20260729

Builds

Build	Minimum Android	Python	Where the minimum comes from
(default)	API 34	3.14.6	last-api-affecting-cpython-configure
upstream	API 24	3.14.6	inherited-from-upstream-package

Installing with uv

aarch64-linux-android, the flagship:

$ uv python install cpython-3.14.6-linux-aarch64-none \
    --python-downloads-json-url \
    https://raw.githubusercontent.com/daylight-00/python-build-standalone-android/latest-release/download-metadata.json

aarch64-linux-android:upstream, the baseline:

$ uv python install cpython-3.14.6-linux-aarch64-none \
    --python-downloads-json-url \
    https://raw.githubusercontent.com/daylight-00/python-build-standalone-android/latest-release/download-metadata-upstream.json

Artifacts

File	Size	SHA-256
cpython-3.14.6+20260729-aarch64-linux-android-full.tar.zst	24.3 MiB	816adbd4babf93269961c1156472c259440ec7f27b439fd946874fd5d3631c96
cpython-3.14.6+20260729-aarch64-linux-android-install_only.tar.gz	32.1 MiB	96b7556d47ee30fe735cccc55af4fab038c11638b81392aa01a148da0c70b9d3
cpython-3.14.6+20260729-aarch64-linux-android-install_only_stripped.tar.gz	20.3 MiB	6926562aee26f0f671b9b525965db3f38b4ac450b9d9c86a842697e0db44523e
cpython-3.14.6+20260729-aarch64-linux-android-upstream-full.tar.zst	37.6 MiB	64e362d8137b3d3f7cf325b55139177284014e5453d365572c8749fe344c1c42
cpython-3.14.6+20260729-aarch64-linux-android-upstream-install_only.tar.gz	22.8 MiB	f4212cb123ce9ba1b029ad558bec8ee6bdf6befb6ea20d2a7610d377b46d1325
cpython-3.14.6+20260729-aarch64-linux-android-upstream-install_only_stripped.tar.gz	22.7 MiB	67e71fa07dcd364c7942694247eb8c1a54757f7fe7f1b2edae8608f0a5cc6580

Verification

$ sha256sum -c SHA256SUMS --ignore-missing
$ gh attestation verify <archive> --repo daylight-00/python-build-standalone-android

Every archive was built twice and compared byte for byte, and each build was run on a physical device before this release was cut.

---

Note added after publication, 2026-07-29

This release's git tag was moved. build-reproducibility-check/ — 84 MB of superseded 20260727 archives that no code, document, or workflow referenced — was purged from the repository's history. Every commit from 358d36a onward was rewritten, and this tag followed.

	before	after
tag 20260729	400953de3835f8091b09ba0e75236115d7664764	013d0514180b8a1e6cee7baf39bebdb08b944e60

The two commits describe identical trees: all 60 files share their blob hashes. Commits before 358d36a keep their original identifiers, so the 20260728 tag is unaffected.

Nothing about the release itself changed. The archives, their sizes, and the SHA-256 sums listed above are the bytes originally published, and gh attestation verify still passes, because it binds an artifact by its digest rather than by a commit.

What is no longer resolvable is the source commit the provenance statement records, 400953d. It described the same tree as 013d051, and it was rewritten out of the repository.