Commit graph

170 commits

Author SHA1 Message Date
Hugo van Kemenade
cfb9248cd4
Speedup: build docs in parallel (GH-92733) (GH-92850)
(cherry picked from commit a487623c6b)
2022-05-16 18:53:38 +02:00
Miss Islington (bot)
eded1036f1
CODEOWNERS: Add Erlend Aasland as sqlite3 code owner (GH-92535)
Signed-off-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
(cherry picked from commit 3edda031e4)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@protonmail.com>
2022-05-09 01:27:00 -07:00
Jelle Zijlstra
6712022447
[3.10] build(deps): bump actions/cache from 3.0.1 to 3.0.2 (GH-92111) (#92124)
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit eefe6911f4)
2022-05-02 10:07:03 -06:00
Jelle Zijlstra
1fd3ab7c28
[3.10] build(deps): bump actions/stale from 4 to 5 (GH-92108) (#92127)
Bumps [actions/stale](https://github.com/actions/stale) from 4 to 5.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit 34129f7c42)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-01 17:46:06 -06:00
Jelle Zijlstra
9f8b9a3506
[3.10] build(deps): bump actions/upload-artifact from 2.3.1 to 3 (GH-32227) (#91748)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.3.1 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2.3.1...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>.
(cherry picked from commit b8812c9ca3)
2022-04-20 18:53:31 -07:00
Jelle Zijlstra
d8d5db5f10
[3.10] build(deps): bump actions/cache from 2.1.7 to 3.0.1 (GH-32228) (#91746)
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.0.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2.1.7...v3.0.1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>.
(cherry picked from commit 3ace1034b8)
2022-04-20 18:53:05 -07:00
Jelle Zijlstra
c33524e68b
[3.10] build(deps): bump actions/checkout from 2 to 3 (GH-32226) (#91723)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit 1ba63e3a9b)
2022-04-20 07:40:36 -07:00
Miss Islington (bot)
68caef8f8e
build(deps): bump actions/setup-python from 2 to 3 (GH-31630)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
(cherry picked from commit 74e319239b)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-19 13:41:39 -07:00
Christian Heimes
a59ac1e7d2
[3.10] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (GH-31916)
Co-authored-by: Zachary Ware <zachary.ware@gmail.com>.
Co-authored-by: Christian Heimes <christian@python.org>
2022-03-15 21:31:00 +01:00
Miss Islington (bot)
a481be0c5f
[3.10] Become a CODEOWNER for typing (GH-31374) (GH-31382)
(cherry picked from commit 6f1efd19a7)


Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>

Automerge-Triggered-By: GH:JelleZijlstra
2022-02-16 20:09:06 -08:00
Ned Deily
cf96c279ac
bpo-46106: Update OpenSSL to 1.1.1m (GH-30211) (GH-30224)
Co-authored-by: Ned Deily <nad@python.org>
Co-authored-by: Kumar Aditya <59607654+kumaraditya303@users.noreply.github.com>
2021-12-21 23:24:03 -05:00
Miss Islington (bot)
251d2eadc7
bpo-46114: Fix OpenSSL version check for 3.0.1 (GH-30170)
(cherry picked from commit 2985feac4e)

Co-authored-by: Christian Heimes <christian@python.org>
2021-12-17 07:38:11 -08:00
Miss Islington (bot)
1528d249a5
[3.10] bpo-44035: Check autoconf files thoroughly (GH-29935) (GH-29937)
Co-authored-by: Christian Heimes <christian@python.org>
2021-12-06 13:47:42 +01:00
Miss Islington (bot)
cd85d91bc6
bpo-45893: Add missing extern C to initconfig.h (GH-29761)
Co-authored-by: Steve Dower <steve.dower@python.org>
(cherry picked from commit f4afc53bf6)

Co-authored-by: Christian Heimes <christian@python.org>
2021-11-24 13:57:41 -08:00
Pablo Galindo Salgado
f146ca36f8
bpo-45350: Rerun autoreconf with the pkg-config macros (GH-28707) 2021-10-04 00:39:54 +01:00
Miss Islington (bot)
2fe15dbaad
bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205)
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit cc7c680194)

Co-authored-by: Christian Heimes <christian@python.org>
2021-09-08 01:25:58 -07:00
Miss Islington (bot)
8bb4912d94
Check that 'configure' is generated by GNU Autoconf 2.69 (GH-28152) (GH-28155)
(cherry picked from commit 6beaf2ffae)
2021-09-05 15:01:56 +01:00
Łukasz Langa
52bdda50d7
[3.10] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28039)
(cherry picked from commit d3bdbbf9a4)

Co-authored-by: Steve Dower <steve.dower@python.org>
2021-08-30 15:19:16 +02:00
Pablo Galindo Salgado
c2e0b131c7
[3.10] Fail the CI if an optional module fails to compile (GH-27466). (GH-27481)
(cherry picked from commit 7cad0bee80)

Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2021-07-30 16:14:28 +01:00
Miss Islington (bot)
9d7511c7e0
Add missing gdbm dependencies to the UNIX CI (GH-27467)
(cherry picked from commit 851cca8c22)

Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2021-07-29 15:01:07 -07:00
Miss Islington (bot)
b631d8d932
Add windows build.bat counterpart for 'make regen-all' in error message (GH-26770)
(cherry picked from commit d61b69f02d)

Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
2021-07-26 20:27:48 -07:00
Miss Islington (bot)
e22e8641dd
Replace @ilevkivskyi with @Fidget-Spinner as typing code owner (GH-27210) (#27212)
(cherry picked from commit 311ee83adb)

Co-authored-by: Łukasz Langa <lukasz@langa.pl>
2021-07-17 11:46:25 +02:00
Miss Islington (bot)
c6cd2ecdb6
[3.10] bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769) (GH-26799)
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 44fb551499)


Co-authored-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran
2021-06-19 03:44:37 -07:00
Miss Islington (bot)
36843f716d
bpo-38820: Test with OpenSSL 3.0.0-alpha17 (GH-26266)
(cherry picked from commit 7109624d45)

Co-authored-by: Christian Heimes <christian@python.org>
2021-05-20 08:10:52 -07:00
Miss Islington (bot)
548d8828b0
Update link in SECURITY.md (GH-21320) (GH-26259)
(cherry picked from commit 4d396e7d79)

Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>
2021-05-19 22:06:17 -04:00
Miss Islington (bot)
f8778f96e8
bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942)
Also use new make target to install FIPS provider.
(cherry picked from commit e8525567dd)

Co-authored-by: Christian Heimes <christian@python.org>
2021-05-06 07:53:11 -07:00
Pablo Galindo
b86ac4c352
Add CI step to check changes in the exported ABI (GH-25868) 2021-05-04 02:15:11 +01:00
Pablo Galindo
4d58730a3a
Update CI files to build the 3.10 branch 2021-05-04 01:47:28 +01:00
Brandt Bucher
29282b2825
Fix broken name in build.yml (GH-25759) 2021-05-01 15:02:30 -07:00
Ammar Askar
726c931b38
bpo-43888: Remove coverage builds from CI (GH-25679)
The coverage builds were consistently timing out in CI, suggesting that people were not reviewing the uploaded reports.
2021-04-30 14:04:40 -07:00
Brett Cannon
481994078f
Restrict GITHUB_TOKEN permissions for the 'stale' workflow (GH-25564)
It should only need write-level permissions to pull requests.
2021-04-23 15:18:50 -07:00
Christian Heimes
dcf658157d
bpo-38820: Test with OpenSSL 3.0.0-alpha15 (GH-25537)
Signed-off-by: Christian Heimes <christian@python.org>
2021-04-23 14:19:21 +02:00
Sviatoslav Sydorenko
077a2e7664
bpo-43888: Reduce coverage collection timeout to 1h40m in GHA (GH-25471)
Ref: 

Signed-off-by: Sviatoslav Sydorenko <webknjaz@redhat.com>
2021-04-20 10:22:26 -07:00
Christian Heimes
39258d3595
bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014)
- Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
- Update hashopenssl to require OpenSSL 1.1.1
- multissltests only OpenSSL > 1.1.0
- ALPN is always supported
- SNI is always supported
- Remove deprecated NPN code. Python wrappers are no-op.
- ECDH is always supported
- Remove OPENSSL_VERSION_1_1 macro
- Remove locking callbacks
- Drop PY_OPENSSL_1_1_API macro
- Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
- SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
- security level is always available now
- get_num_tickets is available with TLS 1.3
- X509_V_ERR MISMATCH is always available now
- Always set SSL_MODE_RELEASE_BUFFERS
- X509_V_FLAG_TRUSTED_FIRST is always available
- get_ciphers is always supported
- SSL_CTX_set_keylog_callback is always available
- Update Modules/Setup with static link example
- Mention PEP in whatsnew
- Drop 1.0.2 and 1.1.0 from GHA tests
2021-04-17 11:36:35 +02:00
Christian Heimes
8fa1489365
bpo-43811: Test multiple OpenSSL versions on GHA (GH-25360)
The new checks are only executed when one or more OpenSSL-related files are modified. The checks run a handful of networking and hashing test suites. All SSL checks are optional. This PR also introduces ccache to speed up compilation. In common cases it speeds up configure and compile time from about 90 seconds to less than 30 seconds.

Signed-off-by: Christian Heimes <christian@python.org>
2021-04-13 10:23:45 -07:00
Pablo Galindo
20ac34772a
Fix Sphinx errors in the documentation and re-activate the suspicious check (GH-25368)
The suspicious check is still executed as part of the release process and release managers have been
lately fixing some actual errors that the suspicious target can find. For this reason, reactivate the suspicious
until we decide what to do in a coordinated fashion.
2021-04-12 20:53:15 +01:00
Chris Withers
06e971fc0e
try and get a peak at mock-related PRs before they land (#25356) 2021-04-12 10:44:42 +01:00
Christian Heimes
a54fc683f2
bpo-43631: Update to OpenSSL 1.1.1k (GH-25024)
- [x] Build OpenSSL 1.1.1k for macOS
- [x] Build OpenSSL 1.1.1k for Windows

I have also updated multissl tester and various CI configurations to use latest OpenSSL. The versions were all over the place.

Signed-off-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran
2021-03-29 17:00:34 -07:00
Christian Heimes
f6c6b5821b
bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)
Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.

See: 
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>
2021-03-18 15:06:50 -07:00
Brandt Bucher
94894dd45e
Pin test runner to Ubuntu 18 to un-break CI (#24715) 2021-03-02 23:03:55 -08:00
dependabot[bot]
497b5649cf
build(deps): bump actions/cache from v2.1.3 to v2.1.4 (#24446)
Bumps [actions/cache](https://github.com/actions/cache) from v2.1.3 to v2.1.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.3...26968a09c0ea4f3e233fdddbafd1166051a095f6)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-04 12:57:10 -08:00
Mariatta Wijaya
d30951d4ff
Fix dependabot.yml file (GH-24443)
The `target-branch` field doesn't seem to support array.
Since it defaults to the default branch anyway, we should just remove the `target-branch` field from the config.
2021-02-04 11:22:34 -08:00
dependabot[bot]
aa4caf9887
build(deps): bump actions/upload-artifact from v2.2.1 to v2.2.2 (GH-24411)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from v2.2.1 to v2.2.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2.2.1...e448a9b857ee2131e752b06002bf0e093c65e571)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-03 13:22:27 -08:00
Victor Stinner
9852cb3811
bpo-42955: Rename module_names to sys.stdlib_module_names (GH-24332)
* Rename _Py_module_names to _Py_stdlib_module_names.
* Rename Python/module_names.h to Python/stdlib_module_names.h.
2021-01-25 23:12:50 +01:00
Victor Stinner
cad8020cb8
bpo-42955: Add Python/module_names.h (GH-24258)
Add a private list of all stdlib modules: _Py_module_names.

* Add Tools/scripts/generate_module_names.py script.
* Makefile: Add "make regen-module-names" command.
* setup.py: Add --list-module-names option.
* GitHub Action and Travis CI also runs "make regen-module-names",
  not ony "make regen-all", to ensure that the module names remains
  up to date.
2021-01-19 23:04:49 +01:00
Filipe Laíns
4ac923f275
bpo-42773: fix tests not being run on pushes (GH-24004)
There was a typo, we were checking if the "GITHUB_BASE_REF" string
literal was empty instead of the $GITHUB_BASE_REF value. When
$GITHUB_BASE_REF is empty, the action that triggered the run was not a
pull request, so we always run the full test suite.

Signed-off-by: Filipe Laíns <lains@riseup.net>
2020-12-30 06:53:58 -08:00
Ammar Askar
1031f23fc3
[workflow] Use MSVC problem matcher for Windows action build (GH-18532)
This makes warnings and errors from the compiler very prominent so this should help prevent warnings from sneaking into the code base and catch them in review. See https://discuss.python.org/t/using-github-problem-matchers-to-catch-warnings-early/4254 for more details

You can see a demo of this in action here: https://github.com/ammaraskar/cpython/pull/15/files#diff-9ba2eeca0f254ece0a9df4d7cb68e870

GCC and Sphinx matchers have previously been added in GH-18567 and GH-20325, respectively.
2020-12-28 12:28:40 -06:00
Batuhan Taskaya
a9ef95b811
GH: Add isidentical to the CODEOWNERS (GH-23923) 2020-12-24 14:30:46 +03:00
Mariatta
801165e1a9
Update Stale action message (GH-23791)
We don't close PRs after it becomes stale.
2020-12-15 18:36:33 -08:00
Mariatta
9cc8fa6ac8
Adding "stale" GitHub Action (GH-21247)
Adding "stale" GitHub Action

Added the "stale" GitHub action to the CPython repo.
PR's older than 30 days will be labeled as stale using the "stale-pr" label.

Closes https://github.com/python/core-workflow/issues/372

Co-authored-by: Brett Cannon <brett@python.org>
2020-12-15 11:58:43 -08:00