Repository navigation
The first stable SwiftPython release preserves the public interfaces and existing wire versions of Preview 1.7 while updating the bundled interpreter and certificate trust.
- Python 3.13.17 with explicit security backports for CVE-2026-114583 and CVE-2026-115557.
- VM image provisioning builds a patched Python 3.12.15 with the same protections and current trust/bootstrap inputs, preserving the Linux package ABI.
- Native shared-ring streaming publishes headers atomically and preserves concurrent abort flags. It requires a matching worker that declares
stream.atomic-ring.v1; older workers are refused safely for this operation. - Tar extraction rejects links that replace the extraction destination.
- TLS verification rejects the eight compromised eMudhra intermediate public keys, including when an older CA bundle is supplied.
- The October 20, 2026 Mozilla CA bundle and ensurepip with pip 26.2.2 / certifi 2026.10.19.
Applications must adopt this SDK release and refresh their own package environments. Existing installed applications and virtual environments are not updated by installing the SDK.