Merge pull request #17 from yabirgb/python314

Author: yabirgb

.github/workflows/build.yml

@@ -10,21 +10,24 @@ on:
     tags:
       - 'v*'
 
+permissions: {}
+
 env:
-  LIB_VERSION: '2024.10.1'
-  PYTHON_VERSION: '3.11.9'
-  CIBW_VERSION: '2.21.3'
-  CIBW_BUILD: 'cp311-* cp312-*'
+  LIB_VERSION: '2026.7.1'
+  PYTHON_VERSION: '3.14'
+  CIBW_VERSION: '4.1.0'
+  CIBW_BUILD: 'cp314-* cp314t-*'
   CIBW_SKIP: '*-musllinux_*'
   CIBW_BUILD_VERBOSITY: 1
+  CIBW_TEST_COMMAND: 'python -c "from pysqlcipher3 import dbapi2 as sqlite; conn = sqlite.connect('':memory:''); conn.close()"'
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref || github.ref }}
   cancel-in-progress: true
 
 jobs:
   build_macos_openssl:
-    runs-on: macos-13
+    runs-on: macos-15
     strategy:
       matrix:
         ARCH:
@@ -38,7 +41,7 @@ jobs:
             FLAGS: no-shared no-asm no-idea no-camellia no-seed no-bf no-cast no-rc2 no-rc4 no-rc5 no-md2 no-md4 no-ecdh no-sock no-ssl3 no-dsa no-dh no-ec no-ecdsa no-tls1 no-rfc3779 no-whirlpool no-srp no-mdc2 no-ecdh no-engine no-srtp no-weak-ssl-ciphers
     name: "Build OpenSSL for macOS (${{ matrix.ARCH.NAME }})"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
         with:
           submodules: true
           persist-credentials: false
@@ -48,68 +51,41 @@ jobs:
           cd openssl
           perl ./Configure \
               --prefix="${BASEDIR}/artifact" \
-              --openssldir=${{ matrix.ARCH.OPENSSLDIR }} \
-              darwin64-${{ matrix.ARCH.NAME }}-cc \
-              ${{ matrix.ARCH.FLAGS }}
+              --openssldir="${OPENSSLDIR}" \
+              "darwin64-${ARCH_NAME}-cc" \
+              ${CONFIGURE_FLAGS}
 
-          make -j$(sysctl -n hw.logicalcpu)
+          make -j$(sysctl -n hw.logicalcpu) build_sw
           make install_sw
         env:
+          ARCH_NAME: ${{ matrix.ARCH.NAME }}
           CFLAGS: ${{ matrix.ARCH.CFLAGS }}
+          CONFIGURE_FLAGS: ${{ matrix.ARCH.FLAGS }}
+          OPENSSLDIR: ${{ matrix.ARCH.OPENSSLDIR }}
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: "openssl-macos-${{ matrix.ARCH.NAME }}"
           path: artifact/
 
-  build_macos_openssl_universal2:
-    runs-on: macos-13
-    name: "Build OpenSSL for macOS (universal2)"
-    needs: [build_macos_openssl]
-    steps:
-      - uses: actions/download-artifact@v4
-        with:
-          name: openssl-macos-x86_64
-          path: x86-64
-      - uses: actions/download-artifact@v4
-        with:
-          name: openssl-macos-arm64
-          path: arm64
-      - name: Create universal2 OpenSSL
-        run: |
-          mkdir artifact
-          cd artifact
-          mkdir bin lib
-          cp -r ../x86-64/include .
-          cp -r ../x86-64/lib/pkgconfig lib/
-          cp ../x86-64/bin/c_rehash bin/  # c_rehash is a perl script
-          lipo -create -output bin/openssl ../x86-64/bin/openssl ../arm64/bin/openssl
-          lipo -create -output lib/libssl.a ../x86-64/lib/libssl.a ../arm64/lib/libssl.a
-          lipo -create -output lib/libcrypto.a ../x86-64/lib/libcrypto.a ../arm64/lib/libcrypto.a
-      - uses: actions/upload-artifact@v4
-        with:
-          name: "openssl-macos-universal2"
-          path: artifact/
-
   build_wheels_macos:
     name: 'Build wheels for macOS'
-    runs-on: macos-13
+    runs-on: macos-15
     strategy:
       fail-fast: false
       matrix:
-        arch: [arm64, x86_64, universal2]
-    needs: [build_macos_openssl_universal2]
+        arch: [arm64, x86_64]
+    needs: [build_macos_openssl]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
         with:
           submodules: true
           persist-credentials: false
       - name: Set up python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
-          cache: 'pip'
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           name: openssl-macos-${{ matrix.arch }}
           path: openssl-macos-${{ matrix.arch }}
@@ -123,7 +99,7 @@ jobs:
         env:
           CIBW_ARCHS_MACOS: ${{ matrix.arch }}
           CIBW_BEFORE_ALL_MACOS: ./build.sh
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: pypi-wheels-macos-${{ matrix.arch }}
           path: build/wheelhouse/*.whl
@@ -140,15 +116,14 @@ jobs:
           - name: native
             runner: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
         with:
           submodules: true
           persist-credentials: false
       - name: Set up python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
-          cache: 'pip'
       - name: prepare build directory
         run: ./scripts/prepare.sh
         env:
@@ -161,24 +136,23 @@ jobs:
         env:
           CIBW_BEFORE_ALL_LINUX: ./build.sh
           CIBW_ARCHS_LINUX: ${{ matrix.arch.name }}
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: pypi-wheels-linux-${{ matrix.arch.name }}
           path: build/wheelhouse/*.whl
 
   build_wheels_windows:
     name: 'Build wheels for Windows'
-    runs-on: 'windows-2019'
+    runs-on: 'windows-latest'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
         with:
           submodules: true
           persist-credentials: false
       - name: Set up python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
-          cache: 'pip'
       - name: prepare build directory
         run: ./scripts/prepare.ps1
       - name: Install cibuildwheel
@@ -192,70 +166,67 @@ jobs:
       - name: clean openssl conf
         shell: pwsh
         run: echo "OPENSSL_CONF=''" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf-8 -Append
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: pypi-wheels-windows
           path: build\wheelhouse\*.whl
 
   build_sdist:
     name: 'Build sdist'
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
         with:
           submodules: true
           persist-credentials: false
       - name: Set up python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: ${{ env.PYTHON_VERSION }}
-          cache: 'pip'
       - name: prepare build directory
         run: ./scripts/prepare.sh
       - name: Build sdist
         working-directory: build
         run: python3 -m pip install --upgrade build && python -m build -s
       - name: Store artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
         with:
           name: pypi-sdist
           path: build/dist/*.tar.gz
 
   upload_pypi_test:
     name: Upload to PyPI (test)
     needs: [build_wheels_macos, build_wheels_linux, build_wheels_windows, build_sdist]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     if: github.event_name == 'push' && !(startsWith(github.ref, 'refs/tags/v'))
     environment: test-pypi
     permissions:
-      # IMPORTANT: this permission is mandatory for Trusted Publishing
-      id-token: write
+      id-token: write  # needed for PyPI Trusted Publishing
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           merge-multiple: true
           pattern: pypi-*
           path: dist
 
-      - uses: pypa/gh-action-pypi-publish@v1.10.3
+      - uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597  # v1.10.3
         with:
           repository-url: https://test.pypi.org/legacy/
           skip-existing: true
 
   upload_pypi:
     name: Upload to PyPI (prod)
     needs: [build_wheels_macos, build_wheels_linux, build_wheels_windows, build_sdist]
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
     environment: pypi
     permissions:
-      # IMPORTANT: this permission is mandatory for Trusted Publishing
-      id-token: write
+      id-token: write  # needed for PyPI Trusted Publishing
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
         with:
           merge-multiple: true
           pattern: pypi-*
           path: dist
 
-      - uses: pypa/gh-action-pypi-publish@v1.10.3
+      - uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597  # v1.10.3

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 2026.7.1
+- Ports the Python 3 extension sources to CPython 3.14's sqlite implementation.
+- Adds CPython 3.13, 3.14, and 3.14 free-threaded wheel builds.
+
 ## 2024.10.1
 - Updates SQLCipher to v4.6.1
 - Updates OpenSSL to v3.0.15
@@ -27,4 +31,4 @@
 *The version doesn't build Python 3.10 compatible wheels.*
 
 ## 2022.6.1
-- Initial build with wheels for Python 3.9.
+- Initial build with wheels for Python 3.9.

README.md

@@ -13,14 +13,13 @@ Configuration for providing pre-build [pysqlcipher3](https://github.com/rigglema
 
 This is a collections of patches and scripts to build wheels for rotki and publish them on PyPI.
 
-It builds wheels for CPython 3.11 & 3.12 for the following architectures:
+It builds wheels for CPython 3.14 for the following architectures:
 
 - Linux x86_64
 - Linux aarch64
 - Windows amd64
 - macOS x86_64
 - macOS arm64
-- macOS universal2
 
 The package is intended to be a drop-in replacement for the [pysqlcipher3 package](https://pypi.org/project/pysqlcipher3/).
 And it is statically linked with [SQLCipher](https://github.com/sqlcipher/sqlcipher) 4.x and [OpenSSL](https://github.com/openssl/openssl) 3.0.x LTS.