dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
fffe2ca07d
chore(deps): bump j178/prek-action from 1.1.1 to 2.0.0 in the actions group ( #2802 )
...
chore(deps): bump j178/prek-action in the actions group
Bumps the actions group with 1 update: [j178/prek-action](https://github.com/j178/prek-action ).
Updates `j178/prek-action` from 1.1.1 to 2.0.0
- [Release notes](https://github.com/j178/prek-action/releases )
- [Commits](https://github.com/j178/prek-action/compare/0bb87d7f00b0c99306c8bcb8b8beba1eb581c037...79f765515bd648eb4d6bb1b17277b7cb22cb6468 )
---
updated-dependencies:
- dependency-name: j178/prek-action
dependency-version: 2.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-28 11:28:12 -04:00
611194896a
fix: zizmor "code injection via template expansion" ( #2784 )
...
* Refactor action.yml to avoid template expansion, composing command line in Python
* Remove more template expansion
* Make a string quoting that's compatible with pwsh
* Apply suggestions from code review
Co-authored-by: Matthieu Darbois <mayeut@users.noreply.github.com >
---------
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
Co-authored-by: Matthieu Darbois <mayeut@users.noreply.github.com >
2026-03-27 11:49:38 -04:00
Henry Schreiner
e478767d76
chore: remove some string types ( #2798 )
2026-03-27 08:43:58 -04:00
cibuildwheel-bot[bot] and cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>
caf433b137
[Bot] Update dependencies ( #2789 )
...
Update dependencies
Co-authored-by: cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>
2026-03-24 23:52:21 -04:00
Henry Schreiner
a257a3f789
chore: remove remaining future annotations ( #2799 )
2026-03-24 23:52:02 -04:00
Henry Schreiner
6df84da3e7
chore: some cleanup and checks ( #2792 )
...
* chore: clean up config a bit
* chore: add an extra check
* Apply suggestions from code review
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
2026-03-24 23:51:49 -04:00
Agriya Khetarpal
5d52226105
ci: pin GitHub Actions + pre-commit hooks ( #2744 )
...
* Update and pin GitHub Actions
* Pin pre-commit hooks too
* adjustments (don't pin official actions)
2026-03-24 18:03:54 -04:00
817878a5f9
feat: print selected build identifiers in preamble before build loop ( #2785 )
...
* Initial plan
* Print build identifier list in preamble before build loop
Co-authored-by: henryiii <4616906+henryiii@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: henryiii <4616906+henryiii@users.noreply.github.com >
2026-03-24 17:47:41 -04:00
Henry Schreiner
cb1fdd0316
chore: use absolute imports ( #2796 )
...
chore: use abosolute imports
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
2026-03-24 09:20:41 -04:00
sedat4ras
8a2ca0ce78
docs: clarify that v3 major tag doesn't exist, minor version tags do ( #2790 )
2026-03-23 11:43:29 -04:00
cibuildwheel-bot[bot] and cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>
31f0d8a0db
[Bot] Update dependencies ( #2783 )
...
Update dependencies
Co-authored-by: cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>
2026-03-18 06:56:31 +01:00
Joe Rickerby
35452dcd42
Add zizmor as a CI check ( #2776 )
...
* Add zizmor as a CI check
I'm curious about adding this tool, so experimenting with it here...
See #2770 for the impetus.
* Lie about a tag to see what happens
* Revert "Lie about a tag to see what happens"
This reverts commit f0e78b8c92c2d00f71d44e83d7904d8728427341.
2026-03-16 19:55:13 +00:00
Joe Rickerby
741be9402c
Add GHA environment to update-dependencies workflow ( #2778 )
...
* Add GHA environment to update-dependencies workflow
See #2770
* activate the create-pull-request action to see if it works
* Revert "activate the create-pull-request action to see if it works"
This reverts commit b44f94d7a5c852b93b16157831b698f9c250628d.
* Only request the environment when we need it
2026-03-16 19:47:36 +00:00
Agriya Khetarpal
a94d4faa11
Drop explicit build and virtualenv installation from Pyodide build tools ( #2782 )
2026-03-17 01:16:09 +05:30
Joe Rickerby
fd19ae7e2f
Merge branch '2.x'
2026-03-16 19:45:37 +00:00
Joe Rickerby
e5486e0b83
Bump version: v2.23.4
2026-03-16 19:31:17 +00:00
ff9508a3e1
[2.x] Update virtualenv URLs to avoid blob URLs ( #2775 )
...
* [2.x] Update virtualenv URLs to avoid blob URLs
It looks like many people are hitting the HTTP 429 for old versions of cibuildwheel. These hosted versions of virtualenv should work, let's see...
* Write the correct version strings
* ci: some updates based on main branch
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* ci: move to using latest images
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* chore: fix up style checks
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* ci: newer azure images too
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* tests: use new SSL test from main
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* Drop `build`'s installation from Pyodide build tools
---------
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
Co-authored-by: Henry Schreiner <henryschreineriii@gmail.com >
Co-authored-by: Agriya Khetarpal <74401230+agriyakhetarpal@users.noreply.github.com >
2026-03-16 19:24:46 +00:00
Henry Schreiner
fd6b413212
tests: use pytest 9+ and modern config ( #2777 )
...
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
2026-03-13 20:44:48 +01:00
Henry Schreiner
4d4daefbd2
fix: give uv the full python path ( #2774 )
...
* fix: give uv the full python path
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* Fix python binary path in Linux build script
I thought the dir was enough. Seems not.
---------
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
2026-03-13 11:11:25 -04:00
Clément Robert
42c502093f
SEC: add a 7 days cooldown period to dependabot settings ( #2766 )
2026-03-12 21:53:23 +00:00
Clément Robert
bc6f42d805
SEC: disable default gha permissions ( #2771 )
2026-03-12 01:15:38 +05:30
Clément Robert
eaf116e303
SEC: avoid leaking credentials in GHA ( #2769 )
2026-03-11 19:50:11 +05:30
02c132e91e
[pre-commit.ci] pre-commit autoupdate ( #2764 )
...
* [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.15.4 → v0.15.5](https://github.com/astral-sh/ruff-pre-commit/compare/v0.15.4...v0.15.5 )
- [github.com/codespell-project/codespell: v2.4.1 → v2.4.2](https://github.com/codespell-project/codespell/compare/v2.4.1...v2.4.2 )
* Add autoupdate schedule to pre-commit config
---------
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
2026-03-10 18:36:10 -04:00
Matthieu Darbois
fd27532d12
fix: call repair-wheel-command in iOS builds ( #2761 )
2026-03-09 15:56:45 -04:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1313a80d3a
chore(deps): bump docker/setup-qemu-action from 3 to 4 in the actions group ( #2763 )
...
chore(deps): bump docker/setup-qemu-action in the actions group
Bumps the actions group with 1 update: [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action ).
Updates `docker/setup-qemu-action` from 3 to 4
- [Release notes](https://github.com/docker/setup-qemu-action/releases )
- [Commits](https://github.com/docker/setup-qemu-action/compare/v3...v4 )
---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
dependency-version: '4'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-09 15:56:18 -04:00
cibuildwheel-bot[bot] and cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>
601935bfc3
[Bot] Update dependencies ( #2762 )
...
Update dependencies
Co-authored-by: cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>
2026-03-09 12:45:50 -04:00
Joe Rickerby
880a211a08
Add missing PR reference to changelog
2026-03-05 09:03:18 +00:00
Joe Rickerby
ee02a1537c
Bump version: v3.4.0
2026-03-05 09:00:28 +00:00
Henry Schreiner
f08ce70d78
chore: match copyright to BSD-2-clause template ( #2758 )
...
See #2757 .
2026-03-03 09:51:22 +00:00
Gyeongjae Choi
95b4b79b96
Fix incorrect document regarding pyodide auditwheel ( #2752 )
...
* Fix incorrect document for pyodide
* Fix incorrect document for pyodide
* Fix test
2026-03-03 16:55:56 +09:00
f046d0a94d
Bump to Pyodide v0.29.3 ( #2743 )
...
* Bump to Pyodide v0.29.3
* Bump constraints to fix virtualenv release deletion
---------
Co-authored-by: Joe Rickerby <joerick@mac.com >
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
2026-03-02 17:00:30 -05:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
f5a31ee79d
chore(deps): bump the actions group across 1 directory with 4 updates ( #2755 )
...
Bumps the actions group with 4 updates in the / directory: [actions/download-artifact](https://github.com/actions/download-artifact ), [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ), [actions/upload-artifact](https://github.com/actions/upload-artifact ) and [wntrblm/nox](https://github.com/wntrblm/nox ).
Updates `actions/download-artifact` from 7 to 8
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
Updates `actions/attest-build-provenance` from 3.2.0 to 4.1.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest-build-provenance/compare/96278af6caaf10aea03fd8d33a09a777ca52d62f...a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 )
Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
Updates `wntrblm/nox` from 2025.11.12 to 2026.02.09
- [Release notes](https://github.com/wntrblm/nox/releases )
- [Changelog](https://github.com/wntrblm/nox/blob/main/CHANGELOG.md )
- [Commits](https://github.com/wntrblm/nox/compare/2025.11.12...2026.02.09 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '8'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/attest-build-provenance
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: wntrblm/nox
dependency-version: 2026.02.09
dependency-type: direct:production
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-02 16:31:23 -05:00
pre-commit-ci[bot] and pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
35ec4565f5
[pre-commit.ci] pre-commit autoupdate ( #2756 )
...
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.15.2 → v0.15.4](https://github.com/astral-sh/ruff-pre-commit/compare/v0.15.2...v0.15.4 )
- [github.com/python-jsonschema/check-jsonschema: 0.36.2 → 0.37.0](https://github.com/python-jsonschema/check-jsonschema/compare/0.36.2...0.37.0 )
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
2026-03-02 16:31:08 -05:00
51fed90270
[Bot] Update dependencies ( #2734 )
...
Update dependencies
Co-authored-by: cibuildwheel-bot[bot] <83877280+cibuildwheel-bot[bot]@users.noreply.github.com>
Co-authored-by: Joe Rickerby <joerick@mac.com >
2026-03-02 14:15:58 +00:00
b70562f37a
Debug GraalPy/uv test failures on Windows ( #2741 )
...
* Dont attempt uv frontend tests on gp311.
* docs: note GraalPy 3.11 incompatibility with uv on Windows (#2751 )
* Initial plan
* docs: note GraalPy311 incompatibility with uv/build[uv] on Windows
Co-authored-by: joerick <1244307+joerick@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: joerick <1244307+joerick@users.noreply.github.com >
* Skip both graalpy with uv for now
* Docs updates
---------
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: joerick <1244307+joerick@users.noreply.github.com >
2026-03-02 11:24:40 +00:00
Joe Rickerby
0a85e29549
Work around CDN rate limiting on Python.org in bin/update_pythons.py ( #2753 )
2026-03-01 22:51:53 +00:00
Colin Gravill
2d33864baf
Pin the actions/setup-python for the externally used action.yml ( #2749 )
...
Pin the actions/setup-python to a known release
2026-03-01 22:05:39 +00:00
pre-commit-ci[bot] and pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
ade95b7be4
[pre-commit.ci] pre-commit autoupdate ( #2746 )
...
* [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.15.0 → v0.15.2](https://github.com/astral-sh/ruff-pre-commit/compare/v0.15.0...v0.15.2 )
- [github.com/python-jsonschema/check-jsonschema: 0.36.1 → 0.36.2](https://github.com/python-jsonschema/check-jsonschema/compare/0.36.1...0.36.2 )
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
---------
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
2026-03-01 22:02:36 +00:00
Henry Schreiner
bb153041f0
fix: support -q for build/uv ( #2737 )
2026-02-13 20:47:03 -05:00
27fd6ecc3c
docs: fix TOML reference links ( #2740 )
...
* docs: fix TOML reference links
* Apply suggestions from code review
---------
Co-authored-by: Louis Shawn <louis.shawn@qq.com >
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
2026-02-13 21:04:38 +00:00
57e8757899
[pre-commit.ci] pre-commit autoupdate ( #2739 )
...
* [pre-commit.ci] pre-commit autoupdate
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.14.14 → v0.15.0](https://github.com/astral-sh/ruff-pre-commit/compare/v0.14.14...v0.15.0 )
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
* Refactor test_command checks to use set syntax
* Apply suggestion from @henryiii
* [pre-commit.ci] auto fixes from pre-commit.com hooks
for more information, see https://pre-commit.ci
---------
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
2026-02-13 11:24:27 -05:00
dependabot[bot] and dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
8879b0f013
chore(deps): bump the actions group with 2 updates ( #2738 )
...
Bumps the actions group with 2 updates: [actions/download-artifact](https://github.com/actions/download-artifact ) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ).
Updates `actions/download-artifact` from 5 to 7
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v5...v7 )
Updates `actions/attest-build-provenance` from 3.1.0 to 3.2.0
- [Release notes](https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](https://github.com/actions/attest-build-provenance/compare/00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8...96278af6caaf10aea03fd8d33a09a777ca52d62f )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '7'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/attest-build-provenance
dependency-version: 3.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-09 17:17:39 -05:00
Henry Schreiner
9d4c80f487
docs: update for uv backend ( #2736 )
2026-02-08 08:35:24 -05:00
Henry Schreiner
e0af304d30
fix: support uv on android ( #2733 )
2026-02-08 08:35:05 -05:00
Joe Rickerby and Henry Schreiner
a2f965f62f
Add an integration test and debug issues with the meson backend ( #2718 )
...
* Add an integration test with the meson backend
* Modify script to allow testing of the GHA action on a PR
* Try adding cython to languages in meson config
* Revert "Try adding cython to languages in meson config"
This reverts commit 50378a1c7e38665492ad0c683b178e4d96928e1e.
* Pass --vsenv to meson on windows
As seen here https://github.com/matplotlib/matplotlib/blob/9957c394bd01deb7a9bd9cb27804f447a52dc522/.github/workflows/cibuildwheel.yml#L114
* Disable win32 builds for the meson test
* Move the windows-specific config into the test project definition
This is so it can be tested with bin/run_example_ci_configs.py
* Add some docs to the FAQ about meson on windows
* Update bin/run_example_ci_configs.py
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
---------
Co-authored-by: Henry Schreiner <HenrySchreinerIII@gmail.com >
2026-02-08 10:36:47 +00:00
Henry Schreiner
0d2547bf6f
fix: consistently use find_uv for our usage of uv ( #2730 )
...
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
2026-02-06 15:50:18 -05:00
Joe Rickerby
1252e6249a
test: try reduce flakiness of test_ssl ( #2735 )
...
test: replace badssl.com with google.com/generate_204 in SSL test
Switch to a more reliable HTTPS endpoint and add retry logic with
exponential backoff to reduce flaky test failures.
2026-02-06 15:35:20 -05:00
Agriya Khetarpal and Joe Rickerby
42d1caec22
Add a small note about security implications of using cibuildwheel in CI runners ( #2711 )
...
* Bump to actions/checkout v6 everywhere
* Add a note about security
* Not persisting credentials is still valuable
* Fix bad indentation
* Improve wording, remove link to PyPA guides
Co-Authored-By: Joe Rickerby <1244307+joerick@users.noreply.github.com >
---------
Co-authored-by: Joe Rickerby <1244307+joerick@users.noreply.github.com >
2026-02-06 18:54:08 +00:00
Henry Schreiner
d31248fdbf
ci: avoid Intel GraalPy updates ( #2732 )
...
* ci: avoid broken GraalPy release
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
* ci: skip GraalPy when no release url available
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
---------
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
2026-02-05 18:01:29 -05:00
Henry Schreiner
d7dbf5a358
feat: option to build directly with uv ( #2322 )
...
* feat: option to build directly with uv
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
tests: add uv to tests
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
fix: uv doesn't pick special Pythons at the top of the path
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
fix: set uv build constraints too
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
fix: uv doesn't support PyPy 3.8
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
tests: add pyproject.toml for failing test
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
Revert "tests: add pyproject.toml for failing test"
This reverts commit 619bde368a67dfdd8f02dc33a1525c27bc8cbe91.
tests: skip uv output test
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
* tests: uv was in the wrong fixture
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
* fix: from @trim21
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
* tests: improve skipping
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
* fix: some fixes from copilot review
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
---------
Signed-off-by: Henry Schreiner <henryschreineriii@gmail.com >
Signed-off-by: Henry Schreiner <henryfs@princeton.edu >
2026-02-05 12:08:36 -05:00
