28 Pull requests merged by 7 people

• chore(deps): upgrade Python runtime version

  #18285 merged Jun 17, 2025

• chore: ignore Simple API templates from djlint formatting

  #18276 merged Jun 17, 2025

• Use session expiration for all authentication cookies

  #18269 merged Jun 13, 2025

• chore: ignore template reformat from blame

  #18267 merged Jun 13, 2025

• lint: reformat templates with djlint

  #18266 merged Jun 13, 2025

• chore(deps): replace curlylint with djlint

  #18265 merged Jun 13, 2025

• update_bigquery_release_files: disable built-in retries from google BigQuery client

  #18260 merged Jun 12, 2025

• set timeout on calls to bigquery in sync task

  #18259 merged Jun 12, 2025

• Combined PRs

  #18258 merged Jun 12, 2025

• Permissions.AdminProhibitedProjectsRelease

  #18257 merged Jun 12, 2025

• restore make blog and make totp

  #18252 merged Jun 11, 2025

• Remove all platform-level dependencies

  #18150 merged Jun 11, 2025

• chore(deps): bump github/codeql-action from 3.28.18 to 3.28.19

  #18230 merged Jun 11, 2025

• Combined PRs

  #18250 merged Jun 11, 2025

• Upgrade to Postgres 17.5

  #18249 merged Jun 11, 2025

• feat: unverify expired domains

  #18055 merged Jun 10, 2025

• chore(deps): bump requests from 2.32.3 to 2.32.4

  #18245 merged Jun 10, 2025

• blog: nitpicks

  #18130 merged Jun 10, 2025

• allow outsized headers on the upload endpoint

  #18228 merged Jun 3, 2025

• chore(deps): bump pypi-attestations from 0.0.26 to 0.0.27

  #18221 merged Jun 3, 2025

• docs: link to PyPI user docs more

  #18164 merged Jun 2, 2025

• Add workaround in dev docs for issue with OpenSearch image

  #18168 merged Jun 2, 2025

• Combined PRs

  #18220 merged Jun 2, 2025

• docs(dev): add meta docs on writing docs

  #18163 merged Jun 2, 2025

• chore: ignore noisy commits

  #18219 merged Jun 2, 2025

• chore: replace license header in files

  #18217 merged Jun 2, 2025

• chore: update license check to allow spdx header

  #18205 merged Jun 2, 2025

• chore(dev): update service versions

  #18200 merged Jun 2, 2025

19 Pull requests opened by 7 people

• lint: add zizmor check

  #18156 opened May 19, 2025

• oidc: Refactor lookup strategies into single functions

  #18169 opened May 21, 2025

• Demonstration finite state machine for PEP 694

  #18174 opened May 22, 2025

• Translations update from Hosted Weblate

  #18218 opened Jun 2, 2025

• oidc: add expiry key to mint_token response

  #18238 opened Jun 7, 2025

• chore(deps): bump stripe from 11.6.0 to 12.2.0

  #18261 opened Jun 13, 2025

• chore(deps): bump grpcio from 1.72.1 to 1.73.0

  #18262 opened Jun 13, 2025

• chore(deps): bump sentry-sdk from 2.29.1 to 2.30.0

  #18263 opened Jun 13, 2025

• chore(deps): bump typing-extensions from 4.13.2 to 4.14.0

  #18264 opened Jun 13, 2025

• docs: remove references to SQS

  #18268 opened Jun 13, 2025

• chore(deps): bump watchfiles from 1.0.5 to 1.1.0

  #18273 opened Jun 16, 2025

• chore(deps): bump certifi from 2025.4.26 to 2025.6.15

  #18274 opened Jun 16, 2025

• perf: update template renderer paths to use package qualifiers

  #18277 opened Jun 16, 2025

• chore(deps): bump protobuf from 5.29.3 to 5.29.5 in /requirements in the pip group across 1 directory

  #18278 opened Jun 17, 2025

• chore(deps): bump alembic from 1.16.1 to 1.16.2

  #18279 opened Jun 17, 2025

• chore(deps): bump webauthn from 2.5.2 to 2.6.0

  #18280 opened Jun 17, 2025

• chore(deps): bump opensearch-py from 2.8.0 to 3.0.0

  #18281 opened Jun 17, 2025

• chore(deps): bump limits from 5.2.0 to 5.4.0

  #18282 opened Jun 17, 2025

• chore(deps): bump mypy from 1.16.0 to 1.16.1

  #18283 opened Jun 17, 2025

17 Issues closed by 4 people

• revert HTML page change, broke artifactory

  #18275 closed Jun 17, 2025

• Unable to log out of my account

  #18180 closed Jun 13, 2025

• Test using redis as the celery broker

  #13702 closed Jun 12, 2025

• 账号无法登录

  #18248 closed Jun 12, 2025

• Create permissions for Support role to release prohibited names

  #18251 closed Jun 12, 2025

• Update the IP150 (<2020 version) to new version IP150+MQ (post 2020 standard)

