From bae3f765849086a4c811c8766f0fad9ae8211754 Mon Sep 17 00:00:00 2001 From: Marcel Walter Date: Wed, 21 Oct 2026 09:42:20 +0200 Subject: [PATCH 1/6] =?UTF-8?q?=F0=9F=94=92=20Fix=20eMudhra=20trust=20in?= =?UTF-8?q?=20project=20tooling?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Update affected TLS trust dependencies and build tooling. Assisted-by: GPT-6 via Codex --- .pre-commit-config.yaml | 4 ++-- pyproject.toml | 6 +++++- 2 files changed, 7 insertions(+), 3 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index a4a5a3bd..fc679060 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -61,7 +61,7 @@ repos: ## Ensure uv.lock is up to date - repo: https://github.com/astral-sh/uv-pre-commit - rev: 0.13.0 + rev: 0.13.4 hooks: - id: uv-lock priority: 0 @@ -165,7 +165,7 @@ repos: ## Check Python types with ty - repo: https://github.com/astral-sh/ty-pre-commit - rev: v0.0.86 + rev: 61480a9eddba3de40a4cabde24c42e82f27e94f6 # v0.0.90 + uv 0.13.4 hooks: - id: ty args: [--no-install-project] diff --git a/pyproject.toml b/pyproject.toml index 92b74c55..ade42d6c 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -179,7 +179,7 @@ wheel.py-api = "cp315t" [tool.uv] -required-version = ">=0.5.20" +required-version = ">=0.13.4" cache-keys = [ { file = "pyproject.toml" }, { git = { commit = true, tags = true } }, @@ -195,6 +195,10 @@ build = "cp3*" skip = [ "*-musllinux_*", "cp314t-*" ] archs = "auto64" build-frontend = "uv" + +# Keep the glibc targets while using the patched uv trust store (2026.10.21-1). +manylinux-x86_64-image = "quay.io/pypa/manylinux_2_28_x86_64@sha256:b74a5b6f1705ecff17be8bd792589bef9b3b039766d12205720ecd2a9e919192" +manylinux-aarch64-image = "quay.io/pypa/manylinux_2_28_aarch64@sha256:0333f44c4eb759ec8f47b27bc9dc27b1c929932a267cf13ce0cff1a4b758cccb" test-command = 'python -c "from mqt import debugger"' [tool.cibuildwheel.linux] From f7353e036889e230699eab730b580ae8c6f8d97f Mon Sep 17 00:00:00 2001 From: "pre-commit-ci[bot]" <66853113+pre-commit-ci[bot]@users.noreply.github.com> Date: Wed, 21 Oct 2026 07:47:26 +0000 Subject: [PATCH 2/6] =?UTF-8?q?=F0=9F=8E=A8=20pre-commit=20fixes?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pyproject.toml | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index ade42d6c..0c149894 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -195,11 +195,14 @@ build = "cp3*" skip = [ "*-musllinux_*", "cp314t-*" ] archs = "auto64" build-frontend = "uv" - -# Keep the glibc targets while using the patched uv trust store (2026.10.21-1). -manylinux-x86_64-image = "quay.io/pypa/manylinux_2_28_x86_64@sha256:b74a5b6f1705ecff17be8bd792589bef9b3b039766d12205720ecd2a9e919192" -manylinux-aarch64-image = "quay.io/pypa/manylinux_2_28_aarch64@sha256:0333f44c4eb759ec8f47b27bc9dc27b1c929932a267cf13ce0cff1a4b758cccb" test-command = 'python -c "from mqt import debugger"' +# Keep the glibc targets while using the patched uv trust store (2026.10.21-1). +manylinux-x86_64-image = """\ + quay.io/pypa/manylinux_2_28_x86_64@sha256:b74a5b6f1705ecff17be8bd792589bef9b3b039766d12205720ecd2a9e919192\ + """ +manylinux-aarch64-image = """\ + quay.io/pypa/manylinux_2_28_aarch64@sha256:0333f44c4eb759ec8f47b27bc9dc27b1c929932a267cf13ce0cff1a4b758cccb\ + """ [tool.cibuildwheel.linux] environment = { DEPLOY = "ON" } From 59f1eec6ce5757432de2bd0ba0a01e60f3ce7815 Mon Sep 17 00:00:00 2001 From: Marcel Walter Date: Wed, 21 Oct 2026 09:54:11 +0200 Subject: [PATCH 3/6] =?UTF-8?q?=F0=9F=94=92=20Include=20the=20corrected=20?= =?UTF-8?q?certifi=20lock=20record?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Preserve unrelated dependencies while applying the reviewed CA bundle update. Assisted-by: GPT-6 via Codex --- uv.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/uv.lock b/uv.lock index d42e0e78..2ce85a58 100644 --- a/uv.lock +++ b/uv.lock @@ -126,11 +126,11 @@ wheels = [ [[package]] name = "certifi" -version = "2026.10.18" +version = "2026.10.19" source = { registry = "https://pypi.org/simple" } -sdist = { url = "https://files.pythonhosted.org/packages/7e/eb/a2aa1ac3ea30dd3f30ca57f40232138b6b0040719316ecb85daf61167771/certifi-2026.10.18.tar.gz", hash = "sha256:b9995d97b64d0431a5af837d8ca8cd6238104d1f319f04bd93ea43124d6c861e", size = 135227, upload-time = "2026-10-18T16:21:07.655Z" } +sdist = { url = "https://files.pythonhosted.org/packages/a6/bd/1436c50cc46699de0230fbaacc1d1de7bfec413176099949e9d5112e88f2/certifi-2026.10.19.tar.gz", hash = "sha256:035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae", size = 137598, upload-time = "2026-10-20T02:24:16.604Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/08/ba/95dd616042484f7c83a06974388b37b837732740ee70bc5dc715b5fcd55a/certifi-2026.10.18-py3-none-any.whl", hash = "sha256:73191c47aaa79da394e8fee2dbc2ec827432cab56311122c9e47abf79e390f62", size = 134093, upload-time = "2026-10-18T16:21:06.276Z" }, + { url = "https://files.pythonhosted.org/packages/c4/51/29046e48f693c54e5b7412216d447a1d8362c9653148d98c02cdf65fa733/certifi-2026.10.19-py3-none-any.whl", hash = "sha256:42d35340cc5b9ba78e818ddbff0c5b1c2b779de448a340fd1b989f5fa8670e1b", size = 136464, upload-time = "2026-10-20T02:24:15.072Z" }, ] [[package]] From 853c4b3ba68353b32b129ec39c507d4e08bf9fcc Mon Sep 17 00:00:00 2001 From: Daniel Haag <121057143+denialhaag@users.noreply.github.com> Date: Thu, 22 Oct 2026 10:06:06 +0200 Subject: [PATCH 4/6] Revert temporary ty hook pin Assisted-by: GPT-6.1 Sol via Codex --- .pre-commit-config.yaml | 2 +- pyproject.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index fc679060..3f974efd 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -165,7 +165,7 @@ repos: ## Check Python types with ty - repo: https://github.com/astral-sh/ty-pre-commit - rev: 61480a9eddba3de40a4cabde24c42e82f27e94f6 # v0.0.90 + uv 0.13.4 + rev: v0.0.86 hooks: - id: ty args: [--no-install-project] diff --git a/pyproject.toml b/pyproject.toml index 0c149894..e49017a0 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -179,7 +179,7 @@ wheel.py-api = "cp315t" [tool.uv] -required-version = ">=0.13.4" +required-version = ">=0.5.20" cache-keys = [ { file = "pyproject.toml" }, { git = { commit = true, tags = true } }, From b6f64fea6c36b55bfffce09c55dc6fed231ce8db Mon Sep 17 00:00:00 2001 From: Daniel Haag <121057143+denialhaag@users.noreply.github.com> Date: Thu, 22 Oct 2026 10:06:08 +0200 Subject: [PATCH 5/6] Revert temporary container trust workarounds Assisted-by: GPT-6.1 Sol via Codex --- pyproject.toml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index e49017a0..92b74c55 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -196,13 +196,6 @@ skip = [ "*-musllinux_*", "cp314t-*" ] archs = "auto64" build-frontend = "uv" test-command = 'python -c "from mqt import debugger"' -# Keep the glibc targets while using the patched uv trust store (2026.10.21-1). -manylinux-x86_64-image = """\ - quay.io/pypa/manylinux_2_28_x86_64@sha256:b74a5b6f1705ecff17be8bd792589bef9b3b039766d12205720ecd2a9e919192\ - """ -manylinux-aarch64-image = """\ - quay.io/pypa/manylinux_2_28_aarch64@sha256:0333f44c4eb759ec8f47b27bc9dc27b1c929932a267cf13ce0cff1a4b758cccb\ - """ [tool.cibuildwheel.linux] environment = { DEPLOY = "ON" } From 83bc2494ffbf5bb1389440dcc272740799395c95 Mon Sep 17 00:00:00 2001 From: Daniel Haag <121057143+denialhaag@users.noreply.github.com> Date: Thu, 22 Oct 2026 10:06:10 +0200 Subject: [PATCH 6/6] Update uv to 0.13.5 Assisted-by: GPT-6.1 Sol via Codex --- .pre-commit-config.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 3f974efd..ec91e913 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -61,7 +61,7 @@ repos: ## Ensure uv.lock is up to date - repo: https://github.com/astral-sh/uv-pre-commit - rev: 0.13.4 + rev: 0.13.5 hooks: - id: uv-lock priority: 0