Discharge7443/python
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cherry pick python updates for last universal release

Browse Source
This commit is contained in:
Erik Gomez
2026-05-12 10:54:52 -05:00
parent 59e63bc220
commit 553880e3d9
7 changed files with 164 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/build_python_3.10.yml
+6 -2
View File
@@ -39,6 +39,7 @@ jobs:
- name: Run build package script
run: ./build_python_framework_pkgs.zsh "$TYPE" "$DEV_INSTALLER_ID" "$DEV_APPLICATION_ID" "$PYTHON_VERSION" "$PYTHON_MAJOR_VERSION" "${NOTARY_APP_PASSWORD}"
--xcode-path "/Applications/Xcode_15.2.app"
- name: get environment variables
id: get_env_var
@@ -75,14 +76,17 @@ jobs:
The python org [does not provide macOS packages for Python 3.10.12 and higher](https://www.python.org/downloads/release/python-31012/). This means that this project cannot use the most recent version of Python 3.10 with all security updates. Proceed with caution when using this release.
> According to the release calendar specified in PEP 619, Python 3.10 is now in the "security fixes only" stage of its life cycle: the 3.10 branch only accepts security fixes and releases of those are made irregularly in source-only form until October 2026. Python 3.10 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.10.11 was the last full bugfix release of Python 3.10 with binary installers.
## Final Release
**This is the final release of the Python 3.10 framework.** Python 3.10 is in security-fixes-only status and python.org has not published a macOS installer past 3.10.11. Future framework updates will target Python 3.11 and newer. Plan your migration.
${{ steps.changelog.outputs.changelog }}
# Flavors of Python
At this time, the automated build process will **only** create the Recommended package
## Recommended
This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require.
This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications.
## Signing/Notarization
The signed package is fully notarized, including the Python.framework file
.github/workflows/build_python_3.11.yml
+5 -4
View File
@@ -5,7 +5,7 @@ env:
DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)"
DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)"
NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }}
PYTHON_VERSION: "3.11.7"
PYTHON_VERSION: "3.11.9"
PYTHON_MAJOR_VERSION: "3.11"
on:
@@ -66,18 +66,19 @@ jobs:
Python ${{env.PYTHON_VERSION}} Framework
## Changes
- Upgraded Python to 3.11.7
- Upgraded Python to 3.11.9
**Note: Some of these updates may have breaking changes. Always test your code before deploying to production!**
Please see the `requirements_recommended.txt` for the current libraries being used.
${{ steps.changelog.outputs.changelog }}
## Final Release
**This is the final release of the Python 3.11 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon.
# Flavors of Python
At this time, the automated build process will **only** create the Recommended package
## Recommended
This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require.
This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications.
## Signing/Notarization
The signed package is fully notarized, including the Python.framework file
.github/workflows/build_python_3.12.yml
+5 -4
View File
@@ -5,7 +5,7 @@ env:
DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)"
DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)"
NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }}
PYTHON_VERSION: "3.12.1"
PYTHON_VERSION: "3.12.10"
PYTHON_MAJOR_VERSION: "3.12"
on:
@@ -66,18 +66,19 @@ jobs:
Python ${{env.PYTHON_VERSION}} Framework
## Changes
- Upgraded Python to 3.12.1
- Upgraded Python to 3.12.10
**Note: Some of these updates may have breaking changes. Always test your code before deploying to production!**
Please see the `requirements_recommended.txt` for the current libraries being used.
${{ steps.changelog.outputs.changelog }}
## Final Release
**This is the final release of the Python 3.12 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon.
# Flavors of Python
At this time, the automated build process will **only** create the Recommended package
## Recommended
This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require.
This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications.
## Signing/Notarization
The signed package is fully notarized, including the Python.framework file
.github/workflows/build_python_3.13.yml
+5 -4
View File
@@ -5,7 +5,7 @@ env:
DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)"
DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)"
NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }}
PYTHON_VERSION: "3.13.5"
PYTHON_VERSION: "3.13.13"
PYTHON_MAJOR_VERSION: "3.13"
on:
@@ -66,18 +66,19 @@ jobs:
Python ${{env.PYTHON_VERSION}} Framework
## Changes
- Upgraded Python to 3.13.5
- Upgraded Python to 3.13.13
**Note: Some of these updates may have breaking changes. Always test your code before deploying to production!**
Please see the `requirements_recommended.txt` for the current libraries being used.
