20250918

Upgrades

• CPython 3.14.0rc2 -> 3.14.0rc3
• OpenSSL 3.0.16 -> 3.5.3 (new LTS)

Distribution changes

• Fix the new asyncio debugging feature in Python 3.14 (e.g. python -m asyncio ps) on Linux and macOS.
• On Mac and Linux, SQLite is no longer built with the -DSQLITE_ENABLE_FTS3_TOKENIZER option, which opts into a less secure way to call the fts3_tokenizer function. Applications that need this feature are strongly encouraged to call fts3_tokenizer with bound parameters, but can alternatively use setconfig() at runtime to get the same behavior as the compile-time option. See discussion in #791 and #562.
• On Windows, SQLite is built with a handful of flags to match the build configuration of Mac and Linux, notably -DSQLITE_ENABLE_FTS3_PARENTHESIS which uses the improved syntax for fts3 queries.

Build system changes

• Add support for loongarch64-linux builds (but no automated builds)

Full Changelog: 2025090...2025091

20250902

Upgrades

• SQLite 3.50.4 for CVE-2025-6965 (see also python/cpython#137134)

Distribution changes

• Fix the ability to codesign macOS x86-64 artifacts. (#749)

Full Changelog: 2025082...2025090

20250828

Distribution changes

• Add dynamically linked aarch64 musl builds

Full Changelog: 2025081...2025082

20250818

Upgrades

• CPython 3.13.7

Distribution changes

• Build zstd with multithreading enabled
• Build zstd with optimizations enabled

Build system changes

• Bump required Windows SDK to 10.0.26100.0
• Only define MODULE_NAME for sqlite on Python <= 3.9
• Ensure reproducible artifact hashes for base builder images

Full Changelog: 2025081...2025081

20250814

Upgrades

• Upgrade to 3.14.0rc2

Distribution changes

• Build _ctypes_test as a shared module to avoid leaking symbols without a namespace

Full Changelog: 2025080...2025081

20250808

Distribution changes

• On Mac/Linux, libtcl, libtk, and _tkinter are built as separate shared objects, which fixes matplotlib's tkagg backend (the default on Linux), Pillow's PIL.ImageTk library, and other extension modules that need to use libtcl/libtk directly. Note that this change also stops shipping Tix, a deprecated Tk extension that was previously shipped for Linux (but not Mac) but seemingly was broken. (#676)

Build system changes

• The "ci:" labels on PRs, to limit which CI targets are built, now take effect again. (#731)
• Various other fixes to the release workflow.

Full Changelog: 2025080...2025080

20250807

Upgrades

• CPython 3.13.6

Distribution changes

• Fix reported multiarch in musl builds of Python 3.9 - 3.12

Full Changelog: 2025072...2025080

20250723

Upgrades

• CPython 3.14.0rc1

Full Changelog: 2025071...2025072

20250712

Distribution changes

• Restore the SQLite "fts4", "fts5", "rtree", and "geopoly" extensions on Mac/Linux platforms, and add regression tests. These were unintentionally dropped in an upgrade, likely due to SQLite changing their build system and its default configuration. (#694)

Build system changes

• Fix local (non-CI) builds which were failing due to a missing Makefile dependency (#692)

Full Changelog: 2025071...2025071

(Please note the release process for the 20250711 tag failed in CI. I have left the Git tag alone for the sake of downstream systems that might have picked it up automatically, but I have deleted the GitHub release and you should not use the tag/release.)

20250708

Upgrades

• SQLite 3.49.1.0
• CPython 3.14.0b4

Distribution changes

• Include zstd module on Python 3.14+ on Unix
• Remove .sha256 files: these artifacts are no longer published to GitHub Releases; unfortunately, they put us above the newly enforced 1000 file limit for GitHub Release artifacts. A single SHA256SUMS file with all of the checksums is still published.

Build system changes

• Add support for building zstd on Unix

Full Changelog: 2025070...2025070