152 Commits

Author SHA1 Message Date
Hugo van Kemenade
220e67748a
[3.9] gh-138744: GitHub Actions: pin to windows-2022 (GH-138743) (GH-138758)
(cherry picked from commit 6e78a539bfb406238ec251ba01b7a1819e5c303e)
2025-09-13 22:35:01 +02:00
Hugo van Kemenade
8a417ed4fc
[3.9] gh-122544: Change OS image in GitHub Actions to Ubuntu 22.04 (#122566) (#130295)
Co-authored-by: Damien <81557462+Damien-Chen@users.noreply.github.com>
2025-02-19 14:20:20 +01:00
Miss Islington (bot)
61746a3327
[3.9] gh-107262: Update Tkinter tests for Tcl/Tk 8.6.14 (GH-119322) (#130275)
Co-authored-by: James De Bias <81095953+DBJim@users.noreply.github.com>
Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
2025-02-19 10:53:20 +02:00
Petr Viktorin
fe6c43ec39
[3.9] gh-129641: Docs GHA build: use upload-artifact@v4 (GH-129642) (#130114)
Co-authored-by: shallow-beach <96891913+shallow-beach@users.noreply.github.com>
fix (#128077)
2025-02-18 11:15:37 +02:00
Hugo van Kemenade
307a762b02
[3.9] gh-127359: Pin Tcl/Tk to 8 (8.6) for testing macOS (GH-127365) (#127409) 2024-11-30 18:38:35 +02:00
Petr Viktorin
be988e8aa6
[3.9] gh-89452: GHA: Set --with-dbmliborder to avoid issues with homebrew's gdbm 1.24 (GH-125112) (#125176)
Per https://github.com/python/cpython/issues/89452GH-issuecomment-1116329316,
the issue is fixed in configure for 3.11+, and

> For older Python versions, the workaround is to build with:
>
>     ./configure --with-dbmliborder=gdbm:ndbm

We need this workaround in GitHub Actions, otherwise the tests fail.
(cherry picked from commit 850189a64e7f0b920fe48cb12a5da3e648435680)

Co-authored-by: Łukasz Langa <lukasz@langa.pl>
2024-10-09 16:06:08 +02:00
Ned Deily
f4118e9995
[3.9] gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.11 and multissltests to use 1.1.1w and 3.0.11. (GH-110008)
(cherry picked from commit c88037d137a98d7c399c7bd74d5117b5bcae1543)
2024-01-17 14:46:46 +01:00
Seth Michael Larson
300d3155af
[3.9] gh-112160: Add 'regen-configure' make target (#112164)
Add 'regen-configure' make target
2023-12-07 00:26:24 +01:00
Hugo van Kemenade
13905c93b6
[3.9] CI: Bump GitHub Actions (GH-108879) (#108893)
Co-authored-by: Łukasz Langa <lukasz@langa.pl>
2023-09-05 22:39:06 +02:00
Ned Deily
d31ae21e5d
[3.9] gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, 3.0.10, and 3.1.2. (#108123)
[3.9] gh-107565: Update multissltests and GitHub CI workflows to use  OpenSSL 1.1.1v, 3.0.10, and 3.1.2.

(cherry picked from commit 441797d4ffb12acda257370b9e5e19ed8d6e8a71)
2023-08-22 20:28:57 +02:00
Erlend E. Aasland
38b489bae8
[3.9] CI: Bump macOS build to use OpenSSL v3.0 (GH-105538) (#105871)
(cherry picked from commit 34e93d3998bab8acd651c50724eb1977f4860a08)

Co-authored-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
2023-07-05 13:20:44 +02:00
Gregory P. Smith
e15de14c16
[3.9] gh-103142: Upgrade binary builds and CI to OpenSSL 1.1.1u (GH-105174) (GH-105200) (#105205)
Upgrade builds to OpenSSL 1.1.1u.

Also updates _ssl_data_111.h from OpenSSL 1.1.1u, _ssl_data_300.h from 3.0.9.

Manual edits to the _ssl_data_300.h file prevent it from removing any
existing definitions in case those exist in some peoples builds and were
important (avoiding regressions during backporting).

