Bump version: v4.0.0rc1

test: add Python 3.15 to CI test matrix and classifiers

Update the Max Python CI job from 3.14 to 3.15 and add the
Programming Language :: Python :: 3.15 classifier to pyproject.toml.

Assisted-by: OpenCode:GLM-5

.cirrus.yml

@@ -1,91 +0,0 @@
-only_if: changesInclude('.cirrus.yml') || ($CIRRUS_BRANCH == "main" && !changesIncludeOnly('.github/*', 'bin/*', 'docs/*', '.circleci/*', '.travis.yml', '.pre-commit-config.yaml', '.readthedocs.yml', 'azure-pipelines.yml', 'README.md', 'mkdocs.yml', 'noxfile.py')) || $CIRRUS_BRANCH =~ 'cirrus.*'
-
-run_tests: &RUN_TESTS
-  install_cibuildwheel_script:
-    - python -m pip install -U pip
-    - python -m pip install -e. --group test
-  run_cibuildwheel_tests_script:
-    - python ./bin/run_tests.py
-
-linux_x86_task:
-  timeout_in: 120m
-  compute_engine_instance:
-    image_project: cirrus-images
-    image: family/docker-builder
-    platform: linux
-    cpu: 8
-    memory: 8G
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all
-    - add-apt-repository -y ppa:deadsnakes/ppa
-    - apt-get update
-    - apt-get install -y python3.12-venv
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *RUN_TESTS
-
-linux_aarch64_task:
-  compute_engine_instance:
-    image_project: cirrus-images
-    image: family/docker-builder-arm64
-    architecture: arm64
-    platform: linux
-    cpu: 4
-    memory: 4G
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - docker run --rm --privileged docker.io/tonistiigi/binfmt:latest --install all
-    - add-apt-repository -y ppa:deadsnakes/ppa
-    - apt-get update
-    - apt-get install -y python3.12-venv
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *RUN_TESTS
-
-windows_x86_task:
-  # The task takes ~55 minutes while the timeout happens after 60 minutes by default,
-  # let's allow some wiggle room.
-  timeout_in: 120m
-  windows_container:
-    image: cirrusci/windowsservercore:visualstudio2022
-    cpu: 8
-    memory: 8G
-
-  install_pre_requirements_script:
-    - certutil -generateSSTFromWU roots.sst
-    - certutil -addstore -f root roots.sst
-    - del roots.sst
-    - choco install -y --no-progress python3 --version 3.12.4
-    - refreshenv
-    - powershell -Command "$cleanPath = $env:PATH -replace ';+$', ''; Add-Content -Path $env:CIRRUS_ENV -Value ('PATH=' + $cleanPath)"
-  <<: *RUN_TESTS
-
-macos_arm64_task:
-  macos_instance:
-    image: ghcr.io/cirruslabs/macos-runner:sequoia
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - brew install python@3.12
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *RUN_TESTS
-
-macos_arm64_cp38_task:
-  macos_instance:
-    image: ghcr.io/cirruslabs/macos-runner:sequoia
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-    PYTEST_ADDOPTS: --run-cp38-universal2 -k 'test_cp38_arm64_testing_universal2_installer or test_arch_auto or test_dummy_serial'
-  install_pre_requirements_script:
-    - brew install python@3.12
-    - python3.12 -m venv ${VENV_ROOT}
-    - curl -fsSLO https://www.python.org/ftp/python/3.8.10/python-3.8.10-macos11.pkg
-    - sudo installer -pkg python-3.8.10-macos11.pkg -target /
-    - rm python-3.8.10-macos11.pkg
-    - sh "/Applications/Python 3.8/Install Certificates.command"
-  <<: *RUN_TESTS

.github/workflows/release.yml

@@ -17,7 +17,7 @@ jobs:
       with:
         persist-credentials: false
 
-    - uses: hynek/build-and-inspect-python-package@efb823f52190ad02594531168b7a2d5790e66516 # v2.14.0
+    - uses: hynek/build-and-inspect-python-package@fe0a0fb1925ca263d076ca4f2c13e93a6e92a33e # v2.17.0
 
   publish:
     needs: [dist]
@@ -41,6 +41,6 @@ jobs:
       with:
         subject-path: "dist/cibuildwheel-*"
 
-    - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
+    - uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
       with:
         attestations: true

.github/workflows/test.yml

@@ -43,14 +43,12 @@ jobs:
       with:
         persist-credentials: false
     - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
-      id: python
       with:
         python-version: "3.x"
-    - uses: j178/prek-action@79f765515bd648eb4d6bb1b17277b7cb22cb6468 # v2.0.0
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+    - uses: j178/prek-action@6ad80277337ad479fe43bd70701c3f7f8aa74db3 # v2.0.3
     - name: PyLint checks
-      run: pipx run --python "${STEPS_PYTHON_OUTPUTS_PYTHON_PATH}" nox -s pylint -- --output-format=github
-      env:
-        STEPS_PYTHON_OUTPUTS_PYTHON_PATH: ${{ steps.python.outputs.python-path }}
+      run: uvx nox -s pylint -- --output-format=github
 
   sample:
     name: Generate a sample project
@@ -64,12 +62,12 @@ jobs:
       name: Install Python
       with:
         python-version: "3.x"
-    - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
     - name: Install dependencies
       run: uv sync --no-dev --group test
     - name: Generate a sample project
       run: uv run --no-sync -m test.test_projects test.test_0_basic.basic_project sample_proj
-    - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: sample_proj
         path: sample_proj
@@ -87,9 +85,9 @@ jobs:
           python_version: '3.11'
         # Max Python
         - os: ubuntu-latest
-          python_version: '3.14'
+          python_version: '3.15'
         - os: ubuntu-latest
-          python_version: '3.13'
+          python_version: '3.14'
           test_select: android
         - os: ubuntu-24.04-arm
           python_version: '3.13'
@@ -128,7 +126,7 @@ jobs:
         python-version: ${{ matrix.python_version }}
         allow-prereleases: true
 
-    - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
 
     - name: Free up disk space
       if: runner.os == 'Linux' && matrix.test_select != 'android'
@@ -232,7 +230,7 @@ jobs:
       run: |
         test $(find wheelhouse_only -name '*.whl' | wc -l) -eq 1
 
-    - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }}
         path: wheelhouse/*.whl
@@ -255,7 +253,7 @@ jobs:
     - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
       with:
         python-version: "3.x"
-    - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
     - name: Install dependencies
       run: uv sync --no-dev --group test
     - name: Get qemu emulated architectures
@@ -280,7 +278,7 @@ jobs:
     - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
       with:
         python-version: "3.x"
-    - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
     - name: Install dependencies
       run: uv sync --no-dev --group test
 
@@ -305,7 +303,7 @@ jobs:
       name: Install Python 3.12
       with:
         python-version: '3.12'
-    - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
 
     - name: Install dependencies
       run: uv sync --no-dev --group test
@@ -323,11 +321,13 @@ jobs:
         output-dir: wheelhouse
       env:
         CIBW_PLATFORM: pyodide
+        CIBW_ENABLE: pyodide-prerelease
 
     - name: Run tests with 'CIBW_PLATFORM' set to 'pyodide'
       run: uv run --no-sync ./bin/run_tests.py
       env:
         CIBW_PLATFORM: pyodide
+        CIBW_ENABLE: pyodide-prerelease
 
   test-uv-extras:
     name: Test uv extra on ${{ matrix.os }} ${{ matrix.test_select }}

.github/workflows/update-dependencies.yml

@@ -28,7 +28,7 @@ jobs:
 
     # we use this step to grab a Github App auth token, so that PRs generated by this workflow
     # run the GHA tests.
-    - uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
+    - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
       id: generate-token
       if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
       with:
@@ -39,18 +39,20 @@ jobs:
       with:
         persist-credentials: false
 
-    - uses: wntrblm/nox@5a277b752f6094150e25237d47c34168e2b7526e # 2026.02.09
+    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      with:
+        python-version: "3.14"
 
     - name: "Run update: dependencies"
-      run: nox --force-color -s update_constraints
+      run: uvx nox --force-color -s update_constraints
     - name: "Run update: python configs"
-      run: nox --force-color -s update_pins
+      run: uvx nox --force-color -s update_pins
     - name: "Run update: docs user projects"
-      run: nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}
+      run: uvx nox --force-color -s update_proj -- --auth=${{ secrets.GITHUB_TOKEN }}
 
     - name: Create Pull Request
       if: github.ref == 'refs/heads/main' && github.repository == 'pypa/cibuildwheel'
-      uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+      uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
       with:
         commit-message: Update dependencies
         title: '[Bot] Update dependencies'

.github/workflows/zizmor.yml

@@ -21,4 +21,4 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3

.pre-commit-config.yaml

@@ -14,21 +14,22 @@ repos:
     exclude: (cibuildwheel/resources/pinned_docker_images.cfg)|(.svg$)
   - id: mixed-line-ending
   - id: trailing-whitespace
+    exclude: ^cibuildwheel/resources/android/android.patch$
 
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: 4924b0e01e032fea073ad04a1c5cfa7e4add0afb  # frozen: v0.15.6
+  rev: 6fec9b7edb08fd9989088709d864a7826dc74e80  # frozen: v0.15.12
   hooks:
   - id: ruff-check
     args: ["--fix"]
   - id: ruff-format
 
 - repo: https://github.com/pre-commit/mirrors-mypy
-  rev: a66e98df7b4aeeb3724184b332785976d062b92e  # frozen: v1.19.1
+  rev: fc0f09a29bb495f4a91f00266155d6282d52485d  # frozen: v1.20.2
   hooks:
   - id: mypy
     name: mypy 3.11 on cibuildwheel/
     args: ["--python-version=3.11"]
-    exclude: ^cibuildwheel/resources/_cross_venv.py$  # Requires Python 3.13 or later
+    exclude: ^cibuildwheel/resources/android/_cross_venv.py$  # Requires Python 3.13 or later
     additional_dependencies: &mypy-dependencies
       - bracex
       - build
@@ -85,7 +86,7 @@ repos:
 
 
 - repo: https://github.com/python-jsonschema/check-jsonschema
-  rev: 9f48a48aa91a6040d749ad68ec70907d907a5a7f  # frozen: 0.37.0
+  rev: 943377262562a12b57292fc98fabd7dbf81451fe  # frozen: 0.37.2
   hooks:
     - id: check-dependabot
     - id: check-github-actions

CI.md

@@ -1,9 +1,9 @@
 This is a summary of the host Python versions and platforms covered by the different CI platforms:
 
-|         | 3.11                             | 3.12                            | 3.13           | 3.14           |
-|---------|----------------------------------|---------------------------------|----------------|----------------|
-| Linux   | Azure Pipelines / GitHub Actions | CircleCI¹ / Cirrus CI / GitLab¹ | GitHub Actions | GitHub Actions |
-| macOS   | Azure Pipelines                  | CircleCI¹ / Cirrus CI / GitLab¹ | GitHub Actions |                |
-| Windows | Azure Pipelines                  | Cirrus CI / GitLab¹             | GitHub Actions |                |
+|         | 3.11                             | 3.12                    | 3.13           | 3.14           |
+|---------|----------------------------------|-----------------------|----------------|----------------|
+| Linux   | Azure Pipelines / GitHub Actions | CircleCI¹ / GitLab¹   | GitHub Actions | GitHub Actions |
+| macOS   | Azure Pipelines                  | CircleCI¹ / GitLab¹   | GitHub Actions |                |
+| Windows | Azure Pipelines                  | GitLab¹               | GitHub Actions |                |
 
 > ¹ Runs a reduced set of tests to reduce CI load

README.md

@@ -22,30 +22,29 @@ What does it do?
 
 While cibuildwheel itself requires a recent Python version to run (we support the last three releases), it can target the following versions to build wheels:
 
-|                    | macOS Intel | macOS Apple Silicon | Windows 64bit | Windows 32bit | Windows Arm64 | manylinux<br/>musllinux x86_64 | manylinux<br/>musllinux i686 | manylinux<br/>musllinux aarch64 | manylinux<br/>musllinux ppc64le | manylinux<br/>musllinux s390x | manylinux<br/>musllinux armv7l | Android | iOS | Pyodide |
-|--------------------|----|-----|----|-----|-----|----|-----|----|-----|-----|---|-----|-----|-----|
-| CPython 3.8        | ✅ | ✅  | ✅  | ✅  | N/A | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A | N/A |
-| CPython 3.9        | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅ | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A | N/A |
-| CPython 3.10       | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A | N/A |
-| CPython 3.11       | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A | N/A |
-| CPython 3.12       | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | N/A | N/A | ✅⁴ |
-| CPython 3.13³      | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | ✅  | ✅  | ✅⁴ |
-| CPython 3.14       | ✅ | ✅  | ✅  | ✅  | ✅² | ✅ | ✅  | ✅ | ✅  | ✅  | ✅⁵ | ✅  | ✅  | N/A |
-| PyPy 3.8 v7.3      | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A | N/A |
-| PyPy 3.9 v7.3      | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A | N/A |
-| PyPy 3.10 v7.3     | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A | N/A |
-| PyPy 3.11 v7.3     | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | ✅¹  | ✅¹ | N/A | N/A | N/A | N/A | N/A | N/A |
-| GraalPy 3.11 v24.2 | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | N/A  | ✅¹ | N/A | N/A | N/A | N/A | N/A | N/A |
-| GraalPy 3.12 v25.0 | ✅ | ✅  | ✅  | N/A | N/A | ✅¹ | N/A  | ✅¹ | N/A | N/A | N/A | N/A | N/A | N/A |
+|                          | macOS Intel | macOS Apple Silicon | Windows 64bit | Windows 32bit | Windows Arm64  | manylinux<br/>musllinux x86_64 | manylinux<br/>musllinux i686 | manylinux<br/>musllinux aarch64 | manylinux<br/>musllinux ppc64le | manylinux<br/>musllinux s390x | manylinux<br/>musllinux armv7l | Android | iOS | Pyodide        |
+| ------------------------ | ----------- | ------------------- | ------------- | ------------- | -------------- | ------------------------------ | ---------------------------- | ------------------------------- | ------------------------------- | ----------------------------- | ------------------------------ | ------- | --- | -------------- |
+| CPython 3.9              | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| CPython 3.10             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| CPython 3.11             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| CPython 3.12             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | ✅<sup>3</sup> |
+| CPython 3.13             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | ✅      | ✅  | ✅<sup>3</sup> |
+| CPython 3.14             | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | ✅      | ✅  | N/A            |
+| CPython 3.15<sup>5</sup> | ✅          | ✅                  | ✅            | ✅            | ✅<sup>2</sup> | ✅                             | ✅                           | ✅                              | ✅                              | ✅                            | ✅<sup>4</sup>                 | N/A     | N/A | N/A            |
+| PyPy 3.9 v7.3            | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | ✅<sup>1</sup>               | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| PyPy 3.10 v7.3           | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | ✅<sup>1</sup>               | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| PyPy 3.11 v7.3           | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | ✅<sup>1</sup>               | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| GraalPy 3.11 v24.2       | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | N/A                          | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
+| GraalPy 3.12 v25.0       | ✅          | ✅                  | ✅            | N/A           | N/A            | ✅<sup>1</sup>                 | N/A                          | ✅<sup>1</sup>                  | N/A                             | N/A                           | N/A                            | N/A     | N/A | N/A            |
 
-<sup>¹ PyPy & GraalPy are only supported for manylinux wheels.</sup><br>
-<sup>² Windows arm64 support is experimental.</sup><br>
-<sup>³ Free-threaded mode requires opt-in on 3.13 using [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable).</sup><br>
-<sup>⁴ Experimental, not yet supported on PyPI, but can be used directly in web deployment. Use `--platform pyodide` to build.</sup><br>
-<sup>⁵ manylinux armv7l support is experimental. As there are no RHEL based image for this architecture, it's using an Ubuntu based image instead.</sup><br>
+<sup>**1** PyPy & GraalPy are only supported for manylinux wheels.</sup><br>
+<sup>**2** Windows arm64 support is experimental.</sup><br>
+<sup>**3** Experimental, not yet supported on PyPI, but can be used directly in web deployment. Use `--platform pyodide` to build.</sup><br>
+<sup>**4** manylinux armv7l support is experimental. As there are no RHEL based image for this architecture, it's using an Ubuntu based image instead.</sup><br>
+<sup>**5** Python 3.15 requires opt-in using [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable).</sup><br>
 
 - Builds manylinux, musllinux, macOS, and Windows wheels for CPython, PyPy, and GraalPy
-- Works on GitHub Actions, Azure Pipelines, CircleCI, GitLab CI, and Cirrus CI
+- Works on GitHub Actions, Azure Pipelines, CircleCI, and GitLab CI
 - Bundles shared library dependencies on Linux and macOS through [auditwheel](https://github.com/pypa/auditwheel) and [delocate](https://github.com/matthew-brett/delocate)
 - Runs your library's tests against the wheel-installed version of your library
 
@@ -56,18 +55,18 @@ Usage
 
 `cibuildwheel` runs inside a CI service. Supported platforms depend on which service you're using:
 
-|                 | Linux | macOS | Windows | Linux ARM | macOS ARM | Windows ARM | Android | iOS |
-|-----------------|-------|-------|---------|-----------|-----------|-------------|---------|-----|
-| GitHub Actions  | ✅    | ✅    | ✅       | ✅        | ✅        | ✅²         | ✅⁴      | ✅³  |
-| Azure Pipelines | ✅    | ✅    | ✅       |           | ✅        | ✅²         | ✅⁴      | ✅³  |
-| CircleCI        | ✅    | ✅    |         | ✅        | ✅        |             | ✅⁴      | ✅³  |
-| Gitlab CI       | ✅    | ✅    | ✅      | ✅¹       | ✅        |             | ✅⁴      | ✅³  |
-| Cirrus CI       | ✅    | ✅    | ✅      | ✅        | ✅        |             | ✅⁴      |      |
+|                 | Linux | macOS | Windows | Linux ARM      | macOS ARM | Windows ARM    | Android                    | iOS                        | Pyodide        |
+| --------------- | ----- | ----- | ------- | -------------- | --------- | -------------- | -------------------------- | -------------------------- | -------------- |
+| GitHub Actions  | ✅    | ✅    | ✅      | ✅             | ✅        | ✅<sup>2</sup> | ✅<sup>4</sup>             | ✅<sup>3</sup>             | ✅             |
+| Azure Pipelines | ✅    | ✅    | ✅      |                | ✅        | ✅<sup>2</sup> | ✅<sup>4</sup>             | ✅<sup>3</sup>             | ✅<sup>5</sup> |
+| CircleCI        | ✅    | ✅    |         | ✅             | ✅        |                | ✅<sup>4</sup><sup>5</sup> | ✅<sup>3</sup><sup>5</sup> | ✅<sup>5</sup> |
+| GitLab CI       | ✅    | ✅    | ✅      | ✅<sup>1</sup> | ✅        |                | ✅<sup>4</sup><sup>5</sup> | ✅<sup>3</sup><sup>5</sup> | ✅<sup>5</sup> |
 
-<sup>¹ [Requires emulation](https://cibuildwheel.pypa.io/en/stable/faq/#emulation), distributed separately. Other services may also support Linux ARM through emulation or third-party build hosts, but these are not tested in our CI.</sup><br>
-<sup>² [Uses cross-compilation](https://cibuildwheel.pypa.io/en/stable/faq/#windows-arm64). It is not possible to test `arm64` on this CI platform.</sup><br>
-<sup>³ Requires a macOS runner; runs tests on the simulator for the runner's architecture. </sup><br>
-<sup>⁴ Building for Android requires the runner to be Linux x86_64, macOS ARM64 or macOS x86_64. Testing has [additional requirements](https://cibuildwheel.pypa.io/en/stable/platforms/#android).</sup><br>
+<sup>**1** [Requires emulation](https://cibuildwheel.pypa.io/en/stable/faq/#emulation), distributed separately. Other services may also support Linux ARM through emulation or third-party build hosts, but these are not tested in our CI.</sup><br>
+<sup>**2** [Uses cross-compilation](https://cibuildwheel.pypa.io/en/stable/faq/#windows-arm64). It is not possible to test `arm64` on this CI platform.</sup><br>
+<sup>**3** Requires a macOS runner; runs tests on the simulator for the runner's architecture. </sup><br>
+<sup>**4** Building for Android requires the runner to be Linux x86_64, macOS ARM64 or macOS x86_64. Testing has [additional requirements](https://cibuildwheel.pypa.io/en/stable/platforms/#android).</sup><br>
+<sup>**5** Builds may work, but are untested in cibuildwheel's CI.</sup><br>
 
 <!--intro-end-->
 
@@ -99,7 +98,7 @@ jobs:
       - uses: actions/setup-python@v6
 
       - name: Install cibuildwheel
-        run: python -m pip install cibuildwheel==3.4.1
+        run: python -m pip install cibuildwheel==4.0.0rc1
 
       - name: Build wheels
         run: python -m cibuildwheel --output-dir wheelhouse
@@ -156,6 +155,8 @@ The following diagram summarises the steps that cibuildwheel takes on each platf
 |  | [`container-engine`](https://cibuildwheel.pypa.io/en/stable/options/#container-engine) | Specify the container engine to use when building Linux wheels |
 |  | [`dependency-versions`](https://cibuildwheel.pypa.io/en/stable/options/#dependency-versions) | Control the versions of the tools cibuildwheel uses |
 |  | [`pyodide-version`](https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version) | Specify the Pyodide version to use for `pyodide` platform builds |
+| **Auditing** | [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) | Install Python dependencies for the audit step |
+|  | [`audit-command`](https://cibuildwheel.pypa.io/en/stable/options/#audit-command) | Use a tool to check wheels before the end of the run |
 | **Testing** | [`test-command`](https://cibuildwheel.pypa.io/en/stable/options/#test-command) | The command to test each built wheel |
 |  | [`before-test`](https://cibuildwheel.pypa.io/en/stable/options/#before-test) | Execute a shell command before testing each wheel |
 |  | [`test-sources`](https://cibuildwheel.pypa.io/en/stable/options/#test-sources) | Paths that are copied into the working directory of the tests |
@@ -170,7 +171,7 @@ The following diagram summarises the steps that cibuildwheel takes on each platf
 |  | [`build-verbosity`](https://cibuildwheel.pypa.io/en/stable/options/#build-verbosity) | Increase/decrease the output of the build |
 
 
-<!--[[[end]]] (sum: dbfwOkj/k/) -->
+<!--[[[end]]] (sum: b7YIjCyCkf) -->
 
 These options can be specified in a pyproject.toml file, or as environment variables, see [configuration docs](https://cibuildwheel.pypa.io/en/latest/configuration/).
 
@@ -185,16 +186,16 @@ Here are some repos that use cibuildwheel.
 
 | Name                              | CI | OS | Notes |
 |-----------------------------------|----|----|:------|
-| [scikit-learn][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The machine learning library. A complex but clean config using many of cibuildwheel's features to build a large project with Cython and C++ extensions.  |
+| [scikit-learn][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The machine learning library. A complex but clean config using many of cibuildwheel's features to build a large project with Cython and C++ extensions.  |
 | [duckdb][]                        | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | DuckDB is an analytical in-process SQL database management system |
 | [pytorch-fairseq][]               | ![github icon][] | ![apple icon][] ![linux icon][] | Facebook AI Research Sequence-to-Sequence Toolkit written in Python. |
-| [NumPy][]                         | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The fundamental package for scientific computing with Python. |
+| [NumPy][]                         | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The fundamental package for scientific computing with Python. |
 | [NCNN][]                          | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | ncnn is a high-performance neural network inference framework optimized for the mobile platform |
-| [Matplotlib][]                    | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The venerable Matplotlib, a Python library with C++ portions |
+| [Matplotlib][]                    | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The venerable Matplotlib, a Python library with C++ portions |
 | [Tornado][]                       | ![github icon][] | ![linux icon][] ![apple icon][] ![windows icon][] | Tornado is a Python web framework and asynchronous networking library. Uses stable ABI for a small C extension. |
 | [MyPy][]                          | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | The compiled version of MyPy using MyPyC. |
 | [Prophet][]                       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Tool for producing high quality forecasts for time series data that has multiple seasonality with linear or non-linear growth. |
-| [Kivy][]                          | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Open source UI framework written in Python, running on Windows, Linux, macOS, Android and iOS |
+| [Triton][]                        | ![github icon][] | ![linux icon][] | Self hosted runners |
 
 [scikit-learn]: https://github.com/scikit-learn/scikit-learn
 [duckdb]: https://github.com/duckdb/duckdb
@@ -205,17 +206,19 @@ Here are some repos that use cibuildwheel.
 [Tornado]: https://github.com/tornadoweb/tornado
 [MyPy]: https://github.com/mypyc/mypy_mypyc-wheels
 [Prophet]: https://github.com/facebook/prophet
-[Kivy]: https://github.com/kivy/kivy
+[Triton]: https://github.com/openai/triton
 
 [github icon]: docs/data/readme_icons/github.svg
 [azurepipelines icon]: docs/data/readme_icons/azurepipelines.svg
 [circleci icon]: docs/data/readme_icons/circleci.svg
 [gitlab icon]: docs/data/readme_icons/gitlab.svg
 [travisci icon]: docs/data/readme_icons/travisci.svg
-[cirrusci icon]: docs/data/readme_icons/cirrusci.svg
 [windows icon]: docs/data/readme_icons/windows.svg
 [apple icon]: docs/data/readme_icons/apple.svg
 [linux icon]: docs/data/readme_icons/linux.svg
+[android icon]: docs/data/readme_icons/android.svg
+[ios icon]: docs/data/readme_icons/ios.svg
+[pyodide icon]: docs/data/readme_icons/pyodide.svg
 
 <!-- END bin/projects.py -->
 
@@ -235,6 +238,35 @@ Changelog
 
 <!-- [[[cog from readme_changelog import mini_changelog; print(mini_changelog()) ]]] -->
 
+### v4.0.0rc1
+
+_14 May 2026_
+
+- 🌟 Adds wheel auditing with `abi3audit` as a default after the repair step, with new [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) and [`audit-command`](https://cibuildwheel.pypa.io/en/stable/options/#audit-command) options (#2805)
+- 🌟 Adds `pyemscripten` platform tag support (PEP 783), updates Pyodide to 314.0.0a1, and adds a `pyodide-eol` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) flag for building end-of-life Pyodide versions (#2812, #2848)
+- 🌟 Sets up `delvewheel` as the default [`repair-wheel-command`](https://cibuildwheel.pypa.io/en/stable/options/#repair-wheel-command) for Windows, so extension module DLLs are now bundled automatically. Skip by setting it to empty if not needed. (#2831)
+- ✨ Adds CPython 3.15 support, under the [`enable` option](https://cibuildwheel.pypa.io/en/stable/options/#enable) `cpython-prerelease`. This version of cibuildwheel uses 3.15.0b1. (#2833, #2850)
+
+    _While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.14 will be available in cibuildwheel without the flag._ (#2390)
+- ✨ Adds `{project}` and `{package}` placeholders to [`config-settings`](https://cibuildwheel.pypa.io/en/stable/options/#config-settings) (#2827)
+- ⚠️ Drops support for Python 3.8 (#2686)
+- ⚠️ Removes the experimental CPython 3.13 free-threading builds and the `cpython-freethreading` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) option. CPython 3.14+ free-threading support remains available without the enable flag. (#2684)
+- ⚠️ Drops support for Cirrus CI, which is shutting down June 1, 2026 (#2817)
+- 🐛 Fixes `UV_PYTHON` not being set for [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) on Linux when using `uv` as the [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) (#2830)
+- 🛠 Updates Android to Python 3.13.13 and 3.14.4 (#2821)
+- 🛠 Applies Pyodide-specific patches to the Emscripten toolchain installation (#2800)
+- 🛠 Updates dependencies and container pins (#2845, #2837, #2821, #2818, #2810, #2838, #2813)
+- 🛠 Uses `python -V -V` for Windows build diagnostics (#2832)
+- 📚 Documents platform-specific [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) configuration (#2834)
+- 📚 Updates the "How it works" diagram with details of Android, iOS, and Pyodide builds (#2816)
+- 📚 Adds Pyodide icon and regenerates working examples data for Android, iOS, and Pyodide (#2815, #2811)
+- 📚 Links back to source in docs (#2806)
+- 💼 Adds PEP 723 metadata for `bin/` scripts and drops the `bin` dependency group (#2819)
+- 💼 Updates CI action pins and dev dependencies (#2851, #2843, #2826, #2823, #2820, #2807)
+- 🧪 Fixes Android tests using the `uv` frontend (#2809)
+- 🧪 Fixes the update-dependencies workflow to use `uv` to run `nox` (#2808)
+
+
 ### v3.4.1
 
 _2 April 2026_
@@ -252,6 +284,7 @@ _5 March 2026_
 - 🌟 You can now build wheels using `uv` as a build frontend. This should improve performance, especially if your project has lots of build dependencies. To use, set [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) to `uv`. (#2322)
 - ⚠️ We no longer support running on Travis CI. It may continue working but we don't run tests there anymore so we can't be sure. (#2682)
 - ✨ Improvements to building rust wheels on Android (#2650)
+- 🛠 Update Pyodide to 0.29.3 (#2719, #2733)
 - 🐛 Fix bug with the GitHub Action on Windows, where PATH was getting unnecessarily changed, causing issues with meson builds. (#2723)
 - ✨ Add support for quiet setting on `build` and `uv` from the cibuildwheel `build-verbosity` setting. (#2737)
 - 📚 Docs updates, including guidance on using Meson on Windows (#2718)
@@ -276,15 +309,7 @@ _12 November 2025_
 - 🛠 Improve the handling of `test-command` on Android, enabling more options to be passed (#2590)
 - 📚 Docs improvements (#2618)
 
-### v3.2.1
-
-_12 October 2025_
-
-- 🛠 Update to CPython 3.14.0 final (#2614)
-- 🐛 Fix the default MACOSX_DEPLOYMENT_TARGET on Python 3.14 (#2613)
-- 📚 Docs improvements (#2617)
-
-<!-- [[[end]]] (sum: NOLMd9iLDC) -->
+<!-- [[[end]]] (sum: ZD0EjcyC0B) -->
 
 ---
 
@@ -311,11 +336,11 @@ Core:
 - Matthieu Darbois [@mayeut](https://github.com/mayeut)
 - Henry Schreiner [@henryiii](https://github.com/henryiii)
 - Grzegorz Bokota [@Czaki](https://github.com/Czaki)
+- Agriya Khetarpal [@agriyakhetarpal](https://github.com/agriyakhetarpal) (also Pyodide)
 
 Platform maintainers:
 
 - Russell Keith-Magee [@freakboy3742](https://github.com/freakboy3742) (iOS)
-- Agriya Khetarpal [@agriyakhetarpal](https://github.com/agriyakhetarpal) (Pyodide)
 - Hood Chatham [@hoodmane](https://github.com/hoodmane) (Pyodide)
 - Gyeongjae Choi [@ryanking13](https://github.com/ryanking13) (Pyodide)
 - Tim Felgentreff [@timfel](https://github.com/timfel) (GraalPy)

bin/bump_version.py

@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
 
 # /// script
 # dependencies = ["click", "packaging", "prek"]

bin/generate_pyodide_constraints.py

@@ -1,4 +1,14 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///
 
 import sys
 import textwrap

bin/generate_schema.py

@@ -1,4 +1,4 @@
-#!/usr/bin/env -S uv run -q
+#!/usr/bin/env -S uv run --script
 
 # /// script
 # dependencies = ["pyyaml"]
@@ -28,7 +28,6 @@ $defs:
     description: How to inherit the parent's value.
   enable:
     enum:
-      - cpython-freethreading
       - cpython-prerelease
       - graalpy
       - pyodide-prerelease
@@ -39,6 +38,12 @@ additionalProperties: false
 description: cibuildwheel's settings.
 type: object
 properties:
+  audit-command:
+    description: Execute a shell command to audit each wheel after it is repaired. Use {wheel} for each wheel path, or {abi3_wheel} to only audit abi3 wheels.
+    type: string_array
+  audit-requires:
+    description: Install Python dependencies for the audit step.
+    type: string_array
   archs:
     description: Change the architectures built on your machine by default.
     type: string_array
@@ -309,6 +314,8 @@ items:
       type: object
       additionalProperties: false
       properties:
+        audit-command: {"$ref": "#/$defs/inherit"}
+        audit-requires: {"$ref": "#/$defs/inherit"}
         before-all: {"$ref": "#/$defs/inherit"}
         before-build: {"$ref": "#/$defs/inherit"}
         xbuild-tools: {"$ref": "#/$defs/inherit"}

bin/inspect_all_known_projects.py

@@ -1,4 +1,17 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "pygithub",
+#   "pyyaml",
+#   "rich",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///
 
 """
 Check known projects for usage of requires-python.

bin/make_dependency_update_pr.py

@@ -1,4 +1,10 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+# ]
+# ///
 
 
 import os

bin/projects.py

@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
 
 # /// script
 # dependencies = [
@@ -20,6 +20,7 @@ Suggested usage:
 import builtins
 import functools
 import textwrap
+import urllib.error
 import urllib.request
 import xml.dom.minidom
 from collections.abc import Iterable, Mapping, Sequence
@@ -30,7 +31,7 @@ from typing import Any, Self, TextIO
 
 import click
 import yaml
-from github import Github, GithubException
+from github import Auth, Github, GithubException
 
 ICONS = (
     "github",
@@ -38,10 +39,12 @@ ICONS = (
     "circleci",
     "gitlab",
     "travisci",
-    "cirrusci",
     "windows",
     "apple",
     "linux",
+    "android",
+    "ios",
+    "pyodide",
 )
 
 
@@ -130,8 +133,13 @@ class Project:
 
 def fetch_icon(icon_name: str) -> None:
     url = f"https://cdn.jsdelivr.net/npm/simple-icons@v4/icons/{icon_name}.svg"
-    with urllib.request.urlopen(url) as f:
-        original_svg_data = f.read()
+    try:
+        with urllib.request.urlopen(url) as f:
+            original_svg_data = f.read()
+    except urllib.error.HTTPError as e:
+        if e.code == 404 and path_for_icon(icon_name).exists():
+            return
+        raise
 
     document = xml.dom.minidom.parseString(original_svg_data)
     svgElement = document.documentElement
@@ -165,7 +173,7 @@ def get_projects(
         for icon in ICONS:
             fetch_icon(icon)
 
-    github = Github(auth) if online else None
+    github = Github(auth=Auth.Token(auth)) if (online and auth) else None
 
     return sorted((Project(item, github) for item in config), reverse=online)
 

bin/readme_changelog.py

@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
 
 import re
 from pathlib import Path

bin/readme_options_table.py

@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
 
 import dataclasses
 import re

bin/run_example_ci_configs.py

@@ -1,4 +1,10 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+# ]
+# ///
 
 
 import os
@@ -115,11 +121,6 @@ services = [
         dst_config_path=".gitlab-ci.yml",
         badge_md="[![Gitlab](https://gitlab.com/joerick/cibuildwheel/badges/{branch}/pipeline.svg)](https://gitlab.com/joerick/cibuildwheel/-/commits/{branch})",
     ),
-    CIService(
-        name="cirrus-ci",
-        dst_config_path=".cirrus.yml",
-        badge_md="[![Cirrus CI](https://api.cirrus-ci.com/github/pypa/cibuildwheel.svg?branch={branch})](https://cirrus-ci.com/github/pypa/cibuildwheel/{branch})",
-    ),
 ]
 
 

bin/run_tests.py

@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
 
 
 import argparse

bin/sample_build.py

@@ -1,4 +1,4 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
 
 
 import argparse

bin/update_docker.py

@@ -1,4 +1,11 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "packaging",
+#   "requests",
+# ]
+# ///
 
 import configparser
 import dataclasses

bin/update_how_it_works_image.py

@@ -1,49 +1,60 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
 
+# /// script
+# dependencies = [
+#   "playwright",
+# ]
+# ///
 
 import subprocess
 import sys
+import tempfile
 from pathlib import Path
 
-try:
-    from html2image import Html2Image  # type: ignore[import-not-found]
-except ImportError:
-    sys.exit(
-        """
-        html2image not found. Ensure you have Chrome (on Mac/Windows) or
-        Chromium (on Linux) installed, and then do:
-            pip install html2image
-        """
-    )
+from playwright.sync_api import sync_playwright  # type: ignore[import-not-found]
+
+CSS = """
+    <link href="https://fonts.googleapis.com/css2?family=Lato&display=swap" rel="stylesheet">
+    <style>
+        html, body {
+          font-family: Lato, "Helvetica Neue", Helvetica, Arial, sans-serif;
+          font-weight: 400;
+          font-size: 16px;
+          color: #404040;
+          background: white;
+          margin: 0;
+          padding: 0;
+        }
+        * {
+          box-sizing: border-box;
+        }
+    </style>
+"""
 
 
 def main() -> None:
-    subprocess.run(["mkdocs", "build"], check=True)
+    subprocess.run([sys.executable, "-m", "playwright", "install", "chromium"], check=True)
 
-    hti = Html2Image(custom_flags=["--force-device-scale-factor=2"])
+    html_str = Path("docs/diagram.html").read_text()
+    html_str = f"<html><head>{CSS}</head><body>{html_str}</body></html>"
 
-    html_str = Path("docs/diagram.md").read_text()
-    css_tags = f"""
-        <style>{Path("site/css/theme.css").read_text()}</style>
-        <style>{Path("site/css/theme_extra.css").read_text()}</style>
-        <style>{Path("site/extra.css").read_text()}</style>
-        <style>
-            body {{
-                background: white;
-            }}
-        </style>
-    """
-    html_str = css_tags + html_str
+    with tempfile.TemporaryDirectory() as tmp_dir_str:
+        html_path = Path(tmp_dir_str) / "diagram_screenshot.html"
+        html_path.write_text(html_str)
 
-    [screenshot, *_] = hti.screenshot(
-        html_str=html_str,
-        size=(830, 405),
-    )
+        dest_path = Path("docs/data/how-it-works.png")
 
-    dest_path = Path("docs/data/how-it-works.png")
-    dest_path.unlink(missing_ok=True)
+        with sync_playwright() as p:
+            browser = p.chromium.launch()
+            page = browser.new_page(device_scale_factor=2, viewport={"width": 830, "height": 600})
+            page.goto(html_path.as_uri())
+            page.wait_for_load_state("networkidle")
 
-    Path(screenshot).rename(dest_path)
+            height = page.evaluate("document.body.scrollHeight")
+            page.set_viewport_size({"width": 830, "height": height})
+
+            page.screenshot(path=str(dest_path), full_page=True)
+            browser.close()
 
 
 if __name__ == "__main__":

bin/update_nodejs.py

@@ -1,4 +1,13 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "packaging",
+#   "requests",
+#   "rich",
+# ]
+# ///
 
 
 import dataclasses

bin/update_python_build_standalone.py

@@ -1,4 +1,13 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///
 
 import json
 

bin/update_pythons.py

@@ -1,4 +1,17 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "packaging",
+#   "requests",
+#   "rich",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///
 
 
 import difflib

bin/update_virtualenv.py

@@ -1,4 +1,16 @@
-#!/usr/bin/env python3
+#!/usr/bin/env -S uv run --script
+
+# /// script
+# dependencies = [
+#   "click",
+#   "packaging",
+#   "rich",
+#   "cibuildwheel",
+# ]
+#
+# [tool.uv.sources]
+# cibuildwheel = { path = ".." }
+# ///
 
 
 import dataclasses

cibuildwheel/__init__.py

@@ -1 +1 @@
-__version__ = "3.4.1"
+__version__ = "4.0.0rc1"

cibuildwheel/__main__.py

@@ -468,13 +468,6 @@ def detect_warnings(*, options: Options) -> Generator[str, None, None]:
     build_selector = options.globals.build_selector
     test_selector = options.globals.test_selector
 
-    if EnableGroup.CPythonFreeThreading in build_selector.enable:
-        yield (
-            "'cpython-freethreading' enable is deprecated and will be removed in a future version. "
-            "It should be removed from tool.cibuildwheel.enable in pyproject.toml "
-            "or CIBW_ENABLE environment variable."
-        )
-
     all_valid_identifiers = [
         config.identifier
         for module in ALL_PLATFORM_MODULES.values()
@@ -540,10 +533,16 @@ def check_for_invalid_selectors(
                 msg += "This selector matches a group that wasn't enabled. Enable it using the `enable` option or remove this selector. "
 
             if "p2" in selector_ or "p35" in selector_:
-                msg += f"cibuildwheel 3.x no longer supports Python < 3.8. Please use the 1.x series or update `{selector_name}`. "
+                msg += f"cibuildwheel 4.x no longer supports Python < 3.9. Please use the 1.x series or update `{selector_name}`. "
                 error_type = errors.DeprecationError
             if "p36" in selector_ or "p37" in selector_:
-                msg += f"cibuildwheel 3.x no longer supports Python < 3.8. Please use the 2.x series or update `{selector_name}`. "
+                msg += f"cibuildwheel 4.x no longer supports Python < 3.9. Please use the 2.x series or update `{selector_name}`. "
+                error_type = errors.DeprecationError
+            if "p38" in selector_:
+                msg += f"cibuildwheel 4.x no longer supports Python < 3.9. Please use the 3.x series or update `{selector_name}`. "
+                error_type = errors.DeprecationError
+            if "cp313t" in selector_:
+                msg += f"cibuildwheel 4.x no longer supports Python 3.13 free-threading. Please use the 3.x series or update `{selector_name}`. "
                 error_type = errors.DeprecationError
 
             if selector_name == "build":

cibuildwheel/audit.py

@@ -0,0 +1,132 @@
+import subprocess
+import sys
+from pathlib import Path
+
+from cibuildwheel import errors
+from cibuildwheel.logger import log
+from cibuildwheel.options import BuildOptions
+from cibuildwheel.util.cmd import call, shell
+from cibuildwheel.util.helpers import prepare_command
+from cibuildwheel.util.packaging import is_abi3_wheel
+from cibuildwheel.venv import activate_virtualenv, find_uv, virtualenv
+
+
+def run_audit(
+    *,
+    tmp_dir: Path,
+    build_options: BuildOptions,
+    wheel: Path,
+) -> None:
+    """
+    Run the audit commands on a single wheel.
+
+    Creates a virtualenv (or reuses an existing one) and installs any
+    audit requirements, then runs each audit command template against
+    the wheel. Commands containing {abi3_wheel} are skipped for
+    non-abi3 wheels.
+    """
+
+    if not needs_audit(build_options.audit_command, wheel.name):
+        return
+
+    log.step("Auditing wheel...")
+
+    use_uv = build_options.build_frontend.name in {"build[uv]", "uv"}
+    version = f"{sys.version_info.major}.{sys.version_info.minor}.{sys.version_info.micro}"
+    dependency_constraint = build_options.dependency_constraints.get_for_python_version(
+        version=version, tmp_dir=tmp_dir
+    )
+
+    # Use the base interpreter, not the venv python, to avoid nested-venv
+    # issues where pip can't be found (seen on Windows + Python 3.13).
+    host_python = Path(getattr(sys, "_base_executable", sys.executable))
+
+    audit_venv_dir = tmp_dir / "audit_venv"
+    if not (audit_venv_dir / "pyvenv.cfg").exists():
+        env = virtualenv(
+            version,
+            host_python,
+            audit_venv_dir,
+            dependency_constraint=dependency_constraint,
+            use_uv=use_uv,
+        )
+    else:
+        env = activate_virtualenv(audit_venv_dir)
+
+    # install audit requirements. This is run every time in case the user has
+    # defined overrides.
+    audit_requires = build_options.audit_requires
+    if audit_requires:
+        print(f"Installing audit dependencies: {', '.join(audit_requires)}")
+
+        pip: list[str]
+        if use_uv:
+            uv_path = find_uv()
+            assert uv_path is not None
+            pip = [str(uv_path), "pip"]
+        else:
+            pip = ["pip"]
+        # we pin if the audit-requires is left as the default "abi3audit"
+        should_pin = audit_requires == ["abi3audit"] and dependency_constraint
+
+        call(
+            *pip,
+            "install",
+            *(["--constraint", str(dependency_constraint)] if should_pin else []),
+            *audit_requires,
+            env=env,
+        )
+
+    audit_command = build_options.audit_command
+
+    for command_template in audit_command:
+        if "{abi3_wheel}" in command_template and "{wheel}" in command_template:
+            msg = (
+                f"Invalid audit command {command_template!r}: cannot contain both {{abi3_wheel}} "
+                "and {{wheel}} placeholders"
+            )
+            raise errors.ConfigurationError(msg)
+
+        if "{abi3_wheel}" in command_template and not is_abi3_wheel(wheel.name):
+            continue
+
+        prepared_command = prepare_command(
+            command_template,
+            abi3_wheel=wheel,
+            wheel=wheel,
+            project=".",
+            package=build_options.package_dir,
+        )
+
+        print(f"Running audit command: {prepared_command}")
+        try:
+            shell(prepared_command, env=env)
+        except subprocess.CalledProcessError as e:
+            print(f"Audit command failed with exit code {e.returncode}")
+            msg = f"Audit command failed: {prepared_command}"
+            raise errors.AuditCommandFailedError(msg) from e
+
+
+def needs_audit(audit_commands: list[str], wheel_name: str) -> bool:
+    saw_abi3_placeholder = False
+    for audit_command in audit_commands:
+        if "{abi3_wheel}" not in audit_command and "{wheel}" not in audit_command:
+            msg = (
+                f"Invalid audit command {audit_command!r}: must contain either "
+                "{{abi3_wheel}} or {{wheel}} placeholder"
+            )
+            raise errors.ConfigurationError(msg)
+
+        if "{abi3_wheel}" in audit_command:
+            saw_abi3_placeholder = True
+            if is_abi3_wheel(wheel_name):
+                return True
+        elif "{wheel}" in audit_command:
+            return True
+
+    if saw_abi3_placeholder:
+        print("No audit required for this wheel, as it is not abi3")
+    else:
+        print("No audit configured")
+
+    return False

cibuildwheel/ci.py

@@ -14,7 +14,6 @@ class CIProvider(Enum):
     azure_pipelines = "azure_pipelines"
     github_actions = "github_actions"
     gitlab = "gitlab"
-    cirrus_ci = "cirrus_ci"
 
     # unofficial support
     appveyor = "appveyor"
@@ -35,8 +34,6 @@ def detect_ci_provider() -> CIProvider | None:
         return CIProvider.github_actions
     elif "GITLAB_CI" in os.environ:
         return CIProvider.gitlab
-    elif "CIRRUS_CI" in os.environ:
-        return CIProvider.cirrus_ci
     elif strtobool(os.environ.get("CI", "false")):
         return CIProvider.other
     else:

cibuildwheel/errors.py

@@ -103,3 +103,9 @@ class RepairStepProducedMultipleWheelsError(FatalError):
         )
         super().__init__(message)
         self.return_code = 8
+
+
+class AuditCommandFailedError(FatalError):
+    def __init__(self, message: str) -> None:
+        super().__init__(message)
+        self.return_code = 9

cibuildwheel/frontend.py

@@ -4,8 +4,8 @@ import typing
 from collections.abc import Sequence
 from typing import Literal, Self, get_args
 
-from cibuildwheel.logger import log
-from cibuildwheel.util.helpers import parse_key_value_string
+from cibuildwheel.typing import PathOrStr
+from cibuildwheel.util.helpers import parse_key_value_string, prepare_command
 
 BuildFrontendName = Literal["pip", "build", "build[uv]", "uv"]
 
@@ -36,12 +36,8 @@ class BuildFrontendConfig:
             return {"name": self.name, "args": repr(self.args)}
 
 
-def _get_verbosity_flags(level: int, frontend: BuildFrontendName, *, py38: bool) -> list[str]:
+def _get_verbosity_flags(level: int, frontend: BuildFrontendName) -> list[str]:
     if level < 0:
-        if frontend.startswith("build") and py38:
-            msg = f"build_verbosity {level} is not supported for {frontend} frontend. Ignoring."
-            log.warning(msg)
-            return []
         return ["-" + -level * "q"]
 
     if level > 0:
@@ -58,6 +54,10 @@ def _split_config_settings(config_settings: str) -> list[str]:
     return [f"-C{setting}" for setting in config_settings_list]
 
 
+def prepare_config_settings(config_settings: str, *, project: PathOrStr, package: PathOrStr) -> str:
+    return prepare_command(config_settings, project=project, package=package)
+
+
 # Based on build.__main__.main.
 def parse_config_settings(config_settings_str: str) -> dict[str, str | list[str]]:
     config_settings: dict[str, str | list[str]] = {}
@@ -75,10 +75,10 @@ def parse_config_settings(config_settings_str: str) -> dict[str, str | list[str]
 
 
 def get_build_frontend_extra_flags(
-    build_frontend: BuildFrontendConfig, verbosity_level: int, config_settings: str, *, py38: bool
+    build_frontend: BuildFrontendConfig, verbosity_level: int, config_settings: str
 ) -> list[str]:
     return [
         *_split_config_settings(config_settings),
         *build_frontend.args,
-        *_get_verbosity_flags(verbosity_level, build_frontend.name, py38=py38),
+        *_get_verbosity_flags(verbosity_level, build_frontend.name),
     ]

cibuildwheel/options.py

@@ -125,6 +125,8 @@ class BuildOptions:
     test_groups: list[str]
     test_environment: ParsedEnvironment
     test_runtime: TestRuntimeConfig
+    audit_requires: list[str]
+    audit_command: list[str]
     build_verbosity: int
     build_frontend: BuildFrontendConfig
     config_settings: str
@@ -686,8 +688,6 @@ class Options:
             skip_config = ""
             architectures = Architecture.all_archs(self.platform)
             enable |= EnableGroup.all_groups()
-            if args.only.startswith("cp313t-"):
-                enable.add(EnableGroup.CPythonFreeThreading)
 
         build_selector = BuildSelector(
             build_config=build_config,
@@ -894,6 +894,15 @@ class Options:
 
             pyodide_version = self.reader.get("pyodide-version", env_plat=False)
 
+            audit_command_str = self.reader.get(
+                "audit-command", option_format=ListFormat(sep=" && ")
+            )
+            audit_command = audit_command_str.split(" && ") if audit_command_str else []
+
+            audit_requires = self.reader.get(
+                "audit-requires", option_format=ListFormat(sep=" ")
+            ).split()
+
             return BuildOptions(
                 globals=self.globals,
                 test_command=test_command,
@@ -917,6 +926,8 @@ class Options:
                 config_settings=config_settings,
                 container_engine=container_engine,
                 pyodide_version=pyodide_version or None,
+                audit_command=audit_command,
+                audit_requires=audit_requires,
             )
 
     def check_for_invalid_configuration(self, identifiers: Iterable[str]) -> None:

cibuildwheel/platforms/android.py

@@ -24,7 +24,12 @@ from filelock import FileLock
 
 from cibuildwheel import errors, platforms  # pylint: disable=cyclic-import
 from cibuildwheel.architecture import Architecture, arch_synonym
-from cibuildwheel.frontend import get_build_frontend_extra_flags, parse_config_settings
+from cibuildwheel.audit import run_audit
+from cibuildwheel.frontend import (
+    get_build_frontend_extra_flags,
+    parse_config_settings,
+    prepare_config_settings,
+)
 from cibuildwheel.logger import log
 from cibuildwheel.options import BuildOptions, Options
 from cibuildwheel.selector import BuildSelector
@@ -36,6 +41,8 @@ from cibuildwheel.util.packaging import find_compatible_wheel
 from cibuildwheel.util.python_build_standalone import create_python_build_standalone_environment
 from cibuildwheel.venv import constraint_flags, find_uv, virtualenv
 
+RESOURCES_ANDROID = resources.PATH / "android"
+
 ANDROID_TRIPLET = {
     "arm64_v8a": "aarch64-linux-android",
     "x86_64": "x86_64-linux-android",
@@ -148,6 +155,7 @@ def build(options: Options, tmp_path: Path) -> None:
                 before_build(state)
                 built_wheel = build_wheel(state)
                 repaired_wheel = repair_wheel(state, built_wheel)
+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
 
             test_wheel(state, repaired_wheel, build_frontend=build_options.build_frontend.name)
 
@@ -176,6 +184,11 @@ def setup_target_python(config: PythonConfiguration, build_path: Path) -> Path:
     python_dir = build_path / "python"
     python_dir.mkdir()
     shutil.unpack_archive(python_tgz, python_dir)
+
+    # Patch a testbed bug. This code and the patch file can both be removed once we've
+    # updated to Python versions that include the fix.
+    call("patch", "-p1", "-i", RESOURCES_ANDROID / "android.patch", cwd=python_dir)
+
     return python_dir
 
 
@@ -222,7 +235,10 @@ def setup_env(
                 f"or insert {command} above it."
             )
             raise errors.FatalError(msg)
-        call(command, "--version", env=build_env)
+        if command == "python":
+            call(command, "-V", "-V", env=build_env)
+        else:
+            call(command, "--version", env=build_env)
 
     # Construct an altered environment which simulates running on Android.
     android_env = setup_android_env(config, python_dir, venv_dir, build_env)
@@ -350,7 +366,7 @@ def setup_android_env(
 ) -> dict[str, str]:
     site_packages = next(venv_dir.glob("lib/python*/site-packages"))
     for suffix in ["pth", "py"]:
-        shutil.copy(resources.PATH / f"_cross_venv.{suffix}", site_packages)
+        shutil.copy(RESOURCES_ANDROID / f"_cross_venv.{suffix}", site_packages)
 
     sysconfigdata_path = Path(
         shutil.copy(
@@ -425,7 +441,7 @@ def setup_rust(
     venv_bin = Path(env["VIRTUAL_ENV"]) / "bin"
     for tool in ["cargo", "rustup"]:
         shim_path = venv_bin / tool
-        shutil.copy(resources.PATH / "_rust_shim.py", shim_path)
+        shutil.copy(RESOURCES_ANDROID / "rust_shim.py", shim_path)
         shim_path.chmod(0o755)
 
 
@@ -456,8 +472,11 @@ def build_wheel(state: BuildState) -> Path:
                 *get_build_frontend_extra_flags(
                     state.options.build_frontend,
                     state.options.build_verbosity,
-                    state.options.config_settings,
-                    py38=False,
+                    prepare_config_settings(
+                        state.options.config_settings,
+                        project=".",
+                        package=state.options.package_dir,
+                    ),
                 ),
                 env=state.android_env,
             )
@@ -474,8 +493,11 @@ def build_wheel(state: BuildState) -> Path:
                 *get_build_frontend_extra_flags(
                     state.options.build_frontend,
                     state.options.build_verbosity,
-                    state.options.config_settings,
-                    py38=False,
+                    prepare_config_settings(
+                        state.options.config_settings,
+                        project=".",
+                        package=state.options.package_dir,
+                    ),
                 ),
                 env=state.android_env,
             )
@@ -632,7 +654,7 @@ def test_wheel(state: BuildState, wheel: Path, *, build_frontend: str) -> None:
         return
 
     log.step("Testing wheel...")
-    use_uv = build_frontend == "build[uv]"
+    use_uv = build_frontend in {"build[uv]", "uv"}
     uv_path = find_uv()
     if use_uv and uv_path is None:
         msg = "uv not found"

cibuildwheel/platforms/ios.py

@@ -14,8 +14,13 @@ from filelock import FileLock
 
 from cibuildwheel import errors
 from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
 from cibuildwheel.environment import ParsedEnvironment
-from cibuildwheel.frontend import BuildFrontendName, get_build_frontend_extra_flags
+from cibuildwheel.frontend import (
+    BuildFrontendName,
+    get_build_frontend_extra_flags,
+    prepare_config_settings,
+)
 from cibuildwheel.logger import log
 from cibuildwheel.options import Options
 from cibuildwheel.platforms.macos import install_cpython as install_build_cpython
@@ -355,7 +360,7 @@ def setup_python(
             "entry or insert python above it."
         )
         raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)
 
     # Check what pip version we're on
     assert (venv_bin_path / "pip").exists()
@@ -477,8 +482,11 @@ def build(options: Options, tmp_path: Path) -> None:
                 extra_flags = get_build_frontend_extra_flags(
                     build_frontend,
                     build_options.build_verbosity,
-                    build_options.config_settings,
-                    py38=False,
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=build_options.package_dir,
+                    ),
                 )
 
                 match build_frontend.name:
@@ -539,10 +547,12 @@ def build(options: Options, tmp_path: Path) -> None:
                 if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
                     raise errors.AlreadyBuiltWheelError(repaired_wheel.name)
 
-                test_wheel = repaired_wheel
-
                 log.step_end()
 
+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
+                test_wheel = repaired_wheel
+
             if build_options.test_command and build_options.test_selector(config.identifier):
                 if not config.is_simulator:
                     log.step("Skipping tests on non-simulator SDK")

cibuildwheel/platforms/linux.py

@@ -1,5 +1,6 @@
 import contextlib
 import dataclasses
+import shutil
 import subprocess
 import sys
 import textwrap
@@ -10,7 +11,8 @@ from typing import TYPE_CHECKING, assert_never
 
 from cibuildwheel import errors
 from cibuildwheel.architecture import Architecture
-from cibuildwheel.frontend import get_build_frontend_extra_flags
+from cibuildwheel.audit import needs_audit, run_audit
+from cibuildwheel.frontend import get_build_frontend_extra_flags, prepare_config_settings
 from cibuildwheel.logger import log
 from cibuildwheel.oci_container import OCIContainer, OCIContainerEngineConfig, OCIPlatform
 from cibuildwheel.options import BuildOptions, Options
@@ -237,6 +239,7 @@ def build_in_container(
         if PurePosixPath(which_python) != python_bin / "python":
             msg = "python available on PATH doesn't match our installed instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
             raise errors.FatalError(msg)
+        container.call(["python", "-V", "-V"], env=env)
 
         if use_uv:
             which_uv = container.call(["which", "uv"], env=env, capture_output=True).strip()
@@ -264,7 +267,16 @@ def build_in_container(
                     project=container_project_path,
                     package=container_package_dir,
                 )
-                container.call(["sh", "-c", before_build_prepared], env=env)
+                before_build_env = env.copy()
+                if use_uv:
+                    # On Linux, no virtualenv is created for the build environment
+                    # (unlike macOS/Windows, where one is set up before before_build
+                    # runs). uv requires either an active venv or an explicit Python
+                    # target to install packages. Pin UV_PYTHON to the exact interpreter
+                    # for this build so that `uv pip install` works in before_build
+                    # without requiring users to pass --system.
+                    before_build_env["UV_PYTHON"] = str(python_bin / "python")
+                container.call(["sh", "-c", before_build_prepared], env=before_build_env)
 
             log.step("Building wheel...")
 
@@ -276,8 +288,11 @@ def build_in_container(
             extra_flags = get_build_frontend_extra_flags(
                 build_frontend,
                 build_options.build_verbosity,
-                build_options.config_settings,
-                py38=config.identifier[1:].startswith("p38"),
+                prepare_config_settings(
+                    build_options.config_settings,
+                    project=container_project_path,
+                    package=container_package_dir,
+                ),
             )
 
             match build_frontend.name:
@@ -359,6 +374,18 @@ def build_in_container(
             if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
                 raise errors.AlreadyBuiltWheelError(repaired_wheel.name)
 
+            log.step_end()
+
+            if needs_audit(build_options.audit_command, repaired_wheel.name):
+                local_abi3audit_dir = local_identifier_tmp_dir / "audit"
+                local_abi3audit_dir.mkdir(parents=True, exist_ok=True)
+                try:
+                    container.copy_out(repaired_wheel_dir, local_abi3audit_dir)
+                    local_wheel = local_abi3audit_dir / repaired_wheel.name
+                    run_audit(tmp_dir=local_tmp_dir, build_options=build_options, wheel=local_wheel)
+                finally:
+                    shutil.rmtree(local_abi3audit_dir, ignore_errors=True)
+
         if build_options.test_command and build_options.test_selector(config.identifier):
             log.step("Testing wheel...")
 
@@ -481,8 +508,7 @@ def build(options: Options, tmp_path: Path) -> None:
                 Docker or Podman is required to run Linux builds. If you're
                 building on Travis CI, add `services: [docker]` to your
                 .travis.yml. If you're building on Circle CI in Linux, add a
-                `setup_remote_docker` step to your .circleci/config.yml. If
-                you're building on Cirrus CI, use `docker_builder` task.
+                `setup_remote_docker` step to your .circleci/config.yml.
                 """
             )
             raise errors.ConfigurationError(msg) from error

cibuildwheel/platforms/macos.py

@@ -17,9 +17,14 @@ from packaging.version import Version
 
 from cibuildwheel import errors
 from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
 from cibuildwheel.ci import detect_ci_provider
 from cibuildwheel.environment import ParsedEnvironment
-from cibuildwheel.frontend import BuildFrontendName, get_build_frontend_extra_flags
+from cibuildwheel.frontend import (
+    BuildFrontendName,
+    get_build_frontend_extra_flags,
+    prepare_config_settings,
+)
 from cibuildwheel.logger import log
 from cibuildwheel.options import Options
 from cibuildwheel.selector import BuildSelector
@@ -28,7 +33,7 @@ from cibuildwheel.util.cmd import call, shell
 from cibuildwheel.util.file import CIBW_CACHE_PATH, copy_test_sources, download, move_file
 from cibuildwheel.util.helpers import prepare_command, unwrap
 from cibuildwheel.util.packaging import find_compatible_wheel, get_pip_version
-from cibuildwheel.venv import constraint_flags, find_uv, virtualenv
+from cibuildwheel.venv import constraint_flags, find_uv, target_marker_env, virtualenv
 
 
 @functools.cache
@@ -151,11 +156,10 @@ def install_cpython(_tmp: Path, version: str, url: str, free_threading: bool) ->
             if not pkg_path.exists():
                 download(url, pkg_path)
             args = []
-            if version.startswith("3.13"):
-                # Python 3.13 is the first version to have a free-threading option
-                args += ["-applyChoiceChangesXML", str(resources.FREE_THREAD_ENABLE_313.resolve())]
-            elif version.startswith("3.14"):
+            if version.startswith("3.14"):
                 args += ["-applyChoiceChangesXML", str(resources.FREE_THREAD_ENABLE_314.resolve())]
+            elif version.startswith("3.15"):
+                args += ["-applyChoiceChangesXML", str(resources.FREE_THREAD_ENABLE_315.resolve())]
             call("sudo", "installer", "-pkg", pkg_path, *args, "-target", "/")
             pkg_path.unlink()
             env = os.environ.copy()
@@ -243,6 +247,7 @@ def setup_python(
         venv_path,
         dependency_constraint,
         use_uv=use_uv,
+        marker_env=target_marker_env(implementation_id=implementation_id),
     )
     venv_bin_path = venv_path / "bin"
     assert venv_bin_path.exists()
@@ -270,7 +275,7 @@ def setup_python(
     if which_python != str(venv_bin_path / "python"):
         msg = "python available on PATH doesn't match our installed instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
         raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)
 
     # check what pip version we're on
     if not use_uv:
@@ -477,8 +482,11 @@ def build(options: Options, tmp_path: Path) -> None:
                 extra_flags = get_build_frontend_extra_flags(
                     build_frontend,
                     build_options.build_verbosity,
-                    build_options.config_settings,
-                    py38=config.identifier[1:].startswith("p38"),
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=build_options.package_dir,
+                    ),
                 )
 
                 build_env = env.copy()
@@ -569,15 +577,10 @@ def build(options: Options, tmp_path: Path) -> None:
 
                 log.step_end()
 
+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
             if build_options.test_command and build_options.test_selector(config.identifier):
                 machine_arch = platform.machine()
-                python_arch = call(
-                    "python",
-                    "-sSc",
-                    "import platform; print(platform.machine())",
-                    env=env,
-                    capture_stdout=True,
-                ).strip()
                 testing_archs: list[Literal["x86_64", "arm64"]]
 
                 if config_is_arm64:
@@ -625,24 +628,6 @@ def build(options: Options, tmp_path: Path) -> None:
                         # skip this test
                         continue
 
-                    is_cp38 = config.identifier.startswith("cp38-")
-                    if testing_arch == "arm64" and is_cp38 and python_arch != "arm64":
-                        log.warning(
-                            unwrap(
-                                """
-                                While cibuildwheel can build CPython 3.8 universal2/arm64 wheels, we
-                                cannot test the arm64 part of them, even when running on an Apple
-                                Silicon machine. This is because we use the x86_64 installer of
-                                CPython 3.8. See the discussion in
-                                https://github.com/pypa/cibuildwheel/pull/1169 for the details. To
-                                silence this warning, set `CIBW_TEST_SKIP: "cp38-macosx_*:arm64"`.
-                                """
-                            )
-                        )
-
-                        # skip this test
-                        continue
-
                     log.step(
                         "Testing wheel..."
                         if testing_arch == machine_arch
@@ -699,33 +684,16 @@ def build(options: Options, tmp_path: Path) -> None:
                         shell_with_arch(before_test_prepared, env=virtualenv_env)
 
                     # install the wheel
-                    if is_cp38 and python_arch == "x86_64":
-                        virtualenv_env_install_wheel = virtualenv_env.copy()
-                        virtualenv_env_install_wheel["SYSTEM_VERSION_COMPAT"] = "0"
-                        log.notice(
-                            unwrap(
-                                """
-                                Setting SYSTEM_VERSION_COMPAT=0 to ensure CPython 3.8 can get
-                                correct macOS version and allow installation of wheels with
-                                MACOSX_DEPLOYMENT_TARGET >= 11.0.
-                                See https://github.com/pypa/cibuildwheel/issues/1767 for the
-                                details.
-                                """
-                            )
-                        )
-                    else:
-                        virtualenv_env_install_wheel = virtualenv_env
-
                     pip_install(
                         f"{repaired_wheel}{build_options.test_extras}",
-                        env=virtualenv_env_install_wheel,
+                        env=virtualenv_env,
                     )
 
                     # test the wheel
                     if build_options.test_requires:
                         pip_install(
                             *build_options.test_requires,
-                            env=virtualenv_env_install_wheel,
+                            env=virtualenv_env,
                         )
 
                     # run the tests from a temp dir, with an absolute path in the command

cibuildwheel/platforms/pyodide.py

@@ -16,8 +16,9 @@ from filelock import FileLock
 
 from cibuildwheel import errors
 from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
 from cibuildwheel.environment import ParsedEnvironment
-from cibuildwheel.frontend import get_build_frontend_extra_flags
+from cibuildwheel.frontend import get_build_frontend_extra_flags, prepare_config_settings
 from cibuildwheel.logger import log
 from cibuildwheel.options import Options
 from cibuildwheel.selector import BuildSelector
@@ -94,22 +95,28 @@ def ensure_node(major_version: str) -> Path:
     return path
 
 
-def install_emscripten(tmp: Path, version: str) -> Path:
-    url = f"https://github.com/emscripten-core/emsdk/archive/refs/tags/{version}.zip"
-    installation_path = CIBW_CACHE_PATH / f"emsdk-{version}"
-    emsdk_path = installation_path / f"emsdk-{version}/emsdk"
-    emcc_path = installation_path / f"emsdk-{version}/upstream/emscripten/emcc"
-    with FileLock(f"{installation_path}.lock"):
-        if installation_path.exists():
-            return emcc_path
-        emsdk_zip = tmp / "emsdk.zip"
-        download(url, emsdk_zip)
-        installation_path.mkdir()
-        extract_zip(emsdk_zip, installation_path)
-        call(emsdk_path, "install", version)
-        call(emsdk_path, "activate", version)
-
-    return emcc_path
+def install_emscripten(env: dict[str, str], version: str, xbuildenv_cache_path: Path) -> Path:
+    """Install Emscripten via pyodide-build, which also applies Pyodide-specific patches."""
+    emscripten_dir = Path(
+        call("pyodide", "config", "get", "emscripten_dir", env=env, capture_stdout=True).strip()
+    )
+    with FileLock(CIBW_CACHE_PATH / "emscripten.lock"):
+        if emscripten_dir.exists():
+            return emscripten_dir
+        call(
+            "pyodide",
+            "xbuildenv",
+            "install-emscripten",
+            "--force",
+            "--version",
+            version,
+            "--path",
+            str(xbuildenv_cache_path),
+            env=env,
+            cwd=CIBW_CACHE_PATH,
+        )
+    assert emscripten_dir.exists()
+    return emscripten_dir
 
 
 def get_all_xbuildenv_version_info(env: dict[str, str]) -> list[PyodideXBuildEnvInfo]:
@@ -180,12 +187,8 @@ def validate_pyodide_build_version(
         raise errors.FatalError(msg)
 
 
-def install_xbuildenv(env: dict[str, str], pyodide_build_version: str, pyodide_version: str) -> str:
+def install_xbuildenv(env: dict[str, str], xbuildenv_cache_path: Path, pyodide_version: str) -> str:
     """Install a particular Pyodide xbuildenv version and set a path to the Pyodide root."""
-    # Since pyodide-build was unvendored from Pyodide v0.27.0, the versions of
-    # pyodide-build are uncoupled from the versions of Pyodide. So, we specify
-    # both the pyodide-build version and the Pyodide version in the temp path.
-    xbuildenv_cache_path = CIBW_CACHE_PATH / f"pyodide-build-{pyodide_build_version}"
     pyodide_root = xbuildenv_cache_path / pyodide_version / "xbuildenv" / "pyodide-root"
 
     with FileLock(CIBW_CACHE_PATH / "xbuildenv.lock"):
@@ -268,7 +271,7 @@ def setup_python(
     if which_python != str(venv_bin_path / "python"):
         msg = "python available on PATH doesn't match our venv instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
         raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)
 
     # check what pip version we're on
     assert (venv_bin_path / "pip").exists()
@@ -303,14 +306,18 @@ def setup_python(
         pyodide_build_version=pyodide_build_version,
     )
 
-    emscripten_version = xbuildenv_info["emscripten"]
-    log.step(f"Installing Emscripten version: {emscripten_version} ...")
-    emcc_path = install_emscripten(tmp, emscripten_version)
-
-    env["PATH"] = os.pathsep.join([str(emcc_path.parent), env["PATH"]])
+    xbuildenv_cache_path = CIBW_CACHE_PATH / f"pyodide-build-{pyodide_build_version}"
 
     log.step(f"Installing Pyodide xbuildenv version: {pyodide_version} ...")
-    env["PYODIDE_ROOT"] = install_xbuildenv(env, pyodide_build_version, pyodide_version)
+    env["PYODIDE_ROOT"] = install_xbuildenv(env, xbuildenv_cache_path, pyodide_version)
+
+    emscripten_version = xbuildenv_info["emscripten"]
+    log.step(
+        f"Installing Emscripten {emscripten_version} and applying Pyodide-specific patches ..."
+    )
+    emscripten_dir = install_emscripten(env, emscripten_version, xbuildenv_cache_path)
+
+    env["PATH"] = os.pathsep.join([str(emscripten_dir), env["PATH"]])
 
     return env
 
@@ -417,8 +424,11 @@ def build(options: Options, tmp_path: Path) -> None:
                 extra_flags = get_build_frontend_extra_flags(
                     build_frontend,
                     build_options.build_verbosity,
-                    build_options.config_settings,
-                    py38=False,
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=build_options.package_dir,
+                    ),
                 )
 
                 call(
@@ -454,6 +464,8 @@ def build(options: Options, tmp_path: Path) -> None:
                 if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
                     raise errors.AlreadyBuiltWheelError(repaired_wheel.name)
 
+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
             if build_options.test_command and build_options.test_selector(config.identifier):
                 log.step("Testing wheel...")
 

cibuildwheel/platforms/windows.py

@@ -14,8 +14,13 @@ from filelock import FileLock
 
 from cibuildwheel import errors
 from cibuildwheel.architecture import Architecture
+from cibuildwheel.audit import run_audit
 from cibuildwheel.environment import ParsedEnvironment
-from cibuildwheel.frontend import BuildFrontendName, get_build_frontend_extra_flags
+from cibuildwheel.frontend import (
+    BuildFrontendName,
+    get_build_frontend_extra_flags,
+    prepare_config_settings,
+)
 from cibuildwheel.logger import log
 from cibuildwheel.options import Options
 from cibuildwheel.selector import BuildSelector
@@ -30,7 +35,7 @@ from cibuildwheel.util.file import (
 )
 from cibuildwheel.util.helpers import prepare_command, unwrap
 from cibuildwheel.util.packaging import find_compatible_wheel, get_pip_version
-from cibuildwheel.venv import constraint_flags, find_uv, virtualenv
+from cibuildwheel.venv import constraint_flags, find_uv, target_marker_env, virtualenv
 
 
 def get_nuget_args(
@@ -238,11 +243,6 @@ def setup_rust_cross_compile(
         )
 
 
-def can_use_uv(python_configuration: PythonConfiguration) -> bool:
-    conditions = (not python_configuration.identifier.startswith("pp38-"),)
-    return all(conditions)
-
-
 def setup_python(
     tmp: Path,
     python_configuration: PythonConfiguration,
@@ -274,9 +274,6 @@ def setup_python(
         raise ValueError(msg)
     assert base_python.exists()
 
-    if build_frontend == "build[uv]" and not can_use_uv(python_configuration):
-        build_frontend = "build"
-
     use_uv = build_frontend in {"build[uv]", "uv"}
     uv_path = find_uv()
 
@@ -288,6 +285,7 @@ def setup_python(
         venv_path,
         dependency_constraint,
         use_uv=use_uv,
+        marker_env=target_marker_env(implementation_id=implementation_id),
     )
 
     # set up environment variables for run_with_env
@@ -306,7 +304,7 @@ def setup_python(
     if where_python != str(venv_path / "Scripts" / "python.exe"):
         msg = "python available on PATH doesn't match our installed instance. If you have modified PATH, ensure that you don't overwrite cibuildwheel's entry or insert python above it."
         raise errors.FatalError(msg)
-    call("python", "--version", env=env)
+    call("python", "-V", "-V", env=env)
     call("python", "-c", "\"import struct; print(struct.calcsize('P') * 8)\"", env=env)
 
     # check what pip version we're on
@@ -321,12 +319,22 @@ def setup_python(
 
     log.step("Installing build tools...")
     match build_frontend:
+        case "pip":
+            call(
+                "pip",
+                "install",
+                "--upgrade",
+                "delvewheel",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
         case "build":
             call(
                 "pip",
                 "install",
                 "--upgrade",
                 "build[virtualenv]",
+                "delvewheel",
                 *constraint_flags(dependency_constraint),
                 env=env,
             )
@@ -340,9 +348,25 @@ def setup_python(
                 where_python,
                 "--upgrade",
                 "build[virtualenv]",
+                "delvewheel",
                 *constraint_flags(dependency_constraint),
                 env=env,
             )
+        case "uv":
+            assert uv_path is not None
+            call(
+                uv_path,
+                "pip",
+                "install",
+                "--python",
+                where_python,
+                "--upgrade",
+                "delvewheel",
+                *constraint_flags(dependency_constraint),
+                env=env,
+            )
+        case _:
+            assert_never(build_frontend)
 
     if python_libs_base:
         # Set up the environment for various backends to enable cross-compilation
@@ -415,7 +439,7 @@ def build(options: Options, tmp_path: Path) -> None:
         for config in python_configurations:
             build_options = options.build_options(config.identifier)
             build_frontend = build_options.build_frontend
-            use_uv = build_frontend.name in {"build[uv]", "uv"} and can_use_uv(config)
+            use_uv = build_frontend.name in {"build[uv]", "uv"}
             log.build_start(config.identifier)
 
             identifier_tmp_dir = tmp_path / config.identifier
@@ -462,8 +486,11 @@ def build(options: Options, tmp_path: Path) -> None:
                 extra_flags = get_build_frontend_extra_flags(
                     build_frontend,
                     build_options.build_verbosity,
-                    build_options.config_settings,
-                    py38=config.identifier[1:].startswith("p38"),
+                    prepare_config_settings(
+                        build_options.config_settings,
+                        project=".",
+                        package=options.globals.package_dir,
+                    ),
                 )
 
                 if (
@@ -559,6 +586,8 @@ def build(options: Options, tmp_path: Path) -> None:
                 if repaired_wheel.name in {wheel.name for wheel in built_wheels}:
                     raise errors.AlreadyBuiltWheelError(repaired_wheel.name)
 
+                run_audit(tmp_dir=tmp_path, build_options=build_options, wheel=repaired_wheel)
+
             test_selected = options.globals.test_selector(config.identifier)
             if test_selected and config.arch == "ARM64" != platform_module.machine():
                 log.warning(

cibuildwheel/resources/android/android.patch

@@ -0,0 +1,11 @@
+--- a/android.py
++++ b/android.py
+@@ -1021,7 +1021,7 @@ def main():
+     context = parse_args()
+ 
+     # Set the CROSS_BUILD_DIR if an argument was provided
+-    if context.cross_build_dir:
++    if getattr(context, "cross_build_dir", None):
+         global CROSS_BUILD_DIR
+         CROSS_BUILD_DIR = context.cross_build_dir.resolve()
+ 

cibuildwheel/resources/build-platforms.toml

@@ -1,154 +1,148 @@
 [linux]
 python_configurations = [
-  { identifier = "cp38-manylinux_x86_64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
   { identifier = "cp39-manylinux_x86_64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-manylinux_x86_64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-manylinux_x86_64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-manylinux_x86_64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-manylinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-manylinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-manylinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_i686", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-manylinux_i686", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-manylinux_i686", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-manylinux_i686", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-manylinux_i686", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-manylinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-manylinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-manylinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "pp38-manylinux_x86_64", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
+  { identifier = "cp315-manylinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "pp39-manylinux_x86_64", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
   { identifier = "pp310-manylinux_x86_64", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
   { identifier = "pp311-manylinux_x86_64", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
   { identifier = "gp311_242-manylinux_x86_64", version = "3.11", path_str = "/opt/python/graalpy311-graalpy242_311_native" },
   { identifier = "gp312_250-manylinux_x86_64", version = "3.12", path_str = "/opt/python/graalpy312-graalpy250_312_native" },
-  { identifier = "cp38-manylinux_aarch64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
   { identifier = "cp39-manylinux_aarch64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-manylinux_aarch64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-manylinux_aarch64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-manylinux_aarch64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-manylinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-manylinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-manylinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_ppc64le", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-manylinux_ppc64le", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-manylinux_ppc64le", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-manylinux_ppc64le", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-manylinux_ppc64le", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-manylinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-manylinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-manylinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_s390x", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-manylinux_s390x", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-manylinux_s390x", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-manylinux_s390x", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-manylinux_s390x", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-manylinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-manylinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-manylinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_armv7l", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-manylinux_armv7l", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-manylinux_armv7l", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-manylinux_armv7l", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-manylinux_armv7l", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-manylinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-manylinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-manylinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-manylinux_riscv64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-manylinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-manylinux_riscv64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-manylinux_riscv64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-manylinux_riscv64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-manylinux_riscv64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-manylinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-manylinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-manylinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-manylinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "pp38-manylinux_aarch64", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
+  { identifier = "cp315-manylinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-manylinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "pp39-manylinux_aarch64", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
   { identifier = "pp310-manylinux_aarch64", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
   { identifier = "pp311-manylinux_aarch64", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
   { identifier = "gp311_242-manylinux_aarch64", version = "3.11", path_str = "/opt/python/graalpy311-graalpy242_311_native" },
   { identifier = "gp312_250-manylinux_aarch64", version = "3.12", path_str = "/opt/python/graalpy312-graalpy250_312_native" },
-  { identifier = "pp38-manylinux_i686", version = "3.8", path_str = "/opt/python/pp38-pypy38_pp73" },
   { identifier = "pp39-manylinux_i686", version = "3.9", path_str = "/opt/python/pp39-pypy39_pp73" },
   { identifier = "pp310-manylinux_i686", version = "3.10", path_str = "/opt/python/pp310-pypy310_pp73" },
   { identifier = "pp311-manylinux_i686", version = "3.11", path_str = "/opt/python/pp311-pypy311_pp73" },
-  { identifier = "cp38-musllinux_x86_64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
   { identifier = "cp39-musllinux_x86_64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-musllinux_x86_64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-musllinux_x86_64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-musllinux_x86_64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-musllinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_x86_64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-musllinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-musllinux_x86_64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_i686", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_x86_64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-musllinux_i686", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-musllinux_i686", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-musllinux_i686", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-musllinux_i686", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-musllinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_i686", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-musllinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-musllinux_i686", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_aarch64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_i686", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-musllinux_aarch64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-musllinux_aarch64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-musllinux_aarch64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-musllinux_aarch64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-musllinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_aarch64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-musllinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-musllinux_aarch64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_ppc64le", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_aarch64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-musllinux_ppc64le", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-musllinux_ppc64le", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-musllinux_ppc64le", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-musllinux_ppc64le", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-musllinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_ppc64le", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-musllinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-musllinux_ppc64le", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_s390x", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_ppc64le", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-musllinux_s390x", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-musllinux_s390x", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-musllinux_s390x", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-musllinux_s390x", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-musllinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_s390x", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-musllinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-musllinux_s390x", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_armv7l", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_s390x", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-musllinux_armv7l", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-musllinux_armv7l", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-musllinux_armv7l", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-musllinux_armv7l", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-musllinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_armv7l", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-musllinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-musllinux_armv7l", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
-  { identifier = "cp38-musllinux_riscv64", version = "3.8", path_str = "/opt/python/cp38-cp38" },
+  { identifier = "cp315-musllinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_armv7l", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
   { identifier = "cp39-musllinux_riscv64", version = "3.9", path_str = "/opt/python/cp39-cp39" },
   { identifier = "cp310-musllinux_riscv64", version = "3.10", path_str = "/opt/python/cp310-cp310" },
   { identifier = "cp311-musllinux_riscv64", version = "3.11", path_str = "/opt/python/cp311-cp311" },
   { identifier = "cp312-musllinux_riscv64", version = "3.12", path_str = "/opt/python/cp312-cp312" },
   { identifier = "cp313-musllinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313" },
-  { identifier = "cp313t-musllinux_riscv64", version = "3.13", path_str = "/opt/python/cp313-cp313t" },
   { identifier = "cp314-musllinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314" },
   { identifier = "cp314t-musllinux_riscv64", version = "3.14", path_str = "/opt/python/cp314-cp314t" },
+  { identifier = "cp315-musllinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315" },
+  { identifier = "cp315t-musllinux_riscv64", version = "3.15", path_str = "/opt/python/cp315-cp315t" },
 ]
 
 [macos]
 python_configurations = [
-  { identifier = "cp38-macosx_x86_64", version = "3.8", url = "https://www.python.org/ftp/python/3.8.10/python-3.8.10-macosx10.9.pkg" },
-  { identifier = "cp38-macosx_arm64", version = "3.8", url = "https://www.python.org/ftp/python/3.8.10/python-3.8.10-macosx10.9.pkg" },
-  { identifier = "cp38-macosx_universal2", version = "3.8", url = "https://www.python.org/ftp/python/3.8.10/python-3.8.10-macosx10.9.pkg" },
   { identifier = "cp39-macosx_x86_64", version = "3.9", url = "https://www.python.org/ftp/python/3.9.13/python-3.9.13-macos11.pkg" },
   { identifier = "cp39-macosx_arm64", version = "3.9", url = "https://www.python.org/ftp/python/3.9.13/python-3.9.13-macos11.pkg" },
   { identifier = "cp39-macosx_universal2", version = "3.9", url = "https://www.python.org/ftp/python/3.9.13/python-3.9.13-macos11.pkg" },
@@ -161,26 +155,27 @@ python_configurations = [
   { identifier = "cp312-macosx_x86_64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
   { identifier = "cp312-macosx_arm64", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
   { identifier = "cp312-macosx_universal2", version = "3.12", url = "https://www.python.org/ftp/python/3.12.10/python-3.12.10-macos11.pkg" },
-  { identifier = "cp313-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.12/python-3.13.12-macos11.pkg" },
-  { identifier = "cp313-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.12/python-3.13.12-macos11.pkg" },
-  { identifier = "cp313-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.12/python-3.13.12-macos11.pkg" },
-  { identifier = "cp313t-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.12/python-3.13.12-macos11.pkg" },
-  { identifier = "cp313t-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.12/python-3.13.12-macos11.pkg" },
-  { identifier = "cp313t-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.12/python-3.13.12-macos11.pkg" },
-  { identifier = "cp314-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-macos11.pkg" },
-  { identifier = "cp314-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-macos11.pkg" },
-  { identifier = "cp314-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-macos11.pkg" },
-  { identifier = "cp314t-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-macos11.pkg" },
-  { identifier = "cp314t-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-macos11.pkg" },
-  { identifier = "cp314t-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-macos11.pkg" },
-  { identifier = "pp38-macosx_x86_64", version = "3.8", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-macos_x86_64.tar.bz2" },
-  { identifier = "pp38-macosx_arm64", version = "3.8", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-macos_arm64.tar.bz2" },
+  { identifier = "cp313-macosx_x86_64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.13/python-3.13.13-macos11.pkg" },
+  { identifier = "cp313-macosx_arm64", version = "3.13", url = "https://www.python.org/ftp/python/3.13.13/python-3.13.13-macos11.pkg" },
+  { identifier = "cp313-macosx_universal2", version = "3.13", url = "https://www.python.org/ftp/python/3.13.13/python-3.13.13-macos11.pkg" },
+  { identifier = "cp314-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314t-macosx_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314t-macosx_arm64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp314t-macosx_universal2", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-macos11.pkg" },
+  { identifier = "cp315-macosx_x86_64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315-macosx_arm64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315-macosx_universal2", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315t-macosx_x86_64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315t-macosx_arm64", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
+  { identifier = "cp315t-macosx_universal2", version = "3.15", url = "https://www.python.org/ftp/python/3.15.0/python-3.15.0b1-macos11.pkg" },
   { identifier = "pp39-macosx_x86_64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-macos_x86_64.tar.bz2" },
   { identifier = "pp39-macosx_arm64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-macos_arm64.tar.bz2" },
   { identifier = "pp310-macosx_x86_64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-macos_x86_64.tar.bz2" },
   { identifier = "pp310-macosx_arm64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-macos_arm64.tar.bz2" },
-  { identifier = "pp311-macosx_x86_64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.21-macos_x86_64.tar.bz2" },
-  { identifier = "pp311-macosx_arm64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.21-macos_arm64.tar.bz2" },
+  { identifier = "pp311-macosx_x86_64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.22-macos_x86_64.tar.bz2" },
+  { identifier = "pp311-macosx_arm64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.22-macos_arm64.tar.bz2" },
   { identifier = "gp311_242-macosx_x86_64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-macos-amd64.tar.gz" },
   { identifier = "gp311_242-macosx_arm64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-macos-aarch64.tar.gz" },
   { identifier = "gp312_250-macosx_x86_64", version = "3.12", url = "https://github.com/oracle/graalpython/releases/download/graal-25.0.1/graalpy-25.0.1-macos-amd64.tar.gz" },
@@ -189,8 +184,6 @@ python_configurations = [
 
 [windows]
 python_configurations = [
-  { identifier = "cp38-win32", version = "3.8.10" },
-  { identifier = "cp38-win_amd64", version = "3.8.10" },
   { identifier = "cp39-win32", version = "3.9.13" },
   { identifier = "cp39-win_amd64", version = "3.9.13" },
   { identifier = "cp310-win32", version = "3.10.11" },
@@ -199,26 +192,28 @@ python_configurations = [
   { identifier = "cp311-win_amd64", version = "3.11.9" },
   { identifier = "cp312-win32", version = "3.12.10" },
   { identifier = "cp312-win_amd64", version = "3.12.10" },
-  { identifier = "cp313-win32", version = "3.13.12" },
-  { identifier = "cp313t-win32", version = "3.13.12" },
-  { identifier = "cp313-win_amd64", version = "3.13.12" },
-  { identifier = "cp313t-win_amd64", version = "3.13.12" },
-  { identifier = "cp314-win32", version = "3.14.3" },
-  { identifier = "cp314t-win32", version = "3.14.3" },
-  { identifier = "cp314-win_amd64", version = "3.14.3" },
-  { identifier = "cp314t-win_amd64", version = "3.14.3" },
+  { identifier = "cp313-win32", version = "3.13.13" },
+  { identifier = "cp313-win_amd64", version = "3.13.13" },
+  { identifier = "cp314-win32", version = "3.14.5" },
+  { identifier = "cp314t-win32", version = "3.14.5" },
+  { identifier = "cp314-win_amd64", version = "3.14.5" },
+  { identifier = "cp314t-win_amd64", version = "3.14.5" },
+  { identifier = "cp315-win32", version = "3.15.0-b1" },
+  { identifier = "cp315t-win32", version = "3.15.0-b1" },
+  { identifier = "cp315-win_amd64", version = "3.15.0-b1" },
+  { identifier = "cp315t-win_amd64", version = "3.15.0-b1" },
   { identifier = "cp39-win_arm64", version = "3.9.10" },
   { identifier = "cp310-win_arm64", version = "3.10.11" },
   { identifier = "cp311-win_arm64", version = "3.11.9" },
   { identifier = "cp312-win_arm64", version = "3.12.10" },
-  { identifier = "cp313-win_arm64", version = "3.13.12" },
-  { identifier = "cp313t-win_arm64", version = "3.13.12" },
-  { identifier = "cp314-win_arm64", version = "3.14.3" },
-  { identifier = "cp314t-win_arm64", version = "3.14.3" },
-  { identifier = "pp38-win_amd64", version = "3.8", url = "https://downloads.python.org/pypy/pypy3.8-v7.3.11-win64.zip" },
+  { identifier = "cp313-win_arm64", version = "3.13.13" },
+  { identifier = "cp314-win_arm64", version = "3.14.5" },
+  { identifier = "cp314t-win_arm64", version = "3.14.5" },
+  { identifier = "cp315-win_arm64", version = "3.15.0-b1" },
+  { identifier = "cp315t-win_arm64", version = "3.15.0-b1" },
   { identifier = "pp39-win_amd64", version = "3.9", url = "https://downloads.python.org/pypy/pypy3.9-v7.3.16-win64.zip" },
   { identifier = "pp310-win_amd64", version = "3.10", url = "https://downloads.python.org/pypy/pypy3.10-v7.3.19-win64.zip" },
-  { identifier = "pp311-win_amd64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.21-win64.zip" },
+  { identifier = "pp311-win_amd64", version = "3.11", url = "https://downloads.python.org/pypy/pypy3.11-v7.3.22-win64.zip" },
   { identifier = "gp311_242-win_amd64", version = "3.11", url = "https://github.com/oracle/graalpython/releases/download/graal-24.2.2/graalpy-24.2.2-windows-amd64.zip" },
   { identifier = "gp312_250-win_amd64", version = "3.12", url = "https://github.com/oracle/graalpython/releases/download/graal-25.0.2/graalpy-25.0.2-windows-amd64.zip" },
 ]
@@ -226,15 +221,16 @@ python_configurations = [
 [pyodide]
 python_configurations = [
   { identifier = "cp312-pyodide_wasm32", version = "3.12", default_pyodide_version = "0.27.7", node_version = "v22" },
-  { identifier = "cp313-pyodide_wasm32", version = "3.13", default_pyodide_version = "0.29.3", node_version = "v22" },
+  { identifier = "cp313-pyodide_wasm32", version = "3.13", default_pyodide_version = "0.29.4", node_version = "v22" },
+  { identifier = "cp314-pyodide_wasm32", version = "3.14", default_pyodide_version = "314.0.0a2", node_version = "v24" },
 ]
 
 [android]
 python_configurations = [
-  { identifier = "cp313-android_arm64_v8a", version = "3.13", url = "https://repo.maven.apache.org/maven2/com/chaquo/python/python/3.13.12/python-3.13.12-aarch64-linux-android.tar.gz" },
-  { identifier = "cp313-android_x86_64", version = "3.13", url = "https://repo.maven.apache.org/maven2/com/chaquo/python/python/3.13.12/python-3.13.12-x86_64-linux-android.tar.gz" },
-  { identifier = "cp314-android_arm64_v8a", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-aarch64-linux-android.tar.gz" },
-  { identifier = "cp314-android_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.3/python-3.14.3-x86_64-linux-android.tar.gz" },
+  { identifier = "cp313-android_arm64_v8a", version = "3.13", url = "https://repo.maven.apache.org/maven2/com/chaquo/python/python/3.13.13/python-3.13.13-aarch64-linux-android.tar.gz" },
+  { identifier = "cp313-android_x86_64", version = "3.13", url = "https://repo.maven.apache.org/maven2/com/chaquo/python/python/3.13.13/python-3.13.13-x86_64-linux-android.tar.gz" },
+  { identifier = "cp314-android_arm64_v8a", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-aarch64-linux-android.tar.gz" },
+  { identifier = "cp314-android_x86_64", version = "3.14", url = "https://www.python.org/ftp/python/3.14.5/python-3.14.5-x86_64-linux-android.tar.gz" },
 ]
 
 [ios]

cibuildwheel/resources/cibuildwheel.schema.json

@@ -13,7 +13,6 @@
     },
     "enable": {
       "enum": [
-        "cpython-freethreading",
         "cpython-prerelease",
         "graalpy",
         "pyodide-prerelease",
@@ -27,6 +26,36 @@
   "description": "cibuildwheel's settings.",
   "type": "object",
   "properties": {
+    "audit-command": {
+      "description": "Execute a shell command to audit each wheel after it is repaired. Use {wheel} for each wheel path, or {abi3_wheel} to only audit abi3 wheels.",
+      "oneOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      ],
+      "title": "CIBW_AUDIT_COMMAND"
+    },
+    "audit-requires": {
+      "description": "Install Python dependencies for the audit step.",
+      "oneOf": [
+        {
+          "type": "string"
+        },
+        {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      ],
+      "title": "CIBW_AUDIT_REQUIRES"
+    },
     "archs": {
       "description": "Change the architectures built on your machine by default.",
       "oneOf": [
@@ -635,6 +664,12 @@
             "type": "object",
             "additionalProperties": false,
             "properties": {
+              "audit-command": {
+                "$ref": "#/$defs/inherit"
+              },
+              "audit-requires": {
+                "$ref": "#/$defs/inherit"
+              },
               "before-all": {
                 "$ref": "#/$defs/inherit"
               },
@@ -682,6 +717,12 @@
               }
             }
           },
+          "audit-command": {
+            "$ref": "#/properties/audit-command"
+          },
+          "audit-requires": {
+            "$ref": "#/properties/audit-requires"
+          },
           "before-all": {
             "$ref": "#/properties/before-all"
           },
@@ -800,6 +841,12 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
         "archs": {
           "$ref": "#/properties/archs"
         },
@@ -930,6 +977,12 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
         "archs": {
           "$ref": "#/properties/archs"
         },
@@ -993,6 +1046,12 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
         "archs": {
           "$ref": "#/properties/archs"
         },
@@ -1069,6 +1128,12 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
         "archs": {
           "$ref": "#/properties/archs"
         },
@@ -1132,6 +1197,12 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
         "archs": {
           "$ref": "#/properties/archs"
         },
@@ -1195,6 +1266,12 @@
       "type": "object",
       "additionalProperties": false,
       "properties": {
+        "audit-command": {
+          "$ref": "#/properties/audit-command"
+        },
+        "audit-requires": {
+          "$ref": "#/properties/audit-requires"
+        },
         "archs": {
           "$ref": "#/properties/archs"
         },

cibuildwheel/resources/constraints-pyodide312.txt

@@ -2,15 +2,15 @@
 #    nox -s update_constraints
 annotated-types==0.7.0
     # via pydantic
-auditwheel-emscripten==0.2.3
+auditwheel-emscripten==0.2.4
     # via pyodide-build
-build==1.2.2.post1
+build==1.5.0
     # via
     #   -r .nox/update_constraints/tmp/constraints-pyodide.in
     #   pyodide-build
-certifi==2026.2.25
+certifi==2026.4.22
     # via requests
-charset-normalizer==3.4.6
+charset-normalizer==3.4.7
     # via requests
 click==8.1.8
     # via
@@ -19,54 +19,54 @@ click==8.1.8
     #   pyodide-cli
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
-idna==3.11
+idna==3.15
     # via requests
 leb128==1.0.9
     # via auditwheel-emscripten
-markdown-it-py==4.0.0
+markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-packaging==26.0
+packaging==26.2
     # via
     #   auditwheel-emscripten
     #   build
     #   pyodide-build
     #   wheel
-pip==26.0.1
+pip==26.1.1
     # via -r .nox/update_constraints/tmp/constraints-pyodide.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   pyodide-build
     #   python-discovery
     #   virtualenv
-pydantic==2.12.5
+pydantic==2.13.4
     # via
     #   pyodide-build
     #   pyodide-lock
-pydantic-core==2.41.5
+pydantic-core==2.46.4
     # via pydantic
-pygments==2.19.2
+pygments==2.20.0
     # via rich
-pyodide-build==0.33.0
+pyodide-build==0.34.3
     # via -r .nox/update_constraints/tmp/constraints-pyodide.in
 pyodide-cli==0.5.0
     # via
     #   auditwheel-emscripten
     #   pyodide-build
-pyodide-lock==0.1.2
+pyodide-lock==0.1.3
     # via pyodide-build
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
-requests==2.32.5
+requests==2.34.1
     # via pyodide-build
-rich==14.3.3
+rich==15.0.0
     # via
     #   pyodide-build
     #   pyodide-cli
@@ -79,13 +79,13 @@ typing-extensions==4.15.0
     #   typing-inspection
 typing-inspection==0.4.2
     # via pydantic
-urllib3==2.6.3
+urllib3==2.7.0
     # via requests
-virtualenv==21.2.0
+virtualenv==21.3.3
     # via
     #   build
     #   pyodide-build
-wheel==0.46.3
+wheel==0.47.0
     # via
     #   auditwheel-emscripten
     #   pyodide-build

cibuildwheel/resources/constraints-pyodide313.txt

@@ -2,15 +2,15 @@
 #    nox -s update_constraints
 annotated-types==0.7.0
     # via pydantic
-auditwheel-emscripten==0.2.3
+auditwheel-emscripten==0.2.4
     # via pyodide-build
-build==1.2.2.post1
+build==1.5.0
     # via
     #   -r .nox/update_constraints/tmp/constraints-pyodide.in
     #   pyodide-build
-certifi==2026.2.25
+certifi==2026.4.22
     # via requests
-charset-normalizer==3.4.6
+charset-normalizer==3.4.7
     # via requests
 click==8.1.8
     # via
@@ -19,54 +19,54 @@ click==8.1.8
     #   pyodide-cli
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
-idna==3.11
+idna==3.15
     # via requests
 leb128==1.0.9
     # via auditwheel-emscripten
-markdown-it-py==4.0.0
+markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-packaging==26.0
+packaging==26.2
     # via
     #   auditwheel-emscripten
     #   build
     #   pyodide-build
     #   wheel
-pip==26.0.1
+pip==26.1.1
     # via -r .nox/update_constraints/tmp/constraints-pyodide.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   pyodide-build
     #   python-discovery
     #   virtualenv
-pydantic==2.12.5
+pydantic==2.13.4
     # via
     #   pyodide-build
     #   pyodide-lock
-pydantic-core==2.41.5
+pydantic-core==2.46.4
     # via pydantic
-pygments==2.19.2
+pygments==2.20.0
     # via rich
-pyodide-build==0.33.0
+pyodide-build==0.34.3
     # via -r .nox/update_constraints/tmp/constraints-pyodide.in
 pyodide-cli==0.5.0
     # via
     #   auditwheel-emscripten
     #   pyodide-build
-pyodide-lock==0.1.2
+pyodide-lock==0.1.3
     # via pyodide-build
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
-requests==2.32.5
+requests==2.34.1
     # via pyodide-build
-rich==14.3.3
+rich==15.0.0
     # via
     #   pyodide-build
     #   pyodide-cli
@@ -79,13 +79,13 @@ typing-extensions==4.15.0
     #   typing-inspection
 typing-inspection==0.4.2
     # via pydantic
-urllib3==2.6.3
+urllib3==2.7.0
     # via requests
-virtualenv==21.2.0
+virtualenv==21.3.3
     # via
     #   build
     #   pyodide-build
-wheel==0.46.3
+wheel==0.47.0
     # via
     #   auditwheel-emscripten
     #   pyodide-build

cibuildwheel/resources/constraints-pyodide314.txt

@@ -0,0 +1,91 @@
+# This file was autogenerated by uv via the following command:
+#    nox -s update_constraints
+annotated-types==0.7.0
+    # via pydantic
+auditwheel-emscripten==0.2.4
+    # via pyodide-build
+build==1.5.0
+    # via
+    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
+    #   pyodide-build
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
+click==8.1.8
+    # via
+    #   -r .nox/update_constraints/tmp/constraints-pyodide.in
+    #   pyodide-build
+    #   pyodide-cli
+distlib==0.4.0
+    # via virtualenv
+filelock==3.29.0
+    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via requests
+leb128==1.0.9
+    # via auditwheel-emscripten
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   auditwheel-emscripten
+    #   build
+    #   pyodide-build
+    #   wheel
+pip==26.1.1
+    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
+platformdirs==4.9.6
+    # via
+    #   pyodide-build
+    #   python-discovery
+    #   virtualenv
+pydantic==2.13.4
+    # via
+    #   pyodide-build
+    #   pyodide-lock
+pydantic-core==2.46.4
+    # via pydantic
+pygments==2.20.0
+    # via rich
+pyodide-build==0.34.3
+    # via -r .nox/update_constraints/tmp/constraints-pyodide.in
+pyodide-cli==0.5.0
+    # via
+    #   auditwheel-emscripten
+    #   pyodide-build
+pyodide-lock==0.1.3
+    # via pyodide-build
+pyproject-hooks==1.2.0
+    # via build
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via pyodide-build
+rich==15.0.0
+    # via
+    #   pyodide-build
+    #   pyodide-cli
+ruamel-yaml==0.19.1
+    # via pyodide-build
+typing-extensions==4.15.0
+    # via
+    #   pydantic
+    #   pydantic-core
+    #   typing-inspection
+typing-inspection==0.4.2
+    # via pydantic
+urllib3==2.7.0
+    # via requests
+virtualenv==21.3.3
+    # via
+    #   build
+    #   pyodide-build
+wheel==0.47.0
+    # via
+    #   auditwheel-emscripten
+    #   pyodide-build

cibuildwheel/resources/constraints-python310.txt

@@ -1,42 +1,96 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
 altgraph==0.17.5
     # via macholib
-build==1.4.0
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
     # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+exceptiongroup==1.3.1
+    # via cattrs
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
 importlib-metadata==9.0.0
     # via build
+kaitaistruct==0.11
+    # via abi3audit
 macholib==1.16.4
     # via delocate
-packaging==26.0
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
     # via
+    #   abi3audit
     #   build
     #   delocate
-pip==26.0.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
     # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   python-discovery
+    #   requests-cache
     #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
-tomli==2.4.0
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+tomli==2.4.1
     # via build
 typing-extensions==4.15.0
     # via
+    #   cattrs
     #   delocate
+    #   exceptiongroup
     #   virtualenv
-virtualenv==21.2.0
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
     # via -r cibuildwheel/resources/constraints.in
-zipp==3.23.0
+zipp==3.23.1
     # via importlib-metadata

cibuildwheel/resources/constraints-python311.txt

@@ -1,34 +1,87 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
 altgraph==0.17.5
     # via macholib
-build==1.4.0
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
     # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
 macholib==1.16.4
     # via delocate
-packaging==26.0
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
     # via
+    #   abi3audit
     #   build
     #   delocate
-pip==26.0.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1; implementation_name != "graalpy" or platform_system != "Windows"
+pip==26.0.1; implementation_name == "graalpy" and platform_system == "Windows"
     # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   python-discovery
+    #   requests-cache
     #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
 typing-extensions==4.15.0
-    # via delocate
-virtualenv==21.2.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
     # via -r cibuildwheel/resources/constraints.in

cibuildwheel/resources/constraints-python312.txt

@@ -1,34 +1,87 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
 altgraph==0.17.5
     # via macholib
-build==1.4.0
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
     # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
 macholib==1.16.4
     # via delocate
-packaging==26.0
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
     # via
+    #   abi3audit
     #   build
     #   delocate
-pip==26.0.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1; implementation_name != "graalpy" or platform_system != "Windows"
+pip==26.0.1; implementation_name == "graalpy" and platform_system == "Windows"
     # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   python-discovery
+    #   requests-cache
     #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
 typing-extensions==4.15.0
-    # via delocate
-virtualenv==21.2.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
     # via -r cibuildwheel/resources/constraints.in

cibuildwheel/resources/constraints-python313.txt

@@ -1,34 +1,86 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
 altgraph==0.17.5
     # via macholib
-build==1.4.0
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
     # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
 macholib==1.16.4
     # via delocate
-packaging==26.0
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
     # via
+    #   abi3audit
     #   build
     #   delocate
-pip==26.0.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
     # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   python-discovery
+    #   requests-cache
     #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
 typing-extensions==4.15.0
-    # via delocate
-virtualenv==21.2.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
     # via -r cibuildwheel/resources/constraints.in

cibuildwheel/resources/constraints-python314.txt

@@ -1,34 +1,86 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
 altgraph==0.17.5
     # via macholib
-build==1.4.0
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
     # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
 macholib==1.16.4
     # via delocate
-packaging==26.0
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
     # via
+    #   abi3audit
     #   build
     #   delocate
-pip==26.0.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
     # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   python-discovery
+    #   requests-cache
     #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
 typing-extensions==4.15.0
-    # via delocate
-virtualenv==21.2.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
     # via -r cibuildwheel/resources/constraints.in

cibuildwheel/resources/constraints-python315.txt

@@ -0,0 +1,86 @@
+# This file was autogenerated by uv via the following command:
+#    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
+altgraph==0.17.5
+    # via macholib
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
+    # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
+delocate==0.13.0
+    # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
+distlib==0.4.0
+    # via virtualenv
+filelock==3.29.0
+    # via
+    #   python-discovery
+    #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
+macholib==1.16.4
+    # via delocate
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
+    # via
+    #   abi3audit
+    #   build
+    #   delocate
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
+    # via -r cibuildwheel/resources/constraints.in
+platformdirs==4.9.6
+    # via
+    #   python-discovery
+    #   requests-cache
+    #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
+pyproject-hooks==1.2.0
+    # via build
+python-discovery==1.3.1
+    # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
+typing-extensions==4.15.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
+    # via -r cibuildwheel/resources/constraints.in

cibuildwheel/resources/constraints-python38.txt

@@ -1,42 +0,0 @@
-# This file was autogenerated by uv via the following command:
-#    nox -s update_constraints
-altgraph==0.17.5
-    # via macholib
-build==1.2.2.post1
-    # via -r cibuildwheel/resources/constraints.in
-delocate==0.12.0
-    # via -r cibuildwheel/resources/constraints.in
-distlib==0.4.0
-    # via virtualenv
-filelock==3.16.1
-    # via
-    #   python-discovery
-    #   virtualenv
-importlib-metadata==8.5.0
-    # via build
-macholib==1.16.4
-    # via delocate
-packaging==26.0
-    # via
-    #   build
-    #   delocate
-pip==25.0.1
-    # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.3.6
-    # via
-    #   python-discovery
-    #   virtualenv
-pyproject-hooks==1.2.0
-    # via build
-python-discovery==1.2.0
-    # via virtualenv
-tomli==2.4.0
-    # via build
-typing-extensions==4.13.2
-    # via
-    #   delocate
-    #   virtualenv
-virtualenv==21.2.0
-    # via -r cibuildwheel/resources/constraints.in
-zipp==3.20.2
-    # via importlib-metadata

cibuildwheel/resources/constraints-python39.txt

@@ -1,42 +1,96 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
+abi3audit==0.0.25
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.4.29
+    # via abi3audit
 altgraph==0.17.5
     # via macholib
-build==1.4.0
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.4.4
     # via -r cibuildwheel/resources/constraints.in
+cattrs==25.3.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
 distlib==0.4.0
     # via virtualenv
+exceptiongroup==1.3.1
+    # via cattrs
 filelock==3.19.1
     # via
     #   python-discovery
     #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
 importlib-metadata==8.7.1
     # via build
+kaitaistruct==0.11
+    # via abi3audit
 macholib==1.16.4
     # via delocate
-packaging==26.0
+markdown-it-py==3.0.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==25.0
     # via
+    #   abi3audit
     #   build
     #   delocate
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
 pip==26.0.1
     # via -r cibuildwheel/resources/constraints.in
 platformdirs==4.4.0
     # via
     #   python-discovery
+    #   requests-cache
     #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
-tomli==2.4.0
+requests==2.32.5
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.2.1
+    # via abi3audit
+rich==14.2.0
+    # via abi3audit
+tomli==2.4.1
     # via build
 typing-extensions==4.15.0
     # via
+    #   cattrs
     #   delocate
+    #   exceptiongroup
     #   virtualenv
-virtualenv==21.2.0
+url-normalize==2.2.1
+    # via requests-cache
+urllib3==2.6.3
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
     # via -r cibuildwheel/resources/constraints.in
-zipp==3.23.0
+zipp==3.23.1
     # via importlib-metadata

cibuildwheel/resources/constraints.in

@@ -1,4 +1,6 @@
 pip
 build
 delocate
+delvewheel
 virtualenv
+abi3audit

cibuildwheel/resources/constraints.txt

@@ -1,34 +1,86 @@
 # This file was autogenerated by uv via the following command:
 #    nox -s update_constraints
+abi3audit==0.0.26
+    # via -r cibuildwheel/resources/constraints.in
+abi3info==2025.11.29
+    # via abi3audit
 altgraph==0.17.5
     # via macholib
-build==1.4.0
+attrs==26.1.0
+    # via
+    #   cattrs
+    #   requests-cache
+build==1.5.0
     # via -r cibuildwheel/resources/constraints.in
+cattrs==26.1.0
+    # via requests-cache
+certifi==2026.4.22
+    # via requests
+charset-normalizer==3.4.7
+    # via requests
 delocate==0.13.0
     # via -r cibuildwheel/resources/constraints.in
+delvewheel==1.12.1
+    # via -r cibuildwheel/resources/constraints.in
 distlib==0.4.0
     # via virtualenv
-filelock==3.25.2
+filelock==3.29.0
     # via
     #   python-discovery
     #   virtualenv
+idna==3.15
+    # via
+    #   requests
+    #   url-normalize
+kaitaistruct==0.11
+    # via abi3audit
 macholib==1.16.4
     # via delocate
-packaging==26.0
+markdown-it-py==4.2.0
+    # via rich
+mdurl==0.1.2
+    # via markdown-it-py
+packaging==26.2
     # via
+    #   abi3audit
     #   build
     #   delocate
-pip==26.0.1
+pefile==2024.8.26
+    # via
+    #   abi3audit
+    #   delvewheel
+pip==26.1.1
     # via -r cibuildwheel/resources/constraints.in
-platformdirs==4.9.4
+platformdirs==4.9.6
     # via
     #   python-discovery
+    #   requests-cache
     #   virtualenv
+pyelftools==0.32
+    # via abi3audit
+pygments==2.20.0
+    # via rich
 pyproject-hooks==1.2.0
     # via build
-python-discovery==1.2.0
+python-discovery==1.3.1
     # via virtualenv
+requests==2.34.1
+    # via
+    #   abi3audit
+    #   requests-cache
+requests-cache==1.3.2
+    # via abi3audit
+rich==15.0.0
+    # via abi3audit
 typing-extensions==4.15.0
-    # via delocate
-virtualenv==21.2.0
+    # via
+    #   cattrs
+    #   delocate
+url-normalize==3.0.0
+    # via requests-cache
+urllib3==2.7.0
+    # via
+    #   requests
+    #   requests-cache
+virtualenv==21.3.3
     # via -r cibuildwheel/resources/constraints.in

cibuildwheel/resources/defaults.toml

@@ -5,6 +5,8 @@ test-skip = ""
 enable = []
 
 archs = ["auto"]
+audit-requires = ["abi3audit"]
+audit-command = "abi3audit --strict --report {abi3_wheel}"
 build-frontend = "default"
 config-settings = {}
 dependency-versions = "pinned"
@@ -58,9 +60,11 @@ repair-wheel-command = "auditwheel repair -w {dest_dir} {wheel}"
 repair-wheel-command = "delocate-wheel --require-archs {delocate_archs} -w {dest_dir} -v {wheel}"
 
 [tool.cibuildwheel.windows]
+repair-wheel-command = "delvewheel repair -w {dest_dir} -v {wheel}"
 
 [tool.cibuildwheel.android]
 
 [tool.cibuildwheel.ios]
 
 [tool.cibuildwheel.pyodide]
+audit-command = ""

cibuildwheel/resources/free-threaded-enable-315.xml

@@ -8,7 +8,7 @@
                 <key>choiceAttribute</key>
                 <string>selected</string>
                 <key>choiceIdentifier</key>
-                <string>org.python.Python.PythonTFramework-3.13</string>
+                <string>org.python.Python.PythonTFramework-3.15</string>
         </dict>
 </array>
 </plist>

cibuildwheel/resources/nodejs.toml

@@ -1,4 +1,4 @@
 url = "https://nodejs.org/dist/"
-v24 = "v24.14.0"
-v22 = "v22.22.1"
-v20 = "v20.20.1"
+v24 = "v24.15.0"
+v22 = "v22.22.2"
+v20 = "v20.20.2"

cibuildwheel/resources/pinned_docker_images.cfg

@@ -1,54 +1,54 @@
 [x86_64]
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2026.03.20-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_x86_64:2026.05.07-2
 
 [i686]
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2026.03.20-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_i686:2026.05.07-2
 
 [aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2026.03.20-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_aarch64:2026.05.07-2
 
 [ppc64le]
-manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_ppc64le:2026.03.20-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_ppc64le:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_ppc64le:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_ppc64le:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_ppc64le:2026.05.07-2
 
 [s390x]
-manylinux2014 = quay.io/pypa/manylinux2014_s390x:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_s390x:2026.03.20-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_s390x:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_s390x:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_s390x:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_s390x:2026.05.07-2
 
 [pypy_x86_64]
-manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_x86_64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_x86_64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_x86_64:2026.05.07-2
 
 [pypy_i686]
-manylinux2014 = quay.io/pypa/manylinux2014_i686:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_i686:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_i686:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_i686:2026.05.07-2
 
 [pypy_aarch64]
-manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2026.03.20-1
-manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2026.03.20-1
-manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2026.03.20-1
+manylinux2014 = quay.io/pypa/manylinux2014_aarch64:2026.05.07-2
+manylinux_2_28 = quay.io/pypa/manylinux_2_28_aarch64:2026.05.07-2
+manylinux_2_34 = quay.io/pypa/manylinux_2_34_aarch64:2026.05.07-2
 
 [armv7l]
-manylinux_2_31 = quay.io/pypa/manylinux_2_31_armv7l:2026.03.20-1
-manylinux_2_35 = quay.io/pypa/manylinux_2_35_armv7l:2026.03.20-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2026.03.20-1
+manylinux_2_31 = quay.io/pypa/manylinux_2_31_armv7l:2026.05.07-2
+manylinux_2_35 = quay.io/pypa/manylinux_2_35_armv7l:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_armv7l:2026.05.07-2
 
 [riscv64]
-manylinux_2_39 = quay.io/pypa/manylinux_2_39_riscv64:2026.03.20-1
-musllinux_1_2 = quay.io/pypa/musllinux_1_2_riscv64:2026.03.20-1
+manylinux_2_39 = quay.io/pypa/manylinux_2_39_riscv64:2026.05.07-2
+musllinux_1_2 = quay.io/pypa/musllinux_1_2_riscv64:2026.05.07-2
 

cibuildwheel/resources/virtualenv.toml

@@ -1 +1 @@
-default = { version = "21.2.0", url = "https://github.com/pypa/get-virtualenv/releases/download/21.2.0/virtualenv.pyz" }
+default = { version = "21.3.1", url = "https://github.com/pypa/get-virtualenv/releases/download/21.3.1/virtualenv.pyz" }

cibuildwheel/selector.py

@@ -29,17 +29,16 @@ class EnableGroup(StrEnum):
     Groups of build selectors that are not enabled by default.
     """
 
-    CPythonFreeThreading = "cpython-freethreading"
     CPythonPrerelease = "cpython-prerelease"
     GraalPy = "graalpy"
     PyPy = "pypy"
     PyPyEoL = "pypy-eol"
+    PyodideEoL = "pyodide-eol"
     PyodidePrerelease = "pyodide-prerelease"
 
     @classmethod
     def all_groups(cls) -> frozenset[Self]:
-        # see https://github.com/python/mypy/issues/20434 for the reason to type: ignore[arg-type]
-        return frozenset(set(cls) - {cls.CPythonFreeThreading})  # type: ignore[arg-type]
+        return frozenset(cls)
 
     @classmethod
     def parse_option_value(cls, value: str) -> frozenset[Self]:
@@ -85,8 +84,6 @@ class BuildSelector:
                 return False
 
         # filter out groups that are not enabled
-        if EnableGroup.CPythonFreeThreading not in self.enable and fnmatch(build_id, "cp313t-*"):
-            return False
         if EnableGroup.CPythonPrerelease not in self.enable and fnmatch(build_id, "cp315*"):
             return False
         is_pypy_eol = fnmatch(build_id, "pp3?-*") or fnmatch(build_id, "pp310-*")
@@ -97,17 +94,21 @@ class BuildSelector:
             return False
         if EnableGroup.GraalPy not in self.enable and fnmatch(build_id, "gp*"):
             return False
-        # TODO: Re-enable this when we have Pyodide prereleases again (e.g., 0.29.0a1+)
-        # Python 3.13 support became stable in Pyodide 0.28.0, so it no longer needs a prerelease
-        # flag.
-        # Also update Pyodide tests in unit_test/build_selector_test.py accordingly.
-        # When re-enabling, update the pattern to match the experimental Python version in case
-        # it is bumped to Python 3.14 (likely cp314-pyodide_* but could remain as 3.13 as well).
+        if EnableGroup.PyodideEoL not in self.enable and fnmatch(build_id, "cp312-pyodide_*"):
+            return False
+        # NOTE: Disable this when we don't have any Pyodide prereleases (e.g., 314.0.0a1+)
+        # When doing this, also:
+        #   1. update Pyodide tests in unit_test/build_selector_test.py and unit_test/options_test.py accordingly.
+        #   2. update Python versions for Pyodide identifiers in cibuildwheel/selector.py.
+        #   3. update constraints as necessary via bin/generate_pyodide_constraints.py and add/delete
+        #      Pyodide constraints files in cibuildwheel/resources/constraints/ as necessary.
+        # When disabling, update the pattern to match the experimental Python version in case
+        # it is bumped to Python 3.15 (likely cp315-pyodide_* but could remain as 3.14 as well).
         # This depends on the CPython version being used in the Pyodide runtime at the time.
-        # if EnableGroup.PyodidePrerelease not in self.enable and fnmatch(
-        #     build_id, "cp313-pyodide_*"
-        # ):
-        #     return False
+        if EnableGroup.PyodidePrerelease not in self.enable and fnmatch(
+            build_id, "cp314-pyodide_*"
+        ):
+            return False
 
         should_build = selector_matches(self.build_config, build_id)
         should_skip = selector_matches(self.skip_config, build_id)

cibuildwheel/util/packaging.py

@@ -177,3 +177,9 @@ def find_compatible_wheel(wheels: Sequence[T], identifier: str) -> T | None:
             return wheel
 
     return None
+
+
+def is_abi3_wheel(wheel_name: str) -> bool:
+    """Check if a wheel uses the abi3 stable ABI based on its filename."""
+    _, _, _, tags = parse_wheel_filename(wheel_name)
+    return any(tag.abi == "abi3" for tag in tags)

cibuildwheel/util/resources.py

@@ -7,8 +7,8 @@ from cibuildwheel.typing import PlatformName
 
 PATH: Final[Path] = Path(__file__).parent.parent / "resources"
 INSTALL_CERTIFI_SCRIPT: Final[Path] = PATH / "install_certifi.py"
-FREE_THREAD_ENABLE_313: Final[Path] = PATH / "free-threaded-enable-313.xml"
 FREE_THREAD_ENABLE_314: Final[Path] = PATH / "free-threaded-enable-314.xml"
+FREE_THREAD_ENABLE_315: Final[Path] = PATH / "free-threaded-enable-315.xml"
 NODEJS: Final[Path] = PATH / "nodejs.toml"
 DEFAULTS: Final[Path] = PATH / "defaults.toml"
 PINNED_DOCKER_IMAGES: Final[Path] = PATH / "pinned_docker_images.cfg"

cibuildwheel/venv.py

@@ -6,9 +6,10 @@ import sys
 import tomllib
 from collections.abc import Sequence
 from pathlib import Path
-from typing import Final
+from typing import Final, cast
 
 from filelock import FileLock
+from packaging.markers import default_environment
 from packaging.requirements import InvalidRequirement, Requirement
 from packaging.version import Version
 
@@ -19,6 +20,24 @@ from cibuildwheel.util.file import CIBW_CACHE_PATH, download
 _IS_WIN: Final[bool] = sys.platform.startswith("win")
 
 
+def target_marker_env(
+    *,
+    implementation_id: str,
+) -> dict[str, str]:
+    """
+    Build a PEP 508 marker environment dict for the target Python,
+    overriding the host's values with the target implementation info.
+    """
+    env = cast("dict[str, str]", default_environment())
+    if implementation_id.startswith("gp"):
+        env["implementation_name"] = "graalpy"
+        env["platform_python_implementation"] = "GraalPy"
+    elif implementation_id.startswith("pp"):
+        env["implementation_name"] = "pypy"
+        env["platform_python_implementation"] = "PyPy"
+    return env
+
+
 @functools.cache
 def _ensure_virtualenv(version: str) -> tuple[Path, Version]:
     version_parts = version.split(".")
@@ -47,6 +66,7 @@ def constraint_flags(
 
 def _parse_pip_constraint_for_virtualenv(
     constraint_path: Path | None,
+    marker_env: dict[str, str] | None = None,
 ) -> str:
     """
     Parses the constraints file referenced by `dependency_constraint_flags` and returns a dict where
@@ -56,7 +76,12 @@ def _parse_pip_constraint_for_virtualenv(
     The function does not try to be too smart and just handles basic constraints.
     If it can't get an exact version, the real constraint will be handled by the
     {macos|windows}.setup_python function.
+    If marker_env is provided, marker-bearing constraints are evaluated against it;
+    otherwise, marker-bearing constraints are skipped.
     """
+    env: dict[str, str] = (
+        marker_env if marker_env is not None else cast("dict[str, str]", default_environment())
+    )
     if constraint_path:
         assert constraint_path.exists()
         with constraint_path.open(encoding="utf-8") as constraint_file:
@@ -72,11 +97,12 @@ def _parse_pip_constraint_for_virtualenv(
                     if (
                         package != "pip"
                         or requirement.url is not None
-                        or requirement.marker is not None
                         or len(requirement.extras) != 0
                         or len(requirement.specifier) != 1
                     ):
                         continue
+                    if requirement.marker is not None and not requirement.marker.evaluate(env):
+                        continue
                     specifier = next(iter(requirement.specifier))
                     if specifier.operator != "==":
                         continue
@@ -95,6 +121,7 @@ def virtualenv(
     use_uv: bool,
     env: dict[str, str] | None = None,
     pip_version: str | None = None,
+    marker_env: dict[str, str] | None = None,
 ) -> dict[str, str]:
     """
     Create a virtual environment. If `use_uv` is True,
@@ -114,7 +141,7 @@ def virtualenv(
     else:
         virtualenv_app, virtualenv_version = _ensure_virtualenv(version)
         if pip_version is None:
-            pip_version = _parse_pip_constraint_for_virtualenv(dependency_constraint)
+            pip_version = _parse_pip_constraint_for_virtualenv(dependency_constraint, marker_env)
         additional_flags = [f"--pip={pip_version}", "--no-setuptools"]
         if virtualenv_version < Version("20.31") or Version(version) < Version("3.9"):
             additional_flags.append("--no-wheel")
@@ -139,10 +166,7 @@ def virtualenv(
             python,
             venv_path,
         )
-    paths = [str(venv_path), str(venv_path / "Scripts")] if _IS_WIN else [str(venv_path / "bin")]
-    venv_env = os.environ.copy() if env is None else env.copy()
-    venv_env["PATH"] = os.pathsep.join([*paths, venv_env["PATH"]])
-    venv_env["VIRTUAL_ENV"] = str(venv_path)
+    venv_env = activate_virtualenv(venv_path, env=env)
     if not use_uv and pip_version == "embed":
         call(
             "python",
@@ -158,6 +182,20 @@ def virtualenv(
     return venv_env
 
 
+def activate_virtualenv(
+    venv_path: Path,
+    env: dict[str, str] | None = None,
+) -> dict[str, str]:
+    """
+    Return a copy of the environment with the virtualenv at `venv_path` activated.
+    """
+    paths = [str(venv_path), str(venv_path / "Scripts")] if _IS_WIN else [str(venv_path / "bin")]
+    venv_env = os.environ.copy() if env is None else env.copy()
+    venv_env["PATH"] = os.pathsep.join([*paths, venv_env["PATH"]])
+    venv_env["VIRTUAL_ENV"] = str(venv_path)
+    return venv_env
+
+
 def find_uv() -> Path | None:
     # Prefer uv in our environment
     with contextlib.suppress(ImportError, FileNotFoundError):

docs/_internal/pyodide-maintenance.md

@@ -0,0 +1,113 @@
+# Maintaining Pyodide support
+
+Last updated: May 2026
+
+This page describes how to update cibuildwheel's Pyodide platform code when either:
+
+- a new Pyodide alpha release arrives with support for a new [PyEmscripten Platform](https://pyodide.org/en/latest/development/abi.html) (which is tied to updates in Emscripten and CPython versions, compiler/linker flags, and so on), or
+- when that alpha release graduates to a stable one.
+
+## Background
+
+Pyodide has three types of releases that matter to cibuildwheel:
+
+- **Stable** – the most recent full Pyodide release (e.g., `0.29.x` / cp313). This is enabled by default with no special `CIBW_ENABLE` flag needed.
+- **Prerelease** – an alpha/beta/rc Pyodide release that uses the _next_ CPython version (e.g., `314.0.0a1` / cp314). Users must opt in with `CIBW_ENABLE: pyodide-prerelease` to build against this version. This may or may not be available at any given time, depending on the Pyodide release cycle.
+- **End-of-life (EoL)** – older Pyodide stable releases that are no longer the current stable. These are kept available behind `CIBW_ENABLE: pyodide-eol` so that users who still need to build for older Pyodide versions can do so.
+
+The guards in `cibuildwheel/selector.py` enforce this distinction. The constraints files under `cibuildwheel/resources/` pin the exact tool versions that go with each build.
+
+---
+
+## When a new Pyodide prerelease becomes available
+
+For example, consider a scenario when Pyodide ships a new `315.0.0a1` with cp315 support.
+
+### 1. Add the new Python configuration
+
+In `cibuildwheel/resources/build-platforms.toml`, add an entry under `[pyodide]`:
+
+```toml
+{ identifier = "cp315-pyodide_wasm32", version = "3.15", default_pyodide_version = "315.0.0a1", node_version = "v24" },
+```
+
+`version` is the CPython version string, `default_pyodide_version` is the Pyodide release to use when the user does not pin one explicitly (use the latest available alpha/beta for a prerelease entry), and `node_version` is the minimum Node.js major required by that Pyodide release — check the [pyodide-build FAQ](https://pyodide-build.readthedocs.io/en/latest/faq.html#what-node-js-version-do-i-need) for a rudimentary idea of what the correct value is.
+
+### 2. Update the prerelease guards in the selector
+
+In `cibuildwheel/selector.py`, update the patterns in the `PyodidePrerelease` guards to match the new identifier:
+
+```python
+if EnableGroup.PyodidePrerelease not in self.enable and fnmatch(
+    build_id, "cp315-pyodide_*"
+):
+    return False
+```
+
+### 3. Generate and pin a constraints file
+
+Run the `update_constraints` `nox` session, which reads `build-platforms.toml` and regenerates all Pyodide constraints files automatically:
+
+```bash
+nox -s update_constraints
+```
+
+### 4. Update tests
+
+Update the unit tests so the new identifier is accepted by the selector with `PyodidePrerelease` enabled and rejected without it. Pyodide-specific integration tests may also need their hardcoded expected-wheel lists extended.
+
+## When a Pyodide prerelease becomes stable
+
+Pyodide uses a versioning scheme where the stable release for a given CPython version is named `[PythonMajorMinor].0.0`, so the first stable release shipping cp314 will be **`314.0.0`**. See [pyodide/pyodide#6084](https://github.com/pyodide/pyodide/issues/6084) for a rationale of this versioning scheme.
+
+### 1. Update the stable entries, and remove (or replace) the prerelease entry
+
+In `build-platforms.toml`, update the former prerelease entry's `default_pyodide_version` to the new stable release (e.g. `314.0.0`) and remove the prerelease marker from the identifier if present. Remove previous prerelease entries if they are now obsolete, or update them to the next prerelease if one is available. Move the previous stable version behind `pyodide-eol` rather than dropping it outright (see below).
+
+### 2. Disable or update the prerelease guards
+
+In `selector.py`:
+
+- **If a new prerelease is available**: update the `fnmatch` pattern to the next identifier (e.g. `cp315-pyodide_*`) as described above.
+- **If there is no new prerelease**: comment out the `PyodidePrerelease` logic.
+
+### 3. Update the constraints file
+
+Run `nox -s update_constraints` to regenerate the constraints file for the newly stable version. If the entry was already in `build-platforms.toml` as a prerelease, its constraints file already exists, and this step just refreshes it against the stable Pyodide release and updates the dependencies' versions.
+
+### 4. Update tests
+
+Update the unit tests so the newly stable identifier is accepted by the selector without needing `PyodidePrerelease` in the enable set. Pyodide-specific integration tests may also need their hardcoded expected-wheel lists extended.
+
+## When an old Pyodide version is to be moved to end-of-life
+
+When a Pyodide version is superseded by a new stable release, move it behind the `pyodide-eol` enable flag. We want to allow users who still build for older Pyodide ABIs time to upgrade.
+
+### 1. Add the `pyodide-eol` guard in the selector
+
+In `cibuildwheel/selector.py`, add (or update) the `PyodideEoL` guard to include the old identifier:
+
+```python
+if EnableGroup.PyodideEoL not in self.enable and fnmatch(build_id, "cp312-pyodide_*"):
+    return False
+```
+
+### 2. Update tests
+
+Update the unit tests so the EoL identifier requires `PyodideEoL` to be included in the enable set. The default (no `CIBW_ENABLE`) should exclude it.
+
+## When an old Pyodide version is to be fully retired
+
+Retirement is not expected to happen on a routine basis. It is only warranted when the Pyodide ecosystem itself has evolved to the point where an older ABI version is considered obsolete – for example, if the surrounding toolchain, packaging standards, or runtime infrastructure have moved on so substantially that building for the older version no longer makes practical sense. Any retirement is to be discussed and agreed upon by Pyodide maintainers before proceeding.
+
+### 1. Remove the Python configuration
+
+Delete the entry from `build-platforms.toml` and remove the `PyodideEoL` guard for that identifier in `selector.py`.
+
+### 2. Delete the constraints file
+
+Remove `cibuildwheel/resources/constraints-pyodideXYZ.txt`.
+
+### 3. Update tests
+
+Remove references to the old identifier from the unit tests, integration tests, and drop any expected-wheel entries for it from the test helper.

docs/changelog.md

@@ -4,6 +4,35 @@ title: Changelog
 
 # Changelog
 
+### v4.0.0rc1
+
+_14 May 2026_
+
+- 🌟 Adds wheel auditing with `abi3audit` as a default after the repair step, with new [`audit-requires`](https://cibuildwheel.pypa.io/en/stable/options/#audit-requires) and [`audit-command`](https://cibuildwheel.pypa.io/en/stable/options/#audit-command) options (#2805)
+- 🌟 Adds `pyemscripten` platform tag support (PEP 783), updates Pyodide to 314.0.0a1, and adds a `pyodide-eol` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) flag for building end-of-life Pyodide versions (#2812, #2848)
+- 🌟 Sets up `delvewheel` as the default [`repair-wheel-command`](https://cibuildwheel.pypa.io/en/stable/options/#repair-wheel-command) for Windows, so extension module DLLs are now bundled automatically. Skip by setting it to empty if not needed. (#2831)
+- ✨ Adds CPython 3.15 support, under the [`enable` option](https://cibuildwheel.pypa.io/en/stable/options/#enable) `cpython-prerelease`. This version of cibuildwheel uses 3.15.0b1. (#2833, #2850)
+
+    _While CPython is in beta, the ABI can change, so your wheels might not be compatible with the final release. For this reason, we don't recommend distributing wheels until RC1, at which point 3.14 will be available in cibuildwheel without the flag._ (#2390)
+- ✨ Adds `{project}` and `{package}` placeholders to [`config-settings`](https://cibuildwheel.pypa.io/en/stable/options/#config-settings) (#2827)
+- ⚠️ Drops support for Python 3.8 (#2686)
+- ⚠️ Removes the experimental CPython 3.13 free-threading builds and the `cpython-freethreading` [`enable`](https://cibuildwheel.pypa.io/en/stable/options/#enable) option. CPython 3.14+ free-threading support remains available without the enable flag. (#2684)
+- ⚠️ Drops support for Cirrus CI, which is shutting down June 1, 2026 (#2817)
+- 🐛 Fixes `UV_PYTHON` not being set for [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) on Linux when using `uv` as the [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) (#2830)
+- 🛠 Updates Android to Python 3.13.13 and 3.14.4 (#2821)
+- 🛠 Applies Pyodide-specific patches to the Emscripten toolchain installation (#2800)
+- 🛠 Updates dependencies and container pins (#2845, #2837, #2821, #2818, #2810, #2838, #2813)
+- 🛠 Uses `python -V -V` for Windows build diagnostics (#2832)
+- 📚 Documents platform-specific [`before-build`](https://cibuildwheel.pypa.io/en/stable/options/#before-build) configuration (#2834)
+- 📚 Updates the "How it works" diagram with details of Android, iOS, and Pyodide builds (#2816)
+- 📚 Adds Pyodide icon and regenerates working examples data for Android, iOS, and Pyodide (#2815, #2811)
+- 📚 Links back to source in docs (#2806)
+- 💼 Adds PEP 723 metadata for `bin/` scripts and drops the `bin` dependency group (#2819)
+- 💼 Updates CI action pins and dev dependencies (#2851, #2843, #2826, #2823, #2820, #2807)
+- 🧪 Fixes Android tests using the `uv` frontend (#2809)
+- 🧪 Fixes the update-dependencies workflow to use `uv` to run `nox` (#2808)
+
+
 ### v3.4.1
 
 _2 April 2026_
@@ -21,6 +50,7 @@ _5 March 2026_
 - 🌟 You can now build wheels using `uv` as a build frontend. This should improve performance, especially if your project has lots of build dependencies. To use, set [`build-frontend`](https://cibuildwheel.pypa.io/en/stable/options/#build-frontend) to `uv`. (#2322)
 - ⚠️ We no longer support running on Travis CI. It may continue working but we don't run tests there anymore so we can't be sure. (#2682)
 - ✨ Improvements to building rust wheels on Android (#2650)
+- 🛠 Update Pyodide to 0.29.3 (#2719, #2733)
 - 🐛 Fix bug with the GitHub Action on Windows, where PATH was getting unnecessarily changed, causing issues with meson builds. (#2723)
 - ✨ Add support for quiet setting on `build` and `uv` from the cibuildwheel `build-verbosity` setting. (#2737)
 - 📚 Docs updates, including guidance on using Meson on Windows (#2718)

docs/ci-services.md

@@ -103,20 +103,6 @@ Commit this file, and push to Gitlab. The pipeline should start automatically.
 
 Gitlab will store the built wheels for you - you can access them from the Pipelines view. Check out the Gitlab [docs](https://docs.gitlab.com/ee/ci/yaml/) for more info on this config file.
 
-### Cirrus CI [linux/mac/windows] {: #cirrus-ci}
-
-To build Linux, Mac, and Windows wheels on Cirrus CI, create a `.cirrus.yml` file in your repo,
-
-> .cirrus.yml
-
-```yaml
-{% include "../examples/cirrus-ci-minimal.yml" %}
-```
-
-Commit this file, enable building of your repo on Cirrus CI, and push.
-
-Cirrus CI will store the built wheels for you - you can access them from the individual task view. Check out the Cirrus CI [docs](https://cirrus-ci.org/guide/writing-tasks/) for more info on this config file.
-
 > ⚠️ Got an error? Check the [FAQ](faq.md).
 
 ### Other CI services
@@ -125,6 +111,10 @@ Cirrus CI will store the built wheels for you - you can access them from the ind
 
 Appveyor official support was dropped in cibuildwheel v3.0, due to a lack of CI credits. However, it can probably still be used as-is. Check the Appveyor example from the cibuildwheel v2.0 branch: [appveyor-minimal.yml](https://github.com/pypa/cibuildwheel/blob/v2.23.3/examples/appveyor-minimal.yml).
 
+### Cirrus CI [linux/mac/windows] {: #cirrus-ci}
+
+Due to Cirrus CI [end-of-life](https://cirruslabs.org) on June 1, 2026, we no longer officially support this service.
+
 ## Next steps
 
 Once you've got the wheel building successfully, you might want to set up [testing](options.md#test-command) or [automatic releases to PyPI](deliver-to-pypi.md#automatic-method).

docs/configuration.md

@@ -53,16 +53,6 @@ cibuildwheel to run tests, add the following YAML to your CI config file:
         CIBW_TEST_COMMAND: "pytest {project}/tests"
     ```
 
-!!! tab "Cirrus CI"
-
-    > .cirrus.yml ([docs](https://cirrus-ci.org/guide/writing-tasks/#environment-variables))
-
-    ```yaml
-    env:
-      CIBW_TEST_REQUIRES: pytest
-      CIBW_TEST_COMMAND: "pytest {project}/tests"
-    ```
-
 ## Configuration file {: #configuration-file}
 
 You can configure cibuildwheel with a config file, such as `pyproject.toml`.
@@ -142,17 +132,17 @@ which means it can be given multiple times.
 manylinux-x86_64-image = "manylinux_2_34"
 
 [[tool.cibuildwheel.overrides]]
-select = "cp38-*"
+select = "cp39-*"
 manylinux-x86_64-image = "manylinux2014"
 
 [[tool.cibuildwheel.overrides]]
-select = "cp3{9,10}-*"
+select = "cp3{10,11}-*"
 manylinux-x86_64-image = "manylinux_2_28"
 ```
 
-This example will build CPython 3.8 wheels on manylinux2014, CPython 3.9-3.10
+This example will build CPython 3.9 wheels on manylinux2014, CPython 3.10-3.11
 wheels on manylinux_2_28, and manylinux_2_34 wheels for any newer Python
-(like 3.10).
+(like 3.14).
 
 ```toml
 [tool.cibuildwheel]

docs/contributing.md

@@ -82,7 +82,7 @@ A few notes-
 
 - Running the macOS integration tests requires _system installs_ of Python from python.org for all the versions that are tested. We won't attempt to install these when running locally, but you can do so manually using the URL in the error message that is printed when the install is not found.
 
-- The ['enable groups'](options.md#enable) run by default are just 'cpython-prerelease' and 'cpython-freethreading'. You can add other groups like pypy or graalpy by passing the `--enable` argument to pytest, i.e. `nox -s tests -- test --enable pypy`. On GitHub PRs, you can add a label to the PR to enable these groups.
+- The ['enable groups'](options.md#enable) run by default is just 'cpython-prerelease'. You can add other groups like pypy or graalpy by passing the `--enable` argument to pytest, i.e. `nox -s tests -- test --enable pypy`. On GitHub PRs, you can add a label to the PR to enable these groups.
 
 #### Running pytest directly
 
@@ -161,32 +161,6 @@ bin/run_example_ci_configs.py examples/github-with-qemu.yml
 
 The script then outputs a Markdown table that can be copy/pasted into a PR to monitor and record the test.
 
-### Preparing environments
-
-This has been moved to using docker, so you only need the following instructions if you add `--no-docker` to avoid using docker.
-
-The dependency update script in the next section requires multiple python versions installed. One way to do this is to use `pyenv`:
-
-```bash
-pyenv install 3.7.8
-# Optionally add 3.8 and make it the local version;
-# otherwise assuming 3.8+ already is your current python version
-```
-
-Then, you need to make the required virtual environments:
-
-```bash
-$(pyenv prefix 3.7.8)/bin/python -m venv env37
-```
-
-<!-- Note for fish users: use zsh/bash for these lines for now, there's not a nice one-line fish replacement -->
-
-And, you need to install the requirements into each environment:
-
-```bash
-for f in env*/bin/pip; do $f install pip-tools; done
-```
-
 ### Making a release
 
 Before making a release, ensure pinned dependencies are up-to-date. Autoupdates are run weekly, with a PR being raised with any changes as required, so just make sure the latest one is merged before continuing.
@@ -208,3 +182,9 @@ git push && git push --tags
 Then head to https://github.com/pypa/cibuildwheel/releases and create a GitHub release from the new tag, pasting in the changelog entry. Once the release is created inside GitHub, a CI job will create the assets and upload them to PyPI.
 
 If there were any schema updates, run `pipx run ./bin/generate_schema.py --schemastore > partial-cibuildwheel.json` and contribute the changes to SchemaStore.
+
+### Platform-specific maintenance
+
+This section is a stub. Please open a PR to add guidance for any platform you would like to help maintain!
+
+- **Pyodide**: see [Maintaining Pyodide support](_internal/pyodide-maintenance.md) for instructions and maintainer-specific information on updating Pyodide-related code in cibuildwheel and updating to new Pyodide releases.

docs/data/projects.schema.json

@@ -20,7 +20,6 @@
             "travisci",
             "circleci",
             "gitlab",
-            "cirrusci",
             "azurepipelines"
           ]
         }
@@ -28,7 +27,7 @@
       "ci_config": { "type": "string" },
       "os": {
         "type": "array",
-        "items": { "enum": ["windows", "apple", "linux"] }
+        "items": { "enum": ["windows", "apple", "linux", "android", "ios", "pyodide"] }
       }
     },
     "required": ["name", "gh", "ci", "os"]

docs/data/projects.yml

@@ -3,8 +3,8 @@
 # gh: GitHub repo (eventually a url: could be added for non-github projects)
 # stars: GitHub repo (optional, if different from package, such as for Twisted)
 # pypi: The pypi name, if different from the GitHub package name
-# os: Operating system list, [windows, apple, linux] (optional)
-# ci: [github, azurepipelines, circleci, gitlab, travisci, cirrusci] (optional)
+# os: Operating system list, [windows, apple, linux, android, ios, pyodide] (optional)
+# ci: [github, azurepipelines, circleci, gitlab, travisci] (optional)
 # notes: (text, optional)
 
 - name: abess
@@ -17,7 +17,7 @@
   gh: matplotlib/matplotlib
   notes: The venerable Matplotlib, a Python library with C++ portions
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
 
 - name: pyinstrument
   gh: joerick/pyinstrument
@@ -48,8 +48,8 @@
 - name: pybase64
   gh: mayeut/pybase64
   ci: [github]
-  os: [windows, apple, linux]
-
+  os: [windows, apple, linux, android, ios, pyodide]
+  notes: setuptools backend with custom CMake step for external sources. SBOM embedded via a custom repair step.
 
 - name: KDEpy
   gh: tommyod/KDEpy
@@ -144,7 +144,7 @@
 - name: scikit-learn
   gh: scikit-learn/scikit-learn
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
   ci_config: .github/workflows/wheels.yml
   notes: |
     The machine learning library. A complex but clean config using many of
@@ -154,7 +154,7 @@
 - name: scikit-image
   gh: scikit-image/scikit-image
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
   ci_config: .github/workflows/cibuildwheel.yml
   notes: |
     Image processing library. Uses cibuildwheel to build and test a project
@@ -173,7 +173,7 @@
 - name: pyzmq
   gh: zeromq/pyzmq
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, android]
   ci_config: .github/workflows/wheels.yml
   notes: |
     Python bindings for zeromq, the networking library.
@@ -194,17 +194,17 @@
 - name: pybind11 python_example
   gh: pybind/python_example
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
 
 - name: pybind11 cmake_example
   gh: pybind/cmake_example
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
 
 - name: pybind11 scikit_build_example
   gh: pybind/scikit_build_example
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
 
 - name: pybind11 cross build example
   gh: wbarnha/pybind_cmake_example_crossbuild
@@ -215,7 +215,7 @@
 - name: iminuit
   gh: scikit-hep/iminuit
   ci: [github]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
 
 - name: pyjet
   gh: scikit-hep/pyjet
@@ -230,7 +230,7 @@
 - name: boost-histogram
   gh: scikit-hep/boost-histogram
   ci: [github, travisci]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
   notes: Supports full range of wheels, including PyPy and alternate archs.
 
 - name: Rtree
@@ -332,7 +332,7 @@
 - name: sourmash
   gh: sourmash-bio/sourmash
   ci: [github]
-  os: [apple, linux, windows]
+  os: [apple, linux, windows, pyodide]
 
 - name: markupsafe
   gh: pallets/markupsafe
@@ -401,7 +401,7 @@
 - name: pillow-heif
   gh: bigcat88/pillow_heif
   pypi: pillow-heif
-  ci: [github, cirrusci]
+  ci: [github]
   os: [apple, linux, windows]
   notes: Bindings to libheif library with third party dependencies. Fully automated CI for tests and publishing including Apple Silicon builds.
 
@@ -565,7 +565,7 @@
 - name: NumPy
   gh: numpy/numpy
   ci: [github, travisci]
-  os: [windows, apple, linux]
+  os: [windows, apple, linux, pyodide]
 
 - name: Wrapt
   gh: GrahamDumpleton/wrapt

docs/data/readme_icons/android.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" role="img" viewBox="0 0 24 24" width="16px" fill="#606060"><title>Android icon</title><path d="M17.523 15.3414c-.5511 0-.9993-.4486-.9993-.9997s.4483-.9993.9993-.9993c.5511 0 .9993.4483.9993.9993.0001.5511-.4482.9997-.9993.9997m-11.046 0c-.5511 0-.9993-.4486-.9993-.9997s.4482-.9993.9993-.9993c.5511 0 .9993.4483.9993.9993 0 .5511-.4483.9997-.9993.9997m11.4045-6.02l1.9973-3.4592a.416.416 0 00-.1521-.5676.416.416 0 00-.5676.1521l-2.0223 3.503C15.5902 8.2439 13.8533 7.8508 12 7.8508s-3.5902.3931-5.1367 1.0989L4.841 5.4467a.4161.4161 0 00-.5677-.1521.4157.4157 0 00-.1521.5676l1.9973 3.4592C2.6889 11.1867.3432 14.6589 0 18.761h24c-.3435-4.1021-2.6892-7.5743-6.1185-9.4396"/></svg>

docs/data/readme_icons/cirrusci.svg

@@ -1 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" role="img" viewBox="0 0 24 24" width="16px" fill="#606060"><title>Cirrus CI icon</title><path d="M19.422.453a1.113 1.113 0 0 0-1.113 1.115 1.113 1.113 0 0 0 1.112 1.114c1.31 0 2.35 1.042 2.35 2.363 0 1.32-1.04 2.363-2.35 2.363H1.112A1.113 1.113 0 0 0 0 8.52a1.113 1.113 0 0 0 1.113 1.117h18.31c1.308 0 2.35 1.042 2.35 2.363 0 1.32-1.042 2.363-2.35 2.363H1.112A1.113 1.113 0 0 0 0 15.48a1.113 1.113 0 0 0 1.113 1.112h18.31c1.308 0 2.35 1.042 2.35 2.363 0 1.32-1.042 2.363-2.35 2.363H1.112A1.113 1.113 0 0 0 0 22.432a1.113 1.113 0 0 0 1.113 1.115h18.31a1.113 1.113 0 0 0 .206-.022c2.42-.112 4.37-2.12 4.37-4.57 0-1.393-.642-2.634-1.63-3.478C23.356 14.632 24 13.393 24 12c0-1.393-.643-2.632-1.63-3.477C23.357 7.68 24 6.438 24 5.045c0-2.52-2.06-4.592-4.578-4.592z"/></svg>

docs/data/readme_icons/ios.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" role="img" viewBox="0 0 24 24" width="16px" fill="#606060"><title>iOS icon</title><path d="M1.1 6.05C.486 6.05 0 6.53 0 7.13A1.08 1.08 0 0 0 1.1 8.21C1.72 8.21 2.21 7.73 2.21 7.13C2.21 6.53 1.72 6.05 1.1 6.05M8.71 6.07C5.35 6.07 3.25 8.36 3.25 12C3.25 15.67 5.35 17.95 8.71 17.95C12.05 17.95 14.16 15.67 14.16 12C14.16 8.36 12.05 6.07 8.71 6.07M19.55 6.07C17.05 6.07 15.27 7.45 15.27 9.5C15.27 11.13 16.28 12.15 18.4 12.64L19.89 13C21.34 13.33 21.93 13.81 21.93 14.64C21.93 15.6 20.96 16.28 19.58 16.28C18.17 16.28 17.11 15.59 17 14.53H15C15.08 16.65 16.82 17.95 19.46 17.95C22.25 17.95 24 16.58 24 14.4C24 12.69 23 11.72 20.68 11.19L19.35 10.89C17.94 10.55 17.36 10.1 17.36 9.34C17.36 8.38 18.24 7.74 19.54 7.74C20.85 7.74 21.75 8.39 21.85 9.46H23.81C23.76 7.44 22.09 6.07 19.55 6.07M8.71 7.82C10.75 7.82 12.06 9.45 12.06 12C12.06 14.57 10.75 16.2 8.71 16.2C6.65 16.2 5.35 14.57 5.35 12C5.35 9.45 6.65 7.82 8.71 7.82M.111 9.31V17.76H2.1V9.31H.11Z"/></svg>

docs/data/readme_icons/pyodide.svg

@@ -0,0 +1,12 @@
+<svg width="16px" height="16px" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">
+<g clip-path="url(#clip0_101_23)">
+<path d="M19.4079 13.0863C19.4079 13.0645 19.4062 11.8768 19.4045 11.8551H24.0001V23.7707H12.0828V11.8551H16.6783C16.6783 11.8768 16.675 13.0645 16.675 13.0863M22.1191 22.4962H22.9376L21.6965 18.2782H20.4519L19.4296 22.4962H20.2231L20.4302 21.5573H21.8485L22.1174 22.4962H22.1191ZM17.7708 22.4962H18.5543L19.5599 18.2782H18.7865L18.17 21.1848H18.16L17.5753 18.2782H16.837L16.1855 21.1497H16.1755L15.6359 18.2782H14.8474L15.7562 22.4962H16.5547L17.1811 19.6246H17.1911L17.7708 22.4962ZM20.9264 19.3172H21.2588L21.6547 20.8657H20.5822L20.9264 19.3172Z" fill="#606060"/>
+<path d="M11.6935 5.17811C11.6935 6.94883 10.2234 8.5191 8.35247 8.5191H1.67049V11.8601H0V0.166626H8.35247C10.1399 0.166626 11.6433 1.65337 11.6935 3.50761V5.17811ZM10.023 3.50761C10.023 2.58884 9.27124 1.83712 8.35247 1.83712H1.67049V6.8486H8.35247C9.27124 6.8486 10.023 6.09688 10.023 5.17811V3.50761Z" fill="#606060"/>
+<path d="M18.8766 8.185V11.8601H17.2061V8.185L12.1946 2.67237V0.166626H13.8651V1.98746L18.0413 6.58132L22.2175 1.98746V0.166626H23.888V2.67237L18.8766 8.185Z" fill="#606060"/>
+</g>
+<defs>
+<clipPath id="clip0_101_23">
+<rect width="24" height="24" fill="white"/>
+</clipPath>
+</defs>
+</svg>

docs/diagram.html

@@ -5,6 +5,9 @@
     <div class="grid-line" style="grid-row-start: 3"></div>
     <div class="grid-line" style="grid-row-start: 4"></div>
     <div class="grid-line" style="grid-row-start: 5"></div>
+    <div class="grid-line" style="grid-row-start: 6"></div>
+    <div class="grid-line" style="grid-row-start: 7"></div>
+    <div class="grid-line" style="grid-row-start: 8"></div>
     <!-- the docker container outline -->
     <div class="grid-outline docker">
       <div class="outline">
@@ -17,11 +20,17 @@
     </div>
     <div class="grid-outline testVenv" style="grid-row-start: 4"><div class="outline"></div></div>
     <div class="grid-outline testVenv" style="grid-row-start: 5"><div class="outline"></div></div>
+    <div class="grid-outline testVenv" style="grid-row-start: 6"><div class="outline"></div></div>
+    <div class="grid-outline testVenv" style="grid-row-start: 7"><div class="outline"></div></div>
+    <div class="grid-outline testVenv" style="grid-row-start: 8"><div class="outline"></div></div>
     <!-- THE GRID CONTENT -->
     <!-- the row labels -->
     <div class="grid-row-label" style="grid-row-start: 3">Linux</div>
     <div class="grid-row-label" style="grid-row-start: 4">macOS</div>
     <div class="grid-row-label" style="grid-row-start: 5">Windows</div>
+    <div class="grid-row-label" style="grid-row-start: 6">Android</div>
+    <div class="grid-row-label" style="grid-row-start: 7">iOS</div>
+    <div class="grid-row-label" style="grid-row-start: 8">Pyodide</div>
     <!-- the column labels -->
     <div class="grid-column-label"
          style="grid-row: 1 / span 1; grid-column: 5 / -3">
@@ -29,7 +38,7 @@
     </div>
     <div class="grid-column-label"
          style="grid-row: 2 / span 1;
-                grid-column: 9 / -3;
+                grid-column: 10 / -3;
                 margin-bottom: 0.5em;">
       <div class="label">If tests are configured</div>
     </div>
@@ -86,7 +95,7 @@
       [
         {
           href: 'options/#before-all',
-          platforms: ['linux', 'macos', 'windows'],
+          platforms: ['linux', 'macos', 'windows', 'android', 'ios', 'pyodide'],
           style: 'dot',
           tooltip: {
             title: 'CIBW_BEFORE_ALL',
@@ -104,11 +113,27 @@
             description: 'Install the version of Python required to build this wheel.'
           },
         },
+        {
+          label: 'Install Python & set up cross-compilation',
+          platforms: ['android', 'ios'],
+          style: 'block',
+          tooltip: {
+            description: 'Install Python for the build and target platforms, and set up a cross-compilation environment.'
+          },
+        },
+        {
+          label: 'Set up Pyodide xbuildenv',
+          platforms: ['pyodide'],
+          style: 'block',
+          tooltip: {
+            description: 'Install a base Python, set up a build virtualenv with pyodide-build, install the Pyodide cross-build environment and Emscripten toolchain.'
+          },
+        },
       ],
       [
         {
           href: 'options/#before-build',
-          platforms: ['linux', 'macos', 'windows'],
+          platforms: ['linux', 'macos', 'windows', 'android', 'ios', 'pyodide'],
           style: 'dot',
           tooltip: {
             title: 'CIBW_BEFORE_BUILD',
@@ -121,12 +146,12 @@
         {
           label: 'Build wheel',
           href: 'options/#build-frontend',
-          platforms: ['linux', 'macos', 'windows'],
+          platforms: ['linux', 'macos', 'windows', 'android', 'ios', 'pyodide'],
           style: 'block',
           tooltip: {
             title: 'CIBW_BUILD_FRONTEND',
             tag: 'Customisable step',
-            description: 'Build the wheel according to your package configuration, using the frontend of your choice - pip or build.'
+            description: 'Build the wheel according to your package configuration, using the frontend of your choice – pip, build, or uv.'
           },
         },
       ],
@@ -154,24 +179,46 @@
           },
         },
         {
-          env: "CIBW_REPAIR_WHEEL_COMMAND",
+          label: 'Repair wheel',
           href: 'options/#repair-wheel-command',
-          label: 'repair wheel',
-          platforms: ['windows'],
+          platforms: ['android'],
+          style: 'block',
+          tooltip: {
+            title: 'CIBW_REPAIR_WHEEL_COMMAND',
+            tag: 'Customisable step',
+            description: 'By default, bundles libc++ into the wheel if any shared library links against it, using patchelf. Can be overridden with a custom repair command.'
+          },
+        },
+        {
+          href: 'options/#repair-wheel-command',
+          platforms: ['windows', 'ios', 'pyodide'],
           style: 'dot',
-          optional: true,
           tooltip: {
             title: 'CIBW_REPAIR_WHEEL_COMMAND',
             tag: 'Optional step',
-            description: 'Execute a shell command to repair each built wheel'
+            description: 'Execute a shell command to repair each built wheel.'
           },
         },
       ],
       [
         {
-          href: 'options/#before-test',
+          env: "CIBW_AUDIT_COMMAND",
+          href: 'options/#audit-command',
+          label: 'audit wheel',
           platforms: ['linux', 'macos', 'windows'],
           style: 'dot',
+          tooltip: {
+            title: 'CIBW_AUDIT_COMMAND',
+            tag: 'Optional step',
+            description: 'Runs a shell command to check each built wheel. By default this runs abi3audit if produced wheels are abi3.'
+          },
+        }
+      ],
+      [
+        {
+          href: 'options/#before-test',
+          platforms: ['linux', 'macos', 'windows', 'android', 'ios', 'pyodide'],
+          style: 'dot',
           tooltip: {
             title: 'CIBW_BEFORE_TEST',
             tag: 'Optional step',
@@ -182,10 +229,10 @@
       [
         {
           label: 'Install wheel',
-          platforms: ['linux', 'macos', 'windows'],
+          platforms: ['linux', 'macos', 'windows', 'android', 'ios', 'pyodide'],
           style: 'block',
           tooltip: {
-            description: 'Install the wheel we just built into the test virtualenv.'
+            description: 'Install the wheel we just built into the test environment.'
           },
         },
       ],
@@ -198,7 +245,40 @@
           tooltip: {
             title: 'CIBW_TEST_COMMAND',
             tag: 'Optional step',
-            description: 'Execute a shell command to test each built wheel'
+            description: 'Execute a shell command to test each built wheel.'
+          },
+        },
+        {
+          label: 'Test on emulator',
+          href: 'options/#test-command',
+          platforms: ['android'],
+          style: 'block',
+          tooltip: {
+            title: 'CIBW_TEST_COMMAND',
+            tag: 'Optional step',
+            description: 'Run the test command on an Android emulator using the CPython testbed.'
+          },
+        },
+        {
+          label: 'Test on simulator',
+          href: 'options/#test-command',
+          platforms: ['ios'],
+          style: 'block',
+          tooltip: {
+            title: 'CIBW_TEST_COMMAND',
+            tag: 'Optional step',
+            description: 'Run the test command on an iOS simulator using the testbed app.'
+          },
+        },
+        {
+          label: 'Test in Node.js',
+          href: 'options/#test-command',
+          platforms: ['pyodide'],
+          style: 'block',
+          tooltip: {
+            title: 'CIBW_TEST_COMMAND',
+            tag: 'Optional step',
+            description: 'Run the test command in a Pyodide virtualenv powered by Node.js.'
           },
         },
       ],
@@ -219,26 +299,21 @@
     data() {
       return {
         diagram,
-        platforms: ['linux', 'macos', 'windows'],
+        platforms: ['linux', 'macos', 'windows', 'android', 'ios', 'pyodide'],
       }
     },
     methods: {
       blockStyle(action) {
-        let start, end
-        if (action.platforms.includes('linux')) {
-          start = 3
-        } else if (action.platforms.includes('macos')) {
-          start = 4
-        } else if (action.platforms.includes('windows')) {
-          start = 5
-        }
+        const platformOrder = ['linux', 'macos', 'windows', 'android', 'ios', 'pyodide']
+        const rowOffset = 3 // first platform starts at grid row 3
 
-        if (action.platforms.includes('windows')) {
-          end = 6
-        } else if (action.platforms.includes('macos')) {
-          end = 5
-        } else if (action.platforms.includes('linux')) {
-          end = 4
+        let start = null
+        let end = null
+        for (let i = 0; i < platformOrder.length; i++) {
+          if (action.platforms.includes(platformOrder[i])) {
+            if (start === null) start = rowOffset + i
+            end = rowOffset + i + 1
+          }
         }
 
         return {
@@ -413,14 +488,14 @@
   .grid-outline {
     grid-row-end: span 1;
     position: relative;
-    color: #8f8f8f;
+    color: #666666;
   }
   .grid-outline.docker {
     grid-row: 3 / span 1;
     grid-column: 3 / -2;
   }
   .grid-outline.testVenv {
-    grid-column: 9 / span 3;
+    grid-column: 10 / span 3;
   }
   .grid-outline .outline {
     position: absolute;
@@ -478,7 +553,7 @@
     font-weight: 500;
     text-transform: uppercase;
     font-size: 0.9em;
-    color: #C9C9C9;
+    color: #888888;
   }
   .tooltip-description {
     margin-top: 1px;

docs/extra.js

@@ -103,7 +103,6 @@ fragmentRedirect([
   { source: 'setup/#appveyor', destination: 'ci-services/' },
   { source: 'setup/#circleci', destination: 'ci-services/' },
   { source: 'setup/#gitlab-ci', destination: 'ci-services/' },
-  { source: 'setup/#cirrus-ci', destination: 'ci-services/' },
 
   { source: 'faq/#linux-builds-in-containers', destination: 'platforms/#linux-containers' },
   { source: 'faq/#apple-silicon', destination: 'platforms/#macos-architectures' },

docs/faq.md

@@ -33,7 +33,7 @@ The CPython Limited API is a subset of the Python C Extension API that's declare
 
 To create a package that builds ABI3 wheels, you'll need to configure your build backend to compile libraries correctly create wheels with the right tags. [Check this repo](https://github.com/joerick/python-abi3-package-sample) for an example of how to do this with setuptools.
 
-You could also consider running [abi3audit](https://github.com/trailofbits/abi3audit) against the produced wheels in order to check for abi3 violations or inconsistencies. You can run it alongside the default in your [repair-wheel-command](options.md#repair-wheel-command).
+cibuildwheel automatically runs [abi3audit](https://github.com/trailofbits/abi3audit) on any abi3 wheel after the repair step to check for stable ABI violations or inconsistencies. If abi3audit detects any issues, the build will fail with a detailed report.
 
 ### Packages with optional C extensions {: #optional-extensions}
 
@@ -125,7 +125,7 @@ There are two suggested methods for keeping cibuildwheel up to date that instead
 If you use GitHub Actions for builds, you can use cibuildwheel as an action:
 
 ```yaml
-uses: pypa/cibuildwheel@v3.4.1
+uses: pypa/cibuildwheel@v4.0.0rc1
 ```
 
 This is a composite step that just runs cibuildwheel using pipx. You can set command-line options as `with:` parameters, and use `env:` as normal.
@@ -150,7 +150,7 @@ The second option, and the only one that supports other CI systems, is using a `
 
 ```bash
 # requirements-cibw.txt
-cibuildwheel==3.4.1
+cibuildwheel==4.0.0rc1
 ```
 
 Then your install step would have `python -m pip install -r requirements-cibw.txt` in it. Your `.github/dependabot.yml` file could look like this:
@@ -315,7 +315,7 @@ Solutions to this vary, but the simplest is to use pipx:
 # most runners have pipx preinstalled, but in case you don't
 python3 -m pip install pipx
 
-pipx run cibuildwheel==3.4.1 --output-dir wheelhouse
+pipx run cibuildwheel==4.0.0rc1 --output-dir wheelhouse
 pipx run twine upload wheelhouse/*.whl
 ```
 
@@ -344,34 +344,6 @@ To work around this, use a different environment variable such as `REPAIR_LIBRAR
 
 See [#816](https://github.com/pypa/cibuildwheel/issues/816), thanks to @phoerious for reporting.
 
-### macOS: Building CPython 3.8 wheels on arm64
-
-If you're building on an arm64 runner, you might notice something strange about CPython 3.8 - unlike Python 3.9+, it's cross-compiled to arm64 from an x86_64 version of Python running under Rosetta emulation. This is because (despite the prevalence of arm64 versions of Python 3.8 from Apple and Homebrew) there is no officially supported Python.org installer of Python 3.8 for arm64.
-
-This is fine for simple C extensions, but for more complicated builds on arm64 it becomes an issue.
-
-So, if you want to build macOS arm64 wheels on an arm64 runner (e.g., `macos-14`) on Python 3.8, before invoking cibuildwheel, you should install a native arm64 Python 3.8 interpreter on the runner:
-
-
-!!! tab "GitHub Actions"
-
-    ```yaml
-    - uses: actions/setup-python@v5
-      with:
-        python-version: 3.8
-      if: runner.os == 'macOS' && runner.arch == 'ARM64'
-    ```
-
-!!! tab "Generic"
-
-    ```bash
-    curl -o /tmp/Python38.pkg https://www.python.org/ftp/python/3.8.10/python-3.8.10-macos11.pkg
-    sudo installer -pkg /tmp/Python38.pkg -target /
-    sh "/Applications/Python 3.8/Install Certificates.command"
-    ```
-
-Then cibuildwheel will detect that it's installed and use it instead. However, you probably don't want to build x86_64 wheels on this Python, unless you're happy with them only supporting macOS 11+.
-
 ### macOS: Library dependencies do not satisfy target MacOS
 
 Since delocate 0.11.0 there is added verification that the library binary dependencies match the target macOS version. This is to prevent the situation where a wheel platform tag is lower than the actual minimum macOS version required by the library. To resolve this error you need to build the library to the same macOS version as the target wheel (for example using `MACOSX_DEPLOYMENT_TARGET` environment variable).

docs/options.md

@@ -45,7 +45,7 @@ This option can also be set using the [command-line option](#command-line) `--pl
 
 > Choose the Python versions to build
 
-List of builds to build and skip. Each build has an identifier like `cp38-manylinux_x86_64` or `cp37-macosx_x86_64` - you can list specific ones to build and cibuildwheel will only build those, and/or list ones to skip and cibuildwheel won't try to build them.
+List of builds to build and skip. Each build has an identifier like `cp314-manylinux_x86_64` or `cp313-macosx_x86_64` - you can list specific ones to build and cibuildwheel will only build those, and/or list ones to skip and cibuildwheel won't try to build them.
 
 When both options are specified, both conditions are applied and only builds with a tag that matches `build` and does not match `skip` will be built.
 
@@ -54,14 +54,13 @@ When setting the options, you can use shell-style globbing syntax, as per [fnmat
 <div class="build-id-table-marker"></div>
 |               | macOS                                                                  | Windows                                             | Linux Intel                                                                                         | Linux Other                                                                                                                                                                                                                                                                   | Android                                          | iOS                                                                                               | pyodide (WASM)       |
 |---------------|------------------------------------------------------------------------|-----------------------------------------------------|-----------------------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------|---------------------------------------------------------------------------------------------------|----------------------|
-| Python 3.8    | cp38-macosx_x86_64<br/>cp38-macosx_universal2<br/>cp38-macosx_arm64    | cp38-win_amd64<br/>cp38-win32                       | cp38-manylinux_x86_64<br/>cp38-manylinux_i686<br/>cp38-musllinux_x86_64<br/>cp38-musllinux_i686     | cp38-manylinux_aarch64<br/>cp38-manylinux_ppc64le<br/>cp38-manylinux_s390x<br/>cp38-manylinux_armv7l<br/>cp38-manylinux_riscv64<br/>cp38-musllinux_aarch64<br/>cp38-musllinux_ppc64le<br/>cp38-musllinux_s390x<br/>cp38-musllinux_armv7l<br/>cp38-musllinux_riscv64           |                                                  |                                                                                                   |                      |
 | Python 3.9    | cp39-macosx_x86_64<br/>cp39-macosx_universal2<br/>cp39-macosx_arm64    | cp39-win_amd64<br/>cp39-win32<br/>cp39-win_arm64    | cp39-manylinux_x86_64<br/>cp39-manylinux_i686<br/>cp39-musllinux_x86_64<br/>cp39-musllinux_i686     | cp39-manylinux_aarch64<br/>cp39-manylinux_ppc64le<br/>cp39-manylinux_s390x<br/>cp39-manylinux_armv7l<br/>cp39-manylinux_riscv64<br/>cp39-musllinux_aarch64<br/>cp39-musllinux_ppc64le<br/>cp39-musllinux_s390x<br/>cp39-musllinux_armv7l<br/>cp39-musllinux_riscv64           |                                                  |                                                                                                   |                      |
 | Python 3.10   | cp310-macosx_x86_64<br/>cp310-macosx_universal2<br/>cp310-macosx_arm64 | cp310-win_amd64<br/>cp310-win32<br/>cp310-win_arm64 | cp310-manylinux_x86_64<br/>cp310-manylinux_i686<br/>cp310-musllinux_x86_64<br/>cp310-musllinux_i686 | cp310-manylinux_aarch64<br/>cp310-manylinux_ppc64le<br/>cp310-manylinux_s390x<br/>cp310-manylinux_armv7l<br/>cp310-manylinux_riscv64<br/>cp310-musllinux_aarch64<br/>cp310-musllinux_ppc64le<br/>cp310-musllinux_s390x<br/>cp310-musllinux_armv7l<br/>cp310-musllinux_riscv64 |                                                  |                                                                                                   |                      |
 | Python 3.11   | cp311-macosx_x86_64<br/>cp311-macosx_universal2<br/>cp311-macosx_arm64 | cp311-win_amd64<br/>cp311-win32<br/>cp311-win_arm64 | cp311-manylinux_x86_64<br/>cp311-manylinux_i686<br/>cp311-musllinux_x86_64<br/>cp311-musllinux_i686 | cp311-manylinux_aarch64<br/>cp311-manylinux_ppc64le<br/>cp311-manylinux_s390x<br/>cp311-manylinux_armv7l<br/>cp311-manylinux_riscv64<br/>cp311-musllinux_aarch64<br/>cp311-musllinux_ppc64le<br/>cp311-musllinux_s390x<br/>cp311-musllinux_armv7l<br/>cp311-musllinux_riscv64 |                                                  |                                                                                                   |                      |
 | Python 3.12   | cp312-macosx_x86_64<br/>cp312-macosx_universal2<br/>cp312-macosx_arm64 | cp312-win_amd64<br/>cp312-win32<br/>cp312-win_arm64 | cp312-manylinux_x86_64<br/>cp312-manylinux_i686<br/>cp312-musllinux_x86_64<br/>cp312-musllinux_i686 | cp312-manylinux_aarch64<br/>cp312-manylinux_ppc64le<br/>cp312-manylinux_s390x<br/>cp312-manylinux_armv7l<br/>cp312-manylinux_riscv64<br/>cp312-musllinux_aarch64<br/>cp312-musllinux_ppc64le<br/>cp312-musllinux_s390x<br/>cp312-musllinux_armv7l<br/>cp312-musllinux_riscv64 |                                                  |                                                                                                   | cp312-pyodide_wasm32 |
-| Python 3.13   | cp313-macosx_x86_64<br/>cp313-macosx_universal2<br/>cp313-macosx_arm64<br><br>cp313t-macosx_x86_64<br/>cp313t-macosx_universal2<br/>cp313t-macosx_arm64 | cp313-win_amd64<br/>cp313-win32<br/>cp313-win_arm64<br><br>cp313t-win_amd64<br/>cp313t-win32<br/>cp313t-win_arm64 | cp313-manylinux_x86_64<br/>cp313-manylinux_i686<br/>cp313-musllinux_x86_64<br/>cp313-musllinux_i686<br><br>cp313t-manylinux_x86_64<br/>cp313t-manylinux_i686<br/>cp313t-musllinux_x86_64<br/>cp313t-musllinux_i686 | cp313-manylinux_aarch64<br/>cp313-manylinux_ppc64le<br/>cp313-manylinux_s390x<br/>cp313-manylinux_armv7l<br/>cp313-manylinux_riscv64<br/>cp313-musllinux_aarch64<br/>cp313-musllinux_ppc64le<br/>cp313-musllinux_s390x<br/>cp313-musllinux_armv7l<br/>cp313-musllinux_riscv64<br><br>cp313t-manylinux_aarch64<br/>cp313t-manylinux_ppc64le<br/>cp313t-manylinux_s390x<br/>cp313t-manylinux_armv7l<br/>cp313t-manylinux_riscv64<br/>cp313t-musllinux_aarch64<br/>cp313t-musllinux_ppc64le<br/>cp313t-musllinux_s390x<br/>cp313t-musllinux_armv7l<br/>cp313t-musllinux_riscv64 | cp313-android_arm64_v8a<br/>cp313-android_x86_64 | cp313-ios_arm64_iphoneos<br/>cp313-ios_arm64_iphonesimulator<br/>cp313-ios_x86_64_iphonesimulator | cp313-pyodide_wasm32 |
+| Python 3.13   | cp313-macosx_x86_64<br/>cp313-macosx_universal2<br/>cp313-macosx_arm64 | cp313-win_amd64<br/>cp313-win32<br/>cp313-win_arm64 | cp313-manylinux_x86_64<br/>cp313-manylinux_i686<br/>cp313-musllinux_x86_64<br/>cp313-musllinux_i686 | cp313-manylinux_aarch64<br/>cp313-manylinux_ppc64le<br/>cp313-manylinux_s390x<br/>cp313-manylinux_armv7l<br/>cp313-manylinux_riscv64<br/>cp313-musllinux_aarch64<br/>cp313-musllinux_ppc64le<br/>cp313-musllinux_s390x<br/>cp313-musllinux_armv7l<br/>cp313-musllinux_riscv64 | cp313-android_arm64_v8a<br/>cp313-android_x86_64 | cp313-ios_arm64_iphoneos<br/>cp313-ios_arm64_iphonesimulator<br/>cp313-ios_x86_64_iphonesimulator | cp313-pyodide_wasm32 |
 | Python 3.14   | cp314-macosx_x86_64<br/>cp314-macosx_universal2<br/>cp314-macosx_arm64<br><br>cp314t-macosx_x86_64<br/>cp314t-macosx_universal2<br/>cp314t-macosx_arm64 | cp314-win_amd64<br/>cp314-win32<br/>cp314-win_arm64<br><br>cp314t-win_amd64<br/>cp314t-win32<br/>cp314t-win_arm64 | cp314-manylinux_x86_64<br/>cp314-manylinux_i686<br/>cp314-musllinux_x86_64<br/>cp314-musllinux_i686<br><br>cp314t-manylinux_x86_64<br/>cp314t-manylinux_i686<br/>cp314t-musllinux_x86_64<br/>cp314t-musllinux_i686 | cp314-manylinux_aarch64<br/>cp314-manylinux_ppc64le<br/>cp314-manylinux_s390x<br/>cp314-manylinux_armv7l<br/>cp314-manylinux_riscv64<br/>cp314-musllinux_aarch64<br/>cp314-musllinux_ppc64le<br/>cp314-musllinux_s390x<br/>cp314-musllinux_armv7l<br/>cp314-musllinux_riscv64<br><br>cp314t-manylinux_aarch64<br/>cp314t-manylinux_ppc64le<br/>cp314t-manylinux_s390x<br/>cp314t-manylinux_armv7l<br/>cp314t-manylinux_riscv64<br/>cp314t-musllinux_aarch64<br/>cp314t-musllinux_ppc64le<br/>cp314t-musllinux_s390x<br/>cp314t-musllinux_armv7l<br/>cp314t-musllinux_riscv64 | cp314-android_arm64_v8a<br/>cp314-android_x86_64 | cp314-ios_arm64_iphoneos<br/>cp314-ios_arm64_iphonesimulator<br/>cp314-ios_x86_64_iphonesimulator |                      |
-| PyPy3.8 v7.3  | pp38-macosx_x86_64<br/>pp38-macosx_arm64                               | pp38-win_amd64                                      | pp38-manylinux_x86_64<br/>pp38-manylinux_i686                                                       | pp38-manylinux_aarch64                                                                                                                                                                                                                                                        |                                                  |                                                                                                   |                      |
+| Python 3.15   | cp315-macosx_x86_64<br/>cp315-macosx_universal2<br/>cp315-macosx_arm64<br><br>cp315t-macosx_x86_64<br/>cp315t-macosx_universal2<br/>cp315t-macosx_arm64 | cp315-win_amd64<br/>cp315-win32<br/>cp315-win_arm64<br><br>cp315t-win_amd64<br/>cp315t-win32<br/>cp315t-win_arm64 | cp315-manylinux_x86_64<br/>cp315-manylinux_i686<br/>cp315-musllinux_x86_64<br/>cp315-musllinux_i686<br><br>cp315t-manylinux_x86_64<br/>cp315t-manylinux_i686<br/>cp315t-musllinux_x86_64<br/>cp315t-musllinux_i686 | cp315-manylinux_aarch64<br/>cp315-manylinux_ppc64le<br/>cp315-manylinux_s390x<br/>cp315-manylinux_armv7l<br/>cp315-manylinux_riscv64<br/>cp315-musllinux_aarch64<br/>cp315-musllinux_ppc64le<br/>cp315-musllinux_s390x<br/>cp315-musllinux_armv7l<br/>cp315-musllinux_riscv64<br><br>cp315t-manylinux_aarch64<br/>cp315t-manylinux_ppc64le<br/>cp315t-manylinux_s390x<br/>cp315t-manylinux_armv7l<br/>cp315t-manylinux_riscv64<br/>cp315t-musllinux_aarch64<br/>cp315t-musllinux_ppc64le<br/>cp315t-musllinux_s390x<br/>cp315t-musllinux_armv7l<br/>cp315t-musllinux_riscv64 | cp315-android_arm64_v8a<br/>cp315-android_x86_64 | cp315-ios_arm64_iphoneos<br/>cp315-ios_arm64_iphonesimulator<br/>cp315-ios_x86_64_iphonesimulator |                      |
 | PyPy3.9 v7.3  | pp39-macosx_x86_64<br/>pp39-macosx_arm64                               | pp39-win_amd64                                      | pp39-manylinux_x86_64<br/>pp39-manylinux_i686                                                       | pp39-manylinux_aarch64                                                                                                                                                                                                                                                        |                                                  |                                                                                                   |                      |
 | PyPy3.10 v7.3 | pp310-macosx_x86_64<br/>pp310-macosx_arm64                             | pp310-win_amd64                                     | pp310-manylinux_x86_64<br/>pp310-manylinux_i686                                                     | pp310-manylinux_aarch64                                                                                                                                                                                                                                                       |                                                  |                                                                                                   |                      |
 | PyPy3.11 v7.3 | pp311-macosx_x86_64<br/>pp311-macosx_arm64                             | pp311-win_amd64                                     | pp311-manylinux_x86_64<br/>pp311-manylinux_i686                                                     | pp311-manylinux_aarch64                                                                                                                                                                                                                                                       |                                                  |                                                                                                   |                      |
@@ -81,29 +80,29 @@ See the [cibuildwheel 2 documentation](https://cibuildwheel.pypa.io/en/2.x/) for
 
     ```toml
     [tool.cibuildwheel]
-    # Only build on CPython 3.8
-    build = "cp38-*"
+    # Only build on CPython 3.14
+    build = "cp314-*"
 
-    # Skip building on CPython 3.8 on the Mac
-    skip = "cp38-macosx_x86_64"
+    # Skip building on CPython 3.9 on the Mac
+    skip = "cp39-macosx_x86_64"
 
-    # Skip building on CPython 3.8 on all platforms
-    skip = "cp38-*"
+    # Skip building on CPython 3.9 on all platforms
+    skip = "cp39-*"
 
-    # Skip CPython 3.8 on Windows
-    skip = "cp38-win*"
+    # Skip CPython 3.9 on Windows
+    skip = "cp39-win*"
 
-    # Skip CPython 3.8 on 32-bit Windows
-    skip = "cp38-win32"
+    # Skip CPython 3.9 on 32-bit Windows
+    skip = "cp39-win32"
 
-    # Skip CPython 3.8 and CPython 3.9
-    skip = ["cp38-*", "cp39-*"]
+    # Skip CPython 3.9 and CPython 3.10
+    skip = ["cp39-*", "cp310-*"]
 
-    # Skip Python 3.8 on Linux
-    skip = "cp38-manylinux*"
+    # Skip Python 3.9 on Linux
+    skip = "cp39-*linux*"
 
     # Skip 32-bit builds
-    skip = ["*-win32", "*-manylinux_i686"]
+    skip = ["*-win32", "*-*linux_i686"]
 
     # Disable building PyPy wheels on all platforms
     skip = "pp*"
@@ -118,29 +117,29 @@ See the [cibuildwheel 2 documentation](https://cibuildwheel.pypa.io/en/2.x/) for
 !!! tab examples "Environment variables"
 
     ```yaml
-    # Only build on CPython 3.8
-    CIBW_BUILD: cp38-*
+    # Only build on CPython 3.14
+    CIBW_BUILD: cp314-*
 
-    # Skip building on CPython 3.8 on the Mac
-    CIBW_SKIP: cp38-macosx_x86_64
+    # Skip building on CPython 3.9 on the Mac
+    CIBW_SKIP: cp39-macosx_x86_64
 
-    # Skip building on CPython 3.8 on all platforms
-    CIBW_SKIP: cp38-*
+    # Skip building on CPython 3.9 on all platforms
+    CIBW_SKIP: cp39-*
 
-    # Skip CPython 3.8 on Windows
-    CIBW_SKIP: cp38-win*
+    # Skip CPython 3.9 on Windows
+    CIBW_SKIP: cp39-win*
 
-    # Skip CPython 3.8 on 32-bit Windows
-    CIBW_SKIP: cp38-win32
+    # Skip CPython 3.9 on 32-bit Windows
+    CIBW_SKIP: cp39-win32
 
-    # Skip CPython 3.8 and CPython 3.9
-    CIBW_SKIP: cp38-* cp39-*
+    # Skip CPython 3.9 and CPython 3.10
+    CIBW_SKIP: cp39-* cp310-*
 
-    # Skip Python 3.8 on Linux
-    CIBW_SKIP: cp38-manylinux*
+    # Skip Python 3.9 on Linux
+    CIBW_SKIP: cp39-*linux*
 
     # Skip 32-bit builds
-    CIBW_SKIP: "*-win32 *-manylinux_i686"
+    CIBW_SKIP: "*-win32 *-*linux_i686"
 
     # Disable building PyPy wheels on all platforms
     CIBW_SKIP: pp*
@@ -304,7 +303,7 @@ simple keyword assignment in a top level function call. If you need to override
 this behaviour for some reason, you can use this option.
 
 When setting this option, the syntax is the same as `project.requires-python`,
-using 'version specifiers' like `>=3.8`, according to
+using 'version specifiers' like `>=3.12`, according to
 [PEP440](https://www.python.org/dev/peps/pep-0440/#version-specifiers).
 
 Default: reads your package's Python compatibility from `pyproject.toml`
@@ -325,7 +324,7 @@ the package is compatible with all versions of Python that it can build.
         ```toml
         [project]
         ...
-        requires-python = ">=3.8"
+        requires-python = ">=3.12"
         ```
 
         Note that not all build backends fully support using a `[project]` table yet;
@@ -341,7 +340,7 @@ the package is compatible with all versions of Python that it can build.
 !!! tab examples "Environment variables"
 
     ```yaml
-    CIBW_PROJECT_REQUIRES_PYTHON: ">=3.8"
+    CIBW_PROJECT_REQUIRES_PYTHON: ">=3.12"
     ```
 
 ### `enable` {: #enable toml env-var}
@@ -355,15 +354,14 @@ values are:
 
 - `cpython-prerelease`: Enables beta versions of Pythons if any are available
   (May-July, approximately).
-- `cpython-freethreading`: Enable experimental free-threaded builds for CPython 3.13.
-  Free-threading wheels for 3.14+ are available without this flag, as it's [no
-  longer considered experimental](https://peps.python.org/pep-0779/).
 - `pypy`: Enable PyPy.
 - `pypy-eol`: Enable PyPy versions that have passed end of life (if still available).
 - `graalpy`: Enable GraalPy.
 - `pyodide-prerelease`: Pyodide versions that haven't released yet, if one is
   available. Safe if you are shipping a site with an early build, not for
   general distribution.
+- `pyodide-eol`: Enable Pyodide versions that are no longer the current stable
+  release (if still available).
 - `all`: Enable all of the above.
 
 !!! caution
@@ -379,9 +377,7 @@ values are:
     CPython that can be built without the Global Interpreter Lock (GIL). Those
     variants are also known as free-threaded / no-gil. The build identifiers for
     those variants have a `t` suffix in their `python_tag` (e.g.
-    `cp313t-manylinux_x86_64`).
-
-    Free threading was [experimental in 3.13](https://docs.python.org/3.13/whatsnew/3.13.html#free-threaded-cpython), so it required an explicit enable flag. But, as noted above, free-threading doesn't require an enable flag for 3.14+.
+    `cp314t-manylinux_x86_64`).
 
     For more info on building for free-threading, see the [Python Free-Threading Guide](https://py-free-threading.github.io/).
 
@@ -407,9 +403,6 @@ without disabling your other enables.
 
     ```toml
     [tool.cibuildwheel]
-    # Enable free-threaded support for CPython 3.13
-    enable = ["cpython-freethreading"]
-
     # Include all PyPy versions
     enable = ["pypy", "pypy-eol"]
     ```
@@ -421,14 +414,11 @@ without disabling your other enables.
     # Include latest Python beta
     CIBW_ENABLE: cpython-prerelease
 
-    # Include free-threaded support for CPython 3.13
-    CIBW_ENABLE: cpython-freethreading
-
-    # Include both
-    CIBW_ENABLE: cpython-prerelease cpython-freethreading
-
     # Include all PyPy versions
     CIBW_ENABLE: pypy pypy-eol
+
+    # Include both
+    CIBW_ENABLE: cpython-prerelease pypy pypy-eol
     ```
 
 
@@ -552,6 +542,9 @@ Specify config settings for the build backend. Each space separated
 item will be passed via `--config-setting`. In TOML, you can specify
 a table of items, including arrays.
 
+You can use the `{project}` or `{package}` placeholders in `config-settings`
+to refer to the project root or package being built, respectively.
+
 !!! tip
     Currently, "build" supports arrays for options, but "pip" only supports
     single values.
@@ -575,6 +568,14 @@ Platform-specific environment variables also available:<br/>
     CIBW_CONFIG_SETTINGS: "--build-option=--use-mypyc"
     ```
 
+    ```yaml
+    CIBW_CONFIG_SETTINGS_LINUX: "setup-args=--cross-file={project}/cross_file.txt"
+    ```
+
+    ```yaml
+    CIBW_CONFIG_SETTINGS: "editable-verbose=true source-dir={package}"
+    ```
+
 
 
 
@@ -793,6 +794,8 @@ The command is run in a shell, so you can write things like `cmd1 && cmd2`.
 Platform-specific environment variables are also available:<br/>
  `CIBW_BEFORE_BUILD_MACOS` | `CIBW_BEFORE_BUILD_WINDOWS` | `CIBW_BEFORE_BUILD_LINUX` | `CIBW_BEFORE_BUILD_ANDROID` | `CIBW_BEFORE_BUILD_IOS` | `CIBW_BEFORE_BUILD_PYODIDE`
 
+In configuration files, use platform tables like `[tool.cibuildwheel.macos]`.
+
 #### Examples
 
 !!! tab examples "pyproject.toml"
@@ -816,6 +819,13 @@ Platform-specific environment variables are also available:<br/>
 
     # If cibuildwheel is called with a package_dir argument, it's available as {package}
     before-build = "{package}/script/prepare_for_build.sh"
+
+    # Use a different command on a specific platform
+    [tool.cibuildwheel.linux]
+    before-build = "python scripts/install-linux-deps.py"
+
+    [tool.cibuildwheel.macos]
+    before-build = "python scripts/install-macos-deps.py"
     ```
 
     In configuration files, you can use a array, and the items will be joined
@@ -836,6 +846,10 @@ Platform-specific environment variables are also available:<br/>
 
     # If cibuildwheel is called with a package_dir argument, it's available as {package}
     CIBW_BEFORE_BUILD: "{package}/script/prepare_for_build.sh"
+
+    # Use a different command on a specific platform
+    CIBW_BEFORE_BUILD_LINUX: python scripts/install-linux-deps.py
+    CIBW_BEFORE_BUILD_MACOS: python scripts/install-macos-deps.py
     ```
 
 
@@ -967,24 +981,11 @@ Platform-specific environment variables are also available:<br/>
       'python scripts/check_repaired_wheel.py -w {dest_dir} {wheel}',
     ]
 
-    # Use abi3audit to catch issues with Limited API wheels
-    [tool.cibuildwheel.linux]
-    repair-wheel-command = [
-      "auditwheel repair -w {dest_dir} {wheel}",
-      "pipx run abi3audit --strict --report {wheel}",
-    ]
-    [tool.cibuildwheel.macos]
-    repair-wheel-command = [
-      "delocate-wheel --require-archs {delocate_archs} -w {dest_dir} -v {wheel}",
-      "pipx run abi3audit --strict --report {wheel}",
-    ]
-    [tool.cibuildwheel.windows]
-    repair-wheel-command = [
-      "copy {wheel} {dest_dir}",
-      "pipx run abi3audit --strict --report {wheel}",
-    ]
     ```
 
+    !!! note
+        cibuildwheel automatically runs [abi3audit](https://github.com/trailofbits/abi3audit) on abi3 wheels after the repair step. You no longer need to add it to your repair command manually.
+
     In configuration files, you can use an inline array, and the items will be joined with `&&`.
 
 
@@ -1006,16 +1007,6 @@ Platform-specific environment variables are also available:<br/>
       python scripts/repair_wheel.py -w {dest_dir} {wheel} &&
       python scripts/check_repaired_wheel.py -w {dest_dir} {wheel}
 
-    # Use abi3audit to catch issues with Limited API wheels
-    CIBW_REPAIR_WHEEL_COMMAND_LINUX: >
-      auditwheel repair -w {dest_dir} {wheel} &&
-      pipx run abi3audit --strict --report {wheel}
-    CIBW_REPAIR_WHEEL_COMMAND_MACOS: >
-      delocate-wheel --require-archs {delocate_archs} -w {dest_dir} -v {wheel} &&
-      pipx run abi3audit --strict --report {wheel}
-    CIBW_REPAIR_WHEEL_COMMAND_WINDOWS: >
-      copy {wheel} {dest_dir} &&
-      pipx run abi3audit --strict --report {wheel}
     ```
 
 
@@ -1223,7 +1214,7 @@ specifiers inline with the `packages: SPECIFIER...` syntax.
     If you need different dependencies for each python version, provide them
     in the same folder with a `-pythonXY` suffix. e.g. if your
     `dependency-versions="./constraints.txt"`, cibuildwheel will use
-    `./constraints-python38.txt` on Python 3.8, or fallback to
+    `./constraints-python314.txt` on Python 3.14, or fallback to
     `./constraints.txt` if that's not found.
 
 Platform-specific environment variables are also available:<br/>
@@ -1235,6 +1226,10 @@ Platform-specific environment variables are also available:<br/>
     dependency versions on Linux, use the [`manylinux-*` / `musllinux-*`](#linux-image)
     options.
 
+    There is one exception to this rule - when `audit-requires` is left as the
+    default `["abi3audit"]`, the `abi3audit` version is governed by this option,
+    because audits take place outside of the build container.
+
 #### Examples
 
 !!! tab examples "pyproject.toml"
@@ -1329,6 +1324,102 @@ The available Pyodide versions are determined by the version of `pyodide-build`
     ```
 
 
+## Auditing
+
+### `audit-requires` {: #audit-requires toml env-var }
+
+> Install Python dependencies for the audit step
+
+Default: `abi3audit`
+
+Space-separated list of package dependencies required for the audit command.
+These are installed into an isolated environment before running the
+[`audit-command`](#audit-command).
+
+If no audit command is specified, or no audit is required (i.e. your project builds non-abi3 wheels and the command refers only to abi3 wheels), then the audit environment won't be created and this option is ignored.
+
+If you leave this as the default, the versions of abi3audit and libraries are pinned according to [`dependency-versions`](#dependency-versions), even on Linux.
+
+#### Examples
+
+!!! tab examples "pyproject.toml"
+
+    ```toml
+    # Install twine for wheel metadata checks
+    [tool.cibuildwheel]
+    audit-requires = "twine"
+
+    # Install specific versions of audit dependencies
+    [tool.cibuildwheel]
+    audit-requires = ["twine==6.1.0", "abi3audit==0.0.17"]
+    ```
+
+    In configuration files, you can use an array, and the items will be joined with a space.
+
+!!! tab examples "Environment variables"
+
+    ```yaml
+    # Install twine for wheel metadata checks
+    CIBW_AUDIT_REQUIRES: twine
+
+    # Install specific versions of audit dependencies
+    CIBW_AUDIT_REQUIRES: twine==6.1.0 abi3audit==0.0.17
+    ```
+
+### `audit-command` {: #audit-command toml env-var }
+
+> Use a tool to check wheels before the end of the run
+
+Default: `abi3audit --strict --report {abi3_wheel}`
+
+Run shell commands to verify your wheels once they are built. Multiple commands can be passed, they should be separated with ` && `. In each command, you must use one of the following placeholders:
+
+- `{abi3_wheel}`: if your build produces an [ABI3 wheel](https://docs.python.org/3/c-api/stable.html#limited-c-api), as determined by the presence of an ABI3 tag in the filename, the command is run and this placeholder is substituted for the wheel path.
+- `{wheel}`: inserts the wheel path for all wheels that were built.
+
+#### Examples
+
+!!! tab examples "pyproject.toml"
+
+    ```toml
+    # Run a custom audit tool on all wheels
+    [tool.cibuildwheel]
+    audit-command = "my-audit-tool --check {wheel}"
+
+    # Run multiple audit commands, one for abi3 wheels only and one for all wheels
+    [tool.cibuildwheel]
+    audit-command = [
+      "./my-audit-tool --check-abi3 {abi3_wheel}",
+      "./my-audit-tool --check {wheel}",
+    ]
+
+    # Use twine check to validate wheel metadata
+    [tool.cibuildwheel]
+    audit-requires = ["twine"]
+    audit-command = "twine check {wheel}"
+
+    # Add an additional audit command using overrides, keeping the default abi3audit check
+    [[tool.cibuildwheel.overrides]]
+    select = "*"
+    inherit.audit-command = "append"
+    audit-command = "twine check {wheel}"
+    ```
+
+!!! tab examples "Environment variables"
+
+    ```yaml
+    # Run a custom audit tool on all wheels
+    CIBW_AUDIT_COMMAND: "my-audit-tool --check {wheel}"
+
+    # Run multiple audit commands
+    CIBW_AUDIT_COMMAND: "./my-audit-tool --check-abi3 {abi3_wheel} && ./my-audit-tool --check {wheel}"
+
+    # Use twine check to validate wheel metadata
+    CIBW_AUDIT_REQUIRES: "twine"
+    CIBW_AUDIT_COMMAND: "twine check {wheel}"
+    ```
+
+
 ## Testing
 
 ### `test-command` {: #test-command env-var toml}
@@ -1765,16 +1856,14 @@ will not produce more logging about the build itself. Other levels only affect
 the build frontend output, which is usually things like resolving and
 downloading dependencies. The settings are:
 
-|             | build | pip    | uv    | desc                             |
-|-------------|-------|--------|-------|----------------------------------|
-| -2          | `-qq`[^1] | `-qq`  | `-qq` | even more quiet, where supported |
-| -1          | `-q`[^1]  | `-q`   | `-q`  | quiet mode, where supported      |
-| 0 (default) |       |        |       | default for build tool           |
-| 1           |       | `-v`   |       | print backend output             |
+|             | build | pip    | uv    | desc                                   |
+|-------------|-------|--------|-------|----------------------------------------|
+| -2          | `-qq` | `-qq`  | `-qq` | even more quiet, where supported       |
+| -1          | `-q`  | `-q`   | `-q`  | quiet mode, where supported            |
+| 0 (default) |       |        |       | default for build tool                 |
+| 1           |       | `-v`   |       | print backend output                   |
 | 2           | `-v`  | `-vv`  | `-v`  | print log messages e.g. resolving info |
-| 3           | `-vv` | `-vvv` | `-vv` | print even more debug info       |
-
-[^1]: Not supported on Python 3.8, will be ignored with a warning.
+| 3           | `-vv` | `-vvv` | `-vv` | print even more debug info             |
 
 Settings that are not supported for a specific frontend will log a warning.
 The default build frontend is `build`, which does show build backend output by

docs/platforms.md

@@ -62,11 +62,10 @@ macOS builds will honor the `MACOSX_DEPLOYMENT_TARGET` environment variable to c
 
 | Arch  | Python version range | Minimum target |
 |-------|----------------------|----------------|
-| Intel | CPython 3.8-3.11     | 10.9           |
+| Intel | CPython 3.9-3.11     | 10.9           |
 | Intel | CPython 3.12-3.13    | 10.13          |
 | Intel | CPython 3.14+        | 10.15          |
 | AS    | CPython or PyPy      | 11             |
-| Intel | PyPy 3.8             | 10.13          |
 | Intel | PyPy 3.9+            | 10.15          |
 
 If you set the value lower, cibuildwheel will cap it to the lowest supported value for each target as needed.
@@ -74,7 +73,7 @@ If you set the value lower, cibuildwheel will cap it to the lowest supported val
 !!! note
     For Rust-based extensions, `Rustc` requires `MACOSX_DEPLOYMENT_TARGET` to be at
     least 10.12. However, `cibuildwheel` defaults to 10.9 for
-    **Intel / CPython 3.8-3.11** builds. Users must manually set
+    **Intel / CPython 3.9-3.11** builds. Users must manually set
     `MACOSX_DEPLOYMENT_TARGET` to 10.12 or higher when building Rust extensions.
 
 ### macOS architectures
@@ -159,8 +158,6 @@ By default, `ARM64` is not enabled when running on non-`ARM64` runners. Use [`CI
 
 ## Pyodide/WebAssembly {: #pyodide}
 
-Pyodide is offered as an experimental feature in cibuildwheel.
-
 ### System requirements
 
 Pyodide builds require a Linux or macOS machine.
@@ -173,7 +170,7 @@ You must target pyodide with `--platform pyodide` (or use `--only` on the identi
 
 It is also possible to target a specific Pyodide version by setting the [`pyodide-version`](options.md#pyodide-version) option to the desired version. Users are responsible for setting an appropriate Pyodide version according to the `pyodide-build` version. A list is available in Pyodide's [cross-build environments metadata file](https://github.com/pyodide/pyodide/blob/main/pyodide-cross-build-environments.json), which can be viewed more easily by installing `pyodide-build` from PyPI and using `pyodide xbuildenv search --all` to see a compatibility table.
 
-If there are pre-releases available for a newer Pyodide version, the `pyodide-prerelease` [`enable`](options.md#enable) can be used to include pre-release versions.
+If there are pre-releases available for a newer Pyodide version, the `pyodide-prerelease` [`enable`](options.md#enable) can be used to include pre-release versions. To build for older Pyodide versions that are no longer the current stable, use the `pyodide-eol` [`enable`](options.md#enable).
 
 ### Running tests
 

docs/working-examples.md

@@ -8,17 +8,17 @@ title: Working examples
 
 | Name                              | CI | OS | Notes |
 |-----------------------------------|----|----|:------|
-| [scikit-learn][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The machine learning library. A complex but clean config using many of cibuildwheel's features to build a large project with Cython and C++ extensions.  |
+| [scikit-learn][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The machine learning library. A complex but clean config using many of cibuildwheel's features to build a large project with Cython and C++ extensions.  |
 | [duckdb][]                        | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | DuckDB is an analytical in-process SQL database management system |
 | [pytorch-fairseq][]               | ![github icon][] | ![apple icon][] ![linux icon][] | Facebook AI Research Sequence-to-Sequence Toolkit written in Python. |
-| [NumPy][]                         | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The fundamental package for scientific computing with Python. |
+| [NumPy][]                         | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The fundamental package for scientific computing with Python. |
 | [NCNN][]                          | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | ncnn is a high-performance neural network inference framework optimized for the mobile platform |
-| [Matplotlib][]                    | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The venerable Matplotlib, a Python library with C++ portions |
+| [Matplotlib][]                    | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | The venerable Matplotlib, a Python library with C++ portions |
 | [Tornado][]                       | ![github icon][] | ![linux icon][] ![apple icon][] ![windows icon][] | Tornado is a Python web framework and asynchronous networking library. Uses stable ABI for a small C extension. |
 | [MyPy][]                          | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | The compiled version of MyPy using MyPyC. |
 | [Prophet][]                       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Tool for producing high quality forecasts for time series data that has multiple seasonality with linear or non-linear growth. |
-| [Kivy][]                          | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Open source UI framework written in Python, running on Windows, Linux, macOS, Android and iOS |
 | [Triton][]                        | ![github icon][] | ![linux icon][] | Self hosted runners |
+| [Kivy][]                          | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Open source UI framework written in Python, running on Windows, Linux, macOS, Android and iOS |
 | [MemRay][]                        | ![github icon][] | ![linux icon][] | Memray is a memory profiler for Python |
 | [uvloop][]                        | ![github icon][] | ![apple icon][] ![linux icon][] | Ultra fast asyncio event loop. |
 | [psutil][]                        | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Cross-platform lib for process and system monitoring in Python |
@@ -30,10 +30,10 @@ title: Working examples
 | [asyncpg][]                       | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | A fast PostgreSQL Database Client Library for Python/asyncio. |
 | [cmake][]                         | ![github icon][] ![travisci icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Multitagged binary builds for all supported platforms, using cibw 2 config configuration. |
 | [pyinstrument][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Python profiler with a C extension. No external dependencies. |
-| [scikit-image][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Image processing library. Uses cibuildwheel to build and test a project that uses Cython with platform-native code.  |
+| [scikit-image][]                  | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | Image processing library. Uses cibuildwheel to build and test a project that uses Cython with platform-native code.  |
 | [cvxpy][]                         | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | A Python-embedded modeling language for convex optimization problems. |
-| [PyOxidizer][]                    | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | A modern Python application packaging and distribution tool |
 | [pedalboard][]                    | ![github icon][] | ![windows icon][] ![linux icon][] ![apple icon][] | A Python library for working with audio data and audio plugins by wrapping the [JUCE](https://github.com/juce-framework/JUCE/) C++ framework. Uses cibuildwheel to deploy on as many operating systems and Python versions as possible with only one dependency (any NumPy).  |
+| [PyOxidizer][]                    | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | A modern Python application packaging and distribution tool |
 | [twisted-iocpsupport][]           | ![github icon][] | ![windows icon][] | A submodule of Twisted that hooks into native C APIs using Cython. |
 | [River][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | 🌊 Online machine learning in Python |
 | [websockets][]                    | ![travisci icon][] | ![apple icon][] ![linux icon][] | Library for building WebSocket servers and clients. Mostly written in Python, with a small C 'speedups' extension module.  |
@@ -42,9 +42,9 @@ title: Working examples
 | [Dependency Injector][]           | ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Dependency injection framework for Python, uses Windows TravisCI |
 | [UltraJSON][]                     | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Ultra fast JSON decoder and encoder written in C with Python bindings |
 | [CTranslate2][]                   | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Includes libraries from the [Intel oneAPI toolkit](https://www.intel.com/content/www/us/en/developer/tools/oneapi/base-toolkit.html) and CUDA kernels compiled for multiple GPU architectures. |
-| [pyzmq][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Python bindings for zeromq, the networking library. Uses Cython on CPython and CFFI on PyPy. ARM wheels for linux are built natively on GitHub Actions.  |
-| [Implicit][]                      | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Includes GPU support for linux wheels |
+| [pyzmq][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![android icon][] | Python bindings for zeromq, the networking library. Uses Cython on CPython and CFFI on PyPy. ARM wheels for linux are built natively on GitHub Actions.  |
 | [tinyobjloader][]                 | ![azurepipelines icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Tiny but powerful single file wavefront obj loader |
+| [Implicit][]                      | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Includes GPU support for linux wheels |
 | [vispy][]                         | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Main repository for Vispy |
 | [coverage.py][]                   | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | The coverage tool for Python |
 | [Line Profiler][]                 | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Line-by-line profiling for Python |
@@ -67,47 +67,47 @@ title: Working examples
 | [Parselmouth][]                   | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | A Python interface to the Praat software package, using pybind11, C++17 and CMake, with the core Praat static library built only once and shared between wheels. |
 | [H3-py][]                         | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Python bindings for H3, a hierarchical hexagonal geospatial indexing system |
 | [AutoPy][]                        | ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Includes a Windows Travis build. |
-| [DeepForest][]                    | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | An Efficient, Scalable and Optimized Python Framework for Deep Forest (2021.2.1) |
 | [time-machine][]                  | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Time mocking library using only the CPython C API. |
+| [DeepForest][]                    | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | An Efficient, Scalable and Optimized Python Framework for Deep Forest (2021.2.1) |
 | [mosec][]                         | ![github icon][] | ![linux icon][] ![apple icon][] | A machine learning model serving framework powered by Rust |
 | [Picologging][]                   | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | A high-performance logging library for Python. |
 | [markupsafe][]                    | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Safely add untrusted strings to HTML/XML markup. |
 | [Rtree][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Rtree: spatial index for Python GIS |
-| [pybind11 cmake_example][]        | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Example pybind11 module built with a CMake-based build system |
+| [pybind11 cmake_example][]        | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | Example pybind11 module built with a CMake-based build system |
 | [KDEpy][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Kernel Density Estimation in Python |
 | [dd-trace-py][]                   | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Uses custom alternate arch emulation on GitHub |
 | [tgcalls][]                       | ![github icon][] | ![apple icon][] ![windows icon][] | Python `pybind11` binding to Telegram's WebRTC library with third party dependencies like `OpenSSL`, `MozJPEG`, `FFmpeg`, etc. |
-| [sourmash][]                      | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Quickly search, compare, and analyze genomic and metagenomic data sets. |
+| [sourmash][]                      | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] ![pyodide icon][] | Quickly search, compare, and analyze genomic and metagenomic data sets. |
 | [python-rapidjson][]              | ![travisci icon][] ![gitlab icon][] | ![windows icon][] ![linux icon][] | Python wrapper around rapidjson |
-| [pybind11 python_example][]       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Example pybind11 module built with a Python-based build system |
-| [abess][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | A fast best-subset selection library. It uses cibuildwheel to build a large project with C++ extensions. |
+| [pybind11 python_example][]       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | Example pybind11 module built with a Python-based build system |
 | [python-snappy][]                 | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Python bindings for the snappy google library |
+| [abess][]                         | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | A fast best-subset selection library. It uses cibuildwheel to build a large project with C++ extensions. |
 | [Confluent client for Kafka][]    | ![travisci icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | setup in `tools/wheels/build-wheels.bat` |
 | [jq.py][]                         | ![travisci icon][] | ![apple icon][] ![linux icon][] | Python bindings for jq |
 | [cyvcf2][]                        | ![github icon][] | ![apple icon][] ![linux icon][] | cython + htslib == fast VCF and BCF processing |
 | [matrixprofile][]                 | ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | A Python 3 library making time series data mining tasks, utilizing matrix profile algorithms, accessible to everyone. |
 | [Tokenizer][]                     | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Fast and customizable text tokenization library with BPE and SentencePiece support |
-| [iminuit][]                       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Jupyter-friendly Python interface for C++ MINUIT2 |
-| [pillow-heif][]                   | ![github icon][] ![cirrusci icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Bindings to libheif library with third party dependencies. Fully automated CI for tests and publishing including Apple Silicon builds. |
+| [iminuit][]                       | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | Jupyter-friendly Python interface for C++ MINUIT2 |
+| [pillow-heif][]                   | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Bindings to libheif library with third party dependencies. Fully automated CI for tests and publishing including Apple Silicon builds. |
 | [keyvi][]                         | ![github icon][] | ![linux icon][] ![apple icon][] | FST based key value index highly optimized for size and lookup performance, utilizes ccache action for improved runtime |
 | [PyGLM][]                         | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Fast OpenGL Mathematics (GLM) for Python |
 | [iDynTree][]                      | ![github icon][] | ![linux icon][] | Uses manylinux_2_24 |
 | [power-grid-model][]              | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Python/C++ library for distribution power system analysis |
 | [TgCrypto][]                      | ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Includes a Windows Travis build. |
 | [streaming-form-data][]           | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Streaming parser for multipart/form-data written in Cython |
-| [pybase64][]                      | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Fast Base64 encoding/decoding in Python |
 | [Imagecodecs (fork)][]            | ![azurepipelines icon][] | ![apple icon][] ![linux icon][] | Over 20 external dependencies in compiled libraries, custom docker image, `libomp`, `openblas` and `install_name_tool` for macOS. |
+| [pybase64][]                      | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![android icon][] ![ios icon][] ![pyodide icon][] | setuptools backend with custom CMake step for external sources. SBOM embedded via a custom repair step. |
+| [boost-histogram][]               | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | Supports full range of wheels, including PyPy and alternate archs. |
 | [bx-python][]                     | ![travisci icon][] | ![apple icon][] ![linux icon][] | A library that includes Cython extensions. |
-| [boost-histogram][]               | ![github icon][] ![travisci icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Supports full range of wheels, including PyPy and alternate archs. |
 | [Python-WebRTC][]                 | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | a Python extension that provides bindings to WebRTC M92 |
-| [pybind11 scikit_build_example][] | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | An example combining scikit-build and pybind11 |
+| [pybind11 scikit_build_example][] | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] ![pyodide icon][] | An example combining scikit-build and pybind11 |
 | [fathon][]                        | ![travisci icon][] | ![apple icon][] ![linux icon][] | python package for DFA (Detrended Fluctuation Analysis) and related algorithms |
 | [Arbor][]                         | ![github icon][] | ![apple icon][] ![linux icon][] | Arbor is a multi-compartment neuron simulation library; compatible with next-generation accelerators; best-practices applied to research software; focused on community-driven development. Includes a [small script](https://github.com/arbor-sim/arbor/blob/master/scripts/patchwheel.py) patching `rpath` in bundled libraries.  |
 | [clang-format][]                  | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Scikit-build wrapper around LLVM's CMake, all platforms, generic wheels. |
 | [polaroid][]                      | ![github icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Full range of wheels for setuptools rust, with auto release and PyPI deploy. |
 | [ninja][]                         | ![github icon][] ![travisci icon][] | ![apple icon][] ![linux icon][] ![windows icon][] | Multitagged binary builds for all supported platforms, using cibw 2 config configuration. |
-| [etebase-py][]                    | ![travisci icon][] | ![linux icon][] | Python bindings to a Rust library using `setuptools-rust`, and `sccache` for improved speed. |
 | [cf-units][]                      | ![github icon][] | ![apple icon][] ![linux icon][] | Units of measure as required by the Climate and Forecast (CF) Metadata Conventions |
+| [etebase-py][]                    | ![travisci icon][] | ![linux icon][] | Python bindings to a Rust library using `setuptools-rust`, and `sccache` for improved speed. |
 | [SiPM][]                          | ![github icon][] | ![apple icon][] ![linux icon][] | High performance library for SiPM detectors simulation using C++17, OpenMP and AVX2 intrinsics. |
 | [numpythia][]                     | ![github icon][] | ![apple icon][] ![linux icon][] | The interface between PYTHIA and NumPy |
 | [aalink][]                        | ![github icon][] | ![windows icon][] ![apple icon][] ![linux icon][] | Async Python interface for Ableton Link. |
@@ -128,8 +128,8 @@ title: Working examples
 [Tornado]: https://github.com/tornadoweb/tornado
 [MyPy]: https://github.com/mypyc/mypy_mypyc-wheels
 [Prophet]: https://github.com/facebook/prophet
-[Kivy]: https://github.com/kivy/kivy
 [Triton]: https://github.com/openai/triton
+[Kivy]: https://github.com/kivy/kivy
 [MemRay]: https://github.com/bloomberg/memray
 [uvloop]: https://github.com/MagicStack/uvloop
 [psutil]: https://github.com/giampaolo/psutil
@@ -143,8 +143,8 @@ title: Working examples
 [pyinstrument]: https://github.com/joerick/pyinstrument
 [scikit-image]: https://github.com/scikit-image/scikit-image
 [cvxpy]: https://github.com/cvxpy/cvxpy
-[PyOxidizer]: https://github.com/indygreg/PyOxidizer
 [pedalboard]: https://github.com/spotify/pedalboard
+[PyOxidizer]: https://github.com/indygreg/PyOxidizer
 [twisted-iocpsupport]: https://github.com/twisted/twisted-iocpsupport
 [River]: https://github.com/online-ml/river
 [websockets]: https://github.com/python-websockets/websockets
@@ -154,8 +154,8 @@ title: Working examples
 [UltraJSON]: https://github.com/ultrajson/ultrajson
 [CTranslate2]: https://github.com/OpenNMT/CTranslate2
 [pyzmq]: https://github.com/zeromq/pyzmq
-[Implicit]: https://github.com/benfred/implicit
 [tinyobjloader]: https://github.com/tinyobjloader/tinyobjloader
+[Implicit]: https://github.com/benfred/implicit
 [vispy]: https://github.com/vispy/vispy
 [coverage.py]: https://github.com/nedbat/coveragepy
 [Line Profiler]: https://github.com/pyutils/line_profiler
@@ -178,8 +178,8 @@ title: Working examples
 [Parselmouth]: https://github.com/YannickJadoul/Parselmouth
 [H3-py]: https://github.com/uber/h3-py
 [AutoPy]: https://github.com/autopilot-rs/autopy
-[DeepForest]: https://github.com/LAMDA-NJU/Deep-Forest
 [time-machine]: https://github.com/adamchainz/time-machine
+[DeepForest]: https://github.com/LAMDA-NJU/Deep-Forest
 [mosec]: https://github.com/mosecorg/mosec
 [Picologging]: https://github.com/microsoft/picologging
 [markupsafe]: https://github.com/pallets/markupsafe
@@ -191,8 +191,8 @@ title: Working examples
 [sourmash]: https://github.com/sourmash-bio/sourmash
 [python-rapidjson]: https://github.com/python-rapidjson/python-rapidjson
 [pybind11 python_example]: https://github.com/pybind/python_example
-[abess]: https://github.com/abess-team/abess
 [python-snappy]: https://github.com/intake/python-snappy
+[abess]: https://github.com/abess-team/abess
 [Confluent client for Kafka]: https://github.com/confluentinc/confluent-kafka-python
 [jq.py]: https://github.com/mwilliamson/jq.py
 [cyvcf2]: https://github.com/brentp/cyvcf2
@@ -206,10 +206,10 @@ title: Working examples
 [power-grid-model]: https://github.com/PowerGridModel/power-grid-model
 [TgCrypto]: https://github.com/pyrogram/tgcrypto
 [streaming-form-data]: https://github.com/siddhantgoel/streaming-form-data
-[pybase64]: https://github.com/mayeut/pybase64
 [Imagecodecs (fork)]: https://github.com/czaki/imagecodecs_build
-[bx-python]: https://github.com/bxlab/bx-python
+[pybase64]: https://github.com/mayeut/pybase64
 [boost-histogram]: https://github.com/scikit-hep/boost-histogram
+[bx-python]: https://github.com/bxlab/bx-python
 [Python-WebRTC]: https://github.com/MarshalX/python-webrtc
 [pybind11 scikit_build_example]: https://github.com/pybind/scikit_build_example
 [fathon]: https://github.com/stfbnc/fathon
@@ -217,8 +217,8 @@ title: Working examples
 [clang-format]: https://github.com/ssciwr/clang-format-wheel
 [polaroid]: https://github.com/daggy1234/polaroid
 [ninja]: https://github.com/scikit-build/ninja-python-distributions
-[etebase-py]: https://github.com/etesync/etebase-py
 [cf-units]: https://github.com/SciTools/cf-units
+[etebase-py]: https://github.com/etesync/etebase-py
 [SiPM]: https://github.com/EdoPro98/SimSiPM
 [numpythia]: https://github.com/scikit-hep/numpythia
 [aalink]: https://github.com/artfwo/aalink
@@ -235,10 +235,12 @@ title: Working examples
 [circleci icon]: data/readme_icons/circleci.svg
 [gitlab icon]: data/readme_icons/gitlab.svg
 [travisci icon]: data/readme_icons/travisci.svg
-[cirrusci icon]: data/readme_icons/cirrusci.svg
 [windows icon]: data/readme_icons/windows.svg
 [apple icon]: data/readme_icons/apple.svg
 [linux icon]: data/readme_icons/linux.svg
+[android icon]: data/readme_icons/android.svg
+[ios icon]: data/readme_icons/ios.svg
+[pyodide icon]: data/readme_icons/pyodide.svg
 
 <!-- END bin/projects.py -->
 

examples/azure-pipelines-minimal.yml

@@ -6,7 +6,7 @@ jobs:
     - bash: |
         set -o errexit
         python3 -m pip install --upgrade pip
-        pip3 install cibuildwheel==3.4.1
+        pip3 install cibuildwheel==4.0.0rc1
       displayName: Install dependencies
     - bash: cibuildwheel --output-dir wheelhouse .
       displayName: Build wheels
@@ -20,7 +20,7 @@ jobs:
     - bash: |
         set -o errexit
         python3 -m pip install --upgrade pip
-        python3 -m pip install cibuildwheel==3.4.1
+        python3 -m pip install cibuildwheel==4.0.0rc1
       displayName: Install dependencies
     - bash: cibuildwheel --output-dir wheelhouse .
       displayName: Build wheels
@@ -34,7 +34,7 @@ jobs:
     - bash: |
         set -o errexit
         python -m pip install --upgrade pip
-        pip install cibuildwheel==3.4.1
+        pip install cibuildwheel==4.0.0rc1
       displayName: Install dependencies
     - bash: cibuildwheel --output-dir wheelhouse .
       displayName: Build wheels

examples/circleci-minimal.yml

@@ -11,7 +11,7 @@ jobs:
       - run:
           name: Build the Linux wheels.
           command: |
-            python3 -m pip install --user cibuildwheel==3.4.1
+            python3 -m pip install --user cibuildwheel==4.0.0rc1
             cibuildwheel --output-dir wheelhouse
       - store_artifacts:
           path: wheelhouse/
@@ -28,7 +28,7 @@ jobs:
       - run:
           name: Build the Linux aarch64 wheels.
           command: |
-            python3 -m pip install --user cibuildwheel==3.4.1
+            python3 -m pip install --user cibuildwheel==4.0.0rc1
             python3 -m cibuildwheel --output-dir wheelhouse
       - store_artifacts:
           path: wheelhouse/
@@ -43,8 +43,8 @@ jobs:
       - run:
           name: Build the OS X wheels.
           command: |
-            sudo softwareupdate --install-rosetta --agree-to-license  # for python<=3.8 or x86_64/universal2 tests
-            pip3 install cibuildwheel==3.4.1
+            sudo softwareupdate --install-rosetta --agree-to-license  # for x86_64/universal2 tests
+            pip3 install cibuildwheel==4.0.0rc1
             cibuildwheel --output-dir wheelhouse
       - store_artifacts:
           path: wheelhouse/

examples/cirrus-ci-intel-mac.yml

@@ -1,21 +0,0 @@
-build_and_store_wheels: &BUILD_AND_STORE_WHEELS
-  install_cibuildwheel_script:
-    - python -m pip install cibuildwheel==3.4.1
-  run_cibuildwheel_script:
-    - cibuildwheel
-  wheels_artifacts:
-    path: "wheelhouse/*"
-
-
-macos_task:
-  name: Build macOS x86_64 and arm64 wheels.
-  macos_instance:
-    image: ghcr.io/cirruslabs/macos-runner:sonoma
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-    CIBW_ARCHS_MACOS: x86_64 arm64
-  install_pre_requirements_script:
-    - brew install python@3.12
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *BUILD_AND_STORE_WHEELS

examples/cirrus-ci-minimal.yml

@@ -1,74 +0,0 @@
-build_and_store_wheels: &BUILD_AND_STORE_WHEELS
-  install_cibuildwheel_script:
-    - python -m pip install cibuildwheel==3.4.1
-  run_cibuildwheel_script:
-    - cibuildwheel
-  wheels_artifacts:
-    path: "wheelhouse/*"
-
-
-linux_x86_task:
-  name: Build Linux x86 wheels.
-  compute_engine_instance:
-    image_project: cirrus-images
-    image: family/docker-builder
-    platform: linux
-    cpu: 4
-    memory: 4G
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - add-apt-repository -y ppa:deadsnakes/ppa
-    - apt-get update
-    - apt-get install -y python3.12-venv
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *BUILD_AND_STORE_WHEELS
-
-linux_aarch64_task:
-  name: Build Linux aarch64 wheels.
-  compute_engine_instance:
-    image_project: cirrus-images
-    image: family/docker-builder-arm64
-    architecture: arm64
-    platform: linux
-    cpu: 4
-    memory: 4G
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - add-apt-repository -y ppa:deadsnakes/ppa
-    - apt-get update
-    - apt-get install -y python3.12-venv
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *BUILD_AND_STORE_WHEELS
-
-windows_x86_task:
-  name: Build Windows x86 wheels.
-  windows_container:
-    image: cirrusci/windowsservercore:visualstudio2022
-    cpu: 4
-    memory: 4G
-
-  install_pre_requirements_script:
-    - certutil -generateSSTFromWU roots.sst
-    - certutil -addstore -f root roots.sst
-    - del roots.sst
-    - choco install -y --no-progress python3 --version 3.12.4
-    - refreshenv
-    - powershell -Command "$cleanPath = $env:PATH -replace ';+$', ''; Add-Content -Path $env:CIRRUS_ENV -Value ('PATH=' + $cleanPath)"
-
-  <<: *BUILD_AND_STORE_WHEELS
-
-macos_arm64_task:
-  name: Build macOS arm64 wheels.
-  macos_instance:
-    image: ghcr.io/cirruslabs/macos-runner:sequoia
-  env:
-    VENV_ROOT: ${HOME}/venv-cibuildwheel
-    PATH: ${VENV_ROOT}/bin:${PATH}
-  install_pre_requirements_script:
-    - brew install python@3.12
-    - python3.12 -m venv ${VENV_ROOT}
-  <<: *BUILD_AND_STORE_WHEELS

examples/github-deploy.yml

@@ -53,7 +53,7 @@ jobs:
           persist-credentials: false
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v3.4.1
+        uses: pypa/cibuildwheel@v4.0.0rc1
         env:
           CIBW_PLATFORM: ${{ matrix.platform || 'auto' }}
           CIBW_ARCHS: ${{ matrix.archs || 'auto' }}

examples/github-minimal.yml

@@ -17,7 +17,7 @@ jobs:
           persist-credentials: false
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v3.4.1
+        uses: pypa/cibuildwheel@v4.0.0rc1
         # env:
         #   CIBW_SOME_OPTION: value
         #   ...

examples/github-pipx.yml

@@ -17,7 +17,7 @@ jobs:
           persist-credentials: false
 
       - name: Build wheels
-        run: pipx run cibuildwheel==3.4.1
+        run: pipx run cibuildwheel==4.0.0rc1
 
       - uses: actions/upload-artifact@v4
         with:

examples/github-with-qemu.yml

@@ -23,7 +23,7 @@ jobs:
           platforms: all
 
       - name: Build wheels
-        uses: pypa/cibuildwheel@v3.4.1
+        uses: pypa/cibuildwheel@v4.0.0rc1
         env:
           # configure cibuildwheel on Linux to build native archs ('auto'),
           # and to split the remaining architectures between the x86_64 and

examples/gitlab-minimal.yml

@@ -12,7 +12,7 @@ linux:
     DOCKER_TLS_CERTDIR: ""
   script:
     - curl -sSL https://get.docker.com/ | sh
-    - python -m pip install cibuildwheel==3.4.1
+    - python -m pip install cibuildwheel==4.0.0rc1
     - cibuildwheel --output-dir wheelhouse
   artifacts:
     paths:
@@ -23,7 +23,7 @@ windows:
   before_script:
     - choco install python -y --allow-downgrade --version 3.12.4
     - choco install git.install -y
-    - py -m pip install cibuildwheel==3.4.1
+    - py -m pip install cibuildwheel==4.0.0rc1
   script:
     - py -m cibuildwheel --output-dir wheelhouse --platform windows
   artifacts:
@@ -35,7 +35,7 @@ windows:
 macos:
   image: macos-14-xcode-15
   before_script:
-    - python3 -m pip install cibuildwheel==3.4.1
+    - python3 -m pip install cibuildwheel==4.0.0rc1
   script:
     - python3 -m cibuildwheel --output-dir wheelhouse
   artifacts:

examples/gitlab-with-qemu.yml

@@ -14,7 +14,7 @@ linux:
     - curl -sSL https://get.docker.com/ | sh
     # Warning: This is extremely slow, be careful with how many wheels you build
     - docker run --rm --privileged multiarch/qemu-user-static --reset -p yes
-    - python -m pip install cibuildwheel==3.4.1
+    - python -m pip install cibuildwheel==4.0.0rc1
     # Assuming your CI runner's default architecture is x86_64...
     - cibuildwheel --output-dir wheelhouse --platform linux --archs aarch64
   artifacts:

mkdocs.yml

@@ -34,6 +34,7 @@ nav:
   - About:
     - contributing.md
     - changelog.md
+    - Source repository: https://github.com/pypa/cibuildwheel
 
 markdown_extensions:
   - md_in_html

noxfile.py

@@ -69,19 +69,17 @@ def update_constraints(session: nox.Session) -> None:
     Update the dependencies inplace.
     """
 
-    session.install("-e.", "click")
-
     resources = Path("cibuildwheel/resources")
 
     if session.venv_backend != "uv":
-        session.install("uv>=0.1.23")
+        session.install("uv>=0.9")
 
     # CUSTOM_COMPILE_COMMAND is a pip-compile option that tells users how to
     # regenerate the constraints files
     env = os.environ.copy()
     env["UV_CUSTOM_COMPILE_COMMAND"] = f"nox -s {session.name}"
 
-    for minor_version in range(8, 15):
+    for minor_version in range(9, 16):
         python_version = f"3.{minor_version}"
         output_file = resources / f"constraints-python{python_version.replace('.', '')}.txt"
         session.run(
@@ -96,7 +94,7 @@ def update_constraints(session: nox.Session) -> None:
         )
 
     shutil.copyfile(
-        resources / "constraints-python314.txt",
+        resources / "constraints-python315.txt",
         resources / "constraints.txt",
     )
 
@@ -108,8 +106,7 @@ def update_constraints(session: nox.Session) -> None:
 
         tmp_file = Path(session.create_tmp()) / "constraints-pyodide.in"
 
-        session.run(
-            "python",
+        session.install_and_run_script(
             "bin/generate_pyodide_constraints.py",
             "--output-file",
             tmp_file,
@@ -135,13 +132,11 @@ def update_pins(session: nox.Session) -> None:
     Update the python, docker, virtualenv, node, and python-build-standalone
     version pins inplace.
     """
-    pyproject = nox.project.load_toml()
-    session.install("-e.", *nox.project.dependency_groups(pyproject, "bin"))
-    session.run("python", "bin/update_pythons.py", "--force")
-    session.run("python", "bin/update_docker.py")
-    session.run("python", "bin/update_virtualenv.py", "--force")
-    session.run("python", "bin/update_nodejs.py", "--force")
-    session.run("python", "bin/update_python_build_standalone.py")
+    session.install_and_run_script("bin/update_pythons.py", "--force")
+    session.install_and_run_script("bin/update_docker.py")
+    session.install_and_run_script("bin/update_virtualenv.py", "--force")
+    session.install_and_run_script("bin/update_nodejs.py", "--force")
+    session.install_and_run_script("bin/update_python_build_standalone.py")
 
 
 @nox.session(default=False, reuse_venv=True, tags=["update"])
@@ -184,6 +179,14 @@ def docs(session: nox.Session) -> None:
     session.run("mkdocs", "serve" if session.interactive else "build", "--strict", *session.posargs)
 
 
+@nox.session(default=False)
+def update_how_it_works_image(session: nox.Session) -> None:
+    """
+    Generate the how it works image.
+    """
+    session.install_and_run_script("bin/update_how_it_works_image.py")
+
+
 @nox.session(default=False)
 def build(session: nox.Session) -> None:
     """

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "cibuildwheel"
-version = "3.4.1"
+version = "4.0.0rc1"
 description = "Build Python wheels on CI with minimal configuration."
 readme = "README.md"
 license = "BSD-2-Clause"
@@ -32,6 +32,7 @@ classifiers = [
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
     "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: 3.15",
     "Programming Language :: Python :: Implementation :: CPython",
     "Topic :: Software Development :: Build Tools",
 ]
@@ -66,18 +67,9 @@ Documentation = "https://cibuildwheel.pypa.io"
 Homepage = "https://github.com/pypa/cibuildwheel"
 
 [dependency-groups]
-bin = [
-    "click",
-    "packaging>=21.0",
-    "pip-tools",
-    "pygithub",
-    "pyyaml",
-    "requests",
-    "rich>=9.6",
-]
 docs = [
     "jinja2>=3.1.2",
-    "mkdocs-include-markdown-plugin==6.2.2",
+    "mkdocs-include-markdown-plugin==7.1.8",
     "mkdocs-macros-plugin>=1.4.1",
     "mkdocs==1.6.1",
     "pymdown-extensions",
@@ -97,7 +89,6 @@ test = [
     "xdoctest",
 ]
 dev = [
-    {include-group = "bin"},
     {include-group = "docs"},
     {include-group = "test"},
 ]
@@ -138,7 +129,6 @@ module = [
     "setuptools._distutils.util",
     "bashlex",
     "bashlex.*",
-    "importlib_resources",
 ]
 ignore_missing_imports = true
 
@@ -258,6 +248,7 @@ ignore = ["W002"]  # constraints-*.txt are allowed to be duplicates of one anoth
 ignore-words-list = [
     "sur",
     "assertin",
+    "Fo",
 ]
 skip = [
     '^docs/working-examples\.md',

test/conftest.py

@@ -26,12 +26,6 @@ def pytest_addoption(parser: pytest.Parser) -> None:
         choices=("all", *EMULATED_ARCHS),
     )
     parser.addoption("--run-podman", action="store_true", default=False, help="run podman tests")
-    parser.addoption(
-        "--run-cp38-universal2",
-        action="store_true",
-        default=False,
-        help="macOS cp38 uses the universal2 installer",
-    )
     parser.addoption(
         "--enable",
         action="store",

test/test_0_basic.py

@@ -70,9 +70,7 @@ def test_sample_build(tmp_path: Path, capfd: pytest.CaptureFixture[str]) -> None
             logger.step_end()
 
 
-@pytest.mark.parametrize(
-    "enable_setting", ["", "cpython-prerelease", "pypy", "cpython-freethreading"]
-)
+@pytest.mark.parametrize("enable_setting", ["", "cpython-prerelease", "pypy"])
 def test_build_identifiers(
     tmp_path: Path, enable_setting: str, monkeypatch: pytest.MonkeyPatch
 ) -> None: