184 Commits

Author SHA1 Message Date
sterliakov
db1c3d6316
[3.10] gh-98548: Fix -ne shell operator spelling (#98555) 2022-10-28 12:12:42 +02:00
Dong-hee Na
25eae0b6c2
[3.10] gh-98456: Replace deprecated set-output with up-to-date vers… (gh-98564)
[3.10] gh-98456: Replace deprecated `set-output` with up-to-date version (gh-98457).
(cherry picked from commit 1db2a0cb20a1de5231a73fc7381056d725e90535)

Co-authored-by: Noam Cohen <noam@noam.me>

Co-authored-by: Noam Cohen <noam@noam.me>
2022-10-25 12:02:47 +09:00
Miss Islington (bot)
ba6492e2a7
CODEOWNERS: Become a typing code owner (GH-98480)
(cherry picked from commit cb93b4aee5eb12dc6c4b2dccc81a2e5ace3ea4de)

Co-authored-by: Alex Waygood <Alex.Waygood@Gmail.com>
2022-10-20 07:18:09 -07:00
Julien Palard
a0c11529f3
[3.10] gh-86404: Doc CI: Disable suspicious checks. (GH-26575) (GH-98221)
gh-86404: Doc CI: Disable suspicious checks.
2022-10-12 21:26:27 +02:00
Ezio Melotti
428bd028b3
[3.10] Auto-cancel old builds when new commit pushed to branch (GH-98009) (#98163)
* Auto-cancel old builds when new commit pushed to branch

* Add a fallback

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>

* Use the same group for all workflows.

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>
(cherry picked from commit 75751f4aa5d70f65856645a9128fd42d92d6692c)

Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>

Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
2022-10-10 22:26:38 +02:00
Ezio Melotti
64ce2cba98
[3.10] ci: add GitHub token permissions (GH-92999) (#98161)
* ci: add GitHub token permissions (#92999)

(cherry picked from commit b96e20c1d9be4e6d5ea3e48c9c97e5ecd02f6055)

* [3.10] ci: add GitHub token permissions (GH-92999).
(cherry picked from commit b96e20c1d9be4e6d5ea3e48c9c97e5ecd02f6055)

Co-authored-by: Varun Sharma <varunsh@stepsecurity.io>

Co-authored-by: Varun Sharma <varunsh@stepsecurity.io>
2022-10-10 21:46:09 +02:00
Miss Islington (bot)
c86ee93d75
Fix link to Lifecycle of a Pull Request in CONTRIBUTING (GH-98102)
* Fix link to Lifecycle of a Pull Request in CONTRIBUTING

* Remove trailing backslash.

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>
(cherry picked from commit 3378ebb933b00e1b95f1112511aa2cfb597a4ebf)

Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>
2022-10-08 15:18:44 -07:00
Miss Islington (bot)
15a11a69e0
Add @ezio-melotti as codeowner for .github/. (GH-98079)
(cherry picked from commit 531ffaa7cdc58c5df2abe505803394dbd5293602)

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>
2022-10-08 01:12:01 -07:00
Christian Heimes
32a45011e7
[3.10] gh-94682: Build and test with OpenSSL 1.1.1q (gh-94683) (gh-96391)
Co-authored-by: Christian Heimes <christian@python.org>
2022-08-29 20:02:00 +02:00
Serhiy Storchaka
54d4b4d992
[3.10] gh-91838: Use HTTPS links in docs for resources which redirect to HTTPS (GH-95527) (GH-95644)
If an HTTP link is redirected to a same looking HTTPS link, the latter can
be used directly without changes in readability and behavior.
It protects from a men-in-the-middle attack.

