Test sources, 2026-10-28 (not a release of wasi-python)

Not a release of wasi-python. No wasi-python artifact is built from these files, and they carry no attestation.

These are byte-identical copies of two pinned test sources: the release-tag archives of openpyxl 3.1.5 and et_xmlfile 2.0.0, whose tests the project runs inside its guest. Their original host now answers automated downloads with a challenge page, so the project's download script and its test fetcher read these copies first and the original second. Either way a file is kept only if its SHA-256 is the one pinned in downloads/SHA256SUMS: the pin is what is trusted, not this page and not either host.

• openpyxl-3.1.5-tag.tar.gz, 2,923,125 bytes, SHA-256 64a599aeed98b74925dcc09a18c7b3e19dafb3754eb8bad2b6887b63a91f7a37, from https://foss.heptapod.net/openpyxl/openpyxl/-/archive/3.1.5/openpyxl-3.1.5.tar.gz (MIT; its licence is openpyxl-3.1.5/LICENCE.rst inside the archive)
• et_xmlfile-2.0.0-tag.tar.gz, 99,140 bytes, SHA-256 b710736febf4b4589805f1cc0ccea41781353fc4550466c472649f8518bed4b5, from https://foss.heptapod.net/openpyxl/et_xmlfile/-/archive/2.0.0/et_xmlfile-2.0.0.tar.gz (MIT; its licences are et_xmlfile-2.0.0/LICENCE.rst and LICENCE.python inside the archive)

Both copies were fetched from the original host on 2026-10-21, the day they were pinned. Each line above can be checked against the pins at this release's own tag: https://github.com/ClayGendron/wasi-python/blob/test-sources-2026-10-28/downloads/SHA256SUMS