From 81e5bdd9a5d8f12649dbcab050315365dd79b65c Mon Sep 17 00:00:00 2001 From: Ignas Anikevicius <240938+aignas@users.noreply.github.com> Date: Thu, 10 Jul 2025 23:18:29 +0900 Subject: [PATCH] chore: update python toolchains - use the SHA256SUMS file instead of individual sha256sum files. This improves the speed of the tooling and also the old files just disappeared for the latest toolchain release. - update to the latest release. --- CHANGELOG.md | 6 +- python/private/print_toolchain_checksums.bzl | 41 +++-- python/versions.bzl | 168 +++++++++---------- tests/python/python_tests.bzl | 2 +- 4 files changed, 107 insertions(+), 110 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index c1d3a43814..0eeaadba9a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -60,12 +60,12 @@ END_UNRELEASED_TEMPLATE * (gazelle) Types for exposed members of `python.ParserOutput` are now all public. * (gazelle) Removed the requirement for `__init__.py`, `__main__.py`, or `__test__.py` files to be present in a directory to generate a `BUILD.bazel` file. -* (toolchain) Updated the following toolchains to build 20250702 to patch CVE-2025-47273: +* (toolchain) Updated the following toolchains to build 20250708 to patch CVE-2025-47273: * 3.9.23 * 3.10.18 * 3.11.13 * 3.12.11 - * 3.14.0b3 + * 3.14.0b4 * (toolchain) Python 3.13 now references 3.13.5 {#v0-0-0-fixed} @@ -101,7 +101,7 @@ END_UNRELEASED_TEMPLATE * 3.11.13 * 3.12.11 * 3.13.5 - * 3.14.0b3 + * 3.14.0b4 {#v0-0-0-removed} ### Removed diff --git a/python/private/print_toolchain_checksums.bzl b/python/private/print_toolchain_checksums.bzl index eaaa5b9d75..bd370baf10 100644 --- a/python/private/print_toolchain_checksums.bzl +++ b/python/private/print_toolchain_checksums.bzl @@ -28,6 +28,7 @@ def print_toolchains_checksums(name): template = """\ cat > "$@" <<'EOF' #!/bin/bash +set -euo pipefail set -o errexit -o nounset -o pipefail @@ -54,28 +55,9 @@ EOF def _commands_for_version(*, python_version, metadata): lines = [] - lines += [ - "cat <