Skip to content

Commit 0f0feb9

Browse files
Merge branch 'main' into webbrowser-fix
2 parents 81ba4d5 + 8ecb6b8 commit 0f0feb9

File tree

570 files changed

+21873
-9550
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

570 files changed

+21873
-9550
lines changed

.github/CODEOWNERS

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -100,12 +100,12 @@ Lib/test/test_build_details.py @FFY00
100100
InternalDocs/ @AA-Turner
101101

102102
# Tools, Configuration, etc
103-
Doc/Makefile @AA-Turner @hugovk
104-
Doc/_static/ @AA-Turner @hugovk
105-
Doc/conf.py @AA-Turner @hugovk
106-
Doc/make.bat @AA-Turner @hugovk
107-
Doc/requirements.txt @AA-Turner @hugovk
108-
Doc/tools/ @AA-Turner @hugovk
103+
Doc/Makefile @AA-Turner @hugovk @StanFromIreland
104+
Doc/_static/ @AA-Turner @hugovk @StanFromIreland
105+
Doc/conf.py @AA-Turner @hugovk @StanFromIreland
106+
Doc/make.bat @AA-Turner @hugovk @StanFromIreland
107+
Doc/requirements.txt @AA-Turner @hugovk @StanFromIreland
108+
Doc/tools/ @AA-Turner @hugovk @StanFromIreland
109109

110110
# PR Previews
111111
.readthedocs.yml @AA-Turner

.github/actionlint.yaml

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,3 @@
1-
self-hosted-runner:
2-
# Pending release of actionlint > 1.7.11 for macos-26-intel support
3-
# https://github.com/rhysd/actionlint/pull/629
4-
labels: ["macos-26-intel"]
5-
61
config-variables: null
72

83
paths:

.github/dependabot.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@ updates:
33
- package-ecosystem: "github-actions"
44
directory: "/"
55
schedule:
6-
interval: "monthly"
6+
interval: "quarterly"
77
labels:
88
- "skip issue"
99
- "skip news"
@@ -24,7 +24,7 @@ updates:
2424
- package-ecosystem: "pip"
2525
directory: "/Tools/"
2626
schedule:
27-
interval: "monthly"
27+
interval: "quarterly"
2828
labels:
2929
- "skip issue"
3030
- "skip news"

.github/workflows/add-issue-header.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,8 @@ on:
1212
# Only ever run once
1313
- opened
1414

15+
permissions:
16+
contents: read
1517

1618
jobs:
1719
add-header:
@@ -20,7 +22,7 @@ jobs:
2022
issues: write
2123
timeout-minutes: 5
2224
steps:
23-
- uses: actions/github-script@v8
25+
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
2426
with:
2527
# language=JavaScript
2628
script: |

.github/workflows/build.yml

Lines changed: 20 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464
run: |
6565
apt update && apt install git -yq
6666
git config --global --add safe.directory "$GITHUB_WORKSPACE"
67-
- uses: actions/checkout@v6
67+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6868
with:
6969
fetch-depth: 1
7070
persist-credentials: false
@@ -101,10 +101,10 @@ jobs:
101101
needs: build-context
102102
if: needs.build-context.outputs.run-tests == 'true'
103103
steps:
104-
- uses: actions/checkout@v6
104+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
105105
with:
106106
persist-credentials: false
107-
- uses: actions/setup-python@v6
107+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
108108
with:
109109
python-version: '3.x'
110110
- name: Runner image version
@@ -206,16 +206,16 @@ jobs:
206206
strategy:
207207
fail-fast: false
208208
matrix:
209-
# macos-26 is Apple Silicon, macos-26-intel is Intel.
210-
# macos-26-intel only runs tests against the GIL-enabled CPython.
209+
# macos-26 is Apple Silicon, macos-15-intel is Intel.
210+
# macos-15-intel only runs tests against the GIL-enabled CPython.
211211
os:
212212
- macos-26
213-
- macos-26-intel
213+
- macos-15-intel
214214
free-threading:
215215
- false
216216
- true
217217
exclude:
218-
- os: macos-26-intel
218+
- os: macos-15-intel
219219
free-threading: true
220220
uses: ./.github/workflows/reusable-macos.yml
221221
with:
@@ -291,7 +291,7 @@ jobs:
291291
SSLLIB_DIR: ${{ github.workspace }}/multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}
292292
LD_LIBRARY_PATH: ${{ github.workspace }}/multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}/lib
293293
steps:
294-
- uses: actions/checkout@v6
294+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
295295
with:
296296
persist-credentials: false
297297
- name: Runner image version
@@ -302,7 +302,7 @@ jobs:
302302
run: sudo ./.github/workflows/posix-deps-apt.sh
303303
- name: 'Restore SSL library build'
304304
id: cache-ssl-lib
305-
uses: actions/cache@v5
305+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
306306
with:
307307
path: ./multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}
308308
key: ${{ matrix.os }}-multissl-${{ matrix.ssllib.name }}-${{ matrix.ssllib.version }}
@@ -350,7 +350,7 @@ jobs:
350350

351351
runs-on: ${{ matrix.runs-on }}
352352
steps:
353-
- uses: actions/checkout@v6
353+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
354354
with:
355355
persist-credentials: false
356356
- name: Build and test
@@ -363,7 +363,7 @@ jobs:
363363
timeout-minutes: 60
364364
runs-on: macos-14
365365
steps:
366-
- uses: actions/checkout@v6
366+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
367367
with:
368368
persist-credentials: false
369369

@@ -401,7 +401,7 @@ jobs:
401401
OPENSSL_VER: 3.5.5
402402
PYTHONSTRICTEXTENSIONBUILD: 1
403403
steps:
404-
- uses: actions/checkout@v6
404+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
405405
with:
406406
persist-credentials: false
407407
- name: Register gcc problem matcher
@@ -415,7 +415,7 @@ jobs:
415415
echo "LD_LIBRARY_PATH=${GITHUB_WORKSPACE}/multissl/openssl/${OPENSSL_VER}/lib" >> "$GITHUB_ENV"
416416
- name: 'Restore OpenSSL build'
417417
id: cache-openssl
418-
uses: actions/cache@v5
418+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
419419
with:
420420
path: ./multissl/openssl/${{ env.OPENSSL_VER }}
421421
key: ${{ runner.os }}-multissl-openssl-${{ env.OPENSSL_VER }}
@@ -462,7 +462,7 @@ jobs:
462462
./python -m venv "$VENV_LOC" && "$VENV_PYTHON" -m pip install -r "${GITHUB_WORKSPACE}/Tools/requirements-hypothesis.txt"
463463
- name: 'Restore Hypothesis database'
464464
id: cache-hypothesis-database
465-
uses: actions/cache@v5
465+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
466466
with:
467467
path: ${{ env.CPYTHON_BUILDDIR }}/.hypothesis/
468468
key: hypothesis-database-${{ github.head_ref || github.run_id }}
@@ -489,7 +489,7 @@ jobs:
489489
-x test_subprocess \
490490
-x test_signal \
491491
-x test_sysconfig
492-
- uses: actions/upload-artifact@v7
492+
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
493493
if: always()
494494
with:
495495
name: hypothesis-example-db
@@ -510,7 +510,7 @@ jobs:
510510
PYTHONSTRICTEXTENSIONBUILD: 1
511511
ASAN_OPTIONS: detect_leaks=0:allocator_may_return_null=1:handle_segv=0
512512
steps:
513-
- uses: actions/checkout@v6
513+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
514514
with:
515515
persist-credentials: false
516516
- name: Runner image version
@@ -520,7 +520,7 @@ jobs:
520520
- name: Install dependencies
521521
run: sudo ./.github/workflows/posix-deps-apt.sh
522522
- name: Set up GCC-10 for ASAN
523-
uses: egor-tensin/setup-gcc@v2
523+
uses: egor-tensin/setup-gcc@a2861a8b8538f49cf2850980acccf6b05a1b2ae4 # v2.0
524524
with:
525525
version: 10
526526
- name: Configure OpenSSL env vars
@@ -530,7 +530,7 @@ jobs:
530530
echo "LD_LIBRARY_PATH=${GITHUB_WORKSPACE}/multissl/openssl/${OPENSSL_VER}/lib" >> "$GITHUB_ENV"
531531
- name: 'Restore OpenSSL build'
532532
id: cache-openssl
533-
uses: actions/cache@v5
533+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
534534
with:
535535
path: ./multissl/openssl/${{ env.OPENSSL_VER }}
536536
key: ${{ matrix.os }}-multissl-openssl-${{ env.OPENSSL_VER }}
@@ -577,7 +577,7 @@ jobs:
577577
needs: build-context
578578
if: needs.build-context.outputs.run-ubuntu == 'true'
579579
steps:
580-
- uses: actions/checkout@v6
580+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
581581
with:
582582
persist-credentials: false
583583
- name: Runner image version
@@ -613,6 +613,7 @@ jobs:
613613
needs.build-context.outputs.run-ci-fuzz == 'true'
614614
|| needs.build-context.outputs.run-ci-fuzz-stdlib == 'true'
615615
permissions:
616+
contents: read
616617
security-events: write
617618
strategy:
618619
fail-fast: false

