chore: bump toolchain versions (#1878)

Bump toolchain versions to use the latest available releases. * `3.8 -> 3.8.19` * `3.9 -> 3.9.19` * `3.10 -> 3.10.14` * `3.11 -> 3.11.9` * `3.12 -> 3.12.3` * Use release `20240224` to pick up some security fixes Fixes #1785
bazelbuild · May 12, 2024 · 6aecae3 · 6aecae3
1 parent 4c4c06c
commit 6aecae3
Show file tree

Hide file tree

Showing 3 changed files with 104 additions and 31 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -28,6 +28,14 @@ A brief description of the categories of changes:
 * (deps): Bumped bazel_features to 1.9.1 to detect optional support
   non-blocking downloads.
 * (deps): Updated `pip_tools` to >= 7.4.0
+* (toolchains): Change some old toolchain versions to use [20240224] release to
+  include security fixes `3.8.18`, `3.9.18` and `3.10.13`
+* (toolchains): Bump default toolchain versions to:
+    * `3.8 -> 3.8.19`
+    * `3.9 -> 3.9.19`
+    * `3.10 -> 3.10.14`
+    * `3.11 -> 3.11.9`
+    * `3.12 -> 3.12.3`
 
 ### Fixed
 
@@ -53,9 +61,9 @@ A brief description of the categories of changes:
 ### Added
 
 * (toolchains) Added armv7 platform definition for python toolchains.
-
-* New Python versions available: `3.11.8`, `3.12.2` using
-  https://github.com/indygreg/python-build-standalone/releases/tag/20240224.
+* (toolchains) New Python versions available: `3.11.8`, `3.12.2` using the [20240224] release.
+* (toolchains) New Python versions available: `3.8.19`, `3.9.19`, `3.10.14`, `3.11.9`, `3.12.3` using
+  the [20240415] release.
 * (gazelle) Added a new `python_visibility` directive to control visibility
   of generated targets by appending additional visibility labels.
 * (gazelle) Added a new `python_default_visibility` directive to control the
@@ -91,6 +99,8 @@ A brief description of the categories of changes:
 [python_default_visibility]: gazelle/README.md#directive-python_default_visibility
 [test_file_pattern_issue]: https://github.com/bazelbuild/rules_python/issues/1816
 [test_file_pattern_docs]: gazelle/README.md#directive-python_test_file_pattern
+[20240224]: https://github.com/indygreg/python-build-standalone/releases/tag/20240224.
+[20240415]: https://github.com/indygreg/python-build-standalone/releases/tag/20240415.
 
 
 ## [0.31.0] - 2024-02-12

diff --git a/WORKSPACE b/WORKSPACE
@@ -85,7 +85,7 @@ load("@rules_python_gazelle_plugin//:deps.bzl", _py_gazelle_deps = "gazelle_deps
 _py_gazelle_deps()
 
 # This interpreter is used for various rules_python dev-time tools
-load("@python//3.11.8:defs.bzl", "interpreter")
+load("@python//3.11.9:defs.bzl", "interpreter")
 
 #####################
 # Install twine for our own runfiles wheel publishing.

diff --git a/python/versions.bzl b/python/versions.bzl
@@ -109,13 +109,24 @@ TOOL_VERSIONS = {
         "strip_prefix": "python",
     },
     "3.8.18": {
-        "url": "20231002/cpython-{python_version}+20231002-{platform}-{build}.tar.gz",
+        "url": "20240224/cpython-{python_version}+20240224-{platform}-{build}.tar.gz",
         "sha256": {
-            "aarch64-apple-darwin": "1825b1f7220bc93ff143f2e70b5c6a79c6469e0eeb40824e07a7277f59aabfda",
-            "aarch64-unknown-linux-gnu": "236a300f386ead02ca98dbddbc026ff4ef4de6701a394106e291ff8b75445ee1",
-            "x86_64-apple-darwin": "fcf04532e644644213977242cd724fe5e84c0a5ac92ae038e07f1b01b474fca3",
-            "x86_64-pc-windows-msvc": "a9d203e78caed94de368d154e841610cef6f6b484738573f4ae9059d37e898a5",
-            "x86_64-unknown-linux-gnu": "1e8a3babd1500111359b0f5675d770984bcbcb2cc8890b117394f0ed342fb9ec",
+            "aarch64-apple-darwin": "4d493a1792bf211f37f98404cc1468f09bd781adc2602dea0df82ad264c11abc",
+            "aarch64-unknown-linux-gnu": "6588c9eed93833d9483d01fe40ac8935f691a1af8e583d404ec7666631b52487",
+            "x86_64-apple-darwin": "7d2cd8d289d5e3cdd0a8c06c028c7c621d3d00ce44b7e2f08c1724ae0471c626",
+            "x86_64-pc-windows-msvc": "dba923ee5df8f99db04f599e826be92880746c02247c8d8e4d955d4bc711af11",
+            "x86_64-unknown-linux-gnu": "5ae36825492372554c02708bdd26b8dcd57e3dbf34b3d6d599ad91d93540b2b7",
+        },
+        "strip_prefix": "python",
+    },
+    "3.8.19": {
+        "url": "20240415/cpython-{python_version}+20240415-{platform}-{build}.tar.gz",
+        "sha256": {
+            "aarch64-apple-darwin": "eae09ed83ee66353c0cee435ea2d3e4868bd0537214803fb256a1a2928710bc0",
+            "aarch64-unknown-linux-gnu": "5bde36c53a9a511a1618f159abed77264392eb054edeb57bb5740f6335db34a3",
+            "x86_64-apple-darwin": "05f0c488d84f7590afb6f5d192f071df80584339dda581b6186effc6cd690f6b",
+            "x86_64-pc-windows-msvc": "ee95c27e5d9de165e77c280ad4d7b51b0dab9567e7e233fc3acf72363870a168",
+            "x86_64-unknown-linux-gnu": "b33feb5ce0d7f9c4aca8621a9d231dfd9d2f6e26eccb56b63f07041ff573d5a5",
         },
         "strip_prefix": "python",
     },
@@ -189,15 +200,28 @@ TOOL_VERSIONS = {
         "strip_prefix": "python",
     },
     "3.9.18": {
-        "url": "20231002/cpython-{python_version}+20231002-{platform}-{build}.tar.gz",
+        "url": "20240224/cpython-{python_version}+20240224-{platform}-{build}.tar.gz",
+        "sha256": {
+            "aarch64-apple-darwin": "2548f911a6e316575c303ba42bb51540dc9b47a9f76a06a2a37460d93b177aa2",
+            "aarch64-unknown-linux-gnu": "e5bc5196baa603d635ee6b0cd141e359752ad3e8ea76127eb9141a3155c51200",
+            "ppc64le-unknown-linux-gnu": "d6b18df7a25fe034fd5ce4e64216df2cc78b2d4d908d2a1c94058ae700d73d22",
+            "s390x-unknown-linux-gnu": "15d059507c7e900e9665f31e8d903e5a24a68ceed24f9a1c5ac06ab42a354f3f",
+            "x86_64-apple-darwin": "171d8b472fce0295be0e28bb702c43d5a2a39feccb3e72efe620ac3843c3e402",
+            "x86_64-pc-windows-msvc": "a9bdbd728ed4c353a4157ecf74386117fb2a2769a9353f491c528371cfe7f6cd",
+            "x86_64-unknown-linux-gnu": "0e5663025121186bd17d331538a44f48b41baff247891d014f3f962cbe2716b4",
+        },
+        "strip_prefix": "python",
+    },
+    "3.9.19": {
+        "url": "20240415/cpython-{python_version}+20240415-{platform}-{build}.tar.gz",
         "sha256": {
-            "aarch64-apple-darwin": "fdc4054837e37b69798c2ef796222a480bc1f80e8ad3a01a95d0168d8282a007",
-            "aarch64-unknown-linux-gnu": "1e0a3e8ce8e58901a259748c0ab640d2b8294713782d14229e882c6898b2fb36",
-            "ppc64le-unknown-linux-gnu": "101c38b22fb2f5a0945156da4259c8e9efa0c08de9d7f59afa51e7ce6e22a1cc",
-            "s390x-unknown-linux-gnu": "eee31e55ffbc1f460d7b17f05dd89e45a2636f374a6f8dc29ea13d0497f7f586",
-            "x86_64-apple-darwin": "82231cb77d4a5c8081a1a1d5b8ae440abe6993514eb77a926c826e9a69a94fb1",
-            "x86_64-pc-windows-msvc": "02ea7bb64524886bd2b05d6b6be4401035e4ba4319146f274f0bcd992822cd75",
-            "x86_64-unknown-linux-gnu": "f3ff38b1ccae7dcebd8bbf2e533c9a984fac881de0ffd1636fbb61842bd924de",
+            "aarch64-apple-darwin": "2671bb4ffd036f03076c8aa41e3828c4c16a602e93e2249a8e7b28fd83fdde51",
+            "aarch64-unknown-linux-gnu": "b18ad819f04c5b2cff6ffa95dd59263d00dcd6f5633d11e43685b4017469cb1c",
+            "ppc64le-unknown-linux-gnu": "2521ebe9eef273ab718670ed6c6c11760214cdc2e34b7609674179629659a6cd",
+            "s390x-unknown-linux-gnu": "8f83b8f357031cd6788ca253b1ac29020b73c8b41d0e5fb09a554d0d6c04ae83",
+            "x86_64-apple-darwin": "627d903588c0e69ed8b941ba9f91e070e38105a627c5b8c730267744760dca84",
+            "x86_64-pc-windows-msvc": "9b46faee13e37d8bfa4c02de3775ca3d5dec9378697d755b750fd37788179286",
+            "x86_64-unknown-linux-gnu": "00f698873804863dedc0e2b2c2cc4303b49ab0703af2e5883e11340cb8079d0f",
         },
         "strip_prefix": "python",
     },
@@ -282,15 +306,28 @@ TOOL_VERSIONS = {
         "strip_prefix": "python",
     },
     "3.10.13": {
-        "url": "20231002/cpython-{python_version}+20231002-{platform}-{build}.tar.gz",
+        "url": "20240224/cpython-{python_version}+20240224-{platform}-{build}.tar.gz",
         "sha256": {
-            "aarch64-apple-darwin": "fd027b1dedf1ea034cdaa272e91771bdf75ddef4c8653b05d224a0645aa2ca3c",
-            "aarch64-unknown-linux-gnu": "8675915ff454ed2f1597e27794bc7df44f5933c26b94aa06af510fe91b58bb97",
-            "ppc64le-unknown-linux-gnu": "f3f9c43eec1a0c3f72845d0b705da17a336d3906b7df212d2640b8f47e8ff375",
-            "s390x-unknown-linux-gnu": "859f6cfe9aedb6e8858892fdc124037e83ab05f28d42a7acd314c6a16d6bd66c",
-            "x86_64-apple-darwin": "be0b19b6af1f7d8c667e5abef5505ad06cf72e5a11bb5844970c395a7e5b1275",
-            "x86_64-pc-windows-msvc": "b8d930ce0d04bda83037ad3653d7450f8907c88e24bb8255a29b8dab8930d6f1",
-            "x86_64-unknown-linux-gnu": "5d0429c67c992da19ba3eb58b3acd0b35ec5e915b8cae9a4aa8ca565c423847a",
+            "aarch64-apple-darwin": "5fdc0f6a5b5a90fd3c528e8b1da8e3aac931ea8690126c2fdb4254c84a3ff04a",
+            "aarch64-unknown-linux-gnu": "a898a88705611b372297bb8fe4d23cc16b8603ce5f24494c3a8cfa65d83787f9",
+            "ppc64le-unknown-linux-gnu": "c23706e138a0351fc1e9def2974af7b8206bac7ecbbb98a78f5aa9e7535fee42",
+            "s390x-unknown-linux-gnu": "09be8fb2cdfbb4a93d555f268f244dbe4d8ff1854b2658e8043aa4ec08aede3e",
+            "x86_64-apple-darwin": "6378dfd22f58bb553ddb02be28304d739cd730c1f95c15c74955c923a1bc3d6a",
+            "x86_64-pc-windows-msvc": "086f7fe9156b897bb401273db8359017104168ac36f60f3af4e31ac7acd6634e",
+            "x86_64-unknown-linux-gnu": "d995d032ca702afd2fc3a689c1f84a6c64972ecd82bba76a61d525f08eb0e195",
+        },
+        "strip_prefix": "python",
+    },
+    "3.10.14": {
+        "url": "20240415/cpython-{python_version}+20240415-{platform}-{build}.tar.gz",
+        "sha256": {
+            "aarch64-apple-darwin": "389da793b7666e9310908b4fe3ddcf0a20b55727fcb384c7c49b01bb21716f89",
+            "aarch64-unknown-linux-gnu": "2f9f26c430df19d6d2a25ac3f2a8e74106d32b9951b85f95218ceeb13d52e952",
+            "ppc64le-unknown-linux-gnu": "9f178c19850567391188c2f9de87ce3c9fce698a23f5f3470be03745a03d1daa",
+            "s390x-unknown-linux-gnu": "648aa520de74ee426231e4a5349598990abe42a97c347ce6240b166f23ee5903",
+            "x86_64-apple-darwin": "8e27ec6f27b3a27be892c7a9db1e278c858acd9d90c1114013fe5587cd6fc5e6",
+            "x86_64-pc-windows-msvc": "186b5632fb2fa5b5e6eee4110ce9bbb0349f52bb2163d2a1f5188b1d8eb1b5f3",
+            "x86_64-unknown-linux-gnu": "c83c5485659250ef4e4fedb8e7f7b97bc99cc8cf5a1b11d0d1a98d347a43411d",
         },
         "strip_prefix": "python",
     },
@@ -382,6 +419,19 @@ TOOL_VERSIONS = {
         },
         "strip_prefix": "python",
     },
+    "3.11.9": {
+        "url": "20240415/cpython-{python_version}+20240415-{platform}-{build}.tar.gz",
+        "sha256": {
+            "aarch64-apple-darwin": "7af7058f7c268b4d87ed7e08c2c7844ef8460863b3e679db3afdce8bb1eedfae",
+            "aarch64-unknown-linux-gnu": "b3a7199ac2615d75fb906e5ba556432efcf24baf8651fc70370d9f052d4069ee",
+            "ppc64le-unknown-linux-gnu": "03f62d1e2d400c9662cdd12ae33a6f328c34ae8e2b872f8563a144834742bd6a",
+            "s390x-unknown-linux-gnu": "3f7a0dd64fa292977c4da09e865ee504a48e55dbc2dbfd9ff4b991af891e4446",
+            "x86_64-apple-darwin": "9afd734f63a23783cf0257bef25c9231ffc80e7747486dc54cf72f325213fd15",
+            "x86_64-pc-windows-msvc": "368474c69f476e7de4adaf50b61d9fcf6ec8b4db88cc43c5f71c860b3cd29c69",
+            "x86_64-unknown-linux-gnu": "78b1c16a9fd032997ba92a60f46a64f795cd18ff335659dfdf6096df277b24d5",
+        },
+        "strip_prefix": "python",
+    },
     "3.12.0": {
         "url": "20231002/cpython-{python_version}+20231002-{platform}-{build}.tar.gz",
         "sha256": {
@@ -421,15 +471,28 @@ TOOL_VERSIONS = {
         },
         "strip_prefix": "python",
     },
+    "3.12.3": {
+        "url": "20240415/cpython-{python_version}+20240415-{platform}-{build}.tar.gz",
+        "sha256": {
+            "aarch64-apple-darwin": "ccc40e5af329ef2af81350db2a88bbd6c17b56676e82d62048c15d548401519e",
+            "aarch64-unknown-linux-gnu": "ec8126de97945e629cca9aedc80a29c4ae2992c9d69f2655e27ae73906ba187d",
+            "ppc64le-unknown-linux-gnu": "c5dcf08b8077e617d949bda23027c49712f583120b3ed744f9b143da1d580572",
+            "s390x-unknown-linux-gnu": "872fc321363b8cdd826fd2cb1adfd1ceb813bc1281f9d410c1c2c4e177e8df86",
+            "x86_64-apple-darwin": "c37a22fca8f57d4471e3708de6d13097668c5f160067f264bb2b18f524c890c8",
+            "x86_64-pc-windows-msvc": "f7cfa4ad072feb4578c8afca5ba9a54ad591d665a441dd0d63aa366edbe19279",
+            "x86_64-unknown-linux-gnu": "a73ba777b5d55ca89edef709e6b8521e3f3d4289581f174c8699adfb608d09d6",
+        },
+        "strip_prefix": "python",
+    },
 }
 
 # buildifier: disable=unsorted-dict-items
 MINOR_MAPPING = {
-    "3.8": "3.8.18",
-    "3.9": "3.9.18",
-    "3.10": "3.10.13",
-    "3.11": "3.11.8",
-    "3.12": "3.12.2",
+    "3.8": "3.8.19",
+    "3.9": "3.9.19",
+    "3.10": "3.10.14",
+    "3.11": "3.11.9",
+    "3.12": "3.12.3",
 }
 
 PLATFORMS = {