Bump version: v4.0.0rc1

chore: add Python 3.15 to CI test matrix and classifiers (#2850 )
test: add Python 3.15 to CI test matrix and classifiers Update the Max Python CI job from 3.14 to 3.15 and add the Programming Language :: Python :: 3.15 classifier to pyproject.toml. Assisted-by: OpenCode:GLM-5
2026-05-14 08:58:13 -07:00 · 2026-05-14 08:18:20 -07:00 · 2026-05-14 07:41:14 -07:00 · 2026-05-14 09:52:01 +05:30 · 2026-05-13 18:18:30 -04:00 · 2026-05-13 17:19:15 -04:00
193 changed files with 9492 additions and 3859 deletions
@@ -10,7 +10,7 @@ fi

 $PYTHON --version
 $PYTHON -m venv venv
-venv/bin/python -m pip install -U pip dependency-groups
-venv/bin/python -m dependency_groups test | xargs venv/bin/python -m pip install -e.
+venv/bin/python -m pip install -U pip
+venv/bin/python -m pip install -e. --group test
 venv/bin/python -m pip freeze
 venv/bin/python --version
@@ -1,88 +0,0 @@
-only_if: changesInclude('.cirrus.yml') || ($CIRRUS_BRANCH == "main" && !changesIncludeOnly('docs/*', '.pre-commit-config.yaml')) || $CIRRUS_BRANCH =~ 'cirrus.*'
-
-run_tests: &RUN_TESTS
-  install_cibuildwheel_script:
-    - python -m pip install dependency-groups
-    - python -m dependency_groups test | xargs python -m pip install -e.
-  run_cibuildwheel_tests_script:
-    - python ./bin/run_tests.py
-
-linux_x86_task:
-  timeout_in: 120m
-  compute_engine_instance:
-    image_project: cirrus-images
-    image: family/docker-builder
-    platform: linux
-    cpu: 8
-    memory: 8G
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all
-    - add-apt-repository -y ppa:deadsnakes/ppa
-    - apt-get update
-    - apt-get install -y python3.12-venv
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *RUN_TESTS
-
-linux_aarch64_task:
-  compute_engine_instance:
-    image_project: cirrus-images
-    image: family/docker-builder-arm64
-    architecture: arm64
-    platform: linux
-    cpu: 4
-    memory: 4G
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all
-    - add-apt-repository -y ppa:deadsnakes/ppa
-    - apt-get update
-    - apt-get install -y python3.12-venv
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *RUN_TESTS
-
-windows_x86_task:
-  # The task takes ~55 minutes while the timeout happens
-  # after 60 minutes by default, let's allow some wiggle room.
-  timeout_in: 120m
-  windows_container:
-    image: cirrusci/windowsservercore:visualstudio2022
-    cpu: 8
-    memory: 8G
-
-  install_pre_requirements_script:
-    - choco install -y --no-progress python3 --version 3.12.4
-    - refreshenv
-    - echo PATH=%PATH% >> "%CIRRUS_ENV%"
-  <<: *RUN_TESTS
-
-macos_arm64_task:
-  macos_instance:
-    image: ghcr.io/cirruslabs/macos-runner:sequoia
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - brew install python@3.12
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *RUN_TESTS
-
-macos_arm64_cp38_task:
-  macos_instance:
-    image: ghcr.io/cirruslabs/macos-runner:sequoia
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-    PYTEST_ADDOPTS: --run-cp38-universal2 -k 'test_cp38_arm64_testing_universal2_installer or test_arch_auto or test_dummy_serial'
-  install_pre_requirements_script:
-    - brew install python@3.12
-    - python3.12 -m venv ${VENV_ROOT}
-    - curl -fsSLO https://www.python.org/ftp/python/3.8.10/python-3.8.10-macos11.pkg
-    - sudo installer -pkg python-3.8.10-macos11.pkg -target /
-    - rm python-3.8.10-macos11.pkg
-    - sh "/Applications/Python 3.8/Install Certificates.command"
-  <<: *RUN_TESTS
@@ -0,0 +1,7 @@
+# Specification files for platform maintainers
+cibuildwheel/platforms/ios.py         @freakboy3742
+cibuildwheel/platforms/pyodide.py     @hoodmane @ryanking13 @agriyakhetarpal
+cibuildwheel/platforms/android.py     @mhsmith
+
+# Constraints files
+cibuildwheel/resources/constraints-pyodide*.txt @hoodmane @ryanking13 @agriyakhetarpal
@@ -9,3 +9,5 @@ updates:
      actions:
        patterns:
          - "*"
+    cooldown:
+      default-days: 7
@@ -7,13 +7,17 @@ on:
    types:
    - published

+permissions: {}
+
 jobs:
  dist:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false

-    - uses: hynek/build-and-inspect-python-package@v2
+    - uses: hynek/build-and-inspect-python-package@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e # v2.17.0

  publish:
    needs: [dist]
@@ -27,16 +31,16 @@ jobs:
      attestations: write

    steps:
-    - uses: actions/download-artifact@v4
+    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
      with:
        name: Packages
        path: dist

    - name: Generate artifact attestation for sdist and wheel
-      uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
+      uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
      with:
        subject-path: "dist/cibuildwheel-*"

-    - uses: pypa/gh-action-pypi-publish@release/v1
+    - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
      with:
        attestations: true
@@ -12,74 +12,150 @@ on:
      - reopened
      - labeled
    paths-ignore:
-      - 'docs/**'
+      - .ci*
+      - bin/*
+      - docs/**
+      - examples/azure-pipelines-*
+      - examples/ci*
+      - examples/travis-ci-*
      - .pre-commit-config.yaml
+      - .readthedocs.yml
+      - .travis.yml
+      - README.md
+      - azure-pipelines.yml
+      - mkdocs.yml
+      - noxfile.py
  workflow_dispatch:
    # allow manual runs on branches without a PR

+permissions: {}
+
 concurrency:
  group: test-${{ github.ref }}
  cancel-in-progress: true

 jobs:
  lint:
-    name: Linters (mypy, flake8, etc.)
+    name: Linters (mypy, ruff, etc.)
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
-      id: python
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: "3.x"
-    - uses: pre-commit/action@v3.0.1
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+    - uses: j178/prek-action@6ad80277337ad479fe43bd70701c3f7f8aa74db3 # v2.0.3
    - name: PyLint checks
-      run: pipx run --python "${{ steps.python.outputs.python-path }}" nox -s pylint -- --output-format=github
+      run: uvx nox -s pylint -- --output-format=github
+
+  sample:
+    name: Generate a sample project
+    needs: lint
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      name: Install Python
+      with:
+        python-version: "3.x"
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+    - name: Install dependencies
+      run: uv sync --no-dev --group test
+    - name: Generate a sample project
+      run: uv run --no-sync -m test.test_projects test.test_0_basic.basic_project sample_proj
+    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+      with:
+        name: sample_proj
+        path: sample_proj

  test:
-    name: Test on ${{ matrix.os }} (${{ matrix.python_version }})
-    needs: lint
+    name: Test on ${{ matrix.os }} (${{ matrix.python_version }}) ${{ matrix.test_select }}
+    needs: sample
    runs-on: ${{ matrix.os }}
    strategy:
+      fail-fast: false
      matrix:
-        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, windows-11-arm, macos-13, macos-15]
-        python_version: ['3.13']
        include:
+        # Min Python
        - os: ubuntu-latest
          python_version: '3.11'
+        # Max Python
+        - os: ubuntu-latest
+          python_version: '3.15'
        - os: ubuntu-latest
          python_version: '3.14'
+          test_select: android
+        - os: ubuntu-24.04-arm
+          python_version: '3.13'
+        - os: windows-latest
+          python_version: '3.13'
+        - os: windows-11-arm
+          python_version: '3.13'
+        - os: macos-15-intel
+          python_version: '3.13'
+        - os: macos-15
+          python_version: '3.13'
+        - os: macos-15-intel
+          python_version: '3.13'
+          test_select: ios
+        - os: macos-15
+          python_version: '3.13'
+          test_select: ios
+          # Exercise iOS on a non-default simulator.
+          test_runtime: 'args: --simulator "iPhone 16e,OS=18.5"'
+        - os: macos-15-intel
+          python_version: '3.13'
+          test_select: android
+          # Exercise Android on a non-default simulator
+          test_runtime: 'args: --managed minVersion'
+        - os: macos-15
+          python_version: '3.13'
+          test_select: android
    timeout-minutes: 180
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      name: Install Python ${{ matrix.python_version }}
      with:
        python-version: ${{ matrix.python_version }}
        allow-prereleases: true

-    - uses: astral-sh/setup-uv@v6
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0

-    # free some space to prevent reaching GHA disk space limits
-    - name: Clean docker images
-      if: runner.os == 'Linux'
+    - name: Free up disk space
+      if: runner.os == 'Linux' && matrix.test_select != 'android'
      run: |
-        docker system prune -a -f
-        df -h
+        sudo rm -rf $ANDROID_HOME/ndk /opt/hostedtoolcache/CodeQL \
+          /usr/local/lib/node_modules /usr/local/share/chromium \
+          /usr/local/share/powershell
+        df -m

    # for oci_container unit tests
    - name: Set up QEMU
      if: runner.os == 'Linux'
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+
+    - name: Set up Xcode
+      if: ${{ startsWith(matrix.os, 'macos-15') }}
+      run: |
+        # GitHub recommends explicitly selecting the desired Xcode version
+        sudo xcode-select --switch /Applications/Xcode_16.4.app

    - name: Install dependencies
-      run: |
-        uv sync --no-dev --group test
+      run: uv sync --no-dev --group test
+
+    - uses: joerick/pr-labels-action@0543b277721e852d821c6738d449f2f4dea03d5f # v1.0.9

-    - uses: joerick/pr-labels-action@v1.0.9
    - name: Set CIBW_ENABLE
      shell: bash
      run: |
-        if [[ "${{ github.ref_name }}" == "main" ]]; then
+        if [[ "$GITHUB_REF_NAME" == "main" ]]; then
          CIBW_ENABLE=all
        else
          # get the default CIBW_ENABLE value from the test module
@@ -95,9 +171,11 @@ jobs:
        fi
        echo "CIBW_ENABLE=${CIBW_ENABLE}" >> $GITHUB_ENV

-    - name: Generate a sample project
-      run: |
-        uv run --no-sync -m test.test_projects test.test_0_basic.basic_project sample_proj
+    - name: Download a sample project
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        name: sample_proj
+        path: sample_proj

    - name: Run a sample build (GitHub Action)
      uses: ./
@@ -106,29 +184,35 @@ jobs:
        output-dir: wheelhouse
      env:
        CIBW_ARCHS_MACOS: x86_64 universal2 arm64
-        CIBW_BUILD_FRONTEND: 'build[uv]'
+        CIBW_BUILD_FRONTEND: ${{ matrix.test_select && 'build' || 'build[uv]' }}
+        CIBW_PLATFORM: ${{ matrix.test_select }}
+        CIBW_TEST_RUNTIME: ${{ matrix.test_runtime }}

    - name: Run a sample build (GitHub Action, only)
      uses: ./
+      if: matrix.test_select == ''
      with:
        package-dir: sample_proj
        output-dir: wheelhouse_only
-        only: cp312-${{ runner.os == 'Linux' && (runner.arch == 'ARM64' && 'manylinux_aarch64' || 'manylinux_x86_64') || (runner.os == 'Windows' && 'win_amd64' || 'macosx_x86_64') }}
+        only: cp313-${{ runner.os == 'Linux' && (runner.arch == 'ARM64' && 'manylinux_aarch64' || 'manylinux_x86_64') || (runner.os == 'Windows' && 'win_amd64' || 'macosx_x86_64') }}

    - name: Create custom configuration file
      shell: bash
      run: |
        cat > sample_proj/cibw.toml <<EOF
        [tool.cibuildwheel]
-        # Only build on CPython 3.12 on native arch
+        # Only build on CPython 3.13 on native arch
        archs = ["native"]
-        build = "cp312-*"
+        build = "cp313-*"
        # Skip musllinux
        skip = "*-musllinux*"
        EOF

    - name: Run a sample build (GitHub Action, config-file)
      uses: ./
+      env:
+        CIBW_PLATFORM: ${{ matrix.test_select }}
+        CIBW_TEST_RUNTIME: ${{ matrix.test_runtime }}
      with:
        package-dir: sample_proj
        output-dir: wheelhouse_config_file
@@ -138,17 +222,23 @@ jobs:
      shell: bash
      run: |
        test $(find wheelhouse -name '*.whl' | wc -l) -ge 1
-        test $(find wheelhouse_only -name '*.whl' | wc -l) -eq 1
        test $(find wheelhouse_config_file -name '*.whl' | wc -l) -eq 1

-    - uses: actions/upload-artifact@v4
+    - name: Check Action artifacts (native build only)
+      if: matrix.test_select == ''
+      shell: bash
+      run: |
+        test $(find wheelhouse_only -name '*.whl' | wc -l) -eq 1
+
+    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
      with:
        name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }}
        path: wheelhouse/*.whl

    - name: Test cibuildwheel
-      run: |
-        uv run --no-sync bin/run_tests.py ${{ (runner.os == 'Linux' && runner.arch == 'X64') && '--run-podman' || '' }}
+      env:
+        CIBW_TEST_RUNTIME: ${{ matrix.test_runtime }}
+      run: uv run --no-sync bin/run_tests.py --test-select=${{ matrix.test_select || 'native' }} ${{ (runner.os == 'Linux' && runner.arch == 'X64') && '--run-podman' || '' }}

  emulated-archs:
    name: Get qemu emulated architectures
@@ -157,11 +247,13 @@ jobs:
    outputs:
      archs: ${{ steps.archs.outputs.archs }}
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: "3.x"
-    - uses: astral-sh/setup-uv@v6
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
    - name: Install dependencies
      run: uv sync --no-dev --group test
    - name: Get qemu emulated architectures
@@ -180,39 +272,47 @@ jobs:
      matrix:
        arch: ${{ fromJSON(needs.emulated-archs.outputs.archs) }}
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: "3.x"
-    - uses: astral-sh/setup-uv@v6
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
    - name: Install dependencies
      run: uv sync --no-dev --group test

    - name: Set up QEMU
-      uses: docker/setup-qemu-action@v3
+      uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0

    - name: Run the emulation tests
-      run: uv run --no-sync pytest --run-emulation ${{ matrix.arch }} test/test_emulation.py
+      env:
+        MATRIX_ARCH: ${{ matrix.arch }}
+      run: uv run --no-sync pytest --run-emulation "$MATRIX_ARCH" test/test_emulation.py

  test-pyodide:
    name: Test pyodide
-    needs: lint
+    needs: sample
    runs-on: ubuntu-24.04
    timeout-minutes: 180
    steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      name: Install Python 3.12
      with:
        python-version: '3.12'
-    - uses: astral-sh/setup-uv@v6
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0

    - name: Install dependencies
      run: uv sync --no-dev --group test

-    - name: Generate a sample project
-      run: |
-        uv run --no-sync -m test.test_projects test.test_0_basic.basic_project sample_proj
+    - name: Download a sample project
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        name: sample_proj
+        path: sample_proj

    - name: Run a sample build (GitHub Action)
      uses: ./
@@ -221,22 +321,49 @@ jobs:
        output-dir: wheelhouse
      env:
        CIBW_PLATFORM: pyodide
-
-    - name: Run a sample build (GitHub Action) for an overridden Pyodide version
-      uses: ./
-      with:
-        package-dir: sample_proj
-        output-dir: wheelhouse
-        # In case this breaks at any point in time, switch to using the latest version
-        # available or any other version that is not the same as the default one set
-        # in cibuildwheel/resources/build-platforms.toml.
-      env:
-        CIBW_PLATFORM: pyodide
-        CIBW_BUILD: "cp312*"
-        CIBW_PYODIDE_VERSION: "0.27.6"
+        CIBW_ENABLE: pyodide-prerelease

    - name: Run tests with 'CIBW_PLATFORM' set to 'pyodide'
-      run: |
-        uv run --no-sync ./bin/run_tests.py
+      run: uv run --no-sync ./bin/run_tests.py
      env:
        CIBW_PLATFORM: pyodide
+        CIBW_ENABLE: pyodide-prerelease
+
+  test-uv-extras:
+    name: Test uv extra on ${{ matrix.os }} ${{ matrix.test_select }}
+    needs: sample
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+        - os: ubuntu-latest
+          test_select: android
+        - os: windows-latest
+        - os: windows-11-arm
+        - os: macos-15-intel
+        - os: macos-15
+        - os: macos-15-intel
+          test_select: android
+        - os: macos-15
+          test_select: android
+    steps:
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false
+    - name: Download a sample project
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        name: sample_proj
+        path: sample_proj
+    - name: Run a sample build (GitHub Action)
+      uses: ./
+      with:
+        extras: uv
+        package-dir: sample_proj
+        output-dir: wheelhouse
+      env:
+        CIBW_ARCHS_MACOS: x86_64 universal2 arm64
+        CIBW_BUILD: cp314-*
+        CIBW_BUILD_FRONTEND: 'build[uv]'
+        CIBW_PLATFORM: ${{ matrix.test_select }}
@@ -14,36 +14,45 @@ on:
  schedule:
    - cron: '0 6 * * 1'  # "At 06:00 on Monday."

+permissions: {}
+
 jobs:
  update-dependencies:
    name: Update dependencies
    if: github.repository_owner == 'pypa' || github.event_name != 'schedule'
    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    environment: ${{ github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel' && 'update-dependencies-workflow' || '' }}
    steps:

    # we use this step to grab a Github App auth token, so that PRs generated by this workflow
    # run the GHA tests.
-    - uses: actions/create-github-app-token@v2
+    - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
      id: generate-token
      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
      with:
        app-id: ${{ secrets.CIBUILDWHEEL_BOT_APP_ID }}
        private-key: ${{ secrets.CIBUILDWHEEL_BOT_APP_PRIVATE_KEY }}

-    - uses: actions/checkout@v4
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      with:
+        persist-credentials: false

-    - uses: wntrblm/nox@2025.05.01
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      with:
+        python-version: "3.14"

    - name: "Run update: dependencies"
-      run: nox --force-color -s update_constraints
+      run: uvx nox --force-color -s update_constraints
    - name: "Run update: python configs"
-      run: nox --force-color -s update_pins
+      run: uvx nox --force-color -s update_pins
    - name: "Run update: docs user projects"
-      run: nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}
+      run: uvx nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}

    - name: Create Pull Request
      if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
-      uses: peter-evans/create-pull-request@v7
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
      with:
        commit-message: Update dependencies
        title: '[Bot] Update dependencies'
@@ -21,10 +21,12 @@ jobs:
    permissions:
      contents: write
    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false

      - name: Update the ${{ env.TAG_NAME }} tag
        id: update-major-minor-tag
-        uses: joerick/update-vX.Y-tag-action@v1.0
+        uses: joerick/update-vX.Y-tag-action@c4cefb60c33b82e4aa73a469e4acf30ee48d5812 # v1.0.2
        with:
          source-tag: ${{ env.TAG_NAME }}
@@ -0,0 +1,24 @@
+name: zizmor - GitHub Actions Security Analysis
+
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["**"]
+
+permissions: {}
+
+jobs:
+  zizmor:
+    name: Run zizmor 🌈
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: Run zizmor 🌈
+        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
@@ -112,3 +112,10 @@ site/

 # PyCharm
 .idea/
+
+# Lockfiles
+*.lock
+*.pylock
+
+# OS files
+.DS_Store
@@ -20,8 +20,8 @@ linux:
  script:
    - curl -sSL https://get.docker.com/ | sh
    - docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all
-    - python -m pip install dependency-groups
-    - python -m dependency_groups test | xargs python -m pip install -e. pytest-custom-exit-code
+    - python -m pip install -U pip
+    - python -m pip install -e. pytest-custom-exit-code --group test
    - python ./bin/run_tests.py

 windows:
@@ -35,8 +35,8 @@ windows:
      variables:
        CIBW_ENABLE: "all"
  script:
-    - py -m pip install dependency-groups
-    - py -m pip install -e. pytest-custom-exit-code $(py -m dependency_groups test)
+    - py -m pip install -U pip
+    - py -m pip install -e. pytest-custom-exit-code --group test
    - py bin\run_tests.py
  tags:
    - saas-windows-medium-amd64
@@ -50,8 +50,8 @@ macos:
      variables:
        CIBW_ENABLE: "all"
  script:
-    - python3 -m pip install dependency-groups
-    - python3 -m dependency_groups test | xargs python3 -m pip install -e. pytest-custom-exit-code
+    - python3 -m pip install -U pip
+    - python3 -m pip install -e. pytest-custom-exit-code --group test
    - python3 ./bin/run_tests.py
  tags:
    - saas-macos-medium-m1
@@ -1,7 +1,9 @@
-repos:
+ci:
+  autoupdate_schedule: monthly

+repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
-  rev: v5.0.0
+  rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c  # frozen: v6.0.0
  hooks:
  - id: check-case-conflict
  - id: check-merge-conflict
@@ -12,30 +14,34 @@ repos:
    exclude: (cibuildwheel/resources/pinned_docker_images.cfg)|(.svg$)
  - id: mixed-line-ending
  - id: trailing-whitespace
+    exclude: ^cibuildwheel/resources/android/android.patch$

 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: v0.11.12
+  rev: 6fec9b7edb08fd9989088709d864a7826dc74e80  # frozen: v0.15.12
  hooks:
-  - id: ruff
-    args: ["--fix", "--show-fixes"]
+  - id: ruff-check
+    args: ["--fix"]
  - id: ruff-format

 - repo: https://github.com/pre-commit/mirrors-mypy
-  rev: v1.16.0
+  rev: fc0f09a29bb495f4a91f00266155d6282d52485d  # frozen: v1.20.2
  hooks:
  - id: mypy
    name: mypy 3.11 on cibuildwheel/
    args: ["--python-version=3.11"]
+    exclude: ^cibuildwheel/resources/android/_cross_venv.py$  # Requires Python 3.13 or later
    additional_dependencies: &mypy-dependencies
      - bracex
+      - build
      - dependency-groups>=1.2
+      - humanize
      - nox>=2025.2.9
      - orjson
      - packaging
+      - pyelftools
      - pygithub
      - pytest
      - rich
-      - tomli
      - tomli_w
      - types-certifi
      - types-click
@@ -46,13 +52,12 @@ repos:
      - uv
      - validate-pyproject
  - id: mypy
-    name: mypy 3.13
-    exclude: ^cibuildwheel/resources/.*py$
-    args: ["--python-version=3.13"]
+    name: mypy 3.14
+    args: ["--python-version=3.14"]
    additional_dependencies: *mypy-dependencies

 - repo: https://github.com/shellcheck-py/shellcheck-py
-  rev: v0.10.0.1
+  rev: 745eface02aef23e168a8afb6b5737818efbea95  # frozen: v0.11.0.1
  hooks:
  - id: shellcheck

@@ -70,10 +75,10 @@ repos:
    pass_filenames: false
    entry: cog -c -P -r -I ./bin README.md
    files: '^(README\.md|docs/changelog\.md|docs/options\.md|bin/readme.*)$'
-    additional_dependencies: [cogapp]
+    additional_dependencies: [cogapp>=3.5]

 - repo: https://github.com/codespell-project/codespell
-  rev: v2.4.1
+  rev: 2ccb47ff45ad361a21071a7eedda4c37e6ae8c5a  # frozen: v2.4.2
  hooks:
  - id: codespell
    args: ["-w"]
@@ -81,14 +86,13 @@ repos:


 - repo: https://github.com/python-jsonschema/check-jsonschema
-  rev: 0.33.0
+  rev: 943377262562a12b57292fc98fabd7dbf81451fe  # frozen: 0.37.2
  hooks:
    - id: check-dependabot
    - id: check-github-actions
    - id: check-github-workflows
    - id: check-gitlab-ci
-    # Disabled due to schema issue for now:
-    # - id: check-readthedocs
+    - id: check-readthedocs
    - id: check-travis
    - id: check-jsonschema
      name: Check projects
@@ -5,9 +5,7 @@ version: 2
 build:
  os: ubuntu-24.04
  commands:
-    - asdf install python 3.14-dev
-    - asdf global python 3.14-dev
    - asdf plugin add uv
    - asdf install uv latest
    - asdf global uv latest
-    - NO_COLOR=1 uv run --no-dev --group docs mkdocs build --strict --site-dir $READTHEDOCS_OUTPUT/html
+    - NO_COLOR=1 uv run --python 3.14 --managed-python --no-dev --group docs mkdocs build --strict --site-dir $READTHEDOCS_OUTPUT/html
@@ -1,79 +0,0 @@
-os: linux
-dist: jammy
-language: python
-
-branches:
-  only:
-  - main
-
-# only build the main branch or PR that explicitely want to test with Travis CI
-if: (type = "push") OR (commit_message =~ /travis-ci/)
-
-jobs:
-  include:
-    - name: Linux | x86_64 + i686 | Python 3.12
-      python: 3.12
-      services: docker
-      env:
-        - PYTHON=python
-        # a build using CIBW_ENABLE=all does not fit into Travis' time limit,
-        # so only the defaults are tested
-
-    - name: Linux | arm64 | Python 3.12
-      python: 3.12
-      services: docker
-      arch: arm64
-      env:
-        - PYTHON=python
-        - CIBW_ENABLE=all
-
-    - name: Linux | ppc64le | Python 3.12
-      python: 3.12
-      services: docker
-      arch: ppc64le
-      allow_failure: True
-      env:
-        - PYTHON=python
-        # skip test_manylinuxXXXX_only, it uses too much disk space
-        # c.f. https://travis-ci.community/t/running-out-of-disk-space-quota-when-using-docker-on-ppc64le/11634
-        - PYTEST_ADDOPTS='-k "not test_manylinuxXXXX_only"'
-        - CIBW_ENABLE=all
-
-    - name: Windows | x86_64 | Python 3.12
-      os: windows
-      language: shell
-      before_install:
-        # http://woshub.com/updating-trusted-root-certificates-in-windows-10
-        - certutil -generateSSTFromWU roots.sst
-        - powershell -Command 'Get-ChildItem -Path roots.sst | Import-Certificate -CertStoreLocation Cert:\LocalMachine\Root'
-        - rm -f roots.sst
-        - choco upgrade python3 -y --version 3.12.8 --limit-output --params "/InstallDir:C:\\Python312"
-      env:
-        - PYTHON=C:\\Python312\\python
-        # a build using CIBW_ENABLE=all does not fit into Travis' time limit,
-        # so only the defaults are tested
-
-    - name: Linux | s390x | Python 3.12
-      python: 3.12
-      services: docker
-      arch: s390x
-      allow_failure: True
-      env:
-        - PYTHON=python
-        - CIBW_ENABLE=all
-
-install:
- if [ "${TRAVIS_OS_NAME}" == "linux" ]; then docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all; fi
- $PYTHON -m pip install -U pip dependency-groups
- $PYTHON -m dependency_groups test | xargs $PYTHON -m pip install -e.
-
-script: |
-  # travis_wait disable the output while waiting
-  # use the same kind of tricks as in multibuild
-  (while true; do echo "travis_keep_alive"; sleep 300; done) &
-  SPINNER_PID=$!
-  disown
-  result=0
-  $PYTHON ./bin/run_tests.py --num-processes 2 || result=1
-  kill -9 ${SPINNER_PID}
-  test ${result} -eq 0
@@ -1,11 +1,9 @@
 This is a summary of the host Python versions and platforms covered by the different CI platforms:

-|         | 3.11                             | 3.12                                        | 3.13           |
-|---------|----------------------------------|---------------------------------------------|----------------|
-| Linux   | Azure Pipelines / GitHub Actions | CircleCI¹ / Cirrus CI / GitLab¹ / Travis CI | GitHub Actions |
-| macOS   | Azure Pipelines                  | CircleCI¹ / Cirrus CI / GitLab¹             | GitHub Actions |
-| Windows | Azure Pipelines                  | Cirrus CI / GitLab¹ / Travis CI             | GitHub Actions |
+|         | 3.11                             | 3.12                    | 3.13           | 3.14           |
+|---------|----------------------------------|-----------------------|----------------|----------------|
+| Linux   | Azure Pipelines / GitHub Actions | CircleCI¹ / GitLab¹   | GitHub Actions | GitHub Actions |
+| macOS   | Azure Pipelines                  | CircleCI¹ / GitLab¹   | GitHub Actions |                |
+| Windows | Azure Pipelines                  | GitLab¹               | GitHub Actions |                |

 > ¹ Runs a reduced set of tests to reduce CI load
-
-Non-x86 architectures are covered on Travis CI using Python 3.12.
@@ -1,24 +1,9 @@
-This project is licensed under the 'BSD 2-clause license'.
+Copyright 2017, Joe Rickerby and contributors. All rights reserved.

-Copyright (c) 2017-2025, Joe Rickerby and contributors. All rights reserved.
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:

-Redistribution and use in source and binary forms, with or without
-modification, are permitted provided that the following conditions are met:
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.

-1. Redistributions of source code must retain the above copyright notice, this
-list of conditions and the following disclaimer.
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.

-2. Redistributions in binary form must reproduce the above copyright notice,
-this list of conditions and the following disclaimer in the documentation
-and/or other materials provided with the distribution.
-
-THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
-AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
-DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
-FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
-DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
-SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
-CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
-OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
@@ -4,7 +4,6 @@ cibuildwheel
 [![PyPI](https://img.shields.io/pypi/v/cibuildwheel.svg)](https://pypi.python.org/pypi/cibuildwheel)
 [![Documentation Status](https://readthedocs.org/projects/cibuildwheel/badge/?version=stable)](https://cibuildwheel.pypa.io/en/stable/?badge=stable)
 [![Actions Status](https://github.com/pypa/cibuildwheel/workflows/Test/badge.svg)](https://github.com/pypa/cibuildwheel/actions)
-[![Travis Status](https://img.shields.io/travis/com/pypa/cibuildwheel/main?logo=travis)](https://travis-ci.com/github/pypa/cibuildwheel)
 [![CircleCI Status](https://img.shields.io/circleci/build/gh/pypa/cibuildwheel/main?logo=circleci)](https://circleci.com/gh/pypa/cibuildwheel)
 [![Azure Status](https://dev.azure.com/joerick0429/cibuildwheel/_apis/build/status/pypa.cibuildwheel?branchName=main)](https://dev.azure.com/joerick0429/cibuildwheel/_build/latest?definitionId=4&branchName=main)

@@ -15,7 +14,7 @@ cibuildwheel

 Python wheels are great. Building them across **Mac, Linux, Windows**, on **multiple versions of Python**, is not.

-`cibuildwheel` is here to help. `cibuildwheel` runs on your CI server - currently it supports GitHub Actions, Azure Pipelines, Travis CI, CircleCI, and GitLab CI - and it builds and tests your wheels across all of your platforms.
+`cibuildwheel` is here to help. `cibuildwheel` runs on your CI server - currently it supports GitHub Actions, Azure Pipelines, CircleCI, and GitLab CI - and it builds and tests your wheels across all of your platforms.


 What does it do?
@@ -23,29 +22,29 @@ What does it do?

 While cibuildwheel itself requires a recent Python version to run (we support the last three releases), it can target the following versions to build wheels:

-|                    | macOS Intel | macOS Apple Silicon | Windows 64bit | Windows 32bit | Windows Arm64 | manylinux<br/>musllinux x86_64 | manylinux<br/>musllinux i686 | manylinux<br/>musllinux aarch64 | manylinux<br/>musllinux ppc64le | manylinux<br/>musllinux s390x | manylinux<br/>musllinux armv7l | iOS | Pyodide |
-|--------------------|----|-----|-----|-----|-----|----|-----|----|-----|-----|---|-----|-----|
-| CPython 3.8        | ✅ | ✅  | ✅  | ✅  | N/A | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A |
-| CPython 3.9        | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅ | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A |
-| CPython 3.10       | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A |
-| CPython 3.11       | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A |
-| CPython 3.12       | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵  | N/A | ✅⁴ |
-| CPython 3.13³      | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵  | ✅ | N/A |
-| CPython 3.14³      | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵  | ✅ | N/A |
-| PyPy 3.8 v7.3      | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A |
-| PyPy 3.9 v7.3      | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A |
-| PyPy 3.10 v7.3     | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A |
-| PyPy 3.11 v7.3     | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A |
-| GraalPy 3.11 v24.2 | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | N/A  | ✅¹ | N/A | N/A | N/A | N/A | N/A |
+|                          | macOS Intel | macOS Apple Silicon | Windows 64bit | Windows 32bit | Windows Arm64  | manylinux<br/>musllinux x86_64 | manylinux<br/>musllinux i686 | manylinux<br/>musllinux aarch64 | manylinux<br/>musllinux ppc64le | manylinux<br/>musllinux s390x | manylinux<br/>musllinux armv7l | Android | iOS | Pyodide        |
+| ------------------------ | ----------- | ------------------- | ------------- | ------------- | -------------- | ------------------------------ | ---------------------------- | ------------------------------- | ------------------------------- | ----------------------------- | ------------------------------ | ------- | --- | -------------- |
+| CPython 3.9              | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| CPython 3.10             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| CPython 3.11             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| CPython 3.12             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | ✅<sup>3</sup> |
+| CPython 3.13             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | ✅      | ✅  | ✅<sup>3</sup> |
+| CPython 3.14             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | ✅      | ✅  | N/A            |
+| CPython 3.15<sup>5</sup> | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| PyPy 3.9 v7.3            | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | ✅<sup>1</sup>               | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| PyPy 3.10 v7.3           | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | ✅<sup>1</sup>               | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| PyPy 3.11 v7.3           | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | ✅<sup>1</sup>               | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| GraalPy 3.11 v24.2       | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | N/A                          | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| GraalPy 3.12 v25.0       | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | N/A                          | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |

-<sup>¹ PyPy & GraalPy are only supported for manylinux wheels.</sup><br>
-<sup>² Windows arm64 support is experimental.</sup><br>
-<sup>³ Free-threaded mode requires opt-in using [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable).</sup><br>
-<sup>⁴ Experimental, not yet supported on PyPI, but can be used directly in web deployment. Use `--platform pyodide` to build.</sup><br>
-<sup>⁵ manylinux armv7l support is experimental. As there are no RHEL based image for this architecture, it's using an Ubuntu based image instead.</sup><br>
+<sup>**1** PyPy & GraalPy are only supported for manylinux wheels.</sup><br>
+<sup>**2** Windows arm64 support is experimental.</sup><br>
+<sup>**3** Experimental, not yet supported on PyPI, but can be used directly in web deployment. Use `--platform pyodide` to build.</sup><br>
+<sup>**4** manylinux armv7l support is experimental. As there are no RHEL based image for this architecture, it's using an Ubuntu based image instead.</sup><br>
+<sup>**5** Python 3.15 requires opt-in using [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable).</sup><br>

- Builds manylinux, musllinux, macOS 10.9+ (10.13+ for Python 3.12+), and Windows wheels for CPython, PyPy, and GraalPy
- Works on GitHub Actions, Azure Pipelines, Travis CI, CircleCI, GitLab CI, and Cirrus CI
+- Builds manylinux, musllinux, macOS, and Windows wheels for CPython, PyPy, and GraalPy
+- Works on GitHub Actions, Azure Pipelines, CircleCI, and GitLab CI
 - Bundles shared library dependencies on Linux and macOS through [auditwheel](https://github.com/pypa/auditwheel) and [delocate](https://github.com/matthew-brett/delocate)
 - Runs your library's tests against the wheel-installed version of your library

@@ -56,18 +55,18 @@ Usage

 `cibuildwheel` runs inside a CI service. Supported platforms depend on which service you're using:

-|                 | Linux | macOS | Windows | Linux ARM | macOS ARM | Windows ARM | iOS |
-|-----------------|-------|-------|---------|-----------|-----------|-------------|-----|
-| GitHub Actions  | ✅    | ✅    | ✅       | ✅        | ✅        | ✅          | ✅³  |
-| Azure Pipelines | ✅    | ✅    | ✅       |           | ✅        | ✅²         | ✅³  |
-| Travis CI       | ✅    |       | ✅      | ✅        |           |             |     |
-| CircleCI        | ✅    | ✅    |         | ✅        | ✅        |             | ✅³  |
-| Gitlab CI       | ✅    | ✅    | ✅      | ✅¹       | ✅        |             | ✅³  |
-| Cirrus CI       | ✅    | ✅    | ✅      | ✅        | ✅        |             |      |
+|                 | Linux | macOS | Windows | Linux ARM      | macOS ARM | Windows ARM    | Android                    | iOS                        | Pyodide        |
+| --------------- | ----- | ----- | ------- | -------------- | --------- | -------------- | -------------------------- | -------------------------- | -------------- |
+| GitHub Actions  | ✅    | ✅    | ✅      | ✅             | ✅        | ✅<sup>2</sup> | ✅<sup>4</sup>             | ✅<sup>3</sup>             | ✅             |
+| Azure Pipelines | ✅    | ✅    | ✅      |                | ✅        | ✅<sup>2</sup> | ✅<sup>4</sup>             | ✅<sup>3</sup>             | ✅<sup>5</sup> |
+| CircleCI        | ✅    | ✅    |         | ✅             | ✅        |                | ✅<sup>4</sup><sup>5</sup> | ✅<sup>3</sup><sup>5</sup> | ✅<sup>5</sup> |
+| GitLab CI       | ✅    | ✅    | ✅      | ✅<sup>1</sup> | ✅        |                | ✅<sup>4</sup><sup>5</sup> | ✅<sup>3</sup><sup>5</sup> | ✅<sup>5</sup> |

-<sup>¹ [Requires emulation](https://cibuildwheel.pypa.io/en/stable/faq/#emulation), distributed separately. Other services may also support Linux ARM through emulation or third-party build hosts, but these are not tested in our CI.</sup><br>
-<sup>² [Uses cross-compilation](https://cibuildwheel.pypa.io/en/stable/faq/#windows-arm64). It is not possible to test `arm64` on this CI platform.</sup><br>
-<sup>³ Requires a macOS runner; runs tests on the simulator for the runner's architecture.</sup>
+<sup>**1** [Requires emulation](https://cibuildwheel.pypa.io/en/stable/faq/#emulation), distributed separately. Other services may also support Linux ARM through emulation or third-party build hosts, but these are not tested in our CI.</sup><br>
+<sup>**2** [Uses cross-compilation](https://cibuildwheel.pypa.io/en/stable/faq/#windows-arm64). It is not possible to test `arm64` on this CI platform.</sup><br>
+<sup>**3** Requires a macOS runner; runs tests on the simulator for the runner's architecture. </sup><br>
+<sup>**4** Building for Android requires the runner to be Linux x86_64, macOS ARM64 or macOS x86_64. Testing has [additional requirements](https://cibuildwheel.pypa.io/en/stable/platforms/#android).</sup><br>
+<sup>**5** Builds may work, but are untested in cibuildwheel's CI.</sup><br>

 <!--intro-end-->

@@ -88,16 +87,18 @@ jobs:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
-        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-13, macos-latest]
+        os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, windows-11-arm, macos-15-intel, macos-latest]

    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: false

      # Used to host cibuildwheel
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6

      - name: Install cibuildwheel
-        run: python -m pip install cibuildwheel==3.0.0b5
+        run: python -m pip install cibuildwheel==4.0.0rc1

      - name: Build wheels
        run: python -m cibuildwheel --output-dir wheelhouse
@@ -106,7 +107,7 @@ jobs:
        #   CIBW_SOME_OPTION: value
        #   ...

-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
        with:
          name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }}
          path: ./wheelhouse/*.whl
@@ -124,6 +125,11 @@ The following diagram summarises the steps that cibuildwheel takes on each platf

 <sup>Explore an interactive version of this diagram [in the docs](https://cibuildwheel.pypa.io/en/stable/#how-it-works).</sup>

+> [!WARNING]
+> Building and testing wheels executes arbitrary code from your project and its dependencies. Although cibuildwheel uses OCI containers and Pyodide for some builds, these provide no security guarantees - the code you're building and testing has full access to the environment that's invoking cibuildwheel.
+>
+> If you cannot trust all the code that's pulled in, maintain good security hygiene: keep the job that builds distributions separate from the job that uploads them to PyPI, handle secrets and credentials with care and rotate them regularly, and follow the principle of least privilege when granting permissions. Do not store sensitive data on CI runners.
+

 <!--[[[cog from readme_options_table import get_table; print(get_table()) ]]]-->

@@ -149,20 +155,23 @@ The following diagram summarises the steps that cibuildwheel takes on each platf
 |  | [`container-engine`](https://cibuildwheel.pypa.io/en/stable/options/#container-engine) | Specify the container engine to use when building Linux wheels |
 |  | [`dependency-versions`](https://cibuildwheel.pypa.io/en/stable/options/#dependency-versions) | Control the versions of the tools cibuildwheel uses |
 |  | [`pyodide-version`](https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version) | Specify the Pyodide version to use for `pyodide` platform builds |
+| **Auditing** | [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) | Install Python dependencies for the audit step |
+|  | [`audit-command`](https://cibuildwheel.pypa.io/en/stable/options/#audit-command) | Use a tool to check wheels before the end of the run |
 | **Testing** | [`test-command`](https://cibuildwheel.pypa.io/en/stable/options/#test-command) | The command to test each built wheel |
 |  | [`before-test`](https://cibuildwheel.pypa.io/en/stable/options/#before-test) | Execute a shell command before testing each wheel |
-|  | [`test-sources`](https://cibuildwheel.pypa.io/en/stable/options/#test-sources) | Files and folders from the source tree that are copied into an isolated tree before running the tests |
+|  | [`test-sources`](https://cibuildwheel.pypa.io/en/stable/options/#test-sources) | Paths that are copied into the working directory of the tests |
 |  | [`test-requires`](https://cibuildwheel.pypa.io/en/stable/options/#test-requires) | Install Python dependencies before running the tests |
 |  | [`test-extras`](https://cibuildwheel.pypa.io/en/stable/options/#test-extras) | Install your wheel for testing using `extras_require` |
 |  | [`test-groups`](https://cibuildwheel.pypa.io/en/stable/options/#test-groups) | Specify test dependencies from your project's `dependency-groups` |
 |  | [`test-skip`](https://cibuildwheel.pypa.io/en/stable/options/#test-skip) | Skip running tests on some builds |
 |  | [`test-environment`](https://cibuildwheel.pypa.io/en/stable/options/#test-environment) | Set environment variables for the test environment |
+|  | [`test-runtime`](https://cibuildwheel.pypa.io/en/stable/options/#test-runtime) | Controls how the tests will be executed. |
 | **Debugging** | [`debug-keep-container`](https://cibuildwheel.pypa.io/en/stable/options/#debug-keep-container) | Keep the container after running for debugging. |
 |  | [`debug-traceback`](https://cibuildwheel.pypa.io/en/stable/options/#debug-traceback) | Print full traceback when errors occur. |
 |  | [`build-verbosity`](https://cibuildwheel.pypa.io/en/stable/options/#build-verbosity) | Increase/decrease the output of the build |


-<!--[[[end]]] (checksum: 4d6a8418630e9ed43251973d93798a1b) -->
+<!--[[[end]]] (sum: b7YIjCyCkf) -->

 These options can be specified in a pyproject.toml file, or as environment variables, see [configuration docs](https://cibuildwheel.pypa.io/en/latest/configuration/).

@@ -177,37 +186,39 @@ Here are some repos that use cibuildwheel.

 | Name                              | CI | OS | Notes |
 |-----------------------------------|----|----|:------|
-| [scikit-learn][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The machine learning library. A complex but clean config using many of cibuildwheel's features to build a large project with Cython and C++ extensions.  |
-| [pytorch-fairseq][]               | ![github icon][] | ![apple icon][] ![linux icon][] | Facebook AI Research Sequence-to-Sequence Toolkit written in Python. |
+| [scikit-learn][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The machine learning library. A complex but clean config using many of cibuildwheel's features to build a large project with Cython and C++ extensions.  |
 | [duckdb][]                        | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | DuckDB is an analytical in-process SQL database management system |
-| [NumPy][]                         | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The fundamental package for scientific computing with Python. |
-| [Tornado][]                       | ![github icon][] | ![linux icon][] ![apple icon][] ![windows icon][] | Tornado is a Python web framework and asynchronous networking library. Uses stable ABI for a small C extension. |
+| [pytorch-fairseq][]               | ![github icon][] | ![apple icon][] ![linux icon][] | Facebook AI Research Sequence-to-Sequence Toolkit written in Python. |
+| [NumPy][]                         | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The fundamental package for scientific computing with Python. |
 | [NCNN][]                          | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | ncnn is a high-performance neural network inference framework optimized for the mobile platform |
-| [Matplotlib][]                    | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The venerable Matplotlib, a Python library with C++ portions |
+| [Matplotlib][]                    | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The venerable Matplotlib, a Python library with C++ portions |
+| [Tornado][]                       | ![github icon][] | ![linux icon][] ![apple icon][] ![windows icon][] | Tornado is a Python web framework and asynchronous networking library. Uses stable ABI for a small C extension. |
 | [MyPy][]                          | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | The compiled version of MyPy using MyPyC. |
 | [Prophet][]                       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Tool for producing high quality forecasts for time series data that has multiple seasonality with linear or non-linear growth. |
-| [Kivy][]                          | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Open source UI framework written in Python, running on Windows, Linux, macOS, Android and iOS |
+| [Triton][]                        | ![github icon][] | ![linux icon][] | Self hosted runners |

 [scikit-learn]: https://github.com/scikit-learn/scikit-learn
-[pytorch-fairseq]: https://github.com/facebookresearch/fairseq
 [duckdb]: https://github.com/duckdb/duckdb
+[pytorch-fairseq]: https://github.com/facebookresearch/fairseq
 [NumPy]: https://github.com/numpy/numpy
-[Tornado]: https://github.com/tornadoweb/tornado
 [NCNN]: https://github.com/Tencent/ncnn
 [Matplotlib]: https://github.com/matplotlib/matplotlib
+[Tornado]: https://github.com/tornadoweb/tornado
 [MyPy]: https://github.com/mypyc/mypy_mypyc-wheels
 [Prophet]: https://github.com/facebook/prophet
-[Kivy]: https://github.com/kivy/kivy
+[Triton]: https://github.com/openai/triton

 [github icon]: docs/data/readme_icons/github.svg
 [azurepipelines icon]: docs/data/readme_icons/azurepipelines.svg
 [circleci icon]: docs/data/readme_icons/circleci.svg
 [gitlab icon]: docs/data/readme_icons/gitlab.svg
 [travisci icon]: docs/data/readme_icons/travisci.svg
-[cirrusci icon]: docs/data/readme_icons/cirrusci.svg
 [windows icon]: docs/data/readme_icons/windows.svg
 [apple icon]: docs/data/readme_icons/apple.svg
 [linux icon]: docs/data/readme_icons/linux.svg
+[android icon]: docs/data/readme_icons/android.svg
+[ios icon]: docs/data/readme_icons/ios.svg
+[pyodide icon]: docs/data/readme_icons/pyodide.svg

 <!-- END bin/projects.py -->

@@ -227,55 +238,78 @@ Changelog

 <!-- [[[cog from readme_changelog import mini_changelog; print(mini_changelog()) ]]] -->

-### v3.0.0
+### v4.0.0rc1

-Not yet released, but available for testing.
+_14 May 2026_

-Note - when using a beta version, be sure to check the [latest docs](https://cibuildwheel.pypa.io/en/latest/), rather than the stable version, which is still on v2.X.
+- 🌟 Adds wheel auditing with `abi3audit` as a default after the repair step, with new [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) and [`audit-command`](https://cibuildwheel.pypa.io/en/stable/options/#audit-command) options (#2805)
+- 🌟 Adds `pyemscripten` platform tag support (PEP 783), updates Pyodide to 314.0.0a1, and adds a `pyodide-eol` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) flag for building end-of-life Pyodide versions (#2812, #2848)
+- 🌟 Sets up `delvewheel` as the default [`repair-wheel-command`](https://cibuildwheel.pypa.io/en/stable/options/#repair-wheel-command) for Windows, so extension module DLLs are now bundled automatically. Skip by setting it to empty if not needed. (#2831)
+- ✨ Adds CPython 3.15 support, under the [`enable` option](https://cibuildwheel.pypa.io/en/stable/options/#enable) `cpython-prerelease`. This version of cibuildwheel uses 3.15.0b1. (#2833, #2850)

-<!--
-note to self, when doing final release, change to docs URLs in this section to the stable version!
-->
+    _While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.14 will be available in cibuildwheel without the flag._ (#2390)
+- ✨ Adds `{project}` and `{package}` placeholders to [`config-settings`](https://cibuildwheel.pypa.io/en/stable/options/#config-settings) (#2827)
+- ⚠️ Drops support for Python 3.8 (#2686)
+- ⚠️ Removes the experimental CPython 3.13 free-threading builds and the `cpython-freethreading` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) option. CPython 3.14+ free-threading support remains available without the enable flag. (#2684)
+- ⚠️ Drops support for Cirrus CI, which is shutting down June 1, 2026 (#2817)
+- 🐛 Fixes `UV_PYTHON` not being set for [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) on Linux when using `uv` as the [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) (#2830)
+- 🛠 Updates Android to Python 3.13.13 and 3.14.4 (#2821)
+- 🛠 Applies Pyodide-specific patches to the Emscripten toolchain installation (#2800)
+- 🛠 Updates dependencies and container pins (#2845, #2837, #2821, #2818, #2810, #2838, #2813)
+- 🛠 Uses `python -V -V` for Windows build diagnostics (#2832)
+- 📚 Documents platform-specific [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) configuration (#2834)
+- 📚 Updates the "How it works" diagram with details of Android, iOS, and Pyodide builds (#2816)
+- 📚 Adds Pyodide icon and regenerates working examples data for Android, iOS, and Pyodide (#2815, #2811)
+- 📚 Links back to source in docs (#2806)
+- 💼 Adds PEP 723 metadata for `bin/` scripts and drops the `bin` dependency group (#2819)
+- 💼 Updates CI action pins and dev dependencies (#2851, #2843, #2826, #2823, #2820, #2807)
+- 🧪 Fixes Android tests using the `uv` frontend (#2809)
+- 🧪 Fixes the update-dependencies workflow to use `uv` to run `nox` (#2808)

-If you've used previous versions of the beta:
- ⚠️ Previous betas of v3.0 changed the working directory for tests. This has been rolled back to the v2.x behaviour, so you might need to change configs if you adapted to the beta 1 or 2 behaviour. See [issue #2406](https://github.com/pypa/cibuildwheel/issues/2406) for more information.
- ⚠️ GraalPy shipped with the identifier `gp242-*` in previous betas, this has been changed to `gp311_242-*` to be consistent with other interpreters, and to fix a bug with GraalPy and project requires-python detection. If you were using GraalPy, you might need to update your config to use the new identifier.
- ⚠️ `test-sources` now uses `project` directory instead of the `package` directory (matching the docs).

-#### v3.0.0b5
+### v3.4.1

-_3 June 2025_
+_2 April 2026_

- ✨ Support multiple commands on iOS, joined by `&&`, like the other platforms. (#2432)
- ✨ Add `pyodide-prerelease` enable option, with an early build of 0.28 (Python 3.13). (#2431)
- 🛠 test-sources now uses the `project` directory instead of the `package` directory (matching the docs). (#2437)
- 🛠 Fixed a bug with GraalPy if vsdevcmd prints an error. Cirrus CI works again. (#2414)
- 🛠 Use the standard Schema line for the integrated JSONSchema. (#2433)
- 📚 Use Python 3.14 color output in docs CLI output. (#2407)
+- ⚠️ Building for the experimental CPython 3.13 free-threading variant is now deprecated. That functionality will be removed in the next minor release. The [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) option `cpython-freethreading` is therefore also deprecated. Builds specifying `enable = "all"` no longer select `cpython-freethreading`. CPython 3.14 free-threading support remains available without the `enable` flag. (#2787)
+- 🐛 iOS builds will no longer skip `repair-wheel-command` if it's defined in config (#2761)
+- 🐛 Fix bug causing `uv` to fail when environments define PYTHON_VERSION or UV_PYTHON, conflicting with our venvs (#2795)
+- ✨ cibuildwheel prints the selected build identifiers at the start of the build. (#2785)
+- 🔐 The GitHub Action now references other actions with a full SHA (#2744)

-#### v3.0.0b4
+### v3.4.0

-_29 May 2025_
+_5 March 2026_

- 🛠 Dependency updates, including Python 3.14.0b2. (#2371)
- 🛠 Remove the addition of `PYTHONSAFEPATH` to `test-environment`. (#2429)
- 📚 README table now matches docs and auto-updates. (#2427, #2428)
+- 🌟 You can now build wheels using `uv` as a build frontend. This should improve performance, especially if your project has lots of build dependencies. To use, set [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) to `uv`. (#2322)
+- ⚠️ We no longer support running on Travis CI. It may continue working but we don't run tests there anymore so we can't be sure. (#2682)
+- ✨ Improvements to building rust wheels on Android (#2650)
+- 🛠 Update Pyodide to 0.29.3 (#2719, #2733)
+- 🐛 Fix bug with the GitHub Action on Windows, where PATH was getting unnecessarily changed, causing issues with meson builds. (#2723)
+- ✨ Add support for quiet setting on `build` and `uv` from the cibuildwheel `build-verbosity` setting. (#2737)
+- 📚 Docs updates, including guidance on using Meson on Windows (#2718)

-#### v3.0.0b3
+### v3.3.1

-_28 May 2025_
+_5 January 2026_

- 🛠 Reverts the test working dir (when test-sources isn't set) to a temporary dir, rather than the project. (#2420)
- 📚 Docs now primarily use the pyproject.toml name of options, rather than the environment variable name. (#2389)
+- 🛠 Update dependencies and container pins, including updating to CPython 3.14.2. (#2708)

-#### v3.0.0b2
+### v3.3.0

-_25 May 2025_
+_12 November 2025_

- ✨ Adds the [`CIBW_TEST_ENVIRONMENT`](https://cibuildwheel.pypa.io/en/latest/options/#test-environment) option, which allows you to set environment variables for the test command. cibuildwheel now sets `PYTHONSAFEPATH=1` in test environments by default, to avoid picking up package imports from the local directory - we want to test the installed wheel, not the source tree! You can change that, or any other environment variable in the test environment using this option. (#2388)
- ✨ Improves support for Pyodide builds and adds the [`CIBW_PYODIDE_VERSION`](https://cibuildwheel.pypa.io/en/latest/options/#pyodide-version) option, which allows you to specify the version of Pyodide to use for builds. (#2002)
+- 🐛 Fix an incompatibility with Docker v29 (#2660)
+- ✨ Adds `test-runtime` option, to customise how tests on simulated/emulated environments are run (#2636)
+- ✨ Adds support for new `manylinux_2_35` images on 32-bit ARM `armv7l`, offering better C++20 compatibility (#2656)
+- ✨ `build[uv]` is now supported on Android (#2587)
+- ✨ You can now install extras (such as `uv`) with a simple option on the GitHub Action (#2630)
+- ✨ `{project}` and `{package}` placeholders are now supported in `repair-wheel-command` (#2589)
+- 🛠 The versions set with `dependency-versions` no longer constrain packages specified by your `build-system.requires`. Previously, on platforms other than Linux, the constraints in this option would remain in the environment during the build. This has been tidied up make behaviour more consistent between platforms, and to prevent version conflicts. (#2583)
+- 🛠 Improve the handling of `test-command` on Android, enabling more options to be passed (#2590)
+- 📚 Docs improvements (#2618)

-<!-- [[[end]]] (checksum: c95d170eee4d70055d927723c033426a) -->
+<!-- [[[end]]] (sum: ZD0EjcyC0B) -->

 ---

@@ -295,11 +329,22 @@ Everyone interacting with the cibuildwheel project via codebase, issue tracker,
 Maintainers
 -----------

+Core:
+
 - Joe Rickerby [@joerick](https://github.com/joerick)
 - Yannick Jadoul [@YannickJadoul](https://github.com/YannickJadoul)
 - Matthieu Darbois [@mayeut](https://github.com/mayeut)
 - Henry Schreiner [@henryiii](https://github.com/henryiii)
 - Grzegorz Bokota [@Czaki](https://github.com/Czaki)
+- Agriya Khetarpal [@agriyakhetarpal](https://github.com/agriyakhetarpal) (also Pyodide)
+
+Platform maintainers:
+
+- Russell Keith-Magee [@freakboy3742](https://github.com/freakboy3742) (iOS)
+- Hood Chatham [@hoodmane](https://github.com/hoodmane) (Pyodide)
+- Gyeongjae Choi [@ryanking13](https://github.com/ryanking13) (Pyodide)
+- Tim Felgentreff [@timfel](https://github.com/timfel) (GraalPy)
+- Malcolm Smith [@mhsmith](https://github.com/mhsmith) (Android)

 Credits
 -------
@@ -17,6 +17,10 @@ inputs:
    description: 'Build a specific wheel only. No need for arch/platform if this is set'
    required: false
    default: ''
+  extras:
+    description: 'Comma-separated list of extras to install'
+    required: false
+    default: ''
 branding:
  icon: package
  color: yellow
@@ -24,17 +28,18 @@ branding:
 runs:
  using: composite
  steps:
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      id: python
      with:
-        python-version: "3.11 - 3.13"
+        python-version: "3.11 - 3.14"
        update-environment: false

    - id: cibw
      run: |
-        # Install cibuildwheel
-        "${{ steps.python.outputs.python-path }}" -u << "EOF"
+        # Install cibuildwheel and build the command line
+        "$PYTHON" -u << "EOF"
        import os
+        import shlex
        import shutil
        import sys
        import venv
@@ -42,6 +47,8 @@ runs:
        from pathlib import Path
        from subprocess import run

+        EXTRAS = set(e.strip() for e in os.environ.get("INPUT_EXTRAS", "").split(",") if e.strip())
+

        class EnvBuilder(venv.EnvBuilder):
            def __init__(self):
@@ -53,39 +60,88 @@ runs:
            def post_setup(self, context):
                super().post_setup(context)
                self.bin_path = Path(context.env_exe).parent
-                run([sys.executable, "-m", "pip", "--python", context.env_exe, "install", r"${{ github.action_path }}"], check=True)
+                install_spec = os.environ["GITHUB_ACTION_PATH"]
+                if EXTRAS:
+                    install_spec += f"[{','.join(sorted(EXTRAS))}]"
+                run([sys.executable, "-m", "pip", "--python", context.env_exe, "install", install_spec], check=True)


        print("::group::Install cibuildwheel")
-        venv_path = Path(r"${{ runner.temp }}") / "cibw"
+        venv_path = Path(os.environ["RUNNER_TEMP"]) / "cibw"
        if venv_path.exists():
            shutil.rmtree(venv_path)
+
        builder = EnvBuilder()
        builder.create(venv_path)
-        cibw_path = [path for path in builder.bin_path.glob("cibuildwheel*") if path.stem == "cibuildwheel"][0]
+        exposed_binaries = {"cibuildwheel"}
+
+        if "uv" in EXTRAS:
+            exposed_binaries.add("uv")
+        clean_bin_path = builder.bin_path.parent / f"{builder.bin_path.name}.clean"
+        clean_bin_path.mkdir()
+
+        for path in list(builder.bin_path.iterdir()):
+            if path.stem in exposed_binaries:
+                try:
+                    os.symlink(path, clean_bin_path / path.name)
+                except OSError:
+                    shutil.copy2(path, clean_bin_path / path.name)
+
+        cibw_bin = [p for p in builder.bin_path.glob("cibuildwheel*") if p.stem == "cibuildwheel"][0]
+
+        # Build the command line
+        cmd_args = [str(cibw_bin), os.environ["INPUT_PACKAGE_DIR"]]
+
+        if output_dir := os.environ.get("INPUT_OUTPUT_DIR"):
+            cmd_args += ["--output-dir", output_dir]
+
+        if config_file := os.environ.get("INPUT_CONFIG_FILE"):
+            cmd_args += ["--config-file", config_file]
+
+        if only := os.environ.get("INPUT_ONLY"):
+            cmd_args += ["--only", only]
+
+        cmd_bash = shlex.join(cmd_args)
+
+        def pwsh_quote(text):
+            # Wrap in single quotes and double-up any existing single quotes
+            return "'" + str(text).replace("'", "''") + "'"
+
+        # Prepend '& ' so PowerShell executes the quoted binary path
+        cmd_pwsh = "& " + " ".join(pwsh_quote(arg) for arg in cmd_args)
+
        with open(os.environ["GITHUB_OUTPUT"], "at") as f:
-            f.write(f"cibw-path={cibw_path}\n")
+            f.write(f"prepend-path={clean_bin_path}\n")
+            f.write(f"cmd-bash={cmd_bash}\n")
+            f.write(f"cmd-pwsh={cmd_pwsh}\n")
+
        print("::endgroup::")
        EOF
      shell: bash
+      env:
+        PYTHON: ${{ steps.python.outputs.python-path }}
+        INPUT_PACKAGE_DIR: ${{ inputs.package-dir }}
+        INPUT_OUTPUT_DIR: ${{ inputs.output-dir }}
+        INPUT_CONFIG_FILE: ${{ inputs.config-file }}
+        INPUT_ONLY: ${{ inputs.only }}
+        INPUT_EXTRAS: ${{ inputs.extras }}

    # Redirecting stderr to stdout to fix interleaving issue in Actions.
-    - run: >
-        "${{ steps.cibw.outputs.cibw-path }}"
-        "${{ inputs.package-dir }}"
-        ${{ inputs.output-dir != ''  && format('--output-dir "{0}"', inputs.output-dir) || ''}}
-        ${{ inputs.config-file != '' && format('--config-file "{0}"', inputs.config-file) || ''}}
-        ${{ inputs.only != ''        && format('--only "{0}"', inputs.only) || ''}}
-        2>&1
+    - run: |
+        export PATH="$CIBW_PREPEND_PATH:$PATH"
+        eval "$CIBW_CMD_BASH" 2>&1
      shell: bash
      if: runner.os != 'Windows'
+      env:
+        CIBW_PREPEND_PATH: ${{ steps.cibw.outputs.prepend-path }}
+        CIBW_CMD_BASH: ${{ steps.cibw.outputs.cmd-bash }}

    # Windows needs powershell to interact nicely with Meson
-    - run: >
-        & "${{ steps.cibw.outputs.cibw-path }}"
-        "${{ inputs.package-dir }}"
-        ${{ inputs.output-dir != ''  && format('--output-dir "{0}"', inputs.output-dir) || ''}}
-        ${{ inputs.config-file != '' && format('--config-file "{0}"', inputs.config-file) || ''}}
-        ${{ inputs.only != ''        && format('--only "{0}"', inputs.only) || ''}}
+    - run: |
+        $env:PATH = "$env:CIBW_PREPEND_PATH;$env:PATH"
+        Invoke-Expression $env:CIBW_CMD_PWSH
      shell: pwsh
      if: runner.os == 'Windows'
+      env:
+        CIBW_PREPEND_PATH: ${{ steps.cibw.outputs.prepend-path }}
+        CIBW_CMD_PWSH: ${{ steps.cibw.outputs.cmd-pwsh }}
@@ -1,61 +1,76 @@
 pr:
  paths:
    exclude:
-      - docs/*
+      - .github/**
+      - bin/*
+      - docs/**
+      - examples/github-*
+      - examples/ci*
+      - examples/travis-ci-*
+      - .ci*
      - .pre-commit-config.yaml
+      - .readthedocs.yml
+      - .travis.yml
+      - README.md
+      - mkdocs.yml
+      - noxfile.py

 jobs:
- job: linux_311
+- job: tests
+  strategy:
+    matrix:
+      linux_311:
+        imageName: "ubuntu-latest"
+        pythonVersion: "3.11"
+        testSelect: "native"
+      android_311:
+        imageName: "ubuntu-latest"
+        pythonVersion: "3.11"
+        testSelect: "android"
+      macos_311:
+        imageName: "macos-latest"
+        pythonVersion: "3.11"
+        testSelect: "native"
+      ios_311:
+        imageName: "macos-14"  # See https://github.com/actions/runner-images/issues/12777
+        pythonVersion: "3.11"
+        testSelect: "ios"
+      android_macos_311:
+        imageName: "macos-latest"
+        pythonVersion: "3.11"
+        testSelect: "android"
+      windows_311:
+        imageName: "windows-latest"
+        pythonVersion: "3.11"
+        testSelect: "native"
  timeoutInMinutes: 180
-  pool: {vmImage: 'Ubuntu-22.04'}
-  steps:
-    - task: UsePythonVersion@0
-      inputs:
-        versionSpec: '3.11'
-    - bash: |
-        docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all
-        python -m pip install dependency-groups
-        python -m dependency_groups test | xargs python -m pip install -e.
-        if [ "$(Build.SourceBranch)" = "refs/heads/main" ]; then
-          echo "INFO: Exporting CIBW_ENABLE=all for main branch test run."
-          export CIBW_ENABLE=all
-        else
-          echo "INFO: CIBW_ENABLE not set for this branch ($(Build.SourceBranch))."
-        fi
-        python ./bin/run_tests.py
+  pool:
+    vmImage: $(imageName)

- job: macos_311
-  pool: {vmImage: 'macOS-13'}
-  timeoutInMinutes: 120
  steps:
    - task: UsePythonVersion@0
      inputs:
-        versionSpec: '3.11'
-    - bash: |
-        python -m pip install dependency-groups
-        python -m dependency_groups test | xargs python -m pip install -e.
-        if [ "$(Build.SourceBranch)" = "refs/heads/main" ]; then
-          echo "INFO: Exporting CIBW_ENABLE=all for main branch test run."
-          export CIBW_ENABLE=all
-        else
-          echo "INFO: CIBW_ENABLE not set for this branch ($(Build.SourceBranch))."
-        fi
-        python ./bin/run_tests.py
+        versionSpec: $(pythonVersion)

- job: windows_311
-  pool: {vmImage: 'windows-2019'}
-  timeoutInMinutes: 180
-  steps:
-    - task: UsePythonVersion@0
+    - task: JavaToolInstaller@0
+      condition: and(eq(variables['testSelect'], 'android'), eq(variables['Agent.OS'], 'Linux'))
      inputs:
-        versionSpec: '3.11'
+        versionSpec: '17'
+        jdkArchitectureOption: 'x64'
+        jdkSourceOption: 'PreInstalled'
+
+    - bash: docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all
+      condition: and(eq(variables['imageName'], 'ubuntu-latest'), eq(variables['testSelect'], 'native'))
+      displayName: 'Install binfmt on Linux'
+
+    - bash: python -m pip install -U pip && python -m pip install -e. --group test
+      displayName: 'Update pip and install cibuildwheel --group test'
+
+    - bash: echo "##vso[task.setvariable variable=CIBW_ENABLE;]all"
+      condition: eq(variables['Build.SourceBranch'], 'refs/heads/main')
+      displayName: Set CIBW_ENABLE to all (main branch)
+
    - bash: |
-        python -m pip install dependency-groups
-        python -m dependency_groups test | xargs python -m pip install -e.
-        if [ "$(Build.SourceBranch)" = "refs/heads/main" ]; then
-          echo "INFO: Exporting CIBW_ENABLE=all for main branch test run."
-          export CIBW_ENABLE=all
-        else
-          echo "INFO: CIBW_ENABLE not set for this branch ($(Build.SourceBranch))."
-        fi
-        python ./bin/run_tests.py
+        echo "CIBW_ENABLE = $CIBW_ENABLE"
+        python ./bin/run_tests.py --test-select $(testSelect)
+      displayName: 'Run tests'
@@ -1,7 +1,7 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script

 # /// script
-# dependencies = ["click", "packaging", "tomli; python_version<'3.11'"]
+# dependencies = ["click", "packaging", "prek"]
 # ///


@@ -68,8 +68,8 @@ def bump_version() -> None:
        sys.exit(1)

    # fmt: off
-    print(              'Current version:', current_version)
-    new_version = input('    New version: ').strip()
+    print(              "Current version:", current_version)
+    new_version = input("    New version: ").strip()
    # fmt: on

    try:
@@ -129,8 +129,8 @@ def bump_version() -> None:
        contents = contents.replace(find, replace)
        path.write_text(contents, encoding="utf8")

-    print("Files updated. If you want to update the changelog as part of this")
-    print("commit, do that now.")
+    print("Files updated. If you want to update docs/changelog.md as part of")
+    print("this commit, do that now.")
    print()

    while input('Type "done" to continue: ').strip().lower() != "done":
@@ -139,7 +139,7 @@ def bump_version() -> None:
    # run pre-commit to update the README changelog
    subprocess.run(
        [
-            "pre-commit",
+            "prek",
            "run",
            "--files=docs/changelog.md",
        ],
@@ -149,7 +149,7 @@ def bump_version() -> None:
    # run pre-commit to check that no errors occurred on the second run
    subprocess.run(
        [
-            "pre-commit",
+            "prek",
            "run",
            "--files=docs/changelog.md",
        ],
@@ -1,4 +1,14 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///

 import sys
 import textwrap
@@ -1,4 +1,4 @@
-#!/usr/bin/env python
+#!/usr/bin/env -S uv run --script

 # /// script
 # dependencies = ["pyyaml"]
@@ -6,17 +6,12 @@

 import argparse
 import copy
-import functools
 import json
-import sys
 from typing import Any

 import yaml

-make_parser = functools.partial(argparse.ArgumentParser, allow_abbrev=False)
-if sys.version_info >= (3, 14):
-    make_parser = functools.partial(make_parser, color=True, suggest_on_error=True)
-parser = make_parser()
+parser = argparse.ArgumentParser(allow_abbrev=False)
 parser.add_argument("--schemastore", action="store_true", help="Generate schema_store version")
 args = parser.parse_args()

@@ -33,8 +28,6 @@ $defs:
    description: How to inherit the parent's value.
  enable:
    enum:
-      - cpython-experimental-riscv64
-      - cpython-freethreading
      - cpython-prerelease
      - graalpy
      - pyodide-prerelease
@@ -45,6 +38,12 @@ additionalProperties: false
 description: cibuildwheel's settings.
 type: object
 properties:
+  audit-command:
+    description: Execute a shell command to audit each wheel after it is repaired. Use {wheel} for each wheel path, or {abi3_wheel} to only audit abi3 wheels.
+    type: string_array
+  audit-requires:
+    description: Install Python dependencies for the audit step.
+    type: string_array
  archs:
    description: Change the architectures built on your machine by default.
    type: string_array
@@ -63,21 +62,23 @@ properties:
    type: string_array
  build-frontend:
    default: default
-    description: Set the tool to use to build, either "pip" (default for now), "build", or "build[uv]"
+    description: Set the tool to use to build, either "build" (default), "build[uv]", "uv", or "pip"
    oneOf:
-      - enum: [pip, build, "build[uv]", default]
+      - enum: [pip, build, "build[uv]", uv, default]
      - type: string
        pattern: '^pip; ?args:'
      - type: string
        pattern: '^build; ?args:'
      - type: string
        pattern: '^build\\[uv\\]; ?args:'
+      - type: string
+        pattern: '^uv; ?args:'
      - type: object
        additionalProperties: false
        required: [name]
        properties:
          name:
-            enum: [pip, build, "build[uv]"]
+            enum: [pip, build, "build[uv]", uv]
          args:
            type: array
            items:
@@ -229,6 +230,24 @@ properties:
  test-environment:
    description: Set environment variables for the test environment
    type: string_table
+  test-runtime:
+    description: Additional configuration for the test runner
+    oneOf:
+      - type: string
+        pattern: '^$'
+      - type: object
+        additionalProperties: false
+      - type: string
+        pattern: 'args:'
+      - type: object
+        additionalProperties: false
+        required: [args]
+        properties:
+          args:
+            type: array
+            items:
+              type: string
+
 """

 schema = yaml.safe_load(starter)
@@ -295,6 +314,8 @@ items:
      type: object
      additionalProperties: false
      properties:
+        audit-command: {"$ref": "#/$defs/inherit"}
+        audit-requires: {"$ref": "#/$defs/inherit"}
        before-all: {"$ref": "#/$defs/inherit"}
        before-build: {"$ref": "#/$defs/inherit"}
        xbuild-tools: {"$ref": "#/$defs/inherit"}
@@ -309,6 +330,7 @@ items:
        test-sources: {"$ref": "#/$defs/inherit"}
        test-requires: {"$ref": "#/$defs/inherit"}
        test-environment: {"$ref": "#/$defs/inherit"}
+        test-runtime: {"$ref": "#/$defs/inherit"}
 """
 )

@@ -348,6 +370,7 @@ oses = {
    "windows": as_object(not_linux),
    "macos": as_object(not_linux),
    "pyodide": as_object(not_linux),
+    "android": as_object(not_linux),
    "ios": as_object(not_linux),
 }

@@ -368,7 +391,7 @@ schema["properties"] |= oses
 if args.schemastore:
    schema["$id"] = "https://json.schemastore.org/partial-cibuildwheel.json"
    schema["description"] = (
-        "cibuildwheel's toml file, generated with ./bin/generate_schema.py --schemastore from cibuildwheel."
+        "cibuildwheel's settings. Generated with ./bin/generate_schema.py --schemastore from cibuildwheel."
    )

 print(json.dumps(schema, indent=2))
@@ -1,4 +1,17 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "pygithub",
+#   "pyyaml",
+#   "rich",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///

 """
 Check known projects for usage of requires-python.
@@ -1,4 +1,10 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+# ]
+# ///


 import os
@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script

 # /// script
 # dependencies = [
@@ -20,17 +20,18 @@ Suggested usage:
 import builtins
 import functools
 import textwrap
+import urllib.error
 import urllib.request
 import xml.dom.minidom
 from collections.abc import Iterable, Mapping, Sequence
-from datetime import datetime
+from datetime import UTC, datetime
 from io import StringIO
 from pathlib import Path
 from typing import Any, Self, TextIO

 import click
 import yaml
-from github import Github, GithubException
+from github import Auth, Github, GithubException

 ICONS = (
    "github",
@@ -38,10 +39,12 @@ ICONS = (
    "circleci",
    "gitlab",
    "travisci",
-    "cirrusci",
    "windows",
    "apple",
    "linux",
+    "android",
+    "ios",
+    "pyodide",
 )


@@ -77,7 +80,7 @@ class Project:
                    self.notes = notes
        else:
            self.num_stars = 0
-            self.pushed_at = datetime.utcnow()
+            self.pushed_at = datetime.now(UTC)

        name_len = len(self.name) + 4
        self.__class__.NAME = max(self.__class__.NAME, name_len)
@@ -124,14 +127,19 @@ class Project:
        return f"[{self.name}]: {self.url}"

    def info(self) -> str:
-        days = (datetime.utcnow() - self.pushed_at).days
+        days = (datetime.now(UTC) - self.pushed_at).days
        return f"<!-- {self.name}: {self.num_stars}, last pushed {days} days ago -->"


 def fetch_icon(icon_name: str) -> None:
    url = f"https://cdn.jsdelivr.net/npm/simple-icons@v4/icons/{icon_name}.svg"
-    with urllib.request.urlopen(url) as f:
-        original_svg_data = f.read()
+    try:
+        with urllib.request.urlopen(url) as f:
+            original_svg_data = f.read()
+    except urllib.error.HTTPError as e:
+        if e.code == 404 and path_for_icon(icon_name).exists():
+            return
+        raise

    document = xml.dom.minidom.parseString(original_svg_data)
    svgElement = document.documentElement
@@ -165,7 +173,7 @@ def get_projects(
        for icon in ICONS:
            fetch_icon(icon)

-    github = Github(auth) if online else None
+    github = Github(auth=Auth.Token(auth)) if (online and auth) else None

    return sorted((Project(item, github) for item in config), reverse=online)

@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script

 import re
 from pathlib import Path
@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script

 import dataclasses
 import re
@@ -1,7 +1,14 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+# ]
+# ///


 import os
+import re
 import shutil
 import subprocess
 import sys
@@ -13,7 +20,9 @@ from urllib.parse import quote

 import click

-DIR = Path(__file__).parent.resolve()
+DIR = Path(__file__).parent.parent.resolve()
+
+BuildBackend = typing.Literal["setuptools", "meson"]


 def shell(cmd: str, *, check: bool, **kwargs: object) -> subprocess.CompletedProcess[str]:
@@ -26,11 +35,17 @@ def git_repo_has_changes() -> bool:
    return unstaged_changes or staged_changes


-def generate_basic_project(path: Path) -> None:
+def generate_project(path: Path, build_backend: BuildBackend) -> None:
    sys.path.insert(0, "")
-    from test.test_projects.c import new_c_project
+    match build_backend:
+        case "meson":
+            from test.test_projects.meson import new_meson_project as new_project  # noqa: PLC0415
+        case "setuptools":
+            from test.test_projects.setuptools import new_c_project as new_project  # noqa: PLC0415
+        case _:
+            typing.assert_never(build_backend)

-    project = new_c_project()
+    project = new_project()
    project.generate(path)


@@ -38,6 +53,45 @@ class CIService(typing.NamedTuple):
    name: str
    dst_config_path: str
    badge_md: str
+    config_file_transform: typing.Callable[[str, str], str] = lambda x, _: x  # identity by default
+
+
+def github_config_file_transform(content: str, git_ref: str) -> str:
+    # one of the the github configs only builds on main, so we need to remove that restriction
+    # so our example build will run on the test branch.
+    #
+    # replace:
+    # """
+    # push:
+    #   branches:
+    #     - main
+    # """
+    # with:
+    # """
+    # push:
+    # """"
+    content = re.sub(
+        r"push:\n\s+branches:\n\s+- main",
+        "push:",
+        content,
+    )
+
+    # use the version of cibuildwheel from the current commit, not the latest
+    # release
+    # replace:
+    # """
+    # uses: pypa/cibuildwheel@v3.3.1
+    # """
+    # with:
+    # """
+    # uses: pypa/cibuildwheel@<latest commit hash>
+    # """
+    content = re.sub(
+        r"uses: pypa/cibuildwheel@v.*",
+        f"uses: pypa/cibuildwheel@{git_ref}",
+        content,
+    )
+    return content


 services = [
@@ -54,7 +108,8 @@ services = [
    CIService(
        name="github",
        dst_config_path=".github/workflows/example.yml",
-        badge_md="[![Build](https://github.com/pypa/cibuildwheel/workflows/Build/badge.svg?branch={branch})](https://github.com/pypa/cibuildwheel/actions)",
+        badge_md="[![Build](https://github.com/pypa/cibuildwheel/actions/workflows/example.yml/badge.svg?branch={branch})](https://github.com/pypa/cibuildwheel/actions?query=branch%3A{branch})",
+        config_file_transform=github_config_file_transform,
    ),
    CIService(
        name="travis-ci",
@@ -66,11 +121,6 @@ services = [
        dst_config_path=".gitlab-ci.yml",
        badge_md="[![Gitlab](https://gitlab.com/joerick/cibuildwheel/badges/{branch}/pipeline.svg)](https://gitlab.com/joerick/cibuildwheel/-/commits/{branch})",
    ),
-    CIService(
-        name="cirrus-ci",
-        dst_config_path=".cirrus.yml",
-        badge_md="[![Cirrus CI](https://api.cirrus-ci.com/github/pypa/cibuildwheel.svg?branch={branch})](https://cirrus-ci.com/github/pypa/cibuildwheel/{branch})",
-    ),
 ]


@@ -85,18 +135,23 @@ def ci_service_for_config_file(config_file: Path) -> CIService:

@click.command()
@click.argument("config_files", nargs=-1, type=click.Path())
-def run_example_ci_configs(config_files=None):
+@click.option("--build-backend", type=click.Choice(["setuptools", "meson"]), default="setuptools")
+def run_example_ci_configs(
+    config_files: list[str], build_backend: BuildBackend = "setuptools"
+) -> None:
    """
    Test the example configs. If no files are specified, will test
    examples/*-minimal.yml
    """

    if len(config_files) == 0:
-        config_files = Path("examples").glob("*-minimal.yml")
+        config_file_paths = list(Path("examples").glob("*-minimal.yml"))
+    else:
+        config_file_paths = [Path(f) for f in config_files]

    # check each CI service has at most 1 config file
    configs_by_service = set()
-    for config_file in config_files:
+    for config_file in config_file_paths:
        service = ci_service_for_config_file(config_file)
        if service.name in configs_by_service:
            msg = "You cannot specify more than one config per CI service"
@@ -110,6 +165,9 @@ def run_example_ci_configs(config_files=None):
    previous_branch = shell(
        "git rev-parse --abbrev-ref HEAD", check=True, capture_output=True, encoding="utf8"
    ).stdout.strip()
+    git_ref = shell(
+        "git rev-parse HEAD", check=True, capture_output=True, encoding="utf8"
+    ).stdout.strip()

    timestamp = time.strftime("%Y-%m-%dT%H-%M-%S", time.gmtime())
    branch_name = f"example-config-test---{previous_branch}-{timestamp}"
@@ -118,19 +176,22 @@ def run_example_ci_configs(config_files=None):
        shell(f"git checkout --orphan {branch_name}", check=True)

        example_project = Path("example_root")
-        generate_basic_project(example_project)
+        generate_project(example_project, build_backend=build_backend)

-        for config_file in config_files:
+        for config_file in config_file_paths:
            service = ci_service_for_config_file(config_file)
            dst_config_file = example_project / service.dst_config_path

            dst_config_file.parent.mkdir(parents=True, exist_ok=True)
-            shutil.copyfile(config_file, dst_config_file)
+
+            contents = config_file.read_text(encoding="utf8")
+            contents = service.config_file_transform(contents, git_ref)
+            dst_config_file.write_text(contents, encoding="utf8")

        subprocess.run(["git", "add", example_project], check=True)
        message = textwrap.dedent(
            f"""\
-            Test example minimal configs
+            Test example CI configs

            Testing files: {[str(f) for f in config_files]}
            Generated from branch: {previous_branch}
@@ -148,14 +209,14 @@ def run_example_ci_configs(config_files=None):
        print("> ")
        print("> | Service | Config | Status |")
        print("> |---|---|---|")
-        for config_file in config_files:
+        for config_file in config_file_paths:
            service = ci_service_for_config_file(config_file)
            badge = service.badge_md.format(
                branch=branch_name, branch_escaped=quote(branch_name, safe="")
            )
            print(f"> | {service.name} | `{config_file}` | {badge} |")
        print("> ")
-        print("> Generated by `bin/run_example_ci_config.py`")
+        print(f"> Generated by `{' '.join(sys.argv)}`")
        print()
        print("---")
    finally:
@@ -1,8 +1,7 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script


 import argparse
-import functools
 import os
 import subprocess
 import sys
@@ -14,10 +13,7 @@ if __name__ == "__main__":
    else:
        default_cpu_count = os.process_cpu_count() or 2

-    make_parser = functools.partial(argparse.ArgumentParser, allow_abbrev=False)
-    if sys.version_info >= (3, 14):
-        make_parser = functools.partial(make_parser, color=True, suggest_on_error=True)
-    parser = make_parser()
+    parser = argparse.ArgumentParser(allow_abbrev=False)
    parser.add_argument(
        "--run-podman", action="store_true", default=False, help="run podman tests (linux only)"
    )
@@ -27,26 +23,66 @@ if __name__ == "__main__":
        default=default_cpu_count,
        help="number of processes to use for testing",
    )
+    parser.add_argument(
+        "--test-select",
+        choices={"all", "native", "android", "ios", "pyodide"},
+        default="all",
+        help="Either 'native' or 'android'/'ios'/'pyodide'",
+    )
    args = parser.parse_args()

    # move cwd to the project root
    os.chdir(Path(__file__).resolve().parents[1])

+    # doc tests
+    doc_test_args = [sys.executable, "-m", "pytest", "cibuildwheel"]
+
+    print(
+        "\n\n================================== DOC TESTS ==================================",
+        flush=True,
+    )
+    result = subprocess.run(doc_test_args, check=False)
+    if result.returncode not in (0, 5):
+        # Allow case where no doctests are collected (returncode 5) because
+        # circleci sets an explicit "-k" filter that disables doctests. There
+        # isn't a pattern that will only select doctests. This can be removed
+        # and have check=True if the circleci PYTEST_ADDOPTS is removed.
+        raise subprocess.CalledProcessError(
+            result.returncode, result.args, output=result.stdout, stderr=result.stderr
+        )
+
    # unit tests
+    print(
+        "\n\n================================== UNIT TESTS ==================================",
+        flush=True,
+    )
    unit_test_args = [sys.executable, "-m", "pytest", "unit_test"]

-    if sys.platform.startswith("linux") and os.environ.get("CIBW_PLATFORM", "linux") == "linux":
+    if (
+        sys.platform.startswith("linux")
+        and os.environ.get("CIBW_PLATFORM", "linux") == "linux"
+        and args.test_select in ["all", "native"]
+    ):
        # run the docker unit tests only on Linux
        unit_test_args += ["--run-docker"]

        if args.run_podman:
            unit_test_args += ["--run-podman"]

+    subprocess.run(unit_test_args, check=True)
+
    print(
-        "\n\n================================== UNIT TESTS ==================================",
+        "\n\n=========================== SERIAL INTEGRATION TESTS ===========================",
        flush=True,
    )
-    subprocess.run(unit_test_args, check=True)
+
+    match args.test_select:
+        case "all":
+            marks = []
+        case "native":
+            marks = ["not pyodide", "not android", "not ios"]
+        case mark:
+            marks = [f"{mark}"]

    # Run the serial integration tests without multiple processes
    serial_integration_test_args = [
@@ -54,7 +90,7 @@ if __name__ == "__main__":
        "-m",
        "pytest",
        "-m",
-        "serial",
+        f"{' and '.join(['serial', *marks])}",
        "-x",
        "--durations",
        "0",
@@ -62,19 +98,19 @@ if __name__ == "__main__":
        "test",
        "-vv",
    ]
-    print(
-        "\n\n=========================== SERIAL INTEGRATION TESTS ===========================",
-        flush=True,
-    )
+
    subprocess.run(serial_integration_test_args, check=True)

-    # Non-serial integration tests
+    print(
+        "\n\n========================= NON-SERIAL INTEGRATION TESTS =========================",
+        flush=True,
+    )
    integration_test_args = [
        sys.executable,
        "-m",
        "pytest",
        "-m",
-        "not serial",
+        f"{' and '.join(['not serial', *marks])}",
        f"--numprocesses={args.num_processes}",
        "-x",
        "--durations",
@@ -87,8 +123,4 @@ if __name__ == "__main__":
    if sys.platform.startswith("linux") and args.run_podman:
        integration_test_args += ["--run-podman"]

-    print(
-        "\n\n========================= NON-SERIAL INTEGRATION TESTS =========================",
-        flush=True,
-    )
    subprocess.run(integration_test_args, check=True)
@@ -1,8 +1,7 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script


 import argparse
-import functools
 import os
 import subprocess
 import sys
@@ -13,10 +12,7 @@ if __name__ == "__main__":
    # move cwd to the project root
    os.chdir(Path(__file__).resolve().parents[1])

-    make_parser = functools.partial(argparse.ArgumentParser, allow_abbrev=False)
-    if sys.version_info >= (3, 14):
-        make_parser = functools.partial(make_parser, color=True, suggest_on_error=True)
-    parser = make_parser(description="Runs a sample build")
+    parser = argparse.ArgumentParser(description="Runs a sample build", allow_abbrev=False)
    parser.add_argument("project_python_path", nargs="?", default="test.test_0_basic.basic_project")

    options = parser.parse_args()
@@ -1,4 +1,11 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "packaging",
+#   "requests",
+# ]
+# ///

 import configparser
 import dataclasses
@@ -43,16 +50,42 @@ images = [
    ),
    # manylinux_2_28 images
    PyPAImage(
-        "manylinux_2_28", ["x86_64", "aarch64", "ppc64le", "s390x", "pypy_x86_64", "pypy_aarch64"]
+        "manylinux_2_28",
+        [
+            "x86_64",
+            "i686",
+            "aarch64",
+            "ppc64le",
+            "s390x",
+            "pypy_x86_64",
+            "pypy_i686",
+            "pypy_aarch64",
+        ],
    ),
    # manylinux_2_31 images
    PyPAImage("manylinux_2_31", ["armv7l"]),
    # manylinux_2_34 images
    PyPAImage(
-        "manylinux_2_34", ["x86_64", "aarch64", "ppc64le", "s390x", "pypy_x86_64", "pypy_aarch64"]
+        "manylinux_2_34",
+        [
+            "x86_64",
+            "i686",
+            "aarch64",
+            "ppc64le",
+            "s390x",
+            "pypy_x86_64",
+            "pypy_i686",
+            "pypy_aarch64",
+        ],
    ),
+    # manylinux_2_35 images
+    PyPAImage("manylinux_2_35", ["armv7l"]),
+    # manylinux_2_39 images
+    PyPAImage("manylinux_2_39", ["riscv64"]),
    # musllinux_1_2 images
-    PyPAImage("musllinux_1_2", ["x86_64", "i686", "aarch64", "ppc64le", "s390x", "armv7l"]),
+    PyPAImage(
+        "musllinux_1_2", ["x86_64", "i686", "aarch64", "ppc64le", "s390x", "armv7l", "riscv64"]
+    ),
 ]

 config = configparser.ConfigParser()
@@ -116,8 +149,5 @@ for image in images:
            suffix = f"_{platform.removeprefix('pypy_')}"
        config[platform][image.manylinux_version] = f"{image.image_name}{suffix}:{tag_name}"

-if not config.has_section("riscv64"):
-    config["riscv64"] = {}
-
 with open(RESOURCES / "pinned_docker_images.cfg", "w") as f:
    config.write(f)
@@ -1,49 +1,60 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script

+# /// script
+# dependencies = [
+#   "playwright",
+# ]
+# ///

 import subprocess
 import sys
+import tempfile
 from pathlib import Path

-try:
-    from html2image import Html2Image  # type: ignore[import-not-found]
-except ImportError:
-    sys.exit(
-        """
-        html2image not found. Ensure you have Chrome (on Mac/Windows) or
-        Chromium (on Linux) installed, and then do:
-            pip install html2image
-        """
-    )
+from playwright.sync_api import sync_playwright  # type: ignore[import-not-found]
+
+CSS = """
+    <link href="https://fonts.googleapis.com/css2?family=Lato&display=swap" rel="stylesheet">
+    <style>
+        html, body {
+          font-family: Lato, "Helvetica Neue", Helvetica, Arial, sans-serif;
+          font-weight: 400;
+          font-size: 16px;
+          color: #404040;
+          background: white;
+          margin: 0;
+          padding: 0;
+        }
+        * {
+          box-sizing: border-box;
+        }
+    </style>
+"""


 def main() -> None:
-    subprocess.run(["mkdocs", "build"], check=True)
+    subprocess.run([sys.executable, "-m", "playwright", "install", "chromium"], check=True)

-    hti = Html2Image(custom_flags=["--force-device-scale-factor=2"])
+    html_str = Path("docs/diagram.html").read_text()
+    html_str = f"<html><head>{CSS}</head><body>{html_str}</body></html>"

-    html_str = Path("docs/diagram.md").read_text()
-    css_tags = f"""
-        <style>{Path("site/css/theme.css").read_text()}</style>
-        <style>{Path("site/css/theme_extra.css").read_text()}</style>
-        <style>{Path("site/extra.css").read_text()}</style>
-        <style>
-            body {{
-                background: white;
-            }}
-        </style>
-    """
-    html_str = css_tags + html_str
+    with tempfile.TemporaryDirectory() as tmp_dir_str:
+        html_path = Path(tmp_dir_str) / "diagram_screenshot.html"
+        html_path.write_text(html_str)

-    [screenshot, *_] = hti.screenshot(
-        html_str=html_str,
-        size=(830, 405),
-    )
+        dest_path = Path("docs/data/how-it-works.png")

-    dest_path = Path("docs/data/how-it-works.png")
-    dest_path.unlink(missing_ok=True)
+        with sync_playwright() as p:
+            browser = p.chromium.launch()
+            page = browser.new_page(device_scale_factor=2, viewport={"width": 830, "height": 600})
+            page.goto(html_path.as_uri())
+            page.wait_for_load_state("networkidle")

-    Path(screenshot).rename(dest_path)
+            height = page.evaluate("document.body.scrollHeight")
+            page.set_viewport_size({"width": 830, "height": height})
+
+            page.screenshot(path=str(dest_path), full_page=True)
+            browser.close()


 if __name__ == "__main__":
@@ -1,4 +1,13 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "packaging",
+#   "requests",
+#   "rich",
+# ]
+# ///


 import dataclasses
@@ -1,4 +1,13 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///

 import json

@@ -25,25 +34,25 @@ def main() -> None:
        f"repos/astral-sh/python-build-standalone/releases/tags/{latest_tag}"
    )["assets"]

-    assets: list[PythonBuildStandaloneAsset] = []
+    assets = [
+        PythonBuildStandaloneAsset(name=ga["name"], url=ga["browser_download_url"])
+        for ga in github_assets
+        if ga["name"].endswith("install_only.tar.gz")
+    ]

-    for github_asset in github_assets:
-        name = github_asset["name"]
-        if not name.endswith("install_only.tar.gz"):
-            continue
-        url = github_asset["browser_download_url"]
-        assets.append({"name": name, "url": url})
+    # Try to keep output order stable
+    assets = sorted(assets, key=lambda x: x["name"])

    # Write the assets to the JSON file. One day, we might need to support
    # multiple releases, but for now, we only support the latest one
-    json_file_contents: PythonBuildStandaloneReleaseData = {
-        "releases": [
+    json_file_contents = PythonBuildStandaloneReleaseData(
+        releases=[
            {
                "tag": latest_tag,
                "assets": assets,
            }
        ]
-    }
+    )

    with PYTHON_BUILD_STANDALONE_RELEASES.open("w", encoding="utf-8") as f:
        json.dump(json_file_contents, f, indent=2)
@@ -1,7 +1,19 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "packaging",
+#   "requests",
+#   "rich",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///


-import copy
 import difflib
 import logging
 import operator
@@ -10,6 +22,7 @@ import tomllib
 from collections.abc import Mapping, MutableMapping
 from pathlib import Path
 from typing import Any, Final, Literal, TypedDict
+from xml.etree import ElementTree as ET

 import click
 import requests
@@ -20,6 +33,7 @@ from rich.logging import RichHandler
 from rich.syntax import Syntax

 from cibuildwheel.extra import dump_python_configurations, get_pyodide_xbuildenv_info
+from cibuildwheel.platforms.android import android_triplet

 log = logging.getLogger("cibw")

@@ -32,41 +46,20 @@ RESOURCES_DIR: Final[Path] = DIR / "cibuildwheel/resources"
 ArchStr = Literal["32", "64", "ARM64"]


-class ConfigWinCP(TypedDict):
+class Config(TypedDict):
    identifier: str
    version: str
-    arch: str


-class ConfigWinPP(TypedDict):
-    identifier: str
-    version: str
-    arch: str
+class ConfigUrl(Config):
    url: str


-class ConfigWinGP(TypedDict):
-    identifier: str
-    version: str
-    url: str
-
-
-class ConfigApple(TypedDict):
-    identifier: str
-    version: str
-    url: str
-
-
-class ConfigPyodide(TypedDict):
-    identifier: str
-    version: str
+class ConfigPyodide(Config):
    default_pyodide_version: str
    node_version: str


-AnyConfig = ConfigWinCP | ConfigWinPP | ConfigWinGP | ConfigApple | ConfigPyodide
-
-
 # The following set of "Versions" classes allow the initial call to the APIs to
 # be cached and reused in the `update_version_*` methods.