${{ steps.changelog.outputs.changelog }}
## Final Release
**This is the final release of the Python 3.13 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon.
# Flavors of Python
At this time, the automated build process will **only** create the Recommended package
## Recommended
This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require.
This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications.
## Signing/Notarization
The signed package is fully notarized, including the Python.framework file
.github/workflows/build_python_3.14.yml
+99
View File
@@ -0,0 +1,99 @@
name: Build Python 3.14
env:
TYPE: "recommended"
DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)"
DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)"
NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }}
PYTHON_VERSION: "3.14.5"
PYTHON_MAJOR_VERSION: "3.14"
on:
workflow_dispatch:
pull_request:
jobs:
build:
runs-on: macos-13
steps:
- name: Checkout python repo
uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
with:
fetch-depth: 0
- name: Install Apple Developer ID Application certificates
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
with:
keychain-password: ${{ github.run_id }}
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
- name: Install Apple Developer ID Installer certificates
uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0
with:
create-keychain: false # do not create a new keychain for this value
keychain-password: ${{ github.run_id }}
p12-file-base64: ${{ secrets.PKG_CERTIFICATES_P12_MAOS }}
p12-password: ${{ secrets.PKG_CERTIFICATES_P12_PASSWORD_MAOS }}
- name: Run build package script
run: |
./build_python_framework_pkgs.zsh \
--python-version "$PYTHON_VERSION" \
--installer-id "$DEV_INSTALLER_ID" \
--application-id "$DEV_APPLICATION_ID" \
--notary-password "$NOTARY_APP_PASSWORD" \
--xcode-path "/Applications/Xcode_15.2.app"
- name: get environment variables
id: get_env_var
run: |
echo "PYTHON_BUILD_VERSION=$(/bin/cat ./build_info.txt)" >> $GITHUB_ENV
- name: Generate changelog
id: changelog
uses: metcalfc/changelog-generator@afdcb9470aebdb2252c0c95a1c130723c9e21f3a # v4.1
with:
myToken: ${{ secrets.GITHUB_TOKEN }}
reverse: 'true'
- name: Create Release
id: create_release
uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15
with:
name: Python ${{env.PYTHON_BUILD_VERSION}}
tag_name: v${{env.PYTHON_BUILD_VERSION}}
draft: false
prerelease: true
token: ${{ secrets.GITHUB_TOKEN }}
body: |
# Notes
Python ${{env.PYTHON_VERSION}} Framework
## Changes
- Upgraded Python to 3.14.5
**Note: Some of these updates may have breaking changes. Always test your code before deploying to production!**
Please see the `requirements_recommended.txt` for the current libraries being used.
## Final Release
**This is the final release of the Python 3.14 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon.
${{ steps.changelog.outputs.changelog }}
# Flavors of Python
At this time, the automated build process will **only** create the Recommended package
## Recommended
This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications.
## Signing/Notarization
The signed package is fully notarized, including the Python.framework file
files: ${{github.workspace}}/outputs/*.pkg
- name: Upload packages
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
with:
name: packages
path: outputs/
.github/workflows/build_python_3.9.yml
+5 -2
View File
@@ -75,14 +75,17 @@ jobs:
The python org [does not provide macOS packages for Python 3.9.14 and higher](https://www.python.org/downloads/release/python-3914/). This means that this project cannot use the most recent version of Python 3.9 with all security updates. Proceed with caution when using this release.
> According to the release calendar specified in PEP 596, Python 3.9 is now in the "security fixes only" stage of its life cycle: the 3.9 branch only accepts security fixes and releases of those are made irregularly in source-only form until October 2025. Python 3.9 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.9.13 was the last full bugfix release of Python 3.9 with binary installers.
## Final Release
**This is the final release of the Python 3.9 framework.** Python 3.9 reached end-of-life in October 2025 and python.org has not published a macOS installer past 3.9.13. Future framework updates will target Python 3.11 and newer. Plan your migration.
${{ steps.changelog.outputs.changelog }}
# Flavors of Python
At this time, the automated build process will **only** create the Recommended package
## Recommended
This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require.
This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications.
## Signing/Notarization
The signed package is fully notarized, including the Python.framework file