--- title: PyCon US 2026 wraps up, Django's survey confirms uv and... description: PyCon US 2026 dominated the week, from CPython's official RISC-V tier-3 support to deep-dive talks on the GIL, memory management, and free-threading. The fifth... canonical: https://daily.dev/posts/pycon-us-2026-wraps-up-django-s-survey-confirms-uv-and-ruff-won-ioy3pk61g twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: PyCon US 2026 wraps up, Django's survey confirms uv and Ruff won | daily.dev og:description: PyCon US 2026 dominated the week, from CPython's official RISC-V tier-3 support to deep-dive talks on the GIL, memory management, and free-threading. The fifth... og:url: https://daily.dev/posts/pycon-us-2026-wraps-up-django-s-survey-confirms-uv-and-ruff-won-ioy3pk61g og:image: https://api.daily.dev/og/posts/IOY3pK61g.png og:image:alt: PyCon US 2026 wraps up, Django's survey confirms uv and Ruff won og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # PyCon US 2026 wraps up, Django's survey confirms uv and Ruff won **[Python Digest](https://daily.dev/sources/python_digest)** · 4 min read · 0 upvotes · 0 comments ## Summary PyCon US 2026 dominated the week, from CPython's official RISC-V tier-3 support to deep-dive talks on the GIL, memory management, and free-threading. The fifth annual Django Developers Survey confirmed what most of us already suspected: uv and Ruff have taken over Python tooling, and AI coding tools are now mainstream rather than novel. Security news was heavier than usual, with a Ray CVE turning developer laptops into the actual attack surface and the PSF detailing a year of escalating PyPI supply-chain attacks. Polars also keeps shipping fast, with a new GPU streaming backend and a 1.44 release adding correlated subqueries. ## Content **TLDR:** PyCon US 2026 dominated the week, from CPython's official RISC-V tier-3 support to deep-dive talks on the GIL, memory management, and free-threading. The fifth annual Django Developers Survey confirmed what most of us already suspected: uv and Ruff have taken over Python tooling, and AI coding tools are now mainstream rather than novel. Security news was heavier than usual, with a Ray CVE turning developer laptops into the actual attack surface and the PSF detailing a year of escalating PyPI supply-chain attacks. Polars also keeps shipping fast, with a new GPU streaming backend and a 1.44 release adding correlated subqueries. --- ## Django Developers Survey confirms uv and Ruff have won, AI tools are now routine Nearly 3,500 developers across 40+ countries responded to the fifth annual Django survey. uv adoption hit 43%, Ruff is now the top code-quality tool at 43%, and 43% of respondents are already on Django 6.0. Only 10% of developers avoid AI coding tools entirely, with Claude Code (35%), ChatGPT (33%), and GitHub Copilot (23%) leading, though usage splits between chat-based (56%) and more autonomous agent workflows (27%). Htmx usage jumped from 5% to 34% over five years while React held flat around 37-38%. [Read more](https://daily.dev/feed-by-ids?id=yeWLc1N0L&id=x3xNeX97t) ## PyCon US 2026 closes out with RISC-V support, a new profiler, and big turnout numbers CPython officially added tier-3 support for RISC-V under PEP 11, the result of months of work from the RISE Project and contributors testing on real hardware. The Steering Council panel previewed Python 3.15 features including lazy imports, frozen dict, colorized tracebacks, and a new sampling profiler called Tachyon. The conference itself drew 2,003 attendees and 148 presenters, and raised $60,000 for PyLadies. Conference talks also went deep on CPython internals: Mark Shannon covered memory allocation and planned free-list improvements, Bruce Eckel demoed race conditions exposed by free-threaded Python, and Carl Meyer walked through how the ty type checker uses Salsa for incremental, lazy analysis. [Read more](https://daily.dev/feed-by-ids?id=cyYPbsSm2&id=QuE8WlO0h&id=rxuXAEVjR&id=vEzp47CjU&id=aOhjxvnAg&id=4JBTKHvvH&id=5DLLk8UnN) ## Ray CVE turns developer laptops, not clusters, into the attack surface CVE-2025-62593 lets Firefox and Safari bypass Ray's User-Agent check via DNS rebinding to reach the Jobs API on localhost:8265, enabling arbitrary code execution after a phishing click or malicious ad. CISA added it to its Known Exploited Vulnerabilities catalog on August 17 with a three-day federal patch deadline, citing active exploitation. Ray 2.52.0 patches the flaw and adds token authentication, but auth is still off by default, so this one's on you to enable. [Read more](https://daily.dev/posts/eiucHt1yN) ## PSF security engineers recap a year of escalating PyPI attacks Mike