@@ -98,7 +91,7 @@ class WindowsVersions:

        self.version_dict = {Version(v): v for v in cp_info["versions"]}

-    def update_version_windows(self, spec: Specifier) -> ConfigWinCP | None:
+    def update_version_windows(self, spec: Specifier) -> Config | None:
        # Specifier.filter selects all non pre-releases that match the spec,
        # unless there are only pre-releases, then it selects pre-releases
        # instead (like pip)
@@ -113,10 +106,9 @@ class WindowsVersions:
        flags = "t" if self.free_threaded else ""
        version = versions[0]
        identifier = f"cp{version.major}{version.minor}{flags}-{self.arch}"
-        return ConfigWinCP(
+        return Config(
            identifier=identifier,
            version=self.version_dict[version],
-            arch=self.arch_str,
        )


@@ -138,7 +130,7 @@ class GraalPyVersions:

        self.releases = [r for r in releases if "graalpy_version" in r and "python_version" in r]

-    def update_version(self, identifier: str, spec: Specifier) -> AnyConfig:
+    def update_version(self, identifier: str, spec: Specifier) -> ConfigUrl | None:
        if "x86_64" in identifier or "amd64" in identifier:
            arch = "x86_64"
        elif "arm64" in identifier or "aarch64" in identifier:
@@ -147,12 +139,14 @@ class GraalPyVersions:
            msg = f"{identifier} not supported yet on GraalPy"
            raise RuntimeError(msg)

-        gpspec_str = identifier.split("-")[0].split("_")[1]
-        gpspec = Specifier("==24.2.*") if gpspec_str == "242" else Specifier(f"=={gpspec_str}.*")
+        gpspec_str = identifier.split("-", maxsplit=1)[0].split("_")[1]
+        if "." not in gpspec_str and len(gpspec_str) == 3:
+            gpspec_str = gpspec_str[:2] + "." + gpspec_str[-1]
+        gpspec = Specifier(f"=={gpspec_str}.*")

-        releases = [r for r in self.releases if spec.contains(r["python_version"])]
-        releases = [r for r in self.releases if gpspec.contains(r["graalpy_version"])]
-        releases = sorted(releases, key=lambda r: r["graalpy_version"])
+        releases_tmp = (r for r in self.releases if spec.contains(r["python_version"]))
+        releases_tmp = (r for r in releases_tmp if gpspec.contains(r["graalpy_version"]))
+        releases = sorted(releases_tmp, key=lambda r: r["graalpy_version"])

        if not releases:
            msg = f"GraalPy {arch} not found for {spec}!"
@@ -164,11 +158,9 @@ class GraalPyVersions:

        if "macosx" in identifier:
            arch = "x86_64" if "x86_64" in identifier else "arm64"
-            config = ConfigApple
            platform = "macos"
        elif "win" in identifier:
            arch = "aarch64" if "arm64" in identifier else "x86_64"
-            config = ConfigWinGP
            platform = "windows"
        else:
            msg = "GraalPy provides downloads for macOS and Windows and is included for manylinux"
@@ -176,18 +168,20 @@ class GraalPyVersions:

        arch = "amd64" if arch == "x86_64" else "aarch64"
        ext = "zip" if "win" in identifier else "tar.gz"
-        (url,) = (
+        urls = [
            rf["browser_download_url"]
            for rf in release["assets"]
            if rf["name"].endswith(f"{platform}-{arch}.{ext}")
            and rf["name"].startswith(f"graalpy-{gpversion.major}")
-        )
-
-        return config(
-            identifier=identifier,
-            version=f"{version.major}.{version.minor}",
-            url=url,
-        )
+        ]
+        if urls:
+            (url,) = urls
+            return ConfigUrl(
+                identifier=identifier,
+                version=f"{version.major}.{version.minor}",
+                url=url,
+            )
+        return None


 class PyPyVersions:
@@ -215,7 +209,7 @@ class PyPyVersions:
        ]
        return urls[0] if urls else ""

-    def update_version_windows(self, spec: Specifier) -> ConfigWinCP:
+    def update_version_windows(self, spec: Specifier) -> ConfigUrl:
        releases = [r for r in self.releases if spec.contains(r["python_version"])]
        releases = sorted(releases, key=operator.itemgetter("pypy_version"))
        releases = [r for r in releases if self.get_arch_file(r)]
@@ -231,14 +225,13 @@ class PyPyVersions:
        identifier = f"pp{version.major}{version.minor}-{version_arch}"
        url = self.get_arch_file(release)

-        return ConfigWinPP(
+        return ConfigUrl(
            identifier=identifier,
            version=f"{version.major}.{version.minor}",
-            arch=self.arch,
            url=url,
        )

-    def update_version_macos(self, spec: Specifier) -> ConfigApple:
+    def update_version_macos(self, spec: Specifier) -> ConfigUrl:
        if self.arch not in {"64", "ARM64"}:
            msg = f"'{self.arch}' arch not supported yet on macOS"
            raise RuntimeError(msg)
@@ -262,7 +255,7 @@ class PyPyVersions:
            if "" in rf["platform"] == "darwin" and rf["arch"] == arch
        )

-        return ConfigApple(
+        return ConfigUrl(
            identifier=identifier,
            version=f"{version.major}.{version.minor}",
            url=url,
@@ -286,32 +279,25 @@ class CPythonVersions:

            # Removing the prefix
            version = Version(release["name"].removeprefix("Python "))
+            self.versions_dict[version] = release["resource_uri"]

-            uri = int(release["resource_uri"].rstrip("/").split("/")[-1])
-            self.versions_dict[version] = uri
+        files_response = requests.get("https://www.python.org/api/v2/downloads/release_file/")
+        files_response.raise_for_status()
+        self.files_info = files_response.json()

-    def update_version_macos(
-        self, identifier: str, version: Version, spec: Specifier
-    ) -> ConfigApple | None:
+    def update_version(self, identifier: str, spec: Specifier, file_ident: str) -> ConfigUrl | None:
        # see note above on Specifier.filter
        unsorted_versions = spec.filter(self.versions_dict)
        sorted_versions = sorted(unsorted_versions, reverse=True)

-        macver = "x10.9" if version <= Version("3.8.9999") else "11"
-        file_ident = f"macos{macver}.pkg"
-
        for new_version in sorted_versions:
            # Find the first patch version that contains the requested file
            uri = self.versions_dict[new_version]
-            response = requests.get(
-                f"https://www.python.org/api/v2/downloads/release_file/?release={uri}"
-            )
-            response.raise_for_status()
-            file_info = response.json()
+            files = [rf for rf in self.files_info if rf["release"] == uri]

-            urls = [rf["url"] for rf in file_info if file_ident in rf["url"]]
+            urls = [rf["url"] for rf in files if file_ident in rf["url"]]
            if urls:
-                return ConfigApple(
+                return ConfigUrl(
                    identifier=identifier,
                    version=f"{new_version.major}.{new_version.minor}",
                    url=urls[0],
@@ -319,6 +305,45 @@ class CPythonVersions:

        return None

+    def update_version_macos(
+        self, identifier: str, version: Version, spec: Specifier
+    ) -> ConfigUrl | None:
+        macver = "x10.9" if version <= Version("3.8.9999") else "11"
+        return self.update_version(identifier, spec, f"macos{macver}.pkg")
+
+    def update_version_android(self, identifier: str, spec: Specifier) -> ConfigUrl | None:
+        return self.update_version(identifier, spec, android_triplet(identifier))
+
+
+class MavenVersions:
+    MAVEN_URL = "https://repo.maven.apache.org/maven2/com/chaquo/python/python"
+
+    def __init__(self) -> None:
+        response = requests.get(f"{self.MAVEN_URL}/maven-metadata.xml")
+        response.raise_for_status()
+        root = ET.fromstring(response.text)
+
+        self.versions: list[Version] = []
+        for version_elem in root.findall("./versioning/versions/version"):
+            version_str = version_elem.text
+            assert isinstance(version_str, str), version_str
+            self.versions.append(Version(version_str))
+
+    def update_version_android(self, identifier: str, spec: Specifier) -> ConfigUrl | None:
+        sorted_versions = sorted(spec.filter(self.versions), reverse=True)
+
+        # Return a config using the highest version for the given specifier.
+        if sorted_versions:
+            max_version = sorted_versions[0]
+            triplet = android_triplet(identifier)
+            return ConfigUrl(
+                identifier=identifier,
+                version=f"{max_version.major}.{max_version.minor}",
+                url=f"{self.MAVEN_URL}/{max_version}/python-{max_version}-{triplet}.tar.gz",
+            )
+        else:
+            return None
+

 class CPythonIOSVersions:
    def __init__(self) -> None:
@@ -349,11 +374,11 @@ class CPythonIOSVersions:
                if filename.endswith("-iOS-support"):
                    self.versions_dict[version][int(build[1:])] = asset["browser_download_url"]

-    def update_version_ios(self, identifier: str, version: Version) -> ConfigApple | None:
+    def update_version_ios(self, identifier: str, version: Version) -> ConfigUrl | None:
        # Return a config using the highest build number for the given version.
        urls = [url for _, url in sorted(self.versions_dict.get(version, {}).items())]
        if urls:
-            return ConfigApple(
+            return ConfigUrl(
                identifier=identifier,
                version=str(version),
                url=urls[-1],
@@ -409,10 +434,11 @@ class AllVersions:
        self.windows_t_arm64 = WindowsVersions("ARM64", True)
        self.windows_pypy_64 = PyPyVersions("64")

-        self.macos_cpython = CPythonVersions()
+        self.cpython = CPythonVersions()
        self.macos_pypy = PyPyVersions("64")
        self.macos_pypy_arm64 = PyPyVersions("ARM64")

+        self.maven = MavenVersions()
        self.ios_cpython = CPythonIOSVersions()

        self.graalpy = GraalPyVersions()
@@ -424,19 +450,20 @@ class AllVersions:
        version = Version(config["version"])
        spec = Specifier(f"=={version.major}.{version.minor}.*")
        log.info("Reading in %r -> %s @ %s", str(identifier), spec, version)
-        orig_config = copy.copy(config)
-        config_update: AnyConfig | None = None
+        config_update: Config | None = None

        # We need to use ** in update due to MyPy (probably a bug)
        if "macosx" in identifier:
            if identifier.startswith("cp"):
-                config_update = self.macos_cpython.update_version_macos(identifier, version, spec)
+                config_update = self.cpython.update_version_macos(identifier, version, spec)
            elif identifier.startswith("pp"):
                if "macosx_x86_64" in identifier:
                    config_update = self.macos_pypy.update_version_macos(spec)
                elif "macosx_arm64" in identifier:
                    config_update = self.macos_pypy_arm64.update_version_macos(spec)
            elif identifier.startswith("gp"):
+                if "macosx_x86_64" in identifier:
+                    return
                config_update = self.graalpy.update_version(identifier, spec)
        elif "t-win32" in identifier and identifier.startswith("cp"):
            config_update = self.windows_t_32.update_version_windows(spec)
@@ -455,6 +482,11 @@ class AllVersions:
            config_update = self.windows_t_arm64.update_version_windows(spec)
        elif "win_arm64" in identifier and identifier.startswith("cp"):
            config_update = self.windows_arm64.update_version_windows(spec)
+        elif "android" in identifier:
+            # Python 3.13 is released by Chaquopy on Maven Central.
+            # Python 3.14 and newer have official releases on python.org.
+            versions = self.maven if identifier.startswith("cp313") else self.cpython
+            config_update = versions.update_version_android(identifier, spec)
        elif "ios" in identifier:
            config_update = self.ios_cpython.update_version_ios(identifier, version)
        elif "pyodide" in identifier:
@@ -463,10 +495,10 @@ class AllVersions:
            )

        assert config_update is not None, f"{identifier} not found!"
-        config.update(**config_update)
-
-        if config != orig_config:
-            log.info("  Updated %s to %s", orig_config, config)
+        if config_update != config:
+            log.info("  Updated %s to %s", config, config_update)
+            config.clear()
+            config.update(**config_update)


@click.command()
@@ -490,17 +522,9 @@ def update_pythons(force: bool, level: str) -> None:
    with toml_file_path.open("rb") as f:
        configs = tomllib.load(f)

-    for config in configs["windows"]["python_configurations"]:
-        all_versions.update_config(config)
-
-    for config in configs["macos"]["python_configurations"]:
-        all_versions.update_config(config)
-
-    for config in configs["ios"]["python_configurations"]:
-        all_versions.update_config(config)
-
-    for config in configs["pyodide"]["python_configurations"]:
-        all_versions.update_config(config)
+    for platform in ["windows", "macos", "android", "ios", "pyodide"]:
+        for config in configs[platform]["python_configurations"]:
+            all_versions.update_config(config)

    result_toml = dump_python_configurations(configs)

@@ -1,20 +1,33 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "packaging",
+#   "rich",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///


 import dataclasses
 import difflib
 import logging
-import subprocess
 import tomllib
 from pathlib import Path
 from typing import Final

 import click
 import rich
-from packaging.version import InvalidVersion, Version
+from packaging.version import Version
 from rich.logging import RichHandler
 from rich.syntax import Syntax

+from cibuildwheel.extra import github_api_request
+
 log = logging.getLogger("cibw")

 # Looking up the dir instead of using utils.resources_dir
@@ -30,32 +43,26 @@ GET_VIRTUALENV_URL_TEMPLATE: Final[str] = (

@dataclasses.dataclass(frozen=True, order=True)
 class VersionTuple:
+    name: str
+    download_url: str
    version: Version
-    version_string: str


-def git_ls_remote_versions(url: str) -> list[VersionTuple]:
-    versions: list[VersionTuple] = []
-    tags = subprocess.run(
-        ["git", "ls-remote", "--tags", url], check=True, text=True, capture_output=True
-    ).stdout.splitlines()
-    for tag in tags:
-        _, ref = tag.split()
-        assert ref.startswith("refs/tags/")
-        version_string = ref[10:]
-        try:
-            version = Version(version_string)
-            if version.is_devrelease:
-                log.info("Ignoring development release %r", str(version))
-                continue
-            if version.is_prerelease:
-                log.info("Ignoring pre-release %r", str(version))
-                continue
-            versions.append(VersionTuple(version, version_string))
-        except InvalidVersion:
-            log.warning("Ignoring ref %r", ref)
-    versions.sort(reverse=True)
-    return versions
+def get_latest_virtualenv_release() -> VersionTuple:
+    response = github_api_request("repos/pypa/get-virtualenv/releases/latest")
+    tag_name = response["tag_name"]
+
+    asset = next(
+        (asset for asset in response["assets"] if asset["name"] == "virtualenv.pyz"),
+        None,
+    )
+    if not asset:
+        msg = "No asset named 'virtualenv.pyz' found in the latest release of get-virtualenv."
+        raise RuntimeError(msg)
+
+    return VersionTuple(
+        version=Version(tag_name), name=tag_name, download_url=asset["browser_download_url"]
+    )


@click.command()
@@ -78,14 +85,20 @@ def update_virtualenv(force: bool, level: str) -> None:
    with toml_file_path.open("rb") as f:
        configurations = tomllib.load(f)
    default = configurations.pop("default")
-    version = str(default["version"])
-    versions = git_ls_remote_versions(GET_VIRTUALENV_GITHUB)
-    if versions[0].version > Version(version):
-        version = versions[0].version_string
+    local_version = str(default["version"])
+
+    latest_release = get_latest_virtualenv_release()
+
+    if latest_release.version > Version(local_version):
+        version = latest_release.name
+        url = latest_release.download_url
+    else:
+        version = local_version
+        url = default["url"]

    configurations["default"] = {
        "version": version,
-        "url": GET_VIRTUALENV_URL_TEMPLATE.format(version=version),
+        "url": url,
    }
    result_toml = "".join(
        f'{key} = {{ version = "{value["version"]}", url = "{value["url"]}" }}\n'
@@ -1 +1 @@
-__version__ = "3.0.0b5"
+__version__ = "4.0.0rc1"
@@ -7,7 +7,6 @@ import shutil
 import sys
 import tarfile
 import textwrap
-import time
 import traceback
 import typing
 from collections.abc import Generator, Iterable, Sequence
@@ -16,17 +15,17 @@ from tempfile import mkdtemp
 from typing import Any, Literal, TextIO

 import cibuildwheel
-import cibuildwheel.util
 from cibuildwheel import errors
 from cibuildwheel.architecture import Architecture, allowed_architectures_check
 from cibuildwheel.ci import CIProvider, detect_ci_provider, fix_ansi_codes_for_github_actions
 from cibuildwheel.logger import log
 from cibuildwheel.options import CommandLineArguments, Options, compute_options
-from cibuildwheel.platforms import ALL_PLATFORM_MODULES, get_build_identifiers
+from cibuildwheel.platforms import ALL_PLATFORM_MODULES, get_build_identifiers, native_platform
 from cibuildwheel.selector import BuildSelector, EnableGroup, selector_matches
 from cibuildwheel.typing import PLATFORMS, PlatformName
-from cibuildwheel.util.file import CIBW_CACHE_PATH
+from cibuildwheel.util.file import CIBW_CACHE_PATH, ensure_cache_sentinel
 from cibuildwheel.util.helpers import strtobool
+from cibuildwheel.util.resources import read_all_configs


@dataclasses.dataclass
@@ -53,7 +52,7 @@ class Unbuffered:
        self.stream.writelines(data)
        self.stream.flush()

-    def __getattr__(self, attr: str) -> Any:
+    def __getattr__(self, attr: str) -> Any:  # noqa: ANN401
        return getattr(self.stream, attr)


@@ -79,29 +78,32 @@ def main_inner(global_options: GlobalOptions) -> None:
    `main_inner` is the same as `main`, but it raises FatalError exceptions
    rather than exiting directly.
    """
-
-    make_parser = functools.partial(argparse.ArgumentParser, allow_abbrev=False)
+    # Default in 3.15+, only needed on 3.14
    if sys.version_info >= (3, 14):
-        make_parser = functools.partial(make_parser, color=True, suggest_on_error=True)
-    parser = make_parser(
+        arg_parser = functools.partial(argparse.ArgumentParser, suggest_on_error=True)
+    else:
+        arg_parser = argparse.ArgumentParser
+
+    parser = arg_parser(
        description="Build wheels for all the platforms.",
        epilog="""
            Most options are supplied via environment variables or in
            --config-file (pyproject.toml usually). See
            https://github.com/pypa/cibuildwheel#options for info.
        """,
+        allow_abbrev=False,
    )

    parser.add_argument(
        "--platform",
-        choices=["auto", "linux", "macos", "windows", "pyodide", "ios"],
+        choices=["auto", "linux", "macos", "windows", "pyodide", "android", "ios"],
        default=None,
        help="""
            Platform to build for. Use this option to override the auto-detected
            platform. Specifying "macos" or "windows" only works on that
            operating system. "linux" works on any desktop OS, as long as
-            Docker/Podman is installed. "pyodide" only works on linux and macOS.
-            "ios" only work on macOS. Default: auto.
+            Docker/Podman is installed. "pyodide" and "android" only work on
+            Linux and macOS. "ios" only works on macOS. Default: auto.
        """,
    )

@@ -133,6 +135,8 @@ def main_inner(global_options: GlobalOptions) -> None:
    parser.add_argument(
        "--only",
        default=None,
+        choices=[v["identifier"] for vv in read_all_configs().values() for v in vv],
+        metavar="IDENTIFIER",
        help="""
            Force a single wheel build when given an identifier. Overrides
            CIBW_BUILD/CIBW_SKIP. --platform and --arch cannot be specified
@@ -180,6 +184,12 @@ def main_inner(global_options: GlobalOptions) -> None:
        help="Print the build identifiers matched by the current invocation and exit.",
    )

+    parser.add_argument(
+        "--clean-cache",
+        action="store_true",
+        help="Clear the cibuildwheel cache and exit.",
+    )
+
    parser.add_argument(
        "--allow-empty",
        action="store_true",
@@ -197,6 +207,48 @@ def main_inner(global_options: GlobalOptions) -> None:

    global_options.print_traceback_on_error = args.debug_traceback

+    if args.clean_cache:
+        if not CIBW_CACHE_PATH.exists():
+            print(f"Cache directory does not exist: {CIBW_CACHE_PATH}")
+            sys.exit(0)
+
+        sentinel_file = CIBW_CACHE_PATH / "CACHEDIR.TAG"
+        if not sentinel_file.exists():
+            print(
+                f"Error: {CIBW_CACHE_PATH} does not appear to be a cibuildwheel cache directory.",
+                "Only directories with a CACHEDIR.TAG sentinel file can be cleaned.",
+                sep="\n",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+
+        # Verify signature to ensure it's a proper cache dir
+        # See https://bford.info/cachedir/ for more
+        try:
+            sentinel_content = sentinel_file.read_text(encoding="utf-8")
+        except OSError as e:
+            print(f"Error reading cache directory tag: {e}", file=sys.stderr)
+            sys.exit(1)
+
+        if not sentinel_content.startswith("Signature: 8a477f597d28d172789f06886806bc55"):
+            print(
+                f"Error: {sentinel_file} does not contain a valid cache directory signature.",
+                "For safety, only properly signed cache directories can be cleaned.",
+                sep="\n",
+                file=sys.stderr,
+            )
+            sys.exit(1)
+
+        print(f"Clearing cache directory: {CIBW_CACHE_PATH}")
+        try:
+            shutil.rmtree(CIBW_CACHE_PATH)
+            print("Cache cleared successfully.")
+        except OSError as e:
+            print(f"Error clearing cache: {e}", file=sys.stderr)
+            sys.exit(1)
+
+        sys.exit(0)
+
    args.package_dir = args.package_dir.resolve()

    # This are always relative to the base directory, even in SDist builds
@@ -242,28 +294,14 @@ def _compute_platform_only(only: str) -> PlatformName:
        return "windows"
    if "pyodide_" in only:
        return "pyodide"
+    if "android_" in only:
+        return "android"
    if "ios_" in only:
        return "ios"
    msg = f"Invalid --only='{only}', must be a build selector with a known platform"
    raise errors.ConfigurationError(msg)


-def _compute_platform_auto() -> PlatformName:
-    if sys.platform.startswith("linux"):
-        return "linux"
-    elif sys.platform == "darwin":
-        return "macos"
-    elif sys.platform == "win32":
-        return "windows"
-    else:
-        msg = (
-            'Unable to detect platform from "sys.platform". cibuildwheel doesn\'t '
-            "support building wheels for this platform. You might be able to build for a different "
-            "platform using the --platform argument. Check --help output for more information."
-        )
-        raise errors.ConfigurationError(msg)
-
-
 def _compute_platform(args: CommandLineArguments) -> PlatformName:
    platform_option_value = args.platform or os.environ.get("CIBW_PLATFORM", "") or "auto"

@@ -281,45 +319,9 @@ def _compute_platform(args: CommandLineArguments) -> PlatformName:
    if args.only:
        return _compute_platform_only(args.only)
    elif platform_option_value != "auto":
-        return typing.cast(PlatformName, platform_option_value)
+        return typing.cast("PlatformName", platform_option_value)

-    return _compute_platform_auto()
-
-
-@contextlib.contextmanager
-def print_new_wheels(msg: str, output_dir: Path) -> Generator[None, None, None]:
-    """
-    Prints the new items in a directory upon exiting. The message to display
-    can include {n} for number of wheels, {s} for total number of seconds,
-    and/or {m} for total number of minutes. Does not print anything if this
-    exits via exception.
-    """
-
-    start_time = time.time()
-    existing_contents = set(output_dir.iterdir())
-    yield
-    final_contents = set(output_dir.iterdir())
-
-    new_contents = [
-        FileReport(wheel.name, f"{(wheel.stat().st_size + 1023) // 1024:,d}")
-        for wheel in final_contents - existing_contents
-    ]
-
-    if not new_contents:
-        return
-
-    max_name_len = max(len(f.name) for f in new_contents)
-    max_size_len = max(len(f.size) for f in new_contents)
-    n = len(new_contents)
-    s = time.time() - start_time
-    m = s / 60
-    print(
-        msg.format(n=n, s=s, m=m),
-        *sorted(
-            f"  {f.name:<{max_name_len}s}   {f.size:>{max_size_len}s} kB" for f in new_contents
-        ),
-        sep="\n",
-    )
+    return native_platform()


 def build_in_directory(args: CommandLineArguments) -> None:
@@ -360,6 +362,7 @@ def build_in_directory(args: CommandLineArguments) -> None:

    # create the cache dir before it gets printed & builds performed
    CIBW_CACHE_PATH.mkdir(parents=True, exist_ok=True)
+    ensure_cache_sentinel(CIBW_CACHE_PATH)

    print_preamble(platform=platform, options=options, identifiers=identifiers)

@@ -382,7 +385,7 @@ def build_in_directory(args: CommandLineArguments) -> None:

    tmp_path = Path(mkdtemp(prefix="cibw-run-")).resolve(strict=True)
    try:
-        with print_new_wheels("\n{n} wheels produced in {m:.0f} minutes:", output_dir):
+        with log.print_summary(options=options):
            platform_module.build(options, tmp_path)
    finally:
        # avoid https://github.com/python/cpython/issues/86962 by performing
@@ -417,37 +420,50 @@ def print_preamble(platform: str, options: Options, identifiers: Sequence[str])
    print(f"Cache folder: {CIBW_CACHE_PATH}")
    print()

-    warnings = detect_warnings(options=options, identifiers=identifiers)
+    warnings = detect_warnings(options=options)
    for warning in warnings:
        log.warning(warning)

+    error_list = list(detect_errors(options=options, identifiers=identifiers))
+    if error_list:
+        for error in error_list:
+            log.error(error)
+        msg = "\n".join(error_list)
+        raise errors.ConfigurationError(msg)
+
+    n = len(identifiers)
+    print(f"{n} build{'s' if n != 1 else ''} selected:")
+    print(", ".join(identifiers))
+    print()
    print("Here we go!\n")


-def detect_warnings(*, options: Options, identifiers: Iterable[str]) -> list[str]:
-    warnings = []
+def detect_errors(*, options: Options, identifiers: Iterable[str]) -> Generator[str, None, None]:
+    # Check for deprecated CIBW_FREE_THREADED_SUPPORT environment variable
+    if "CIBW_FREE_THREADED_SUPPORT" in os.environ:
+        yield "CIBW_FREE_THREADED_SUPPORT environment variable is no longer supported."

-    python_version_deprecation = ((3, 11), 3)
-    if sys.version_info[:2] < python_version_deprecation[0]:
-        python_version = ".".join(map(str, python_version_deprecation[0]))
-        msg = (
-            f"cibuildwheel {python_version_deprecation[1]} will require Python {python_version}+, "
-            "please upgrade the Python version used to run cibuildwheel. "
-            "This does not affect the versions you can target when building wheels. See: https://cibuildwheel.pypa.io/en/stable/#what-does-it-do"
-        )
-        warnings.append(msg)
-
-    # warn about deprecated {python} and {pip}
+    # Deprecated {python} and {pip}
    for option_name in ["test_command", "before_build"]:
        option_values = [getattr(options.build_options(i), option_name) for i in identifiers]

        if any(o and ("{python}" in o or "{pip}" in o) for o in option_values):
            # Reminder: in an f-string, double braces means literal single brace
-            msg = (
+            yield (
                f"{option_name}: '{{python}}' and '{{pip}}' are no longer supported "
                "and have been removed in cibuildwheel 3. Simply use 'python' or 'pip' instead."
            )
-            raise errors.ConfigurationError(msg)
+
+
+def detect_warnings(*, options: Options) -> Generator[str, None, None]:
+    python_version_deprecation = ((3, 11), 3)
+    if sys.version_info[:2] < python_version_deprecation[0]:
+        python_version = ".".join(map(str, python_version_deprecation[0]))
+        yield (
+            f"cibuildwheel {python_version_deprecation[1]} will require Python {python_version}+, "
+            "please upgrade the Python version used to run cibuildwheel. "
+            "This does not affect the versions you can target when building wheels. See: https://cibuildwheel.pypa.io/en/stable/#what-does-it-do"
+        )

    build_selector = options.globals.build_selector
    test_selector = options.globals.test_selector
@@ -465,27 +481,25 @@ def detect_warnings(*, options: Options, identifiers: Iterable[str]) -> list[str
        identifier for identifier in all_valid_identifiers if enabled_selector(identifier)
    ]

-    warnings += check_for_invalid_selectors(
+    yield from check_for_invalid_selectors(
        selector_name="build",
        selector_value=build_selector.build_config,
        all_valid_identifiers=all_valid_identifiers,
        all_enabled_identifiers=all_enabled_identifiers,
    )
-    warnings += check_for_invalid_selectors(
+    yield from check_for_invalid_selectors(
        selector_name="skip",
        selector_value=build_selector.skip_config,
        all_valid_identifiers=all_valid_identifiers,
        all_enabled_identifiers=all_enabled_identifiers,
    )
-    warnings += check_for_invalid_selectors(
+    yield from check_for_invalid_selectors(
        selector_name="test_skip",
        selector_value=test_selector.skip_config,
        all_valid_identifiers=all_valid_identifiers,
        all_enabled_identifiers=all_enabled_identifiers,
    )

-    return warnings
-

 def check_for_invalid_selectors(
    *,
@@ -497,18 +511,38 @@ def check_for_invalid_selectors(
    warnings = []

    for selector in selector_value.split():
-        if not any(selector_matches(selector, i) for i in all_enabled_identifiers):
+        selector_ = selector
+        if selector_name == "test_skip":
+            # macosx_universal2 uses an additional identifier for tests which ends with ":{arch}"
+            values = selector.split(":")
+            universal2_identifiers = filter(
+                lambda x: x.endswith("-macosx_universal2"), all_valid_identifiers
+            )
+            if len(values) == 2 and any(
+                selector_matches(selector_, f"{i}:{arch}")
+                for i in universal2_identifiers
+                for arch in ["arm64", "x86_64"]
+            ):
+                # just ignore the arch part in the rest of the check
+                selector_ = values[0]
+        if not any(selector_matches(selector_, i) for i in all_enabled_identifiers):
            msg = f"Invalid {selector_name} selector: {selector!r}. "
            error_type: type = errors.ConfigurationError

-            if any(selector_matches(selector, i) for i in all_valid_identifiers):
+            if any(selector_matches(selector_, i) for i in all_valid_identifiers):
                msg += "This selector matches a group that wasn't enabled. Enable it using the `enable` option or remove this selector. "

-            if "p2" in selector or "p35" in selector:
-                msg += f"cibuildwheel 3.x no longer supports Python < 3.8. Please use the 1.x series or update `{selector_name}`. "
+            if "p2" in selector_ or "p35" in selector_:
+                msg += f"cibuildwheel 4.x no longer supports Python < 3.9. Please use the 1.x series or update `{selector_name}`. "
                error_type = errors.DeprecationError
-            if "p36" in selector or "p37" in selector:
-                msg += f"cibuildwheel 3.x no longer supports Python < 3.8. Please use the 2.x series or update `{selector_name}`. "
+            if "p36" in selector_ or "p37" in selector_:
+                msg += f"cibuildwheel 4.x no longer supports Python < 3.9. Please use the 2.x series or update `{selector_name}`. "
+                error_type = errors.DeprecationError
+            if "p38" in selector_:
+                msg += f"cibuildwheel 4.x no longer supports Python < 3.9. Please use the 3.x series or update `{selector_name}`. "
+                error_type = errors.DeprecationError
+            if "cp313t" in selector_:
+                msg += f"cibuildwheel 4.x no longer supports Python 3.13 free-threading. Please use the 3.x series or update `{selector_name}`. "
                error_type = errors.DeprecationError

            if selector_name == "build":
@@ -6,27 +6,35 @@ import sys
 import typing
 from collections.abc import Set
 from enum import StrEnum, auto
-from typing import Final, Literal
+from typing import Final, Literal, Self

 from cibuildwheel import errors
-
-from .typing import PlatformName
+from cibuildwheel.typing import PlatformName

 PRETTY_NAMES: Final[dict[PlatformName, str]] = {
    "linux": "Linux",
    "macos": "macOS",
    "windows": "Windows",
    "pyodide": "Pyodide",
+    "android": "Android",
    "ios": "iOS",
 }

 ARCH_SYNONYMS: Final[list[dict[PlatformName, str | None]]] = [
-    {"linux": "x86_64", "macos": "x86_64", "windows": "AMD64"},
+    {"linux": "x86_64", "macos": "x86_64", "windows": "AMD64", "android": "x86_64"},
    {"linux": "i686", "macos": None, "windows": "x86"},
-    {"linux": "aarch64", "macos": "arm64", "windows": "ARM64"},
+    {"linux": "aarch64", "macos": "arm64", "windows": "ARM64", "android": "arm64_v8a"},
 ]


+def arch_synonym(arch: str, from_platform: PlatformName, to_platform: PlatformName) -> str | None:
+    for arch_synonym_ in ARCH_SYNONYMS:
+        if arch == arch_synonym_.get(from_platform):
+            return arch_synonym_.get(to_platform, arch)
+
+    return arch
+
+
 def _check_aarch32_el0() -> bool:
    """Check if running armv7l natively on aarch64 is supported"""
    if not sys.platform.startswith("linux"):
@@ -42,7 +50,7 @@ def _check_aarch32_el0() -> bool:

@typing.final
 class Architecture(StrEnum):
-    # mac/linux archs
+    # mac/linux/android archs
    x86_64 = auto()

    # linux archs
@@ -65,40 +73,43 @@ class Architecture(StrEnum):
    # WebAssembly
    wasm32 = auto()

+    # android archs
+    arm64_v8a = auto()
+
    # iOS "multiarch" architectures that include both
    # the CPU architecture and the ABI.
    arm64_iphoneos = auto()
    arm64_iphonesimulator = auto()
    x86_64_iphonesimulator = auto()

-    @staticmethod
-    def parse_config(config: str, platform: PlatformName) -> "set[Architecture]":
+    @classmethod
+    def parse_config(cls, config: str, platform: PlatformName) -> set[Self]:
        result = set()
        for arch_str in re.split(r"[\s,]+", config):
-            if arch_str == "auto":
-                result |= Architecture.auto_archs(platform=platform)
-            elif arch_str == "native":
-                native_arch = Architecture.native_arch(platform=platform)
-                if native_arch:
-                    result.add(native_arch)
-            elif arch_str == "all":
-                result |= Architecture.all_archs(platform=platform)
-            elif arch_str == "auto64":
-                result |= Architecture.bitness_archs(platform=platform, bitness="64")
-            elif arch_str == "auto32":
-                result |= Architecture.bitness_archs(platform=platform, bitness="32")
-            else:
-                try:
-                    result.add(Architecture(arch_str))
-                except ValueError as e:
-                    msg = f"Invalid architecture '{arch_str}'"
-                    raise errors.ConfigurationError(msg) from e
+            match arch_str:
+                case "auto":
+                    result |= cls.auto_archs(platform=platform)
+                case "native":
+                    if native_arch := cls.native_arch(platform=platform):
+                        result.add(native_arch)
+                case "all":
+                    result |= cls.all_archs(platform=platform)
+                case "auto64":
+                    result |= cls.bitness_archs(platform=platform, bitness="64")
+                case "auto32":
+                    result |= cls.bitness_archs(platform=platform, bitness="32")
+                case _:
+                    try:
+                        result.add(cls(arch_str))
+                    except ValueError as e:
+                        msg = f"Invalid architecture '{arch_str}'"
+                        raise errors.ConfigurationError(msg) from e
        return result

-    @staticmethod
-    def native_arch(platform: PlatformName) -> "Architecture | None":
+    @classmethod
+    def native_arch(cls, platform: PlatformName) -> Self | None:
        native_machine = platform_module.machine()
-        native_architecture = Architecture(native_machine)
+        native_architecture = cls(native_machine)

        # Cross-platform support. Used for --print-build-identifiers or docker builds.
        host_platform: PlatformName = (
@@ -108,89 +119,101 @@ class Architecture(StrEnum):
        )

        if platform == "pyodide":
-            return Architecture.wasm32
+            return cls.wasm32
        elif platform == "ios":
            # Can only build for iOS on macOS. The "native" architecture is the
            # simulator for the macOS native platform.
            if host_platform == "macos":
-                if native_architecture == Architecture.x86_64:
-                    return Architecture.x86_64_iphonesimulator
+                if native_architecture == cls.x86_64:
+                    return cls.x86_64_iphonesimulator
                else:
-                    return Architecture.arm64_iphonesimulator
+                    return cls.arm64_iphonesimulator
            else:
                return None

        # we might need to rename the native arch to the machine we're running
        # on, as the same arch can have different names on different platforms
        if host_platform != platform:
-            for arch_synonym in ARCH_SYNONYMS:
-                if native_machine == arch_synonym.get(host_platform):
-                    synonym = arch_synonym[platform]
+            synonym = arch_synonym(native_machine, host_platform, platform)
+            if synonym is None:
+                # can't build anything on this platform
+                return None

-                    if synonym is None:
-                        # can't build anything on this platform
-                        return None
-
-                    native_architecture = Architecture(synonym)
+            native_architecture = cls(synonym)

        return native_architecture

-    @staticmethod
-    def auto_archs(platform: PlatformName) -> "set[Architecture]":
-        native_arch = Architecture.native_arch(platform)
+    @classmethod
+    def auto_archs(cls, platform: PlatformName) -> set[Self]:
+        native_arch = cls.native_arch(platform)
        if native_arch is None:
            return set()  # can't build anything on this platform
        result = {native_arch}

-        if platform == "linux":
-            if Architecture.x86_64 in result:
-                # x86_64 machines can run i686 containers
-                result.add(Architecture.i686)
-            elif Architecture.aarch64 in result and _check_aarch32_el0():
-                result.add(Architecture.armv7l)
-
-        elif platform == "windows" and Architecture.AMD64 in result:
-            result.add(Architecture.x86)
-
-        elif platform == "ios" and native_arch == Architecture.arm64_iphonesimulator:
-            # Also build the device wheel if we're on ARM64.
-            result.add(Architecture.arm64_iphoneos)
+        match platform:
+            case "windows" if cls.AMD64 in result:
+                result.add(cls.x86)
+            case "ios" if native_arch == cls.arm64_iphonesimulator:
+                # Also build the device wheel if we're on ARM64.
+                result.add(cls.arm64_iphoneos)

        return result

-    @staticmethod
-    def all_archs(platform: PlatformName) -> "set[Architecture]":
+    @classmethod
+    def all_archs(cls, platform: PlatformName) -> set[Self]:
        all_archs_map = {
            "linux": {
-                Architecture.x86_64,
-                Architecture.i686,
-                Architecture.aarch64,
-                Architecture.ppc64le,
-                Architecture.s390x,
-                Architecture.armv7l,
-                Architecture.riscv64,
+                cls.x86_64,
+                cls.i686,
+                cls.aarch64,
+                cls.ppc64le,
+                cls.s390x,
+                cls.armv7l,
+                cls.riscv64,
            },
-            "macos": {Architecture.x86_64, Architecture.arm64, Architecture.universal2},
-            "windows": {Architecture.x86, Architecture.AMD64, Architecture.ARM64},
-            "pyodide": {Architecture.wasm32},
+            "macos": {cls.x86_64, cls.arm64, cls.universal2},
+            "windows": {cls.x86, cls.AMD64, cls.ARM64},
+            "pyodide": {cls.wasm32},
+            "android": {cls.x86_64, cls.arm64_v8a},
            "ios": {
-                Architecture.x86_64_iphonesimulator,
-                Architecture.arm64_iphonesimulator,
-                Architecture.arm64_iphoneos,
+                cls.x86_64_iphonesimulator,
+                cls.arm64_iphonesimulator,
+                cls.arm64_iphoneos,
            },
        }
        return all_archs_map[platform]

-    @staticmethod
-    def bitness_archs(platform: PlatformName, bitness: Literal["64", "32"]) -> "set[Architecture]":
-        archs_32 = {Architecture.i686, Architecture.x86, Architecture.armv7l}
-        auto_archs = Architecture.auto_archs(platform)
+    @classmethod
+    def bitness_archs(cls, platform: PlatformName, bitness: Literal["64", "32"]) -> set[Self]:
+        # This map maps 64-bit architectures to their 32-bit equivalents.
+        archs_map = {
+            cls.x86_64: cls.i686,
+            cls.AMD64: cls.x86,
+            cls.aarch64: cls.armv7l,
+        }
+        native_arch = cls.native_arch(platform)

-        if bitness == "64":
-            return auto_archs - archs_32
-        if bitness == "32":
-            return auto_archs & archs_32
-        typing.assert_never(bitness)
+        if native_arch is None:
+            return set()  # can't build anything on this platform
+
+        if native_arch == cls.wasm32:
+            return {native_arch} if bitness == "32" else set()
+
+        match bitness:
+            case "64":
+                return {native_arch} if native_arch not in archs_map.values() else set()
+            case "32":
+                if native_arch in archs_map.values():
+                    return {native_arch}
+                elif native_arch in archs_map and platform in {"linux", "windows"}:
+                    if native_arch == cls.aarch64 and not _check_aarch32_el0():
+                        # If we're on aarch64, skip if we cannot build armv7l wheels.
+                        return set()
+                    return {archs_map[native_arch]}
+                else:
+                    return set()
+            case _:
+                typing.assert_never(bitness)


 def allowed_architectures_check(
@@ -0,0 +1,132 @@
+import subprocess
+import sys
+from pathlib import Path
+
+from cibuildwheel import errors
+from cibuildwheel.logger import log
+from cibuildwheel.options import BuildOptions
+from cibuildwheel.util.cmd import call, shell
+from cibuildwheel.util.helpers import prepare_command
+from cibuildwheel.util.packaging import is_abi3_wheel
+from cibuildwheel.venv import activate_virtualenv, find_uv, virtualenv
+
+
+def run_audit(
+    *,
+    tmp_dir: Path,
+    build_options: BuildOptions,
+    wheel: Path,
+) -> None:
+    """
+    Run the audit commands on a single wheel.
+
+    Creates a virtualenv (or reuses an existing one) and installs any
+    audit requirements, then runs each audit command template against
+    the wheel. Commands containing {abi3_wheel} are skipped for
+    non-abi3 wheels.
+    """
+
+    if not needs_audit(build_options.audit_command, wheel.name):
+        return
+
+    log.step("Auditing wheel...")
+
+    use_uv = build_options.build_frontend.name in {"build[uv]", "uv"}
+    version = f"{sys.version_info.major}.{sys.version_info.minor}.{sys.version_info.micro}"
+    dependency_constraint = build_options.dependency_constraints.get_for_python_version(
+        version=version, tmp_dir=tmp_dir
+    )
+
+    # Use the base interpreter, not the venv python, to avoid nested-venv
+    # issues where pip can't be found (seen on Windows + Python 3.13).
+    host_python = Path(getattr(sys, "_base_executable", sys.executable))
+
+    audit_venv_dir = tmp_dir / "audit_venv"
+    if not (audit_venv_dir / "pyvenv.cfg").exists():
+        env = virtualenv(
+            version,
+            host_python,
+            audit_venv_dir,
+            dependency_constraint=dependency_constraint,
+            use_uv=use_uv,
+        )
+    else:
+        env = activate_virtualenv(audit_venv_dir)
+
+    # install audit requirements. This is run every time in case the user has
+    # defined overrides.
+    audit_requires = build_options.audit_requires
+    if audit_requires:
+        print(f"Installing audit dependencies: {', '.join(audit_requires)}")
+
+        pip: list[str]
+        if use_uv:
+            uv_path = find_uv()
+            assert uv_path is not None
+            pip = [str(uv_path), "pip"]
+        else:
+            pip = ["pip"]
+        # we pin if the audit-requires is left as the default "abi3audit"
+        should_pin = audit_requires == ["abi3audit"] and dependency_constraint
+
+        call(
+            *pip,
+            "install",
+            *(["--constraint", str(dependency_constraint)] if should_pin else []),
+            *audit_requires,
+            env=env,
+        )
+
+    audit_command = build_options.audit_command
+
+    for command_template in audit_command:
+        if "{abi3_wheel}" in command_template and "{wheel}" in command_template:
+            msg = (
+                f"Invalid audit command {command_template!r}: cannot contain both {{abi3_wheel}} "
+                "and {{wheel}} placeholders"
+            )
+            raise errors.ConfigurationError(msg)
+
+        if "{abi3_wheel}" in command_template and not is_abi3_wheel(wheel.name):
+            continue
+
+        prepared_command = prepare_command(
+            command_template,
+            abi3_wheel=wheel,
+            wheel=wheel,
+            project=".",
+            package=build_options.package_dir,
+        )
+
+        print(f"Running audit command: {prepared_command}")
+        try:
+            shell(prepared_command, env=env)
+        except subprocess.CalledProcessError as e:
+            print(f"Audit command failed with exit code {e.returncode}")
+            msg = f"Audit command failed: {prepared_command}"
+            raise errors.AuditCommandFailedError(msg) from e
+
+
+def needs_audit(audit_commands: list[str], wheel_name: str) -> bool:
+    saw_abi3_placeholder = False
+    for audit_command in audit_commands:
+        if "{abi3_wheel}" not in audit_command and "{wheel}" not in audit_command:
+            msg = (
+                f"Invalid audit command {audit_command!r}: must contain either "
+                "{{abi3_wheel}} or {{wheel}} placeholder"
+            )
+            raise errors.ConfigurationError(msg)
+
+        if "{abi3_wheel}" in audit_command:
+            saw_abi3_placeholder = True
+            if is_abi3_wheel(wheel_name):
+                return True
+        elif "{wheel}" in audit_command:
+            return True
+
+    if saw_abi3_placeholder:
+        print("No audit required for this wheel, as it is not abi3")
+    else:
+        print("No audit configured")
+
+    return False
@@ -2,7 +2,9 @@ import os
 import re
 from enum import Enum

-from .util.helpers import strtobool
+from cibuildwheel.util.helpers import strtobool
+
+ANSI_CODE_REGEX = re.compile(r"(\033\[[0-9;]*m)")


 class CIProvider(Enum):
@@ -12,7 +14,6 @@ class CIProvider(Enum):
    azure_pipelines = "azure_pipelines"
    github_actions = "github_actions"
    gitlab = "gitlab"
-    cirrus_ci = "cirrus_ci"

    # unofficial support
    appveyor = "appveyor"
@@ -33,8 +34,6 @@ def detect_ci_provider() -> CIProvider | None:
        return CIProvider.github_actions
    elif "GITLAB_CI" in os.environ:
        return CIProvider.gitlab
-    elif "CIRRUS_CI" in os.environ:
-        return CIProvider.cirrus_ci
    elif strtobool(os.environ.get("CI", "false")):
        return CIProvider.other
    else:
@@ -46,7 +45,7 @@ def fix_ansi_codes_for_github_actions(text: str) -> str:
    Github Actions forgets the current ANSI style on every new line. This
    function repeats the current ANSI style on every new line.
    """
-    ansi_code_regex = re.compile(r"(\033\[[0-9;]*m)")
+
    ansi_codes: list[str] = []
    output = ""

@@ -55,7 +54,7 @@ def fix_ansi_codes_for_github_actions(text: str) -> str:
        output += "".join(ansi_codes) + line

        # split the line at each ANSI code
-        parts = ansi_code_regex.split(line)
+        parts = ANSI_CODE_REGEX.split(line)
        # if there are any ANSI codes, save them
        if len(parts) > 1:
            # iterate over the ANSI codes in this line
@@ -67,3 +66,11 @@ def fix_ansi_codes_for_github_actions(text: str) -> str:
                    ansi_codes.append(code)

    return output
+
+
+def filter_ansi_codes(text: str, /) -> str:
+    """
+    Remove ANSI codes from text.
+    """
+
+    return ANSI_CODE_REGEX.sub("", text)
@@ -5,7 +5,7 @@ from typing import Any, Protocol
 import bashlex
 import bashlex.errors

-from . import bashlex_eval
+from cibuildwheel import bashlex_eval


 class EnvironmentParseError(Exception):
@@ -73,12 +73,16 @@ class EnvironmentAssignmentRaw:
        return self.value


+@dataclasses.dataclass
 class EnvironmentAssignmentBash:
    """
    An environment variable, in bash syntax. The value can use bash constructs
    like "$OTHER_VAR" and "$(command arg1 arg2)".
    """

+    name: str
+    value: str
+
    def __init__(self, assignment: str):
        name, equals, value = assignment.partition("=")
        if not equals:
@@ -96,11 +100,6 @@ class EnvironmentAssignmentBash:
    def __repr__(self) -> str:
        return f"{self.name}={self.value}"

-    def __eq__(self, other: object) -> bool:
-        if isinstance(other, EnvironmentAssignmentBash):
-            return self.name == other.name and self.value == other.value
-        return False
-

@dataclasses.dataclass(kw_only=True)
 class ParsedEnvironment:
@@ -132,7 +131,7 @@ class ParsedEnvironment:
    def __repr__(self) -> str:
        return f"{self.__class__.__name__}({[repr(a) for a in self.assignments]!r})"

-    def options_summary(self) -> Any:
+    def options_summary(self) -> list[EnvironmentAssignment]:
        return self.assignments


@@ -85,3 +85,27 @@ class RepairStepProducedNoWheelError(FatalError):
        )
        super().__init__(message)
        self.return_code = 8
+
+
+class RepairStepProducedMultipleWheelsError(FatalError):
+    def __init__(self, wheels: list[str]) -> None:
+        message = textwrap.dedent(
+            f"""
+            Build failed because the repair step completed successfully but
+            produced multiple wheels: {wheels}
+
+            Your `repair-wheel-command` is expected to place one repaired
+            wheel in the {{dest_dir}} directory. See the documentation for
+            example configurations:
+
+            https://cibuildwheel.pypa.io/en/stable/options/#repair-wheel-command
+            """
+        )
+        super().__init__(message)
+        self.return_code = 8
+
+
+class AuditCommandFailedError(FatalError):
+    def __init__(self, message: str) -> None:
+        super().__init__(message)
+        self.return_code = 9
@@ -41,7 +41,7 @@ def dump_python_configurations(

 def _json_request(request: urllib.request.Request, timeout: int = 30) -> dict[str, Any]:
    with urllib.request.urlopen(request, timeout=timeout) as response:
-        return typing.cast(dict[str, Any], json.load(response))
+        return typing.cast("dict[str, Any]", json.load(response))


 def github_api_request(path: str, *, max_retries: int = 3) -> dict[str, Any]:
@@ -62,7 +62,7 @@ def github_api_request(path: str, *, max_retries: int = 3) -> dict[str, Any]:
            # pylint: disable=E1101
            if (
                isinstance(e, urllib.error.HTTPError)
-                and (e.code == 403 or e.code == 429)
+                and (e.code in {403, 429})
                and e.headers.get("x-ratelimit-remaining") == "0"
            ):
                reset_time = int(e.headers.get("x-ratelimit-reset", 0))
@@ -98,4 +98,4 @@ def get_pyodide_xbuildenv_info() -> PyodideXBuildEnvInfo:
        "https://pyodide.github.io/pyodide/api/pyodide-cross-build-environments.json"
    )
    with urllib.request.urlopen(xbuildenv_info_url) as response:
-        return typing.cast(PyodideXBuildEnvInfo, json.loads(response.read().decode("utf-8")))
+        return typing.cast("PyodideXBuildEnvInfo", json.loads(response.read().decode("utf-8")))
@@ -4,10 +4,10 @@ import typing
 from collections.abc import Sequence
 from typing import Literal, Self, get_args

-from .logger import log
-from .util.helpers import parse_key_value_string
+from cibuildwheel.typing import PathOrStr
+from cibuildwheel.util.helpers import parse_key_value_string, prepare_command

-BuildFrontendName = Literal["pip", "build", "build[uv]"]
+BuildFrontendName = Literal["pip", "build", "build[uv]", "uv"]


@dataclasses.dataclass(frozen=True)
@@ -24,7 +24,7 @@ class BuildFrontendConfig:
            msg = f"Unrecognised build frontend {name!r}, must be one of {names}"
            raise ValueError(msg)

-        name = typing.cast(BuildFrontendName, name)
+        name = typing.cast("BuildFrontendName", name)

        args = config_dict.get("args") or []
        return cls(name=name, args=args)
@@ -38,11 +38,7 @@ class BuildFrontendConfig:

 def _get_verbosity_flags(level: int, frontend: BuildFrontendName) -> list[str]:
    if level < 0:
-        if frontend == "pip":
-            return ["-" + -level * "q"]
-
-        msg = f"build_verbosity {level} is not supported for {frontend} frontend. Ignoring."
-        log.warning(msg)
+        return ["-" + -level * "q"]

    if level > 0:
        if frontend == "pip":
@@ -58,6 +54,26 @@ def _split_config_settings(config_settings: str) -> list[str]:
    return [f"-C{setting}" for setting in config_settings_list]


+def prepare_config_settings(config_settings: str, *, project: PathOrStr, package: PathOrStr) -> str:
+    return prepare_command(config_settings, project=project, package=package)
+
+
+# Based on build.__main__.main.
+def parse_config_settings(config_settings_str: str) -> dict[str, str | list[str]]:
+    config_settings: dict[str, str | list[str]] = {}
+    for arg in shlex.split(config_settings_str):
+        setting, _, value = arg.partition("=")
+        existing_value = config_settings.get(setting)
+        if existing_value is None:
+            config_settings[setting] = value
+        elif isinstance(existing_value, str):
+            config_settings[setting] = [existing_value, value]
+        else:
+            existing_value.append(value)
+
+    return config_settings
+
+
 def get_build_frontend_extra_flags(
    build_frontend: BuildFrontendConfig, verbosity_level: int, config_settings: str
 ) -> list[str]:
@@ -1,11 +1,24 @@
 import codecs
+import contextlib
+import dataclasses
+import functools
+import hashlib
+import io
 import os
 import re
 import sys
+import textwrap
 import time
-from typing import IO, AnyStr, Final
+from collections.abc import Generator
+from pathlib import Path
+from typing import IO, TYPE_CHECKING, AnyStr, Final, Literal

-from .ci import CIProvider, detect_ci_provider
+import humanize
+
+from cibuildwheel.ci import CIProvider, detect_ci_provider, filter_ansi_codes
+
+if TYPE_CHECKING:
+    from cibuildwheel.options import Options

 FoldPattern = tuple[str, str]
 DEFAULT_FOLD_PATTERN: Final[FoldPattern] = ("{name}", "")
@@ -37,6 +50,8 @@ PLATFORM_IDENTIFIER_DESCRIPTIONS: Final[dict[str, str]] = {
    "macosx_universal2": "macOS Universal 2 - x86_64 and arm64",
    "macosx_arm64": "macOS arm64 - Apple Silicon",
    "pyodide_wasm32": "Pyodide",
+    "android_arm64_v8a": "Android arm64_v8a",
+    "android_x86_64": "Android x86_64",
    "ios_arm64_iphoneos": "iOS Device (ARM64)",
    "ios_arm64_iphonesimulator": "iOS Simulator (ARM64)",
    "ios_x86_64_iphonesimulator": "iOS Simulator (x86_64)",
@@ -69,14 +84,42 @@ class Symbols:
        self.error = "✕" if unicode else "failed"


+@dataclasses.dataclass(kw_only=True, frozen=True)
+class BuildInfo:
+    identifier: str
+    filename: Path | None
+    duration: float
+
+    @functools.cached_property
+    def size(self) -> str | None:
+        if self.filename is None:
+            return None
+        return humanize.naturalsize(self.filename.stat().st_size)
+
+    @functools.cached_property
+    def sha256(self) -> str | None:
+        if self.filename is None:
+            return None
+        with self.filename.open("rb") as f:
+            digest = hashlib.file_digest(f, "sha256")
+        return digest.hexdigest()
+
+    def __str__(self) -> str:
+        duration = humanize.naturaldelta(self.duration)
+        if self.filename:
+            return f"{self.identifier}: {self.filename.name} {self.size} in {duration}, SHA256={self.sha256}"
+        return f"{self.identifier}: {duration} (test only)"
+
+
 class Logger:
-    fold_mode: str
+    fold_mode: Literal["azure", "github", "travis", "disabled"]
    colors_enabled: bool
    unicode_enabled: bool
    active_build_identifier: str | None = None
    build_start_time: float | None = None
    step_start_time: float | None = None
    active_fold_group_name: str | None = None
+    summary: list[BuildInfo]

    def __init__(self) -> None:
        if sys.platform == "win32" and hasattr(sys.stdout, "reconfigure"):
@@ -88,25 +131,28 @@ class Logger:

        ci_provider = detect_ci_provider()

-        if ci_provider == CIProvider.azure_pipelines:
-            self.fold_mode = "azure"
-            self.colors_enabled = True
+        match ci_provider:
+            case CIProvider.azure_pipelines:
+                self.fold_mode = "azure"
+                self.colors_enabled = True

-        elif ci_provider == CIProvider.github_actions:
-            self.fold_mode = "github"
-            self.colors_enabled = True
+            case CIProvider.github_actions:
+                self.fold_mode = "github"
+                self.colors_enabled = True

-        elif ci_provider == CIProvider.travis_ci:
-            self.fold_mode = "travis"
-            self.colors_enabled = True
+            case CIProvider.travis_ci:
+                self.fold_mode = "travis"
+                self.colors_enabled = True

-        elif ci_provider == CIProvider.appveyor:
-            self.fold_mode = "disabled"
-            self.colors_enabled = True
+            case CIProvider.appveyor:
+                self.fold_mode = "disabled"
+                self.colors_enabled = True

-        else:
-            self.fold_mode = "disabled"
-            self.colors_enabled = file_supports_color(sys.stdout)
+            case _:
+                self.fold_mode = "disabled"
+                self.colors_enabled = file_supports_color(sys.stdout)
+
+        self.summary = []

    def build_start(self, identifier: str) -> None:
        self.step_end()
@@ -120,7 +166,7 @@ class Logger:
        self.build_start_time = time.time()
        self.active_build_identifier = identifier

-    def build_end(self) -> None:
+    def build_end(self, filename: Path | None) -> None:
        assert self.build_start_time is not None
        assert self.active_build_identifier is not None
        self.step_end()
@@ -128,11 +174,14 @@ class Logger:
        c = self.colors
        s = self.symbols
        duration = time.time() - self.build_start_time
+        duration_str = humanize.naturaldelta(duration, minimum_unit="milliseconds")

        print()
-        print(
-            f"{c.green}{s.done} {c.end}{self.active_build_identifier} finished in {duration:.2f}s"
+        print(f"{c.green}{s.done} {c.end}{self.active_build_identifier} finished in {duration_str}")
+        self.summary.append(
+            BuildInfo(identifier=self.active_build_identifier, filename=filename, duration=duration)
        )
+
        self.build_start_time = None
        self.active_build_identifier = None

@@ -147,6 +196,7 @@ class Logger:
            c = self.colors
            s = self.symbols
            duration = time.time() - self.step_start_time
+
            if success:
                print(f"{c.green}{s.done} {c.end}{duration:.2f}s".rjust(78))
            else:
@@ -183,6 +233,26 @@ class Logger:
            c = self.colors
            print(f"cibuildwheel: {c.bright_red}error{c.end}: {error}\n", file=sys.stderr)

+    @contextlib.contextmanager
+    def print_summary(self, *, options: "Options") -> Generator[None, None, None]:
+        start = time.time()
+        yield
+        duration = time.time() - start
+        if summary_path := os.environ.get("GITHUB_STEP_SUMMARY"):
+            github_summary = self._github_step_summary(duration=duration, options=options)
+            Path(summary_path).write_text(filter_ansi_codes(github_summary), encoding="utf-8")
+
+        n_wheels = len([info for info in self.summary if info.filename])
+        s = "s" if n_wheels > 1 else ""
+        duration_str = humanize.naturaldelta(duration)
+        print()
+        self._start_fold_group(f"{n_wheels} wheel{s} produced in {duration_str}")
+        for build_info in self.summary:
+            print(" ", build_info)
+        self._end_fold_group()
+
+        self.summary = []
+
    @property
    def step_active(self) -> bool:
        return self.step_start_time is not None
@@ -222,6 +292,72 @@ class Logger:
        # lowercase, shorten
        return identifier.lower()[:20]

+    def _github_step_summary(self, duration: float, options: "Options") -> str:
+        """
+        Returns the GitHub step summary, in markdown format.
+        """
+        out = io.StringIO()
+        options_summary = options.summary(
+            identifiers=[bi.identifier for bi in self.summary], skip_unset=True
+        )
+        out.write(
+            textwrap.dedent("""\
+                ### 🎡 cibuildwheel
+
+                <details>
+                <summary>
+                Build options
+                </summary>
+
+                ```yaml
+                {options_summary}
+                ```
+
+                </details>
+
+            """).format(options_summary=options_summary)
+        )
+        n_wheels = len([b for b in self.summary if b.filename])
+        wheel_rows = "\n".join(
+            "<tr>"
+            f"<td nowrap>{'<samp>' + b.filename.name + '</samp>' if b.filename else '*Test only*'}</td>"
+            f"<td nowrap>{b.size or 'N/A'}</td>"
+            f"<td nowrap><samp>{b.identifier}</samp></td>"
+            f"<td nowrap>{humanize.naturaldelta(b.duration)}</td>"
+            f"<td nowrap><samp>{b.sha256 or 'N/A'}</samp></td>"
+            "</tr>"
+            for b in self.summary
+        )
+        out.write(
+            textwrap.dedent("""\
+                <table>
+                <thead>
+                <tr>
+                <th align="left">Wheel</th>
+                <th align="left">Size</th>
+                <th align="left">Build identifier</th>
+                <th align="left">Time</th>
+                <th align="left">SHA256</th>
+                </tr>
+                </thead>
+                <tbody>
+                {wheel_rows}
+                </tbody>
+                </table>
+                <div align="right"><sup>{n} wheel{s} created in {duration_str}</sup></div>
+            """).format(
+                wheel_rows=wheel_rows,
+                n=n_wheels,
+                duration_str=humanize.naturaldelta(duration),
+                s="s" if n_wheels > 1 else "",
+            )
+        )
+
+        out.write("\n")
+        out.write("---")
+        out.write("\n")
+        return out.getvalue()
+
    @property
    def colors(self) -> Colors:
        return Colors(enabled=self.colors_enabled)
@@ -16,12 +16,12 @@ from pathlib import Path, PurePath, PurePosixPath
 from types import TracebackType
 from typing import IO, Literal, Self, assert_never

-from .ci import CIProvider, detect_ci_provider
-from .errors import OCIEngineTooOldError
-from .logger import log
-from .typing import PathOrStr
-from .util.cmd import call
-from .util.helpers import FlexibleVersion, parse_key_value_string, strtobool
+from cibuildwheel.ci import CIProvider, detect_ci_provider
+from cibuildwheel.errors import OCIEngineTooOldError
+from cibuildwheel.logger import log
+from cibuildwheel.typing import PathOrStr
+from cibuildwheel.util.cmd import call
+from cibuildwheel.util.helpers import FlexibleVersion, parse_key_value_string, strtobool

 ContainerEngineName = Literal["docker", "podman"]

@@ -36,6 +36,28 @@ class OCIPlatform(Enum):
    RISCV64 = "linux/riscv64"
    S390X = "linux/s390x"

+    @classmethod
+    def native(cls) -> Self:
+        """Return the current OCI platform, or raise ValueError if unknown."""
+        arch = platform.machine().lower()
+        mapping = {
+            "i386": cls.i386,
+            "i686": cls.i386,
+            "x86_64": cls.AMD64,
+            "amd64": cls.AMD64,
+            "armv7l": cls.ARMV7,
+            "aarch64": cls.ARM64,
+            "arm64": cls.ARM64,
+            "ppc64le": cls.PPC64LE,
+            "riscv64": cls.RISCV64,
+            "s390x": cls.S390X,
+        }
+        try:
+            return mapping[arch]
+        except KeyError as ex:
+            msg = f"Unsupported platform architecture: {arch}"
+            raise OSError(msg) from ex
+

@dataclasses.dataclass(frozen=True)
 class OCIContainerEngineConfig:
@@ -56,7 +78,7 @@ class OCIContainerEngineConfig:
            msg = f"unknown container engine {name}"
            raise ValueError(msg)

-        name = typing.cast(ContainerEngineName, name)
+        name = typing.cast("ContainerEngineName", name)
        # some flexibility in the option names to cope with TOML conventions
        create_args = config_dict.get("create_args") or config_dict.get("create-args") or []
        disable_host_mount_options = (
@@ -94,44 +116,50 @@ DEFAULT_ENGINE = OCIContainerEngineConfig("docker")
 def _check_engine_version(engine: OCIContainerEngineConfig) -> None:
    try:
        version_string = call(engine.name, "version", "-f", "{{json .}}", capture_stdout=True)
-        version_info = json.loads(version_string.strip())
-        if engine.name == "docker":
-            client_api_version = FlexibleVersion(version_info["Client"]["ApiVersion"])
-            server_api_version = FlexibleVersion(version_info["Server"]["ApiVersion"])
-            # --platform support was introduced in 1.32 as experimental, 1.41 removed the experimental flag
-            version = min(client_api_version, server_api_version)
-            minimum_version = FlexibleVersion("1.41")
-            minimum_version_str = "20.10.0"  # docker version
-            error_msg = textwrap.dedent(
-                f"""
-                Build failed because {engine.name} is too old.
+        # We are using lowercase keys for all dicts so we are not affected by casing of keys
+        version_info = json.loads(
+            version_string.strip(), object_pairs_hook=lambda inp: {k.lower(): v for k, v in inp}
+        )
+        match engine.name:
+            case "docker":
+                client_api_version = FlexibleVersion(version_info["client"]["apiversion"])
+                server_api_version = FlexibleVersion(version_info["server"]["apiversion"])
+                # --platform support was introduced in 1.32 as experimental, 1.41 removed the experimental flag
+                version = min(client_api_version, server_api_version)
+                minimum_version = FlexibleVersion("1.41")
+                minimum_version_str = "20.10.0"  # docker version
+                error_msg = textwrap.dedent(
+                    f"""
+                    Build failed because {engine.name} is too old.

-                cibuildwheel requires {engine.name}>={minimum_version_str} running API version {minimum_version}.
-                The API version found by cibuildwheel is {version}.
-                """
-            )
-        elif engine.name == "podman":
-            # podman uses the same version string for "Version" & "ApiVersion"
-            client_version = FlexibleVersion(version_info["Client"]["Version"])
-            if "Server" in version_info:
-                server_version = FlexibleVersion(version_info["Server"]["Version"])
-            else:
-                server_version = client_version
-            # --platform support was introduced in v3
-            version = min(client_version, server_version)
-            minimum_version = FlexibleVersion("3")
-            error_msg = textwrap.dedent(
-                f"""
-                Build failed because {engine.name} is too old.
+                    cibuildwheel requires {engine.name}>={minimum_version_str} running API version {minimum_version}.
+                    The API version found by cibuildwheel is {version}.
+                    """
+                )
+            case "podman":
+                # podman uses the same version string for "Version" & "ApiVersion"
+                client_version = FlexibleVersion(version_info["client"]["version"])
+                if "server" in version_info:
+                    server_version = FlexibleVersion(version_info["server"]["version"])
+                else:
+                    server_version = client_version
+                # --platform support was introduced in v3
+                version = min(client_version, server_version)
+                minimum_version = FlexibleVersion("3")
+                error_msg = textwrap.dedent(
+                    f"""
+                    Build failed because {engine.name} is too old.
+
+                    cibuildwheel requires {engine.name}>={minimum_version}.
+                    The version found by cibuildwheel is {version}.
+                    """
+                )
+            case _:
+                assert_never(engine.name)

-                cibuildwheel requires {engine.name}>={minimum_version}.
-                The version found by cibuildwheel is {version}.
-                """
-            )
-        else:
-            assert_never(engine.name)
        if version < minimum_version:
            raise OCIEngineTooOldError(error_msg) from None
+
    except (subprocess.CalledProcessError, KeyError, ValueError) as e:
        msg = f"Build failed because {engine.name} is too old or is not working properly."
        raise OCIEngineTooOldError(msg) from e
@@ -149,11 +177,19 @@ class OCIContainer:
    back to cibuildwheel.

    Example:
+        >>> # xdoctest: +REQUIRES(LINUX)
        >>> from cibuildwheel.oci_container import *  # NOQA
        >>> from cibuildwheel.options import _get_pinned_container_images
+        >>> import pytest
+        >>> try:
+        ...     oci_platform = OCIPlatform.native()
+        ... except OSError as ex:
+        ...     pytest.skip(str(ex))
+        >>> if oci_platform != OCIPlatform.AMD64:
+        ...     pytest.skip('only runs on amd64')
        >>> image = _get_pinned_container_images()['x86_64']['manylinux2014']
        >>> # Test the default container
-        >>> with OCIContainer(image=image) as self:
+        >>> with OCIContainer(image=image, oci_platform=oci_platform) as self:
        ...     self.call(["echo", "hello world"])
        ...     self.call(["cat", "/proc/1/cgroup"])
        ...     print(self.get_environment())
@@ -482,7 +518,7 @@ class OCIContainer:
                capture_output=True,
            )
        )
-        return typing.cast(dict[str, str], env)
+        return typing.cast("dict[str, str]", env)

    def environment_executor(self, command: Sequence[str], environment: dict[str, str]) -> str:
        # used as an EnvironmentExecutor to evaluate commands and capture output
@@ -14,18 +14,18 @@ from typing import Any, Final, Literal, Self, assert_never

 from packaging.specifiers import SpecifierSet

-from . import errors
-from .architecture import Architecture
-from .environment import EnvironmentParseError, ParsedEnvironment, parse_environment
-from .frontend import BuildFrontendConfig
-from .logger import log
-from .oci_container import OCIContainerEngineConfig
-from .projectfiles import get_requires_python_str, resolve_dependency_groups
-from .selector import BuildSelector, EnableGroup, TestSelector, selector_matches
-from .typing import PLATFORMS, PlatformName
-from .util import resources
-from .util.helpers import format_safe, strtobool, unwrap
-from .util.packaging import DependencyConstraints
+from cibuildwheel import errors
+from cibuildwheel.architecture import Architecture
+from cibuildwheel.environment import EnvironmentParseError, ParsedEnvironment, parse_environment
+from cibuildwheel.frontend import BuildFrontendConfig
+from cibuildwheel.logger import log
+from cibuildwheel.oci_container import OCIContainerEngineConfig
+from cibuildwheel.projectfiles import get_requires_python_str, resolve_dependency_groups
+from cibuildwheel.selector import BuildSelector, EnableGroup, TestSelector, selector_matches
+from cibuildwheel.typing import PLATFORMS, PlatformName
+from cibuildwheel.util import resources
+from cibuildwheel.util.helpers import format_safe, parse_key_value_string, strtobool, unwrap
+from cibuildwheel.util.packaging import DependencyConstraints

 MANYLINUX_ARCHS: Final[tuple[str, ...]] = (
    "x86_64",
@@ -63,6 +63,7 @@ class CommandLineArguments:
    allow_empty: bool
    debug_traceback: bool
    enable: list[str]
+    clean_cache: bool

    @classmethod
    def defaults(cls) -> Self:
@@ -77,6 +78,7 @@ class CommandLineArguments:
            print_build_identifiers=False,
            debug_traceback=False,
            enable=[],
+            clean_cache=False,
        )


@@ -90,6 +92,20 @@ class GlobalOptions:
    allow_empty: bool


+@dataclasses.dataclass(frozen=True)
+class TestRuntimeConfig:
+    args: Sequence[str] = ()
+
+    @classmethod
+    def from_config_string(cls, config_string: str) -> Self:
+        config_dict = parse_key_value_string(config_string, [], ["args"])
+        args = config_dict.get("args") or []
+        return cls(args=args)
+
+    def options_summary(self) -> str | dict[str, str]:
+        return {"args": repr(self.args)}
+
+
@dataclasses.dataclass(frozen=True, kw_only=True)
 class BuildOptions:
    globals: GlobalOptions
@@ -108,8 +124,11 @@ class BuildOptions:
    test_extras: str
    test_groups: list[str]
    test_environment: ParsedEnvironment
+    test_runtime: TestRuntimeConfig
+    audit_requires: list[str]
+    audit_command: list[str]
    build_verbosity: int
-    build_frontend: BuildFrontendConfig | None
+    build_frontend: BuildFrontendConfig
    config_settings: str
    container_engine: OCIContainerEngineConfig
    pyodide_version: str | None
@@ -343,40 +362,46 @@ def _apply_inherit_rule(
        msg = f"Don't know how to merge {before!r} and {after!r} with {rule}"
        raise OptionsReaderError(msg)

-    if rule == InheritRule.APPEND:
-        return option_format.merge_values(before, after)
-    if rule == InheritRule.PREPEND:
-        return option_format.merge_values(after, before)
-
-    assert_never(rule)
+    match rule:
+        case InheritRule.APPEND:
+            return option_format.merge_values(before, after)
+        case InheritRule.PREPEND:
+            return option_format.merge_values(after, before)
+        case _:
+            assert_never(rule)


 def _stringify_setting(
    setting: SettingValue,
    option_format: OptionFormat | None,
 ) -> str:
-    if isinstance(setting, Mapping):
-        try:
-            if option_format is None:
-                raise OptionFormat.NotSupported
-            return option_format.format_table(setting)
-        except OptionFormat.NotSupported:
-            msg = f"Error converting {setting!r} to a string: this setting doesn't accept a table"
-            raise OptionsReaderError(msg) from None
-
-    if not isinstance(setting, str) and isinstance(setting, Sequence):
-        try:
-            if option_format is None:
-                raise OptionFormat.NotSupported
-            return option_format.format_list(setting)
-        except OptionFormat.NotSupported:
-            msg = f"Error converting {setting!r} to a string: this setting doesn't accept a list"
-            raise OptionsReaderError(msg) from None
-
-    if isinstance(setting, bool | int):
-        return str(setting)
-
-    return setting
+    match setting:
+        case {}:
+            assert isinstance(setting, Mapping)  # MyPy 1.15 doesn't narrow this for us
+            try:
+                if option_format is None:
+                    raise OptionFormat.NotSupported
+                return option_format.format_table(setting)
+            except OptionFormat.NotSupported:
+                msg = (
+                    f"Error converting {setting!r} to a string: this setting doesn't accept a table"
+                )
+                raise OptionsReaderError(msg) from None
+        case bool() | int():
+            return str(setting)
+        case [*_]:
+            try:
+                if option_format is None:
+                    raise OptionFormat.NotSupported
+                return option_format.format_list(setting)
+            except OptionFormat.NotSupported:
+                msg = (
+                    f"Error converting {setting!r} to a string: this setting doesn't accept a list"
+                )
+                raise OptionsReaderError(msg) from None
+        case _:
+            assert isinstance(setting, str)  # MyPy 1.15 doesn't narrow this for us
+            return setting


 class OptionsReader:
@@ -385,6 +410,7 @@ class OptionsReader:
    by the platform.

    Example:
+      >>> # xdoctest: +SKIP
      >>> options_reader = OptionsReader(config_file, platform='macos')
      >>> options_reader.get('cool-color')

@@ -651,7 +677,9 @@ class Options:
        )
        requires_python = None if requires_python_str is None else SpecifierSet(requires_python_str)

-        archs_config_str = args.archs or self.reader.get("archs", option_format=ListFormat(sep=" "))
+        archs_config_str = args.archs or self.reader.get(
+            "archs", option_format=ListFormat(sep=" "), ignore_empty=True
+        )
        architectures = Architecture.parse_config(archs_config_str, platform=self.platform)

        # Process `--only`
@@ -659,7 +687,7 @@ class Options:
            build_config = args.only
            skip_config = ""
            architectures = Architecture.all_archs(self.platform)
-            enable = set(EnableGroup)
+            enable |= EnableGroup.all_groups()

        build_selector = BuildSelector(
            build_config=build_config,
@@ -750,6 +778,20 @@ class Options:
                msg = f"Malformed environment option {test_environment_config!r}"
                raise errors.ConfigurationError(msg) from e

+            test_runtime_str = self.reader.get(
+                "test-runtime",
+                env_plat=False,
+                option_format=ShlexTableFormat(sep="; ", pair_sep=":", allow_merge=False),
+            )
+            if not test_runtime_str:
+                test_runtime = TestRuntimeConfig()
+            else:
+                try:
+                    test_runtime = TestRuntimeConfig.from_config_string(test_runtime_str)
+                except ValueError as e:
+                    msg = f"Failed to parse test runtime config. {e}"
+                    raise errors.ConfigurationError(msg) from e
+
            test_requires = self.reader.get(
                "test-requires", option_format=ListFormat(sep=" ")
            ).split()
@@ -766,9 +808,8 @@ class Options:
                env_plat=False,
                option_format=ShlexTableFormat(sep="; ", pair_sep=":", allow_merge=False),
            )
-            build_frontend: BuildFrontendConfig | None
            if not build_frontend_str or build_frontend_str == "default":
-                build_frontend = None
+                build_frontend = BuildFrontendConfig("build")
            else:
                try:
                    build_frontend = BuildFrontendConfig.from_config_string(build_frontend_str)
@@ -853,11 +894,21 @@ class Options:

            pyodide_version = self.reader.get("pyodide-version", env_plat=False)

+            audit_command_str = self.reader.get(
+                "audit-command", option_format=ListFormat(sep=" && ")
+            )
+            audit_command = audit_command_str.split(" && ") if audit_command_str else []
+
+            audit_requires = self.reader.get(
+                "audit-requires", option_format=ListFormat(sep=" ")
+            ).split()
+
            return BuildOptions(
                globals=self.globals,
                test_command=test_command,
                test_sources=test_sources,
                test_environment=test_environment,
+                test_runtime=test_runtime,
                test_requires=[*test_requires, *test_requirements_from_groups],
                test_extras=test_extras,
                test_groups=test_groups,
@@ -875,6 +926,8 @@ class Options:
                config_settings=config_settings,
                container_engine=container_engine,
                pyodide_version=pyodide_version or None,
+                audit_command=audit_command,
+                audit_requires=audit_requires,
            )

    def check_for_invalid_configuration(self, identifiers: Iterable[str]) -> None:
@@ -901,14 +954,18 @@ class Options:
            defaults=True,
        )

-    def summary(self, identifiers: Iterable[str]) -> str:
+    def summary(self, identifiers: Iterable[str], skip_unset: bool = False) -> str:
        lines = []
        global_option_names = sorted(f.name for f in dataclasses.fields(self.globals))

        for option_name in global_option_names:
            option_value = getattr(self.globals, option_name)
            default_value = getattr(self.defaults.globals, option_name)
-            lines.append(self.option_summary(option_name, option_value, default_value))
+            line = self.option_summary(
+                option_name, option_value, default_value, skip_unset=skip_unset
+            )
+            if line is not None:
+                lines.append(line)

        build_options = self.build_options(identifier=None)
        build_options_defaults = self.defaults.build_options(identifier=None)
@@ -928,19 +985,26 @@ class Options:
                i: getattr(build_options_for_identifier[i], option_name) for i in identifiers
            }

-            lines.append(
-                self.option_summary(option_name, option_value, default_value, overrides=overrides)
+            line = self.option_summary(
+                option_name,
+                option_value,
+                default_value,
+                overrides=overrides,
+                skip_unset=skip_unset,
            )
+            if line is not None:
+                lines.append(line)

        return "\n".join(lines)

    def option_summary(
        self,
        option_name: str,
-        option_value: Any,
-        default_value: Any,
+        option_value: Any,  # noqa: ANN401
+        default_value: Any,  # noqa: ANN401
        overrides: Mapping[str, Any] | None = None,
-    ) -> str:
+        skip_unset: bool = False,
+    ) -> str | None:
        """
        Return a summary of the option value, including any overrides, with
        ANSI 'dim' color if it's the default.
@@ -954,6 +1018,10 @@ class Options:
        overrides_value_strs = {k: v for k, v in overrides_value_strs.items() if v != value_str}

        has_been_set = (value_str != default_value_str) or overrides_value_strs
+
+        if skip_unset and not has_been_set:
+            return None
+
        c = log.colors

        result = c.gray if not has_been_set else ""
@@ -985,7 +1053,7 @@ class Options:
            return value

    @staticmethod
-    def option_summary_value(option_value: Any) -> str:
+    def option_summary_value(option_value: Any) -> str:  # noqa: ANN401
        if hasattr(option_value, "options_summary"):
            option_value = option_value.options_summary()

@@ -1,12 +1,12 @@
-from __future__ import annotations
-
+import sys
 from collections.abc import Sequence
 from pathlib import Path
 from typing import Final, Protocol

+from cibuildwheel import errors
 from cibuildwheel.architecture import Architecture
 from cibuildwheel.options import Options
-from cibuildwheel.platforms import ios, linux, macos, pyodide, windows
+from cibuildwheel.platforms import android, ios, linux, macos, pyodide, windows
 from cibuildwheel.selector import BuildSelector
 from cibuildwheel.typing import GenericPythonConfiguration, PlatformName

@@ -28,10 +28,27 @@ ALL_PLATFORM_MODULES: Final[dict[PlatformName, PlatformModule]] = {
    "windows": windows,
    "macos": macos,
    "pyodide": pyodide,
+    "android": android,
    "ios": ios,
 }