(cherry picked from commit ede89af)

Co-authored-by: Ned Deily <nad@python.org>
2023-06-05 17:41:51 +02:00
Ned Deily
c9bf00b1ad
[3.9] Update GitHub CI workflow for macOS. (GH-105303) 2023-06-05 02:23:32 -04:00
Steve Dower
bf99e19b99
[3.9] gh-101726: Update the OpenSSL version to 1.1.1t (GH-101727) (GH-101751)
Fixes CVE-2023-0286 (High) and a couple of Medium security issues.
https://www.openssl.org/news/secadv/20230207.txt

Co-authored-by: Gregory P. Smith <greg@krypto.org>
Co-authored-by: Ned Deily <nad@python.org>
2023-03-07 18:01:22 -05:00
Dong-hee Na
c25b484e82
[3.9] gh-101981: Fix Ubuntu SSL tests with OpenSSL (3.1.0-beta1) CI i… (#102094)
[3.9] gh-101981: Fix Ubuntu SSL tests with OpenSSL (3.1.0-beta1) CI issue (gh-102079)
2023-02-21 17:33:23 +01:00
Dong-hee Na
ac3d79c2a0
gh-97032: Set tkinter path for macOS CI (GH-97525) 2022-09-24 15:31:12 -04:00
Miss Islington (bot)
66f4593280
gh-91172: Create a workflow for verifying bundled pip and setuptools (GH-31885) (GH-94123)
Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>
Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
(cherry picked from commit d36954b7ead06daead3dcf9b0dd9f8002eab508f)

Co-authored-by: Illia Volochii <illia.volochii@gmail.com>
2022-06-22 15:58:16 +02:00
Miss Islington (bot)
7ae6f1ae09
CODEOWNERS: Add Erlend Aasland as sqlite3 code owner (GH-92535)
Signed-off-by: Erlend E. Aasland <erlend.aasland@protonmail.com>
(cherry picked from commit 3edda031e4abcdc8a2974f2708db99eeb109de32)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@protonmail.com>
2022-05-09 01:32:26 -07:00
Jelle Zijlstra
07c1cfd3a7
[3.9] build(deps): bump actions/cache from 3.0.1 to 3.0.2 (GH-92111) (#92125)
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit eefe6911f4f497e8b73e0690f9b3f47904fdb02a)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-01 17:46:15 -06:00
Jelle Zijlstra
2f75d43f1e
[3.9] build(deps): bump actions/upload-artifact from 2.3.1 to 3 (GH-32227) (#91749)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 2.3.1 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2.3.1...v3)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>.
(cherry picked from commit b8812c9ca3f6864a233574001e16f1b9e92daf6e)
2022-04-20 18:53:43 -07:00
Jelle Zijlstra
f07d9baea6
[3.9] build(deps): bump actions/cache from 2.1.7 to 3.0.1 (GH-32228) (#91747)
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.0.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2.1.7...v3.0.1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>.
(cherry picked from commit 3ace1034b8202bc7034e15f34561725934f04ff6)
2022-04-20 18:53:17 -07:00
Jelle Zijlstra
c25a0b4a92
[3.9] build(deps): bump actions/checkout from 2 to 3 (GH-32226) (#91722)
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit 1ba63e3a9bb176e5ad8e8dd744b9d2b9d588e275)
2022-04-20 07:40:17 -07:00
Miss Islington (bot)
6cf86fc9c1
build(deps): bump actions/setup-python from 2 to 3 (GH-31630)
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
(cherry picked from commit 74e319239b0a2a5ef8bc27670f4f533ee701d57f)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-19 13:41:51 -07:00
Christian Heimes
513911b359
[3.9] bpo-47024: Update OpenSSL to 1.1.1n (GH-31895) (#31917)
Co-authored-by: Zachary Ware <zachary.ware@gmail.com>.
Co-authored-by: Christian Heimes <christian@python.org>.
Co-authored-by: Christian Heimes <christian@python.org>
2022-03-15 21:34:49 +01:00
Miss Islington (bot)
d975a40e33
[3.9] Become a CODEOWNER for typing (GH-31374) (GH-31381)
(cherry picked from commit 6f1efd19a70839d480e4b1fcd9fecd3a8725824b)


Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>

Automerge-Triggered-By: GH:JelleZijlstra
2022-02-16 20:06:25 -08:00
Ned Deily
5c4d11fe75
bpo-46106: Update OpenSSL to 1.1.1m (GH-30211) (GH-30225)
Co-authored-by: Ned Deily <nad@python.org>
Co-authored-by: Kumar Aditya <59607654+kumaraditya303@users.noreply.github.com>
2021-12-21 23:25:09 -05:00
Christian Heimes
a9b3edb66f
[3.9] bpo-46114: Fix OpenSSL version check for 3.0.1 (GH-30170) (GH-30173)
Co-authored-by: Christian Heimes <christian@python.org>
2021-12-17 17:02:38 +01:00
Christian Heimes
f147248795
[3.9] bpo-44035: Check autoconf files thoroughly (GH-29935) (GH-29938)
Co-authored-by: Christian Heimes <christian@python.org>
2021-12-06 13:48:54 +01:00
Łukasz Langa
7a6178a7cd
[3.9] bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205) (GH-28217)
Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit cc7c6801945c6a7373553b78bd899ce09681ec0a)

Co-authored-by: Christian Heimes <christian@python.org>
2021-09-08 19:01:25 +02:00
Pablo Galindo Salgado
5a7a35467a
Check that 'configure' is generated by GNU Autoconf 2.69 (GH-28156) 2021-09-07 19:30:48 +02:00
Łukasz Langa
5720bcac7b
[3.9] bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009) (GH-28040)
(cherry picked from commit d3bdbbf9a4352a24fc2bfc7a63a024b244b61aba)

Co-authored-by: Steve Dower <steve.dower@python.org>
2021-08-29 17:07:45 +02:00
Pablo Galindo Salgado
3a806b1f05
[3.9] Fail the CI if an optional module fails to compile (GH-27466). (GH-27482)
(cherry picked from commit 7cad0bee80a536c7e47f54cf43174175834f30a0)

Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2021-07-30 15:51:13 +01:00
Miss Islington (bot)
a603aa472a
Add missing gdbm dependencies to the UNIX CI (GH-27467) (GH-27468)
(cherry picked from commit 851cca8c22795a2f143ad5ebc10adab3c7784ad0)

Co-authored-by: Pablo Galindo Salgado <Pablogsal@gmail.com>
2021-07-30 14:07:30 +02:00
Miss Islington (bot)
a13edfb857
Add windows build.bat counterpart for 'make regen-all' in error message (GH-26770)
(cherry picked from commit d61b69f02d441ae517109a4428f2a18416c9ff0f)

Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
2021-07-26 23:32:45 -04:00
Miss Islington (bot)
8187033de1
Replace @ilevkivskyi with @Fidget-Spinner as typing code owner (GH-27210) (#27213)
(cherry picked from commit 311ee83adb40a9b549af8e0b546a787e8eb01f5d)

Co-authored-by: Łukasz Langa <lukasz@langa.pl>
2021-07-17 11:46:11 +02:00
Christian Heimes
c92b391dce
[3.9] bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942) (#25944)
Also use new make target to install FIPS provider..
(cherry picked from commit e8525567dd325527e00b3c4ce7c4ce31ff3f1a8c)

Co-authored-by: Christian Heimes <christian@python.org>
2021-07-12 17:12:38 +02:00
Miss Islington (bot)
eecdc9e1f7
Update link in SECURITY.md (GH-21320) (GH-26260)
(cherry picked from commit 4d396e7d79bd1152f991147718dc5f094a3cc957)

Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>
2021-05-19 22:05:41 -04:00
Miss Islington (bot)
ee0df3dee4
Fix broken name in build.yml (GH-25759) (GH-25802)
(cherry picked from commit 29282b2825545e2823bde94290a80f7c0fd7068e)
2021-05-01 19:56:56 -07:00
Miss Islington (bot)
5ce227f3a7
[3.9] bpo-43811: Test multiple OpenSSL versions on GHA (GH-25360) (GH-25391)
The new checks are only executed when one or more OpenSSL-related files are modified. The checks run a handful of networking and hashing test suites. All SSL checks are optional. This PR also introduces ccache to speed up compilation. In common cases it speeds up configure and compile time from about 90 seconds to less than 30 seconds.

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 8fa1489365e7af8b90286c97db55a2dc60a05cde)


Co-authored-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran
2021-04-13 12:14:41 -07:00
Pablo Galindo
4d9336d114
Add CI step to check changes in the exported ABI (GH-25230) 2021-04-09 01:34:08 +01:00
Christian Heimes
cd82d59206
[3.9] bpo-43631: Update to OpenSSL 1.1.1k (GH-25024) (GH-25088)
Signed-off-by: Christian Heimes <christian@python.org>

Automerge-Triggered-By: GH:tiran.
(cherry picked from commit a54fc683f237d8f0b6e999a63aa9b8c0a45b7fef)

Co-authored-by: Christian Heimes <christian@python.org>
2021-03-30 01:58:06 -07:00
Miss Islington (bot)
3365e684a8
bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)
Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.

See:
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit f6c6b5821bff815bdc810de53992fd1fbdb2edd4)

Co-authored-by: Christian Heimes <christian@python.org>
2021-03-18 15:31:34 -07:00
Miss Islington (bot)
024325db58
Pin test runner to Ubuntu 18 to un-break CI (GH-24715)
(cherry picked from commit 94894dd45e4bad6efb27eac4497b24cdc18b3e2d)

Co-authored-by: Brandt Bucher <brandt@python.org>
2021-03-03 01:56:36 -08:00
Miss Islington (bot)
48d16b4b0f
build(deps): bump actions/upload-artifact from v2.2.1 to v2.2.2 (GH-24411)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from v2.2.1 to v2.2.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2.2.1...e448a9b857ee2131e752b06002bf0e093c65e571)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit aa4caf9887944ab280a87712460e2dd49b55fe5e)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2021-02-04 11:21:37 -08:00
Miss Islington (bot)
0898dcb3a0
bpo-42773: fix tests not being run on pushes (GH-24004)
There was a typo, we were checking if the "GITHUB_BASE_REF" string
literal was empty instead of the $GITHUB_BASE_REF value. When
$GITHUB_BASE_REF is empty, the action that triggered the run was not a
pull request, so we always run the full test suite.

Signed-off-by: Filipe Laíns <lains@riseup.net>
(cherry picked from commit 4ac923f2756f835f512339ee181348cc535ab07f)

Co-authored-by: Filipe Laíns <lains@riseup.net>
2021-02-03 15:38:55 -08:00
Benjamin Peterson
0955f6863d
[3.9] build(deps): bump actions/upload-artifact from v2.2.0 to v2.2.1 (GH-23597)
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from v2.2.0 to v2.2.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2.2.0...726a6dcd0199f578459862705eed35cda05af50b)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 8acd0e0d4976e91500149ee189f369f2b83b7537)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-01 09:30:03 -06:00
Miss Islington (bot)
d33f3347de
build(deps): bump actions/cache from v2.1.2 to v2.1.3 (23582)
Bumps [actions/cache](https://github.com/actions/cache) from v2.1.2 to v2.1.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.2...0781355a23dac32fd3bac414512f4b903437991a)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a43fea88577c460eed7cc92a37b5fce787d6aab1)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2020-12-01 07:24:20 -08:00
Miss Islington (bot)
15d42d7ec6
bpo-42212: Check if generated files are up-to-date in GitHub Actions (GH-23042)
See https: //github.com/python/core-workflow/issues/380

Signed-off-by: Filipe Laíns <lains@archlinux.org>
(cherry picked from commit d20b7ed9c1fabac3fdebb7ec362fe4f022a54639)

Co-authored-by: Filipe Laíns <lains@archlinux.org>
2020-11-24 05:25:29 -08:00
Miss Islington (bot)
37f6fe2c93
bpo-42336: Improve PCbuild batch files (GH-23275)
(cherry picked from commit 2156d964a12285280c533af1c96eb273c58451e6)

Co-authored-by: Steve Dower <steve.dower@python.org>
2020-11-18 09:45:54 -08:00
Miss Skeleton (bot)
09c6120be8
bpo-42208: GitHub Action: Add gdb to posix dependencies (GH-23043) (GH-23047)
Sort also dependencies and remove duplicates (liblzma-dev).
(cherry picked from commit 6e03c0ad156797cd6e9132e895d55dac0344d340)

Co-authored-by: Victor Stinner <vstinner@python.org>

Co-authored-by: Victor Stinner <vstinner@python.org>
2020-10-30 23:16:17 +01:00