20251031

Upgrades

• CPython 3.9.24 -> 3.9.25
• LLVM 20.1.4 -> 21.1.4

Please note that Python 3.9 has now reached end of life. Accordingly, this project will no longer provide builds of Python 3.9, not even for security updates to bundled dependencies. Please upgrade to Python 3.10 or newer.

Distribution changes

• Build the _dbm extension as a shared module, statically linking Berkeley DB 6.0.19, for the benefit of users who do not use dbm with concerns about complying with the Sleepycat license. No other files in the release link against Berkeley DB, so you should be able to just remove this one file. (Note that the version of Berkeley DB we use is the last version under the Sleepycat license; we do not distribute the newer versions of Berkeley DB that are under the AGPL.) See discussion in #836

Full Changelog: 2025102...2025103

20251028

Upgrades

• pip 25.2 -> 25.3

Distribution changes

• Consistently use siphash instead of fnv as Python's internal object hash for better compatibility with numba. (#825)
• For Python 3.12 and below, fix the reported target triple in musl builds, which makes compiled extensions work properly. (#827)

Full Changelog: 2025101...2025102

20251014

Upgrades

• CPython 3.13.8 -> 3.13.9
• CPython 3.15.0a1

Full Changelog: 2025101...2025101

20251010

Upgrades

• CPython 3.12.11 -> 3.12.12
• CPython 3.11.13 -> 3.11.14
• CPython 3.10.18 -> 3.10.19
• CPython 3.9.23 -> 3.9.24

Full Changelog: 20251007...20251010

20251007

Upgrades

• CPython 3.14.0rc3 -> 3.14.0 (final)
• CPython 3.13.7 -> 3.13.8
• OpenSSL 3.5.3 -> 3.5.4 (three low-severity security issues)

Distribution changes

• The new build-details.json file in Python 3.14 (PEP 739) now contains relative paths.

Full Changelog: 2025091...2025100

20250918

Upgrades

• CPython 3.14.0rc2 -> 3.14.0rc3
• OpenSSL 3.0.16 -> 3.5.3 (new LTS)

Distribution changes

• Fix the new asyncio debugging feature in Python 3.14 (e.g. python -m asyncio ps) on Linux and macOS.
• On Mac and Linux, SQLite is no longer built with the -DSQLITE_ENABLE_FTS3_TOKENIZER option, which opts into a less secure way to call the fts3_tokenizer function. Applications that need this feature are strongly encouraged to call fts3_tokenizer with bound parameters, but can alternatively use setconfig() at runtime to get the same behavior as the compile-time option. See discussion in #791 and #562.
• On Windows, SQLite is built with a handful of flags to match the build configuration of Mac and Linux, notably -DSQLITE_ENABLE_FTS3_PARENTHESIS which uses the improved syntax for fts3 queries.

Build system changes

• Add support for loongarch64-linux builds (but no automated builds)

Full Changelog: 2025090...2025091

20250902

Upgrades

• SQLite 3.50.4 for CVE-2025-6965 (see also python/cpython#137134)

Distribution changes

• Fix the ability to codesign macOS x86-64 artifacts. (#749)

Full Changelog: 2025082...2025090

20250828

Distribution changes

• Add dynamically linked aarch64 musl builds

Full Changelog: 2025081...2025082

20250818

Upgrades

• CPython 3.13.7

Distribution changes

• Build zstd with multithreading enabled
• Build zstd with optimizations enabled

Build system changes

• Bump required Windows SDK to 10.0.26100.0
• Only define MODULE_NAME for sqlite on Python <= 3.9
• Ensure reproducible artifact hashes for base builder images

Full Changelog: 2025081...2025081

20250814

Upgrades

• Upgrade to 3.14.0rc2

Distribution changes

• Build _ctypes_test as a shared module to avoid leaking symbols without a namespace

Full Changelog: 2025080...2025081