This change does not affect Python examples..
(cherry picked from commit f79547a429d5c90af83a0da821e082cba20d4712)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
2022-08-04 12:19:44 +03:00
Miss Islington (bot)
f6b6b5af78
[3.11] Backport ABI regeneration script (GH-94376)
(cherry picked from commit 648469299d9102bcc165baace67c6758e244eec1)

Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2022-06-28 07:10:04 -07:00
Pablo Galindo Salgado
ee2ddc2d44
[3.10] Add an error message to the ABI-dump file check (#94131) 2022-06-22 22:22:24 +01:00
Miss Islington (bot)
4a28525614
gh-91172: Create a workflow for verifying bundled pip and setuptools (GH-31885) (GH-94122)
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
(cherry picked from commit d36954b7ead06daead3dcf9b0dd9f8002eab508f)

Co-authored-by: Illia Volochii <illia.volochii@gmail.com>
2022-06-22 16:04:06 +02:00
Adam Turner
b62d37c4a5
[3.10] gh-93735: Split Docs CI to speed-up the build (GH-93736) (GH-93833)
(cherry picked from commit 4f26963526f386bba84de8e14962163bfd5da955)

Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
2022-06-16 12:17:10 +02:00
Hugo van Kemenade
cfb9248cd4
Speedup: build docs in parallel (GH-92733) (GH-92850)
(cherry picked from commit a487623c6b784847a8a1e47b4597b0ae2b8def87)
2022-05-16 18:53:38 +02:00
Miss Islington (bot)
eded1036f1
CODEOWNERS: Add Erlend Aasland as sqlite3 code owner (GH-92535)
Signed-off-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
(cherry picked from commit 3edda031e4abcdc8a2974f2708db99eeb109de32)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@protonmail.com>
2022-05-09 01:27:00 -07:00
Jelle Zijlstra
6712022447
[3.10] build(deps): bump actions/cache from 3.0.1 to 3.0.2 (GH-92111) (#92124)
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit eefe6911f4f497e8b73e0690f9b3f47904fdb02a)
2022-05-02 10:07:03 -06:00
Jelle Zijlstra
1fd3ab7c28
[3.10] build(deps): bump actions/stale from 4 to 5 (GH-92108) (#92127)
Bumps [actions/stale](https://github.com/actions/stale) from 4 to 5.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit 34129f7c42b31d12d8ed692cd3f82c8d36c6c644)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-01 17:46:06 -06:00
Jelle Zijlstra
9f8b9a3506
[3.10] build(deps): bump actions/upload-artifact from 2.3.1 to 3 (GH-32227) (#91748)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.3.1 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2.3.1...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>.
(cherry picked from commit b8812c9ca3f6864a233574001e16f1b9e92daf6e)
2022-04-20 18:53:31 -07:00
Jelle Zijlstra
d8d5db5f10
[3.10] build(deps): bump actions/cache from 2.1.7 to 3.0.1 (GH-32228) (#91746)
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.0.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2.1.7...v3.0.1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>.
(cherry picked from commit 3ace1034b8202bc7034e15f34561725934f04ff6)
2022-04-20 18:53:05 -07:00
Jelle Zijlstra
c33524e68b
[3.10] build(deps): bump actions/checkout from 2 to 3 (GH-32226) (#91723)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit 1ba63e3a9bb176e5ad8e8dd744b9d2b9d588e275)
2022-04-20 07:40:36 -07:00
Miss Islington (bot)
68caef8f8e
build(deps): bump actions/setup-python from 2 to 3 (GH-31630)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
(cherry picked from commit 74e319239b0a2a5ef8bc27670f4f533ee701d57f)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-19 13:41:39 -07:00
Christian Heimes
a59ac1e7d2
[3.10] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (GH-31916)
Co-authored-by: Zachary Ware <zachary.ware@gmail.com>.
Co-authored-by: Christian Heimes <christian@python.org>
2022-03-15 21:31:00 +01:00
Miss Islington (bot)
a481be0c5f
[3.10] Become a CODEOWNER for typing (GH-31374) (GH-31382)
(cherry picked from commit 6f1efd19a70839d480e4b1fcd9fecd3a8725824b)


Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>

Automerge-Triggered-By: GH:JelleZijlstra
2022-02-16 20:09:06 -08:00
Ned Deily
cf96c279ac
bpo-46106: Update OpenSSL to 1.1.1m (GH-30211) (GH-30224)
Co-authored-by: Ned Deily <nad@python.org>
Co-authored-by: Kumar Aditya <59607654+kumaraditya303@users.noreply.github.com>
2021-12-21 23:24:03 -05:00
Miss Islington (bot)
251d2eadc7
bpo-46114: Fix OpenSSL version check for 3.0.1 (GH-30170)
(cherry picked from commit 2985feac4e02d590bb78bcce9e30864be53280ac)

Co-authored-by: Christian Heimes <christian@python.org>
2021-12-17 07:38:11 -08:00
Miss Islington (bot)
1528d249a5
[3.10] bpo-44035: Check autoconf files thoroughly (GH-29935) (GH-29937)
Co-authored-by: Christian Heimes <christian@python.org>
2021-12-06 13:47:42 +01:00
Miss Islington (bot)
cd85d91bc6
bpo-45893: Add missing extern C to initconfig.h (GH-29761)
Co-authored-by: Steve Dower <steve.dower@python.org>
(cherry picked from commit f4afc53bf68c8ded20b281cd1baa88a679b4a3fd)

Co-authored-by: Christian Heimes <christian@python.org>
2021-11-24 13:57:41 -08:00
Pablo Galindo Salgado
f146ca36f8
bpo-45350: Rerun autoreconf with the pkg-config macros (GH-28707) 2021-10-04 00:39:54 +01:00
Miss Islington (bot)
2fe15dbaad
bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205)
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit cc7c6801945c6a7373553b78bd899ce09681ec0a)

Co-authored-by: Christian Heimes <christian@python.org>
2021-09-08 01:25:58 -07:00
Miss Islington (bot)
8bb4912d94
Check that 'configure' is generated by GNU Autoconf 2.69 (GH-28152) (GH-28155)
(cherry picked from commit 6beaf2ffaecd92955c5b3c579f184cbecc222636)
2021-09-05 15:01:56 +01:00
Łukasz Langa
52bdda50d7
[3.10] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28039)
(cherry picked from commit d3bdbbf9a4352a24fc2bfc7a63a024b244b61aba)

Co-authored-by: Steve Dower <steve.dower@python.org>
2021-08-30 15:19:16 +02:00
Pablo Galindo Salgado
c2e0b131c7
[3.10] Fail the CI if an optional module fails to compile (GH-27466). (GH-27481)
(cherry picked from commit 7cad0bee80a536c7e47f54cf43174175834f30a0)

Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2021-07-30 16:14:28 +01:00
Miss Islington (bot)
9d7511c7e0
Add missing gdbm dependencies to the UNIX CI (GH-27467)
(cherry picked from commit 851cca8c22795a2f143ad5ebc10adab3c7784ad0)

Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2021-07-29 15:01:07 -07:00
Miss Islington (bot)
b631d8d932
Add windows build.bat counterpart for 'make regen-all' in error message (GH-26770)
(cherry picked from commit d61b69f02d441ae517109a4428f2a18416c9ff0f)

Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
2021-07-26 20:27:48 -07:00
Miss Islington (bot)
e22e8641dd
Replace @ilevkivskyi with @Fidget-Spinner as typing code owner (GH-27210) (#27212)
(cherry picked from commit 311ee83adb40a9b549af8e0b546a787e8eb01f5d)

Co-authored-by: Łukasz Langa <lukasz@langa.pl>
2021-07-17 11:46:25 +02:00
Miss Islington (bot)
c6cd2ecdb6
[3.10] bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769) (GH-26799)
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 44fb55149934d8fb095edb6fc3f8167208035b96)


Co-authored-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran
2021-06-19 03:44:37 -07:00
Miss Islington (bot)
36843f716d
bpo-38820: Test with OpenSSL 3.0.0-alpha17 (GH-26266)
(cherry picked from commit 7109624d45bcf28fbb46a53354785dc5ff953a16)

Co-authored-by: Christian Heimes <christian@python.org>
2021-05-20 08:10:52 -07:00
Miss Islington (bot)
548d8828b0
Update link in SECURITY.md (GH-21320) (GH-26259)
(cherry picked from commit 4d396e7d79bd1152f991147718dc5f094a3cc957)

Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>
2021-05-19 22:06:17 -04:00
Miss Islington (bot)
f8778f96e8
bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942)
Also use new make target to install FIPS provider.
(cherry picked from commit e8525567dd325527e00b3c4ce7c4ce31ff3f1a8c)

Co-authored-by: Christian Heimes <christian@python.org>
2021-05-06 07:53:11 -07:00
Pablo Galindo
b86ac4c352
Add CI step to check changes in the exported ABI (GH-25868) 2021-05-04 02:15:11 +01:00
Pablo Galindo
4d58730a3a
Update CI files to build the 3.10 branch 2021-05-04 01:47:28 +01:00
Brandt Bucher
29282b2825
Fix broken name in build.yml (GH-25759) 2021-05-01 15:02:30 -07:00
Ammar Askar
726c931b38
bpo-43888: Remove coverage builds from CI (GH-25679)
The coverage builds were consistently timing out in CI, suggesting that people were not reviewing the uploaded reports.
2021-04-30 14:04:40 -07:00
Brett Cannon
481994078f
Restrict GITHUB_TOKEN permissions for the 'stale' workflow (GH-25564)
It should only need write-level permissions to pull requests.
2021-04-23 15:18:50 -07:00
Christian Heimes
dcf658157d
bpo-38820: Test with OpenSSL 3.0.0-alpha15 (GH-25537)
Signed-off-by: Christian Heimes <christian@python.org>
2021-04-23 14:19:21 +02:00
Sviatoslav Sydorenko
077a2e7664
bpo-43888: Reduce coverage collection timeout to 1h40m in GHA (GH-25471)
Ref: 

Signed-off-by: Sviatoslav Sydorenko <webknjaz@redhat.com>
2021-04-20 10:22:26 -07:00
Christian Heimes
39258d3595
bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014)
- Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check
- Update hashopenssl to require OpenSSL 1.1.1
- multissltests only OpenSSL > 1.1.0
- ALPN is always supported
- SNI is always supported
- Remove deprecated NPN code. Python wrappers are no-op.
- ECDH is always supported
- Remove OPENSSL_VERSION_1_1 macro
- Remove locking callbacks
- Drop PY_OPENSSL_1_1_API macro
- Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro
- SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now
- security level is always available now
- get_num_tickets is available with TLS 1.3
- X509_V_ERR MISMATCH is always available now
- Always set SSL_MODE_RELEASE_BUFFERS
- X509_V_FLAG_TRUSTED_FIRST is always available
- get_ciphers is always supported
- SSL_CTX_set_keylog_callback is always available
- Update Modules/Setup with static link example
- Mention PEP in whatsnew
- Drop 1.0.2 and 1.1.0 from GHA tests
2021-04-17 11:36:35 +02:00
Christian Heimes
8fa1489365
bpo-43811: Test multiple OpenSSL versions on GHA (GH-25360)
The new checks are only executed when one or more OpenSSL-related files are modified. The checks run a handful of networking and hashing test suites. All SSL checks are optional. This PR also introduces ccache to speed up compilation. In common cases it speeds up configure and compile time from about 90 seconds to less than 30 seconds.

Signed-off-by: Christian Heimes <christian@python.org>
2021-04-13 10:23:45 -07:00
Pablo Galindo
20ac34772a
Fix Sphinx errors in the documentation and re-activate the suspicious check (GH-25368)
The suspicious check is still executed as part of the release process and release managers have been
lately fixing some actual errors that the suspicious target can find. For this reason, reactivate the suspicious
until we decide what to do in a coordinated fashion.
2021-04-12 20:53:15 +01:00