+def native_platform() -> PlatformName:
+    if sys.platform.startswith("linux"):
+        return "linux"
+    elif sys.platform == "darwin":
+        return "macos"
+    elif sys.platform == "win32":
+        return "windows"
+    else:
+        msg = (
+            'Unable to detect platform from "sys.platform". cibuildwheel doesn\'t '
+            "support building wheels for this platform. You might be able to build for a different "
+            "platform using the --platform argument. Check --help output for more information."
+        )
+        raise errors.ConfigurationError(msg)
+
+
 def get_build_identifiers(
    platform_module: PlatformModule,
    build_selector: BuildSelector,
@@ -0,0 +1,779 @@
+import csv
+import hashlib
+import os
+import platform
+import re
+import shlex
+import shutil
+import subprocess
+import sysconfig
+from collections.abc import Iterable, Iterator, MutableMapping
+from dataclasses import dataclass
+from os.path import relpath
+from pathlib import Path
+from pprint import pprint
+from runpy import run_path
+from textwrap import dedent
+from typing import Any
+
+from build import ProjectBuilder
+from build.env import IsolatedEnv
+from elftools.common.exceptions import ELFError
+from elftools.elf.elffile import ELFFile
+from filelock import FileLock
+
+from cibuildwheel import errors, platforms  # pylint: disable=cyclic-import
+from cibuildwheel.architecture import Architecture, arch_synonym
+from cibuildwheel.audit import run_audit
+from cibuildwheel.frontend import (
+    get_build_frontend_extra_flags,
+    parse_config_settings,
+    prepare_config_settings,
+)
+from cibuildwheel.logger import log
+from cibuildwheel.options import BuildOptions, Options
+from cibuildwheel.selector import BuildSelector
+from cibuildwheel.util import resources
+from cibuildwheel.util.cmd import call, shell
+from cibuildwheel.util.file import CIBW_CACHE_PATH, copy_test_sources, download, move_file
+from cibuildwheel.util.helpers import prepare_command
+from cibuildwheel.util.packaging import find_compatible_wheel
+from cibuildwheel.util.python_build_standalone import create_python_build_standalone_environment
+from cibuildwheel.venv import constraint_flags, find_uv, virtualenv
+
+RESOURCES_ANDROID = resources.PATH / "android"
+
+ANDROID_TRIPLET = {
+    "arm64_v8a": "aarch64-linux-android",
+    "x86_64": "x86_64-linux-android",
+}
+
+
+def parse_identifier(identifier: str) -> tuple[str, str]:
+    match = re.fullmatch(r"cp(\d)(\d+)-android_(.+)", identifier)
+    if not match:
+        msg = f"invalid Android identifier: '{identifier}'"
+        raise ValueError(msg)
+    major, minor, arch = match.groups()
+    return (f"{major}.{minor}", arch)
+
+
+def android_triplet(identifier: str) -> str:
+    return ANDROID_TRIPLET[parse_identifier(identifier)[1]]
+
+
+@dataclass(frozen=True)
+class PythonConfiguration:
+    version: str
+    identifier: str
+    url: str
+
+    @property
+    def arch(self) -> str:
+        return parse_identifier(self.identifier)[1]
+
+
+def all_python_configurations() -> list[PythonConfiguration]:
+    return [PythonConfiguration(**item) for item in resources.read_python_configs("android")]
+
+
+def get_python_configurations(
+    build_selector: BuildSelector, architectures: set[Architecture]
+) -> list[PythonConfiguration]:
+    return [
+        c
+        for c in all_python_configurations()
+        if c.arch in architectures and build_selector(c.identifier)
+    ]
+
+
+def shell_prepared(command: str, *, build_options: BuildOptions, env: dict[str, str]) -> None:
+    shell(
+        prepare_command(command, project=".", package=build_options.package_dir),
+        env=env,
+    )
+
+
+def before_all(options: Options, python_configurations: list[PythonConfiguration]) -> None:
+    before_all_options = options.build_options(python_configurations[0].identifier)
+    if before_all_options.before_all:
+        log.step("Running before_all...")
+        shell_prepared(
+            before_all_options.before_all,
+            build_options=before_all_options,
+            env=before_all_options.environment.as_dictionary(os.environ),
+        )
+
+
+@dataclass(frozen=True)
+class BuildState:
+    config: PythonConfiguration
+    options: BuildOptions
+    build_path: Path
+    python_dir: Path
+    build_env: dict[str, str]
+    android_env: dict[str, str]
+
+
+def build(options: Options, tmp_path: Path) -> None:
+    if "ANDROID_HOME" not in os.environ:
+        msg = (
+            "ANDROID_HOME environment variable is not set. For instructions, see "
+            "https://cibuildwheel.pypa.io/en/stable/platforms/#android"
+        )
+        raise errors.FatalError(msg)
+
+    configs = get_python_configurations(
+        options.globals.build_selector, options.globals.architectures
+    )
+    if not configs:
+        return
+
+    try:
+        before_all(options, configs)
+
+        built_wheels: list[Path] = []
+        for config in configs:
+            log.build_start(config.identifier)
+            build_options = options.build_options(config.identifier)
+            build_path = tmp_path / config.identifier
+            build_path.mkdir()
+            python_dir = setup_target_python(config, build_path)
+            build_env, android_env = setup_env(config, build_options, build_path, python_dir)
+            state = BuildState(
+                config, build_options, build_path, python_dir, build_env, android_env
+            )
+
+            compatible_wheel = find_compatible_wheel(built_wheels, config.identifier)
+            if compatible_wheel:
+                print(
+                    f"\nFound previously built wheel {compatible_wheel.name} that is "
+                    f"compatible with {config.identifier}. Skipping build step..."
+                )
+                repaired_wheel = compatible_wheel
+            else:
+                before_build(state)
+                built_wheel = build_wheel(state)
+                repaired_wheel = repair_wheel(state, built_wheel)
+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
+            test_wheel(state, repaired_wheel, build_frontend=build_options.build_frontend.name)
+
+            output_wheel: Path | None = None
+            if compatible_wheel is None:
+                output_wheel = move_file(
+                    repaired_wheel, build_options.output_dir / repaired_wheel.name
+                )
+                built_wheels.append(output_wheel)
+
+            shutil.rmtree(build_path)
+            log.build_end(output_wheel)
+
+    except subprocess.CalledProcessError as error:
+        msg = f"Command {error.cmd} failed with code {error.returncode}. {error.stdout or ''}"
+        raise errors.FatalError(msg) from error
+
+
+def setup_target_python(config: PythonConfiguration, build_path: Path) -> Path:
+    log.step("Installing target Python...")
+    python_tgz = CIBW_CACHE_PATH / config.url.rpartition("/")[-1]
+    with FileLock(f"{python_tgz}.lock"):
+        if not python_tgz.exists():
+            download(config.url, python_tgz)
+
+    python_dir = build_path / "python"
+    python_dir.mkdir()
+    shutil.unpack_archive(python_tgz, python_dir)
+
+    # Patch a testbed bug. This code and the patch file can both be removed once we've
+    # updated to Python versions that include the fix.
+    call("patch", "-p1", "-i", RESOURCES_ANDROID / "android.patch", cwd=python_dir)
+
+    return python_dir
+
+
+def setup_env(
+    config: PythonConfiguration, build_options: BuildOptions, build_path: Path, python_dir: Path
+) -> tuple[dict[str, str], dict[str, str]]:
+    """
+    Returns two environment dicts, both pointing at the same virtual environment:
+
+    * build_env, which uses the environment normally.
+    * android_env, which uses the environment while simulating running on Android.
+    """
+    log.step("Setting up build environment...")
+    build_frontend = build_options.build_frontend.name
+    use_uv = build_frontend in {"build[uv]", "uv"}
+    uv_path = find_uv()
+    if use_uv and uv_path is None:
+        msg = "uv not found"
+        raise AssertionError(msg)
+    pip = ["pip"] if not use_uv else [str(uv_path), "pip"]
+
+    # Create virtual environment
+    python_exe = create_python_build_standalone_environment(
+        config.version, build_path, CIBW_CACHE_PATH
+    )
+    venv_dir = build_path / "venv"
+    dependency_constraint = build_options.dependency_constraints.get_for_python_version(
+        version=config.version, tmp_dir=build_path
+    )
+    build_env = virtualenv(
+        config.version, python_exe, venv_dir, dependency_constraint, use_uv=use_uv
+    )
+    create_cmake_toolchain(config, build_path, python_dir, build_env)
+
+    # Apply custom environment variables, and check environment is still valid
+    build_env = build_options.environment.as_dictionary(build_env)
+    build_env["PIP_DISABLE_PIP_VERSION_CHECK"] = "1"
+    for command in ["python"] if use_uv else ["python", "pip"]:
+        command_path = call("which", command, env=build_env, capture_stdout=True).strip()
+        if command_path != f"{venv_dir}/bin/{command}":
+            msg = (
+                f"{command} available on PATH doesn't match our installed instance. If you "
+                f"have modified PATH, ensure that you don't overwrite cibuildwheel's entry "
+                f"or insert {command} above it."
+            )
+            raise errors.FatalError(msg)
+        if command == "python":
+            call(command, "-V", "-V", env=build_env)
+        else:
+            call(command, "--version", env=build_env)
+
+    # Construct an altered environment which simulates running on Android.
+    android_env = setup_android_env(config, python_dir, venv_dir, build_env)
+
+    # Install build tools
+    if build_frontend not in {"build", "build[uv]", "uv"}:
+        msg = "Android requires the build frontend to be 'build' or 'uv'"
+        raise errors.FatalError(msg)
+    call(*pip, "install", "build", *constraint_flags(dependency_constraint), env=build_env)
+
+    # Build-time requirements must be queried within android_env, because
+    # `get_requires_for_build` can run arbitrary code in setup.py scripts, which may be
+    # affected by the target platform. However, the requirements must be installed
+    # within build_env, because they're going to run on the build machine.
+    #
+    # The `build` CLI doesn't support this combination, so we use its API to query the
+    # requirements, and then install them ourselves with pip. We'll later run `build` in
+    # the same environment, passing the `--no-isolation` option.
+    class AndroidEnv(IsolatedEnv):
+        @property
+        def python_executable(self) -> str:
+            return f"{venv_dir}/bin/python"
+
+        def make_extra_environ(self) -> dict[str, str]:
+            return android_env
+
+    pb = ProjectBuilder.from_isolated_env(AndroidEnv(), build_options.package_dir)
+    if pb.build_system_requires:
+        call(*pip, "install", *pb.build_system_requires, env=build_env)
+
+    requires_for_build = pb.get_requires_for_build(
+        "wheel", parse_config_settings(build_options.config_settings)
+    )
+    if requires_for_build:
+        call(*pip, "install", *requires_for_build, env=build_env)
+
+    return build_env, android_env
+
+
+def create_cmake_toolchain(
+    config: PythonConfiguration, build_path: Path, python_dir: Path, build_env: dict[str, str]
+) -> None:
+    toolchain_path = build_path / "toolchain.cmake"
+    build_env["CMAKE_TOOLCHAIN_FILE"] = str(toolchain_path)
+    with open(toolchain_path, "w", encoding="UTF-8") as toolchain_file:
+        print(
+            dedent(
+                f"""\
+                # To support as many build systems as possible, we use environment
+                # variables as the single source of truth for compiler flags and paths,
+                # so they don't need to be specified here.
+
+                set(CMAKE_SYSTEM_NAME Android)
+                set(CMAKE_SYSTEM_PROCESSOR {android_triplet(config.identifier).split("-")[0]})
+
+                # Inhibit all of CMake's own NDK handling code.
+                set(CMAKE_SYSTEM_VERSION 1)
+
+                # Tell CMake where to look for headers and libraries.
+                set(CMAKE_FIND_ROOT_PATH "{python_dir}/prefix")
+                set(CMAKE_FIND_ROOT_PATH_MODE_PROGRAM NEVER)
+                set(CMAKE_FIND_ROOT_PATH_MODE_LIBRARY ONLY)
+                set(CMAKE_FIND_ROOT_PATH_MODE_INCLUDE ONLY)
+                set(CMAKE_FIND_ROOT_PATH_MODE_PACKAGE BOTH)
+
+                # Allow CMake to run Python in the simulated Android environment when
+                # policy CMP0190 is active.
+                set(CMAKE_CROSSCOMPILING_EMULATOR /bin/sh -c [["$0" "$@"]])
+                """
+            ),
+            file=toolchain_file,
+        )
+
+
+def localize_sysconfigdata(
+    python_dir: Path, build_env: dict[str, str], sysconfigdata_path: Path
+) -> dict[str, Any]:
+    sysconfigdata: dict[str, Any] = run_path(str(sysconfigdata_path))["build_time_vars"]
+    with sysconfigdata_path.open("w", encoding="UTF-8") as f:
+        f.write("# Generated by cibuildwheel\n")
+        f.write("build_time_vars = ")
+        sysconfigdata = localized_vars(build_env, sysconfigdata, python_dir / "prefix")
+        pprint(sysconfigdata, stream=f, compact=True)
+        return sysconfigdata
+
+
+def localized_vars(
+    build_env: dict[str, str], orig_vars: dict[str, Any], prefix: Path
+) -> dict[str, Any]:
+    orig_prefix = orig_vars["prefix"]
+    localized_vars_ = {}
+    for key, value in orig_vars.items():
+        # The host's sysconfigdata will include references to build-time paths.
+        # Update these to refer to the current prefix.
+        final = value
+        if isinstance(final, str):
+            final = final.replace(orig_prefix, str(prefix))
+
+        if key == "ANDROID_API_LEVEL":
+            if api_level := build_env.get(key):
+                final = int(api_level)
+
+        # Build systems vary in whether FLAGS variables are read from sysconfig, and if so,
+        # whether they're replaced by environment variables or combined with them. Even
+        # setuptools has changed its behavior here
+        # (https://github.com/pypa/setuptools/issues/4836).
+        #
+        # Ensure consistency by clearing the sysconfig variables and letting the environment
+        # variables take effect alone. This will also work for any non-Python build systems
+        # which the build script may call.
+        elif key in ["CFLAGS", "CXXFLAGS", "LDFLAGS"]:
+            final = ""
+
+        # These variables contain an embedded copy of LDFLAGS.
+        elif key in ["LDSHARED", "LDCXXSHARED"]:
+            final = final.removesuffix(" " + orig_vars["LDFLAGS"])
+
+        localized_vars_[key] = final
+
+    return localized_vars_
+
+
+def setup_android_env(
+    config: PythonConfiguration, python_dir: Path, venv_dir: Path, build_env: dict[str, str]
+) -> dict[str, str]:
+    site_packages = next(venv_dir.glob("lib/python*/site-packages"))
+    for suffix in ["pth", "py"]:
+        shutil.copy(RESOURCES_ANDROID / f"_cross_venv.{suffix}", site_packages)
+
+    sysconfigdata_path = Path(
+        shutil.copy(
+            next(python_dir.glob("prefix/lib/python*/_sysconfigdata_*.py")),
+            site_packages,
+        )
+    )
+    sysconfigdata = localize_sysconfigdata(python_dir, build_env, sysconfigdata_path)
+
+    # Activate the code in _cross_venv.py.
+    android_env = build_env.copy()
+    android_env["CIBW_HOST_TRIPLET"] = android_triplet(config.identifier)
+
+    # Get the environment variables needed to build for Android (CC, CFLAGS, etc). These are
+    # generated by https://github.com/python/cpython/blob/main/Android/android-env.sh.
+    env_output = call(python_dir / "android.py", "env", env=build_env, capture_stdout=True)
+
+    # shlex.split should produce a sequence alternating between:
+    #   * the word "export"
+    #   * a key=value string, without quotes
+    for i, token in enumerate(shlex.split(env_output)):
+        if i % 2 == 0:
+            assert token == "export", token
+        else:
+            key, sep, value = token.partition("=")
+            assert sep == "=", token
+            android_env[key] = value
+
+    # localized_vars cleared the CFLAGS and CXXFLAGS in the sysconfigdata, but most
+    # packages take their optimization flags from these variables. Pass these flags via
+    # environment variables instead.
+    #
+    # We don't enable debug information, because it significantly increases binary size,
+    # and most Android app developers don't have the NDK installed, so they would have no
+    # way to strip it.
+    opt = " ".join(word for word in sysconfigdata["OPT"].split() if not word.startswith("-g"))
+    for key in ["CFLAGS", "CXXFLAGS"]:
+        android_env[key] += " " + opt
+
+    # Cargo target linker needs to be specified after CC is set
+    setup_rust(config, python_dir, android_env)
+
+    # Format the environment so it can be pasted into a shell when debugging.
+    for key, value in sorted(android_env.items()):
+        if os.environ.get(key) != value:
+            print(f"export {key}={shlex.quote(value)}")
+
+    return android_env
+
+
+def setup_rust(
+    config: PythonConfiguration,
+    python_dir: Path,
+    env: MutableMapping[str, str],
+) -> None:
+    cargo_target = android_triplet(config.identifier)
+
+    # CARGO_BUILD_TARGET is the variable used by Cargo and setuptools_rust
+    env["CARGO_BUILD_TARGET"] = cargo_target
+
+    # The linker needs to be specified after CC is set by android-env.sh
+    cargo_target_linker_env_name = f"CARGO_TARGET_{cargo_target.upper().replace('-', '_')}_LINKER"
+    # CC has already been set by calling android.py (it calls android-env.sh)
+    env[cargo_target_linker_env_name] = env["CC"]
+
+    # All Python extension modules must be explicitly linked against libpython3.x.so when building for Android.
+    # See: https://peps.python.org/pep-0738/#linkage
+    # For projects using PyO3, this requires setting PYO3_CROSS_LIB_DIR to the directory containing libpython3.x.so.
+    # See: https://pyo3.rs/v0.27.1/building-and-distribution.html#cross-compiling
+    env["PYO3_CROSS_LIB_DIR"] = str(python_dir / "prefix" / "lib")
+
+    venv_bin = Path(env["VIRTUAL_ENV"]) / "bin"
+    for tool in ["cargo", "rustup"]:
+        shim_path = venv_bin / tool
+        shutil.copy(RESOURCES_ANDROID / "rust_shim.py", shim_path)
+        shim_path.chmod(0o755)
+
+
+def before_build(state: BuildState) -> None:
+    if state.options.before_build:
+        log.step("Running before_build...")
+        shell_prepared(
+            state.options.before_build,
+            build_options=state.options,
+            env=state.build_env,
+        )
+
+
+def build_wheel(state: BuildState) -> Path:
+    log.step("Building wheel...")
+    built_wheel_dir = state.build_path / "built_wheel"
+    match state.options.build_frontend.name:
+        case "build" | "build[uv]":
+            call(
+                "python",
+                "-m",
+                "build",
+                state.options.package_dir,
+                "--wheel",
+                "--no-isolation",
+                "--skip-dependency-check",
+                f"--outdir={built_wheel_dir}",
+                *get_build_frontend_extra_flags(
+                    state.options.build_frontend,
+                    state.options.build_verbosity,
+                    prepare_config_settings(
+                        state.options.config_settings,
+                        project=".",
+                        package=state.options.package_dir,
+                    ),
+                ),
+                env=state.android_env,
+            )
+        case "uv":
+            uv_path = find_uv()
+            assert uv_path is not None
+            call(
+                uv_path,
+                "build",
+                state.options.package_dir,
+                "--wheel",
+                "--no-build-isolation",
+                f"--out-dir={built_wheel_dir}",
+                *get_build_frontend_extra_flags(
+                    state.options.build_frontend,
+                    state.options.build_verbosity,
+                    prepare_config_settings(
+                        state.options.config_settings,
+                        project=".",
+                        package=state.options.package_dir,
+                    ),
+                ),
+                env=state.android_env,
+            )
+        case x:
+            msg = f"Invalid build backend {x!r}"
+            raise AssertionError(msg)
+
+    built_wheels = list(built_wheel_dir.glob("*.whl"))
+    if len(built_wheels) != 1:
+        msg = f"{built_wheel_dir} contains {len(built_wheels)} wheels; expected 1"
+        raise errors.FatalError(msg)
+    built_wheel = built_wheels[0]
+
+    if built_wheel.name.endswith("none-any.whl"):
+        raise errors.NonPlatformWheelError()
+    return built_wheel
+
+
+def repair_wheel(state: BuildState, built_wheel: Path) -> Path:
+    log.step("Repairing wheel...")
+    repaired_wheel_dir = state.build_path / "repaired_wheel"
+    repaired_wheel_dir.mkdir()
+
+    if state.options.repair_command:
+        shell(
+            prepare_command(
+                state.options.repair_command,
+                wheel=built_wheel,
+                dest_dir=repaired_wheel_dir,
+                package=state.options.package_dir,
+                project=".",
+            ),
+            env=state.build_env,
+        )
+    else:
+        repair_default(state.android_env, built_wheel, repaired_wheel_dir)
+
+    repaired_wheels = list(repaired_wheel_dir.glob("*.whl"))
+    if len(repaired_wheels) == 0:
+        raise errors.RepairStepProducedNoWheelError()
+    if len(repaired_wheels) != 1:
+        msg = f"{repaired_wheel_dir} contains {len(repaired_wheels)} wheels; expected 1"
+        raise errors.FatalError(msg)
+    repaired_wheel = repaired_wheels[0]
+
+    if repaired_wheel.name.endswith("none-any.whl"):
+        raise errors.NonPlatformWheelError()
+    return repaired_wheel
+
+
+def repair_default(
+    android_env: dict[str, str], built_wheel: Path, repaired_wheel_dir: Path
+) -> None:
+    """
+    Adds libc++ to the wheel if anything links against it. In the future this should be
+    moved to auditwheel and generalized to support more libraries.
+    """
+    if (match := re.search(r"^(.+?)-", built_wheel.name)) is None:
+        msg = f"Failed to parse wheel filename: {built_wheel.name}"
+        raise errors.FatalError(msg)
+    wheel_name = match[1]
+
+    unpacked_dir = repaired_wheel_dir / "unpacked"
+    unpacked_dir.mkdir()
+    shutil.unpack_archive(built_wheel, unpacked_dir, format="zip")
+
+    # Some build systems are inconsistent about name normalization, so don't assume the
+    # dist-info name is identical to the wheel name.
+    record_paths = list(unpacked_dir.glob("*.dist-info/RECORD"))
+    if len(record_paths) != 1:
+        msg = f"{built_wheel.name} contains {len(record_paths)} dist-info/RECORD files; expected 1"
+        raise errors.FatalError(msg)
+
+    old_soname = "libc++_shared.so"
+    paths_to_patch = []
+    for path, elffile in elf_file_filter(
+        unpacked_dir / filename
+        for filename, *_ in csv.reader(record_paths[0].read_text().splitlines())
+    ):
+        if (dynamic := elffile.get_section_by_name(".dynamic")) and any(  # type: ignore[no-untyped-call]
+            tag.entry.d_tag == "DT_NEEDED" and tag.needed == old_soname
+            for tag in dynamic.iter_tags()
+        ):
+            paths_to_patch.append(path)
+
+    if not paths_to_patch:
+        shutil.copyfile(built_wheel, repaired_wheel_dir / built_wheel.name)
+    else:
+        # Android doesn't support DT_RPATH, but supports DT_RUNPATH since API level 24
+        # (https://github.com/aosp-mirror/platform_bionic/blob/master/android-changes-for-ndk-developers.md).
+        if int(sysconfig_print('get_config_vars()["ANDROID_API_LEVEL"]', android_env)) < 24:
+            msg = f"Adding {old_soname} requires ANDROID_API_LEVEL to be at least 24"
+            raise errors.FatalError(msg)
+
+        toolchain = Path(android_env["CC"]).parent.parent
+        src_path = toolchain / f"sysroot/usr/lib/{android_env['CIBW_HOST_TRIPLET']}/{old_soname}"
+
+        # Use the same library location as auditwheel would.
+        libs_dir = unpacked_dir / (wheel_name + ".libs")
+        libs_dir.mkdir()
+        new_soname = soname_with_hash(src_path)
+        dst_path = libs_dir / new_soname
+        shutil.copyfile(src_path, dst_path)
+        call(which("patchelf"), "--set-soname", new_soname, dst_path)
+
+        for path in paths_to_patch:
+            call(which("patchelf"), "--replace-needed", old_soname, new_soname, path)
+            call(
+                which("patchelf"),
+                "--set-rpath",
+                f"${{ORIGIN}}/{relpath(libs_dir, path.parent)}",
+                path,
+            )
+        call(which("wheel"), "pack", unpacked_dir, "-d", repaired_wheel_dir)
+
+
+# If cibuildwheel was called without activating its environment, its scripts directory
+# will not be on the PATH.
+def which(cmd: str) -> str:
+    scripts_dir = sysconfig.get_path("scripts")
+    result = shutil.which(cmd, path=scripts_dir + os.pathsep + os.environ["PATH"])
+    if result is None:
+        msg = f"Couldn't find {cmd!r} in {scripts_dir} or on the PATH"
+        raise errors.FatalError(msg)
+    return result
+
+
+def elf_file_filter(paths: Iterable[Path]) -> Iterator[tuple[Path, ELFFile]]:
+    """Filter through an iterator of filenames and load up only ELF files"""
+    for path in paths:
+        if not path.name.endswith(".py"):
+            try:
+                with open(path, "rb") as f:
+                    candidate = ELFFile(f)  # type: ignore[no-untyped-call]
+                    yield path, candidate
+            except ELFError:
+                pass  # Not an ELF file
+
+
+def soname_with_hash(src_path: Path) -> str:
+    """Return the same library filename as auditwheel would"""
+    shorthash = hashlib.sha256(src_path.read_bytes()).hexdigest()[:8]
+    src_name = src_path.name
+    base, ext = src_name.split(".", 1)
+    if not base.endswith(f"-{shorthash}"):
+        return f"{base}-{shorthash}.{ext}"
+    else:
+        return src_name
+
+
+def test_wheel(state: BuildState, wheel: Path, *, build_frontend: str) -> None:
+    test_command = state.options.test_command
+    if not (test_command and state.options.test_selector(state.config.identifier)):
+        return
+
+    log.step("Testing wheel...")
+    use_uv = build_frontend in {"build[uv]", "uv"}
+    uv_path = find_uv()
+    if use_uv and uv_path is None:
+        msg = "uv not found"
+        raise AssertionError(msg)
+    pip = ["pip"] if not use_uv else [str(uv_path), "pip"]
+
+    native_arch = arch_synonym(platform.machine(), platforms.native_platform(), "android")
+    if state.config.arch != native_arch:
+        log.warning(
+            f"Skipping tests for {state.config.arch}, as the build machine only "
+            f"supports {native_arch}"
+        )
+        return
+
+    if state.options.before_test:
+        shell_prepared(
+            state.options.before_test,
+            build_options=state.options,
+            env=state.build_env,
+        )
+
+    platform_args = (
+        ["--python-platform", android_triplet(state.config.identifier)]
+        if use_uv
+        else [
+            "--platform",
+            sysconfig_print("get_platform()", state.android_env).replace("-", "_"),
+        ]
+    )
+
+    # Install the wheel and test-requires.
+    site_packages_dir = state.build_path / "site-packages"
+    site_packages_dir.mkdir()
+    call(
+        *pip,
+        "install",
+        "--only-binary=:all:",
+        *platform_args,
+        "--target",
+        site_packages_dir,
+        f"{wheel}{state.options.test_extras}",
+        *state.options.test_requires,
+        env=state.android_env,
+    )
+
+    # Copy test-sources.
+    cwd_dir = state.build_path / "cwd"
+    cwd_dir.mkdir()
+    if state.options.test_sources:
+        copy_test_sources(state.options.test_sources, Path.cwd(), cwd_dir)
+    else:
+        (cwd_dir / "test_fail.py").write_text(
+            resources.TEST_FAIL_CWD_FILE.read_text(),
+        )
+
+    # Android doesn't support placeholders in the test command.
+    if any(("{" + placeholder + "}") in test_command for placeholder in ("project", "package")):
+        msg = (
+            f"Test command {test_command!r} with a "
+            "'{project}' or '{package}' placeholder is not supported on Android, "
+            "because the source directory is not visible on the emulator."
+        )
+        raise errors.FatalError(msg)
+
+    # Parse test-command.
+    test_args = shlex.split(test_command)
+    if test_args[0] in {"python", "python3"} and any(arg in test_args for arg in ("-c", "-m")):
+        # Forward the args to the CPython testbed script. We require '-c' or '-m'
+        # to be in the command, because without those flags, the testbed script
+        # will prepend '-m test', which will run Python's own test suite.
+        del test_args[0]
+    elif test_args[0] == "pytest":
+        # We transform some commands into the `python -m` form, but this is deprecated.
+        msg = (
+            f"Test command {test_command!r} is not supported on Android. "
+            "cibuildwheel will try to execute it as if it started with 'python -m'. "
+            "If this works, all you need to do is add that to your test command."
+        )
+        log.warning(msg)
+        test_args.insert(0, "-m")
+    else:
+        msg = (
+            f"Test command {test_command!r} is not supported on Android. "
+            f"Command must begin with 'python' or 'python3', and contain '-m' or '-c'."
+        )
+        raise errors.FatalError(msg)
+
+    # By default, run on a testbed managed emulator running the newest supported
+    # Android version. However, if the user specifies a --managed or --connected
+    # test execution argument, that argument takes precedence.
+    test_runtime_args = state.options.test_runtime.args
+
+    if any(arg.startswith(("--managed", "--connected")) for arg in test_runtime_args):
+        emulator_args = []
+    else:
+        emulator_args = ["--managed", "maxVersion"]
+
+    # Run the test app.
+    call(
+        state.python_dir / "android.py",
+        "test",
+        "--site-packages",
+        site_packages_dir,
+        "--cwd",
+        cwd_dir,
+        *emulator_args,
+        *(["-v"] if state.options.build_verbosity > 0 else []),
+        *test_runtime_args,
+        "--",
+        *test_args,
+        env=state.build_env,
+    )
+
+
+def sysconfig_print(method_call: str, env: dict[str, str]) -> str:
+    return call(
+        "python",
+        "-c",
+        f'import sysconfig; print(sysconfig.{method_call}, end="")',
+        env=env,
+        capture_stdout=True,
+    )
@@ -1,7 +1,6 @@
-from __future__ import annotations
-
 import dataclasses
 import os
+import platform
 import shlex
 import shutil
 import subprocess
@@ -13,33 +12,25 @@ from typing import assert_never

 from filelock import FileLock

-from .. import errors
-from ..architecture import Architecture
-from ..environment import ParsedEnvironment
-from ..frontend import (
-    BuildFrontendConfig,
+from cibuildwheel import errors
+from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
+from cibuildwheel.environment import ParsedEnvironment
+from cibuildwheel.frontend import (
    BuildFrontendName,
    get_build_frontend_extra_flags,
+    prepare_config_settings,
 )
-from ..logger import log
-from ..options import Options
-from ..selector import BuildSelector
-from ..util import resources
-from ..util.cmd import call, shell, split_command
-from ..util.file import (
-    CIBW_CACHE_PATH,
-    copy_test_sources,
-    download,
-    move_file,
-)
-from ..util.helpers import prepare_command, unwrap_preserving_paragraphs
-from ..util.packaging import (
-    combine_constraints,
-    find_compatible_wheel,
-    get_pip_version,
-)
-from ..venv import constraint_flags, virtualenv
-from .macos import install_cpython as install_build_cpython
+from cibuildwheel.logger import log
+from cibuildwheel.options import Options
+from cibuildwheel.platforms.macos import install_cpython as install_build_cpython
+from cibuildwheel.selector import BuildSelector
+from cibuildwheel.util import resources
+from cibuildwheel.util.cmd import call, shell, split_command
+from cibuildwheel.util.file import CIBW_CACHE_PATH, copy_test_sources, download, move_file
+from cibuildwheel.util.helpers import prepare_command, unwrap_preserving_paragraphs
+from cibuildwheel.util.packaging import find_compatible_wheel
+from cibuildwheel.venv import constraint_flags, virtualenv


@dataclasses.dataclass(frozen=True, kw_only=True)
@@ -283,7 +274,8 @@ def setup_python(
    build_frontend: BuildFrontendName,
    xbuild_tools: Sequence[str] | None,
 ) -> tuple[Path, dict[str, str]]:
-    if build_frontend == "build[uv]":
+    # Not using set because mypy can't narrow it
+    if build_frontend == "build[uv]" or build_frontend == "uv":  # noqa: PLR1714
        msg = "uv doesn't support iOS"
        raise errors.FatalError(msg)

@@ -368,7 +360,7 @@ def setup_python(
            "entry or insert python above it."
        )
        raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)

    # Check what pip version we're on
    assert (venv_bin_path / "pip").exists()
@@ -387,20 +379,21 @@ def setup_python(
    env.setdefault("IPHONEOS_DEPLOYMENT_TARGET", "13.0")

    log.step("Installing build tools...")
-    if build_frontend == "pip":
-        # No additional build tools required
-        pass
-    elif build_frontend == "build":
-        call(
-            "pip",
-            "install",
-            "--upgrade",
-            "build[virtualenv]",
-            *constraint_flags(dependency_constraint),
-            env=env,
-        )
-    else:
-        assert_never(build_frontend)
+    match build_frontend:
+        case "pip":
+            # No additional build tools required
+            pass
+        case "build":
+            call(
+                "pip",
+                "install",
+                "--upgrade",
+                "build[virtualenv]",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case _:
+            assert_never(build_frontend)

    return target_install_path, env

@@ -437,9 +430,10 @@ def build(options: Options, tmp_path: Path) -> None:

        for config in python_configurations:
            build_options = options.build_options(config.identifier)
-            build_frontend = build_options.build_frontend or BuildFrontendConfig("build")
+            build_frontend = build_options.build_frontend
            # uv doesn't support iOS
-            if build_frontend.name == "build[uv]":
+            # Not using set because mypy can't narrow it
+            if build_frontend.name == "build[uv]" or build_frontend.name == "uv":  # noqa: PLR1714
                msg = "uv doesn't support iOS"
                raise errors.FatalError(msg)

@@ -448,6 +442,7 @@ def build(options: Options, tmp_path: Path) -> None:
            identifier_tmp_dir = tmp_path / config.identifier
            identifier_tmp_dir.mkdir()
            built_wheel_dir = identifier_tmp_dir / "built_wheel"
+            repaired_wheel_dir = identifier_tmp_dir / "repaired_wheel"

            constraints_path = build_options.dependency_constraints.get_for_python_version(
                version=config.version, tmp_dir=identifier_tmp_dir
@@ -461,7 +456,6 @@ def build(options: Options, tmp_path: Path) -> None:
                build_frontend=build_frontend.name,
                xbuild_tools=build_options.xbuild_tools,
            )
-            pip_version = get_pip_version(env)

            compatible_wheel = find_compatible_wheel(built_wheels, config.identifier)
            if compatible_wheel:
@@ -486,59 +480,86 @@ def build(options: Options, tmp_path: Path) -> None:
                built_wheel_dir.mkdir()

                extra_flags = get_build_frontend_extra_flags(
-                    build_frontend, build_options.build_verbosity, build_options.config_settings
+                    build_frontend,
+                    build_options.build_verbosity,
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=build_options.package_dir,
+                    ),
                )

-                build_env = env.copy()
-                build_env["VIRTUALENV_PIP"] = pip_version
-                if constraints_path:
-                    combine_constraints(build_env, constraints_path, None)
+                match build_frontend.name:
+                    case "pip":
+                        # Path.resolve() is needed. Without it pip wheel may try to
+                        # fetch package from pypi.org. See
+                        # https://github.com/pypa/cibuildwheel/pull/369
+                        call(
+                            "python",
+                            "-m",
+                            "pip",
+                            "wheel",
+                            build_options.package_dir.resolve(),
+                            f"--wheel-dir={built_wheel_dir}",
+                            "--no-deps",
+                            *extra_flags,
+                            env=env,
+                        )
+                    case "build":
+                        call(
+                            "python",
+                            "-m",
+                            "build",
+                            build_options.package_dir,
+                            "--wheel",
+                            f"--outdir={built_wheel_dir}",
+                            *extra_flags,
+                            env=env,
+                        )
+                    case _:
+                        assert_never(build_frontend)

-                if build_frontend.name == "pip":
-                    # Path.resolve() is needed. Without it pip wheel may try to
-                    # fetch package from pypi.org. See
-                    # https://github.com/pypa/cibuildwheel/pull/369
-                    call(
-                        "python",
-                        "-m",
-                        "pip",
-                        "wheel",
-                        build_options.package_dir.resolve(),
-                        f"--wheel-dir={built_wheel_dir}",
-                        "--no-deps",
-                        *extra_flags,
-                        env=build_env,
-                    )
-                elif build_frontend.name == "build":
-                    call(
-                        "python",
-                        "-m",
-                        "build",
-                        build_options.package_dir,
-                        "--wheel",
-                        f"--outdir={built_wheel_dir}",
-                        *extra_flags,
-                        env=build_env,
-                    )
-                else:
-                    assert_never(build_frontend)
-
-                test_wheel = built_wheel = next(built_wheel_dir.glob("*.whl"))
+                built_wheel = next(built_wheel_dir.glob("*.whl"))

                if built_wheel.name.endswith("none-any.whl"):
                    raise errors.NonPlatformWheelError()

+                repaired_wheel_dir.mkdir()
+                if build_options.repair_command:
+                    log.step("Repairing wheel...")
+
+                    repair_command_prepared = prepare_command(
+                        build_options.repair_command,
+                        wheel=built_wheel,
+                        dest_dir=repaired_wheel_dir,
+                        package=build_options.package_dir,
+                        project=".",
+                    )
+                    shell(repair_command_prepared, env=env)
+                else:
+                    shutil.move(str(built_wheel), repaired_wheel_dir)
+
+                try:
+                    repaired_wheel = next(repaired_wheel_dir.glob("*.whl"))
+                except StopIteration:
+                    raise errors.RepairStepProducedNoWheelError() from None
+
+                if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
+                    raise errors.AlreadyBuiltWheelError(repaired_wheel.name)
+
                log.step_end()

+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
+                test_wheel = repaired_wheel
+
            if build_options.test_command and build_options.test_selector(config.identifier):
                if not config.is_simulator:
                    log.step("Skipping tests on non-simulator SDK")
                elif config.arch != os.uname().machine:
                    log.step("Skipping tests on non-native simulator architecture")
                else:
-                    test_env = build_options.test_environment.as_dictionary(
-                        prev_environment=build_env
-                    )
+                    test_env = build_options.test_environment.as_dictionary(prev_environment=env)

                    if build_options.before_test:
                        before_test_prepared = prepare_command(
@@ -652,11 +673,35 @@ def build(options: Options, tmp_path: Path) -> None:
                                    )
                                    raise errors.FatalError(msg)

+                            test_runtime_args = build_options.test_runtime.args
+
+                            # 2025-10: The GitHub Actions macos-15 runner has a known issue where
+                            # the default simulator won't start due to a disk performance issue;
+                            # see https://github.com/actions/runner-images/issues/12777 for details.
+                            # In the meantime, if it looks like we're running on a GitHub Actions
+                            # macos-15 runner, use a simulator that is known to work, unless the
+                            # user explicitly specifies a simulator.
+                            os_version, _, arch = platform.mac_ver()
+                            if (
+                                "GITHUB_ACTIONS" in os.environ
+                                and os_version.startswith("15.")
+                                and arch == "arm64"
+                                and not any(
+                                    arg.startswith("--simulator") for arg in test_runtime_args
+                                )
+                            ):
+                                test_runtime_args = [
+                                    "--simulator",
+                                    "iPhone 16e,OS=18.5",
+                                    *test_runtime_args,
+                                ]
+
                            call(
                                "python",
                                testbed_path,
                                "run",
                                *(["--verbose"] if build_options.build_verbosity > 0 else []),
+                                *test_runtime_args,
                                "--",
                                *final_command,
                                env=test_env,
@@ -671,19 +716,20 @@ def build(options: Options, tmp_path: Path) -> None:
                    log.step_end()

            # We're all done here; move it to output (overwrite existing)
+            output_wheel: Path | None = None
            if compatible_wheel is None:
-                output_wheel = build_options.output_dir.joinpath(built_wheel.name)
-                moved_wheel = move_file(built_wheel, output_wheel)
+                output_wheel = build_options.output_dir.joinpath(repaired_wheel.name)
+                moved_wheel = move_file(repaired_wheel, output_wheel)
                if moved_wheel != output_wheel.resolve():
                    log.warning(
-                        f"{built_wheel} was moved to {moved_wheel} instead of {output_wheel}"
+                        f"{repaired_wheel} was moved to {moved_wheel} instead of {output_wheel}"
                    )
                built_wheels.append(output_wheel)

            # Clean up
            shutil.rmtree(identifier_tmp_dir)

-            log.build_end()
+            log.build_end(output_wheel)
    except subprocess.CalledProcessError as error:
        msg = f"Command {error.cmd} failed with code {error.returncode}. {error.stdout or ''}"
        raise errors.FatalError(msg) from error
@@ -1,25 +1,29 @@
 import contextlib
 import dataclasses
+import shutil
 import subprocess
 import sys
 import textwrap
 from collections import OrderedDict
 from collections.abc import Iterable, Iterator, Sequence, Set
 from pathlib import Path, PurePath, PurePosixPath
-from typing import assert_never
+from typing import TYPE_CHECKING, assert_never

-from .. import errors
-from ..architecture import Architecture
-from ..frontend import BuildFrontendConfig, get_build_frontend_extra_flags
-from ..logger import log
-from ..oci_container import OCIContainer, OCIContainerEngineConfig, OCIPlatform
-from ..options import BuildOptions, Options
-from ..selector import BuildSelector
-from ..typing import PathOrStr
-from ..util import resources
-from ..util.file import copy_test_sources
-from ..util.helpers import prepare_command, unwrap
-from ..util.packaging import find_compatible_wheel
+from cibuildwheel import errors
+from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import needs_audit, run_audit
+from cibuildwheel.frontend import get_build_frontend_extra_flags, prepare_config_settings
+from cibuildwheel.logger import log
+from cibuildwheel.oci_container import OCIContainer, OCIContainerEngineConfig, OCIPlatform
+from cibuildwheel.options import BuildOptions, Options
+from cibuildwheel.selector import BuildSelector
+from cibuildwheel.util import resources
+from cibuildwheel.util.file import copy_test_sources
+from cibuildwheel.util.helpers import prepare_command, unwrap
+from cibuildwheel.util.packaging import find_compatible_wheel
+
+if TYPE_CHECKING:
+    from cibuildwheel.typing import PathOrStr

 ARCHITECTURE_OCI_PLATFORM_MAP = {
    Architecture.x86_64: OCIPlatform.AMD64,
@@ -204,8 +208,8 @@ def build_in_container(
        log.build_start(config.identifier)
        local_identifier_tmp_dir = local_tmp_dir / config.identifier
        build_options = options.build_options(config.identifier)
-        build_frontend = build_options.build_frontend or BuildFrontendConfig("build")
-        use_uv = build_frontend.name == "build[uv]"
+        build_frontend = build_options.build_frontend
+        use_uv = build_frontend.name in {"build[uv]", "uv"}
        pip = ["uv", "pip"] if use_uv else ["pip"]

        log.step("Setting up build environment...")
@@ -235,6 +239,7 @@ def build_in_container(
        if PurePosixPath(which_python) != python_bin / "python":
            msg = "python available on PATH doesn't match our installed instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
            raise errors.FatalError(msg)
+        container.call(["python", "-V", "-V"], env=env)

        if use_uv:
            which_uv = container.call(["which", "uv"], env=env, capture_output=True).strip()
@@ -253,7 +258,7 @@ def build_in_container(
            print(
                f"\nFound previously built wheel {compatible_wheel.name}, that's compatible with {config.identifier}. Skipping build step..."
            )
-            repaired_wheels = [compatible_wheel]
+            repaired_wheel = compatible_wheel
        else:
            if build_options.before_build:
                log.step("Running before_build...")
@@ -262,7 +267,16 @@ def build_in_container(
                    project=container_project_path,
                    package=container_package_dir,
                )
-                container.call(["sh", "-c", before_build_prepared], env=env)
+                before_build_env = env.copy()
+                if use_uv:
+                    # On Linux, no virtualenv is created for the build environment
+                    # (unlike macOS/Windows, where one is set up before before_build
+                    # runs). uv requires either an active venv or an explicit Python
+                    # target to install packages. Pin UV_PYTHON to the exact interpreter
+                    # for this build so that `uv pip install` works in before_build
+                    # without requiring users to pass --system.
+                    before_build_env["UV_PYTHON"] = str(python_bin / "python")
+                container.call(["sh", "-c", before_build_prepared], env=before_build_env)

            log.step("Building wheel...")

@@ -272,40 +286,60 @@ def build_in_container(
            container.call(["mkdir", "-p", built_wheel_dir])

            extra_flags = get_build_frontend_extra_flags(
-                build_frontend, build_options.build_verbosity, build_options.config_settings
+                build_frontend,
+                build_options.build_verbosity,
+                prepare_config_settings(
+                    build_options.config_settings,
+                    project=container_project_path,
+                    package=container_package_dir,
+                ),
            )

-            if build_frontend.name == "pip":
-                container.call(
-                    [
-                        "python",
-                        "-m",
-                        "pip",
-                        "wheel",
-                        container_package_dir,
-                        f"--wheel-dir={built_wheel_dir}",
-                        "--no-deps",
-                        *extra_flags,
-                    ],
-                    env=env,
-                )
-            elif build_frontend.name == "build" or build_frontend.name == "build[uv]":
-                if use_uv and "--no-isolation" not in extra_flags and "-n" not in extra_flags:
-                    extra_flags += ["--installer=uv"]
-                container.call(
-                    [
-                        "python",
-                        "-m",
-                        "build",
-                        container_package_dir,
-                        "--wheel",
-                        f"--outdir={built_wheel_dir}",
-                        *extra_flags,
-                    ],
-                    env=env,
-                )
-            else:
-                assert_never(build_frontend)
+            match build_frontend.name:
+                case "pip":
+                    container.call(
+                        [
+                            "python",
+                            "-m",
+                            "pip",
+                            "wheel",
+                            container_package_dir,
+                            f"--wheel-dir={built_wheel_dir}",
+                            "--no-deps",
+                            *extra_flags,
+                        ],
+                        env=env,
+                    )
+                case "build" | "build[uv]":
+                    if use_uv and "--no-isolation" not in extra_flags and "-n" not in extra_flags:
+                        extra_flags += ["--installer=uv"]
+                    container.call(
+                        [
+                            "python",
+                            "-m",
+                            "build",
+                            container_package_dir,
+                            "--wheel",
+                            f"--outdir={built_wheel_dir}",
+                            *extra_flags,
+                        ],
+                        env=env,
+                    )
+                case "uv":
+                    container.call(
+                        [
+                            "uv",
+                            "build",
+                            f"--python={python_bin / 'python'}",
+                            container_package_dir,
+                            "--wheel",
+                            f"--out-dir={built_wheel_dir}",
+                            *extra_flags,
+                        ],
+                        env=env,
+                    )
+                case _:
+                    assert_never(build_frontend)

            built_wheel = container.glob(built_wheel_dir, "*.whl")[0]

@@ -319,20 +353,38 @@ def build_in_container(
            if build_options.repair_command:
                log.step("Repairing wheel...")
                repair_command_prepared = prepare_command(
-                    build_options.repair_command, wheel=built_wheel, dest_dir=repaired_wheel_dir
+                    build_options.repair_command,
+                    wheel=built_wheel,
+                    dest_dir=repaired_wheel_dir,
+                    package=container_package_dir,
+                    project=container_project_path,
                )
                container.call(["sh", "-c", repair_command_prepared], env=env)
            else:
                container.call(["mv", built_wheel, repaired_wheel_dir])

-            repaired_wheels = container.glob(repaired_wheel_dir, "*.whl")
+            match container.glob(repaired_wheel_dir, "*.whl"):
+                case []:
+                    raise errors.RepairStepProducedNoWheelError()
+                case [repaired_wheel]:
+                    pass
+                case too_many:
+                    raise errors.RepairStepProducedMultipleWheelsError([p.name for p in too_many])

-            if not repaired_wheels:
-                raise errors.RepairStepProducedNoWheelError()
+            if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
+                raise errors.AlreadyBuiltWheelError(repaired_wheel.name)

-            for repaired_wheel in repaired_wheels:
-                if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
-                    raise errors.AlreadyBuiltWheelError(repaired_wheel.name)
+            log.step_end()
+
+            if needs_audit(build_options.audit_command, repaired_wheel.name):
+                local_abi3audit_dir = local_identifier_tmp_dir / "audit"
+                local_abi3audit_dir.mkdir(parents=True, exist_ok=True)
+                try:
+                    container.copy_out(repaired_wheel_dir, local_abi3audit_dir)
+                    local_wheel = local_abi3audit_dir / repaired_wheel.name
+                    run_audit(tmp_dir=local_tmp_dir, build_options=build_options, wheel=local_wheel)
+                finally:
+                    shutil.rmtree(local_abi3audit_dir, ignore_errors=True)

        if build_options.test_command and build_options.test_selector(config.identifier):
            log.step("Testing wheel...")
@@ -374,14 +426,8 @@ def build_in_container(
                container.call(["sh", "-c", before_test_prepared], env=virtualenv_env)

            # Install the wheel we just built
-            # Note: If auditwheel produced two wheels, it's because the earlier produced wheel
-            # conforms to multiple manylinux standards. These multiple versions of the wheel are
-            # functionally the same, differing only in name, wheel metadata, and possibly include
-            # different external shared libraries. so it doesn't matter which one we run the tests on.
-            # Let's just pick the first one.
-            wheel_to_test = repaired_wheels[0]
            container.call(
-                [*pip, "install", str(wheel_to_test) + build_options.test_extras],
+                [*pip, "install", str(repaired_wheel) + build_options.test_extras],
                env=virtualenv_env,
            )

@@ -394,7 +440,7 @@ def build_in_container(
                build_options.test_command,
                project=container_project_path,
                package=container_package_dir,
-                wheel=wheel_to_test,
+                wheel=repaired_wheel,
            )

            test_cwd = testing_temp_dir / "test_cwd"
@@ -417,15 +463,15 @@ def build_in_container(
            # clean up test environment
            container.call(["rm", "-rf", testing_temp_dir])

-        # move repaired wheels to output
+        # move repaired wheel to output
+        output_wheel: Path | None = None
        if compatible_wheel is None:
            container.call(["mkdir", "-p", container_output_dir])
-            container.call(["mv", *repaired_wheels, container_output_dir])
-            built_wheels.extend(
-                container_output_dir / repaired_wheel.name for repaired_wheel in repaired_wheels
-            )
+            container.call(["mv", repaired_wheel, container_output_dir])
+            built_wheels.append(container_output_dir / repaired_wheel.name)
+            output_wheel = options.globals.output_dir / repaired_wheel.name

-        log.build_end()
+        log.build_end(output_wheel)

    log.step("Copying wheels back to host...")
    # copy the output back into the host
@@ -462,8 +508,7 @@ def build(options: Options, tmp_path: Path) -> None:
                Docker or Podman is required to run Linux builds. If you're
                building on Travis CI, add `services: [docker]` to your
                .travis.yml. If you're building on Circle CI in Linux, add a
-                `setup_remote_docker` step to your .circleci/config.yml. If
-                you're building on Cirrus CI, use `docker_builder` task.
+                `setup_remote_docker` step to your .circleci/config.yml.
                """
            )
            raise errors.ConfigurationError(msg) from error
@@ -506,6 +551,7 @@ def _matches_prepared_command(error_cmd: Sequence[str], command_template: str) -
 def troubleshoot(options: Options, error: Exception) -> None:
    if isinstance(error, subprocess.CalledProcessError) and (
        error.cmd[0:4] == ["python", "-m", "pip", "wheel"]
+        or error.cmd[0:2] == ["uv", "build"]
        or error.cmd[0:3] == ["python", "-m", "build"]
        or _matches_prepared_command(
            error.cmd, options.build_options(None).repair_command
@@ -15,25 +15,25 @@ from typing import Literal, assert_never
 from filelock import FileLock
 from packaging.version import Version

-from .. import errors
-from ..architecture import Architecture
-from ..ci import detect_ci_provider
-from ..environment import ParsedEnvironment
-from ..frontend import BuildFrontendConfig, BuildFrontendName, get_build_frontend_extra_flags
-from ..logger import log
-from ..options import Options
-from ..selector import BuildSelector
-from ..util import resources
-from ..util.cmd import call, shell
-from ..util.file import (
-    CIBW_CACHE_PATH,
-    copy_test_sources,
-    download,
-    move_file,
+from cibuildwheel import errors
+from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
+from cibuildwheel.ci import detect_ci_provider
+from cibuildwheel.environment import ParsedEnvironment
+from cibuildwheel.frontend import (
+    BuildFrontendName,
+    get_build_frontend_extra_flags,
+    prepare_config_settings,
 )
-from ..util.helpers import prepare_command, unwrap
-from ..util.packaging import combine_constraints, find_compatible_wheel, get_pip_version
-from ..venv import constraint_flags, find_uv, virtualenv
+from cibuildwheel.logger import log
+from cibuildwheel.options import Options
+from cibuildwheel.selector import BuildSelector
+from cibuildwheel.util import resources
+from cibuildwheel.util.cmd import call, shell
+from cibuildwheel.util.file import CIBW_CACHE_PATH, copy_test_sources, download, move_file
+from cibuildwheel.util.helpers import prepare_command, unwrap
+from cibuildwheel.util.packaging import find_compatible_wheel, get_pip_version
+from cibuildwheel.venv import constraint_flags, find_uv, target_marker_env, virtualenv


@functools.cache
@@ -60,7 +60,7 @@ def get_macos_version() -> tuple[int, int]:
            capture_stdout=True,
        )
        version = tuple(map(int, version_str.split(".")[:2]))
-    return typing.cast(tuple[int, int], version)
+    return typing.cast("tuple[int, int]", version)


@functools.cache
@@ -141,7 +141,8 @@ def install_cpython(_tmp: Path, version: str, url: str, free_threading: bool) ->
                # let the user know & provide a link to the installer
                msg = inspect.cleandoc(
                    f"""
-                        Error: CPython {version} is not installed.
+                        Framework CPython {version} not detected as installed in:
+                            {installation_path}
                        cibuildwheel will not perform system-wide installs when running outside of CI.
                        To build locally, install CPython {version} on this machine, or, disable this
                        version of Python using CIBW_SKIP=cp{version.replace(".", "")}-macosx_*
@@ -150,16 +151,15 @@ def install_cpython(_tmp: Path, version: str, url: str, free_threading: bool) ->
                    """
                )
                raise errors.FatalError(msg)
-            python_filename = url.split("/")[-1]
+            python_filename = url.rsplit("/", maxsplit=1)[-1]
            pkg_path = CIBW_CACHE_PATH / "cpython-installer" / python_filename
            if not pkg_path.exists():
                download(url, pkg_path)
            args = []
-            if version.startswith("3.13"):
-                # Python 3.13 is the first version to have a free-threading option
-                args += ["-applyChoiceChangesXML", str(resources.FREE_THREAD_ENABLE_313.resolve())]
-            elif version.startswith("3.14"):
+            if version.startswith("3.14"):
                args += ["-applyChoiceChangesXML", str(resources.FREE_THREAD_ENABLE_314.resolve())]
+            elif version.startswith("3.15"):
+                args += ["-applyChoiceChangesXML", str(resources.FREE_THREAD_ENABLE_315.resolve())]
            call("sudo", "installer", "-pkg", pkg_path, *args, "-target", "/")
            pkg_path.unlink()
            env = os.environ.copy()
@@ -217,7 +217,7 @@ def setup_python(
    build_frontend: BuildFrontendName,
 ) -> tuple[Path, dict[str, str]]:
    uv_path = find_uv()
-    use_uv = build_frontend == "build[uv]"
+    use_uv = build_frontend in {"build[uv]", "uv"}

    tmp.mkdir()
    implementation_id = python_configuration.identifier.split("-")[0]
@@ -247,6 +247,7 @@ def setup_python(
        venv_path,
        dependency_constraint,
        use_uv=use_uv,
+        marker_env=target_marker_env(implementation_id=implementation_id),
    )
    venv_bin_path = venv_path / "bin"
    assert venv_bin_path.exists()
@@ -257,6 +258,10 @@ def setup_python(
    # https://github.com/pypa/virtualenv/issues/620
    # Also see https://github.com/python/cpython/pull/9516
    env.pop("__PYVENV_LAUNCHER__", None)
+    # uv uses this over the current environment's python, so remove it to avoid confusion
+    env.pop("PYTHON_VERSION", None)
+    env.pop("PYTHON_ARCH", None)
+    env.pop("UV_PYTHON", None)

    # we version pip ourselves, so we don't care about pip version checking
    env["PIP_DISABLE_PIP_VERSION_CHECK"] = "1"
@@ -270,7 +275,7 @@ def setup_python(
    if which_python != str(venv_bin_path / "python"):
        msg = "python available on PATH doesn't match our installed instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
        raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)

    # check what pip version we're on
    if not use_uv:
@@ -289,8 +294,11 @@ def setup_python(
    # For arm64, the minimal deployment target is 11.0.
    # On x86_64 (or universal2), use 10.9 as a default.
    # CPython 3.12.6+ needs 10.13.
+    # CPython 3.14.0 needs 10.15.
    if config_is_arm64:
        default_target = "11.0"
+    elif Version(python_configuration.version) >= Version("3.14"):
+        default_target = "10.15"
    elif Version(python_configuration.version) >= Version("3.12"):
        default_target = "10.13"
    elif python_configuration.identifier.startswith("pp") and Version(
@@ -345,39 +353,55 @@ def setup_python(
            env.setdefault("SDKROOT", arm64_compatible_sdks[0])

    log.step("Installing build tools...")
-    if build_frontend == "pip":
-        call(
-            "pip",
-            "install",
-            "--upgrade",
-            "delocate",
-            *constraint_flags(dependency_constraint),
-            env=env,
-        )
-    elif build_frontend == "build":
-        call(
-            "pip",
-            "install",
-            "--upgrade",
-            "delocate",
-            "build[virtualenv]",
-            *constraint_flags(dependency_constraint),
-            env=env,
-        )
-    elif build_frontend == "build[uv]":
-        assert uv_path is not None
-        call(
-            uv_path,
-            "pip",
-            "install",
-            "--upgrade",
-            "delocate",
-            "build[virtualenv, uv]",
-            *constraint_flags(dependency_constraint),
-            env=env,
-        )
-    else:
-        assert_never(build_frontend)
+    match build_frontend:
+        case "pip":
+            call(
+                "pip",
+                "install",
+                "--upgrade",
+                "delocate",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case "build":
+            call(
+                "pip",
+                "install",
+                "--upgrade",
+                "delocate",
+                "build[virtualenv]",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case "build[uv]":
+            assert uv_path is not None
+            call(
+                uv_path,
+                "pip",
+                "install",
+                "--python",
+                which_python,
+                "--upgrade",
+                "delocate",
+                "build[virtualenv, uv]",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case "uv":
+            assert uv_path is not None
+            call(
+                uv_path,
+                "pip",
+                "install",
+                "--python",
+                which_python,
+                "--upgrade",
+                "delocate",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case _:
+            assert_never(build_frontend)

    return base_python, env

@@ -407,8 +431,8 @@ def build(options: Options, tmp_path: Path) -> None:

        for config in python_configurations:
            build_options = options.build_options(config.identifier)
-            build_frontend = build_options.build_frontend or BuildFrontendConfig("build")
-            use_uv = build_frontend.name == "build[uv]"
+            build_frontend = build_options.build_frontend
+            use_uv = build_frontend.name in {"build[uv]", "uv"}
            uv_path = find_uv()
            if use_uv and uv_path is None:
                msg = "uv not found"
@@ -456,46 +480,63 @@ def build(options: Options, tmp_path: Path) -> None:
                built_wheel_dir.mkdir()

                extra_flags = get_build_frontend_extra_flags(
-                    build_frontend, build_options.build_verbosity, build_options.config_settings
+                    build_frontend,
+                    build_options.build_verbosity,
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=build_options.package_dir,
+                    ),
                )

                build_env = env.copy()
-                if pip_version is not None:
-                    build_env["VIRTUALENV_PIP"] = pip_version
-                if constraints_path:
-                    combine_constraints(
-                        build_env, constraints_path, identifier_tmp_dir if use_uv else None
-                    )

-                if build_frontend.name == "pip":
-                    # Path.resolve() is needed. Without it pip wheel may try to fetch package from pypi.org
-                    # see https://github.com/pypa/cibuildwheel/pull/369
-                    call(
-                        "python",
-                        "-m",
-                        "pip",
-                        "wheel",
-                        build_options.package_dir.resolve(),
-                        f"--wheel-dir={built_wheel_dir}",
-                        "--no-deps",
-                        *extra_flags,
-                        env=build_env,
-                    )
-                elif build_frontend.name == "build" or build_frontend.name == "build[uv]":
-                    if use_uv and "--no-isolation" not in extra_flags and "-n" not in extra_flags:
-                        extra_flags.append("--installer=uv")
-                    call(
-                        "python",
-                        "-m",
-                        "build",
-                        build_options.package_dir,
-                        "--wheel",
-                        f"--outdir={built_wheel_dir}",
-                        *extra_flags,
-                        env=build_env,
-                    )
-                else:
-                    assert_never(build_frontend)
+                match build_frontend.name:
+                    case "pip":
+                        # Path.resolve() is needed. Without it pip wheel may try to fetch package from pypi.org
+                        # see https://github.com/pypa/cibuildwheel/pull/369
+                        call(
+                            "python",
+                            "-m",
+                            "pip",
+                            "wheel",
+                            build_options.package_dir.resolve(),
+                            f"--wheel-dir={built_wheel_dir}",
+                            "--no-deps",
+                            *extra_flags,
+                            env=build_env,
+                        )
+                    case "build" | "build[uv]":
+                        if (
+                            use_uv
+                            and "--no-isolation" not in extra_flags
+                            and "-n" not in extra_flags
+                        ):
+                            extra_flags.append("--installer=uv")
+                        call(
+                            "python",
+                            "-m",
+                            "build",
+                            build_options.package_dir,
+                            "--wheel",
+                            f"--outdir={built_wheel_dir}",
+                            *extra_flags,
+                            env=build_env,
+                        )
+                    case "uv":
+                        assert uv_path is not None
+                        call(
+                            uv_path,
+                            "build",
+                            f"--python={base_python}",
+                            build_options.package_dir,
+                            "--wheel",
+                            f"--out-dir={built_wheel_dir}",
+                            *extra_flags,
+                            env=build_env,
+                        )
+                    case _:
+                        assert_never(build_frontend)

                built_wheel = next(built_wheel_dir.glob("*.whl"))

