drop compatibility with Python < 2.7.8?

[Tim Graham]

Hi,

I was wondering if Django could or should nudge Python 2 users toward the latest stable release of 2.7.x? For example, we could require at least 2.7.8 by removing the fallback pbkdf2() implementation in django.utils.crypto [0]. I guess part of my feeling is that if you're running 1.11 LTS for at least another three years, you should really try to use the latest Python 2 as it has security improvements and fixes compared to the older 2.7.x releases.

As a data point, Ubuntu 14.04 ships with Python 2.7.6 and 16.04 ships with Python 2.7.12.

[0] https://github.com/django/django/pull/7556

Thanks for your input.

[Curtis Maloney]

Well, I certainly agree with the intent... especially, as you say, for
LTS users who effectively cement themselves to a version for the long haul.

Might as well remind them there are security updates in things other
than OpenSSL, Java, and Django :)

--
C

> --
> You received this message because you are subscribed to the Google
> Groups "Django developers (Contributions to Django itself)" group.
> To unsubscribe from this group and stop receiving emails from it, send
> an email to django-develop...@googlegroups.com
> <mailto:django-develop...@googlegroups.com>.
> To post to this group, send email to django-d...@googlegroups.com
> <mailto:django-d...@googlegroups.com>.
> Visit this group at https://groups.google.com/group/django-developers.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/django-developers/16cafa10-d727-4b42-be26-4e5458520546%40googlegroups.com
> <https://groups.google.com/d/msgid/django-developers/16cafa10-d727-4b42-be26-4e5458520546%40googlegroups.com?utm_medium=email&utm_source=footer>.
> For more options, visit https://groups.google.com/d/optout.

[Claude Paroz]

I wouldn't spend too much energy about Python 2.7 stuff. Let the workarounds in place, and just wait for Python 2 to die. I don't see the point in forcing people of stable Debian-based distributions to install a custom Python for 1.11.

[Marc Tamlyn]

I'd be inclined to agree with Claude.

On 15 November 2016 at 07:20, Claude Paroz <cla...@2xlibre.net> wrote:

I wouldn't spend too much energy about Python 2.7 stuff. Let the workarounds in place, and just wait for Python 2 to die. I don't see the point in forcing people of stable Debian-based distributions to install a custom Python for 1.11.

--

You received this message because you are subscribed to the Google Groups "Django developers (Contributions to Django itself)" group.

To unsubscribe from this group and stop receiving emails from it, send an email to django-developers+unsubscribe@googlegroups.com.
To post to this group, send email to django-developers@googlegroups.com.

Visit this group at https://groups.google.com/group/django-developers.

To view this discussion on the web visit https://groups.google.com/d/msgid/django-developers/e146d3c8-3d29-4ef3-8357-09a2e1ae2f34%40googlegroups.com.

[Shai Berger]

I would too, since the distros tend to patch the older Python versions without
updating the version number (2.7.8-12 etc).

On Tuesday 15 November 2016 11:01:42 Marc Tamlyn wrote:
> I'd be inclined to agree with Claude.
>
> On 15 November 2016 at 07:20, Claude Paroz <cla...@2xlibre.net> wrote:
> > I wouldn't spend too much energy about Python 2.7 stuff. Let the
> > workarounds in place, and just wait for Python 2 to die. I don't see the
> > point in forcing people of stable Debian-based distributions to install a
> > custom Python for 1.11.
> >
> > --
> > You received this message because you are subscribed to the Google Groups
> > "Django developers (Contributions to Django itself)" group.
> > To unsubscribe from this group and stop receiving emails from it, send an

> > email to django-develop...@googlegroups.com.
> > To post to this group, send email to django-d...@googlegroups.com.

> > Visit this group at https://groups.google.com/group/django-developers.
> > To view this discussion on the web visit https://groups.google.com/d/
> > msgid/django-developers/e146d3c8-3d29-4ef3-8357-
> > 09a2e1ae2f34%40googlegroups.com

> > <https://groups.google.com/d/msgid/django-developers/e146d3c8-3d29-4ef3-8
> > 357-09a2e1ae2f34%40googlegroups.com?utm_medium=email&utm_source=footer> .

[Tim Graham]

Okay, I'll drop the idea.