Skip to content

chore(ci): run CI on Python 3.15 - #644

Merged
dmihalcik-virtru merged 1 commit into
mainfrom
chore-ci-python-315
Oct 13, 2026
Merged

dmihalcik-virtru merged 1 commit into
mainfrom
chore-ci-python-315

Conversation

@dmihalcik-virtru

@dmihalcik-virtru dmihalcik-virtru commented Oct 13, 2026 •

Copy link
Copy Markdown
Member

Follow-up to #640, which pinned `scriptcheck` to 3.14 after the CPython 3.15.0 release broke it.

Why it broke

The CI Python version wasn't pinned (`requires-python` is just `>=3.14`), so uv picked up 3.15 as soon as it shipped. markupsafe 3.0.3 had no cp315 wheel, so `uv sync` built it from source. The `uv run --frozen --no-build` step then refused to install it.

Changes

  • Pin 3.15 everywhere CI sets up Python: `check.yml`'s `setup-uv`, plus `xtest.yml`'s `setup-python` (3.14 → 3.15) and its three `setup-uv` steps that had no pin. Those three were also floating to 3.15 and building pydantic-core from source with Rust.
  • Relock so every compiled dependency has a cp315 wheel:
    • pydantic 2.14.1 / pydantic-core 2.50.1 in `xtest`, `otdf-local` and `otdf-sdk-mgr`
    • markupsafe 3.0.4 in `xtest`

`requires-python` stays at `>=3.14`. This changes what CI runs, not the minimum for local development.

Verification

Locally on CPython 3.15.0, I ran the same steps as `scriptcheck` against fresh environments:

  • xtest: ruff, ruff format, pyright, and the `--frozen --no-build` offline harness tests (299 passed)
  • otdf-local: lint, pyright, and `-m "not integration"` tests (29 passed)
  • otdf-sdk-mgr: lint, pyright, and `-m "not integration"` tests (138 passed)

A scan of all three lock files found no compiled package without a cp315 or abi3 wheel. On this PR, the X-Test xct matrix (go, java, js; platform main and v0.28.0) passes on 3.15. The bench and zip64 jobs are opt-in and were skipped, so their setup-uv pins have not run yet.

Pin every setup-uv/setup-python step to 3.15, and relock so each
compiled dependency has a cp315 wheel:

- pydantic 2.14.1 / pydantic-core 2.50.1 (xtest, otdf-local, otdf-sdk-mgr)
- markupsafe 3.0.4 (xtest)

requires-python stays >=3.14; this changes what CI runs, not the floor.

Signed-off-by: Dave Mihalcik <dmihalcik@virtru.com>
@dmihalcik-virtru
dmihalcik-virtru requested review from a team as code owners October 13, 2026 13:51
@coderabbitai

coderabbitai Bot commented Oct 13, 2026

Copy link
Copy Markdown

Warning

Review limit reached

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Next included review available in 33 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used the included review currently available.

Learn how review limits work.

Review configuration:

⚙️ Run configuration
  • Configuration used: Organization UI
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: b7bfb4be-9f3a-4a78-9910-3a3d2959a9b6
📥 Commits

Reviewing files that changed from the base of the PR and between 5694eb7 and be7dfe2.

⛔ Files ignored due to path filters (3)
  • otdf-local/uv.lock is excluded by !**/*.lock
  • otdf-sdk-mgr/uv.lock is excluded by !**/*.lock
  • xtest/uv.lock is excluded by !**/*.lock
📒 Files selected for processing (2)
  • .github/workflows/check.yml
  • .github/workflows/xtest.yml
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@sonarqubecloud

Copy link
Copy Markdown

@dmihalcik-virtru
dmihalcik-virtru merged commit 9c8fd0e into main Oct 13, 2026
24 checks passed
@dmihalcik-virtru
dmihalcik-virtru deleted the chore-ci-python-315 branch October 13, 2026 18:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants