All Articles

69 articles on upgrading Python, Django, Flask, and managing dependencies

Reducing pytest Suite Runtime from 45 Minutes to 6 Minutes with pytest-xdist Parallelization

pytest-xdist parallel testing: Speed up pytest suite 45min→6min (7.5x) on multi-core CPUs. pytest -n auto detects cores, -n 8 manual. Markers for serial tests, pytest.ini config. Benchmarks Python 3.12, 1000+ tests. Handles DB fixtures.

Mar 15, 2026

pytest pytest-xdist testing parallel performance python ci-cd

Running pip-audit in CI/CD: Failing Builds on Critical and High Severity Vulnerabilities

Integrate pip-audit into GitHub Actions, GitLab CI, and Jenkins: fail builds on critical and high severity vulnerabilities only. Scripts for JSON severity filtering, ignore rules. Secure Python dependencies in CI/CD pipelines.

Mar 15, 2026

pip-audit CI/CD GitHub Actions GitLab CI Jenkins Python security vulnerability audit dependency scanning devsecops critical vulnerabilities high severity

Securing Your Python Supply Chain: Scanning poetry.lock for Compromised Maintainers

A script to check poetry.lock files for packages maintained by known compromised PyPI accounts. Queries PyPI API and cross-references a curated list; suitable for CI/CD integration.

Mar 15, 2026

python poetry poetry.lock supply-chain-security pypi maintainers compromised devsecops security audit

Security & Vulnerabilities (CVEs, pip-audit, safety): Python Dependency Auditing Guide

Secure your Python projects: Detect CVEs in dependencies using pip-audit and safety CLI. Installation, usage examples, benchmarks, CI integration for requirements.txt, Poetry, uv. Fix vulnerabilities fast – pip-audit tutorial, safety check best practices 2026.

Mar 15, 2026

python security vulnerabilities cve pip-audit safety dependency-security devsecops pip-tools

Serving FastAPI Behind Traefik with Automatic HTTPS and Path-Based Routing

Deploy FastAPI behind Traefik using Docker Compose for automatic HTTPS via Let's Encrypt and path-based routing. Covers docker-compose labels, middleware for prefix stripping, and production considerations.

Mar 15, 2026

fastapi traefik docker https reverse-proxy routing deployment python api production

Comparing Mise and Docker Python Images for Local Development Performance

Explore using mise instead of Docker for Python images in local development to potentially reduce startup and iteration times. Includes benchmarks from Ubuntu 24.04 and M2 Mac, migration steps, and trade-offs.

Mar 15, 2026

python docker mise devtools performance local-development version-management

tox.ini Configuration for Testing Python Packages Across 3.10‑3.13

Example tox.ini for multi‑Python testing (py310‑py313) with pytest, coverage, mypy, and ruff. Includes CI, benchmarks, and pyproject.toml integration.

Mar 15, 2026

tox python testing py310 py311 py312 py313 pytest coverage mypy ruff ci-cd

Using pytest Fixtures with FastAPI TestClient for Database Transaction Rollbacks

FastAPI pytest fixtures TestClient database transaction rollbacks: Isolate tests, zero data pollution. SQLAlchemy async sessions, pytest-asyncio override dependency. 500+ tests/s clean state. Code examples, conftest.py fixture, session.begin()/rollback(). Keywords: 'fastapi pytest database testing', 'fastapi testclient fixtures rollback', 'pytest fastapi sqlalchemy transaction rollback', 'fastapi testing isolation', 'pytest fixtures testclient'.

Mar 15, 2026

fastapi pytest testing database sqlalchemy fixtures testclient python asyncio

Poetry audit vs pip-audit vs safety: PyPI Vulnerability Coverage Comparison

We compare poetry audit, pip-audit, and safety CLI across vulnerability detection coverage, speed, data sources, output formats, and CI integration. Benchmarks on Flask, Django, and FastAPI projects reveal trade-offs for different workflows.

python poetry-audit pip-audit safety-cli vulnerabilities pypi security-audit dependency-scanner devsecops pip-tools poetry pipenv

All Articles

Reducing pytest Suite Runtime from 45 Minutes to 6 Minutes with pytest-xdist Parallelization

Running pip-audit in CI/CD: Failing Builds on Critical and High Severity Vulnerabilities

Securing Your Python Supply Chain: Scanning poetry.lock for Compromised Maintainers

Security &amp; Vulnerabilities (CVEs, pip-audit, safety): Python Dependency Auditing Guide

Serving FastAPI Behind Traefik with Automatic HTTPS and Path-Based Routing

Comparing Mise and Docker Python Images for Local Development Performance

tox.ini Configuration for Testing Python Packages Across 3.10‑3.13

Using pytest Fixtures with FastAPI TestClient for Database Transaction Rollbacks

Poetry audit vs pip-audit vs safety: PyPI Vulnerability Coverage Comparison

Sponsored by Durable Programming

Security & Vulnerabilities (CVEs, pip-audit, safety): Python Dependency Auditing Guide