@@ -519,6 +560,8 @@ def build(options: Options, tmp_path: Path) -> None:
                        wheel=built_wheel,
                        dest_dir=repaired_wheel_dir,
                        delocate_archs=delocate_archs,
+                        package=build_options.package_dir,
+                        project=".",
                    )
                    shell(repair_command_prepared, env=env)
                else:
@@ -534,15 +577,10 @@ def build(options: Options, tmp_path: Path) -> None:

                log.step_end()

+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
            if build_options.test_command and build_options.test_selector(config.identifier):
                machine_arch = platform.machine()
-                python_arch = call(
-                    "python",
-                    "-sSc",
-                    "import platform; print(platform.machine())",
-                    env=env,
-                    capture_stdout=True,
-                ).strip()
                testing_archs: list[Literal["x86_64", "arm64"]]

                if config_is_arm64:
@@ -590,24 +628,6 @@ def build(options: Options, tmp_path: Path) -> None:
                        # skip this test
                        continue

-                    is_cp38 = config.identifier.startswith("cp38-")
-                    if testing_arch == "arm64" and is_cp38 and python_arch != "arm64":
-                        log.warning(
-                            unwrap(
-                                """
-                                While cibuildwheel can build CPython 3.8 universal2/arm64 wheels, we
-                                cannot test the arm64 part of them, even when running on an Apple
-                                Silicon machine. This is because we use the x86_64 installer of
-                                CPython 3.8. See the discussion in
-                                https://github.com/pypa/cibuildwheel/pull/1169 for the details. To
-                                silence this warning, set `CIBW_TEST_SKIP: "cp38-macosx_*:arm64"`.
-                                """
-                            )
-                        )
-
-                        # skip this test
-                        continue
-
                    log.step(
                        "Testing wheel..."
                        if testing_arch == machine_arch
@@ -664,33 +684,16 @@ def build(options: Options, tmp_path: Path) -> None:
                        shell_with_arch(before_test_prepared, env=virtualenv_env)

                    # install the wheel
-                    if is_cp38 and python_arch == "x86_64":
-                        virtualenv_env_install_wheel = virtualenv_env.copy()
-                        virtualenv_env_install_wheel["SYSTEM_VERSION_COMPAT"] = "0"
-                        log.notice(
-                            unwrap(
-                                """
-                                Setting SYSTEM_VERSION_COMPAT=0 to ensure CPython 3.8 can get
-                                correct macOS version and allow installation of wheels with
-                                MACOSX_DEPLOYMENT_TARGET >= 11.0.
-                                See https://github.com/pypa/cibuildwheel/issues/1767 for the
-                                details.
-                                """
-                            )
-                        )
-                    else:
-                        virtualenv_env_install_wheel = virtualenv_env
-
                    pip_install(
                        f"{repaired_wheel}{build_options.test_extras}",
-                        env=virtualenv_env_install_wheel,
+                        env=virtualenv_env,
                    )

                    # test the wheel
                    if build_options.test_requires:
                        pip_install(
                            *build_options.test_requires,
-                            env=virtualenv_env_install_wheel,
+                            env=virtualenv_env,
                        )

                    # run the tests from a temp dir, with an absolute path in the command
@@ -726,6 +729,7 @@ def build(options: Options, tmp_path: Path) -> None:
                    shell_with_arch(test_command_prepared, cwd=test_cwd, env=virtualenv_env)

            # we're all done here; move it to output (overwrite existing)
+            output_wheel = None
            if compatible_wheel is None:
                output_wheel = build_options.output_dir.joinpath(repaired_wheel.name)
                moved_wheel = move_file(repaired_wheel, output_wheel)
@@ -738,7 +742,7 @@ def build(options: Options, tmp_path: Path) -> None:
            # clean up
            shutil.rmtree(identifier_tmp_dir)

-            log.build_end()
+            log.build_end(output_wheel)
    except subprocess.CalledProcessError as error:
        msg = f"Command {error.cmd} failed with code {error.returncode}. {error.stdout or ''}"
        raise errors.FatalError(msg) from error
@@ -3,6 +3,7 @@ import functools
 import json
 import os
 import shutil
+import subprocess
 import sys
 import tomllib
 import typing
@@ -13,16 +14,17 @@ from typing import Final, TypedDict

 from filelock import FileLock

-from .. import errors
-from ..architecture import Architecture
-from ..environment import ParsedEnvironment
-from ..frontend import BuildFrontendConfig, get_build_frontend_extra_flags
-from ..logger import log
-from ..options import Options
-from ..selector import BuildSelector
-from ..util import resources
-from ..util.cmd import call, shell
-from ..util.file import (
+from cibuildwheel import errors
+from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
+from cibuildwheel.environment import ParsedEnvironment
+from cibuildwheel.frontend import get_build_frontend_extra_flags, prepare_config_settings
+from cibuildwheel.logger import log
+from cibuildwheel.options import Options
+from cibuildwheel.selector import BuildSelector
+from cibuildwheel.util import resources
+from cibuildwheel.util.cmd import call, shell
+from cibuildwheel.util.file import (
    CIBW_CACHE_PATH,
    copy_test_sources,
    download,
@@ -30,13 +32,13 @@ from ..util.file import (
    extract_zip,
    move_file,
 )
-from ..util.helpers import prepare_command, unwrap, unwrap_preserving_paragraphs
-from ..util.packaging import combine_constraints, find_compatible_wheel, get_pip_version
-from ..util.python_build_standalone import (
+from cibuildwheel.util.helpers import prepare_command, unwrap, unwrap_preserving_paragraphs
+from cibuildwheel.util.packaging import find_compatible_wheel, get_pip_version
+from cibuildwheel.util.python_build_standalone import (
    PythonBuildStandaloneError,
    create_python_build_standalone_environment,
 )
-from ..venv import constraint_flags, virtualenv
+from cibuildwheel.venv import constraint_flags, virtualenv

 IS_WIN: Final[bool] = sys.platform.startswith("win")

@@ -93,22 +95,28 @@ def ensure_node(major_version: str) -> Path:
    return path


-def install_emscripten(tmp: Path, version: str) -> Path:
-    url = f"https://github.com/emscripten-core/emsdk/archive/refs/tags/{version}.zip"
-    installation_path = CIBW_CACHE_PATH / f"emsdk-{version}"
-    emsdk_path = installation_path / f"emsdk-{version}/emsdk"
-    emcc_path = installation_path / f"emsdk-{version}/upstream/emscripten/emcc"
-    with FileLock(f"{installation_path}.lock"):
-        if installation_path.exists():
-            return emcc_path
-        emsdk_zip = tmp / "emsdk.zip"
-        download(url, emsdk_zip)
-        installation_path.mkdir()
-        extract_zip(emsdk_zip, installation_path)
-        call(emsdk_path, "install", version)
-        call(emsdk_path, "activate", version)
-
-    return emcc_path
+def install_emscripten(env: dict[str, str], version: str, xbuildenv_cache_path: Path) -> Path:
+    """Install Emscripten via pyodide-build, which also applies Pyodide-specific patches."""
+    emscripten_dir = Path(
+        call("pyodide", "config", "get", "emscripten_dir", env=env, capture_stdout=True).strip()
+    )
+    with FileLock(CIBW_CACHE_PATH / "emscripten.lock"):
+        if emscripten_dir.exists():
+            return emscripten_dir
+        call(
+            "pyodide",
+            "xbuildenv",
+            "install-emscripten",
+            "--force",
+            "--version",
+            version,
+            "--path",
+            str(xbuildenv_cache_path),
+            env=env,
+            cwd=CIBW_CACHE_PATH,
+        )
+    assert emscripten_dir.exists()
+    return emscripten_dir


 def get_all_xbuildenv_version_info(env: dict[str, str]) -> list[PyodideXBuildEnvInfo]:
@@ -129,7 +137,7 @@ def get_all_xbuildenv_version_info(env: dict[str, str]) -> list[PyodideXBuildEnv
        msg = f"Invalid xbuildenvs info, got {xbuildenvs_info}"
        raise ValueError(msg)

-    return typing.cast(list[PyodideXBuildEnvInfo], xbuildenvs_info["environments"])
+    return typing.cast("list[PyodideXBuildEnvInfo]", xbuildenvs_info["environments"])


 def get_xbuildenv_version_info(
@@ -179,12 +187,8 @@ def validate_pyodide_build_version(
        raise errors.FatalError(msg)


-def install_xbuildenv(env: dict[str, str], pyodide_build_version: str, pyodide_version: str) -> str:
+def install_xbuildenv(env: dict[str, str], xbuildenv_cache_path: Path, pyodide_version: str) -> str:
    """Install a particular Pyodide xbuildenv version and set a path to the Pyodide root."""
-    # Since pyodide-build was unvendored from Pyodide v0.27.0, the versions of
-    # pyodide-build are uncoupled from the versions of Pyodide. So, we specify
-    # both the pyodide-build version and the Pyodide version in the temp path.
-    xbuildenv_cache_path = CIBW_CACHE_PATH / f"pyodide-build-{pyodide_build_version}"
    pyodide_root = xbuildenv_cache_path / pyodide_version / "xbuildenv" / "pyodide-root"

    with FileLock(CIBW_CACHE_PATH / "xbuildenv.lock"):
@@ -267,7 +271,7 @@ def setup_python(
    if which_python != str(venv_bin_path / "python"):
        msg = "python available on PATH doesn't match our venv instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
        raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)

    # check what pip version we're on
    assert (venv_bin_path / "pip").exists()
@@ -283,8 +287,6 @@ def setup_python(
        "pip",
        "install",
        "--upgrade",
-        "auditwheel-emscripten",
-        "build[virtualenv]",
        "pyodide-build",
        *constraint_flags(constraints_path),
        env=env,
@@ -304,14 +306,18 @@ def setup_python(
        pyodide_build_version=pyodide_build_version,
    )

-    emscripten_version = xbuildenv_info["emscripten"]
-    log.step(f"Installing Emscripten version: {emscripten_version} ...")
-    emcc_path = install_emscripten(tmp, emscripten_version)
-
-    env["PATH"] = os.pathsep.join([str(emcc_path.parent), env["PATH"]])
+    xbuildenv_cache_path = CIBW_CACHE_PATH / f"pyodide-build-{pyodide_build_version}"

    log.step(f"Installing Pyodide xbuildenv version: {pyodide_version} ...")
-    env["PYODIDE_ROOT"] = install_xbuildenv(env, pyodide_build_version, pyodide_version)
+    env["PYODIDE_ROOT"] = install_xbuildenv(env, xbuildenv_cache_path, pyodide_version)
+
+    emscripten_version = xbuildenv_info["emscripten"]
+    log.step(
+        f"Installing Emscripten {emscripten_version} and applying Pyodide-specific patches ..."
+    )
+    emscripten_dir = install_emscripten(env, emscripten_version, xbuildenv_cache_path)
+
+    env["PATH"] = os.pathsep.join([str(emscripten_dir), env["PATH"]])

    return env

@@ -352,7 +358,7 @@ def build(options: Options, tmp_path: Path) -> None:

        for config in python_configurations:
            build_options = options.build_options(config.identifier)
-            build_frontend = build_options.build_frontend or BuildFrontendConfig("build")
+            build_frontend = build_options.build_frontend

            if build_frontend.name == "pip":
                msg = "The pyodide platform doesn't support pip frontend"
@@ -416,20 +422,22 @@ def build(options: Options, tmp_path: Path) -> None:
                log.step("Building wheel...")

                extra_flags = get_build_frontend_extra_flags(
-                    build_frontend, build_options.build_verbosity, build_options.config_settings
+                    build_frontend,
+                    build_options.build_verbosity,
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=build_options.package_dir,
+                    ),
                )

-                build_env = env.copy()
-                if constraints_path:
-                    combine_constraints(build_env, constraints_path, identifier_tmp_dir)
-                build_env["VIRTUALENV_PIP"] = pip_version
                call(
                    "pyodide",
                    "build",
                    build_options.package_dir,
                    f"--outdir={built_wheel_dir}",
                    *extra_flags,
-                    env=build_env,
+                    env=env,
                )
                built_wheel = next(built_wheel_dir.glob("*.whl"))

@@ -443,8 +451,11 @@ def build(options: Options, tmp_path: Path) -> None:
                        build_options.repair_command,
                        wheel=built_wheel,
                        dest_dir=repaired_wheel_dir,
+                        package=build_options.package_dir,
+                        project=".",
                    )
                    shell(repair_command_prepared, env=env)
+                    log.step_end()
                else:
                    shutil.move(str(built_wheel), repaired_wheel_dir)

@@ -453,6 +464,8 @@ def build(options: Options, tmp_path: Path) -> None:
                if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
                    raise errors.AlreadyBuiltWheelError(repaired_wheel.name)

+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
            if build_options.test_command and build_options.test_selector(config.identifier):
                log.step("Testing wheel...")

@@ -538,6 +551,7 @@ def build(options: Options, tmp_path: Path) -> None:
                shell(test_command_prepared, cwd=test_cwd, env=virtualenv_env)

            # we're all done here; move it to output (overwrite existing)
+            output_wheel: Path | None = None
            if compatible_wheel is None:
                output_wheel = build_options.output_dir.joinpath(repaired_wheel.name)
                moved_wheel = move_file(repaired_wheel, output_wheel)
@@ -546,6 +560,8 @@ def build(options: Options, tmp_path: Path) -> None:
                        f"{repaired_wheel} was moved to {moved_wheel} instead of {output_wheel}"
                    )
                built_wheels.append(output_wheel)
+            log.build_end(output_wheel)

-    finally:
-        pass
+    except subprocess.CalledProcessError as error:
+        msg = f"Command {error.cmd} failed with code {error.returncode}. {error.stdout or ''}"
+        raise errors.FatalError(msg) from error
@@ -5,26 +5,37 @@ import platform as platform_module
 import shutil
 import subprocess
 import textwrap
-from collections.abc import MutableMapping, Set
+from collections.abc import MutableMapping, Sequence, Set
 from functools import cache
 from pathlib import Path
 from typing import assert_never

 from filelock import FileLock

-from .. import errors
-from ..architecture import Architecture
-from ..environment import ParsedEnvironment
-from ..frontend import BuildFrontendConfig, BuildFrontendName, get_build_frontend_extra_flags
-from ..logger import log
-from ..options import Options
-from ..selector import BuildSelector
-from ..util import resources
-from ..util.cmd import call, shell
-from ..util.file import CIBW_CACHE_PATH, copy_test_sources, download, extract_zip, move_file
-from ..util.helpers import prepare_command, unwrap
-from ..util.packaging import combine_constraints, find_compatible_wheel, get_pip_version
-from ..venv import constraint_flags, find_uv, virtualenv
+from cibuildwheel import errors
+from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
+from cibuildwheel.environment import ParsedEnvironment
+from cibuildwheel.frontend import (
+    BuildFrontendName,
+    get_build_frontend_extra_flags,
+    prepare_config_settings,
+)
+from cibuildwheel.logger import log
+from cibuildwheel.options import Options
+from cibuildwheel.selector import BuildSelector
+from cibuildwheel.util import resources
+from cibuildwheel.util.cmd import call, shell
+from cibuildwheel.util.file import (
+    CIBW_CACHE_PATH,
+    copy_test_sources,
+    download,
+    extract_zip,
+    move_file,
+)
+from cibuildwheel.util.helpers import prepare_command, unwrap
+from cibuildwheel.util.packaging import find_compatible_wheel, get_pip_version
+from cibuildwheel.venv import constraint_flags, find_uv, target_marker_env, virtualenv


 def get_nuget_args(
@@ -54,10 +65,17 @@ def get_nuget_args(
@dataclasses.dataclass(frozen=True, kw_only=True)
 class PythonConfiguration:
    version: str
-    arch: str
    identifier: str
    url: str | None = None

+    @property
+    def arch(self) -> str:
+        return {
+            "win32": "32",
+            "win_amd64": "64",
+            "win_arm64": "ARM64",
+        }[self.identifier.split("-")[-1]]
+

 def all_python_configurations() -> list[PythonConfiguration]:
    config_dicts = resources.read_python_configs("windows")
@@ -225,11 +243,6 @@ def setup_rust_cross_compile(
        )


-def can_use_uv(python_configuration: PythonConfiguration) -> bool:
-    conditions = (not python_configuration.identifier.startswith("pp38-"),)
-    return all(conditions)
-
-
 def setup_python(
    tmp: Path,
    python_configuration: PythonConfiguration,
@@ -261,10 +274,7 @@ def setup_python(
        raise ValueError(msg)
    assert base_python.exists()

-    if build_frontend == "build[uv]" and not can_use_uv(python_configuration):
-        build_frontend = "build"
-
-    use_uv = build_frontend == "build[uv]"
+    use_uv = build_frontend in {"build[uv]", "uv"}
    uv_path = find_uv()

    log.step("Setting up build environment...")
@@ -275,12 +285,15 @@ def setup_python(
        venv_path,
        dependency_constraint,
        use_uv=use_uv,
+        marker_env=target_marker_env(implementation_id=implementation_id),
    )

    # set up environment variables for run_with_env
    env["PYTHON_VERSION"] = python_configuration.version
    env["PYTHON_ARCH"] = python_configuration.arch
-    env["PIP_DISABLE_PIP_VERSION_CHECK"] = "1"
+    env.pop("UV_PYTHON", None)
+    if not use_uv:
+        env["PIP_DISABLE_PIP_VERSION_CHECK"] = "1"

    # update env with results from CIBW_ENVIRONMENT
    env = environment.as_dictionary(prev_environment=env)
@@ -291,7 +304,7 @@ def setup_python(
    if where_python != str(venv_path / "Scripts" / "python.exe"):
        msg = "python available on PATH doesn't match our installed instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
        raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)
    call("python", "-c", "\"import struct; print(struct.calcsize('P') * 8)\"", env=env)

    # check what pip version we're on
@@ -305,37 +318,66 @@ def setup_python(
        call("pip", "--version", env=env)

    log.step("Installing build tools...")
-    if build_frontend == "build":
-        call(
-            "pip",
-            "install",
-            "--upgrade",
-            "build[virtualenv]",
-            *constraint_flags(dependency_constraint),
-            env=env,
-        )
-    elif build_frontend == "build[uv]":
-        assert uv_path is not None
-        call(
-            uv_path,
-            "pip",
-            "install",
-            "--upgrade",
-            "build[virtualenv]",
-            *constraint_flags(dependency_constraint),
-            env=env,
-        )
+    match build_frontend:
+        case "pip":
+            call(
+                "pip",
+                "install",
+                "--upgrade",
+                "delvewheel",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case "build":
+            call(
+                "pip",
+                "install",
+                "--upgrade",
+                "build[virtualenv]",
+                "delvewheel",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case "build[uv]":
+            assert uv_path is not None
+            call(
+                uv_path,
+                "pip",
+                "install",
+                "--python",
+                where_python,
+                "--upgrade",
+                "build[virtualenv]",
+                "delvewheel",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case "uv":
+            assert uv_path is not None
+            call(
+                uv_path,
+                "pip",
+                "install",
+                "--python",
+                where_python,
+                "--upgrade",
+                "delvewheel",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case _:
+            assert_never(build_frontend)

    if python_libs_base:
        # Set up the environment for various backends to enable cross-compilation
        setup_setuptools_cross_compile(tmp, python_configuration, python_libs_base, env)
        setup_rust_cross_compile(tmp, python_configuration, python_libs_base, env)

-    if implementation_id.startswith("gp"):
-        # GraalPy fails to discover compilers, setup the relevant environment
+    if implementation_id.startswith("gp311"):
+        # GraalPy 24 fails to discover compilers, setup the relevant environment
        # variables. Adapted from
        # https://github.com/microsoft/vswhere/wiki/Start-Developer-Command-Prompt
-        # Remove when https://github.com/oracle/graalpython/issues/492 is fixed.
+        # Remove when GraalPy 24.x is dropped.
        vcpath = call(
            Path(os.environ["PROGRAMFILES(X86)"])
            / "Microsoft Visual Studio"
@@ -378,6 +420,8 @@ def build(options: Options, tmp_path: Path) -> None:
    if not python_configurations:
        return

+    uv_path = find_uv()
+
    try:
        before_all_options_identifier = python_configurations[0].identifier
        before_all_options = options.build_options(before_all_options_identifier)
@@ -394,9 +438,8 @@ def build(options: Options, tmp_path: Path) -> None:

        for config in python_configurations:
            build_options = options.build_options(config.identifier)
-            build_frontend = build_options.build_frontend or BuildFrontendConfig("build")
-
-            use_uv = build_frontend.name == "build[uv]" and can_use_uv(config)
+            build_frontend = build_options.build_frontend
+            use_uv = build_frontend.name in {"build[uv]", "uv"}
            log.build_start(config.identifier)

            identifier_tmp_dir = tmp_path / config.identifier
@@ -441,62 +484,78 @@ def build(options: Options, tmp_path: Path) -> None:
                built_wheel_dir.mkdir()

                extra_flags = get_build_frontend_extra_flags(
-                    build_frontend, build_options.build_verbosity, build_options.config_settings
+                    build_frontend,
+                    build_options.build_verbosity,
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=options.globals.package_dir,
+                    ),
                )

                if (
-                    config.identifier.startswith("gp")
+                    config.identifier.startswith("gp311")
                    and build_frontend.name == "build"
                    and "--no-isolation" not in extra_flags
                    and "-n" not in extra_flags
                ):
-                    # GraalPy fails to discover its standard library when a venv is created
+                    # GraalPy 24 fails to discover its standard library when a venv is created
                    # from a virtualenv seeded executable. See
                    # https://github.com/oracle/graalpython/issues/491 and remove this once
-                    # fixed upstream.
+                    # GraalPy 24 is dropped.
                    log.notice(
                        "Disabling build isolation to workaround GraalPy bug. If the build fails, consider using pip or build[uv] as build frontend."
                    )
                    shell("graalpy -m pip install setuptools wheel", env=env)
                    extra_flags = [*extra_flags, "-n"]

-                build_env = env.copy()
-                if pip_version is not None:
-                    build_env["VIRTUALENV_PIP"] = pip_version
+                match build_frontend.name:
+                    case "pip":
+                        # Path.resolve() is needed. Without it pip wheel may try to fetch package from pypi.org
+                        # see https://github.com/pypa/cibuildwheel/pull/369
+                        call(
+                            "python",
+                            "-m",
+                            "pip",
+                            "wheel",
+                            options.globals.package_dir.resolve(),
+                            f"--wheel-dir={built_wheel_dir}",
+                            "--no-deps",
+                            *extra_flags,
+                            env=env,
+                        )
+                    case "build" | "build[uv]":
+                        if (
+                            use_uv
+                            and "--no-isolation" not in extra_flags
+                            and "-n" not in extra_flags
+                        ):
+                            extra_flags.append("--installer=uv")

-                if constraints_path:
-                    combine_constraints(build_env, constraints_path, identifier_tmp_dir)
-
-                if build_frontend.name == "pip":
-                    # Path.resolve() is needed. Without it pip wheel may try to fetch package from pypi.org
-                    # see https://github.com/pypa/cibuildwheel/pull/369
-                    call(
-                        "python",
-                        "-m",
-                        "pip",
-                        "wheel",
-                        options.globals.package_dir.resolve(),
-                        f"--wheel-dir={built_wheel_dir}",
-                        "--no-deps",
-                        *extra_flags,
-                        env=build_env,
-                    )
-                elif build_frontend.name == "build" or build_frontend.name == "build[uv]":
-                    if use_uv and "--no-isolation" not in extra_flags and "-n" not in extra_flags:
-                        extra_flags.append("--installer=uv")
-
-                    call(
-                        "python",
-                        "-m",
-                        "build",
-                        build_options.package_dir,
-                        "--wheel",
-                        f"--outdir={built_wheel_dir}",
-                        *extra_flags,
-                        env=build_env,
-                    )
-                else:
-                    assert_never(build_frontend)
+                        call(
+                            "python",
+                            "-m",
+                            "build",
+                            build_options.package_dir,
+                            "--wheel",
+                            f"--outdir={built_wheel_dir}",
+                            *extra_flags,
+                            env=env,
+                        )
+                    case "uv":
+                        assert uv_path is not None
+                        call(
+                            uv_path,
+                            "build",
+                            f"--python={base_python}",
+                            build_options.package_dir,
+                            "--wheel",
+                            f"--out-dir={built_wheel_dir}",
+                            *extra_flags,
+                            env=env,
+                        )
+                    case _:
+                        assert_never(build_frontend)

                built_wheel = next(built_wheel_dir.glob("*.whl"))

@@ -512,6 +571,8 @@ def build(options: Options, tmp_path: Path) -> None:
                        build_options.repair_command,
                        wheel=built_wheel,
                        dest_dir=repaired_wheel_dir,
+                        package=build_options.package_dir,
+                        project=".",
                    )
                    shell(repair_command_prepared, env=env)
                else:
@@ -525,6 +586,8 @@ def build(options: Options, tmp_path: Path) -> None:
                if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
                    raise errors.AlreadyBuiltWheelError(repaired_wheel.name)

+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
            test_selected = options.globals.test_selector(config.identifier)
            if test_selected and config.arch == "ARM64" != platform_module.machine():
                log.warning(
@@ -567,7 +630,12 @@ def build(options: Options, tmp_path: Path) -> None:
                    )
                    shell(before_test_prepared, env=virtualenv_env)

-                pip = ["uv", "pip"] if use_uv else ["pip"]
+                pip: Sequence[Path | str]
+                if use_uv:
+                    assert uv_path is not None
+                    pip = [uv_path, "pip"]
+                else:
+                    pip = ["pip"]

                # install the wheel
                call(
@@ -607,6 +675,7 @@ def build(options: Options, tmp_path: Path) -> None:
                shell(test_command_prepared, cwd=test_cwd, env=virtualenv_env)

            # we're all done here; move it to output (remove if already exists)
+            output_wheel = None
            if compatible_wheel is None:
                output_wheel = build_options.output_dir.joinpath(repaired_wheel.name)
                moved_wheel = move_file(repaired_wheel, output_wheel)
@@ -621,7 +690,7 @@ def build(options: Options, tmp_path: Path) -> None:
            # don't want to abort a build because of that)
            shutil.rmtree(identifier_tmp_dir, ignore_errors=True)

-            log.build_end()
+            log.build_end(output_wheel)
    except subprocess.CalledProcessError as error:
        msg = f"Command {error.cmd} failed with code {error.returncode}. {error.stdout or ''}"
        raise errors.FatalError(msg) from error
@@ -14,32 +14,16 @@ def get_parent(node: ast.AST | None, depth: int = 1) -> ast.AST | None:


 def is_main(parent: ast.AST | None) -> bool:
-    if parent is None:
-        return False
-
-    # This would be much nicer with 3.10's pattern matching!
-    if not isinstance(parent, ast.If):
-        return False
-    if not isinstance(parent.test, ast.Compare):
-        return False
-
-    try:
-        (op,) = parent.test.ops
-        (comp,) = parent.test.comparators
-    except ValueError:
-        return False
-
-    if not isinstance(op, ast.Eq):
-        return False
-
-    values = {comp, parent.test.left}
-
-    mains = {x for x in values if isinstance(x, ast.Constant) and x.value == "__main__"}
-    if len(mains) != 1:
-        return False
-    consts = {x for x in values if isinstance(x, ast.Name) and x.id == "__name__"}
-
-    return len(consts) == 1
+    match parent:
+        case ast.If(test=ast.Compare(left=left, ops=[ast.Eq()], comparators=[comp])):
+            values = {left, comp}
+            mains = {x for x in values if isinstance(x, ast.Constant) and x.value == "__main__"}
+            if len(mains) != 1:
+                return False
+            consts = {x for x in values if isinstance(x, ast.Name) and x.id == "__name__"}
+            return len(consts) == 1
+        case _:
+            return False


 class Analyzer(ast.NodeVisitor):
@@ -65,12 +49,10 @@ class Analyzer(ast.NodeVisitor):
            parent is not None and get_parent(parent) is None and is_main(get_parent(node, 3))
        )

-        if (
-            node.arg == "python_requires"
-            and isinstance(node.value, ast.Constant)
-            and (unnested or name_main_unnested)
-        ):
-            self.requires_python = node.value.value
+        match node:
+            case ast.keyword(arg="python_requires", value=ast.Constant(value=str() as version)):
+                if unnested or name_main_unnested:
+                    self.requires_python = version


 def setup_py_python_requires(content: str) -> str | None:
@@ -0,0 +1 @@
+import _cross_venv; _cross_venv.initialize()
@@ -0,0 +1,87 @@
+# This module is copied into the site-packages directory of an Android build environment, and
+# activated via a .pth file when we want the environment to simulate Android.
+
+import os
+import platform
+import re
+import sys
+import sysconfig
+from pathlib import Path
+from typing import Any
+
+
+def initialize() -> None:
+    if not (host_triplet := os.environ.get("CIBW_HOST_TRIPLET")):
+        return
+
+    # os ######################################################################
+    def cross_os_uname() -> os.uname_result:
+        return os.uname_result(
+            (
+                "Linux",
+                "localhost",
+                # The Linux kernel version and release are unlikely to be significant, but return
+                # realistic values anyway (from an API level 24 emulator).
+                "3.18.91+",
+                "#1 SMP PREEMPT Tue Jan 9 20:35:43 UTC 2018",
+                host_triplet.split("-")[0],
+            )
+        )
+
+    os.name = "posix"
+    os.uname = cross_os_uname
+
+    # platform ################################################################
+    #
+    # We can't determine the user-visible Android version number from the API level, so return a
+    # string which will work fine for display, but will fail to parse as a version number.
+    def cross_android_ver(*args: Any, **kwargs: Any) -> platform.AndroidVer:
+        return platform.AndroidVer(
+            release=f"API level {cross_getandroidapilevel()}",
+            api_level=cross_getandroidapilevel(),
+            manufacturer="Google",
+            model="sdk_gphone64",
+            device="emu64",
+            is_emulator=True,
+        )
+
+    # platform.uname, platform.system etc. are all implemented in terms of platform.android_ver.
+    platform.android_ver = cross_android_ver
+
+    # sys #####################################################################
+    def cross_getandroidapilevel() -> int:
+        api_level = sysconfig.get_config_var("ANDROID_API_LEVEL")
+        assert isinstance(api_level, int)
+        return api_level
+
+    # Some packages may recognize sys.cross_compiling from the crossenv tool.
+    sys.cross_compiling = True  # type: ignore[attr-defined]
+    sys.getandroidapilevel = cross_getandroidapilevel  # type: ignore[attr-defined]
+    sys.implementation._multiarch = host_triplet  # type: ignore[attr-defined]
+    sys.platform = "android"
+
+    # Determine the abiflags from the sysconfigdata filename.
+    sysconfigdata_path = next(Path(__file__).parent.glob("_sysconfigdata_*.py"))
+    abiflags_match = re.match(r"_sysconfigdata_(.*?)_", sysconfigdata_path.name)
+    assert abiflags_match is not None
+    sys.abiflags = abiflags_match[1]
+
+    # sysconfig ###############################################################
+    #
+    # Load the sysconfigdata file, generating its name from sys.abiflags,
+    # sys.platform, and sys.implementation._multiarch.
+    sysconfig._init_config_vars()  # type: ignore[attr-defined]
+
+    # We don't change the actual sys.base_prefix and base_exec_prefix, because that
+    # could have unpredictable effects. Instead, we change the sysconfig variables
+    # used by sysconfig.get_paths().
+    vars = sysconfig.get_config_vars()
+    try:
+        host_prefix = vars["host_prefix"]  # This variable was added in Python 3.14.
+    except KeyError:
+        host_prefix = vars["exec_prefix"]
+    vars["installed_base"] = vars["installed_platbase"] = host_prefix
+
+    # sysconfig.get_platform, which determines the wheel tag, is implemented in terms of
+    # sys.platform, sysconfig.get_config_var("ANDROID_API_LEVEL") (see localized_vars in
+    # android.py), and os.uname.
@@ -0,0 +1,11 @@
+--- a/android.py
+++ b/android.py
+@@ -1021,7 +1021,7 @@ def main():
+     context = parse_args()
+ 
+     # Set the CROSS_BUILD_DIR if an argument was provided
+-    if context.cross_build_dir:
+    if getattr(context, "cross_build_dir", None):
+         global CROSS_BUILD_DIR
+         CROSS_BUILD_DIR = context.cross_build_dir.resolve()
+ 
@@ -0,0 +1,57 @@
+#!/usr/bin/env python3
+
+import os
+import shutil
+import subprocess
+import sys
+from pathlib import Path
+
+
+def main() -> None:
+    # CIBW_HOST_TRIPLET is set in the android_env to the Android target triplet.
+    target = os.environ.get("CIBW_HOST_TRIPLET")
+
+    cmd_name = Path(sys.argv[0]).name
+
+    # Find the real command in PATH, excluding the current script's directory
+    path_env = os.environ.get("PATH", "")
+    script_dir = Path(__file__).resolve().parent
+
+    paths = path_env.split(os.pathsep)
+    # Filter out the script directory to avoid recursion
+    filtered_paths = [p for p in paths if Path(p).resolve() != script_dir]
+    filtered_path_env = os.pathsep.join(filtered_paths)
+
+    real_cmd = shutil.which(cmd_name, path=filtered_path_env)
+
+    if not real_cmd:
+        sys.stderr.write(f"cibuildwheel: Error: Could not find system {cmd_name}\n")
+        sys.exit(1)
+
+    # If we have a target (i.e. we are in the android_env), try to install it.
+    if target:
+        # Check if rustup is available to install the target
+        rustup_path = shutil.which("rustup", path=filtered_path_env)
+
+        if rustup_path:
+            try:
+                # We call rustup to ensure the target is installed.
+                subprocess.run(
+                    [rustup_path, "target", "add", target],
+                    check=True,
+                    stdout=subprocess.DEVNULL,
+                    stderr=subprocess.PIPE,
+                    text=True,
+                )
+            except subprocess.CalledProcessError as e:
+                sys.stderr.write(
+                    f"cibuildwheel: Error: Failed to install Rust target {target}: {e.stderr}\n"
+                )
+                sys.exit(1)
+
+    # Execute the real command
+    os.execv(real_cmd, [real_cmd, *sys.argv[1:]])
+
+
+if __name__ == "__main__":
+    main()
@@ -1,152 +1,148 @@
 [linux]
 python_configurations = [
-  { identifier = "cp38-manylinux_x86_64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
  { identifier = "cp39-manylinux_x86_64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-manylinux_x86_64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-manylinux_x86_64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-manylinux_x86_64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-manylinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-manylinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-manylinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_i686", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-manylinux_i686", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-manylinux_i686", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-manylinux_i686", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-manylinux_i686", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-manylinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-manylinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-manylinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "pp38-manylinux_x86_64", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
+  { identifier = "cp315-manylinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "pp39-manylinux_x86_64", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
  { identifier = "pp310-manylinux_x86_64", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
  { identifier = "pp311-manylinux_x86_64", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
  { identifier = "gp311_242-manylinux_x86_64", version = "3.11", path_str = "/opt/python/graalpy311-graalpy242_311_native" },
-  { identifier = "cp38-manylinux_aarch64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "gp312_250-manylinux_x86_64", version = "3.12", path_str = "/opt/python/graalpy312-graalpy250_312_native" },
  { identifier = "cp39-manylinux_aarch64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-manylinux_aarch64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-manylinux_aarch64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-manylinux_aarch64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-manylinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-manylinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-manylinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_ppc64le", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-manylinux_ppc64le", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-manylinux_ppc64le", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-manylinux_ppc64le", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-manylinux_ppc64le", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-manylinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-manylinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-manylinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_s390x", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-manylinux_s390x", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-manylinux_s390x", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-manylinux_s390x", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-manylinux_s390x", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-manylinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-manylinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-manylinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_armv7l", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-manylinux_armv7l", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-manylinux_armv7l", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-manylinux_armv7l", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-manylinux_armv7l", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-manylinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-manylinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-manylinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_riscv64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-manylinux_riscv64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-manylinux_riscv64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-manylinux_riscv64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-manylinux_riscv64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-manylinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-manylinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-manylinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "pp38-manylinux_aarch64", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
+  { identifier = "cp315-manylinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "pp39-manylinux_aarch64", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
  { identifier = "pp310-manylinux_aarch64", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
  { identifier = "pp311-manylinux_aarch64", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
  { identifier = "gp311_242-manylinux_aarch64", version = "3.11", path_str = "/opt/python/graalpy311-graalpy242_311_native" },
-  { identifier = "pp38-manylinux_i686", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
+  { identifier = "gp312_250-manylinux_aarch64", version = "3.12", path_str = "/opt/python/graalpy312-graalpy250_312_native" },
  { identifier = "pp39-manylinux_i686", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
  { identifier = "pp310-manylinux_i686", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
  { identifier = "pp311-manylinux_i686", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
-  { identifier = "cp38-musllinux_x86_64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
  { identifier = "cp39-musllinux_x86_64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-musllinux_x86_64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-musllinux_x86_64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-musllinux_x86_64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-musllinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-musllinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-musllinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_i686", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-musllinux_i686", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-musllinux_i686", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-musllinux_i686", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-musllinux_i686", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-musllinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-musllinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-musllinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_aarch64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-musllinux_aarch64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-musllinux_aarch64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-musllinux_aarch64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-musllinux_aarch64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-musllinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-musllinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-musllinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_ppc64le", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-musllinux_ppc64le", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-musllinux_ppc64le", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-musllinux_ppc64le", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-musllinux_ppc64le", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-musllinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-musllinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-musllinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_s390x", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-musllinux_s390x", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-musllinux_s390x", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-musllinux_s390x", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-musllinux_s390x", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-musllinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-musllinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-musllinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_armv7l", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
  { identifier = "cp39-musllinux_armv7l", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-musllinux_armv7l", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-musllinux_armv7l", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-musllinux_armv7l", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-musllinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-musllinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-musllinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_riscv64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
-  { identifier = "cp39-musllinux_ricv64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
+  { identifier = "cp315-musllinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
+  { identifier = "cp39-musllinux_riscv64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
  { identifier = "cp310-musllinux_riscv64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
  { identifier = "cp311-musllinux_riscv64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
  { identifier = "cp312-musllinux_riscv64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
  { identifier = "cp313-musllinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
  { identifier = "cp314-musllinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
  { identifier = "cp314t-musllinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
+  { identifier = "cp315-musllinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
 ]

 [macos]
 python_configurations = [
-  { identifier = "cp38-macosx_x86_64", version = "3.8", url = "https://www.python.org/ftp/python/3.8.10/python-3.8.10-macosx10.9.pkg" },
-  { identifier = "cp38-macosx_arm64", version = "3.8", url = "https://www.python.org/ftp/python/3.8.10/python-3.8.10-macosx10.9.pkg" },
-  { identifier = "cp38-macosx_universal2", version = "3.8", url = "https://www.python.org/ftp/python/3.8.10/python-3.8.10-macosx10.9.pkg" },
  { identifier = "cp39-macosx_x86_64", version = "3.9", url = "https://www.python.org/ftp/python/3.9.13/python-3.9.13-macos11.pkg" },
  { identifier = "cp39-macosx_arm64", version = "3.9", url = "https://www.python.org/ftp/python/3.9.13/python-3.9.13-macos11.pkg" },
  { identifier = "cp39-macosx_universal2", version = "3.9", url = "https://www.python.org/ftp/python/3.9.13/python-3.9.13-macos11.pkg" },
@@ -159,74 +155,90 @@ python_configurations = [
  { identifier = "cp312-macosx_x86_64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
  { identifier = "cp312-macosx_arm64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
  { identifier = "cp312-macosx_universal2", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
-  { identifier = "cp313-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
-  { identifier = "cp313-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
-  { identifier = "cp313-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
-  { identifier = "cp313t-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
-  { identifier = "cp313t-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
-  { identifier = "cp313t-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.3/python-3.13.3-macos11.pkg" },
-  { identifier = "cp314-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.0/python-3.14.0b2-macos11.pkg" },
-  { identifier = "cp314-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.0/python-3.14.0b2-macos11.pkg" },
-  { identifier = "cp314-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.0/python-3.14.0b2-macos11.pkg" },
-  { identifier = "cp314t-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.0/python-3.14.0b2-macos11.pkg" },
-  { identifier = "cp314t-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.0/python-3.14.0b2-macos11.pkg" },
-  { identifier = "cp314t-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.0/python-3.14.0b2-macos11.pkg" },
-  { identifier = "pp38-macosx_x86_64", version = "3.8", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-macos_x86_64.tar.bz2" },
-  { identifier = "pp38-macosx_arm64", version = "3.8", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-macos_arm64.tar.bz2" },
+  { identifier = "cp313-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.13/python-3.13.13-macos11.pkg" },
+  { identifier = "cp313-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.13/python-3.13.13-macos11.pkg" },
+  { identifier = "cp313-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.13/python-3.13.13-macos11.pkg" },
+  { identifier = "cp314-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314t-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314t-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314t-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp315-macosx_x86_64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315-macosx_arm64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315-macosx_universal2", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315t-macosx_x86_64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315t-macosx_arm64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315t-macosx_universal2", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
  { identifier = "pp39-macosx_x86_64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-macos_x86_64.tar.bz2" },
  { identifier = "pp39-macosx_arm64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-macos_arm64.tar.bz2" },
  { identifier = "pp310-macosx_x86_64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-macos_x86_64.tar.bz2" },
  { identifier = "pp310-macosx_arm64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-macos_arm64.tar.bz2" },
-  { identifier = "pp311-macosx_x86_64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.19-macos_x86_64.tar.bz2" },
-  { identifier = "pp311-macosx_arm64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.19-macos_arm64.tar.bz2" },
-  { identifier = "gp311_242-macosx_x86_64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.1/graalpy-24.2.1-macos-amd64.tar.gz" },
-  { identifier = "gp311_242-macosx_arm64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.1/graalpy-24.2.1-macos-aarch64.tar.gz" },
+  { identifier = "pp311-macosx_x86_64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.22-macos_x86_64.tar.bz2" },
+  { identifier = "pp311-macosx_arm64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.22-macos_arm64.tar.bz2" },
+  { identifier = "gp311_242-macosx_x86_64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-macos-amd64.tar.gz" },
+  { identifier = "gp311_242-macosx_arm64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-macos-aarch64.tar.gz" },
+  { identifier = "gp312_250-macosx_x86_64", version = "3.12", url = "https://github.com/oracle/graalpython/releases/download/graal-25.0.1/graalpy-25.0.1-macos-amd64.tar.gz" },
+  { identifier = "gp312_250-macosx_arm64", version = "3.12", url = "https://github.com/oracle/graalpython/releases/download/graal-25.0.2/graalpy-25.0.2-macos-aarch64.tar.gz" },
 ]

 [windows]
 python_configurations = [
-  { identifier = "cp38-win32", version = "3.8.10", arch = "32" },
-  { identifier = "cp38-win_amd64", version = "3.8.10", arch = "64" },
-  { identifier = "cp39-win32", version = "3.9.13", arch = "32" },
-  { identifier = "cp39-win_amd64", version = "3.9.13", arch = "64" },
-  { identifier = "cp310-win32", version = "3.10.11", arch = "32" },
-  { identifier = "cp310-win_amd64", version = "3.10.11", arch = "64" },
-  { identifier = "cp311-win32", version = "3.11.9", arch = "32" },
-  { identifier = "cp311-win_amd64", version = "3.11.9", arch = "64" },
-  { identifier = "cp312-win32", version = "3.12.10", arch = "32" },
-  { identifier = "cp312-win_amd64", version = "3.12.10", arch = "64" },
-  { identifier = "cp313-win32", version = "3.13.3", arch = "32" },
-  { identifier = "cp313t-win32", version = "3.13.3", arch = "32" },
-  { identifier = "cp313-win_amd64", version = "3.13.3", arch = "64" },
-  { identifier = "cp313t-win_amd64", version = "3.13.3", arch = "64" },
-  { identifier = "cp314-win32", version = "3.14.0-b2", arch = "32" },
-  { identifier = "cp314t-win32", version = "3.14.0-b2", arch = "32" },
-  { identifier = "cp314-win_amd64", version = "3.14.0-b2", arch = "64" },
-  { identifier = "cp314t-win_amd64", version = "3.14.0-b2", arch = "64" },
-  { identifier = "cp39-win_arm64", version = "3.9.10", arch = "ARM64" },
-  { identifier = "cp310-win_arm64", version = "3.10.11", arch = "ARM64" },
-  { identifier = "cp311-win_arm64", version = "3.11.9", arch = "ARM64" },
-  { identifier = "cp312-win_arm64", version = "3.12.10", arch = "ARM64" },
-  { identifier = "cp313-win_arm64", version = "3.13.3", arch = "ARM64" },
-  { identifier = "cp313t-win_arm64", version = "3.13.3", arch = "ARM64" },
-  { identifier = "cp314-win_arm64", version = "3.14.0-b2", arch = "ARM64" },
-  { identifier = "cp314t-win_arm64", version = "3.14.0-b2", arch = "ARM64" },
-  { identifier = "pp38-win_amd64", version = "3.8", arch = "64", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-win64.zip" },
-  { identifier = "pp39-win_amd64", version = "3.9", arch = "64", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-win64.zip" },
-  { identifier = "pp310-win_amd64", version = "3.10", arch = "64", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-win64.zip" },
-  { identifier = "pp311-win_amd64", version = "3.11", arch = "64", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.19-win64.zip" },
-  { identifier = "gp311_242-win_amd64", version = "3.11", arch = "64", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.1/graalpy-24.2.1-windows-amd64.zip" },
+  { identifier = "cp39-win32", version = "3.9.13" },
+  { identifier = "cp39-win_amd64", version = "3.9.13" },
+  { identifier = "cp310-win32", version = "3.10.11" },
+  { identifier = "cp310-win_amd64", version = "3.10.11" },
+  { identifier = "cp311-win32", version = "3.11.9" },
+  { identifier = "cp311-win_amd64", version = "3.11.9" },
+  { identifier = "cp312-win32", version = "3.12.10" },
+  { identifier = "cp312-win_amd64", version = "3.12.10" },
+  { identifier = "cp313-win32", version = "3.13.13" },
+  { identifier = "cp313-win_amd64", version = "3.13.13" },
+  { identifier = "cp314-win32", version = "3.14.5" },
+  { identifier = "cp314t-win32", version = "3.14.5" },
+  { identifier = "cp314-win_amd64", version = "3.14.5" },
+  { identifier = "cp314t-win_amd64", version = "3.14.5" },
+  { identifier = "cp315-win32", version = "3.15.0-b1" },
+  { identifier = "cp315t-win32", version = "3.15.0-b1" },
+  { identifier = "cp315-win_amd64", version = "3.15.0-b1" },
+  { identifier = "cp315t-win_amd64", version = "3.15.0-b1" },
+  { identifier = "cp39-win_arm64", version = "3.9.10" },
+  { identifier = "cp310-win_arm64", version = "3.10.11" },
+  { identifier = "cp311-win_arm64", version = "3.11.9" },
+  { identifier = "cp312-win_arm64", version = "3.12.10" },
+  { identifier = "cp313-win_arm64", version = "3.13.13" },
+  { identifier = "cp314-win_arm64", version = "3.14.5" },
+  { identifier = "cp314t-win_arm64", version = "3.14.5" },
+  { identifier = "cp315-win_arm64", version = "3.15.0-b1" },
+  { identifier = "cp315t-win_arm64", version = "3.15.0-b1" },
+  { identifier = "pp39-win_amd64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-win64.zip" },
+  { identifier = "pp310-win_amd64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-win64.zip" },
+  { identifier = "pp311-win_amd64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.22-win64.zip" },
+  { identifier = "gp311_242-win_amd64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-windows-amd64.zip" },
+  { identifier = "gp312_250-win_amd64", version = "3.12", url = "https://github.com/oracle/graalpython/releases/download/graal-25.0.2/graalpy-25.0.2-windows-amd64.zip" },
 ]

 [pyodide]
 python_configurations = [
-  { identifier = "cp312-pyodide_wasm32", version = "3.12", default_pyodide_version = "0.27.6", node_version = "v22" },
-  { identifier = "cp313-pyodide_wasm32", version = "3.13", default_pyodide_version = "0.28.0a3", node_version = "v22" },
+  { identifier = "cp312-pyodide_wasm32", version = "3.12", default_pyodide_version = "0.27.7", node_version = "v22" },
+  { identifier = "cp313-pyodide_wasm32", version = "3.13", default_pyodide_version = "0.29.4", node_version = "v22" },
+  { identifier = "cp314-pyodide_wasm32", version = "3.14", default_pyodide_version = "314.0.0a2", node_version = "v24" },
+]
+
+[android]
+python_configurations = [
+  { identifier = "cp313-android_arm64_v8a", version = "3.13", url = "https://repo.maven.apache.org/maven2/com/chaquo/python/python/3.13.13/python-3.13.13-aarch64-linux-android.tar.gz" },
+  { identifier = "cp313-android_x86_64", version = "3.13", url = "https://repo.maven.apache.org/maven2/com/chaquo/python/python/3.13.13/python-3.13.13-x86_64-linux-android.tar.gz" },
+  { identifier = "cp314-android_arm64_v8a", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-aarch64-linux-android.tar.gz" },
+  { identifier = "cp314-android_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-x86_64-linux-android.tar.gz" },
 ]

 [ios]
 python_configurations = [
-  { identifier = "cp313-ios_arm64_iphoneos", version = "3.13", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.13-b6/Python-3.13-iOS-support.b6.tar.gz" },
-  { identifier = "cp313-ios_x86_64_iphonesimulator", version = "3.13", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.13-b6/Python-3.13-iOS-support.b6.tar.gz" },
-  { identifier = "cp313-ios_arm64_iphonesimulator", version = "3.13", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.13-b6/Python-3.13-iOS-support.b6.tar.gz" },
+  { identifier = "cp313-ios_arm64_iphoneos", version = "3.13", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.13-b13/Python-3.13-iOS-support.b13.tar.gz" },
+  { identifier = "cp313-ios_x86_64_iphonesimulator", version = "3.13", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.13-b13/Python-3.13-iOS-support.b13.tar.gz" },
+  { identifier = "cp313-ios_arm64_iphonesimulator", version = "3.13", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.13-b13/Python-3.13-iOS-support.b13.tar.gz" },
+  { identifier = "cp314-ios_arm64_iphoneos", version = "3.14", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.14-b9/Python-3.14-iOS-support.b9.tar.gz" },
+  { identifier = "cp314-ios_x86_64_iphonesimulator", version = "3.14", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.14-b9/Python-3.14-iOS-support.b9.tar.gz" },
+  { identifier = "cp314-ios_arm64_iphonesimulator", version = "3.14", url = "https://github.com/beeware/Python-Apple-support/releases/download/3.14-b9/Python-3.14-iOS-support.b9.tar.gz" },
 ]
@@ -13,8 +13,6 @@
    },
    "enable": {
      "enum": [
-        "cpython-experimental-riscv64",
-        "cpython-freethreading",
        "cpython-prerelease",
        "graalpy",
        "pyodide-prerelease",
@@ -28,6 +26,36 @@
  "description": "cibuildwheel's settings.",
  "type": "object",
  "properties": {
+    "audit-command": {
+      "description": "Execute a shell command to audit each wheel after it is repaired. Use {wheel} for each wheel path, or {abi3_wheel} to only audit abi3 wheels.",
+      "oneOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      ],
+      "title": "CIBW_AUDIT_COMMAND"
+    },
+    "audit-requires": {
+      "description": "Install Python dependencies for the audit step.",
+      "oneOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      ],
+      "title": "CIBW_AUDIT_REQUIRES"
+    },
    "archs": {
      "description": "Change the architectures built on your machine by default.",
      "oneOf": [
@@ -108,13 +136,14 @@
    },
    "build-frontend": {
      "default": "default",
-      "description": "Set the tool to use to build, either \"pip\" (default for now), \"build\", or \"build[uv]\"",
+      "description": "Set the tool to use to build, either \"build\" (default), \"build[uv]\", \"uv\", or \"pip\"",
      "oneOf": [
        {
          "enum": [
            "pip",
            "build",
            "build[uv]",
+            "uv",
            "default"
          ]
        },
@@ -130,6 +159,10 @@
          "type": "string",
          "pattern": "^build\\[uv\\]; ?args:"
        },
+        {
+          "type": "string",
+          "pattern": "^uv; ?args:"
+        },
        {
          "type": "object",
          "additionalProperties": false,
@@ -141,7 +174,8 @@
              "enum": [
                "pip",
                "build",
-                "build[uv]"
+                "build[uv]",
+                "uv"
              ]
            },
            "args": {
@@ -569,6 +603,39 @@
      ],
      "title": "CIBW_TEST_ENVIRONMENT"
    },
+    "test-runtime": {
+      "description": "Additional configuration for the test runner",
+      "oneOf": [
+        {
+          "type": "string",
+          "pattern": "^$"
+        },
+        {
+          "type": "object",
+          "additionalProperties": false
+        },
+        {
+          "type": "string",
+          "pattern": "args:"
+        },
+        {
+          "type": "object",
+          "additionalProperties": false,
+          "required": [
+            "args"
+          ],
+          "properties": {
+            "args": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              }
+            }
+          }
+        }
+      ],
+      "title": "CIBW_TEST_RUNTIME"
+    },
    "overrides": {
      "type": "array",
      "description": "An overrides array",
@@ -597,6 +664,12 @@
            "type": "object",
            "additionalProperties": false,
            "properties": {
+              "audit-command": {
+                "$ref": "#/$defs/inherit"
+              },
+              "audit-requires": {
+                "$ref": "#/$defs/inherit"
+              },
              "before-all": {
                "$ref": "#/$defs/inherit"
              },
@@ -638,9 +711,18 @@
              },
              "test-environment": {
                "$ref": "#/$defs/inherit"
+              },
+              "test-runtime": {
+                "$ref": "#/$defs/inherit"
              }
            }
          },
+          "audit-command": {
+            "$ref": "#/properties/audit-command"
+          },
+          "audit-requires": {
+            "$ref": "#/properties/audit-requires"
+          },
          "before-all": {
            "$ref": "#/properties/before-all"
          },
@@ -748,6 +830,9 @@
          },
          "test-environment": {
            "$ref": "#/properties/test-environment"
+          },
+          "test-runtime": {
+            "$ref": "#/properties/test-runtime"
          }
        }
      }
@@ -756,6 +841,12 @@
      "type": "object",
      "additionalProperties": false,
      "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
        "archs": {
          "$ref": "#/properties/archs"
        },
@@ -876,6 +967,9 @@
        },
        "test-environment": {
          "$ref": "#/properties/test-environment"
+        },
+        "test-runtime": {
+          "$ref": "#/properties/test-runtime"
        }
      }
    },
@@ -883,6 +977,12 @@
      "type": "object",
      "additionalProperties": false,
      "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
        "archs": {
          "$ref": "#/properties/archs"
        },
@@ -936,6 +1036,9 @@
        },
        "test-environment": {
          "$ref": "#/properties/test-environment"
+        },
+        "test-runtime": {
+          "$ref": "#/properties/test-runtime"
        }
      }
    },
@@ -943,6 +1046,12 @@
      "type": "object",
      "additionalProperties": false,
      "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
        "archs": {
          "$ref": "#/properties/archs"
        },
@@ -1009,6 +1118,9 @@
        },
        "test-environment": {
          "$ref": "#/properties/test-environment"
+        },
+        "test-runtime": {
+          "$ref": "#/properties/test-runtime"
        }
      }
    },
@@ -1016,6 +1128,12 @@
      "type": "object",
      "additionalProperties": false,
      "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
        "archs": {
          "$ref": "#/properties/archs"
        },
@@ -1069,6 +1187,78 @@
        },
        "test-environment": {
          "$ref": "#/properties/test-environment"
+        },
+        "test-runtime": {
+          "$ref": "#/properties/test-runtime"
+        }
+      }
+    },
+    "android": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
+        "archs": {
+          "$ref": "#/properties/archs"
+        },
+        "before-all": {
+          "$ref": "#/properties/before-all"
+        },
+        "before-build": {
+          "$ref": "#/properties/before-build"
+        },
+        "before-test": {
+          "$ref": "#/properties/before-test"
+        },
+        "build-frontend": {
+          "$ref": "#/properties/build-frontend"
+        },
+        "build-verbosity": {
+          "$ref": "#/properties/build-verbosity"
+        },
+        "config-settings": {
+          "$ref": "#/properties/config-settings"
+        },
+        "dependency-versions": {
+          "$ref": "#/properties/dependency-versions"
+        },
+        "environment": {
+          "$ref": "#/properties/environment"
+        },
+        "xbuild-tools": {
+          "$ref": "#/properties/xbuild-tools"
+        },
+        "pyodide-version": {
+          "$ref": "#/properties/pyodide-version"
+        },
+        "repair-wheel-command": {
+          "$ref": "#/properties/repair-wheel-command"
+        },
+        "test-command": {
+          "$ref": "#/properties/test-command"
+        },
+        "test-extras": {
+          "$ref": "#/properties/test-extras"
+        },
+        "test-sources": {
+          "$ref": "#/properties/test-sources"
+        },
+        "test-groups": {
+          "$ref": "#/properties/test-groups"
+        },
+        "test-requires": {
+          "$ref": "#/properties/test-requires"
+        },
+        "test-environment": {
+          "$ref": "#/properties/test-environment"
+        },
+        "test-runtime": {
+          "$ref": "#/properties/test-runtime"
        }
      }
    },
@@ -1076,6 +1266,12 @@
      "type": "object",
      "additionalProperties": false,
      "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
        "archs": {
          "$ref": "#/properties/archs"
        },
@@ -1129,6 +1325,9 @@
        },
        "test-environment": {
          "$ref": "#/properties/test-environment"
+        },
+        "test-runtime": {
+          "$ref": "#/properties/test-runtime"
        }
      }
    }
@@ -2,116 +2,90 @@
 #    nox -s update_constraints
 annotated-types==0.7.0
    # via pydantic
-anyio==4.9.0
-    # via httpx
-auditwheel-emscripten==0.1.0
+auditwheel-emscripten==0.2.4
    # via pyodide-build
-build==1.2.2.post1
+build==1.5.0
    # via
    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
    #   pyodide-build
-certifi==2025.4.26
-    # via
-    #   httpcore
-    #   httpx
-    #   requests
-charset-normalizer==3.4.2
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
    # via requests
 click==8.1.8
    # via
    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
-    #   typer
-distlib==0.3.9
+    #   pyodide-build
+    #   pyodide-cli
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-h11==0.16.0
-    # via httpcore
-httpcore==1.0.9
-    # via httpx
-httpx==0.28.1
-    # via unearth
-idna==3.10
+filelock==3.29.0
    # via
-    #   anyio
-    #   httpx
-    #   requests
-leb128==1.0.8
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via requests
+leb128==1.0.9
    # via auditwheel-emscripten
-markdown-it-py==3.0.0
+markdown-it-py==4.2.0
    # via rich
 mdurl==0.1.2
    # via markdown-it-py
-packaging==25.0
+packaging==26.2
    # via
    #   auditwheel-emscripten
    #   build
    #   pyodide-build
-    #   unearth
-pip==25.1.1
+    #   wheel
+pip==26.1.1
    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
-platformdirs==4.3.8
+platformdirs==4.9.6
    # via
    #   pyodide-build
+    #   python-discovery
    #   virtualenv
-pydantic==2.11.5
+pydantic==2.13.4
    # via
    #   pyodide-build
    #   pyodide-lock
-pydantic-core==2.33.2
+pydantic-core==2.46.4
    # via pydantic
-pygments==2.19.1
+pygments==2.20.0
    # via rich
-pyodide-build==0.30.4
+pyodide-build==0.34.3
    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
-pyodide-cli==0.3.0
+pyodide-cli==0.5.0
    # via
    #   auditwheel-emscripten
    #   pyodide-build
-pyodide-lock==0.1.0a7
+pyodide-lock==0.1.3
    # via pyodide-build
 pyproject-hooks==1.2.0
    # via build
-requests==2.32.3
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
    # via pyodide-build
-resolvelib==1.1.0
-    # via pyodide-build
-rich==14.0.0
+rich==15.0.0
    # via
    #   pyodide-build
    #   pyodide-cli
-    #   typer
-ruamel-yaml==0.18.12
+ruamel-yaml==0.19.1
    # via pyodide-build
-ruamel-yaml-clib==0.2.12
-    # via ruamel-yaml
-shellingham==1.5.4
-    # via typer
-sniffio==1.3.1
-    # via anyio
-typer==0.16.0
+typing-extensions==4.15.0
    # via
-    #   auditwheel-emscripten
-    #   pyodide-build
-    #   pyodide-cli
-typing-extensions==4.13.2
-    # via
-    #   anyio
    #   pydantic
    #   pydantic-core
-    #   typer
    #   typing-inspection
-typing-inspection==0.4.1
+typing-inspection==0.4.2
    # via pydantic
-unearth==0.17.5
-    # via pyodide-build
-urllib3==2.4.0
+urllib3==2.7.0
    # via requests
-virtualenv==20.31.2
+virtualenv==21.3.3
    # via
    #   build
    #   pyodide-build
-wheel==0.45.1
+wheel==0.47.0
    # via
    #   auditwheel-emscripten
    #   pyodide-build
@@ -0,0 +1,91 @@
+# This file was autogenerated by uv via the following command:
+#    nox -s update_constraints
+annotated-types==0.7.0
+    # via pydantic
+auditwheel-emscripten==0.2.4
+    # via pyodide-build
+build==1.5.0
+    # via
+    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
+    #   pyodide-build
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
+click==8.1.8
+    # via
+    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
+    #   pyodide-build
+    #   pyodide-cli
+distlib==0.4.0
+    # via virtualenv
+filelock==3.29.0
+    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via requests
+leb128==1.0.9
+    # via auditwheel-emscripten
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   auditwheel-emscripten
+    #   build
+    #   pyodide-build
+    #   wheel
+pip==26.1.1
+    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
+platformdirs==4.9.6
+    # via
+    #   pyodide-build
+    #   python-discovery
+    #   virtualenv
+pydantic==2.13.4
+    # via
+    #   pyodide-build
+    #   pyodide-lock
+pydantic-core==2.46.4
+    # via pydantic
+pygments==2.20.0
+    # via rich
+pyodide-build==0.34.3
+    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
+pyodide-cli==0.5.0
+    # via
+    #   auditwheel-emscripten
+    #   pyodide-build
+pyodide-lock==0.1.3
+    # via pyodide-build
+pyproject-hooks==1.2.0
+    # via build
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via pyodide-build
+rich==15.0.0
+    # via
+    #   pyodide-build
+    #   pyodide-cli
+ruamel-yaml==0.19.1
+    # via pyodide-build
+typing-extensions==4.15.0
+    # via
+    #   pydantic
+    #   pydantic-core
+    #   typing-inspection
+typing-inspection==0.4.2
+    # via pydantic
+urllib3==2.7.0
+    # via requests
+virtualenv==21.3.3
+    # via
+    #   build
+    #   pyodide-build
+wheel==0.47.0
+    # via
+    #   auditwheel-emscripten
+    #   pyodide-build
@@ -0,0 +1,91 @@
+# This file was autogenerated by uv via the following command:
+#    nox -s update_constraints
+annotated-types==0.7.0
+    # via pydantic
+auditwheel-emscripten==0.2.4
+    # via pyodide-build
+build==1.5.0
+    # via
+    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
+    #   pyodide-build
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
+click==8.1.8
+    # via
+    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
+    #   pyodide-build
+    #   pyodide-cli
+distlib==0.4.0
+    # via virtualenv
+filelock==3.29.0
+    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via requests
+leb128==1.0.9
+    # via auditwheel-emscripten
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   auditwheel-emscripten
+    #   build
+    #   pyodide-build
+    #   wheel
+pip==26.1.1
+    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
+platformdirs==4.9.6
+    # via
+    #   pyodide-build
+    #   python-discovery
+    #   virtualenv
+pydantic==2.13.4
+    # via
+    #   pyodide-build
+    #   pyodide-lock
+pydantic-core==2.46.4
+    # via pydantic
+pygments==2.20.0
+    # via rich
+pyodide-build==0.34.3
+    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
+pyodide-cli==0.5.0
+    # via
+    #   auditwheel-emscripten
+    #   pyodide-build
+pyodide-lock==0.1.3
+    # via pyodide-build
+pyproject-hooks==1.2.0
+    # via build
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via pyodide-build
+rich==15.0.0
+    # via
+    #   pyodide-build
+    #   pyodide-cli
+ruamel-yaml==0.19.1
+    # via pyodide-build
+typing-extensions==4.15.0
+    # via
+    #   pydantic
+    #   pydantic-core
+    #   typing-inspection
+typing-inspection==0.4.2
+    # via pydantic
+urllib3==2.7.0
+    # via requests
+virtualenv==21.3.3
+    # via
+    #   build
+    #   pyodide-build
+wheel==0.47.0
+    # via
+    #   auditwheel-emscripten
+    #   pyodide-build
@@ -1,34 +1,96 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
+abi3audit==0.0.26
    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-importlib-metadata==8.7.0
-    # via build
-macholib==1.16.3
-    # via delocate
-packaging==25.0
+exceptiongroup==1.3.1
+    # via cattrs
+filelock==3.29.0
    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+importlib-metadata==9.0.0
+    # via build
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
    #   build
    #   delocate
-pip==25.1.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.8
-    # via virtualenv
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
    # via build
-tomli==2.2.1
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+tomli==2.4.1
    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+    #   exceptiongroup
+    #   virtualenv
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
    # via -r cibuildwheel/resources/constraints.in
-zipp==3.22.0
+zipp==3.23.1
    # via importlib-metadata
@@ -1,28 +1,87 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
+abi3audit==0.0.26
    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-macholib==1.16.3
-    # via delocate
-packaging==25.0
+filelock==3.29.0
    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
    #   build
    #   delocate
-pip==25.1.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1; implementation_name != "graalpy" or platform_system != "Windows"
+pip==26.0.1; implementation_name == "graalpy" and platform_system == "Windows"
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.8
-    # via virtualenv
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
    # via -r cibuildwheel/resources/constraints.in
@@ -1,28 +1,87 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
+abi3audit==0.0.26
    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-macholib==1.16.3
-    # via delocate
-packaging==25.0
+filelock==3.29.0
    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
    #   build
    #   delocate
-pip==25.1.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1; implementation_name != "graalpy" or platform_system != "Windows"
+pip==26.0.1; implementation_name == "graalpy" and platform_system == "Windows"
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.8
-    # via virtualenv
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
    # via -r cibuildwheel/resources/constraints.in
@@ -1,28 +1,86 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
+abi3audit==0.0.26
    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-macholib==1.16.3
-    # via delocate
-packaging==25.0
+filelock==3.29.0
    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
    #   build
    #   delocate
-pip==25.1.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.8
-    # via virtualenv
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
    # via -r cibuildwheel/resources/constraints.in
@@ -1,28 +1,86 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
+abi3audit==0.0.26
    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-macholib==1.16.3
-    # via delocate
-packaging==25.0
+filelock==3.29.0
    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
    #   build
    #   delocate
-pip==25.1.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.8
-    # via virtualenv
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
    # via -r cibuildwheel/resources/constraints.in
@@ -0,0 +1,86 @@
+# This file was autogenerated by uv via the following command:
+#    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
+delocate==0.13.0
+    # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
+    # via virtualenv
+filelock==3.29.0
+    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
+    #   build
+    #   delocate
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
+    # via -r cibuildwheel/resources/constraints.in
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
+pyproject-hooks==1.2.0
+    # via build
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
+    # via -r cibuildwheel/resources/constraints.in
@@ -1,34 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
-    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
-    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
-    # via virtualenv
-filelock==3.16.1
-    # via virtualenv
-importlib-metadata==8.5.0
-    # via build
-macholib==1.16.3
-    # via delocate
-packaging==25.0
-    # via
-    #   build
-    #   delocate
-pip==25.0.1
-    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
-    # via virtualenv
-pyproject-hooks==1.2.0
-    # via build
-tomli==2.2.1
-    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
-    # via -r cibuildwheel/resources/constraints.in
-zipp==3.20.2
-    # via importlib-metadata
@@ -1,34 +1,96 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
+abi3audit==0.0.25
    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.4.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.4.4
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==25.3.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-importlib-metadata==8.7.0
+exceptiongroup==1.3.1
+    # via cattrs
+filelock==3.19.1
+    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+importlib-metadata==8.7.1
    # via build
-macholib==1.16.3
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
    # via delocate
+markdown-it-py==3.0.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
 packaging==25.0
    # via
+    #   abi3audit
    #   build
    #   delocate
-pip==25.1.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.0.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.8
-    # via virtualenv
+platformdirs==4.4.0
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
    # via build
-tomli==2.2.1
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.32.5
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.2.1
+    # via abi3audit
+rich==14.2.0
+    # via abi3audit
+tomli==2.4.1
    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+    #   exceptiongroup
+    #   virtualenv
+url-normalize==2.2.1
+    # via requests-cache
+urllib3==2.6.3
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
    # via -r cibuildwheel/resources/constraints.in
-zipp==3.22.0
+zipp==3.23.1
    # via importlib-metadata
@@ -1,4 +1,6 @@
 pip
 build
 delocate
+delvewheel
 virtualenv
+abi3audit
@@ -1,28 +1,86 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
-altgraph==0.17.4
-    # via macholib
-build==1.2.2.post1
+abi3audit==0.0.26
    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
    # via -r cibuildwheel/resources/constraints.in
-distlib==0.3.9
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
    # via virtualenv
-filelock==3.18.0
-    # via virtualenv
-macholib==1.16.3
-    # via delocate
-packaging==25.0
+filelock==3.29.0
    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
    #   build
    #   delocate
-pip==25.1.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.8
-    # via virtualenv
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
    # via build
-typing-extensions==4.13.2
-    # via delocate
-virtualenv==20.31.2
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
    # via -r cibuildwheel/resources/constraints.in
@@ -5,6 +5,8 @@ test-skip = ""
 enable = []

 archs = ["auto"]
+audit-requires = ["abi3audit"]
+audit-command = "abi3audit --strict --report {abi3_wheel}"
 build-frontend = "default"
 config-settings = {}
 dependency-versions = "pinned"
@@ -25,20 +27,21 @@ test-requires = []
 test-extras = []
 test-groups = []
 test-environment = {}
+test-runtime = {}

 container-engine = "docker"

 pyodide-version = ""

 manylinux-x86_64-image = "manylinux_2_28"
-manylinux-i686-image = "manylinux2014"
+manylinux-i686-image = "manylinux_2_28"
 manylinux-aarch64-image = "manylinux_2_28"
 manylinux-ppc64le-image = "manylinux_2_28"
 manylinux-s390x-image = "manylinux_2_28"
 manylinux-armv7l-image = "manylinux_2_31"
-manylinux-riscv64-image = "ghcr.io/pypa/cibuildwheel/no_default_image:please_use_override"
+manylinux-riscv64-image = "manylinux_2_39"
 manylinux-pypy_x86_64-image = "manylinux_2_28"
-manylinux-pypy_i686-image = "manylinux2014"
+manylinux-pypy_i686-image = "manylinux_2_28"
 manylinux-pypy_aarch64-image = "manylinux_2_28"

 musllinux-x86_64-image = "musllinux_1_2"
@@ -47,7 +50,7 @@ musllinux-aarch64-image = "musllinux_1_2"
 musllinux-ppc64le-image = "musllinux_1_2"
 musllinux-s390x-image = "musllinux_1_2"
 musllinux-armv7l-image = "musllinux_1_2"
-musllinux-riscv64-image = "ghcr.io/pypa/cibuildwheel/no_default_image:please_use_override"
+musllinux-riscv64-image = "musllinux_1_2"


 [tool.cibuildwheel.linux]
@@ -57,7 +60,11 @@ repair-wheel-command = "auditwheel repair -w {dest_dir} {wheel}"
 repair-wheel-command = "delocate-wheel --require-archs {delocate_archs} -w {dest_dir} -v {wheel}"

 [tool.cibuildwheel.windows]
+repair-wheel-command = "delvewheel repair -w {dest_dir} -v {wheel}"
+
+[tool.cibuildwheel.android]

 [tool.cibuildwheel.ios]

 [tool.cibuildwheel.pyodide]
+audit-command = ""
@@ -8,7 +8,7 @@
                <key>choiceAttribute</key>
                <string>selected</string>
                <key>choiceIdentifier</key>
-                <string>org.python.Python.PythonTFramework-3.13</string>
+                <string>org.python.Python.PythonTFramework-3.15</string>
        </dict>
 </array>
 </plist>
@@ -33,7 +33,7 @@ def main() -> None:
        [sys.executable, "-E", "-s", "-m", "pip", "install", "--upgrade", "certifi"]
    )

-    import certifi
+    import certifi  # noqa: PLC0415

    # change working directory to the default SSL directory
    os.chdir(openssl_dir)
@@ -1,3 +1,4 @@
 url = "https://nodejs.org/dist/"
-v22 = "v22.16.0"
-v20 = "v20.19.2"
+v24 = "v24.15.0"
+v22 = "v22.22.2"
+v20 = "v20.20.2"
@@ -1,47 +1,54 @@
 [x86_64]
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.05.31-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.05.28-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2025.05.31-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2026.05.07-2

 [i686]
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.05.31-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2026.05.07-2

 [aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.05.31-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.05.28-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2025.05.31-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2026.05.07-2

 [ppc64le]
-manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2025.05.31-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2025.05.28-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_ppc64le:2025.05.31-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_ppc64le:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2026.05.07-2

 [s390x]
-manylinux2014 = quay.io/pypa/manylinux2014_s390x:2025.05.31-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2025.05.28-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_s390x:2025.05.31-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_s390x:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_s390x:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2026.05.07-2

 [pypy_x86_64]
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2025.05.31-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2025.05.28-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2026.05.07-2

 [pypy_i686]
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2026.05.07-2

 [pypy_aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2025.05.31-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2025.05.28-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2025.05.31-1
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2026.05.07-2

 [armv7l]
-manylinux_2_31 = quay.io/pypa/manylinux_2_31_armv7l:2025.05.31-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2025.05.31-1
+manylinux_2_31 = quay.io/pypa/manylinux_2_31_armv7l:2026.05.07-2
+manylinux_2_35 = quay.io/pypa/manylinux_2_35_armv7l:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2026.05.07-2

 [riscv64]
+manylinux_2_39 = quay.io/pypa/manylinux_2_39_riscv64:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_riscv64:2026.05.07-2

@@ -1,439 +1,723 @@
 {
  "releases": [
    {
-      "tag": "20250529",
+      "tag": "20260408",
      "assets": [
        {
-          "name": "cpython-3.10.17+20250529-aarch64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-aarch64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-aarch64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-aarch64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-aarch64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-aarch64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-aarch64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-aarch64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-aarch64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-aarch64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-i686-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-i686-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-i686-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-i686-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-riscv64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-riscv64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-s390x-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-s390x-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-riscv64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-riscv64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-s390x-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-s390x-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.10.17+20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.10.17%2B20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-aarch64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-aarch64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.10.20+20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.10.20%2B20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-aarch64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-aarch64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-aarch64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-aarch64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-aarch64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-aarch64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-aarch64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-aarch64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-i686-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-i686-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-aarch64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-aarch64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-riscv64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-riscv64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-s390x-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-s390x-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-i686-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-i686-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-riscv64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-riscv64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-s390x-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-s390x-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.11.12+20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.11.12%2B20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-aarch64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-aarch64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-aarch64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-aarch64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+          "name": "cpython-3.11.15+20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.11.15%2B20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-aarch64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-aarch64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-i686-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-i686-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-aarch64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-aarch64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-riscv64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-riscv64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-aarch64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-aarch64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-aarch64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-aarch64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-i686-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-i686-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-riscv64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-riscv64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-s390x-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-s390x-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-aarch64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-aarch64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-aarch64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-aarch64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-i686-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-i686-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-riscv64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-riscv64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-s390x-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-s390x-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.12.13+20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.12.13%2B20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-apple-darwin-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-apple-darwin-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-pc-windows-msvc-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-unknown-linux-musl-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-aarch64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-aarch64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-armv7-unknown-linux-gnueabi-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-armv7-unknown-linux-gnueabi-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.13.3+20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.13.3%2B20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-aarch64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-aarch64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-armv7-unknown-linux-gnueabihf-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-armv7-unknown-linux-gnueabihf-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-aarch64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-aarch64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-i686-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-i686-pc-windows-msvc-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-i686-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-i686-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-i686-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-i686-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-ppc64le-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-ppc64le-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-riscv64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-riscv64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-riscv64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-riscv64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-s390x-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-s390x-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-riscv64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-riscv64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-s390x-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-s390x-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-s390x-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-s390x-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-apple-darwin-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-apple-darwin-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-pc-windows-msvc-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-s390x-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-s390x-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-unknown-linux-musl-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v2-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v2-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.12.10+20250529-x86_64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.12.10%2B20250529-x86_64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.14.0a7+20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.14.0a7%2B20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v2-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v2-unknown-linux-musl-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-aarch64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-aarch64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-aarch64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-aarch64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v3-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v3-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v3-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v3-unknown-linux-musl-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-i686-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-i686-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v4-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v4-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-riscv64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-riscv64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-s390x-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-s390x-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v4-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v4-unknown-linux-musl-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64-apple-darwin-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64-apple-darwin-install_only.tar.gz"
+          "name": "cpython-3.13.13+20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.13.13%2B20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64-pc-windows-msvc-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64-pc-windows-msvc-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-apple-darwin-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-apple-darwin-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-apple-darwin-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-pc-windows-msvc-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-pc-windows-msvc-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-unknown-linux-gnu-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-unknown-linux-musl-freethreaded-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-aarch64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-aarch64-unknown-linux-musl-install_only.tar.gz"
        },
        {
-          "name": "cpython-3.9.22+20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
-          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20250529/cpython-3.9.22%2B20250529-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
+          "name": "cpython-3.14.4+20260408-armv7-unknown-linux-gnueabi-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-armv7-unknown-linux-gnueabi-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-armv7-unknown-linux-gnueabihf-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-armv7-unknown-linux-gnueabihf-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-i686-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-i686-pc-windows-msvc-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-i686-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-i686-pc-windows-msvc-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-ppc64le-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-ppc64le-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-riscv64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-riscv64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-riscv64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-riscv64-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-s390x-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-s390x-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-s390x-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-s390x-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-apple-darwin-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-apple-darwin-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-apple-darwin-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-pc-windows-msvc-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-pc-windows-msvc-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v2-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v2-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v2-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v2-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v3-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v3-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v3-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v3-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v4-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v4-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v4-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v4-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.14.4+20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.14.4%2B20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-apple-darwin-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-apple-darwin-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-apple-darwin-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-pc-windows-msvc-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-pc-windows-msvc-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-aarch64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-aarch64-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-armv7-unknown-linux-gnueabi-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-armv7-unknown-linux-gnueabi-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-armv7-unknown-linux-gnueabi-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-armv7-unknown-linux-gnueabihf-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-armv7-unknown-linux-gnueabihf-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-armv7-unknown-linux-gnueabihf-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-i686-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-i686-pc-windows-msvc-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-i686-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-i686-pc-windows-msvc-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-ppc64le-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-ppc64le-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-ppc64le-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-riscv64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-riscv64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-riscv64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-riscv64-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-s390x-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-s390x-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-s390x-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-s390x-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-apple-darwin-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-apple-darwin-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-apple-darwin-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-apple-darwin-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-pc-windows-msvc-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-pc-windows-msvc-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-pc-windows-msvc-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-pc-windows-msvc-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v2-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v2-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v2-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v2-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v2-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v2-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v3-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v3-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v3-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v3-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v3-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v3-unknown-linux-musl-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v4-unknown-linux-gnu-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v4-unknown-linux-gnu-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v4-unknown-linux-gnu-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v4-unknown-linux-musl-freethreaded-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v4-unknown-linux-musl-freethreaded-install_only.tar.gz"
+        },
+        {
+          "name": "cpython-3.15.0a8+20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz",
+          "url": "https://github.com/astral-sh/python-build-standalone/releases/download/20260408/cpython-3.15.0a8%2B20260408-x86_64_v4-unknown-linux-musl-install_only.tar.gz"
        }
      ]
    }
@@ -8,11 +8,11 @@ from typing import NoReturn

 class TestStringMethods(unittest.TestCase):
    def test_fail(self) -> NoReturn:
-        if sys.platform == "ios":
+        if sys.platform in ["android", "ios"]:
            msg = (
                "You tried to run tests from the testbed app's working "
                "directory, without specifying `test-sources`. "
-                "On iOS, you must copy your test files to the testbed app by "
+                "On this platform, you must copy your test files to the testbed app by "
                "setting the `test-sources` option in your cibuildwheel "
                "configuration."
            )
@@ -1 +1 @@
-default = { version = "20.31.2", url = "https://github.com/pypa/get-virtualenv/blob/20.31.2/public/virtualenv.pyz?raw=true" }
+default = { version = "21.3.1", url = "https://github.com/pypa/get-virtualenv/releases/download/21.3.1/virtualenv.pyz" }
@@ -1,7 +1,7 @@
 import json
 from typing import Any

-from .util import resources
+from cibuildwheel.util import resources


 def get_schema(tool_name: str = "cibuildwheel") -> dict[str, Any]:
@@ -2,7 +2,7 @@ import dataclasses
 import itertools
 from enum import StrEnum
 from fnmatch import fnmatch
-from typing import Any
+from typing import Self

 import bracex
 from packaging.specifiers import SpecifierSet
@@ -29,20 +29,19 @@ class EnableGroup(StrEnum):
    Groups of build selectors that are not enabled by default.
    """

-    CPythonExperimentalRiscV64 = "cpython-experimental-riscv64"
-    CPythonFreeThreading = "cpython-freethreading"
    CPythonPrerelease = "cpython-prerelease"
    GraalPy = "graalpy"
    PyPy = "pypy"
    PyPyEoL = "pypy-eol"
+    PyodideEoL = "pyodide-eol"
    PyodidePrerelease = "pyodide-prerelease"

    @classmethod
-    def all_groups(cls) -> frozenset["EnableGroup"]:
+    def all_groups(cls) -> frozenset[Self]:
        return frozenset(cls)

    @classmethod
-    def parse_option_value(cls, value: str) -> frozenset["EnableGroup"]:
+    def parse_option_value(cls, value: str) -> frozenset[Self]:
        """
        Parses a string of space-separated values into a set of EnableGroup
        members. The string may contain group names or "all".
@@ -76,7 +75,7 @@ class BuildSelector:
    def __call__(self, build_id: str) -> bool:
        # Filter build selectors by python_requires if set
        if self.requires_python is not None:
-            py_ver_str = build_id.split("-")[0].split("_")[0]
+            py_ver_str = build_id.split("-", maxsplit=1)[0].split("_", maxsplit=1)[0]
            py_ver_str = py_ver_str.removesuffix("t")
            major = int(py_ver_str[2])
            minor = int(py_ver_str[3:])
@@ -85,22 +84,29 @@ class BuildSelector:
                return False

        # filter out groups that are not enabled
-        if EnableGroup.CPythonFreeThreading not in self.enable and fnmatch(build_id, "cp3??t-*"):
+        if EnableGroup.CPythonPrerelease not in self.enable and fnmatch(build_id, "cp315*"):
            return False
-        if EnableGroup.CPythonPrerelease not in self.enable and fnmatch(build_id, "cp314*"):
+        is_pypy_eol = fnmatch(build_id, "pp3?-*") or fnmatch(build_id, "pp310-*")
+        is_pypy = fnmatch(build_id, "pp*") and not is_pypy_eol
+        if EnableGroup.PyPy not in self.enable and is_pypy:
            return False
-        if EnableGroup.PyPy not in self.enable and fnmatch(build_id, "pp31*"):
-            return False
-        if EnableGroup.PyPyEoL not in self.enable and fnmatch(build_id, "pp3?-*"):
-            return False
-        if EnableGroup.CPythonExperimentalRiscV64 not in self.enable and fnmatch(
-            build_id, "*_riscv64"
-        ):
+        if EnableGroup.PyPyEoL not in self.enable and is_pypy_eol:
            return False
        if EnableGroup.GraalPy not in self.enable and fnmatch(build_id, "gp*"):
            return False
+        if EnableGroup.PyodideEoL not in self.enable and fnmatch(build_id, "cp312-pyodide_*"):
+            return False
+        # NOTE: Disable this when we don't have any Pyodide prereleases (e.g., 314.0.0a1+)
+        # When doing this, also:
+        #   1. update Pyodide tests in unit_test/build_selector_test.py and unit_test/options_test.py accordingly.
+        #   2. update Python versions for Pyodide identifiers in cibuildwheel/selector.py.
+        #   3. update constraints as necessary via bin/generate_pyodide_constraints.py and add/delete
+        #      Pyodide constraints files in cibuildwheel/resources/constraints/ as necessary.
+        # When disabling, update the pattern to match the experimental Python version in case
+        # it is bumped to Python 3.15 (likely cp315-pyodide_* but could remain as 3.14 as well).
+        # This depends on the CPython version being used in the Pyodide runtime at the time.
        if EnableGroup.PyodidePrerelease not in self.enable and fnmatch(
-            build_id, "cp313-pyodide_*"
+            build_id, "cp314-pyodide_*"
        ):
            return False

@@ -109,7 +115,7 @@ class BuildSelector:

        return should_build and not should_skip

-    def options_summary(self) -> Any:
+    def options_summary(self) -> dict[str, str | list[str]]:
        return {
            "build_config": self.build_config,
            "skip_config": self.skip_config,
@@ -130,5 +136,5 @@ class TestSelector:
        should_skip = selector_matches(self.skip_config, build_id)
        return not should_skip

-    def options_summary(self) -> Any:
+    def options_summary(self) -> dict[str, str]:
        return {"skip_config": self.skip_config}
@@ -12,7 +12,7 @@ __all__ = (
 PathOrStr = str | os.PathLike[str]


-PlatformName = Literal["linux", "macos", "windows", "pyodide", "ios"]
+PlatformName = Literal["linux", "macos", "windows", "pyodide", "android", "ios"]
 PLATFORMS: Final[frozenset[PlatformName]] = frozenset(typing.get_args(PlatformName))


@@ -7,8 +7,8 @@ import typing
 from collections.abc import Iterator, Mapping
 from typing import Final, Literal

-from ..errors import FatalError
-from ..typing import PathOrStr
+from cibuildwheel.errors import FatalError
+from cibuildwheel.typing import PathOrStr

 _IS_WIN: Final[bool] = sys.platform.startswith("win")

@@ -72,7 +72,7 @@ def call(
    if not capture_stdout:
        return None
    sys.stderr.write(result.stderr)
-    return typing.cast(str, result.stdout)
+    return typing.cast("str", result.stdout)


 def shell(
@@ -12,7 +12,7 @@ from zipfile import ZipFile
 import certifi
 from platformdirs import user_cache_path

-from ..errors import FatalError
+from cibuildwheel.errors import FatalError

 DEFAULT_CIBW_CACHE_PATH: Final[Path] = user_cache_path(appname="cibuildwheel", appauthor="pypa")
 CIBW_CACHE_PATH: Final[Path] = Path(
@@ -20,6 +20,26 @@ CIBW_CACHE_PATH: Final[Path] = Path(
 ).resolve()


+def ensure_cache_sentinel(cache_path: Path) -> None:
+    """Create a sentinel file to mark a cibuildwheel cache directory.
+
+    We help prevent accidental deletion of non-cache directories with this.
+
+    Args:
+        cache_path: The cache directory path where the sentinel should be created
+    """
+    if cache_path.exists():
+        sentinel_file = cache_path / "CACHEDIR.TAG"
+        if not sentinel_file.exists():
+            sentinel_file.write_text(
+                "Signature: 8a477f597d28d172789f06886806bc55\n"
+                "# This file is a cache directory tag created by cibuildwheel.\n"
+                "# For information about cache directory tags, see:\n"
+                "# https://www.brynosaurus.com/cachedir/",
+                encoding="utf-8",
+            )
+
+
 def download(url: str, dest: Path) -> None:
    print(f"+ Download {url} to {dest}")
    dest_dir = dest.parent
@@ -1,3 +1,4 @@
+import dataclasses
 import itertools
 import os
 import re
@@ -5,9 +6,8 @@ import shlex
 import textwrap
 from collections import defaultdict
 from collections.abc import Sequence
-from functools import total_ordering

-from ..typing import PathOrStr
+from cibuildwheel.typing import PathOrStr


 def format_safe(template: str, **kwargs: str | os.PathLike[str]) -> str:
@@ -20,8 +20,8 @@ def format_safe(template: str, **kwargs: str | os.PathLike[str]) -> str:
    >>> format_safe('{a} {b[4]:3f}', a='123')
    '123 {b[4]:3f}'

-    To avoid variable expansion, precede with a single backslash e.g.
-    >>> format_safe('\\{a} {b}', a='123')
+    To avoid variable expansion, precede with a single hash e.g.
+    >>> format_safe('#{a} {b}', a='123')
    '{a} {b}'
    """

@@ -140,19 +140,17 @@ def parse_key_value_string(
    return dict(result)


-@total_ordering
+@dataclasses.dataclass(order=True)
 class FlexibleVersion:
-    version_str: str
-    version_parts: tuple[int, ...]
-    suffix: str
-
-    def __init__(self, version_str: str) -> None:
-        self.version_str = version_str
+    version_parts: tuple[int, ...] = dataclasses.field(init=False, repr=False)
+    suffix: str = dataclasses.field(init=False, repr=False)
+    version_str: str = dataclasses.field(compare=False)

+    def __post_init__(self) -> None:
        # Split into numeric parts and the optional suffix
-        match = re.match(r"^[v]?(\d+(\.\d+)*)(.*)$", version_str)
+        match = re.match(r"^[v]?(\d+(\.\d+)*)(.*)$", self.version_str)
        if not match:
-            msg = f"Invalid version string: {version_str}"
+            msg = f"Invalid version string: {self.version_str}"
            raise ValueError(msg)

        version_part, _, suffix = match.groups()
@@ -172,18 +170,5 @@ class FlexibleVersion:
            parts = parts[:-1]
        return parts

-    def __eq__(self, other: object) -> bool:
-        if not isinstance(other, FlexibleVersion):
-            raise NotImplementedError()
-        return (self.version_parts, self.suffix) == (other.version_parts, other.suffix)
-
-    def __lt__(self, other: object) -> bool:
-        if not isinstance(other, FlexibleVersion):
-            raise NotImplementedError()
-        return (self.version_parts, self.suffix) < (other.version_parts, other.suffix)
-
-    def __repr__(self) -> str:
-        return f"FlexibleVersion('{self.version_str}')"
-
    def __str__(self) -> str:
        return self.version_str
@@ -1,14 +1,14 @@
 import shlex
-from collections.abc import Mapping, MutableMapping, Sequence
+from collections.abc import Mapping, Sequence
 from dataclasses import dataclass, field
 from pathlib import Path, PurePath
-from typing import Any, Literal, Self, TypeVar
+from typing import Literal, Self, TypeVar

 from packaging.utils import parse_wheel_filename

-from . import resources
-from .cmd import call
-from .helpers import parse_key_value_string, unwrap
+from cibuildwheel.util import resources
+from cibuildwheel.util.cmd import call
+from cibuildwheel.util.helpers import parse_key_value_string, unwrap


@dataclass(kw_only=True)
@@ -102,7 +102,7 @@ class DependencyConstraints:

        return None

-    def options_summary(self) -> Any:
+    def options_summary(self) -> str | dict[str, str]:
        if self == DependencyConstraints.pinned():
            return "pinned"
        elif self.packages:
@@ -158,9 +158,9 @@ def find_compatible_wheel(wheels: Sequence[T], identifier: str) -> T | None:
                # If a minor version number is given, it has to be lower than the current one.
                continue

-            if platform.startswith(("manylinux", "musllinux", "macosx", "ios")):
-                # Linux, macOS, and iOS require the beginning and ending match
-                # (macos/manylinux/iOS version number doesn't need to match)
+            if platform.startswith(("manylinux", "musllinux", "macosx", "android", "ios")):
+                # On these platforms the wheel tag includes a platform version number, which we
+                # should ignore.
                os_, arch = platform.split("_", 1)
                if not tag.platform.startswith(os_):
                    continue
@@ -169,10 +169,9 @@ def find_compatible_wheel(wheels: Sequence[T], identifier: str) -> T | None:
            elif platform.startswith("pyodide"):
                # each Pyodide version has its own platform tag
                continue
-            else:
-                # Windows should exactly match
-                if tag.platform != platform:
-                    continue
+            # Windows should exactly match
+            elif tag.platform != platform:
+                continue

            # If all the filters above pass, then the wheel is a previously built compatible wheel.
            return wheel
@@ -180,28 +179,7 @@ def find_compatible_wheel(wheels: Sequence[T], identifier: str) -> T | None:
    return None


-def combine_constraints(
-    env: MutableMapping[str, str], /, constraints_path: Path, tmp_dir: Path | None
-) -> None:
-    """
-    This will workaround a bug in pip<=21.1.1 or uv<=0.2.0 if a tmp_dir is given.
-    If set to None, this will use the modern URI method.
-    """
-
-    if tmp_dir:
-        if " " in str(constraints_path):
-            assert " " not in str(tmp_dir)
-            tmp_file = tmp_dir / "constraints.txt"
-            tmp_file.write_bytes(constraints_path.read_bytes())
-            constraints_path = tmp_file
-        our_constraints = str(constraints_path)
-    else:
-        our_constraints = (
-            constraints_path.as_uri() if " " in str(constraints_path) else str(constraints_path)
-        )
-
-    user_constraints = env.get("PIP_CONSTRAINT")
-
-    env["UV_CONSTRAINT"] = env["PIP_CONSTRAINT"] = " ".join(
-        c for c in [our_constraints, user_constraints] if c
-    )
+def is_abi3_wheel(wheel_name: str) -> bool:
+    """Check if a wheel uses the abi3 stable ABI based on its filename."""
+    _, _, _, tags = parse_wheel_filename(wheel_name)
+    return any(tag.abi == "abi3" for tag in tags)
@@ -28,7 +28,7 @@ class PythonBuildStandaloneReleaseData(typing.TypedDict):
@functools.cache
 def get_python_build_standalone_release_data() -> PythonBuildStandaloneReleaseData:
    with open(PYTHON_BUILD_STANDALONE_RELEASES, "rb") as f:
-        return typing.cast(PythonBuildStandaloneReleaseData, json.load(f))
+        return typing.cast("PythonBuildStandaloneReleaseData", json.load(f))


 class PythonBuildStandaloneError(Exception):
@@ -3,12 +3,12 @@ import tomllib
 from pathlib import Path
 from typing import Final

-from ..typing import PlatformName
+from cibuildwheel.typing import PlatformName

 PATH: Final[Path] = Path(__file__).parent.parent / "resources"
 INSTALL_CERTIFI_SCRIPT: Final[Path] = PATH / "install_certifi.py"
-FREE_THREAD_ENABLE_313: Final[Path] = PATH / "free-threaded-enable-313.xml"
 FREE_THREAD_ENABLE_314: Final[Path] = PATH / "free-threaded-enable-314.xml"
+FREE_THREAD_ENABLE_315: Final[Path] = PATH / "free-threaded-enable-315.xml"
 NODEJS: Final[Path] = PATH / "nodejs.toml"
 DEFAULTS: Final[Path] = PATH / "defaults.toml"
 PINNED_DOCKER_IMAGES: Final[Path] = PATH / "pinned_docker_images.cfg"
@@ -22,8 +22,11 @@ TEST_FAIL_CWD_FILE: Final[Path] = PATH / "testing_temp_dir_file.py"

 # this value is cached because it's used a lot in unit tests
@functools.cache
-def read_python_configs(config: PlatformName) -> list[dict[str, str]]:
+def read_all_configs() -> dict[str, list[dict[str, str]]]:
    with BUILD_PLATFORMS.open("rb") as f:
        loaded_file = tomllib.load(f)
-    results: list[dict[str, str]] = list(loaded_file[config]["python_configurations"])
-    return results
+    return {k: list[dict[str, str]](v["python_configurations"]) for k, v in loaded_file.items()}
+
+
+def read_python_configs(config: PlatformName) -> list[dict[str, str]]:
+    return read_all_configs()[config]
@@ -6,19 +6,38 @@ import sys
 import tomllib
 from collections.abc import Sequence
 from pathlib import Path
-from typing import Final
+from typing import Final, cast

 from filelock import FileLock
+from packaging.markers import default_environment
 from packaging.requirements import InvalidRequirement, Requirement
 from packaging.version import Version

-from .util import resources
-from .util.cmd import call
-from .util.file import CIBW_CACHE_PATH, download
+from cibuildwheel.util import resources
+from cibuildwheel.util.cmd import call
+from cibuildwheel.util.file import CIBW_CACHE_PATH, download

 _IS_WIN: Final[bool] = sys.platform.startswith("win")


+def target_marker_env(
+    *,
+    implementation_id: str,
+) -> dict[str, str]:
+    """
+    Build a PEP 508 marker environment dict for the target Python,
+    overriding the host's values with the target implementation info.
+    """
+    env = cast("dict[str, str]", default_environment())
+    if implementation_id.startswith("gp"):
+        env["implementation_name"] = "graalpy"
+        env["platform_python_implementation"] = "GraalPy"
+    elif implementation_id.startswith("pp"):
+        env["implementation_name"] = "pypy"
+        env["platform_python_implementation"] = "PyPy"
+    return env
+
+
@functools.cache
 def _ensure_virtualenv(version: str) -> tuple[Path, Version]:
    version_parts = version.split(".")
@@ -47,6 +66,7 @@ def constraint_flags(

 def _parse_pip_constraint_for_virtualenv(
    constraint_path: Path | None,
+    marker_env: dict[str, str] | None = None,
 ) -> str:
    """
    Parses the constraints file referenced by `dependency_constraint_flags` and returns a dict where
@@ -56,7 +76,12 @@ def _parse_pip_constraint_for_virtualenv(
    The function does not try to be too smart and just handles basic constraints.
    If it can't get an exact version, the real constraint will be handled by the
    {macos|windows}.setup_python function.
+    If marker_env is provided, marker-bearing constraints are evaluated against it;
+    otherwise, marker-bearing constraints are skipped.
    """
+    env: dict[str, str] = (
+        marker_env if marker_env is not None else cast("dict[str, str]", default_environment())
+    )
    if constraint_path:
        assert constraint_path.exists()
        with constraint_path.open(encoding="utf-8") as constraint_file:
@@ -72,11 +97,12 @@ def _parse_pip_constraint_for_virtualenv(
                    if (
                        package != "pip"
                        or requirement.url is not None
-                        or requirement.marker is not None
                        or len(requirement.extras) != 0
                        or len(requirement.specifier) != 1
                    ):
                        continue
+                    if requirement.marker is not None and not requirement.marker.evaluate(env):
+                        continue
                    specifier = next(iter(requirement.specifier))
                    if specifier.operator != "==":
                        continue
@@ -95,6 +121,7 @@ def virtualenv(
    use_uv: bool,
    env: dict[str, str] | None = None,
    pip_version: str | None = None,
+    marker_env: dict[str, str] | None = None,
 ) -> dict[str, str]:
    """
    Create a virtual environment. If `use_uv` is True,
@@ -108,11 +135,13 @@ def virtualenv(
    assert python.exists()

    if use_uv:
-        call("uv", "venv", venv_path, "--python", python)
+        uv_path = find_uv()
+        assert uv_path is not None
+        call(uv_path, "venv", venv_path, "--python", python)
    else:
        virtualenv_app, virtualenv_version = _ensure_virtualenv(version)
        if pip_version is None:
-            pip_version = _parse_pip_constraint_for_virtualenv(dependency_constraint)
+            pip_version = _parse_pip_constraint_for_virtualenv(dependency_constraint, marker_env)
        additional_flags = [f"--pip={pip_version}", "--no-setuptools"]
        if virtualenv_version < Version("20.31") or Version(version) < Version("3.9"):
            additional_flags.append("--no-wheel")
@@ -137,12 +166,11 @@ def virtualenv(
            python,
            venv_path,
        )
-    paths = [str(venv_path), str(venv_path / "Scripts")] if _IS_WIN else [str(venv_path / "bin")]
-    venv_env = os.environ.copy() if env is None else env.copy()
-    venv_env["PATH"] = os.pathsep.join([*paths, venv_env["PATH"]])
-    venv_env["VIRTUAL_ENV"] = str(venv_path)
+    venv_env = activate_virtualenv(venv_path, env=env)
    if not use_uv and pip_version == "embed":
        call(
+            "python",
+            "-m",
            "pip",
            "install",
            "--upgrade",
@@ -154,11 +182,24 @@ def virtualenv(
    return venv_env


+def activate_virtualenv(
+    venv_path: Path,
+    env: dict[str, str] | None = None,
+) -> dict[str, str]:
+    """
+    Return a copy of the environment with the virtualenv at `venv_path` activated.
+    """
+    paths = [str(venv_path), str(venv_path / "Scripts")] if _IS_WIN else [str(venv_path / "bin")]
+    venv_env = os.environ.copy() if env is None else env.copy()
+    venv_env["PATH"] = os.pathsep.join([*paths, venv_env["PATH"]])
+    venv_env["VIRTUAL_ENV"] = str(venv_path)
+    return venv_env
+
+
 def find_uv() -> Path | None:
    # Prefer uv in our environment
    with contextlib.suppress(ImportError, FileNotFoundError):
-        # pylint: disable-next=import-outside-toplevel
-        from uv import find_uv_bin
+        from uv import find_uv_bin  # noqa: PLC0415

        return Path(find_uv_bin())

@@ -0,0 +1,113 @@
+# Maintaining Pyodide support
+
+Last updated: May 2026
+
+This page describes how to update cibuildwheel's Pyodide platform code when either:
+
+- a new Pyodide alpha release arrives with support for a new [PyEmscripten Platform](https://pyodide.org/en/latest/development/abi.html) (which is tied to updates in Emscripten and CPython versions, compiler/linker flags, and so on), or
+- when that alpha release graduates to a stable one.
+
+## Background
+
+Pyodide has three types of releases that matter to cibuildwheel:
+
+- **Stable** – the most recent full Pyodide release (e.g., `0.29.x` / cp313). This is enabled by default with no special `CIBW_ENABLE` flag needed.
+- **Prerelease** – an alpha/beta/rc Pyodide release that uses the _next_ CPython version (e.g., `314.0.0a1` / cp314). Users must opt in with `CIBW_ENABLE: pyodide-prerelease` to build against this version. This may or may not be available at any given time, depending on the Pyodide release cycle.
+- **End-of-life (EoL)** – older Pyodide stable releases that are no longer the current stable. These are kept available behind `CIBW_ENABLE: pyodide-eol` so that users who still need to build for older Pyodide versions can do so.
+
+The guards in `cibuildwheel/selector.py` enforce this distinction. The constraints files under `cibuildwheel/resources/` pin the exact tool versions that go with each build.
+
+---
+
+## When a new Pyodide prerelease becomes available
+
+For example, consider a scenario when Pyodide ships a new `315.0.0a1` with cp315 support.
+
+### 1. Add the new Python configuration
+
+In `cibuildwheel/resources/build-platforms.toml`, add an entry under `[pyodide]`:
+
+```toml
+{ identifier = "cp315-pyodide_wasm32", version = "3.15", default_pyodide_version = "315.0.0a1", node_version = "v24" },
+```
+
+`version` is the CPython version string, `default_pyodide_version` is the Pyodide release to use when the user does not pin one explicitly (use the latest available alpha/beta for a prerelease entry), and `node_version` is the minimum Node.js major required by that Pyodide release — check the [pyodide-build FAQ](https://pyodide-build.readthedocs.io/en/latest/faq.html#what-node-js-version-do-i-need) for a rudimentary idea of what the correct value is.
+
+### 2. Update the prerelease guards in the selector
+
+In `cibuildwheel/selector.py`, update the patterns in the `PyodidePrerelease` guards to match the new identifier:
+
+```python
+if EnableGroup.PyodidePrerelease not in self.enable and fnmatch(
+    build_id, "cp315-pyodide_*"
+):
+    return False
+```
+
+### 3. Generate and pin a constraints file
+
+Run the `update_constraints` `nox` session, which reads `build-platforms.toml` and regenerates all Pyodide constraints files automatically:
+
+```bash
+nox -s update_constraints
+```
+
+### 4. Update tests
+
+Update the unit tests so the new identifier is accepted by the selector with `PyodidePrerelease` enabled and rejected without it. Pyodide-specific integration tests may also need their hardcoded expected-wheel lists extended.
+
+## When a Pyodide prerelease becomes stable
+
+Pyodide uses a versioning scheme where the stable release for a given CPython version is named `[PythonMajorMinor].0.0`, so the first stable release shipping cp314 will be **`314.0.0`**. See [pyodide/pyodide#6084](https://github.com/pyodide/pyodide/issues/6084) for a rationale of this versioning scheme.
+
+### 1. Update the stable entries, and remove (or replace) the prerelease entry
+
+In `build-platforms.toml`, update the former prerelease entry's `default_pyodide_version` to the new stable release (e.g. `314.0.0`) and remove the prerelease marker from the identifier if present. Remove previous prerelease entries if they are now obsolete, or update them to the next prerelease if one is available. Move the previous stable version behind `pyodide-eol` rather than dropping it outright (see below).
+
+### 2. Disable or update the prerelease guards
+
+In `selector.py`:
+
+- **If a new prerelease is available**: update the `fnmatch` pattern to the next identifier (e.g. `cp315-pyodide_*`) as described above.
+- **If there is no new prerelease**: comment out the `PyodidePrerelease` logic.
+
+### 3. Update the constraints file
+
+Run `nox -s update_constraints` to regenerate the constraints file for the newly stable version. If the entry was already in `build-platforms.toml` as a prerelease, its constraints file already exists, and this step just refreshes it against the stable Pyodide release and updates the dependencies' versions.
+
+### 4. Update tests
+
+Update the unit tests so the newly stable identifier is accepted by the selector without needing `PyodidePrerelease` in the enable set. Pyodide-specific integration tests may also need their hardcoded expected-wheel lists extended.
+
+## When an old Pyodide version is to be moved to end-of-life
+
+When a Pyodide version is superseded by a new stable release, move it behind the `pyodide-eol` enable flag. We want to allow users who still build for older Pyodide ABIs time to upgrade.
+
+### 1. Add the `pyodide-eol` guard in the selector
+
+In `cibuildwheel/selector.py`, add (or update) the `PyodideEoL` guard to include the old identifier:
+
+```python
+if EnableGroup.PyodideEoL not in self.enable and fnmatch(build_id, "cp312-pyodide_*"):
+    return False
+```
+
+### 2. Update tests
+
+Update the unit tests so the EoL identifier requires `PyodideEoL` to be included in the enable set. The default (no `CIBW_ENABLE`) should exclude it.
+
+## When an old Pyodide version is to be fully retired
+
+Retirement is not expected to happen on a routine basis. It is only warranted when the Pyodide ecosystem itself has evolved to the point where an older ABI version is considered obsolete – for example, if the surrounding toolchain, packaging standards, or runtime infrastructure have moved on so substantially that building for the older version no longer makes practical sense. Any retirement is to be discussed and agreed upon by Pyodide maintainers before proceeding.
+
+### 1. Remove the Python configuration
+
+Delete the entry from `build-platforms.toml` and remove the `PyodideEoL` guard for that identifier in `selector.py`.
+
+### 2. Delete the constraints file
+
+Remove `cibuildwheel/resources/constraints-pyodideXYZ.txt`.
+
+### 3. Update tests
+
+Remove references to the old identifier from the unit tests, integration tests, and drop any expected-wheel entries for it from the test helper.
@@ -4,80 +4,214 @@ title: Changelog

 # Changelog

-### v3.0.0
+### v4.0.0rc1

-Not yet released, but available for testing.
+_14 May 2026_

-Note - when using a beta version, be sure to check the [latest docs](https://cibuildwheel.pypa.io/en/latest/), rather than the stable version, which is still on v2.X.
-
-<!--
-note to self, when doing final release, change to docs URLs in this section to the stable version!
-->
-
-If you've used previous versions of the beta:
- ⚠️ Previous betas of v3.0 changed the working directory for tests. This has been rolled back to the v2.x behaviour, so you might need to change configs if you adapted to the beta 1 or 2 behaviour. See [issue #2406](https://github.com/pypa/cibuildwheel/issues/2406) for more information.
- ⚠️ GraalPy shipped with the identifier `gp242-*` in previous betas, this has been changed to `gp311_242-*` to be consistent with other interpreters, and to fix a bug with GraalPy and project requires-python detection. If you were using GraalPy, you might need to update your config to use the new identifier.
- ⚠️ `test-sources` now uses `project` directory instead of the `package` directory (matching the docs).
-
-#### v3.0.0b5
-
-_3 June 2025_
-
- ✨ Support multiple commands on iOS, joined by `&&`, like the other platforms. (#2432)
- ✨ Add `pyodide-prerelease` enable option, with an early build of 0.28 (Python 3.13). (#2431)
- 🛠 test-sources now uses the `project` directory instead of the `package` directory (matching the docs). (#2437)
- 🛠 Fixed a bug with GraalPy if vsdevcmd prints an error. Cirrus CI works again. (#2414)
- 🛠 Use the standard Schema line for the integrated JSONSchema. (#2433)
- 📚 Use Python 3.14 color output in docs CLI output. (#2407)
-
-#### v3.0.0b4
-
-_29 May 2025_
-
- 🛠 Dependency updates, including Python 3.14.0b2. (#2371)
- 🛠 Remove the addition of `PYTHONSAFEPATH` to `test-environment`. (#2429)
- 📚 README table now matches docs and auto-updates. (#2427, #2428)
-
-#### v3.0.0b3
-
-_28 May 2025_
-
- 🛠 Reverts the test working dir (when test-sources isn't set) to a temporary dir, rather than the project. (#2420)
- 📚 Docs now primarily use the pyproject.toml name of options, rather than the environment variable name. (#2389)
-
-#### v3.0.0b2
-
-_25 May 2025_
-
- ✨ Adds the [`CIBW_TEST_ENVIRONMENT`](https://cibuildwheel.pypa.io/en/latest/options/#test-environment) option, which allows you to set environment variables for the test command. cibuildwheel now sets `PYTHONSAFEPATH=1` in test environments by default, to avoid picking up package imports from the local directory - we want to test the installed wheel, not the source tree! You can change that, or any other environment variable in the test environment using this option. (#2388)
- ✨ Improves support for Pyodide builds and adds the [`CIBW_PYODIDE_VERSION`](https://cibuildwheel.pypa.io/en/latest/options/#pyodide-version) option, which allows you to specify the version of Pyodide to use for builds. (#2002)
-
-#### v3.0.0b1
-
-_19 May 2025_
-
- 🌟 Adds the ability to [build wheels for iOS](https://cibuildwheel.pypa.io/en/latest/platforms/#ios)! Set the [`platform` option](https://cibuildwheel.pypa.io/en/latest/options/#platform) to `ios` on a Mac with the iOS toolchain to try it out!
- 🌟 Adds support for the GraalPy interpreter! Enable for your project using the [`enable` option](https://cibuildwheel.pypa.io/en/latest/options/#enable). (#1538)
- ✨ Adds CPython 3.14 support, under the [`enable` option](https://cibuildwheel.pypa.io/en/latest/options/#enable) `cpython-prerelease`. This version of cibuildwheel uses 3.14.0b1.
+- 🌟 Adds wheel auditing with `abi3audit` as a default after the repair step, with new [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) and [`audit-command`](https://cibuildwheel.pypa.io/en/stable/options/#audit-command) options (#2805)
+- 🌟 Adds `pyemscripten` platform tag support (PEP 783), updates Pyodide to 314.0.0a1, and adds a `pyodide-eol` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) flag for building end-of-life Pyodide versions (#2812, #2848)
+- 🌟 Sets up `delvewheel` as the default [`repair-wheel-command`](https://cibuildwheel.pypa.io/en/stable/options/#repair-wheel-command) for Windows, so extension module DLLs are now bundled automatically. Skip by setting it to empty if not needed. (#2831)
+- ✨ Adds CPython 3.15 support, under the [`enable` option](https://cibuildwheel.pypa.io/en/stable/options/#enable) `cpython-prerelease`. This version of cibuildwheel uses 3.15.0b1. (#2833, #2850)

    _While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.14 will be available in cibuildwheel without the flag._ (#2390)
- ✨ Adds the [test-sources option](https://cibuildwheel.pypa.io/en/latest/options/#test-sources), and changes the working directory for tests.
+- ✨ Adds `{project}` and `{package}` placeholders to [`config-settings`](https://cibuildwheel.pypa.io/en/stable/options/#config-settings) (#2827)
+- ⚠️ Drops support for Python 3.8 (#2686)
+- ⚠️ Removes the experimental CPython 3.13 free-threading builds and the `cpython-freethreading` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) option. CPython 3.14+ free-threading support remains available without the enable flag. (#2684)
+- ⚠️ Drops support for Cirrus CI, which is shutting down June 1, 2026 (#2817)
+- 🐛 Fixes `UV_PYTHON` not being set for [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) on Linux when using `uv` as the [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) (#2830)
+- 🛠 Updates Android to Python 3.13.13 and 3.14.4 (#2821)
+- 🛠 Applies Pyodide-specific patches to the Emscripten toolchain installation (#2800)
+- 🛠 Updates dependencies and container pins (#2845, #2837, #2821, #2818, #2810, #2838, #2813)
+- 🛠 Uses `python -V -V` for Windows build diagnostics (#2832)
+- 📚 Documents platform-specific [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) configuration (#2834)
+- 📚 Updates the "How it works" diagram with details of Android, iOS, and Pyodide builds (#2816)
+- 📚 Adds Pyodide icon and regenerates working examples data for Android, iOS, and Pyodide (#2815, #2811)
+- 📚 Links back to source in docs (#2806)
+- 💼 Adds PEP 723 metadata for `bin/` scripts and drops the `bin` dependency group (#2819)
+- 💼 Updates CI action pins and dev dependencies (#2851, #2843, #2826, #2823, #2820, #2807)
+- 🧪 Fixes Android tests using the `uv` frontend (#2809)
+- 🧪 Fixes the update-dependencies workflow to use `uv` to run `nox` (#2808)

-    - If this option is set, cibuildwheel will copy the files and folders specified in `test-sources` into a temporary directory, and run the tests from there. This is required for iOS builds, but also useful for other platforms, as it allows you to test the installed wheel without any chance of accidentally importing from the source tree.
-    - ~If this option is not set, cibuildwheel will run the tests in the source tree. This is a change from the previous behavior, where cibuildwheel would run the tests from a temporary directory. We're still investigating what's best here, so if you encounter any issues with this, please let us know in [issue #2406](https://github.com/pypa/cibuildwheel/issues/2406).~
-    - If this option is not set, behaviour matches v2.x - cibuildwheel will run the tests from a temporary directory, and you can use the `{project}` placeholder in the `test-command` to refer to the project directory.

- ✨ Added´ `dependency-versions` inline syntax (#2123)
- 🛠 The default [manylinux image](https://cibuildwheel.pypa.io/en/latest/options/#linux-image) has changed from `manylinux2014` to `manylinux_2_28` (#2330)
- 🛠 Invokes `build` rather than `pip wheel` to build wheels by default. You can control this via the [`build-frontend`](https://cibuildwheel.pypa.io/en/latest/options/#build-frontend) option. You might notice that you can see your build log output now! (#2321)
- 🛠 Removed the `CIBW_PRERELEASE_PYTHONS` and `CIBW_FREE_THREADED_SUPPORT` options - these have been folded into the [`enable`](https://cibuildwheel.pypa.io/en/latest/options/#enable) option instead. (#2095)
- 🛠 EOL images `manylinux1`, `manylinux2010`, `manylinux_2_24` and `musllinux_1_1` can no longer be specified by their shortname. The full OCI name can still be used for these images, if you wish (#2316)
+### v3.4.1
+
+_2 April 2026_
+
+- ⚠️ Building for the experimental CPython 3.13 free-threading variant is now deprecated. That functionality will be removed in the next minor release. The [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) option `cpython-freethreading` is therefore also deprecated. Builds specifying `enable = "all"` no longer select `cpython-freethreading`. CPython 3.14 free-threading support remains available without the `enable` flag. (#2787)
+- 🐛 iOS builds will no longer skip `repair-wheel-command` if it's defined in config (#2761)
+- 🐛 Fix bug causing `uv` to fail when environments define PYTHON_VERSION or UV_PYTHON, conflicting with our venvs (#2795)
+- ✨ cibuildwheel prints the selected build identifiers at the start of the build. (#2785)
+- 🔐 The GitHub Action now references other actions with a full SHA (#2744)
+
+### v3.4.0
+
+_5 March 2026_
+
+- 🌟 You can now build wheels using `uv` as a build frontend. This should improve performance, especially if your project has lots of build dependencies. To use, set [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) to `uv`. (#2322)
+- ⚠️ We no longer support running on Travis CI. It may continue working but we don't run tests there anymore so we can't be sure. (#2682)
+- ✨ Improvements to building rust wheels on Android (#2650)
+- 🛠 Update Pyodide to 0.29.3 (#2719, #2733)
+- 🐛 Fix bug with the GitHub Action on Windows, where PATH was getting unnecessarily changed, causing issues with meson builds. (#2723)
+- ✨ Add support for quiet setting on `build` and `uv` from the cibuildwheel `build-verbosity` setting. (#2737)
+- 📚 Docs updates, including guidance on using Meson on Windows (#2718)
+
+### v3.3.1
+
+_5 January 2026_
+
+- 🛠 Update dependencies and container pins, including updating to CPython 3.14.2. (#2708)
+
+### v3.3.0
+
+_12 November 2025_
+
+- 🐛 Fix an incompatibility with Docker v29 (#2660)
+- ✨ Adds `test-runtime` option, to customise how tests on simulated/emulated environments are run (#2636)
+- ✨ Adds support for new `manylinux_2_35` images on 32-bit ARM `armv7l`, offering better C++20 compatibility (#2656)
+- ✨ `build[uv]` is now supported on Android (#2587)
+- ✨ You can now install extras (such as `uv`) with a simple option on the GitHub Action (#2630)
+- ✨ `{project}` and `{package}` placeholders are now supported in `repair-wheel-command` (#2589)
+- 🛠 The versions set with `dependency-versions` no longer constrain packages specified by your `build-system.requires`. Previously, on platforms other than Linux, the constraints in this option would remain in the environment during the build. This has been tidied up make behaviour more consistent between platforms, and to prevent version conflicts. (#2583)
+- 🛠 Improve the handling of `test-command` on Android, enabling more options to be passed (#2590)
+- 📚 Docs improvements (#2618)
+
+### v3.2.1
+
+_12 October 2025_
+
+- 🛠 Update to CPython 3.14.0 final (#2614)
+- 🐛 Fix the default MACOSX_DEPLOYMENT_TARGET on Python 3.14 (#2613)
+- 📚 Docs improvements (#2617)
+
+### v3.2.0
+
+_22 September 2025_
+
+- ✨ Adds GraalPy v25 (Python 3.12) support (#2597)
+- 🛠 Update to CPython 3.14.0rc3 (#2602)
+- 🛠 Adds CPython 3.14.0 prerelease support for Android, and a number of improvements to Android builds (#2568, #2591)
+- 🛠 Improvements to testing on Android, passing environment markers when installing the venv, and providing more debug output when build-verbosity is set (#2575)
+- ⚠️ PyPy 3.10 was moved to `pypy-eol` in the `enable` option, as it is now end-of-life. (#2521)
+- 📚 Docs improvements (#2574, #2601, #2598)
+
+### v3.1.4
+
+_19 August 2025_
+
+- ✨ Add a `--clean-cache` command to clean up our cache (#2489)
+- 🛠 Update Python to 3.14rc2 and other patch version bumps (#2542, #2556)
+- 🛠 Update Pyodide to 0.28.2 (#2562, #2558)
+- 🐛 Fix resolution with `pyodide-build` when `dependency-versions` is set (#2548)
+- 🐛 Set `CMAKE_FIND_ROOT_PATH_MODE_PACKAGE` to `BOTH` on Android (#2547)
+- 🐛 Add `patchelf` dependency for platforms that can build Android wheels (#2552)
+- 🐛 Ignore empty values for `CIBW_ARCHS` like most other environment variables (#2541)
+- 💼 The `color` and `suggest_on_error` argparse options are now default in 3.14rc1+ (#2554)
+- 💼 Use the virtualenv release URL instead of blob URL (should be more robust) (#2555)
+- 🧪 For iOS, lowering to macos-14 is needed for now due to issues with GitHub's runner images (#2557)
+- 🧪 Split out platforms iOS and Android in our tests (#2519)
+- 🧪 Fix and enable doctests (#2546)
+- 📚 Improve our docs on free-threading (#2549)
+
+
+### v3.1.3
+
+_1 August 2025_
+
+- 🐛 Fix bug where "latest" dependencies couldn't update to pip 25.2 on Windows (#2537)
+- 🧪 Use pytest-rerunfailures to improve some of our iOS/Android tests (#2527, #2539)
+- 🧪 Remove some GraalPy Windows workarounds in our tests (#2501)
+
+
+### v3.1.2
+
+_29 July 2025_
+
+- ⚠️  Add an error if `CIBW_FREE_THREADING_SUPPORT` is set; you are likely missing 3.13t wheels, please use the `enable`/`CIBW_ENABLE` (#2520)
+- 🛠 `riscv64` now enabled if you target that architecture, it's now supported on PyPI (#2509)
+- 🛠 Add warning when using `cpython-experimental-riscv64` (no longer needed) (#2526, #2528)
+- 🛠 iOS versions bumped, fixing issues with 3.14 (now RC 1) (#2530)
+- 🐛 Fix bug in Android running wheel from our GitHub Action (#2517)
+- 🐛 Fix warning when using `test-skip` of `"*-macosx_universal2:arm64"` (#2522)
+- 🐛 Fix incorrect number of wheels reported in logs, again (#2517)
+- 📚 We welcome our Android platform maintainer (#2516)
+
+
+### v3.1.1
+
+_24 July 2025_
+
+- 🐛 Fix a bug showing an incorrect wheel count at the end of execution, and misrepresenting test-only runs in the GitHub Action summary (#2512)
+- 📚 Docs fix (#2510)
+
+### v3.1.0
+
+_23 July 2025_
+
+
+- 🌟 CPython 3.14 wheels are now built by default - without the `"cpython-prerelease"` `enable` set. It's time to build and upload these wheels to PyPI! This release includes CPython 3.14.0rc1, which is guaranteed to be ABI compatible with the final release. (#2507) Free-threading is no longer experimental in 3.14, so you have to skip it explicitly with `'cp31?t-*'` if you don't support it yet. (#2503)
+- 🌟 Adds the ability to [build wheels for Android](https://cibuildwheel.pypa.io/en/stable/platforms/#android)! Set the [`platform` option](https://cibuildwheel.pypa.io/en/stable/options/#platform) to `android` on Linux or macOS to try it out! (#2349)
+- 🌟 Adds Pyodide 0.28, which builds 3.13 wheels (#2487)
+- ✨ Support for 32-bit `manylinux_2_28` (now a consistent default) and `manylinux_2_34` added (#2500)
+- 🛠 Improved summary, will also use markdown summary output on GHA (#2469)
+- 🛠 The riscv64 images now have a working default (as they are now part of pypy/manylinux), but are still experimental (and behind an `enable`) since you can't push them to PyPI yet (#2506)
+- 🛠 Fixed a typo in the 3.9 MUSL riscv64 identifier (`cp39-musllinux_ricv64` -> `cp39-musllinux_riscv64`) (#2490)
+- 🛠 Mistyping `--only` now shows the correct possibilities, and even suggests near matches on Python 3.14+ (#2499)
+- 🛠 Only support one output from the repair step on linux like other platforms; auditwheel fixed this over four years ago! (#2478)
+- 💼 We now use pattern matching extensively (#2434)
+- 📚 We now have platform maintainers for our special platforms and interpreters! (#2481)
+
+
+
+### v3.0.1
+
+_5 July 2025_
+
+- 🛠 Updates CPython 3.14 prerelease to 3.14.0b3 (#2471)
+- ✨ Adds a CPython 3.14 prerelease iOS build (only when prerelease builds are [enabled](https://cibuildwheel.pypa.io/en/stable/options/#enable)) (#2475)
+
+### v3.0.0
+
+_11 June 2025_
+
+See @henryiii's [release post](https://iscinumpy.dev/post/cibuildwheel-3-0-0/) for more info on new features!
+
+- 🌟 Adds the ability to [build wheels for iOS](https://cibuildwheel.pypa.io/en/stable/platforms/#ios)! Set the [`platform` option](https://cibuildwheel.pypa.io/en/stable/options/#platform) to `ios` on a Mac with the iOS toolchain to try it out! (#2286, #2363, #2432)
+- 🌟 Adds support for the GraalPy interpreter! Enable for your project using the [`enable` option](https://cibuildwheel.pypa.io/en/stable/options/#enable). (#1538, #2411, #2414)
+- ✨ Adds CPython 3.14 support, under the [`enable` option](https://cibuildwheel.pypa.io/en/stable/options/#enable) `cpython-prerelease`. This version of cibuildwheel uses 3.14.0b2. (#2390)
+
+    _While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.14 will be available in cibuildwheel without the flag._ (#2390)
+
+- ✨ Adds the [test-sources option](https://cibuildwheel.pypa.io/en/stable/options/#test-sources), which copies files and folders into the temporary working directory we run tests from. (#2062, #2284, #2420, #2437)
+
+    This is particularly important for iOS builds, which do not support placeholders in the `test-command`, but can also be useful for other platforms.
+
+- ✨ Adds [`dependency-versions`](https://cibuildwheel.pypa.io/en/stable/options/#dependency-versions) inline syntax (#2122)
+- ✨ Improves support for Pyodide builds and adds the experimental [`pyodide-version`](https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version) option, which allows you to specify the version of Pyodide to use for builds. (#2002)
+- ✨ Add `pyodide-prerelease` [enable](https://cibuildwheel.pypa.io/en/stable/options/#enable) option, with an early build of 0.28 (Python 3.13). (#2431)
+- ✨ Adds the [`test-environment`](https://cibuildwheel.pypa.io/en/stable/options/#test-environment) option, which allows you to set environment variables for the test command. (#2388)
+- ✨ Adds the [`xbuild-tools`](https://cibuildwheel.pypa.io/en/stable/options/#xbuild-tools) option, which allows you to specify tools safe for cross-compilation. Currently only used on iOS; will be useful for Android in the future. (#2317)
+- 🛠 The default [manylinux image](https://cibuildwheel.pypa.io/en/stable/options/#linux-image) has changed from `manylinux2014` to `manylinux_2_28`. (#2330)
+- 🛠 EOL images `manylinux1`, `manylinux2010`, `manylinux_2_24` and `musllinux_1_1` can no longer be specified by their shortname. The full OCI name can still be used for these images, if you wish. (#2316)
+- 🛠 Invokes `build` rather than `pip wheel` to build wheels by default. You can control this via the [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) option. You might notice that you can see your build log output now! (#2321)
+- 🛠 Build verbosity settings have been reworked to have consistent meanings between build backends when non-zero. (#2339)
+- 🛠 Removed the `CIBW_PRERELEASE_PYTHONS` and `CIBW_FREE_THREADED_SUPPORT` options - these have been folded into the [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) option instead. (#2095)
 - 🛠 Build environments no longer have setuptools and wheel preinstalled. (#2329)
+- 🛠 Use the standard Schema line for the integrated JSONSchema. (#2433)
 - ⚠️ Dropped support for building Python 3.6 and 3.7 wheels. If you need to build wheels for these versions, use cibuildwheel v2.23.3 or earlier. (#2282)
 - ⚠️ The minimum Python version required to run cibuildwheel is now Python 3.11. You can still build wheels for Python 3.8 and newer. (#1912)
- ⚠️ PyPy wheels no longer built by default, due to a change to our options system. To continue building PyPy wheels, you'll now need to set the [`enable` option](https://cibuildwheel.pypa.io/en/latest/options/#enable) to `pypy` or `pypy-eol`. (#2095)
+- ⚠️ 32-bit Linux wheels no longer built by default - the [arch](https://cibuildwheel.pypa.io/en/stable/options/#archs) was removed from `"auto"`. It now requires explicit `"auto32"`. Note that modern manylinux images (like the new default, `manylinux_2_28`) do not have 32-bit versions. (#2458)
+- ⚠️ PyPy wheels no longer built by default, due to a change to our options system. To continue building PyPy wheels, you'll now need to set the [`enable` option](https://cibuildwheel.pypa.io/en/stable/options/#enable) to `pypy` or `pypy-eol`. (#2095)
 - ⚠️ Dropped official support for Appveyor. If it was working for you before, it will probably continue to do so, but we can't be sure, because our CI doesn't run there anymore. (#2386)
- 📚 A reorganisation of the docs, and numerous updates (#2280)
+- 📚 A reorganisation of the docs, and numerous updates. (#2280)
+- 📚 Use Python 3.14 color output in docs CLI output. (#2407)
+- 📚 Docs now primarily use the pyproject.toml name of options, rather than the environment variable name. (#2389)
+- 📚 README table now matches docs and auto-updates. (#2427, #2428)
+
+### v2.23.4
+
+_16 March 2026_
+
+- 🐛 Fix HTTP 429 errors while downloading virtualenv from GitHub blob URLs – uses a https://bootstrap.pypa.io/ URL instead. (#2775)

 ### v2.23.3

@@ -553,7 +687,7 @@ _14 December 2021_
 _26 November 2021_

 - 📈 cibuildwheel now defaults to manylinux2014 image for linux builds, rather than manylinux2010. If you want to stick with manylinux2010, it's simple to set this using [the image options](https://cibuildwheel.pypa.io/en/stable/options/#linux-image). (#926)
- ✨ You can now pass environment variables from the host machine into the Docker container during a Linux build. Check out [the docs for `CIBW_ENVIRONMENT_PASS_LINUX `](https://cibuildwheel.pypa.io/en/latest/options/#environment-pass) for the details. (#914)
+- ✨ You can now pass environment variables from the host machine into the Docker container during a Linux build. Check out [the docs for `CIBW_ENVIRONMENT_PASS_LINUX `](https://cibuildwheel.pypa.io/en/stable/options/#environment-pass) for the details. (#914)
 - ✨ Added support for building PyPy 3.8 wheels. (#881)
 - ✨ Added support for building Windows arm64 CPython wheels on a Windows arm64 runner. We can't test this in CI yet, so for now, this is experimental. (#920)
 - 📚 Improved the deployment documentation (#911)
@@ -584,7 +718,7 @@ _22 October 2021_

 - 🌟 TOML option overrides! This provides much greater flexibility in configuration via pyproject.toml. (#854)

-  You can now set build options for any subset of your builds using a match pattern. So, for example, you can customise CPython 3.8 builds with an override on `cp38-*` or musllinux builds by selecting `*musllinux*`. Check out [the docs](https://cibuildwheel.pypa.io/en/latest/options/#overrides) for more info on the specifics.
+  You can now set build options for any subset of your builds using a match pattern. So, for example, you can customise CPython 3.8 builds with an override on `cp38-*` or musllinux builds by selecting `*musllinux*`. Check out [the docs](https://cibuildwheel.pypa.io/en/stable/options/#overrides) for more info on the specifics.

 - 🛠 Added support for building PyPy wheels on macOS 11 CI runners. (#875)

@@ -23,7 +23,9 @@ To build Linux, macOS, and Windows wheels using GitHub Actions, create a `.githu

    Use `env:` to pass [build options](options.md) and `with:` to set
    `package-dir: .`, `output-dir: wheelhouse` and `config-file: ''`
-    locations (those values are the defaults).
+    locations (those values are the defaults). You can also pass a
+    comma-separated list of extras to install additional packages.
+    For example, `extras: "uv"` to install UV into the virtual environment.

 !!! tab "pipx"
    The GitHub Actions runners have pipx installed, so you can easily build in
@@ -53,7 +55,7 @@ Commit this file, and push to GitHub - either to your default branch, or to a PR

 For more info on this file, check out the [docs](https://help.github.com/en/actions/reference/workflow-syntax-for-github-actions).

-[`examples/github-deploy.yml`](https://github.com/pypa/cibuildwheel/blob/main/examples/github-deploy.yml) extends this minimal example to include iOS and Pyodide builds, and a demonstration of how to automatically upload the built wheels to PyPI.
+[`examples/github-deploy.yml`](https://github.com/pypa/cibuildwheel/blob/main/examples/github-deploy.yml) extends this minimal example to include Android, iOS and Pyodide builds, and a demonstration of how to automatically upload the built wheels to PyPI.


 ### Azure Pipelines [linux/mac/windows] {: #azure-pipelines}
@@ -70,22 +72,6 @@ Commit this file, enable building of your repo on Azure Pipelines, and push.

 Wheels will be stored for you and available through the Pipelines interface. For more info on this file, check out the [docs](https://docs.microsoft.com/en-us/azure/devops/pipelines/yaml-schema).

-### Travis CI [linux/windows] {: #travis-ci}
-
-To build Linux and Windows wheels on Travis CI, create a `.travis.yml` file in your repo.
-
-> .travis.yml
-
-```yaml
-{% include "../examples/travis-ci-minimal.yml" %}
-```
-
-Commit this file, enable building of your repo on Travis CI, and push.
-
-Then setup a deployment method by following the [Travis CI deployment docs](https://docs.travis-ci.com/user/deployment/), or see [Delivering to PyPI](deliver-to-pypi.md). For more info on `.travis.yml`, check out the [docs](https://docs.travis-ci.com/).
-
-[`examples/travis-ci-deploy.yml`](https://github.com/pypa/cibuildwheel/blob/main/examples/travis-ci-deploy.yml) extends this minimal example with a demonstration of how to automatically upload the built wheels to PyPI.
-
 ### CircleCI [linux/mac] {: #circleci}

 To build Linux and Mac wheels on CircleCI, create a `.circleci/config.yml` file in your repo,
@@ -117,20 +103,6 @@ Commit this file, and push to Gitlab. The pipeline should start automatically.

 Gitlab will store the built wheels for you - you can access them from the Pipelines view. Check out the Gitlab [docs](https://docs.gitlab.com/ee/ci/yaml/) for more info on this config file.

-### Cirrus CI [linux/mac/windows] {: #cirrus-ci}
-
-To build Linux, Mac, and Windows wheels on Cirrus CI, create a `.cirrus.yml` file in your repo,
-
-> .cirrus.yml
-
-```yaml
-{% include "../examples/cirrus-ci-minimal.yml" %}
-```
-
-Commit this file, enable building of your repo on Cirrus CI, and push.
-
-Cirrus CI will store the built wheels for you - you can access them from the individual task view. Check out the Cirrus CI [docs](https://cirrus-ci.org/guide/writing-tasks/) for more info on this config file.
-
 > ⚠️ Got an error? Check the [FAQ](faq.md).

 ### Other CI services
@@ -139,6 +111,10 @@ Cirrus CI will store the built wheels for you - you can access them from the ind

 Appveyor official support was dropped in cibuildwheel v3.0, due to a lack of CI credits. However, it can probably still be used as-is. Check the Appveyor example from the cibuildwheel v2.0 branch: [appveyor-minimal.yml](https://github.com/pypa/cibuildwheel/blob/v2.23.3/examples/appveyor-minimal.yml).

+### Cirrus CI [linux/mac/windows] {: #cirrus-ci}
+
+Due to Cirrus CI [end-of-life](https://cirruslabs.org) on June 1, 2026, we no longer officially support this service.
+
 ## Next steps

 Once you've got the wheel building successfully, you might want to set up [testing](options.md#test-command) or [automatic releases to PyPI](deliver-to-pypi.md#automatic-method).
@@ -30,17 +30,6 @@ cibuildwheel to run tests, add the following YAML to your CI config file:
      CIBW_TEST_COMMAND: "pytest {project}/tests"
    ```

-!!! tab "Travis CI"
-
-    > .travis.yml ([docs](https://docs.travis-ci.com/user/environment-variables/))
-
-    ```yaml
-    env:
-      global:
-        - CIBW_TEST_REQUIRES=pytest
-        - CIBW_TEST_COMMAND="pytest {project}/tests"
-    ```
-
 !!! tab "CircleCI"

    > .circleci/config.yml ([docs](https://circleci.com/docs/2.0/configuration-reference/#environment))
@@ -64,22 +53,12 @@ cibuildwheel to run tests, add the following YAML to your CI config file:
        CIBW_TEST_COMMAND: "pytest {project}/tests"
    ```

-!!! tab "Cirrus CI"
-
-    > .cirrus.yml ([docs](https://cirrus-ci.org/guide/writing-tasks/#environment-variables))
-
-    ```yaml
-    env:
-      CIBW_TEST_REQUIRES: pytest
-      CIBW_TEST_COMMAND: "pytest {project}/tests"
-    ```
-
 ## Configuration file {: #configuration-file}

 You can configure cibuildwheel with a config file, such as `pyproject.toml`.
 Options have the same names as the environment variable overrides, but are
 placed in `[tool.cibuildwheel]` and are lower case, with dashes, following
-common [TOML][https://toml.io] practice. Anything placed in subsections `linux`, `windows`,
+common [TOML](https://toml.io) practice. Anything placed in subsections `linux`, `windows`,
 `macos`, or `pyodide` will only affect those platforms. Lists can be used
 instead of strings for items that are naturally a list. Multiline strings also
 work just like in the environment variables. Environment variables will take
@@ -112,7 +91,8 @@ The complete set of defaults for the current version of cibuildwheel are shown b

 One feature specific to the configuration files is the ability to override
 settings based on selectors. To use, add a ``tool.cibuildwheel.overrides``
-array, and specify a ``select`` string. Then any options you set will only
+array, and specify a ``select`` string, referencing the [build identifier](options.md#build-skip) (not wheel name!).
+Then any options you set will only
 apply to items that match that selector. These are applied in order, with later
 matches overriding earlier ones if multiple selectors match. Environment
 variables always override static configuration.
@@ -120,9 +100,11 @@ variables always override static configuration.
 A few of the options below have special handling in overrides. A different
 `before-all` will trigger a new container to launch on Linux, and cannot be
 overridden on macOS or Windows.  Overriding the image on linux will also
-trigger new containers, one per image. Some commands are not supported;
-`output-dir`, build/skip/test_skip selectors, and architectures cannot be
-overridden.
+trigger new containers, one per image.
+
+!!! note "Some commands are not supported"
+
+    The ``output-dir``, ``build``, ``skip``, ``test_skip`` selectors, and architectures cannot be overridden.

 You can specify a table of overrides in `inherit={}`, any list or table in this
 list will inherit from previous overrides or the main configuration. The valid
@@ -150,17 +132,17 @@ which means it can be given multiple times.
 manylinux-x86_64-image = "manylinux_2_34"

 [[tool.cibuildwheel.overrides]]
-select = "cp38-*"
+select = "cp39-*"
 manylinux-x86_64-image = "manylinux2014"

 [[tool.cibuildwheel.overrides]]
-select = "cp3{9,10}-*"
+select = "cp3{10,11}-*"
 manylinux-x86_64-image = "manylinux_2_28"
 ```

-This example will build CPython 3.8 wheels on manylinux2014, CPython 3.9-3.10
+This example will build CPython 3.9 wheels on manylinux2014, CPython 3.10-3.11
 wheels on manylinux_2_28, and manylinux_2_34 wheels for any newer Python
-(like 3.10).
+(like 3.14).

 ```toml
 [tool.cibuildwheel]
@@ -82,7 +82,7 @@ A few notes-

 - Running the macOS integration tests requires _system installs_ of Python from python.org for all the versions that are tested. We won't attempt to install these when running locally, but you can do so manually using the URL in the error message that is printed when the install is not found.

- The ['enable groups'](options.md#enable) run by default are just 'cpython-prerelease' and 'cpython-freethreading'. You can add other groups like pypy or graalpy by passing the `--enable` argument to pytest, i.e. `nox -s tests -- test --enable pypy`. On GitHub PRs, you can add a label to the PR to enable these groups.
+- The ['enable groups'](options.md#enable) run by default is just 'cpython-prerelease'. You can add other groups like pypy or graalpy by passing the `--enable` argument to pytest, i.e. `nox -s tests -- test --enable pypy`. On GitHub PRs, you can add a label to the PR to enable these groups.

 #### Running pytest directly

@@ -161,32 +161,6 @@ bin/run_example_ci_configs.py examples/github-with-qemu.yml

 The script then outputs a Markdown table that can be copy/pasted into a PR to monitor and record the test.

-### Preparing environments
-
-This has been moved to using docker, so you only need the following instructions if you add `--no-docker` to avoid using docker.
-
-The dependency update script in the next section requires multiple python versions installed. One way to do this is to use `pyenv`:
-
-```bash
-pyenv install 3.7.8
-# Optionally add 3.8 and make it the local version;
-# otherwise assuming 3.8+ already is your current python version
-```
-
-Then, you need to make the required virtual environments:
-
-```bash
-$(pyenv prefix 3.7.8)/bin/python -m venv env37
-```
-
-<!-- Note for fish users: use zsh/bash for these lines for now, there's not a nice one-line fish replacement -->
-
-And, you need to install the requirements into each environment:
-
-```bash
-for f in env*/bin/pip; do $f install pip-tools; done
-```
-
 ### Making a release

 Before making a release, ensure pinned dependencies are up-to-date. Autoupdates are run weekly, with a PR being raised with any changes as required, so just make sure the latest one is merged before continuing.
@@ -208,3 +182,9 @@ git push && git push --tags
 Then head to https://github.com/pypa/cibuildwheel/releases and create a GitHub release from the new tag, pasting in the changelog entry. Once the release is created inside GitHub, a CI job will create the assets and upload them to PyPI.

 If there were any schema updates, run `pipx run ./bin/generate_schema.py --schemastore > partial-cibuildwheel.json` and contribute the changes to SchemaStore.
+
+### Platform-specific maintenance
+
+This section is a stub. Please open a PR to add guidance for any platform you would like to help maintain!
+
+- **Pyodide**: see [Maintaining Pyodide support](_internal/pyodide-maintenance.md) for instructions and maintainer-specific information on updating Pyodide-related code in cibuildwheel and updating to new Pyodide releases.
@@ -20,7 +20,6 @@
            "travisci",
            "circleci",
            "gitlab",
-            "cirrusci",
            "azurepipelines"
          ]
        }
@@ -28,7 +27,7 @@
      "ci_config": { "type": "string" },
      "os": {
        "type": "array",
-        "items": { "enum": ["windows", "apple", "linux"] }
+        "items": { "enum": ["windows", "apple", "linux", "android", "ios", "pyodide"] }
      }
    },
    "required": ["name", "gh", "ci", "os"]
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				`import _cross_venv; _cross_venv.initialize()`