.github/workflows/documentation-links.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
timeout-minutes: 5
2323

2424
steps:
25-
- uses: readthedocs/actions/preview@v1
25+
- uses: readthedocs/actions/preview@b8bba1484329bda1a3abe986df7ebc80a8950333 # v1.5
2626
with:
2727
project-slug: "cpython-previews"
2828
single-version: "true"

.github/workflows/jit.yml

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
runs-on: ubuntu-24.04
3333
timeout-minutes: 60
3434
steps:
35-
- uses: actions/checkout@v6
35+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3636
with:
3737
persist-credentials: false
3838
- name: Build tier two interpreter
@@ -69,10 +69,10 @@ jobs:
6969
architecture: ARM64
7070
runner: windows-11-arm
7171
steps:
72-
- uses: actions/checkout@v6
72+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7373
with:
7474
persist-credentials: false
75-
- uses: actions/setup-python@v6
75+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
7676
with:
7777
python-version: '3.11'
7878
# PCbuild downloads LLVM automatically:
@@ -99,14 +99,14 @@ jobs:
9999
- false
100100
include:
101101
- target: x86_64-apple-darwin/clang
102-
runner: macos-26-intel
102+
runner: macos-15-intel
103103
- target: aarch64-apple-darwin/clang
104-
runner: macos-26
104+
runner: macos-15
105105
steps:
106-
- uses: actions/checkout@v6
106+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
107107
with:
108108
persist-credentials: false
109-
- uses: actions/setup-python@v6
109+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
110110
with:
111111
python-version: '3.11'
112112
- name: Install LLVM
@@ -146,10 +146,10 @@ jobs:
146146
- target: aarch64-unknown-linux-gnu/gcc
147147
runner: ubuntu-24.04-arm
148148
steps:
149-
- uses: actions/checkout@v6
149+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
150150
with:
151151
persist-credentials: false
152-
- uses: actions/setup-python@v6
152+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
153153
with:
154154
python-version: '3.11'
155155
- name: Build
@@ -182,10 +182,10 @@ jobs:
182182
use_clang: true
183183
run_tests: false
184184
steps:
185-
- uses: actions/checkout@v6
185+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
186186
with:
187187
persist-credentials: false
188-
- uses: actions/setup-python@v6
188+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
189189
with:
190190
python-version: '3.11'
191191
- name: Build

.github/workflows/lint.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
timeout-minutes: 10
2020

2121
steps:
22-
- uses: actions/checkout@v6
22+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2323
with:
2424
persist-credentials: false
25-
- uses: j178/prek-action@v1
25+
- uses: j178/prek-action@0bb87d7f00b0c99306c8bcb8b8beba1eb581c037 # v1.1.1

.github/workflows/mypy.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -65,10 +65,10 @@ jobs:
6565
"Tools/peg_generator",
6666
]
6767
steps:
68-
- uses: actions/checkout@v6
68+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6969
with:
7070
persist-credentials: false
71-
- uses: actions/setup-python@v6
71+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
7272
with:
7373
python-version: "3.13"
7474
cache: pip

.github/workflows/new-bugs-announce-notifier.yml

Lines changed: 5 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,19 +6,21 @@ on:
66
- opened
77

88
permissions:
9-
issues: read
9+
contents: read
1010

1111
jobs:
1212
notify-new-bugs-announce:
1313
runs-on: ubuntu-latest
14+
permissions:
15+
issues: read
1416
timeout-minutes: 10
1517
steps:
16-
- uses: actions/setup-node@v6
18+
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
1719
with:
1820
node-version: 20
1921
- run: npm install mailgun.js form-data
2022
- name: Send notification
21-
uses: actions/github-script@v8
23+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
2224
env:
2325
MAILGUN_API_KEY: ${{ secrets.MAILGUN_PYTHON_ORG_MAILGUN_KEY }}
2426
with:

0 commit comments

Comments
 (0)