summaryrefslogtreecommitdiffstats
path: root/.github/workflows/build.yml
Commit message (Collapse)AuthorAgeFilesLines
* gh-94682: Build and test with OpenSSL 1.1.1q (gh-94683)Christian Heimes2022-08-291-3/+3
|
* ci: add GitHub token permissions (#92999)Varun Sharma2022-05-211-0/+3
|
* Add the 3.11 branch to the CI filesPablo Galindo2022-05-081-0/+2
|
* Dependabot: only bump actions for major versions (#92186)Hugo van Kemenade2022-05-031-3/+3
|
* build(deps): bump actions/cache from 3.0.1 to 3.0.2 (#92111)dependabot[bot]2022-05-011-3/+3
| | | | | | | | | | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 3.0.1 to 3.0.2. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v3.0.1...v3.0.2) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* build(deps): bump actions/cache from 2.1.7 to 3.0.1 (#32228)dependabot[bot]2022-04-201-3/+3
| | | | | | | | | | | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.0.1. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v2.1.7...v3.0.1) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
* build(deps): bump actions/checkout from 2 to 3 (#32226)dependabot[bot]2022-04-201-8/+8
| | | | | | | | | | | | | | | | | Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* build(deps): bump actions/setup-python from 2 to 3 (#31630)dependabot[bot]2022-04-191-1/+1
| | | | | | | | | | | | | | | | | Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 3. - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
* Replace contributor-visible mentions of BPO in .github/* (GH-91426)Oleg Iarygin2022-04-101-1/+1
|
* bpo-47146: Stop Depending On regen-deepfreeze For regen-global-objects ↵Eric Snow2022-03-311-0/+3
| | | | | | | | | (gh-32218) This effectively reverts the Makefile change in gh-31637. I've added some notes so it is more clear what is going on. We also update the "Check if generated files are up to date" job to run "make regen-deepfreeze" to ensure "make regen-global-objects" catches deepfreeze.c. https://bugs.python.org/issue47146
* bpo-47037: Test debug builds on Windows in CI so that native assertions are ↵Steve Dower2022-03-181-4/+4
| | | | noticed sooner (GH-31965)
* bpo-47024: Update OpenSSL to 1.1.1n (GH-31895)Christian Heimes2022-03-151-3/+3
| | | Co-authored-by: Zachary Ware <zachary.ware@gmail.com>
* bpo-46973: Add regen-configure make target (GH-31792)Christian Heimes2022-03-101-3/+5
|
* bpo-46633: Skip tests on ASAN and/or MSAN builds (GH-31632)Victor Stinner2022-03-011-9/+1
| | | | | | | | | | | | Skip tests on ASAN and/or MSAN builds: * multiprocessing tests * test___all__ * test_concurrent_futures * test_decimal * test_peg_generator * test_tools The ASAN job of GitHub Actions no longer excludes these tests.
* bpo-46541: Drop the check for orphaned global strings. (gh-31363)Eric Snow2022-02-161-2/+0
| | | https://bugs.python.org/issue46541
* bpo-46541: Replace core use of _Py_IDENTIFIER() with statically initialized ↵Eric Snow2022-02-081-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | global objects. (gh-30928) We're no longer using _Py_IDENTIFIER() (or _Py_static_string()) in any core CPython code. It is still used in a number of non-builtin stdlib modules. The replacement is: PyUnicodeObject (not pointer) fields under _PyRuntimeState, statically initialized as part of _PyRuntime. A new _Py_GET_GLOBAL_IDENTIFIER() macro facilitates lookup of the fields (along with _Py_GET_GLOBAL_STRING() for non-identifier strings). https://bugs.python.org/issue46541#msg411799 explains the rationale for this change. The core of the change is in: * (new) Include/internal/pycore_global_strings.h - the declarations for the global strings, along with the macros * Include/internal/pycore_runtime_init.h - added the static initializers for the global strings * Include/internal/pycore_global_objects.h - where the struct in pycore_global_strings.h is hooked into _PyRuntimeState * Tools/scripts/generate_global_objects.py - added generation of the global string declarations and static initializers I've also added a --check flag to generate_global_objects.py (along with make check-global-objects) to check for unused global strings. That check is added to the PR CI config. The remainder of this change updates the core code to use _Py_GET_GLOBAL_IDENTIFIER() instead of _Py_IDENTIFIER() and the related _Py*Id functions (likewise for _Py_GET_GLOBAL_STRING() instead of _Py_static_string()). This includes adding a few functions where there wasn't already an alternative to _Py*Id(), replacing the _Py_Identifier * parameter with PyObject *. The following are not changed (yet): * stop using _Py_IDENTIFIER() in the stdlib modules * (maybe) get rid of _Py_IDENTIFIER(), etc. entirely -- this may not be doable as at least one package on PyPI using this (private) API * (maybe) intern the strings during runtime init https://bugs.python.org/issue46541
* Add skips to crashing tests under sanitizers instead of manually skipping ↵Pablo Galindo Salgado2022-01-251-1/+4
| | | | them (GH-30897)
* bpo-45200: GHA Address Sanitizer skips 3 slowest tests (GH-30797)Victor Stinner2022-01-221-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Skip the 3 slowest tests of the Address Sanitizer CI of GitHub Actions: * test_tools * test_peg_generator * test_concurrent_futures These tests take between 5 and 20 minutes on this CI which makes this CI job the slowest. Making this CI job faster makes the whole Python workflow faster. These tests are run on all others CIs. Example of Address Sanitizer output: 10 slowest tests: - test_peg_generator: 17 min 33 sec - test_tools: 8 min 27 sec - test_concurrent_futures: 5 min 24 sec - test_zipfile: 2 min 41 sec - test_compileall: 2 min 21 sec - test_asyncio: 2 min 17 sec - test_gdb: 1 min 43 sec - test_weakref: 1 min 35 sec - test_pickle: 1 min 18 sec - test_subprocess: 1 min 12 sec Moreover, test_concurrent_futures also seems to be affected by bpo-45200 bug: libasan dead lock in pthread_create().
* Add a (conservative) timeout for Windows builds on GitHub Actions (GH-30301)Mark Dickinson2022-01-091-0/+2
|
* bpo-46106: Update OpenSSL to 1.1.1m (GH-30211)Kumar Aditya2021-12-221-3/+3
| | | Co-authored-by: Ned Deily <nad@python.org>
* bpo-44035: Show git diff after autoreconf and regen (GH-30117)Christian Heimes2021-12-171-1/+3
|
* bpo-46114: Fix OpenSSL version check for 3.0.1 (GH-30170)Christian Heimes2021-12-171-1/+1
|
* build(deps): bump actions/cache from 2.1.6 to 2.1.7 (GH-29875)dependabot[bot]2021-12-101-3/+3
| | | | | | | | | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 2.1.6 to 2.1.7. - [Release notes](https://github.com/actions/cache/releases) - [Commits](https://github.com/actions/cache/compare/v2.1.6...v2.1.7) --- updated-dependencies: - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* bpo-44035: Check autoconf files thoroughly (GH-29935)Christian Heimes2021-12-061-7/+16
| | | | | | | | | Check that users don't push changes with outdated or patched autoconf. The presence of runstatedir option and aclocal 1.16.3 are good markers. Use my container image to regenerate autoconf files. "Check for changes" will fail later when any file is regenerated. Use ccache in check_generated_files to speed up testing.
* bpo-45695: Test out-of-tree builds on GHA (GH-29904)Christian Heimes2021-12-041-3/+18
|
* bpo-45893: Add missing extern C to initconfig.h (GH-29761)Christian Heimes2021-11-241-0/+4
| | | Co-authored-by: Steve Dower <steve.dower@python.org>
* Add workflow_dispatch trigger to GHA workflows (GH-27873)Ryan Mast2021-10-211-0/+1
|
* bpo-45350: Rerun autoreconf with the pkg-config macros (GH-28708)Pablo Galindo Salgado2021-10-031-2/+8
|
* bpo-45200: Ignore test_multiprocessing_* in ASAN build due to false ↵Pablo Galindo Salgado2021-09-211-1/+1
| | | | positives (GH-28492)
* bpo-38820: Test with OpenSSL 3.0.0 final (GH-28205)Christian Heimes2021-09-071-1/+1
| | | Signed-off-by: Christian Heimes <christian@python.org>
* Check that 'configure' is generated by GNU Autoconf 2.69 (GH-28152)Pablo Galindo Salgado2021-09-041-0/+2
|
* bpo-45019: Add a tool to generate list of modules to include for frozen ↵Eric Snow2021-08-301-0/+1
| | | | | | | modules (gh-27980) Frozen modules must be added to several files in order to work properly. Before this change this had to be done manually. Here we add a tool to generate the relevant lines in those files instead. This helps us avoid mistakes and omissions. https://bugs.python.org/issue45019
* bpo-45007: Update to OpenSSL 1.1.1l in Windows build and CI (GH-28009)Steve Dower2021-08-291-3/+3
|
* Fail the CI if an optional module fails to compile (GH-27466)Pablo Galindo Salgado2021-07-301-0/+4
|
* Add windows build.bat counterpart for 'make regen-all' in error message ↵Ken Jin2021-07-271-1/+1
| | | | (GH-26770)
* bpo-38820: Test with OpenSSL 3.0.0-beta1 (GH-26769)Christian Heimes2021-06-191-1/+1
| | | Signed-off-by: Christian Heimes <christian@python.org>
* Run address sanitiser in the GitHub CI (GH-26640)Pablo Galindo2021-06-101-0/+43
|
* build(deps): bump actions/cache from 2.1.5 to 2.1.6 (GH-26476)dependabot[bot]2021-06-021-2/+2
| | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from 2.1.5 to 2.1.6. - [Release notes](https://github.com/actions/cache/releases) - [Commits](https://github.com/actions/cache/compare/v2.1.5...v2.1.6) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* bpo-38820: Test with OpenSSL 3.0.0-alpha17 (#26266)Christian Heimes2021-05-201-1/+1
|
* Enable GitHub Actions on the 3.10 branch (GH-26242)Hugo van Kemenade2021-05-191-8/+10
|
* bpo-38820: Test with OpenSSL 3.0.0-alpha16 (GH-25942)Christian Heimes2021-05-061-1/+1
| | | Also use new make target to install FIPS provider.
* build(deps): bump actions/cache from v2.1.4 to v2.1.5 (#25773)dependabot[bot]2021-05-041-2/+2
| | | | | | | | | Bumps [actions/cache](https://github.com/actions/cache) from v2.1.4 to v2.1.5. - [Release notes](https://github.com/actions/cache/releases) - [Commits](https://github.com/actions/cache/compare/v2.1.4...1a9e2138d905efd099035b49d8b7a3888c653ca8) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* Update CI files to account for the master -> main rename (GH-25860)Pablo Galindo2021-05-031-2/+2
|
* Fix broken name in build.yml (GH-25759)Brandt Bucher2021-05-011-1/+1
|
* bpo-38820: Test with OpenSSL 3.0.0-alpha15 (GH-25537)Christian Heimes2021-04-231-1/+1
| | | Signed-off-by: Christian Heimes <christian@python.org>
* bpo-43669: PEP 644: Require OpenSSL 1.1.1 or newer (GH-23014)Christian Heimes2021-04-171-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | - Remove HAVE_X509_VERIFY_PARAM_SET1_HOST check - Update hashopenssl to require OpenSSL 1.1.1 - multissltests only OpenSSL > 1.1.0 - ALPN is always supported - SNI is always supported - Remove deprecated NPN code. Python wrappers are no-op. - ECDH is always supported - Remove OPENSSL_VERSION_1_1 macro - Remove locking callbacks - Drop PY_OPENSSL_1_1_API macro - Drop HAVE_SSL_CTX_CLEAR_OPTIONS macro - SSL_CTRL_GET_MAX_PROTO_VERSION is always defined now - security level is always available now - get_num_tickets is available with TLS 1.3 - X509_V_ERR MISMATCH is always available now - Always set SSL_MODE_RELEASE_BUFFERS - X509_V_FLAG_TRUSTED_FIRST is always available - get_ciphers is always supported - SSL_CTX_set_keylog_callback is always available - Update Modules/Setup with static link example - Mention PEP in whatsnew - Drop 1.0.2 and 1.1.0 from GHA tests
* bpo-43811: Test multiple OpenSSL versions on GHA (GH-25360)Christian Heimes2021-04-131-2/+63
| | | | | The new checks are only executed when one or more OpenSSL-related files are modified. The checks run a handful of networking and hashing test suites. All SSL checks are optional. This PR also introduces ccache to speed up compilation. In common cases it speeds up configure and compile time from about 90 seconds to less than 30 seconds. Signed-off-by: Christian Heimes <christian@python.org>
* bpo-43631: Update to OpenSSL 1.1.1k (GH-25024)Christian Heimes2021-03-301-1/+1
| | | | | | | | | | - [x] Build OpenSSL 1.1.1k for macOS - [x] Build OpenSSL 1.1.1k for Windows I have also updated multissl tester and various CI configurations to use latest OpenSSL. The versions were all over the place. Signed-off-by: Christian Heimes <christian@python.org> Automerge-Triggered-By: GH:tiran
* bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)Christian Heimes2021-03-181-1/+1
| | | | | | | | | | Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level 2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow TLS 1.0 and 1.1 on security level 2. See: See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878 See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625 Signed-off-by: Christian Heimes <christian@python.org>
* Pin test runner to Ubuntu 18 to un-break CI (#24715)Brandt Bucher2021-03-031-1/+1
|