2026-03-22 –, Yuchengco Hall 4th Flr. Y409 (Workshop Room 2)
This talk provides a complete blueprint for architecting a development and release workflow specifically for open source Python libraries published to PyPI. We move beyond basic test-build-deploy workflows to address more topics necessary for developing and maintaining trusted libraries: solid test-build strategies, changelog management, handling untrusted contributions, managing feature branch preview builds, automated semantic versioning, documentation generation, ensuring package quality, and securing the release process and final distribution.
This presentation delivers a comprehensive guide to construct a reliable development/release workflow for open source Python libraries that may require more things than a basic CI/CD pipeline for internal/private apps.
Key topics include:
- Solid test and build strategy: Implementing robust testing and build processes that ensure package quality and reliability on diverse environments with idempotent builds.
- Change management: Techniques for implementing automated semantic versioning (SemVer) and generating accurate changelogs.
- Security in open source: Designing CI systems to safely handle untrusted contributions from external pull requests and mitigating risks inherent in open source collaboration. Security is also emphasized in the release process to ensure the integrity of the distributed packages.
- Documentation: Automating the generation and deployment of comprehensive documentation.
- Developer expertise: Setting up contributor-friendly workflows. A good developer experience enables high-quality achievements of above goals.
Yuichiro is a professional software developer with a deep passion for open source software. After working on software development for several machine learning startups, he joined Hugging Face in 2023.
He develops and maintains several OSS projects, including Stlite, Gradid-Lite, Transformers.js.py, and Awesome Emacs Keymap, and contributes to other OSS projects such as Streamlit and Gradio.