Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 21, 2025

Bumps autobahn from 25.9.1 to 25.10.1.

Release notes

Sourced from autobahn's releases.

Development Build fork-e431e88e-oberstet_autobahn_python-rel_v25_10_2-202510210040

Development build from pull request

Build Information

  • Commit: 02aef1b1
  • Build Date: 2025-10-21 00:41:05 UTC
  • Release Type: development

Included Platforms

  • Linux: x86_64, ARM64 (manylinux wheels + pure Python fallbacks)
  • macOS: Apple Silicon ARM64
  • Windows: x86_64

Python Versions

  • CPython: 3.11, 3.12, 3.13, 3.14
  • PyPy: 3.11

Installation

Download the appropriate wheel for your platform:

pip install <downloaded-wheel-file>

Artifact Inventory

  • Total Wheels: 21
  • Source Distributions: 3

Development Build fork-12305151-oberstet_autobahn_python-rel_v25_10_2-202510202247

Development build from pull request

Build Information

  • Commit: 02aef1b1
  • Build Date: 2025-10-20 22:48:17 UTC
  • Release Type: development

Included Platforms

  • Linux: x86_64, ARM64 (manylinux wheels + pure Python fallbacks)
  • macOS: Apple Silicon ARM64
  • Windows: x86_64

... (truncated)

Changelog

Sourced from autobahn's changelog.

25.10.1

Critical Fixes

  • fix: Server conformance testing properly tests both with-nvx and without-nvx configurations - servers now restart for each configuration ensuring accurate test results
  • fix: Version consistency - autobahn/_version.py now matches pyproject.toml
  • fix: GitHub release artifact integration targets correct directory (docs/_build/html/_static/ not docs/_static/)

Supply Chain Security

  • fix: Issue #1716 - Added comprehensive source distribution integrity verification with cryptographic fingerprints
  • new: Chain of custody verification ensures artifact integrity from build → artifact → release
  • new: Re-verification in release workflow with OpenSSL version compatibility (handles both 1.x and 3.x formats)
  • new: PyPI upload safety check prevents duplicate version uploads

Documentation & Release Infrastructure

  • new: RTD documentation includes WebSocket conformance reports and FlatBuffers schemas via GitHub Release artifacts
  • new: Streamlined release artifact download with just download-github-release recipe (auto-detects nightly/stable/dev)
  • new: Automated docs integration with just docs-integrate-github-release recipe
  • fix: Nightly release detection now correctly identifies master-YYYYMMDDHHMM releases
  • fix: Pre-release checklist Section 6 simplified to use justfile recipes

Wheel Building

  • fix: ARM64 wheel builds eliminate duplicate wheels by building specific Python versions per job
  • fix: Filter out plain linux_* wheels before PyPI upload
  • fix: PyPI publishing removes non-package files from dist/
Commits
  • 1be3173 fix: Accept both SHA256 and SHA2-256 checksum formats in release verification
  • 5430abc fix: Pass GITHUB_TOKEN to ARM64 container to avoid rate limiting
  • 4527bac fix: Remove --break-system-packages from container workflows
  • 333b05a Upload verification files to GitHub Releases + fix PEP 668 issue
  • 3a0ac63 Add SHA256 checksums and validation files to wheels workflow
  • c68a49d Fix critical bugs in checksum verification (path mismatch + false positives)
  • 005ead3 Implement tight sync sequence for QEMU corruption prevention
  • 72e4aeb Add SHA256 checksum re-verification for wheel chain of custody
  • a1e081a Add SHA256 checksum generation for chain of custody
  • 1a57933 Fix retry action not detecting failures in ARM64 wheel builds
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [autobahn](https://github.com/crossbario/autobahn-python) from 25.9.1 to 25.10.1.
- [Release notes](https://github.com/crossbario/autobahn-python/releases)
- [Changelog](https://github.com/crossbario/autobahn-python/blob/master/docs/changelog.rst)
- [Commits](crossbario/autobahn-python@v25.9.1...v25.10.1)

---
updated-dependencies:
- dependency-name: autobahn
  dependency-version: 25.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 21, 2025
@ndittren ndittren merged commit 795232d into main Oct 21, 2025
4 checks passed
@ndittren ndittren deleted the dependabot/pip/autobahn-25.10.1 branch October 21, 2025 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants