In Python 3.12 tarfile raises DeprecationWarning: Python 3.14 will, by default, filter extracted tar archives and reject files or modify their metadata.

[matthewfeickert]

While testing Python 3.12 in CI

pyhf/tests/test_scripts.py

Lines 591 to 604 in adddb07

	@pytest.mark.parametrize(
	"archive",
	[
	"https://www.hepdata.net/record/resource/1408476?view=true",
	"https://doi.org/10.17182/hepdata.89408.v1/r2",
	],
	)
	def test_patchset_download(
	tmp_path, script_runner, requests_mock, tarfile_path, archive
	):
	requests_mock.get(archive, content=open(tarfile_path, "rb").read())
	command = f'pyhf contrib download {archive} {tmp_path.joinpath("likelihoods")}'
	ret = script_runner.run(shlex.split(command))
	assert ret.success

raised

>       assert ret.success
E       assert False
E        +  where False = <pytest_console_scripts.RunResult object at 0x29fd18b90>.success
...
DeprecationWarning: Python 3.14 will, by default, filter extracted tar archives and reject files or modify their metadata. Use the filter argument to control this behavior.

This should get fixed before Python 3.12 support is added.

[matthewfeickert]

c.f. https://docs.python.org/3.12/library/tarfile.html#tarfile-extraction-filter and PEP 706 – Filter for tarfile.extractall.