From d89d52cbd4f006d0ff3f6f3892bb4a90c357b011 Mon Sep 17 00:00:00 2001
From: Zachary Ware <zach@python.org>
Date: Tue, 29 Sep 2026 09:30:16 -0500
Subject: [PATCH] gh-158010: Update macOS installer to use OpenSSL 3.5.9

---
 Mac/BuildScript/build-installer.py                          | 6 +++---
 .../Security/2026-06-09-23-38-08.gh-issue-151159.ds-9f8.rst | 1 -
 .../macOS/2026-08-27-03-19-21.gh-issue-156369.FKlSGY.rst    | 1 -
 .../macOS/2026-09-29-09-29-17.gh-issue-158010.2zJnoj.rst    | 1 +
 4 files changed, 4 insertions(+), 5 deletions(-)
 delete mode 100644 Misc/NEWS.d/next/Security/2026-06-09-23-38-08.gh-issue-151159.ds-9f8.rst
 delete mode 100644 Misc/NEWS.d/next/macOS/2026-08-27-03-19-21.gh-issue-156369.FKlSGY.rst
 create mode 100644 Misc/NEWS.d/next/macOS/2026-09-29-09-29-17.gh-issue-158010.2zJnoj.rst

diff --git a/Mac/BuildScript/build-installer.py b/Mac/BuildScript/build-installer.py
index f22256c1f506cb9..f54a95b22e118fc 100755
--- a/Mac/BuildScript/build-installer.py
+++ b/Mac/BuildScript/build-installer.py
@@ -246,9 +246,9 @@ def library_recipes():
 
     result.extend([
           dict(
-              name="OpenSSL 3.5.8",
-              url="https://github.com/openssl/openssl/releases/download/openssl-3.5.8/openssl-3.5.8.tar.gz",
-              checksum="a8f84a39918ec6415ce765d9b429d313ba97b8143169c172e734b9514464f5b2",
+              name="OpenSSL 3.5.9",
+              url="https://github.com/openssl/openssl/releases/download/openssl-3.5.9/openssl-3.5.9.tar.gz",
+              checksum="603f5602e2eef00d77fbd429d34dcd5822bb301757a1bc9cdb24c670f1eb859a",
               buildrecipe=build_universal_openssl,
               configure=None,
               install=None,
diff --git a/Misc/NEWS.d/next/Security/2026-06-09-23-38-08.gh-issue-151159.ds-9f8.rst b/Misc/NEWS.d/next/Security/2026-06-09-23-38-08.gh-issue-151159.ds-9f8.rst
deleted file mode 100644
index d9251a93b40b2cc..000000000000000
--- a/Misc/NEWS.d/next/Security/2026-06-09-23-38-08.gh-issue-151159.ds-9f8.rst
+++ /dev/null
@@ -1 +0,0 @@
-Update macOS installer to use OpenSSL 3.5.7.
diff --git a/Misc/NEWS.d/next/macOS/2026-08-27-03-19-21.gh-issue-156369.FKlSGY.rst b/Misc/NEWS.d/next/macOS/2026-08-27-03-19-21.gh-issue-156369.FKlSGY.rst
deleted file mode 100644
index e953a92f5a106da..000000000000000
--- a/Misc/NEWS.d/next/macOS/2026-08-27-03-19-21.gh-issue-156369.FKlSGY.rst
+++ /dev/null
@@ -1 +0,0 @@
-Update macOS installer to use OpenSSL 3.5.8.
diff --git a/Misc/NEWS.d/next/macOS/2026-09-29-09-29-17.gh-issue-158010.2zJnoj.rst b/Misc/NEWS.d/next/macOS/2026-09-29-09-29-17.gh-issue-158010.2zJnoj.rst
new file mode 100644
index 000000000000000..cf9c417eec7fe6d
--- /dev/null
+++ b/Misc/NEWS.d/next/macOS/2026-09-29-09-29-17.gh-issue-158010.2zJnoj.rst
@@ -0,0 +1 @@
+Update macOS installer to use OpenSSL 3.5.9.