Skip to content

[3.12] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507) #184626

[3.12] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507)

[3.12] gh-145506: Fixes CVE-2026-2297 by ensuring SourcelessFileLoader uses io.open_code (GH-145507) #184626

Triggered via pull request March 4, 2026 19:56
Status Success
Total duration 17m 16s
Artifacts

build.yml

on: pull_request
Change detection  /  Create context from changed files
10s
Change detection / Create context from changed files
Matrix: Address sanitizer
Matrix: build-macos
Matrix: build-tsan
Matrix: Ubuntu SSL tests with OpenSSL
Matrix: build-ubuntu
Matrix: build-windows-msi
Waiting for pending jobs
Matrix: build-windows
Docs  /  Docs
2m 27s
Docs / Docs
Docs  /  Doctest
6m 33s
Docs / Doctest
Check if Autoconf files are up to date
27s
Check if Autoconf files are up to date
Check if generated files are up to date
5m 3s
Check if generated files are up to date
Hypothesis tests on Ubuntu
5m 42s
Hypothesis tests on Ubuntu
Check if the ABI has changed
1m 36s
Check if the ABI has changed
All required checks pass
4s
All required checks pass
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 20 warnings
Docs / Docs
Process completed with exit code 1.
Docs / Docs
Process completed with exit code 2.
Check if the ABI has changed
The `python-version` input is not set. The version of Python currently in `PATH` will be used.
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.0.15): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.3.2): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.2.3): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu SSL tests with OpenSSL (ubuntu-24.04, 3.1.7): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Hypothesis tests on Ubuntu
No files were found with the provided path: .hypothesis/examples/. No artifacts will be uploaded.
Hypothesis tests on Ubuntu: Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
macOS / build and test (macos-14)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-14)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-14)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-14)
xz 5.8.2 is already installed and up-to-date. To reinstall 5.8.2, run: brew reinstall xz
macOS / build and test (macos-14)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf
Address sanitizer (ubuntu-24.04)
‘__builtin_strncpy’ output truncated before terminating nul copying as many bytes from a string as its length [-Wstringop-truncation]
Address sanitizer (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
Ubuntu / build and test (ubuntu-24.04): Parser/tokenizer.c#L482
this statement may fall through [-Wimplicit-fallthrough=]
macOS / build and test (macos-15-intel)
`$HOMEBREW_NO_INSTALLED_DEPENDENTS_CHECK` is set: not checking for outdated dependents or dependents with broken linkage!
macOS / build and test (macos-15-intel)
tcl-tk@8 8.6.17 is already installed and up-to-date. To reinstall 8.6.17, run: brew reinstall tcl-tk@8
macOS / build and test (macos-15-intel)
gdbm 1.26 is already installed and up-to-date. To reinstall 1.26, run: brew reinstall gdbm
macOS / build and test (macos-15-intel)
xz 5.8.2 is already installed and up-to-date. To reinstall 5.8.2, run: brew reinstall xz
macOS / build and test (macos-15-intel)
pkgconf 2.5.1 is already installed and up-to-date. To reinstall 2.5.1, run: brew reinstall pkgconf