Commit graph

173 commits

Author SHA1 Message Date
Sviatoslav Sydorenko
18c68ec816
[3.12] Introduce a gate/check GHA job (GH-97533) (#107114)
(cherry picked from commit e7cd557)
2023-07-23 14:58:20 +02:00
Sviatoslav Sydorenko
1703262c0a
[3.12] Convert doc.yml workflow to be reusable (GH-103914 + GH-105151) (#107042)
Co-authored-by: Sviatoslav Sydorenko <wk.cvs.github@sydorenko.org.ua>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>

(cherry picked from commit 88d14da76f)
(cherry picked from commit eaa6702280)
2023-07-23 11:35:17 +02:00
Miss Islington (bot)
6baddd9fb2
[3.12] Docs: move sphinx-lint to pre-commit (GH-105750) (#105894)
Docs: move sphinx-lint to pre-commit (GH-105750)
(cherry picked from commit bc07c8f096)

Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
2023-06-18 13:21:34 +01:00
Miss Islington (bot)
b34f1df5fa
[3.12] CI: Bump macOS build to use OpenSSL v3.0 (GH-105538) (#105867)
(cherry picked from commit 34e93d3998)

Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
2023-06-16 19:34:46 +00:00
Miss Islington (bot)
68eeab7fdd
[3.12] CI: Configure macOS build as per updated devguide recommendations (GH-105533) (#105536)
(cherry picked from commit a5f23d4110)

Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
2023-06-08 23:00:53 +00:00
Erlend E. Aasland
83c7386cee
[3.12] GH-89886: Bump to GNU Autoconf v2.71 (#104925) (#105207)
Co-authored-by: Christian Heimes <christian@python.org>
2023-06-01 22:19:19 +00:00
Miss Islington (bot)
25543aecfe
[3.12] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (#105199)
gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174)

Upgrade builds to OpenSSL 1.1.1u.

This OpenSSL version addresses a pile if less-urgent CVEs since 1.1.1t.

The Mac/BuildScript/build-installer.py was already updated.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9, and adds a new _ssl_data_31.h file from 3.1.1 along with the ssl.c code to use it.

Manual edits to the _ssl_data_300.h file prevent it from removing any existing definitions in case those exist in some peoples builds and were important (avoiding regressions during backporting).

backports of this prior to 3.12 will not include the openssl 3.1 header.
(cherry picked from commit ede89af605)

Co-authored-by: Gregory P. Smith [Google] <greg@krypto.org>
2023-06-01 17:13:35 +00:00
Steve Dower
4e7d41f986
[3.12] Enable the ABI check job to publish the updated ABI data file (GH-105088) 2023-05-30 17:31:51 +01:00
Miss Islington (bot)
edd0cb8e77
[3.12] CI: Precompute hash for config cache key in check_source job (GH-105008) (#105014)
Co-authored-by: Itamar Ostricher <itamarost@gmail.com>
2023-05-27 10:10:03 +00:00
Hugo van Kemenade
97509ca2bc
[3.12] CI: Cache config.cache across runs to speed up build (GH-104800) (#104967) 2023-05-26 16:02:51 +00:00
Miss Islington (bot)
d176f78ec2
Improves the Windows MSI test run on PR (GH-104929)
Correctly set the exit code when builds fail
Also build docs as part of the test
(cherry picked from commit 569b2b8d61)

Co-authored-by: Steve Dower <steve.dower@python.org>
2023-05-25 16:49:46 +01:00
Petr Viktorin
b44beac5e1
[3.12] gh-87891: Add ABI check to CI (#104793)
Backport the workflow change and fix-ups:
- GH-92442 (e89c01eac7)
- GH-94129 (0dadb2249a)
- GH-98556 (194588decc)

Co-Authored-By: sterliakov <50529348+sterliakov@users.noreply.github.com>
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2023-05-23 10:56:14 +02:00
Miss Islington (bot)
97f8547913
[3.12] Add the 3.12 branch to the github workflows. (GH-104768) (#104769)
Add the 3.12 branch to the github workflows. (GH-104768)
(cherry picked from commit 4194d8f2c4)

Co-authored-by: T. Wouters <thomas@python.org>
2023-05-23 01:20:05 +02:00
Zac Hatfield-Dodds
014dd301b5
gh-86275: improve Hypothesis configuration for CI and local runs (#104468) 2023-05-21 05:52:29 -06:00
Alex Waygood
9d41f83c58
gh-104050: Run mypy on clinic.py in CI (#104421)
* Add basic mypy workflow to CI
* Make the type check pass

---------

Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
Co-authored-by: Nikita Sobolev <mail@sobolevn.me>
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
2023-05-15 08:49:28 +00:00
Paul Ganssle
590d7a527d
GH-86275: Run hypothesis tests in parallel (#104427)
Run hypothesis tests in parallel
2023-05-12 16:23:08 +00:00
Paul Ganssle
d50c37d8ad
GH-86275: Implementation of hypothesis stubs for property-based tests, with zoneinfo tests (#22863)
These are stubs to be used for adding hypothesis (https://hypothesis.readthedocs.io/en/latest/) tests to the standard library.

When the tests are run in an environment where `hypothesis` and its various dependencies are not installed, the stubs will turn any tests with examples into simple parameterized tests and any tests without examples are skipped.

It also adds hypothesis tests for the `zoneinfo` module, and a Github Actions workflow to run the hypothesis tests as a non-required CI job.

The full hypothesis interface is not stubbed out — missing stubs can be added as necessary.

Co-authored-by: Zac Hatfield-Dodds <zac.hatfield.dodds@gmail.com>
2023-05-12 08:35:53 -04:00
Sebastian Pipping
41aff464ce
require-pr-label.yml: Add missing "permissions:" (#104309) 2023-05-09 13:29:00 +03:00
Hugo van Kemenade
d513ddee94
Trim trailing whitespace and test on CI (#104275)
Co-authored-by: Alex Waygood <Alex.Waygood@Gmail.com>
2023-05-08 17:03:52 +03:00
Hugo van Kemenade
accb417c33
Replace Netlify with Read the Docs build previews (#103843)
Co-authored-by: Oleg Iarygin <dralife@yandex.ru>
Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
2023-04-29 23:02:03 -06:00
Adam Turner
44b5c21f41
GH-103903: Test the minimum Sphinx version in CI (#103904) 2023-04-27 19:27:38 +01:00
Hugo van Kemenade
842daa57cf
gh-103884: Docs CI: Only attempt nit-picky PR annotations for PRs (#103889) 2023-04-26 20:20:19 +00:00
Dong-hee Na
8330580800
gh-103726: Set up gcc-10 for ASAN (gh-103728)
<!--
Thanks for your contribution!
Please read this comment in its entirety. It's quite important.

# Pull Request title

It should be in the following format:

```
gh-NNNNN: Summary of the changes made
```

Where: gh-NNNNN refers to the GitHub issue number.

Most PRs will require an issue number. Trivial changes, like fixing a
typo, do not need an issue.

# Backport Pull Request title

If this is a backport PR (PR made against branches other than `main`),
please ensure that the PR title is in the following format:

```
[X.Y] <title from the original PR> (GH-NNNN)
```

Where: [X.Y] is the branch name, e.g. [3.6].

GH-NNNN refers to the PR number from `main`.

-->


<!-- gh-issue-number: gh-103726 -->
* Issue: gh-103726
<!-- /gh-issue-number -->
2023-04-25 12:13:36 +00:00
Łukasz Langa
b51da991e2
Also fail DO-NOT-MERGE when "awaiting changes" or "awaiting change review" present on PR (#103807)
"awaiting changes" means somebody put a review that requested changes.

"awaiting change review" means that the PR author published changes
after a red review and then requested a re-review.
2023-04-25 01:49:50 +02:00
Pradyun Gedam
ece20dba12
gh-95299: Stop installing setuptools as a part of ensurepip and venv (#101039)
Remove the bundled setuptools wheel from ensurepip, and stop installing setuptools in environments created by venv.

Co-Authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
Co-authored-by: Oleg Iarygin <oleg@arhadthedev.net>
2023-04-17 23:43:34 -05:00
Ezio Melotti
76933df10a
Remove expert-* from project-updater GH workflow (#103579) 2023-04-17 06:26:22 +03:00
Nikita Sobolev
be8903eb9d
gh-103180: Add CI timeouts to all GitHub Actions jobs (#103437) 2023-04-14 12:01:10 +03:00
dependabot[bot]
5d4afc45b9
build(deps): bump actions/stale from 7 to 8 (#103169)
Bumps [actions/stale](https://github.com/actions/stale) from 7 to 8.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v7...v8)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-09 13:42:43 +05:30
Hugo van Kemenade
090e26ea80
CI: Do not allow merge if labelled DO-NOT-MERGE (#103337)
Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
2023-04-09 09:39:03 +03:00
Hugo van Kemenade
f192a558f5
gh-101100: Fix Sphinx warning in gc.rst and refactor docs clean list (#103116)
Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
2023-03-30 21:03:50 +03:00
Hugo van Kemenade
87adc63d66
gh-101100: Test only Doc/ files in nit-picky mode (#103019)
gh-101100: Filter only Doc/ files
2023-03-25 09:15:02 +02:00
Hugo van Kemenade
6a1c49a717
gh-101100: Test docs in nit-picky mode (#102513)
Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM>
Co-authored-by: Petr Viktorin <encukou@gmail.com>
2023-03-24 13:23:35 +02:00
Eric Snow
1ff81c0cb6
gh-81057: Add a CI Check for New Unsupported C Global Variables (gh-102506)
This will keep us from adding new unsupported (i.e. non-const) C global variables, which would break interpreter isolation.

FYI, historically it is very uncommon for new global variables to get added. Furthermore, it is rare for new code to break the c-analyzer. So the check should almost always pass unnoticed.

Note that I've removed test_check_c_globals. A test wasn't a great fit conceptually and was super slow on debug builds. A CI check is a better fit.

This also resolves gh-100237.

https://github.com/python/cpython/issues/81057
2023-03-14 10:05:54 -06:00
Ee Durbin
e1a90ec75c
Migrate to new PSF mailgun account (#102284)
Our legacy mailgun account is associated with a parent rackspace account that I am trying to decomission.

The necessary secret has been added to the GitHub Actions Secrets already, so this is ready to go on approval.
2023-02-28 08:23:39 -05:00
Erlend E. Aasland
e07b304bb0
gh-101981: Consolidate macOS configure steps in CI (GH-102131)
Automerge-Triggered-By: GH:erlend-aasland
2023-02-23 07:02:23 -08:00
Dong-hee Na
ed01addb59
gh-101981: Apply HOMEBREW related environment variables (gh-102074) 2023-02-21 00:20:18 +09:00
Erlend E. Aasland
2713631041
gh-101981: Build macOS as recommended by the devguide (GH-102070)
Automerge-Triggered-By: GH:erlend-aasland
2023-02-20 05:07:25 -08:00
Gregory P. Smith
b41c47cd06
gh-101726: Update the OpenSSL version to 1.1.1t (GH-101727)
Fixes CVE-2023-0286 (High) and a couple of Medium security issues.
https://www.openssl.org/news/secadv/20230207.txt
2023-02-09 17:40:51 +00:00
dependabot[bot]
2366b27565
build(deps): bump actions/stale from 6 to 7 (#100656) 2023-01-01 23:49:10 +02:00
Illia Volochii
a23cb72ac8
gh-100454: Start running SSL tests with OpenSSL 3.1.0-beta1 (#100456) 2022-12-23 18:04:20 -08:00
Hugo van Kemenade
702a5bc463
Docs: Don't upload CI artifacts (#100330) 2022-12-19 10:40:11 +02:00
Hugo van Kemenade
57dfb1c4c8
Upload NEWS file as artifact (#30419)
Co-authored-by: Éric <earaujo@caravan.coop>
2022-11-23 23:32:09 +01:00
Gregory P. Smith
e00d730efe
Update github CI to use OpenSSL 1.1.1s and 3.0.7. (#99364) 2022-11-11 01:33:55 -08:00
Noam Cohen
1db2a0cb20
gh-98456: Replace deprecated set-output with up-to-date version (gh-98457) 2022-10-23 14:23:40 +09:00
Victor Stinner
1863302d61
gh-97669: Create Tools/build/ directory (#97963)
Create Tools/build/ directory. Move the following scripts from
Tools/scripts/ to Tools/build/:

* check_extension_modules.py
* deepfreeze.py
* freeze_modules.py
* generate_global_objects.py
* generate_levenshtein_examples.py
* generate_opcode_h.py
* generate_re_casefix.py
* generate_sre_constants.py
* generate_stdlib_module_names.py
* generate_token.py
* parse_html5_entities.py
* smelly.py
* stable_abi.py
* umarshal.py
* update_file.py
* verify_ensurepip_wheels.py

Update references to these scripts.
2022-10-17 12:01:00 +02:00
Michael Droettboom
ad8e297b72
Upgrade ccache-action to one using Node 16 (#98166)
Github Actions has deprecated the use of Node 12, and will be turning it off by
summer 2023.

https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/
2022-10-11 15:15:14 +02:00
Hugo van Kemenade
75751f4aa5
Auto-cancel old builds when new commit pushed to branch (#98009)
* Auto-cancel old builds when new commit pushed to branch

* Add a fallback

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>

* Use the same group for all workflows.

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>
2022-10-08 21:21:38 +02:00
Alex
c66dbddfba
GitHub Workflows security hardening (#96492)
* Update project-updater.yml

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>

* Update project-updater.yml

repository-projects: write is not needed because a separate secrets.ADD_TO_PROJECT_PAT is used

Signed-off-by: sashashura <93376818+sashashura@users.noreply.github.com>
2022-10-08 10:13:34 +02:00
Nikita Sobolev
3108fc1c16
gh-97923: Always run Ubuntu SSL tests with others in CI (#97940) 2022-10-07 11:58:46 -07:00
dependabot[bot]
9442105ce7
build(deps): bump actions/stale from 5 to 6 (#97701)
Bumps [actions/stale](https://github.com/actions/stale) from 5 to 6.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v5...v6)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-10-05 10:56:42 -07:00