral-oss-fund-one-year-later
Published: August 28, 2025 00:00
One year later: Astral donated $70,000 to open source projects and is pledging another $44,000 for year two.
A variant-enabled build of uv
https://astral.sh/blog/wheel-variants
Published: August 13, 2025 00:00
In collaboration with PyTorch, NVIDIA, and Quansight, we've released an experimental build of uv with support for wheel variants.
pyx: a Python-native package registry, now in Beta
https://astral.sh/blog/introducing-pyx
Published: August 13, 2025 00:00
pyx is a Python-native package registry from the creators of uv.
uv security advisory: ZIP payload obfuscation
https://astral.sh/blog/uv-security-advisory-cve-2025-54368
Published: August 7, 2025 00:00
We're releasing a security advisory for uv due to ZIP parsing differentials which allow an attacker to bypass common Python security scanners.
Ruff v0.12.0
https://astral.sh/blog/ruff-v0.12.0
Published: June 12, 2025 00:00
The next stable version of Ruff is out now.
Ruff v0.10.0
https://astral.sh/blog/ruff-v0.10.0
Published: March 13, 2025 00:00
The next stable version of Ruff is out now.
Ruff v0.9.0
https://astral.sh/blog/ruff-v0.9.0
Published: January 9, 2025 00:00
The new 2025 formatter style guide, rule stabilizations, and more
A new home for python-build-standalone
https://astral.sh/blog/python-build-standalone
Published: December 3, 2024 00:00
Astral is taking stewardship of python-build-standalone, Gregory Szorc's foundational project for installing portable Python distributions.
Ruff v0.8.0
https://astral.sh/blog/ruff-v0.8.0
Published: November 21, 2024 00:00
The next stable version of Ruff is out now.
Ruff v0.7.0
https://astral.sh/blog/ruff-v0.7.0
Published: October 17, 2024 00:00
The next stable version of Ruff is out now.
uv: Unified Python packaging
https://astral.sh/blog/uv-unified-python-packaging
Published: August 20, 2024 00:00
Manage entire Python projects and even Python itself with a single unified tool.
Ruff v0.6.0
https://astral.sh/blog/ruff-v0.6.0
Published: August 15, 2024 00:00
The next stable version of Ruff is out now.
Announcing the Astral OSS Fund
https://astral.sh/blog/astral-oss-fund
Published: July 18, 2024 00:00
Astral is creating a fund to support open source projects and maintainers.
Ruff v0.5.0
https://astral.sh/blog/ruff-v0.5.0
Published: June 27, 2024 00:00
The next stable version of Ruff is out now.
The Ruff Language Server
https://astral.sh/blog/ruff-v0.4.5
Published: May 22, 2024 00:00
Ruff's integrated language server is now in Beta.
Ruff v0.4.0
https://astral.sh/blog/ruff-v0.4.0
Published: April 18, 2024 00:00
Ruff migrates to a hand-written recursive descent parser: >2x faster, with error recovery capabilities.
Ruff v0.3.0
https://astral.sh/blog/ruff-v0.3.0
Published: February 29, 2024 00:00
The next stable version of Ruff is out now.
uv: Python packaging in Rust
Published: February 15, 2024 00:00
uv is an extremely fast Python package installer and resolver, designed as a drop-in alternative to pip and pip-tools.
Ruff v0.2.0
https://astral.sh/blog/ruff-v0.2.0
Published: February 1, 2024 00:00
The next stable version of Ruff is out now.
Ruff v0.1.8
https://astral.sh/blog/ruff-v0.1.8
Published: December 13, 2023 00:00
Ruff adds support for formatting code snippets in docstrings and auto-quoting type annotations.
Ruff v0.1.5
https://astral.sh/blog/ruff-v0.1.5
Published: November 9, 2023 00:00
Ruff adds editor support for Jupyter Notebooks, support for `flake8-trio`, and more.
The Ruff Formatter
https://astral.sh/blog/the-ruff-formatter
Published: October 24, 2023 00:00
Ruff's formatter is over 30x faster than existing tools, while maintaining >99.9% compatibility with Black.
Ruff v0.1.0
https://astral.sh/blog/ruff-v0.1.0
Published: October 12, 2023 00:00
Ruff adds a versioning policy, fix safety levels, and a preview mode for unstable features.
Ruff v0.0.292
https://astral.sh/blog/ruff-v0.0.292
Published: October 5, 2023 00:00
Ruff adds support for Python 3.12, plus new rules, bug fixes, and more.
Ruff v0.0.285
https://astral.sh/blog/ruff-v0.0.285
Published: August 17, 2023 00:00
Ruff stabilizes support for Jupyter Notebooks, adds new rules, a bunch of bug fixes, and more.
Ruff v0.0.283
https://astral.sh/blog/ruff-v0.0.283
Published: August 8, 2023 00:00
Ruff supports PEP 695, type checking rules are applied to all files, a bunch of bug fixes, and more.
Ruff v0.0.281
https://astral.sh/blog/ruff-v0.0.281
Published: July 31, 2023 00:00
Ruff's lexer is now 2-3x faster, plus new rules for type stubs, a bunch of bug fixes, and more.
Ruff v0.0.278
https://astral.sh/blog/ruff-v0.0.278
Published: July 12, 2023 00:00
Improved suppression comment handling, new correctness-oriented rules, bug fixes, and more.
Ruff v0.0.276
https://astral.sh/blog/ruff-v0.0.276
Published: July 3, 2023 00:00
Experimental support for Jupyter Notebooks, new performance-oriented rules, bug fixes, and more.
Announcing Astral, the company behind Ruff
https://astral.sh/blog/announcing-astral-the-company-behind-ruff
Published: April 18, 2023 00:00
Astral’s mission is to make the Python ecosystem more productive by building high-performance developer tools, starting with Ruff.