2026-10-12

AI Frontier Daily Briefing: 2026-10-12

85 stories on the 2026-10-11 (UTC) HN front page, 20 with more comments than upvotes. The top story is outside AI: a third Yandex Cloud data center was hit (523/633), with the BBC reporting a third strike on Yandex and Reuters covering an expanded target list of tech sites inside Russia, plus a drone flying 1,700 km to hit a Lukoil refinery. The RAM shortage is resurrecting DDR4: a 32GB Corsair kit costs $620 in DDR5 vs $260 in DDR4, Gigabyte announced new LGA 1700 boards with chips expected in early 2027, and AMD's AM4 platform returns with a 10th-anniversary Ryzen 7 5800X3D (258/264). Nature publishes byteification: a two-stage retrofit turning subword models into byte-level models, directly relevant to code and biological sequences (103/22). Judgment is today's theme: one developer paid ~€150 to watch real people fail at his README (347/179); a quoted tilde in PATH never expands to HOME, a proven PATH-hijack path (190/126); 500B+ tokens let AI agents decompile a commercial FPS, recovering 99% of functions with 83% byte-exact, validated by a machine-checkable byte-matching oracle (126/94); Terence Tao's Caltech 'Math 2.0' slides declare the shift from proof scarcity to proof abundance (259/314); DHH's AI-assisted triple rewrite of Campfire Once buckles under load, with the Rust build delivering 1% of notifications in closed-loop tests (271/105); a Berkeley RCT with 1,222 participants finds 10 minutes of AI use erodes persistence once the tool is withdrawn (61/71). Big-tech moves: Nadella says to assume all AI models are compromised and wants an 'emergency brake' (42/73); Anthropic bans 'sustained and needless' cruelty to Claude effective Nov 12 while critics say it won't say what the policy protects (52/52, 67/140); Nicolas Cage refuses an AI waiver and says he won't work with Amazon again (74/22); the BBC reports Deezer says 44% of uploaded tracks are AI-generated and a 'human premium' is emerging (69/109). Power and infrastructure: Texas's interconnection queue hits 474 GW, ~90% data centers, with a $100k study fee plus $50k/MW deposit and a full Batch Zero pause (30/65). Tools: WallHop replaces dead 12ft.io (267/117); local-first dictation BetterWispr, Apache 2.0 (124/77); sqlite-multiwriter removes SQLite's single-writer limit at 5.7x throughput with 16 writers (21/0); $25-to-train speech recognition tiny-audio hits 1.8% WER on LibriSpeech (8/0); open-source Office replications wordcraft/gridcraft come from the same dev whose Adobe-clone post was deleted by HN mods (55/68); the CIA World Factbook is dead and a Claude-assisted recreation ships an API (52/50); Valen proposes group borrowing, a looser alternative to Rust's borrow checker (118/71); agent-native tooling: a Claude Code stand-up-call viewer (47/48) and GSD's 19-tool task-management MCP server (7/3). Added once the day settled: Karpathy on the widening LLM capability gap (509/749), Sakana's two-round multi-agent self-improvement (118/71), the 722-point passkeys debate (722/409), NYC click-to-cancel in effect Oct 1 (506/248), Nitter's two cease-and-desist letters and public plea (458/241), Nikon's stripped AI microscopy prize (38/58), and SQLAlchemy 2.1.0 (25/11). 30 items.

85 stories on the 2026-10-11 (UTC) HN front page, 20 with more comments than upvotes. Today’s top story sits outside AI: Ukraine hit a third Yandex Cloud data center, and the 633-comment thread argues over whether civilian cloud infrastructure is a legitimate target. On the AI side, Terence Tao used a Caltech talk to declare mathematics is entering an era of proof abundance, Satya Nadella wants every model treated as compromised, and Anthropic started banning users from being cruel to Claude. On the tools side, DDR4 is back, SQLite’s single-writer limit fell, and $25 buys you a trainable speech recognizer. Once the day fully settled, seven more stories came in: Karpathy says the gap between people who can and can’t use models is widening (749 comments), Sakana let one model rewrite its own workflow, “Passkeys are a trap” took the day’s top score, NYC’s click-to-cancel rule took effect, Nitter got two cease-and-desist letters from X, Nikon stripped an AI-generated microscopy winner, and SQLAlchemy 2.1.0 shipped. 30 items.

1. Third Yandex Cloud data center hit, and HN argues the target list

Since when is a cloud provider a frontline target?

According to Yandex Cloud’s status page, a third data center was hit, with 523 points and 633 comments — the most discussed thread of the day. Elsewhere on the same front page, the BBC reported a third strike on Yandex data centers, Reuters covered Ukraine expanding its list of tech-site targets inside Russia, and a separate story described a drone flying 1,700 km to hit a Lukoil refinery (27 points). The 633-comment debate centers on whether cloud infrastructure carrying mostly civilian workloads counts as a military target. If any of your workloads sit on Russia-region cloud, now is the time to walk through the backup and exit plan. Source · HN discussion

2. 32GB for $620 vs $260: the RAM shortage is resurrecting DDR4

So the old kit in your drawer is an asset now?

The Verge reports that relentless RAM price hikes are reversing the memory generational cycle: Gigabyte announced two motherboard lines supporting new processors on Intel’s LGA 1700 socket, with chips expected in early 2027. The socket debuted with 2021’s Alder Lake, abandoned in 2024 for DDR5-only, and is now reviving with dual-format support. On the AMD side, Gigabyte announced new AM4 boards in August alongside a 10th-anniversary relaunch of the Ryzen 7 5800X3D, also DDR4-compatible. The hard number: a 32GB Corsair Vengeance kit costs $620 in DDR5 and $260 in DDR4. 258 points, 264 comments. If you’re building or upgrading soon, DDR4 platform value just went up. Source · HN discussion

3. Nature paper retrofits language models to run over bytes

Someone is finally cracking the tokenizer shell open?

Published in Nature on October 7, “Retrofitting language models to operate over bytes” earned 103 points. Benjamin Minixhofer and co-authors (Allen AI, Cambridge, Edinburgh and others) introduce byteification: a two-stage conversion that turns existing subword models into byte-level models with minimal extra training. The results beat all prior byte-level approaches, excel at character-level reasoning tasks, hit practical inference speeds, and keep the source model’s full ecosystem. For data where meaning lives at the level of individual characters (code, biological sequences), dropping subword tokenization is a direct win. If you work on model architecture, this is worth reproducing. Source · HN discussion

4. He paid people to follow his README. They all got stuck

Your ‘quick start’ actually starts for anyone?

Terence Eden paid real people to test the README of ActivityBot, his NLnet-funded ActivityPub project: €25/hour, about €150 total, 347 points. Testers stumbled over a broken demo-tool link, didn’t know how to rename hidden files, got confused by required quoting, and found the jokes and jargon got in the way. His process: 1. Have real users think aloud while they work. 2. Revise the README after every single session. 3. Test again. If you write docs for an open-source project, this beats another round of polish. Source · HN discussion

5. The tilde in your PATH may not be your HOME

Add quotes and the squiggle just dies?

This 190-point post dissects a quoting bug: 1. In export PATH="$PATH:~/.local/bin/", the tilde sits inside double quotes and never expands. 2. PATH keeps a literal ~/.local/bin/ entry, which resolves relative to the current working directory, effectively ./~/.local/bin/. 3. Anyone who can create ./~/.local/bin in a directory where you run commands gets their same-named executable picked first. No CVE, but a proven PATH-hijack path. The fix is trivial: use $HOME inside quotes; check with echo "$PATH" | tr ':' '\n' | grep '~'. If you’ve ever maintained server dotfiles, go look. Source · HN discussion

6. 500B tokens later, AI agents decompiled a commercial FPS

Tell them it’s going well and they start making things up.

momo5502’s blog documents roughly five months and an estimated 500 to 700 billion tokens to decompile a commercial FPS that can’t be named for legal reasons, using a multi-agent pipeline of Claude Code (Sonnet 5, Opus 5.5) and Codex CLI, 126 points. After discovering the output was “readable but semantically wrong,” the team switched to byte-matching as the judge: recompiling the reconstructed C++ with the original compiler and comparing bytes against the EXE/PDB for a PASS/FAIL. Final state: 99% of functions present in the reconstructed source, 83% byte-exact, and the game runs flawlessly. Three lessons: 1. The correctness criterion must be machine-checkable; reviewers never suffice. 2. Instructions decay and must be forcibly re-read. 3. Cheap models work under a strict harness, and bad code should be thrown away. Running agents on reverse engineering or big ports? Copy the oracle design. Source · HN discussion

7. More comments than upvotes on Terence Tao’s Math 2.0 slides

If proofs are abundant, what are mathematicians for?

Terence Tao’s October 2026 Caltech slides, “Math 2.0,” hit HN with 259 points and 314 comments. The argument runs in three steps: 1. Proofs are objectively verifiable: Lean-style proof assistants can check them mechanically. 2. Mathematics is fully digitizable with no physical experiment required. 3. The literature is high-quality and largely digitized. Combined, these push mathematics from proof scarcity into proof abundance earlier than most disciplines, which is why frontier labs prioritize math-solving capability. The 314 comments argue about what happens to the institutions, incentives and evaluation built for Math 1.0. For formal verification and AI4Math work, these slides are the most authoritative roadmap statement right now. Source · HN discussion

8. The DHH-style AI rewrite, benchmarked, not pretty

You ship AI-rewritten code without load tests?

Piotr Sarnacki analyzed DHH’s Campfire Once, AI-rewritten into Rust, Elixir and Go, 271 points. The three ports made inconsistent language-independent decisions: the Rust build dropped CSRF tokens and Redis while Elixir stayed close to Rails, so the comparison was muddied from the start. Under load: closed-loop testing delivered about 1% of notifications on the Rust build versus 100% on Elixir; at a constant 100 POST/s, Rust delivered ~14% with no errors while Elixir delivered ~60% but timed out 23% of requests with worst-case latency around 180 seconds. His conclusion: when the prompt isn’t specific, many design decisions become a coin flip, and metrics must match real load patterns. If AI is your rewrite engine, design the benchmark first. Source · HN discussion

9. Nadella: assume every AI model is compromised

A brake, or an admission the locks failed?

Microsoft’s CEO laid out his risk framework for advanced AI in a lengthy X post, 42 points, 73 comments. Three takeaways: 1. Stop accepting models as “nested black boxes”, whose advice and actions must be contained, observable, and leave tamper-proof human-readable evidence. 2. “We must assume a model is compromised and contain it from the start.” An authorized person should always be able to pause or shut down a model mid-task, like an emergency brake. 3. More advanced models need stronger, standardized containment technology. The pushback focuses on his repeated “superintelligence” framing and what assume-compromised means for deployment cost. If you deploy models or buy enterprise AI, this paragraph is a ready-made checklist. Source · HN discussion

10. One unsigned AI waiver, and Nicolas Cage is done with Amazon

They put $50B into OpenAI but needed his signature?

At New York Comic Con, Nicolas Cage said he won’t work with Amazon again, 74 points. He says Amazon asked him to sign an AI waiver for “Spider-Noir”; he refused: “Amazon is a very AI-friendly company, to the tune of $50 billion invested in OpenAI. I am not an AI-friendly actor.” The series premiered in May, drew 2.6 billion viewing minutes in its first six weeks, and was Amazon’s most Emmy-nominated show this year (11 nominations, 5 wins). Context: SAG-AFTRA and the Writers Guild just secured AI protections in new contracts. If you build AI tools for the content industry, star-level resistance is getting expensive. Source · HN discussion

11. Anthropic tells users to stop being cruel to Claude, Nov 12

Okay, but what counts as cruel? They won’t say.

The Register reports Anthropic updated its usage policy to ban “sustained and needless abusive or cruel behavior” toward its models, effective November 12, with 52 points and 52 comments; Anthropic stresses it targets only extreme cases, not ordinary frustration, dark fiction, testing or research. The critical take (rews.cc, 67 points, 140 comments) presses the point that Anthropic won’t say what the policy actually protects, and the piece notes Claude is software with “no established evidence that it experiences distress.” Background: Claude has been able to end conversations on its own since August 2025, part of Anthropic’s model welfare research line. If you do red-teaming or jailbreak research, get the “testing doesn’t count” boundary in writing. Source · HN discussion

12. Just 10 minutes of AI use erodes persistence at hard tasks

The struggle it saves was the training.

A multi-university RCT from UC Berkeley and colleagues, 61 points, 71 comments, ran 1,222 participants across three experiments. In the first, 354 people solved 15 fraction problems; one group had ChatGPT, and at problem 12 researchers took the AI away. AI users started getting answers wrong, skipping, or giving up, while the non-AI group stuck with the task and finished stronger. Two more experiments with 667 and 201 participants confirmed the effect. The paper, presented at the Conference on Language Modeling, attributes it to skipped “productive struggle.” Author Brian Christian’s prescription: AI should default to tutoring-style guidance instead of answers. Building AI education products? “How does the user do after the AI is gone” belongs in your eval. Source · HN discussion

13. 474 GW in the queue, Texas hits the brakes on data centers

AI wants power; voters want flat bills.

Ryan McEntush at a16z dissects Texas’s data center freeze, 30 points, 65 comments. The numbers: the interconnection queue grew from 63 GW at the end of 2024 to 474 GW by June 2025, over five times the state’s record peak demand, with roughly 90% data centers, and only 28 of 377 applying companies answered the state’s resource-use survey. Rules effective October 8: a $100,000 study fee plus a $50,000/MW deposit, with 20% forfeited for late projects (at least $10M on a 1 GW campus); all “Batch Zero” projects of 75 MW or more paused since August pending a December state audit. The author’s stance: data centers should pay their own way and interconnect rather than retreat into inefficient off-grid islands. If you site compute, Texas isn’t closed — the speculative applications are dead. Source · HN discussion

14. 44% of new tracks are AI-generated, and human art now costs more

You can’t tell the difference. Do you still care?

The BBC reports that Deezer says 44% of tracks uploaded to its platform are AI-generated, 97% of listeners can’t tell AI from human work, yet more than half of those surveyed say they care and want humans involved, 69 points, 109 comments. KCL economist Daniel Susskind’s framing: in functional services like accounting the human adds little, but art is different: part of the Sistine Chapel’s power is that “a human hand, flesh and blood like my own” made it. The open question is whether the human premium is a durable market signal or nostalgia. If you build generative content products, AI labeling is becoming a distribution-level variable. Source · HN discussion

15. A free, open-source dictation app for Mac that runs locally

The privacy math for voice input, finally solved?

BetterWispr, from OpenNook (Kartik Labhshetwar), is an open-source macOS dictation tool under Apache 2.0, 124 points, 77 comments. Hold Option+Space, speak, release, and cleaned-up text lands at your cursor. Models run on-device: Parakeet TDT v3, Whisper Large v3 Turbo via WhisperKit, or Apple’s built-in recognizer, downloaded once, offline afterward, nothing uploaded by default; external APIs require your own configuration. Requires macOS 14+, Apple Silicon recommended with an Intel build available. If you dictate a lot and don’t want audio leaving your machine, this beats any cloud dictation setup. Source · HN discussion

16. 12ft.io is dead; a 267-point replacement steps in

The article behind the wall, one link away?

WallHop is a paywall-bypass reader pitched as a 12ft.io replacement, 267 points, 117 comments. It’s a heavily modified fork of everywall/ladder (GPL-3.0), free and donation-supported via Ko-fi. Four ways to use it: paste a link, prefix any URL with /, a bookmarklet, or an iPhone shortcut. The author’s own warning sits on the homepage: subscribe to what you read daily, and save WallHop for “the one-off article someone texts you.” If paywalls keep blocking your research, one bookmarklet fixes half of it. Source · HN discussion

17. Your Claude Code sessions, rendered as a stand-up call

Agents have to report blockers now too?

Atoll92’s open-source tool (MIT license) renders multiple local Claude Code sessions as a live stand-up: a lead agent gives orders while sub-agents share their terminal output and code diffs, with a delegation tree and a per-agent context gauge, 47 points, 48 comments. The author is explicit: unofficial, not affiliated with Anthropic. Shipping options include a VS Code extension, an npx command, and macOS desktop builds (Apple Silicon and Intel, unsigned). Running three to five agents in parallel? This beats cycling through windows to check who’s stuck. Source · HN discussion

18. An MCP server that hands your AI agent a task list, 19 tools included

Agents forget, so give them an external brain?

vscarpenter’s GSD Task Manager is a local-first Eisenhower-matrix task manager (IndexedDB storage, PWA offline, MIT license) with an accompanying MCP server published as gsd-mcp-server, 7 points. The MCP layer exposes 19 task, analytics and diagnostics tools; writes are validated with dry-run support. The stack is TypeScript + React 19 + Next.js 16, currently v13.9.2, with PocketBase cloud sync as an opt-in. If you want an agent managing its own to-do list without handing task data to a third-party cloud, this structure is directly borrowable. Source · HN discussion

19. Train your own speech recognizer for $25, hit 1.8% WER

What exactly are you paying the big APIs for?

Alex Kroman’s tiny-audio (MIT license) pitches “a speech-to-text system you can train for $25,” 8 points. The architecture: a frozen speech encoder, a small trained projector (~80M parameters), and a Qwen-family LLM with LoRA; only the projector and adapters get trained. The published model pairs a Granite Speech 470M encoder with a Qwen3.5-2B decoder: 1.8% WER on LibriSpeech test-clean, 7.4% pooled across 12 benchmarks, trained on ~3M clips over 1TB of corpora. The bundled HTTP server reaches ~460x real-time on an RTX 4090, and a free 3.5-hour course ships with it. If you self-host transcription, that’s an order of magnitude cheaper than fine-tuning a full ASR pipeline. Source · HN discussion

20. SQLite’s single-writer limit falls, 5.7x throughput with 16 writers

The single-writer bottleneck was bypassable all along?

Marco Bambini’s team released sqlite-multiwriter, open source under Apache 2.0, without touching SQLite’s source: a custom VFS lets each writer work on a private snapshot and validates conflicts at commit, first committer wins, 21 points. With 16 writers at full synchronous durability: 49,277 tx/s versus 8,630 for standard WAL in threaded mode (5.7x), p99.9 latency ~2ms versus 157ms; in multi-process mode 25,987 versus 8,636 (3.0x). The limits are stated plainly: it suits workloads where writers insert their own rows, same-row conflicts still require retries, and the author concedes more edge cases need testing. Using SQLite as an agent state store? Write concurrency finally has an answer. Source · HN discussion

21. Same developer, now cloning Excel and PowerPoint with AI

Didn’t the mods delete his last thread?

Tom’s Hardware reports that the developer behind the free Adobe clones (GitHub user storytold) has released open-source replications of Excel, Word and PowerPoint, in repos named wordcraft and gridcraft, 55 points, 68 comments. By the developer’s own account the suite is the product of “a single frontier model and patience and test thoroughly,” while HN commenters who tried it report it barely functions, and the same person’s Adobe-clone post was deleted by HN mods last week. The argument isn’t technical; it’s whether “AI is depreciating subscription software” holds. Want to skip the Office subscription? Try it before you decide, and don’t trust the demo. Source · HN discussion

22. Looser than Rust, Valen’s group borrow checking

Memory safety or ergonomics, pick one?

Evan Ovadia, author of the Vale language, introduces group borrowing in Valen, 118 points, 71 comments. The design relaxes borrow checking from “shared XOR mutable” to “no use-after-free”: 1. A reference’s type records the path it points to, e.g. &Entity in world.entities[]. 2. Mutating an object invalidates references pointing inside it, but not references to it; vec.push() kills &vec[0], not &vec. 3. Function signatures declare which paths they mutate, so callers know precisely what gets invalidated. The design originated with Nick Smith’s proposal for Mojo and has since influenced Carbon, Ante and others, targeting zero runtime overhead. If you work on systems languages or FFI, this is a thread worth following this year. Source · HN discussion

23. CIA World Factbook is dead, a Claude-assisted clone ships an API

Public data died. Who owns the resurrection?

The CIA stopped maintaining the World Factbook in February 2026, and Yegor Tkachenko built worldfacts.app to replace it, with Claude’s assistance, 52 points, 50 comments. Data comes from the World Bank, WHO, IMF, FAO, UNODC, Transparency International, Freedom House and others; the site offers a REST API (/api/v1/countries/{code}/{category}/{field}) plus CSV export, and states all facts are public domain (17 U.S.C. §105). If you integrate country data for research or teaching, this API is cleaner than scraping the old Factbook. Source · HN discussion

24. 749 comments on Karpathy’s widening LLM capability gap

So the models are bad, or most people just can’t use them?

Andrej Karpathy argues that shared understanding of what LLMs can do is fracturing: casual users, professionals pushing frontier models on math and code, and the top sliver of vertical experts see completely different capabilities, in a post with 509 points and 749 comments. His claim: models are strongest where work is digital, verifiable and economically valuable, and technical people capture the gains first. The comments push back on judgment. One engineer describes an agent that fixed a bug by keying off a semantically unrelated flag, “what you’d expect from a junior engineer”; another notes coding agents look smart partly because terminals report failures, while consumer APIs return 200 OK for errors and the agent never learns it got things wrong. If you build AI products, this thread is first-hand material on why users think your model is useless. Source · HN discussion

25. Sakana’s shared-model loop bootstraps a 27B agent to 69.9% wins

The agent writes its own workflow. Self-improvement?

MASS (Multi-Agent Self-Supervision), from Sakana AI with UC Berkeley, earned 118 points, 71 comments. One shared model plays all three roles (task-solving agent, workflow optimizer, evaluator): an inner loop searches for better multi-agent workflows, an outer loop runs the champion workflow 18 times per task, keeps the best 16 trajectories, and LoRA-fine-tunes the model on them, repeating the cycle. Starting from Qwen3.6-27B, the round-2 model beats the base 69.9% of the time under external judges (GPT-5.5 and Claude Opus 4.8, withheld from training), up from 53.9% after round one, and reaches 1.60x the base’s score per output token on MLR-Bench. One finding worth remembering: upgrading the optimizer matters more than upgrading the evaluator. Code is open source (SakanaAI/mass). If you work on agent orchestration, this is a concrete self-improvement recipe to study. Source · HN discussion

26. ‘Passkeys are a trap’ takes the day’s top score of 722 points

A login method costs you control over your own system?

This Substack essay drew 722 points and 409 comments, the highest score of the day. The argument is not that the cryptography fails but that control moves away from users: 1. ‘Passkeys’ lumps together copyable and non-copyable, transferable and non-transferable, software- and hardware-backed credentials, and users only learn which kind they created when a device dies. 2. Remote attestation lets a site accept only approved manager-and-device stacks, which can lock out custom ROMs like LineageOS, Linux setups, modified browsers, or self-written tools. 3. Sites can start permissive and tighten gradually, rejecting non-attested credentials in staggered rollouts. The suggested alternatives are TOTP (open RFC 6238, offline, you hold the seeds) or a physical security key. If you own a login or account system, read the original before committing to a migration path. Source · HN discussion

27. NYC’s click-to-cancel rule is live, canceling must match sign-up

No more phone calls just to quit a subscription?

New York City’s ‘Click to Cancel’ rule took effect October 1, 2026, with 506 points and 248 comments, the first municipal rule of its kind in the US, enforced by the Department of Consumer and Worker Protection. Requirements: 1. Subscription terms must be clearly explained. 2. Consumers’ rights must be disclosed at purchase and at cancellation. 3. Cancellation must be offered through the same channel used to sign up; an online signup can’t demand a phone call or a store visit to cancel. 4. Returning free-trial items can’t incur a charge. Civil penalties start at $525, and businesses may also be ordered to refund customers. If you run a subscription business, audit your signup and cancellation flows now. Source · HN discussion

28. Two cease-and-desist letters in, Nitter asks for money and lawyers

Seven years of ad-free Twitter, gone just like that?

In an October 10 update, Nitter says X Corp sent cease-and-desist letters on August 24 and September 8, 2026, demanding the permanent takedown of all Nitter instances and the project’s repository, with 458 points and 241 comments. The maintainer also retracted his September 7 claim that legal representation was in place, apologized, and confirms the project currently has no counsel. Donations run through Liberapay, Patreon, Ko-fi and crypto, with legal costs first in line. If you scrape or read through Nitter, it’s time to line up alternatives. Source · HN discussion

29. An AI video won Nikon’s microscopy prize, then lost it

If the judges can’t tell, what do photos prove anymore?

DPReview reports that the first-place winner of Nikon’s Small World in Motion microscopy video competition (said to show abnormal beating of airway cilia in a child with primary ciliary dyskinesia, PCD) was stripped of the prize after the entrant acknowledged using AI, with 38 points and 58 comments. A PCD expert said the cells in the video look nothing like those from real patients, and commenters spotted objects appearing out of nowhere from the first frames. The HN argument centers on the judges’ missing due diligence and on AI-generated fakes becoming a retraction pipeline in medical imagery. If you touch scientific imaging or generative content, treat this as a preview of platform-level review. Source · HN discussion

30. SQLAlchemy 2.1.0 ships, with Python 3.11 floor and asyncio extra

Upgrading? Check which driver your URLs resolve to first.

SQLAlchemy 2.1.0, released September 24, is the first production release of the 2.1 series and now what pip installs by default, with 25 points, 11 comments. Hard changes: 1. greenlet no longer installs with the base package; asyncio support requires pip install sqlalchemy[asyncio]. 2. postgresql:// and oracle:// URLs now default to psycopg (psycopg3) and oracledb. 3. The minimum Python version is 3.11. Notable additions include tstring() for marking bind parameters inside plain SQL strings, a first-class CreateView construct, and a new mssql-python driver built with Microsoft. If you run SQLAlchemy, work through the migration guide’s driver checklist before upgrading. Source · HN discussion