Fiedler reported over 2,800 human-reviewed malware submissions to PyPI since last PyCon, including the LightLLM transitive dependency compromise that hit 119,000 downloads in a 2.5-hour window before takedown. PyPI passed a second Trail of Bits audit, fixing two high-severity findings including a silent permission transfer bug. Seth Larson flagged rising CVE counts for Python and pip (21 last year, 22 so far this year, ~65 projected) and a new PEP 811 governance document adding nine members to the Python Security Response Team. Both engineers are pushing trusted publishing and dependency pinning as the near-term fixes worth actually adopting. [Read more](https://daily.dev/posts/cxJFyaqW4) --- ## Also notable - **Polars GPU engine gets a streaming backend:** The new RapidsMPF-based streaming backend in cudf-polars 26.06 delivers single-GPU speedups of 3.2x on PDS-H and scales to 23.2x across eight GPUs at 3TB scale. [Read more](https://daily.dev/posts/m46JTgEp2) - **Polars 1.44 adds correlated subqueries and adaptive cloud I/O throttling:** The SQL layer now supports correlated subqueries in WHERE, SELECT, EXISTS, and IN clauses, and a new AIMD rate limiter paces S3/GCS/Azure requests to cut 429/503 throttling errors. [Read more](https://daily.dev/posts/NYX9IEbFN) - **Ruff, uv, and ty get 8-15% faster from a new PGO build step:** Profile-guided optimization dropped binary size 6-13% and improved runtime speed 8-15% across all three Rust-based tools on hold-out benchmarks. [Read more](https://daily.dev/posts/f6avWdH9v) - **Slopsquatting detector targets AI-hallucinated PyPI package names:** A two-layer detector combines a deterministic PyPI existence check with a Random Forest classifier trained on package metadata to catch attacker-registered packages that mimic AI-hallucinated names, though no public tool exists yet so manual verification remains the fallback. [Read more](https://daily.dev/posts/HayjpDmHa) - **Vercel adds CDN-level routing rules for Python apps:** FastAPI, Django, and Flask projects can now rewrite requests or set headers at the CDN layer via dashboard, CLI, SDK, or vercel.json, with changes applying instantly across regions without a redeploy. [Read more](https://daily.dev/posts/3njQYPlqs) ## Similar posts on daily.dev - [The State of Django 2026: Boring is so back](https://daily.dev/posts/the-state-of-django-2026-boring-is-so-back-yewlc1n0l) · JetBrains · 0 upvotes · 0 comments - [Python Developers Survey 2026](https://daily.dev/posts/python-developers-survey-2026-isli6yjmy) · Django News · 0 upvotes · 0 comments - [PyCoder’s Weekly](https://daily.dev/posts/pycoder-s-weekly-6ho8fly1b) · Planet Python · 0 upvotes · 0 comments - [Python Gains frozendict and Other Python News for March 2026 – Real Python](https://daily.dev/posts/python-gains-frozendict-and-other-python-news-for-march-2026-real-python-pllbqmb7u) · Real Python · 11 upvotes · 0 comments --- Tags: [#python](https://daily.dev/tags/python), [#django](https://daily.dev/tags/django) [View this post on daily.dev](https://daily.dev/posts/pycon-us-2026-wraps-up-django-s-survey-confirms-uv-and-ruff-won-ioy3pk61g) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/pycon-us-2026-wraps-up-django-s-survey-confirms-uv-and-ruff-won-ioy3pk61g","headline":"PyCon US 2026 wraps up, Django's survey confirms uv and Ruff won","text":"PyCon US 2026 dominated the week, from CPython's official RISC-V tier-3 support to deep-dive talks on the GIL, memory management, and free-threading. The fifth annual Django Developers Survey confirmed what most of us already suspected: uv and Ruff have taken over Python tooling, and AI coding tools are now mainstream rather than novel. Security news was heavier than usual, with a Ray CVE turning developer laptops into the actual attack surface and the PSF detailing a year of escalating PyPI supply-chain attacks. Polars also keeps shipping fast, with a new GPU streaming backend and a 1.44 release adding correlated subqueries.","url":"https://daily.dev/posts/pycon-us-2026-wraps-up-django-s-survey-confirms-uv-and-ruff-won-ioy3pk61g","datePublished":"2026-08-31T04:18:08.037Z","dateModified":"2026-08-31T04:18:28.775Z","author":{"@type":"Organization","name":"Python Digest","logo":"https://media.daily.dev/image/upload/s--_8Rk7XLS--/f_auto,q_auto/v1776326905/logos/python_digest","url":"https://daily.dev/sources/python_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/python_digest","name":"Python Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Python Digest","item":"https://daily.dev/sources/python_digest"},{"@type":"ListItem","position":3,"name":"PyCon US 2026 wraps up, Django's survey confirms uv and Ruff won"}]} ```