Skip to content

Conversation

@hugovk
Copy link
Member

Manually (well, semi-manually), because Dependabot has been broken for 16 months:

#137650

@hugovkhugovk added skip issue skip news needs backport to 3.13 bugs and security fixes needs backport to 3.14 bugs and security fixes infra CI, GitHub Actions, buildbots, Dependabot, etc. and removed awaiting core review labels Jan 12, 2026
Copy link
Member

@StanFromIrelandStanFromIreland left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@hugovkhugovk merged commit 80e9eaf into python:mainJan 13, 2026
86 checks passed
@hugovkhugovk deleted the bump-gha branch January 13, 2026 13:43
@miss-islington-app
Copy link

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.13, 3.14.
🐍🍒⛏🤖

@miss-islington-app
Copy link

Sorry, @hugovk, I could not cleanly backport this to 3.14 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.14 

@miss-islington-app
Copy link

Sorry, @hugovk, I could not cleanly backport this to 3.13 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.13 

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026
(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
@bedevere-app
Copy link

GH-143797 is a backport of this pull request to the 3.14 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.14 bugs and security fixes label Jan 13, 2026
@bedevere-app
Copy link

GH-143798 is a backport of this pull request to the 3.13 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.13 bugs and security fixes label Jan 13, 2026
@hugovk
Copy link
MemberAuthor

And we need to keep the CI for security branches updated as well, will add those.

@hugovkhugovk added needs backport to 3.10 only security fixes needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes labels Jan 13, 2026
@miss-islington-app
Copy link

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.10.
🐍🍒⛏🤖

@miss-islington-app
Copy link

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.11.
🐍🍒⛏🤖

@miss-islington-app
Copy link

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.12.
🐍🍒⛏🤖

@miss-islington-app
Copy link

Sorry, @hugovk, I could not cleanly backport this to 3.10 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.10 

@miss-islington-app
Copy link

Sorry, @hugovk, I could not cleanly backport this to 3.11 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.11 

@miss-islington-app
Copy link

Sorry, @hugovk, I could not cleanly backport this to 3.12 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.12 

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026
(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
@bedevere-app
Copy link

GH-143801 is a backport of this pull request to the 3.12 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.12 only security fixes label Jan 13, 2026
hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026
(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
@bedevere-app
Copy link

GH-143802 is a backport of this pull request to the 3.11 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.11 only security fixes label Jan 13, 2026
@bedevere-app
Copy link

GH-143803 is a backport of this pull request to the 3.10 branch.

@bedevere-appbedevere-appbot removed the needs backport to 3.10 only security fixes label Jan 13, 2026
hugovk added a commit that referenced this pull request Jan 13, 2026
hugovk added a commit that referenced this pull request Jan 13, 2026
hugovk added a commit that referenced this pull request Jan 13, 2026
hugovk added a commit that referenced this pull request Jan 13, 2026
hugovk added a commit that referenced this pull request Jan 13, 2026
@bedevere-bot
Copy link

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot s390x RHEL9 Refleaks 3.11 (tier-3) has failed when building commit cf039bc.

What do you need to do:

  1. Don't panic.
  2. Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
  3. Go to the page of the buildbot that failed (https://buildbot.python.org/#/builders/1586/builds/83) and take a look at the build logs.
  4. Check if the failure is related to this commit (cf039bc) or if it is a false positive.
  5. If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/#/builders/1586/builds/83

Failed tests:

  • test_typing
  • test_ssl

Failed subtests:

  • test_get_server_certificate_timeout - test.test_ssl.SimpleBackgroundTests.test_get_server_certificate_timeout

Test leaking resources:

  • test_typing: memory blocks

Summary of the results of the build (if available):

==

Click to see traceback logs
Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:1016) k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016) k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLEOFError: [SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1016) k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016) connection timeout TimeoutError('timed out') k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2563, in run msg =self.read() ^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2540, in read returnself.sslconn.read() ^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1168, in read returnself._sslobj.read(len) ^^^^^^^^^^^^^^^^^^^^^^ ssl.SSLError: [SSL: PEER_DID_NOT_RETURN_A_CERTIFICATE] peer did not return a certificate (_ssl.c:2590) k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016) connection timeout TimeoutError('timed out') k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016) k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016) server: new connection from ('127.0.0.1', 46548) server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256) Connection reset by peer: ('127.0.0.1', 46548) k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: NO_SUITABLE_KEY_SHARE] no suitable key share (_ssl.c:1016) connection timeout TimeoutError('timed out') k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2262, in test_get_server_certificate_timeoutwithself.assertRaises(socket.timeout): AssertionError: TimeoutError not raised Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016) k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016) connection timeout TimeoutError('timed out') k Traceback (most recent call last): File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn self.sslconn =self.server.context.wrap_socket( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket returnself.sslsocket_class._create( ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create self.do_handshake() File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake self._sslobj.do_handshake() ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016) connection timeout TimeoutError('timed out') connection timeout TimeoutError('timed out') k 

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

infraCI, GitHub Actions, buildbots, Dependabot, etc.skip issueskip news

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@hugovk@bedevere-bot@ezio-melotti@StanFromIreland