PyPI מונעת העלאת קבצים חדשים להוצאות ישנות

תקציר מקורי באנגלית<blockquote cite="https://blog.pypi.org/posts/2026-07-22-releases-now-reject-new-files-after-14-days/"><p>The Python Package Index (PyPI) now rejects new files being uploaded to releases that are older than 14 days. This restriction was <a href="https://github.com/pypi/warehouse/pull/19727">put in place</a> to prevent old and long-stable releases from being poisoned in case publishing tokens or workflows of PyPI projects were compromised. As far as we are aware this has not yet been abused, but there is no technical reason beyond that attackers weren't aware it was possible.</p></blockquote> <p class="cite">&mdash; <a href="https://blog.pypi.org/posts/2026-07-22-releases-now-reject-new-files-after-14-days/">Seth Larson</a>, PyPI blog</p> <p>Tags: <a href="https://simonwillison.net/tags/pac