[AUH] python3: upgrading to 3.14.8 SUCCEEDED

From: Upgrade Helper <auh@yoctoproject.org>

Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *python3* to *3.14.8* has Succeeded.

Next steps:
    - apply the patch: git am 0001-python3-upgrade-3.14.7-3.14.8.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From 77b83de4ac0e05ce4922f563b4d339cd1c5bdca4 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Thu, 1 Oct 2026 05:43:36 +0000
Subject: [PATCH] python3: upgrade 3.14.7 -> 3.14.8

What's New in Python 3.14.8 final?
==================================

*Release date: 2026-09-30*

Security
--------

- gh-158446: Fix a crash or incorrect output that could occur when
  formatting a :class:`float` or :class:`complex` with a precision close to
  the platform's ``INT_MAX``.  :c:func:`PyOS_double_to_string` now raises
  :exc:`ValueError` for any precision of that magnitude, regardless of
  presentation type or value, as the format string parsers already did for
  precisions above ``INT_MAX``.

- gh-156793: :mod:`asyncio`: :meth:`loop.start_tls()
  <asyncio.loop.start_tls>` and :meth:`loop.create_connection()
  <asyncio.loop.create_connection>` now validate the *server_hostname*
  argument if an :class:`ssl.SSLContext` is passed with *check_hostname* set
  to ``True``.

- gh-156793: :meth:`ssl.SSLContext.wrap_bio` now validates its
  *server_side*, *server_hostname* and *session* arguments similar to
  :meth:`ssl.SSLContext.wrap_socket`.

  In particular, a context with :attr:`~ssl.SSLContext.check_hostname`
  enabled and no *server_hostname* passed to :meth:`!wrap_bio` now raises
  :exc:`ValueError` instead of completing a handshake that verified the
  certificate chain without verifying the peer's identity, with no
  indication that the check had been skipped.

- gh-157953: Update bundled `libexpat <https://libexpat.github.io/>`_ to
  version 2.8.5.

- gh-156002: Bound the amount of data :mod:`zipfile` decompresses per read
  for members compressed with bzip2, LZMA, or Zstandard, matching the
  existing limit for deflate. A small archive member could previously expand
  into an unbounded allocation even when read in small chunks.

- gh-155999: Fix the :mod:`tarfile` ``tar`` and ``data`` extraction filters
  creating directories outside the destination for members whose name leaves
  the destination and returns to it, such as ``../evil/../dest/sub/file``.
  The containment check used the resolved path, but intermediate directories
  were created from the name as given.

- gh-156293: Fix a crash in :mod:`ssl` when an
  :attr:`~ssl.SSLContext.sni_callback` switches a connection to another
  :class:`~ssl.SSLContext` and the context that carries the callback is no
  longer referenced by the application. Servers that keep their
  ``sni_callback`` context alive (the usual case when it wraps the listening
  socket or is stored on the server object) were not affected. This
  addresses :cve:`2026-19445`.

- gh-155292: Change the :mod:`stringprep` module and :mod:`encodings.idna`
  codec to not consider Unicode codepoint attributes beyond those defined in
  :rfc:`3454`.

- gh-155694: Fix :cve:`2026-15806` by scoping
  :class:`~urllib.request.HTTPPasswordMgr` credentials to the URL scheme,
  preventing credentials stored for an HTTPS URL from being used for a
  matching HTTP URL, while URIs without a scheme continue to match any
  scheme.

Core and Builtins
-----------------

- gh-158364: Fix crash when :func:`sys._current_frames` or
  :func:`sys._current_exceptions` is called while another interpreter is
  running.

- gh-158254: Reverse iterators over a :class:`dict` and its views now raise
  :exc:`RuntimeError` if the dictionary's keys change during iteration, like
  forward iterators, instead of yielding entries for the new keys.

- gh-157838: Merge biased reference counts on behalf of threads that are
  detached instead of waiting for them to attach again, in the free-threaded
  build.

- gh-157378: Fix ``SyntaxError.offset`` and ``SyntaxError.end_offset`` for
  the "Non-UTF-8 code starting with ..." error when a non-ASCII character
  precedes the invalid byte on the same line. Patch by Shamil Abdulaev.

- gh-156762: Fix undefined behaviour in :class:`operator.methodcaller`: its
  :c:member:`~PyTypeObject.tp_clear` slot function returned ``void`` instead
  of ``int``, so the garbage collector called it through an incompatible
  function type. Patched by Shamil Abdulaev.

- gh-157377: Fix :func:`gc.get_count` on the free-threaded build resetting
  the thread-local allocation counter that schedules automatic garbage
  collection. A thread that called it while allocating could prevent cyclic
  garbage from ever being collected.

- gh-156091: Fix a crash when compiling deeply nested inlined list, set, or
  dict comprehensions. A :exc:`SyntaxError` is now raised when the nesting
  exceeds the compiler's static block limit.

- gh-156894: Fix the position of syntax errors which cover a range if the
  line contains non-ASCII characters before the error.

- gh-155525: Fix quadratic-time tokenization of modules containing many
  f-strings or t-strings.

- gh-156689: Fix an out-of-bounds read in :func:`compile` and
  :func:`ast.parse` when an AST object is passed with ``mode='func_type'``.

- gh-156371: Fix missing ``PyRefTracer_DESTROY`` events for trashcan
  deferred objects. Patch by Donghee Na.

- gh-156114: Fix a crash in the perf trampoline when a code object has a
  name or filename that cannot be encod

[Changelog truncated as it exceeds 5000 characters;
the full changelog can be found in an attachment to the AUH email]
---
 ...shebang-overflow-on-python-config.py.patch |  6 +--
 ...e-stdin-I-O-errors-same-way-as-maste.patch |  2 +-
 ...-use-prefix-value-from-build-configu.patch |  2 +-
 ...-qemu-wrapper-when-gathering-profile.patch |  6 +--
 ...est_sysconfig-for-posix_user-purelib.patch |  2 +-
 ...146207-Add-support-for-OpenSSL-4.0.0.patch | 42 +++++++++----------
 .../0001-prefer-valid-entrypoints.patch       |  2 +-
 ...g.py-use-platlibdir-also-for-purelib.patch |  2 +-
 ...le.py-correct-the-test-output-format.patch |  2 +-
 ...Update-_ssl._SSLSocket-for-OpenSSL-4.patch | 22 +++++-----
 ...utdown-test-in-test_ssl.test_got_eof.patch |  6 +--
 .../python/python3/makerace.patch             |  6 +--
 .../python/python3/valid-dists.patch          |  2 +-
 .../{python3_3.14.7.bb => python3_3.14.8.bb}  |  2 +-
 14 files changed, 52 insertions(+), 52 deletions(-)
 rename meta/recipes-devtools/python/{python3_3.14.7.bb => python3_3.14.8.bb} (99%)

Message ID	010101a0f6296539-d5cd290b-b68d-4632-a774-5263fa10249e-000000@us-west-2.amazonses.com
State	Under Review
Headers	show Return-Path: <auh@yoctoproject.org> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2492ECA5FD5 for <webhook@archiver.kernel.org>; Thu, 1 Oct 2026 06:31:53 +0000 (UTC) Received: from a27-193.smtp-out.us-west-2.amazonses.com (a27-193.smtp-out.us-west-2.amazonses.com [54.240.27.193]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.5329.1790836303927935797 for <openembedded-core@lists.openembedded.org>; Wed, 30 Sep 2026 23:31:44 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=DOllqnfY; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=Q3GKOZGc; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.193, mailfrom: 010101a0f6296539-d5cd290b-b68d-4632-a774-5263fa10249e-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1790836303; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=nARoviPZlz85OjLrnVsb9hZSrFyV6zxcVFBXxorZic8=; b=DOllqnfYshLsF3afARB1uzXGlITvZspEntvWpQo1gfWPa55nqjGXTxQ31TvGiqVE InGkAx91IwIJGvKIKe7cBpCUBZ03JFsAxUUD+qp1WorUUBUuYTzOBYlL/uWbtqYqc0b bKPVpLGuFeIPTo+xyJgJK+RXV5ZuHnzJP3shklwI= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1790836303; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=nARoviPZlz85OjLrnVsb9hZSrFyV6zxcVFBXxorZic8=; b=Q3GKOZGcJgomT/mTnu6arfyRSfoFR/RHD/uUvRYerghdkgTFARzExRhxvgEYpk40 Fuyitu43Ns97BtxyoVKJ6K4Jz6+COu+OA/eW4+ugufUqd+c5dEAz87rqD2yVNucD4gQ 1dW9+X10zKwK3l32Ugp/04yZxZaV/ExsqeXq6VJA= Content-Type: multipart/mixed; boundary="===============5485900956335931169==" MIME-Version: 1.0 From: auh@yoctoproject.org To: Trevor Gamblin <tgamblin@baylibre.com> Cc: openembedded-core@lists.openembedded.org Subject: [AUH] python3: upgrading to 3.14.8 SUCCEEDED Message-ID: <010101a0f6296539-d5cd290b-b68d-4632-a774-5263fa10249e-000000@us-west-2.amazonses.com> Date: Thu, 1 Oct 2026 06:31:43 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.10.01-54.240.27.193 List-Id: <openembedded-core.lists.openembedded.org> X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for <openembedded-core@lists.openembedded.org>; Thu, 01 Oct 2026 06:31:53 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/247006
Series	[AUH] python3: upgrading to 3.14.8 SUCCEEDED \| expand [AUH] python3: upgrading to 3.14.8 SUCCEEDED

[AUH] python3: upgrading to 3.14.8 SUCCEEDED

Commit Message

Patch