diff --git a/.github/workflows/build_python_3.10.yml b/.github/workflows/build_python_3.10.yml index 4db841c..f205a5c 100644 --- a/.github/workflows/build_python_3.10.yml +++ b/.github/workflows/build_python_3.10.yml @@ -39,6 +39,7 @@ jobs: - name: Run build package script run: ./build_python_framework_pkgs.zsh "$TYPE" "$DEV_INSTALLER_ID" "$DEV_APPLICATION_ID" "$PYTHON_VERSION" "$PYTHON_MAJOR_VERSION" "${NOTARY_APP_PASSWORD}" + --xcode-path "/Applications/Xcode_15.2.app" - name: get environment variables id: get_env_var @@ -75,14 +76,17 @@ jobs: The python org [does not provide macOS packages for Python 3.10.12 and higher](https://www.python.org/downloads/release/python-31012/). This means that this project cannot use the most recent version of Python 3.10 with all security updates. Proceed with caution when using this release. > According to the release calendar specified in PEP 619, Python 3.10 is now in the "security fixes only" stage of its life cycle: the 3.10 branch only accepts security fixes and releases of those are made irregularly in source-only form until October 2026. Python 3.10 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.10.11 was the last full bugfix release of Python 3.10 with binary installers. - + + ## Final Release + **This is the final release of the Python 3.10 framework.** Python 3.10 is in security-fixes-only status and python.org has not published a macOS installer past 3.10.11. Future framework updates will target Python 3.11 and newer. Plan your migration. + ${{ steps.changelog.outputs.changelog }} # Flavors of Python At this time, the automated build process will **only** create the Recommended package ## Recommended - This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require. + This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications. ## Signing/Notarization The signed package is fully notarized, including the Python.framework file diff --git a/.github/workflows/build_python_3.11.yml b/.github/workflows/build_python_3.11.yml index 6b32a97..a4ba081 100644 --- a/.github/workflows/build_python_3.11.yml +++ b/.github/workflows/build_python_3.11.yml @@ -5,7 +5,7 @@ env: DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)" DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)" NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }} - PYTHON_VERSION: "3.11.7" + PYTHON_VERSION: "3.11.9" PYTHON_MAJOR_VERSION: "3.11" on: @@ -66,18 +66,19 @@ jobs: Python ${{env.PYTHON_VERSION}} Framework ## Changes - - Upgraded Python to 3.11.7 + - Upgraded Python to 3.11.9 **Note: Some of these updates may have breaking changes. Always test your code before deploying to production!** Please see the `requirements_recommended.txt` for the current libraries being used. - ${{ steps.changelog.outputs.changelog }} + ## Final Release + **This is the final release of the Python 3.11 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon. # Flavors of Python At this time, the automated build process will **only** create the Recommended package ## Recommended - This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require. + This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications. ## Signing/Notarization The signed package is fully notarized, including the Python.framework file diff --git a/.github/workflows/build_python_3.12.yml b/.github/workflows/build_python_3.12.yml index c881e23..2543a40 100644 --- a/.github/workflows/build_python_3.12.yml +++ b/.github/workflows/build_python_3.12.yml @@ -5,7 +5,7 @@ env: DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)" DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)" NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }} - PYTHON_VERSION: "3.12.1" + PYTHON_VERSION: "3.12.10" PYTHON_MAJOR_VERSION: "3.12" on: @@ -66,18 +66,19 @@ jobs: Python ${{env.PYTHON_VERSION}} Framework ## Changes - - Upgraded Python to 3.12.1 + - Upgraded Python to 3.12.10 **Note: Some of these updates may have breaking changes. Always test your code before deploying to production!** Please see the `requirements_recommended.txt` for the current libraries being used. - ${{ steps.changelog.outputs.changelog }} + ## Final Release + **This is the final release of the Python 3.12 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon. # Flavors of Python At this time, the automated build process will **only** create the Recommended package ## Recommended - This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require. + This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications. ## Signing/Notarization The signed package is fully notarized, including the Python.framework file diff --git a/.github/workflows/build_python_3.13.yml b/.github/workflows/build_python_3.13.yml index a85cc01..5191e2c 100644 --- a/.github/workflows/build_python_3.13.yml +++ b/.github/workflows/build_python_3.13.yml @@ -5,7 +5,7 @@ env: DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)" DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)" NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }} - PYTHON_VERSION: "3.13.5" + PYTHON_VERSION: "3.13.13" PYTHON_MAJOR_VERSION: "3.13" on: @@ -66,18 +66,19 @@ jobs: Python ${{env.PYTHON_VERSION}} Framework ## Changes - - Upgraded Python to 3.13.5 + - Upgraded Python to 3.13.13 **Note: Some of these updates may have breaking changes. Always test your code before deploying to production!** Please see the `requirements_recommended.txt` for the current libraries being used. - ${{ steps.changelog.outputs.changelog }} + ## Final Release + **This is the final release of the Python 3.13 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon. # Flavors of Python At this time, the automated build process will **only** create the Recommended package ## Recommended - This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require. + This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications. ## Signing/Notarization The signed package is fully notarized, including the Python.framework file diff --git a/.github/workflows/build_python_3.14.yml b/.github/workflows/build_python_3.14.yml new file mode 100644 index 0000000..4ef66f8 --- /dev/null +++ b/.github/workflows/build_python_3.14.yml @@ -0,0 +1,99 @@ +name: Build Python 3.14 + +env: + TYPE: "recommended" + DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)" + DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)" + NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }} + PYTHON_VERSION: "3.14.5" + PYTHON_MAJOR_VERSION: "3.14" + +on: + workflow_dispatch: + pull_request: + +jobs: + build: + runs-on: macos-13 + + steps: + - name: Checkout python repo + uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0 + with: + fetch-depth: 0 + + - name: Install Apple Developer ID Application certificates + uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0 + with: + keychain-password: ${{ github.run_id }} + p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }} + p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }} + + - name: Install Apple Developer ID Installer certificates + uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0 + with: + create-keychain: false # do not create a new keychain for this value + keychain-password: ${{ github.run_id }} + p12-file-base64: ${{ secrets.PKG_CERTIFICATES_P12_MAOS }} + p12-password: ${{ secrets.PKG_CERTIFICATES_P12_PASSWORD_MAOS }} + + - name: Run build package script + run: | + ./build_python_framework_pkgs.zsh \ + --python-version "$PYTHON_VERSION" \ + --installer-id "$DEV_INSTALLER_ID" \ + --application-id "$DEV_APPLICATION_ID" \ + --notary-password "$NOTARY_APP_PASSWORD" \ + --xcode-path "/Applications/Xcode_15.2.app" + + - name: get environment variables + id: get_env_var + run: | + echo "PYTHON_BUILD_VERSION=$(/bin/cat ./build_info.txt)" >> $GITHUB_ENV + + - name: Generate changelog + id: changelog + uses: metcalfc/changelog-generator@afdcb9470aebdb2252c0c95a1c130723c9e21f3a # v4.1 + with: + myToken: ${{ secrets.GITHUB_TOKEN }} + reverse: 'true' + + - name: Create Release + id: create_release + uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15 + with: + name: Python ${{env.PYTHON_BUILD_VERSION}} + tag_name: v${{env.PYTHON_BUILD_VERSION}} + draft: false + prerelease: true + token: ${{ secrets.GITHUB_TOKEN }} + body: | + # Notes + Python ${{env.PYTHON_VERSION}} Framework + + ## Changes + - Upgraded Python to 3.14.5 + **Note: Some of these updates may have breaking changes. Always test your code before deploying to production!** + + Please see the `requirements_recommended.txt` for the current libraries being used. + + ## Final Release + **This is the final release of the Python 3.14 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon. + + ${{ steps.changelog.outputs.changelog }} + + # Flavors of Python + At this time, the automated build process will **only** create the Recommended package + + ## Recommended + This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications. + + ## Signing/Notarization + The signed package is fully notarized, including the Python.framework file + files: ${{github.workspace}}/outputs/*.pkg + + - name: Upload packages + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + with: + name: packages + path: outputs/ diff --git a/.github/workflows/build_python_3.9.yml b/.github/workflows/build_python_3.9.yml index fd9d592..fe2f069 100644 --- a/.github/workflows/build_python_3.9.yml +++ b/.github/workflows/build_python_3.9.yml @@ -75,14 +75,17 @@ jobs: The python org [does not provide macOS packages for Python 3.9.14 and higher](https://www.python.org/downloads/release/python-3914/). This means that this project cannot use the most recent version of Python 3.9 with all security updates. Proceed with caution when using this release. > According to the release calendar specified in PEP 596, Python 3.9 is now in the "security fixes only" stage of its life cycle: the 3.9 branch only accepts security fixes and releases of those are made irregularly in source-only form until October 2025. Python 3.9 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.9.13 was the last full bugfix release of Python 3.9 with binary installers. - + + ## Final Release + **This is the final release of the Python 3.9 framework.** Python 3.9 reached end-of-life in October 2025 and python.org has not published a macOS installer past 3.9.13. Future framework updates will target Python 3.11 and newer. Plan your migration. + ${{ steps.changelog.outputs.changelog }} # Flavors of Python At this time, the automated build process will **only** create the Recommended package ## Recommended - This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require. + This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications. ## Signing/Notarization The signed package is fully notarized, including the Python.framework file diff --git a/requirements_recommended.txt b/requirements_recommended.txt index 4b45794..9ef1479 100644 --- a/requirements_recommended.txt +++ b/requirements_recommended.txt @@ -1,43 +1,56 @@ asn1crypto==1.5.1 aspy.yaml==1.3.0 -attrs==25.3.0 -black==25.1.0 +attrs==26.1.0 +black==26.3.1; python_version >= "3.10" +black==25.11.0; python_version < "3.10" --no-binary black -certifi==2025.6.15 -cffi==1.17.1 +certifi==2026.4.22 +cffi==2.0.0 --no-binary cffi -cfgv==3.4.0 -charset-normalizer==3.4.2 +cfgv==3.5.0; python_version >= "3.10" +cfgv==3.4.0; python_version < "3.10" +charset-normalizer==3.4.7 --no-binary charset-normalizer -click==8.2.1 -distlib==0.3.9 +click==8.3.3; python_version >= "3.10" +click==8.1.8; python_version < "3.10" +distlib==0.4.0 docklib==2.0.0 entrypoints==0.4 -filelock==3.18.0 +filelock==3.29.0; python_version >= "3.10" +filelock==3.19.1; python_version < "3.10" flake8==7.3.0 -flake8-bugbear==24.12.12 -identify==2.6.12 -idna==3.10 -isort==6.0.1 +flake8-bugbear==25.11.29; python_version >= "3.10" +flake8-bugbear==24.12.12; python_version < "3.10" +identify==2.6.19; python_version >= "3.10" +identify==2.6.15; python_version < "3.10" +idna==3.14 +isort==8.0.1; python_version >= "3.10" +isort==6.1.0; python_version < "3.10" mccabe==0.7.0 mypy-extensions==1.1.0 -nodeenv==1.9.1 -packaging==25.0 -pathspec==0.12.1 -platformdirs==4.3.8 -pre-commit==4.2.0 +nodeenv==1.10.0 +packaging==26.2 +pathspec==1.1.1 +platformdirs==4.9.6; python_version >= "3.10" +platformdirs==4.4.0; python_version < "3.10" +pre-commit==4.6.0; python_version >= "3.10" +pre-commit==4.3.0; python_version < "3.10" pycodestyle==2.14.0 -pycparser==2.22 +pycparser==3.0; python_version >= "3.10" +pycparser==2.23; python_version < "3.10" pyflakes==3.4.0 -pyobjc==11.1 -PyYAML==6.0.2 +pyobjc==12.1; python_version >= "3.10" +pyobjc==11.1; python_version < "3.10" +PyYAML==6.0.3 --no-binary PyYAML -requests==2.32.4 +requests==2.34.0; python_version >= "3.10" +requests==2.32.5; python_version < "3.10" six==1.17.0 tokenize-rt==6.2.0 -tomli==2.2.1 +tomli==2.4.1 --no-binary tomli -urllib3==2.5.0 -virtualenv==20.31.2 -xattr==1.1.4 +urllib3==2.7.0; python_version >= "3.10" +urllib3==2.6.3; python_version < "3.10" +virtualenv==21.3.2 +xattr==1.3.0 --no-binary xattr