ci: group dependabot updates + fix python-binding workflow#25
Merged
Conversation
- dependabot.yml: group GitHub Actions, .NET non-crypto, and Rust non-crypto crates into single weekly PRs. Cryptographic primitives (BouncyCastle, ml-kem, ml-dsa, hkdf, sha2, sha3, generic-array, rand_core, zeroize) stay ungrouped so each bump gets manual review. - python-binding.yml: pip 26+ rejects `pip install --upgrade pip`; use `python -m pip install --upgrade pip maturin` instead. - python-binding.yml: replace py3.9 (EOL Oct 2025) with py3.10 in the matrix so actions/setup-python@v6 (which drops 3.9) can land.
maturin 1.13+ refuses to install into the system Python and requires VIRTUAL_ENV / CONDA_PREFIX / .venv. Create a venv in bindings/python and export VIRTUAL_ENV + add it to PATH via GITHUB_ENV/GITHUB_PATH so subsequent steps (pip install maturin, maturin develop, smoke test) all use the venv's Python.
maturin 1.13 on Windows refuses to use a bare `python.exe` ("could not
determine version from interpreter name"). Pass the venv's python by
absolute path via --interpreter so maturin uses the right one on all
three OSes without relying on filename version inference.
`maturin develop` requires an active venv and tries to detect the interpreter from the venv directory; on Windows it can't infer the version from a bare `python.exe`. Avoid the whole venv-detection path by building a wheel with `maturin build` and installing it into the host Python with pip — same end state, no venv juggling.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
pip install --upgrade pip maturinfails on pip 26+ (which now requirespython -m pip install --upgrade pip). This was blocking PR Bump Microsoft.NET.Test.Sdk from 17.14.1 to 18.6.0 #17.actions/setup-python@v6(PR build(deps): bump actions/setup-python from 5 to 6 #22) drops 3.9 support. Replaced with py3.10.This is the prerequisite that lets PRs #17 and #22 actually pass CI.
Test plan