Python 3.15.1, 3.14.9 and 3.13.17 Ship pip 26.2.2 and certifi 2026.10.19

Which releases carry pip 26.2.2 and certifi 2026.10.19? #

Python 3.15.1, 3.14.9 and 3.13.17 each upgrade the bundled pip to version 26.2.2, which includes certifi 2026.10.19, according to the Python Insider post on Python 3.15.1, 3.14.9 and 3.13.17, dated 2026-10-21 in its article header. The post calls the 3.15 and 3.14 releases expedited security releases and the 3.13.17 release a special security release. pip 26.2.2 in all three releases is the version to look for on each installation.

The post says pip is not normally updated in security releases such as 3.13 because of backward compatibility concerns. It also says 3.13 has only just entered security-only mode, and that a special release with installers seemed prudent. Teams running 3.13 should therefore expect this pip change to arrive in a security release that the post describes as an exception to its usual practice.

Am I affected by the eMudhra / emSign certificate incident? #

The post says the pip 26.2.2 and certifi 2026.10.19 upgrade addresses the eMudhra / emSign CA certificate security incident. It does not describe the incident or name the affected certificates, so the sources cannot tell you whether your systems depend on them. Read the Discourse announcement that the post links for more information before deciding.

"to address the eMudhra / emSign CA certificate security incident"

Python Insider post on Python 3.15.1, 3.14.9 and 3.13.17

How do I upgrade pip and uv in existing virtual environments? #

The post asks you to upgrade pip and uv to the latest versions in every existing virtual environment on your system. Upgrade pip and uv in each environment, not only in the interpreter you installed. For pip inside a virtualenv, the post gives the following command, which points to the pip 26.2.2 wheel and its SHA-256 fragment.

python -m pip install "pip @ https://files.pythonhosted.org/packages/3f/06/3e4420302363fbb71be3c7f35ce042f54bfca330e3e66b3a2e3c4cca579f/pip-26.2.2-py3-none-any.whl#sha256=fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70"

The post gives no equivalent command for uv. It asks only that uv be upgraded to the latest version, so use the uv documentation for the upgrade method you prefer.

What should macOS users do if they cannot upgrade yet? #

If you cannot upgrade to this release immediately on macOS, the post lists commands that upgrade pip and certifi for each series it covers. For Python 3.15, 3.14 and 3.13, the framework interpreter commands install the pip 26.2.2 wheel and upgrade certifi, and the free-threaded interpreters under PythonT.framework receive the pip wheel install. The post frames these as a way to upgrade certificates and pip before you can install the release, so run the lines that match the interpreter you use.

Does the macOS installer fix the IDLE hang on macOS 27.0? #

The post says the macOS installer for this release is built with a pre-release of Tk, which fixes a possible hang on macOS 27.0 in applications using tkinter, such as IDLE, in older releases. The post presents this as a property of the installer build and lists no separate step for it. If IDLE or another tkinter application hangs on macOS 27.0, the post points to the installer for this release.

Python 3.16.0a1: an alpha preview with planned phase dates #

Python 3.16.0a1 is an early developer preview, and the Python 3.16.0 alpha 1 announcement, dated 2026-10-13 in its article header, states that its use is not recommended for production environments. It is the first of seven planned alpha releases, and the next, 3.16.0a2, is scheduled for November 10, 2026.

The 3.16.0a1 announcement gives planned phase dates. Features may be added until the beta phase starts on May 4, 2027, and may be modified or deleted until the release candidate phase on July 27, 2027. The final release is planned for October 5, 2027, and the full schedule is in PEP 826.

The announcement asks maintainers of libraries and applications to try the alpha and report how it goes. Python bugs should be reported on the CPython issue tracker, and the post links the 3.16 documentation and changelog for details of the changes so far.

Upgrade checklist #

1. Identify which series you run: 3.15, 3.14 or 3.13.
2. Install Python 3.15.1, 3.14.9 or 3.13.17 for that series, the releases the post lists with pip 26.2.2 and certifi 2026.10.19.
3. Upgrade pip and uv in every existing virtual environment, using the pip 26.2.2 wheel command where the post gives it.
4. On macOS, if you cannot upgrade yet, run the framework pip and certifi commands for your interpreter, including the free-threaded pip command if you use that interpreter.
5. On macOS 27.0, if IDLE or a tkinter application hangs, use the macOS installer for this release.
6. If you maintain a library or application, test it with Python 3.16.0a1, report results on the CPython issue tracker, and keep the alpha out of production.