  #18236 closed Jun 5, 2025

• Ongoing: PyPI code freeze

  #18032 closed Jun 2, 2025

• mcp-youtube-search google-adk helpers

  #18201 closed May 30, 2025

• Show a project dependencies and dependants

  #18196 closed May 29, 2025

• Github project URL is not marked as "verified" despite self-link

  #16836 closed May 24, 2025

• UI to communicate with authors

  #933 closed May 20, 2025

• "login" or dry-run validity check for tokens

  #6407 closed May 20, 2025

• Support for package download stats

  #699 closed May 20, 2025

• Link to public package security info on package detail pages

  #9760 closed May 20, 2025

• pip3 search finds only libraries with whitespace/dash after search term

  #5506 closed May 20, 2025

• user page splashes two-factor mandate, but fails to identify project.

  #11820 closed May 20, 2025

• Disallow Deletions of Critical Projects

  #11798 closed May 20, 2025

11 Issues opened by 9 people

• 📬 Title: Proposal — PyPI-Wide Compatibility & Conflict Database with Optional Telemetry Support

  #18271 opened Jun 16, 2025

• 2FA page is too wide

  #18270 opened Jun 14, 2025

• Support riscv64 platform

  #18243 opened Jun 10, 2025

• Trusted Publishing: include an `expiration` key in the `mint-token` response?

  #18235 opened Jun 5, 2025

• Per-org trusted publishers

  #18229 opened Jun 3, 2025

• Trusted publishers: re-group related data on project pages

  #18199 opened May 29, 2025

• Unable to setup two factor authentication (2FA) with either google authenticator and FreeOTP+

  #18194 opened May 27, 2025

• Yanked info box breaks layout

  #18186 opened May 27, 2025

• Bug: transferring a owner-roled project to an organization drops the owner role

  #18179 opened May 23, 2025

• Bug: "$PROJECT has been added to the $ORG organization" email does not mention actor

  #18178 opened May 23, 2025

• The structure of the different headings is incorrect

  #18162 opened May 20, 2025

21 Unresolved conversations

Sometimes conversations happen on old items that aren’t yet closed. Here is a list of all the Issues and Pull Requests with unresolved conversations.

• Trusted publishing: Support for GitHub reusable workflows

  #11096 commented on May 20, 2025 • 0 new comments

• Publish analytics data

  #7464 commented on May 20, 2025 • 0 new comments

• question: do users search by maintainer wallet name/username?

  #3527 commented on May 20, 2025 • 0 new comments

• Security Notification Systems for Python Packages

  #798 commented on May 20, 2025 • 0 new comments

• Document Our Endpoint.. Priority? SLA? Some Other Name?

  #11559 commented on May 20, 2025 • 0 new comments

• Allow scoped tokens with rights for multiple projects

  #6292 commented on May 20, 2025 • 0 new comments

• "pip install x" might work or not

  #3006 commented on May 20, 2025 • 0 new comments

• Add API explorer tool

  #2929 commented on May 20, 2025 • 0 new comments

• Document how files are stored and what happens when they are removed

  #13631 commented on May 21, 2025 • 0 new comments

• Manage projects with namespaces

  #2589 commented on May 22, 2025 • 0 new comments

• Proposal: Add support for private packages via token-authenticated downloads

  #18080 commented on May 24, 2025 • 0 new comments

• Unable to provision TOTP

  #14710 commented on May 28, 2025 • 0 new comments

• Add PyPI User API

  #15769 commented on May 30, 2025 • 0 new comments

• Dependency and Reverse Dependency

  #789 commented on May 31, 2025 • 0 new comments

• Add ability for users to change typo-ed email addresses before verification

  #18079 commented on Jun 3, 2025 • 0 new comments

• `ultranormalize_name` function should strip trailing digits

  #17774 commented on Jun 8, 2025 • 0 new comments

• PEP 694 (resolved merge conflicts from PR #8941)

  #16277 commented on May 21, 2025 • 0 new comments

• run our docker ci on gha runners directly

  #17442 commented on Jun 11, 2025 • 0 new comments

• chore(dev): replace redis with valkey

  #17861 commented on Jun 11, 2025 • 0 new comments

• base: replace PEP 541 link with user documentation link

  #17999 commented on Jun 4, 2025 • 0 new comments

• chore(deps-dev): bump pip from 25.0.1 to 25.1.1

  #18084 commented on Jun 12, 2025 • 0 new comments