Python: 3.9.21 -> 3.9.22; 3.10.16 -> 3.10.17; 3.11.11 -> 3.11.12; 3.12.9 -> 3.12.10; 3.13.2 -> 3.13.3; 3.14.0a6 -> 3.14.0a7 (#397356)

pkgs/development/interpreters/python/cpython/3.10/raise-OSError-for-ERR_LIB_SYS.patch

···
-diff --git a/Modules/_ssl.c b/Modules/_ssl.c
-index e637830..80728d2 100644
---- a/Modules/_ssl.c
-+++ b/Modules/_ssl.c
-@@ -656,6 +656,11 @@ PySSL_SetError(PySSLSocket *sslsock, int ret, const char *filename, int lineno)
-                     errstr = "Some I/O error occurred";
-                 }
-             } else {
-+                if (ERR_GET_LIB(e) == ERR_LIB_SYS) {
-+                    // A system error is being reported; reason is set to errno
-+		    errno = ERR_GET_REASON(e);
-+		    return PyErr_SetFromErrno(PyExc_OSError);
-+                }
-                 p = PY_SSL_ERROR_SYSCALL;
-             }
-             break;
-@@ -681,6 +686,11 @@ PySSL_SetError(PySSLSocket *sslsock, int ret, const char *filename, int lineno)
-                 errstr = "EOF occurred in violation of protocol";
-             }
- #endif
-+            if (ERR_GET_LIB(e) == ERR_LIB_SYS) {
-+                // A system error is being reported; reason is set to errno
-+                errno = ERR_GET_REASON(e);
-+                return PyErr_SetFromErrno(PyExc_OSError);
-+            }
-             break;
-         }
-         default:

pkgs/development/interpreters/python/cpython/default.nix

···
       # libuuid, slowing down program startup a lot).
       noldconfigPatch
     ]
-    ++ optionals (pythonOlder "3.12") [
-      # https://www.cve.org/CVERecord?id=CVE-2025-0938
-      ./CVE-2025-0938.patch
-    ]
     ++ optionals (stdenv.hostPlatform != stdenv.buildPlatform && stdenv.hostPlatform.isFreeBSD) [
       # Cross compilation only supports a limited number of "known good"
       # configurations. If you're reading this and it's been a long time
···
       ./loongarch-support.patch
       # fix failing tests with openssl >= 3.4
       # https://github.com/python/cpython/pull/127361
-    ]
-    ++ optionals (pythonAtLeast "3.10" && pythonOlder "3.11") [
-      ./3.10/raise-OSError-for-ERR_LIB_SYS.patch
-    ]
-    ++ optionals (pythonAtLeast "3.11" && pythonOlder "3.12") [
-      (fetchpatch {
-        url = "https://github.com/python/cpython/commit/f4b31edf2d9d72878dab1f66a36913b5bcc848ec.patch";
-        sha256 = "sha256-w7zZMp0yqyi4h5oG8sK4z9BwNEkqg4Ar+en3nlWcxh0=";
-      })
     ]
     ++ optionals (pythonAtLeast "3.11" && pythonOlder "3.13") [
       # backport fix for https://github.com/python/cpython/issues/95855

pkgs/development/interpreters/python/default.nix

···
         sourceVersion = {
           major = "3";
           minor = "12";
-          patch = "9";
+          patch = "10";
           suffix = "";
         };
-        hash = "sha256-ciCDXZ+Qs3wAbphCqN/0WAqspDGGdPlHMCuNKPP4ERI=";
+        hash = "sha256-B6tpdHRZXgbwZkdBfTx/qX3tB6/Bp+RFTFY5kZtG6uo=";
       };
     };
 
···
       sourceVersion = {
         major = "3";
         minor = "9";
-        patch = "21";
+        patch = "22";
         suffix = "";
       };
-      hash = "sha256-MSb1lZLJsNeYWEdV8r97CB+hyjXOem/qmAEI11KgW7E=";
+      hash = "sha256-jBNtGZ02N6H86YoWrcgJwdg8ki0C1B82FLNPi259OOw=";
       inherit passthruFun;
     };
 
···
       sourceVersion = {
         major = "3";
         minor = "10";
-        patch = "16";
+        patch = "17";
         suffix = "";
       };
-      hash = "sha256-v7JJYJmQIgSRobkoUKBxNe0IMeQXOM9oHWPPAbKo+9E=";
+      hash = "sha256-TGgFDwSdG0rFqt0N9fJ5QcA1DSqeerCQfuXrUiXZ1rA=";
       inherit passthruFun;
     };
 
···
       sourceVersion = {
         major = "3";
         minor = "11";
-        patch = "11";
+        patch = "12";
         suffix = "";
       };
-      hash = "sha256-Kpkgx6DNI23jNkTtmAoTy7whBYv9xSj+u2CBV17XO+M=";
+      hash = "sha256-hJ2oevTfE3cQwXluJ2qVX3qFyflxCBBnyPVl0Vw1Kgk=";
       inherit passthruFun;
     };
 
···
       sourceVersion = {
         major = "3";
         minor = "13";
-        patch = "2";
+        patch = "3";
         suffix = "";
       };
-      hash = "sha256-2YS8xXzWfKqyb33vQuUjscAVu8XcB4Ns9PC2P6FZ61Y=";
+      hash = "sha256-QPhovL3rgUmjFJWAu5v9QHszIc1I8L5jGvlVrJLA4EE=";
       inherit passthruFun;
     };
 
···
         major = "3";
         minor = "14";
         patch = "0";
-        suffix = "a6";
+        suffix = "a7";
       };
-      hash = "sha256-jWGB5TMdmizWykBa4SMOiFiaBD9HaOu0Q9OInUXBw1w=";
+      hash = "sha256-ca287DrJ7fkzCOVc+0GE8utLFv2iuwpaOCkp7SnIOG0=";
       inherit passthruFun;
     };
     # Minimal versions of Python (built without optional dependencies)

pkgs/development/python-modules/hypothesis/default.nix

···
 
 buildPythonPackage rec {
   pname = "hypothesis";
-  version = "6.130.5";
+  version = "6.130.12";
   pyproject = true;
 
   disabled = pythonOlder "3.7";
···
     owner = "HypothesisWorks";
     repo = "hypothesis";
     rev = "hypothesis-python-${version}";
-    hash = "sha256-PJx8Mf+OUmZ6GgLBKesKdFs09avxtGtU96ejAVznFNQ=";
+    hash = "sha256-6p7OCjeZKZJ+3MDfdi+9XffET95pXGC6nzhTiMiEVQA=";
   };
 
   # I tried to package sphinx-selective-exclude, but it throws
···
       "test_uses_cached_charmap"
       # fails if builder is too slow
       "test_can_run_with_no_db"
+      # calls script with the naked interpreter
+      "test_constants_from_running_file"
     ]
     ++ lib.optionals (pythonOlder "3.10") [
       # not sure why these tests fail with only 3.9
···
       "test_assume_has_status_reason"
       "test_observability_captures_stateful_reprs"
     ]
-    ++ lib.optionals (pythonAtLeast "3.13") [
+    ++ lib.optionals (pythonAtLeast "3.12") [
+      # AssertionError: assert [b'def      \...   f(): pass'] == [b'def\\', b'    f(): pass']
+      # https://github.com/HypothesisWorks/hypothesis/issues/4355
       "test_clean_source"
     ];