build(no-ticket): update python runtime version

.github/scripts/binaries-matrix.json

@@ -5,17 +5,17 @@
       "pr": true,
       "build_runner": "ubuntu-24.04",
       "mode": "glibc",
-      "build_image": "almalinux:8@sha256:4a87d2615a770506e204c27d6248ac97f4df67f4e41e2e9c47c81f0ed0be98cb",
+      "build_image": "python:3.14.8-bookworm@sha256:7ee7e4d4fb42c3ad45b8fdc473b64ec69c3cf6e80ae5d52f6fa55f77fac29027",
       "test_runner": "ubuntu-24.04",
       "test_kind": "docker",
-      "test_images": "debian:11-slim@sha256:ff4b13408ab702565720c6b23582ebda7bfdddfe9ce2b8c5b49e6d40430fdb05",
+      "test_images": "debian:12.5@sha256:2c037a04925515fdd6ea85ea14a682d0e79931f5e9f5d07b6dbfc6ba12f9e858",
       "archive": ".tar.gz"
     },
     {
       "name": "linux-x86_64-musl",
       "build_runner": "ubuntu-24.04",
       "mode": "alpine",
-      "build_image": "python:3.12-alpine@sha256:dbb1970cc04ce7d381c65efe8309c0c03d463e5b35c88f14d721796ad24cfbfd",
+      "build_image": "python:3.14-alpine@sha256:f6a589d43c42b9e7f7dc67a12d37132491f362859a5d750607710cc56da3bc72",
       "test_runner": "ubuntu-24.04",
       "test_kind": "docker",
       "test_images": "alpine:3.20@sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc",
@@ -25,17 +25,17 @@
       "name": "linux-aarch64-gnu",
       "build_runner": "ubuntu-24.04-arm",
       "mode": "glibc",
-      "build_image": "almalinux:8@sha256:4a87d2615a770506e204c27d6248ac97f4df67f4e41e2e9c47c81f0ed0be98cb",
+      "build_image": "python:3.14.8-bookworm@sha256:7ee7e4d4fb42c3ad45b8fdc473b64ec69c3cf6e80ae5d52f6fa55f77fac29027",
       "test_runner": "ubuntu-24.04-arm",
       "test_kind": "docker",
-      "test_images": "debian:11-slim@sha256:ff4b13408ab702565720c6b23582ebda7bfdddfe9ce2b8c5b49e6d40430fdb05",
+      "test_images": "debian:12.5@sha256:2c037a04925515fdd6ea85ea14a682d0e79931f5e9f5d07b6dbfc6ba12f9e858",
       "archive": ".tar.gz"
     },
     {
       "name": "linux-aarch64-musl",
       "build_runner": "ubuntu-24.04-arm",
       "mode": "alpine",
-      "build_image": "python:3.12-alpine@sha256:dbb1970cc04ce7d381c65efe8309c0c03d463e5b35c88f14d721796ad24cfbfd",
+      "build_image": "python:3.14-alpine@sha256:f6a589d43c42b9e7f7dc67a12d37132491f362859a5d750607710cc56da3bc72",
       "test_runner": "ubuntu-24.04-arm",
       "test_kind": "docker",
       "test_images": "alpine:3.20@sha256:d9e853e87e55526f6b2917df91a2115c36dd7c696a35be12163d44e6e2a4b6bc",

.github/workflows/binaries.yml

@@ -59,7 +59,7 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.12"
+          python-version: "3.14"
 
       - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
@@ -108,7 +108,7 @@ jobs:
     runs-on: ${{ matrix.build_runner }}
     timeout-minutes: 45
     env:
-      PYTHON_VERSION: "3.12"
+      PYTHON_VERSION: "3.14"
       UV_VERSION: "0.11.26"
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -194,9 +194,8 @@ jobs:
             -v "${PWD}:/src" -w /src \
             "${BUILD_IMAGE}" bash -c '
               set -euo pipefail
-              dnf install -y python3.12 python3.12-pip python3.12-devel gcc binutils file >/dev/null
-              python3.12 -m pip install "uv==${UV_VERSION}" >/dev/null
-              uv sync --locked --no-dev --no-editable --group binary --extra all --python python3.12
+              python3.14 -m pip install "uv==${UV_VERSION}" >/dev/null
+              uv sync --locked --no-dev --no-editable --group binary --extra all --python python3.14
               uv run --no-sync pyinstaller --clean --noconfirm packaging/pyinstaller/cloudsmith.spec
               MAXV="$(
                 while IFS= read -r -d "" candidate; do
@@ -209,8 +208,8 @@ jobs:
               )"
               test -n "${MAXV}"
               echo "glibc floor: ${MAXV}"
-              if [ "$(printf "2.28\n%s\n" "${MAXV}" | sort -V | tail -1)" != "2.28" ]; then
-                echo "FAIL: glibc floor ${MAXV} exceeds 2.28"
+              if [ "$(printf "2.38\n%s\n" "${MAXV}" | sort -V | tail -1)" != "2.38" ]; then
+                echo "FAIL: glibc floor ${MAXV} exceeds 2.38"
                 exit 1
               fi
               tar -czf "out/${ART}" -C dist cloudsmith

.github/workflows/lint.yml

@@ -25,7 +25,7 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.10"
+          python-version: "3.14"
 
       - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:

.github/workflows/release.yml

@@ -61,7 +61,7 @@ jobs:
 
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.10"
+          python-version: "3.14"
 
       - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.1.0 # zizmor: ignore[cache-poisoning]
         with:

.github/workflows/test.yml

@@ -80,7 +80,7 @@ jobs:
           fi
 
   integration:
-    name: Live integration tests (Python 3.12)
+    name: Live integration tests (Python 3.14)
     needs: integration-gate
     if: needs.integration-gate.outputs.available == 'true'
     runs-on: ubuntu-24.04
@@ -90,18 +90,18 @@ jobs:
         with:
           persist-credentials: false
 
-      - name: Set up Python 3.12
+      - name: Set up Python
         uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.12"
+          python-version: "3.14"
 
       - name: Set up uv
         uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true
 
       - name: Install dependencies
-        run: uv sync --locked --group dev --python 3.12
+        run: uv sync --locked --group dev --python 3.14
 
       - name: Run live integration tests
         id: pytest

.github/workflows/ty-check.yml

@@ -22,7 +22,7 @@ jobs:
           persist-credentials: false
       - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
-          python-version: "3.10"
+          python-version: "3.14"
       - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true