Bump GitHub Actions by hugovk · Pull Request #143757 · python/cpython

hugovk · 2026-01-12T20:39:46Z

Manually (well, semi-manually), because Dependabot has been broken for 16 months:

StanFromIreland

LGTM

miss-islington-app · 2026-01-13T13:43:30Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.13, 3.14.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:43:32Z

Sorry, @hugovk, I could not cleanly backport this to 3.14 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.14

miss-islington-app · 2026-01-13T13:43:36Z

Sorry, @hugovk, I could not cleanly backport this to 3.13 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.13

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

bedevere-app · 2026-01-13T13:50:17Z

GH-143797 is a backport of this pull request to the 3.14 branch.

bedevere-app · 2026-01-13T13:51:41Z

GH-143798 is a backport of this pull request to the 3.13 branch.

hugovk · 2026-01-13T13:52:30Z

And we need to keep the CI for security branches updated as well, will add those.

miss-islington-app · 2026-01-13T13:52:39Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.10.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:52:39Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.11.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:52:40Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.12.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:52:44Z

Sorry, @hugovk, I could not cleanly backport this to 3.10 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.10

miss-islington-app · 2026-01-13T13:52:48Z

Sorry, @hugovk, I could not cleanly backport this to 3.11 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.11

miss-islington-app · 2026-01-13T13:52:52Z

Sorry, @hugovk, I could not cleanly backport this to 3.12 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.12

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

bedevere-app · 2026-01-13T13:55:45Z

GH-143801 is a backport of this pull request to the 3.12 branch.

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

bedevere-app · 2026-01-13T13:57:29Z

GH-143802 is a backport of this pull request to the 3.11 branch.

bedevere-app · 2026-01-13T13:59:15Z

GH-143803 is a backport of this pull request to the 3.10 branch.

bedevere-bot · 2026-01-13T17:21:14Z

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot s390x RHEL9 Refleaks 3.11 (tier-3) has failed when building commit cf039bc.

What do you need to do:

Don't panic.
Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
Go to the page of the buildbot that failed (https://buildbot.python.org/#/builders/1586/builds/83) and take a look at the build logs.
Check if the failure is related to this commit (cf039bc) or if it is a false positive.
If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/#/builders/1586/builds/83

Failed tests:

test_typing
test_ssl

Failed subtests:

test_get_server_certificate_timeout - test.test_ssl.SimpleBackgroundTests.test_get_server_certificate_timeout

Test leaking resources:

test_typing: memory blocks

Summary of the results of the build (if available):

==

Click to see traceback logs

Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:1016)
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLEOFError: [SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1016)
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)
connection timeout TimeoutError('timed out')
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2563, in run
msg =self.read()
^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2540, in read
returnself.sslconn.read()
^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1168, in read
returnself._sslobj.read(len)
^^^^^^^^^^^^^^^^^^^^^^
ssl.SSLError: [SSL: PEER_DID_NOT_RETURN_A_CERTIFICATE] peer did not return a certificate (_ssl.c:2590)
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016)
connection timeout TimeoutError('timed out')
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016)
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016)
server: new connection from ('127.0.0.1', 46548)
server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256)
Connection reset by peer: ('127.0.0.1', 46548)
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: NO_SUITABLE_KEY_SHARE] no suitable key share (_ssl.c:1016)
connection timeout TimeoutError('timed out')
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2262, in test_get_server_certificate_timeoutwithself.assertRaises(socket.timeout):
AssertionError: TimeoutError not raised
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016)
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016)
connection timeout TimeoutError('timed out')
k
Traceback (most recent call last):
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
self.sslconn =self.server.context.wrap_socket(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
returnself.sslsocket_class._create(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
self.do_handshake()
File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016)
connection timeout TimeoutError('timed out')
connection timeout TimeoutError('timed out')
k

Bump GitHub Actions
b7f7f78

hugovk requested review from AA-Turner and ezio-melotti as code owners January 12, 2026 20:39

bedevere-appBot added the awaiting core review label Jan 12, 2026

hugovk added skip issue skip news needs backport to 3.13 bugs and security fixes needs backport to 3.14 bugs and security fixes infra CI, GitHub Actions, buildbots, Dependabot, etc. and removed awaiting core review labels Jan 12, 2026

StanFromIreland approved these changes Jan 12, 2026
View reviewed changes

bedevere-appBot added the awaiting core review label Jan 12, 2026

github/codeql-action/upload-sarif@v4
15df753

hugovk mentioned this pull request Jan 12, 2026
gh-69405: Add check for idle's help.html to CI #143742
Closed

ezio-melotti approved these changes Jan 13, 2026
View reviewed changes

bedevere-appBot added awaiting merge and removed awaiting core review labels Jan 13, 2026

hugovk merged commit 80e9eaf into python:mainJan 13, 2026
86 checks passed

hugovk deleted the bump-gha branch January 13, 2026 13:43

bedevere-appBot removed the awaiting merge label Jan 13, 2026

miss-islington-appBot assigned hugovk Jan 13, 2026

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026
[3.14] Bump GitHub Actions (pythonGH-143757)
1694844
(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

bedevere-appBot removed the needs backport to 3.14 bugs and security fixes label Jan 13, 2026

bedevere-appBot removed the needs backport to 3.13 bugs and security fixes label Jan 13, 2026

hugovk added needs backport to 3.10 only security fixes needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes labels Jan 13, 2026

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026
[3.13] Bump GitHub Actions (pythonGH-143757)
bafcc76
(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

bedevere-appBot removed the needs backport to 3.12 only security fixes label Jan 13, 2026

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026
[3.12] Bump GitHub Actions (pythonGH-143757)
9dfd332
(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>

bedevere-appBot removed the needs backport to 3.11 only security fixes label Jan 13, 2026

bedevere-appBot removed the needs backport to 3.10 only security fixes label Jan 13, 2026

hugovk added a commit that referenced this pull request Jan 13, 2026
[3.14] Bump GitHub Actions (GH-143757) (#143797)
57d0e21

hugovk added a commit that referenced this pull request Jan 13, 2026
[3.12] Bump GitHub Actions (GH-143757) (#143801)
64745cf

hugovk added a commit that referenced this pull request Jan 13, 2026
[3.11] Bump GitHub Actions (GH-143757) (#143802)
cf039bc

hugovk added a commit that referenced this pull request Jan 13, 2026
[3.10] Bump GitHub Actions (GH-143757) (#143803)
f12346d

hugovk added a commit that referenced this pull request Jan 13, 2026
[3.13] Bump GitHub Actions (GH-143757) (#143798)
b6c6c47

hugovk mentioned this pull request Jan 21, 2026
chore: Update outdated GitHub Actions versions #144103
Closed

thunder-coding pushed a commit to thunder-coding/cpython that referenced this pull request Feb 15, 2026
Bump GitHub Actions (python#143757)
3f57d05

Uh oh!

Uh oh!

Conversation

hugovk commented Jan 12, 2026

Uh oh!

StanFromIreland left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

bedevere-appBot commented Jan 13, 2026

Uh oh!

bedevere-appBot commented Jan 13, 2026

Uh oh!

hugovk commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

miss-islington-appBot commented Jan 13, 2026

Uh oh!

bedevere-appBot commented Jan 13, 2026

Uh oh!

bedevere-appBot commented Jan 13, 2026

Uh oh!

bedevere-appBot commented Jan 13, 2026

Uh oh!

bedevere-bot commented Jan 13, 2026

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants