Skip to content

Bump semver compatible deps, restore Python CI - #520

Merged
cpu merged 4 commits into
rustls:mainfrom
cpu:ci/deps-bump
Aug 7, 2026
Merged

Bump semver compatible deps, restore Python CI#520
cpu merged 4 commits into
rustls:mainfrom
cpu:ci/deps-bump

Conversation

@cpu

@cpu cpu commented Aug 6, 2026

Copy link
Copy Markdown
Member
  • Updates Cargo semver. compat. deps
  • Updates requirements.txt Python deps (I was prodded into this by GitHub ("1 repository in your rustls organization might be affected by a security vulnerability in cryptography" for CVE-2026-69247).
  • Fixes a small Python API deprecation warning.
  • Restores some of the Python CI coverage. This was removed in tests: port client auth revocation tests to Rust #442 when some but not all of the Python tests were rewritten in Rust. We shouldn't remove the Python linting+diff check until there's no Python left in repo.

@cpu cpu self-assigned this Aug 6, 2026
@cpu cpu closed this Aug 7, 2026
@cpu cpu reopened this Aug 7, 2026
@codecov

codecov Bot commented Aug 7, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.61%. Comparing base (f221207) to head (a3eceae).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #520   +/-   ##
=======================================
  Coverage   97.61%   97.61%           
=======================================
  Files          20       20           
  Lines        4070     4070           
=======================================
  Hits         3973     3973           
  Misses         97       97           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

cpu added 4 commits August 7, 2026 09:45
Python 3.12+ deprecates datetime.utcfromtimestamp(). This commit adopts
the suggested replacement, a timezone-aware datetime.fromtimestamp()
with datetime.UTC.

The generated test files are unchanged.
The testgen.yml workflow was removed along with tests/generate.py when
the client auth revocation tests were ported to Rust, but the CRL test
generation scripts and requirements.txt remain in-tree.

This commit restores a trimmed down version of the workflow that
typechecks the scripts with mypy and enforces that the committed test
files continue to match what the scripts generate.

We can remove this when the last Python scripts are removed/replaced.
@cpu
cpu enabled auto-merge August 7, 2026 13:47
@cpu
cpu added this pull request to the merge queue Aug 7, 2026
Merged via the queue into rustls:main with commit 1bff41a Aug 7, 2026
24 checks passed
@cpu
cpu deleted the ci/deps-bump branch August 7, 2026 13:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants