Joshua Megnauth
30ae48b24b
Support custom rustls providers ( #7657 )
...
* Modularize rustls as work towards providers
`rustls`'s architecture is very clean and trait-driven. There are many
providers for `rustls` including the built-in `aws-lc-rs` and `ring` as
well as backends for `boringssl`, `graviola`, `openssl`, `mbedtls`, etc.
This commit removes the hard dependency on `aws-lc-rs` and adds support
for `ring`. It works towards #7059 as well.
* Clean up rustls features
* Remove ring as an explicit feature
* ssl-rustls is the default and implies aws-lc
* Support custom rustls crypto providers
The new feature, `ssl-rustls-no-provider`, enables custom rustls
providers. By default, `aws-lc-rs` is enabled which matches the old
behavior and keeps backward compatibility.
I wrote a new type that abstracts what we need from crypto providers.
CryptoExt encapsulates the ticketer as well as cipher suites and KX
groups. I wrote fallbacks to help select a reasonable default if a
provider is missing features (they all seem to support the same things
though).
I also wrote an example to show how to actually use custom providers.
* Fix duplicate VERIFY_X509 constants and unused imports in ssl module
Remove duplicate VERIFY_X509_STRICT/VERIFY_X509_PARTIAL_CHAIN definitions
from compat.rs (already defined in _ssl module with #[pyattr]).
Remove unused imports: ClientConnection, ServerConnection.
* no-provider as default
* Fix CI failures: openssl build, wasm target, cargo-shear
- Update openssl.rs to use renamed sock_wait/SockWaitKind and add vm parameter
- Add skip_ssl for wasm32-wasip2 target (aws-lc-sys cannot build for wasm)
- Remove unused workspace dependency aws-lc-rs
- Fix foreign-types-shared version to match openssl's dependency (0.1)
- Restore Cargo.lock from upstream/main
---------
Co-authored-by: Jeong, YunWon <jeong@youknowone.org >
2026-05-28 11:07:09 +09:00
dependabot[bot]
f4696ea890
Bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 ( #7972 )
...
Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages ) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases )
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md )
- [Commits](4f9cc6602d...84c30a85c1support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-25 18:40:33 +09:00
dependabot[bot]
8bd4c5137e
Bump mwilliamson/setup-wabt-action from 3.2.0 to 4.0.0 ( #7778 )
...
Bumps [mwilliamson/setup-wabt-action](https://github.com/mwilliamson/setup-wabt-action ) from 3.2.0 to 4.0.0.
- [Release notes](https://github.com/mwilliamson/setup-wabt-action/releases )
- [Commits](https://github.com/mwilliamson/setup-wabt-action/compare/v3.2.0...427f2fdd70bc4dbc2e53c2eb4f19f66162d71bd2 )
---
updated-dependencies:
- dependency-name: mwilliamson/setup-wabt-action
dependency-version: 4.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-05 14:24:34 +09:00
dependabot[bot]
8d1c68c9a0
Bump actions/setup-node from 6.3.0 to 6.4.0 ( #7689 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 6.3.0 to 6.4.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](53b83947a5...48b55a011bsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-05-02 08:16:15 +09:00
dependabot[bot]
6c2c8421d7
Bump actions/upload-artifact from 7.0.0 to 7.0.1 ( #7640 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](bbbca2ddaa...043fb46d1asupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-30 11:01:47 +09:00
Shahar Naveh
31edcfa97e
Remove overly broad permissions from release.yml ( #7577 )
2026-04-10 18:49:37 +09:00
Shahar Naveh
344b7a5abd
[zizmor] ignore superfluous-actions ( #7548 )
2026-04-03 00:44:58 +09:00
dependabot[bot]
1a4964b741
Bump dtolnay/rust-toolchain ( #7545 )
...
Bumps [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain ) from efa25f7f19611383d5b0ccf2d1c8914531636bf9 to 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9.
- [Release notes](https://github.com/dtolnay/rust-toolchain/releases )
- [Commits](efa25f7f19...3c5f7ea28csupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-31 01:30:08 +09:00
Shahar Naveh
9900c761ca
Fix lint warnings in release.yml ( #7538 )
2026-03-30 18:53:38 +09:00
Shahar Naveh
4ebc3112d9
Cleanup release.yml a bit ( #7499 )
...
* Cleanup matrix usage. enables jit on macos
* Pin some actions to commit hash
* Disable node cache
* Inline `CARGO_ARGS`
* Add `stdio` and `host_env` features
* Only upload to pages if not running on fork
2026-03-25 12:04:56 +09:00
dependabot[bot]
d04490ee25
Bump actions/download-artifact from 8.0.0 to 8.0.1 ( #7448 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 8.0.0 to 8.0.1.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v8...v8.0.1 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-17 12:56:58 +09:00
Shahar Naveh
f1ddb4fc5e
Pin checkout to commit. Don't persist creds if not needed ( #7430 )
2026-03-16 12:34:43 +09:00
dependabot[bot]
d81db8afc5
Bump actions/checkout from 4 to 6 ( #7396 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-10 00:46:25 +09:00
Lee Dogeon
0a6a6f8ddb
Prevent shell injection ( #7310 )
2026-03-02 19:45:58 +09:00
dependabot[bot]
85d4c42a6b
Bump actions/upload-artifact from 6.0.0 to 7.0.0 ( #7264 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-28 23:18:04 +09:00
dependabot[bot]
5861393ad8
Bump actions/download-artifact from 7.0.0 to 8.0.0 ( #7263 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 7.0.0 to 8.0.0.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v7...v8 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: 8.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-28 23:17:38 +09:00
dependabot[bot]
5a02051d68
Bump actions/checkout from 6.0.1 to 6.0.2 ( #6881 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 6.0.1 to 6.0.2.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v6.0.1...v6.0.2 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-27 09:58:52 +09:00
Noa
bf80d2715d
Update to windows-2025 runner on ci ( #5571 )
...
* Update to windows-2025 on ci
* Unmark unexpected successes
* Try adding .dll
2026-01-07 12:53:44 +09:00
Copilot
ebdc033c59
Bundle Lib directory in GitHub releases ( #6497 )
...
* Initial plan
* Add Lib directory archives to release workflow
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
* Add release notes explaining users need both binary and Lib archive
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
* Remove unnecessary --notes-start-tag parameter
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
* Only create zip archive, remove tar.gz
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
2025-12-25 09:48:20 +09:00
dependabot[bot]
e6d9a9aef0
Bump actions/download-artifact from 6.0.0 to 7.0.0 ( #6441 )
2025-12-15 23:54:53 +09:00
dependabot[bot]
78d2e5bdf1
Bump actions/upload-artifact from 5.0.0 to 6.0.0
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-12-15 23:53:21 +09:00
dependabot[bot]
7e34ab743a
Bump actions/checkout from 5.0.1 to 6.0.1 ( #6348 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 5.0.1 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v5.0.1...v6.0.1 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-08 23:09:50 +09:00
dependabot[bot]
ea3eb2a9ef
Bump actions/checkout from 4 to 6 ( #6294 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases )
- [Commits](https://github.com/actions/checkout/compare/v4...v6 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-25 05:30:13 +09:00
dependabot[bot]
0e15e771c3
Bump actions/upload-artifact from 4 to 5 ( #6221 )
...
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-28 09:37:37 +09:00
dependabot[bot]
d63e44aa3a
Bump actions/download-artifact from 5 to 6 ( #6220 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-28 09:37:14 +09:00
dependabot[bot]
13329f0a48
Bump actions/setup-node from 5 to 6 ( #6197 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v5...v6 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '6'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-21 09:32:19 +09:00
Shahar Naveh
24f4fbad82
Run scheduled CI jobs only on upstream repo ( #6157 )
...
* Run scheduled CI jobs only on upstream repo
* Only disable if scheduling on forks
2025-09-21 02:05:32 +09:00
dependabot[bot]
150e8ef43d
Bump actions/download-artifact from 4 to 5 ( #6162 )
...
Bumps [actions/download-artifact](https://github.com/actions/download-artifact ) from 4 to 5.
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/download-artifact
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-21 00:01:06 +09:00
dependabot[bot]
fdae128cec
Bump actions/setup-node from 4 to 5 ( #6160 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/v4...v5 )
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-version: '5'
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-20 23:41:28 +09:00
Ashwin Naren
ad5ffb648f
Remove packaging from release ( #5680 )
2025-04-08 13:37:47 +09:00
Ashwin Naren
cb967c697b
Fix release CI ( #5647 )
2025-04-01 10:17:29 +09:00
Jeong, YunWon
2a41072b44
Windows installer via cargo-packager ( #5549 )
...
* cargo-packager config
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
* add templates
* update release.yml
* update wix installer config
---------
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
2025-03-25 10:27:45 +09:00
Noa
cc0a1ce9e2
Update webpack ( #5585 )
...
* Update webpack
* Build demo before notebook
* Use with instead of env for actions-gh-pages
2025-03-05 16:15:14 -06:00
Ashwin Naren
6804dd4363
use rust-toolchain targets options instead of using rustup
2025-03-05 13:45:31 -06:00
Ashwin Naren
defcadafbb
publish demo on weekly release
2025-03-05 13:45:31 -06:00
Ashwin Naren
aa4774fe32
update release.yml
2025-02-27 08:44:42 -08:00
Noa
4468dcbe34
Switch to libz-rs-sys for zlib implementation
2025-02-25 23:19:19 -06:00
Jeong YunWon
0e00d2328d
wasm32-wasi -> wasm32-wasip1
2025-01-13 15:06:29 +09:00
Shubham Patil
e2a55cbf34
Handle pre-release flag being empty for schedule triggers in release workflow
...
GitHub workflow_dispatch input variables are always empty for other triggers
2025-01-09 17:31:02 +09:00
Shubham Patil
3feaf689d8
Re-enable Release Notes Generation
2025-01-03 21:49:17 +05:30
Shubham Patil
bd627b58af
Schedule Pre-Release on Monday 9AM UTC
2025-01-03 21:49:17 +05:30
Shubham Patil
c561d33cb2
Support both Release & Pre-Release in Release Workflow
...
On Push "main" is removed
2025-01-03 21:49:17 +05:30
Ashwin Naren
c8fd3bd683
Build wasm on release
2025-01-03 14:56:58 +09:00
Shubham Patil
1abaf87abe
Temporarily disable release notes generation
...
Release creation fails with this error:
```
HTTP 422: Validation Failed (https://api.github.com/repos/RustPython/RustPython/releases )
body is too long (maximum is 125000 characters)
Error: Process completed with exit code 1.
```
Most likely because there's no previous release to diff of from.
Disabling, getting a green release & enabling back might fix this.
2024-12-30 16:44:55 +09:00
Shubham Patil
646cc81656
Add GitHub Binary Release Pipeline for RustPython ( #5456 )
2024-12-28 11:34:53 +09:00
