Bump GitHub Actions #143757

hugovk · 2026-01-12T20:39:46Z

Manually (well, semi-manually), because Dependabot has been broken for 16 months:

StanFromIreland

LGTM

miss-islington-app · 2026-01-13T13:43:30Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.13, 3.14.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:43:32Z

Sorry, @hugovk, I could not cleanly backport this to 3.14 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.14

miss-islington-app · 2026-01-13T13:43:36Z

Sorry, @hugovk, I could not cleanly backport this to 3.13 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.13

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <[email protected]>

bedevere-app · 2026-01-13T13:50:17Z

GH-143797 is a backport of this pull request to the 3.14 branch.

bedevere-app · 2026-01-13T13:51:41Z

GH-143798 is a backport of this pull request to the 3.13 branch.

hugovk · 2026-01-13T13:52:30Z

And we need to keep the CI for security branches updated as well, will add those.

miss-islington-app · 2026-01-13T13:52:39Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.10.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:52:39Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.11.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:52:40Z

Thanks @hugovk for the PR 🌮🎉.. I'm working now to backport this PR to: 3.12.
🐍🍒⛏🤖

miss-islington-app · 2026-01-13T13:52:44Z

Sorry, @hugovk, I could not cleanly backport this to 3.10 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.10

miss-islington-app · 2026-01-13T13:52:48Z

Sorry, @hugovk, I could not cleanly backport this to 3.11 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.11

miss-islington-app · 2026-01-13T13:52:52Z

Sorry, @hugovk, I could not cleanly backport this to 3.12 due to a conflict.
Please backport using cherry_picker on command line.

cherry_picker 80e9eaf071ffdcff122b7e2327379c3dc4f3eb79 3.12

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <[email protected]>

bedevere-app · 2026-01-13T13:55:45Z

GH-143801 is a backport of this pull request to the 3.12 branch.

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <[email protected]>

bedevere-app · 2026-01-13T13:57:29Z

GH-143802 is a backport of this pull request to the 3.11 branch.

bedevere-app · 2026-01-13T13:59:15Z

GH-143803 is a backport of this pull request to the 3.10 branch.

bedevere-bot · 2026-01-13T17:21:14Z

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Hi! The buildbot s390x RHEL9 Refleaks 3.11 (tier-3) has failed when building commit cf039bc.

What do you need to do:

Don't panic.
Check the buildbot page in the devguide if you don't know what the buildbots are or how they work.
Go to the page of the buildbot that failed (https://buildbot.python.org/#/builders/1586/builds/83) and take a look at the build logs.
Check if the failure is related to this commit (cf039bc) or if it is a false positive.
If the failure is related to this commit, please, reflect that on the issue and make a new Pull Request with a fix.

You can take a look at the buildbot page here:

https://buildbot.python.org/#/builders/1586/builds/83

Failed tests:

test_typing
test_ssl

Failed subtests:

test_get_server_certificate_timeout - test.test_ssl.SimpleBackgroundTests.test_get_server_certificate_timeout

Test leaking resources:

test_typing: memory blocks

Summary of the results of the build (if available):

==

Click to see traceback logs

Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:1016)
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLEOFError: [SSL: UNEXPECTED_EOF_WHILE_READING] EOF occurred in violation of protocol (_ssl.c:1016)
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate (_ssl.c:1016)
 connection timeout TimeoutError('timed out')
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2563, in run
    msg = self.read()
          ^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2540, in read
    return self.sslconn.read()
           ^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1168, in read
    return self._sslobj.read(len)
           ^^^^^^^^^^^^^^^^^^^^^^
 ssl.SSLError: [SSL: PEER_DID_NOT_RETURN_A_CERTIFICATE] peer did not return a certificate (_ssl.c:2590)
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016)
 connection timeout TimeoutError('timed out')
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016)
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016)
 server:  new connection from ('127.0.0.1', 46548)
 server: connection cipher is now ('TLS_AES_256_GCM_SHA384', 'TLSv1.3', 256)
 Connection reset by peer: ('127.0.0.1', 46548)
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: NO_SUITABLE_KEY_SHARE] no suitable key share (_ssl.c:1016)
 connection timeout TimeoutError('timed out')
k


Traceback (most recent call last):
  File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2262, in test_get_server_certificate_timeout
    with self.assertRaises(socket.timeout):
AssertionError: TimeoutError not raised


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1016)
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016)
 connection timeout TimeoutError('timed out')
k


Traceback (most recent call last):
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/test/test_ssl.py", line 2479, in wrap_conn
    self.sslconn = self.server.context.wrap_socket(
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 517, in wrap_socket
    return self.sslsocket_class._create(
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1104, in _create
    self.do_handshake()
   File "/home/buildbot/buildarea/3.11.cstratak-rhel9-s390x.refleak/build/Lib/ssl.py", line 1382, in do_handshake
    self._sslobj.do_handshake()
 ssl.SSLError: [SSL: SSLV3_ALERT_BAD_CERTIFICATE] ssl/tls alert bad certificate (_ssl.c:1016)
 connection timeout TimeoutError('timed out')
 connection timeout TimeoutError('timed out')
k

Bump GitHub Actions

b7f7f78

hugovk requested review from AA-Turner and ezio-melotti as code owners January 12, 2026 20:39

bedevere-app bot added the awaiting core review label Jan 12, 2026

hugovk added skip issue skip news needs backport to 3.13 bugs and security fixes needs backport to 3.14 bugs and security fixes infra CI, GitHub Actions, buildbots, Dependabot, etc. and removed awaiting core review labels Jan 12, 2026

StanFromIreland approved these changes Jan 12, 2026

View reviewed changes

bedevere-app bot added the awaiting core review label Jan 12, 2026

github/codeql-action/upload-sarif@v4

15df753

hugovk mentioned this pull request Jan 12, 2026

gh-69405: Add check for idle's help.html to CI #143742

Open

ezio-melotti approved these changes Jan 13, 2026

View reviewed changes

bedevere-app bot added awaiting merge and removed awaiting core review labels Jan 13, 2026

hugovk merged commit 80e9eaf into python:main Jan 13, 2026
86 checks passed

hugovk deleted the bump-gha branch January 13, 2026 13:43

bedevere-app bot removed the awaiting merge label Jan 13, 2026

miss-islington-app bot assigned hugovk Jan 13, 2026

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026

[3.14] Bump GitHub Actions (pythonGH-143757)

1694844

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <[email protected]>

bedevere-app bot removed the needs backport to 3.14 bugs and security fixes label Jan 13, 2026

bedevere-app bot removed the needs backport to 3.13 bugs and security fixes label Jan 13, 2026

hugovk added needs backport to 3.10 only security fixes needs backport to 3.11 only security fixes needs backport to 3.12 only security fixes labels Jan 13, 2026

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026

[3.13] Bump GitHub Actions (pythonGH-143757)

bafcc76

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <[email protected]>

bedevere-app bot removed the needs backport to 3.12 only security fixes label Jan 13, 2026

hugovk added a commit to hugovk/cpython that referenced this pull request Jan 13, 2026

[3.12] Bump GitHub Actions (pythonGH-143757)

9dfd332

(cherry picked from commit 80e9eaf) Co-authored-by: Hugo van Kemenade <[email protected]>

bedevere-app bot removed the needs backport to 3.11 only security fixes label Jan 13, 2026

bedevere-app bot removed the needs backport to 3.10 only security fixes label Jan 13, 2026

hugovk added a commit that referenced this pull request Jan 13, 2026

[3.14] Bump GitHub Actions (GH-143757) (#143797)

57d0e21

hugovk added a commit that referenced this pull request Jan 13, 2026

[3.12] Bump GitHub Actions (GH-143757) (#143801)

64745cf

hugovk added a commit that referenced this pull request Jan 13, 2026

[3.11] Bump GitHub Actions (GH-143757) (#143802)

cf039bc

hugovk added a commit that referenced this pull request Jan 13, 2026

[3.10] Bump GitHub Actions (GH-143757) (#143803)

f12346d

hugovk added a commit that referenced this pull request Jan 13, 2026

[3.13] Bump GitHub Actions (GH-143757) (#143798)

b6c6c47

Uh oh!

Bump GitHub Actions #143757

Bump GitHub Actions #143757

Uh oh!

Conversation

hugovk commented Jan 12, 2026

Uh oh!

StanFromIreland left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

bedevere-app bot commented Jan 13, 2026

Uh oh!

bedevere-app bot commented Jan 13, 2026

Uh oh!

hugovk commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

miss-islington-app bot commented Jan 13, 2026

Uh oh!

bedevere-app bot commented Jan 13, 2026

Uh oh!

bedevere-app bot commented Jan 13, 2026

Uh oh!

bedevere-app bot commented Jan 13, 2026

Uh oh!

bedevere-bot commented Jan 13, 2026

⚠️⚠️⚠️ Buildbot failure ⚠️⚠️⚠️

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants