Steve Dower
16c40f944b
gh-151544: Fixes CVE-2026-12003 by removing the fallback to %VPATH%/Modules/Setup.local for discovering sources in getpath.py (GH-151928)
2026-06-22 17:31:25 +01:00
Victor Stinner
fd0839de33
[3.13][3.14] GHA: Display output when a sanitizer test fails ( #151268 ) ( #151273 ) ( #151280 )
...
[3.14] GHA: Display output when a sanitizer test fails (#151268 ) (#151273 )
GHA: Display output when a sanitizer test fails (#151268 )
Modify GitHub Action "Reusable Sanitizer" to display output when a
test fails: pass -W option.
(cherry picked from commit 3a8bebd86f )
(cherry picked from commit bc75e47ffa )
2026-06-10 21:25:15 +02:00
Zachary Ware
2d8b0b83c1
[3.13] gh-151159: Update CI to use latest SSL library versions (GH-151202)
...
(cherry picked from commit 7053bbd7fd )
2026-06-09 18:04:32 +00:00
Miss Islington (bot)
26a814e4e1
[3.13] Replace deprecated action with RtD app (GH-149111) ( #150234 )
...
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2026-05-22 11:08:42 +00:00
Hugo van Kemenade
419fe42b5a
[3.13] CI: Move Homebrew dependencies into Brewfile (GH-148335) ( #149884 )
...
Co-authored-by: Brett Cannon <brett@python.org>
2026-05-18 16:33:04 +03:00
Miss Islington (bot)
5ed8090081
[3.13] Run mypy with four worker processes and uv (GH-149726) (GH-149774) ( #149775 )
...
[3.14] Run mypy with four worker processes and uv (GH-149726) (GH-149774)
(cherry picked from commit bb5a81a1ac )
(cherry picked from commit 6304eb1f5b )
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2026-05-13 15:03:58 +03:00
Hugo van Kemenade
a2864ec643
[3.13] Remove myself from CODEOWNERS (GH-149727) ( #149734 )
...
(cherry picked from commit 058c12528d )
Co-authored-by: Berker Peksag <berker.peksag@gmail.com>
2026-05-12 16:20:25 +00:00
Zachary Ware
46165b116b
[3.13] gh-149254: Update CI to use latest OpenSSL versions (GH-149336)
...
(adapted from commit 68fe899feb )
2026-05-03 21:20:33 +00:00
Miss Islington (bot)
00a9a8a077
[3.13] gh-121946: Use clang-20 for TSan build (GH-148570) ( #148754 )
...
Co-authored-by: Sam Gross <colesbury@gmail.com>
2026-04-19 18:39:04 +03:00
Hugo van Kemenade
fdc7f7e742
[3.13] Default GHA permissions to contents: read (GH-148346) ( #148387 )
...
(cherry picked from commit 9c9df8ac8c )
2026-04-11 17:06:41 -07:00
Hugo van Kemenade
38e2470f56
[3.13] gh-145098: Use macos-15-intel instead of unstable macos-26-intel in {jit,tail-call}.yml (GH-148126) ( #148136 )
...
(cherry picked from commit bce96a1813 )
Co-authored-by: Stan Ulbrych <stan@python.org>
2026-04-06 01:11:29 +03:00
Ezio Melotti
ce0c2c9fab
[3.13] Add permissions: {} to all reusable workflows ( #148114 ) ( #148116 )
...
Add `permissions: {}` to all reusable workflows (#148114 )
Add permissions: {} to all reusable workflows
(cherry picked from commit 1f36a510a2 )
2026-04-05 12:04:33 +02:00
Hugo van Kemenade
df12674ecc
[3.13] gh-145098: Use macos-15-intel instead of unstable macos-26-intel (GH-148038) ( #148077 )
2026-04-04 10:04:43 +00:00
William Woodruff
45c92206eb
[3.13] gh-146488: hash-pin all action references (gh-146489) ( #147981 )
2026-04-02 08:49:07 +03:00
Hugo van Kemenade
0dcb625be4
[3.13] gh-145098: Run Apple Silicon macOS CI on macos-26 (Tahoe) (GH-145099) (GH-146412) ( #146414 )
...
Co-authored-by: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>
Co-authored-by: clintonsteiner <47841949+clintonsteiner@users.noreply.github.com>
2026-03-30 16:21:40 +03:00
Hugo van Kemenade
2ea48506a2
[3.13] Bump pre-commit hooks (GH-144576) (GH-144593)
...
(cherry picked from commit e682141c49 )
Co-authored-by: Savannah Ostrowski <savannah@python.org>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: Xianpeng Shen <xianpeng.shen@gmail.com>
Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
2026-03-24 02:49:26 +01:00
Thomas Kowalski
a59436d897
[3.13] gh-145349: Do not install ccache ( #145350 ) ( #145424 )
2026-03-02 20:16:33 +02:00
Thomas Kowalski
9f44febe70
[3.13] gh-145351: use --no-install-recommends (GH-145352) ( #145402 )
2026-03-01 22:41:41 +02:00
Miss Islington (bot)
3682654300
[3.13] gh-100538: Add workflow to verify bundled libexpat (GH-145359) ( #145400 )
...
gh-100538: Add workflow to verify bundled libexpat (GH-145359)
Add workflow to verify bundled libexpat.
(cherry picked from commit c9a5d9aae4 )
Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
2026-03-01 20:11:38 +00:00
Savannah Ostrowski
0acd41f398
[3.13] Add Savannah as jit.yml CODEOWNER (GH-145152) ( #145156 )
...
* Add Savannah as `jit.yml` CODEOWNER (#145152 )
(cherry picked from commit 6180e79ed2 )
2026-02-23 20:16:00 +02:00
Stan Ulbrych
773cd81028
[3.13] compute-changes.py: Fix & test process_changed_files() (GH-144674) ( #145014 )
...
Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
Co-authored-by: Chris Eibl <138194463+chris-eibl@users.noreply.github.com>
2026-02-21 14:24:53 +02:00
Zachary Ware
48dd852025
[3.13] gh-144551: Update CI to use latest OpenSSL versions (GH-144800)
...
(cherry picked from commit b933ef9261 )
2026-02-13 15:41:42 -06:00
Stan Ulbrych
54ece4bd58
[3.13] gh-144376: Only run 'address' fuzzer for python3-libraries (GH-144398) ( #144400 )
...
(cherry picked from commit 5f91577cdd )
Co-authored-by: Seth Michael Larson <seth@python.org>
2026-02-02 17:51:05 +01:00
🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко)
c779fa2530
[3.13] Notify Sviat of GHA changes through codeowners (GH-143945) ( #144052 )
...
(cherry picked from commit 78b1370de9 )
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2026-01-19 23:49:20 +02:00
Seth Michael Larson
7025d751e5
[3.13] gh-143572: Run 'python3-libraries' fuzzer in CI using CIFuzz (… ( #143915 )
...
Co-authored-by: 🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко) <578543+webknjaz@users.noreply.github.com>
Co-authored-by: 🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко) <wk.cvs.github@sydorenko.org.ua>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2026-01-16 19:24:34 +02:00
Hugo van Kemenade
b6c6c47693
[3.13] Bump GitHub Actions (GH-143757) ( #143798 )
2026-01-13 18:47:03 +02:00
Hugo van Kemenade
f2665b6ac2
[3.13] Allow Android to fail CI (GH-143471) (GH-143473)
...
(cherry picked from commit efb4e6c733 )
2026-01-06 13:02:16 +00:00
Miss Islington (bot)
08c5bfe31d
[3.13] gh-143148: Replace pre-commit with prek in CI (GH-143149) ( #143359 )
...
Co-authored-by: Johann Christensen <johannchristensen@outlook.de>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
2026-01-02 15:21:41 +00:00
Hugo van Kemenade
c5852c27c1
[3.13] Update pre-commit with zizmor and Ruff fixes (GH-143095) (GH-143102) ( #143113 )
2025-12-23 21:28:00 +02:00
Miss Islington (bot)
6990fbb289
[3.13] gh-142859: Add Tools/check-c-api-docs to mypy check (GH-142860) ( #142870 )
...
gh-142859: Add `Tools/check-c-api-docs` to mypy check (GH-142860)
(cherry picked from commit 248eb3efb3 )
Co-authored-by: sobolevn <mail@sobolevn.me>
2025-12-17 11:47:36 +00:00
Peter Bierma
5569ffedd8
[3.13] gh-141004: Add a CI job ensuring that new C APIs include documentation (GH-142102) (GH-142248)
...
* gh-141004: Add a CI job ensuring that new C APIs include documentation (GH-142102)
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
(cherry picked from commit 1a7824a927 )
* [3.13] gh-141004: Add a CI job ensuring that new C APIs include documentation (GH-142102)
(cherry picked from commit 1a7824a927 )
Co-authored-by: Peter Bierma <zintensitydev@gmail.com>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
* Update Tools/check-c-api-docs/ignored_c_api.txt
---------
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2025-12-14 22:19:48 -05:00
Stan Ulbrych
71bdb38a8d
[3.13] gh-142278: Add granular change detection for platforms in CI (GH-142350) ( #142578 )
...
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2025-12-11 16:44:05 +00:00
Hugo van Kemenade
76db223ff8
[3.13] GH-139596: Cease caching config.cache & ccache in GH Actions (GH-141429) ( #141569 )
...
(cherry picked from commit a2442fda6e )
Co-authored-by: Gregory P. Smith <68491+gpshead@users.noreply.github.com>
2025-11-14 14:51:36 -08:00
Hugo van Kemenade
64bf92179b
[3.13] Omit Python/perf_jit_trampoline.c from the **/*jit* CODEOWNERS rule (GH-136519) ( #140988 )
...
Co-authored-by: Brandt Bucher <brandtbucher@microsoft.com>
2025-11-05 14:24:12 +02:00
Hugo van Kemenade
56146059d3
[3.13] gh-139590: Stricter ruff rules for Tools/wasm (GH-139752) ( #140986 )
...
Co-authored-by: sobolevn <mail@sobolevn.me>
2025-11-04 18:17:57 +00:00
Hugo van Kemenade
2d29aa2036
[3.13] gh-92266: Update pre-commit (GH-139411) ( #139760 )
...
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2025-10-27 16:14:48 +02:00
Miss Islington (bot)
2072386e05
[3.13] Remove Cirrus macOS runners from CI (GH-139799) ( #139803 )
...
Co-authored-by: Jacob Coffee <jacob@z7x.org>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2025-10-08 19:38:52 +00:00
Jacob Coffee
fb89b305b0
[3.13] gh-137638: Use macos-15-intel in GitHub Actions (GH-139154) ( #139790 )
...
Co-authored-by: Jacob Coffee <jacob@z7x.org>
Co-authored-by: 🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко) <wk.cvs.github@sydorenko.org.ua>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2025-10-08 16:16:41 +00:00
Miss Islington (bot)
d3a4e0608b
[3.13] gh-137242: Allow Android testbed to take all Python command-line options (GH-138805) ( #139638 )
...
Modifies the Android test runner to ensure that all valid Python command line
options are preserved when running the test suite.
(cherry picked from commit a9b0506d8d )
Co-authored-by: Malcolm Smith <smith@chaquo.com>
2025-10-06 06:25:58 +00:00
Zachary Ware
dbcaa25839
[3.13] gh-139573: Update OpenSSL in CI (GH-139585)
...
(cherry picked from commit 98e748b3a0 )
2025-10-04 20:52:08 -05:00
Hugo van Kemenade
443d4af2ee
[3.13] gh-138744: GitHub Actions: pin to windows-2022 (GH-138743) ( #138753 )
2025-09-10 19:15:22 +03:00
Bénédikt Tran
8629d466f0
[3.13] gh-135261: bring back CI job for testing OpenSSL 1.1.1w (GH-135262) ( #138110 )
...
This partially reverts commit ad944b5e1f
by bringing back the CI job for testing OpenSSL 1.1.1w. Despite this
version being upstream EOL, the rationale for keeping it as follows:
- It most resembles other 1.1.1-work-a-like ssl APIs supported by important vendors.
- Python officially requires OpenSSL 1.1.1 or later, although OpenSSL 3.0 or later
is recommended for cryptographic modules. Since changing the build requirements
requires a transition period, we need to keep testing the allowed versions.
- The code base still contains calls to OpenSSL functions that are deprecated since
OpenSSL 3.0 as well as `ifdef` blocks constrained to OpenSSL 1.1.1.
(cherry picked from commit 96b7a2eba4 )
2025-08-24 09:47:09 +00:00
sobolevn
165532ccdb
[3.13] gh-133403: Run mypy on Tools/build/mypy.ini changes (GH-137692) ( #137699 )
...
(cherry picked from commit e93dca7223 )
2025-08-13 06:18:29 +00:00
sobolevn
5e48662726
[3.13] gh-133403: Check generate_stdlib_module_names and check_extension_modules with mypy (GH-137546) ( #137691 )
...
(cherry picked from commit 68a61b0f1d )
2025-08-13 08:47:48 +03:00
Hugo van Kemenade
30194914c2
[3.13] gh-137242: Add Android CI job (GH-137186) ( #137684 )
...
(cherry picked from commit f660ec3753 )
Co-authored-by: Malcolm Smith <smith@chaquo.com>
Co-authored-by: Russell Keith-Magee <russell@keith-magee.com>
Co-authored-by: 🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко) <wk.cvs.github@sydorenko.org.ua>
2025-08-13 06:00:20 +08:00
🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко)
5d64571b43
[3.13] Update pre-commit hooks (GH-137591) (GH-137641)
...
(cherry picked from commit b36d23f58e )
Co-authored-by: Malcolm Smith <smith@chaquo.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
2025-08-12 13:42:55 +02:00
Miss Islington (bot)
05292462b6
[3.13] gh-136155: Docs: check for EPUB fatal errors in CI (GH-134074) ( #137538 )
...
Co-authored-by: Maciej Olko <maciej.olko@affirm.com>
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
2025-08-08 19:05:24 +03:00
Alex Waygood
d0c6b09685
[3.13] Remove Alex Waygood as a codeowner for pre-commit config ( #137372 ) ( #137374 )
2025-08-04 11:40:56 +01:00
🇺🇦 Sviatoslav Sydorenko (Святослав Сидоренко)
6a217cef27
[3.13] GH-111758: Merge TSan and UBSan reusable GHA workflows ( #136820 ) (GH-137029)
...
(cherry picked from commit 65d2c51c10 )
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
Co-authored-by: Sviatoslav Sydorenko <webknjaz@redhat.com>
2025-08-01 15:00:48 +02:00
Malcolm Smith
fd39aa3a7f
[3.13] gh-131531: android.py enhancements to support cibuildwheel (GH-132870) ( #135164 )
...
Modifies the environment handling and execution arguments of the Android management
script to support the compilation of third-party binaries, and the use of the testbed to
invoke third-party test code.
(cherry picked from commit 2e1544fd2b )
Co-authored-by: Malcolm Smith <smith@chaquo.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
Co-authored-by: Russell Keith-Magee <russell@keith-magee.com>
2025-06-05 17:23:46 +08:00