diff --git a/CHANGELOG-AIX.md b/CHANGELOG-AIX.md index 912ed423baa9..7fca423b8b6e 100644 --- a/CHANGELOG-AIX.md +++ b/CHANGELOG-AIX.md @@ -11,7 +11,7 @@ - Set `NLSPATH` in the agent wrapper so the IBM MQ client library can locate its own message catalogs. Previously, `ibm_mq` check errors and other MQ client errors rendered as unreadable generic text (e.g. `AMQ9211E: Failed to find error message id`) instead of the real message, because the agent process only had AIX's default `NLSPATH` (`/usr/lib/nls/msg/...`), which doesn't include MQ's catalog directory. -- Bump the embedded Python from 3.13.12 to 3.13.14, matching the version used by the Linux omnibus/bazel build +- Bump the embedded Python from 3.13.12 to 3.13.15, matching the version used by the Linux omnibus/bazel build - Build embedded OpenSSL with the same hardening flags as the Linux omnibus/bazel build (`no-idea no-mdc2 no-rc5 no-ssl3 no-gost no-filenames`, dynamic zlib loading) — the AIX build previously shipped OpenSSL with default settings, retaining legacy/weak algorithms and the GOST engine that Linux deliberately strips - Add a `/usr/bin/datadog-agent` convenience symlink to the agent wrapper on install, matching the Linux packages - Fix `/var/log/datadog` permissions: it was left world-readable (default `0755`) after install instead of the restrictive `0750` (owner/group `dd-agent`) used on other platforms diff --git a/deps/cpython/cpython.MODULE.bazel b/deps/cpython/cpython.MODULE.bazel index 91e4a4965829..16283525c803 100644 --- a/deps/cpython/cpython.MODULE.bazel +++ b/deps/cpython/cpython.MODULE.bazel @@ -2,7 +2,7 @@ http_archive = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "ht constants_repo = use_repo_rule("//bazel/repo:constants_repo.bzl", "constants_repo") -PYTHON_VERSION = "3.13.14" +PYTHON_VERSION = "3.13.15" PYTHON_MAJOR_MINOR = ".".join(PYTHON_VERSION.split(".")[:2]) @@ -32,7 +32,7 @@ http_archive( "//deps/cpython:0004-Skip-bytecode-compilation-during-install.patch", "//deps/cpython:0005-Honor-explicit-libffi-flags-on-Darwin.patch", ], - sha256 = "5ae535a36af0ebca6fca176ecb8197f5db9c1cb8c8f0cd12cdf1787046db1f41", + sha256 = "c28d9d213c09b5b5ab2c29812950e12f746999e099b82894231be954b26baed9", strip_prefix = "Python-{}".format(PYTHON_VERSION), url = "https://python.org/ftp/python/{0}/Python-{0}.tgz".format(PYTHON_VERSION), ) diff --git a/omnibus/config/software/python3.rb b/omnibus/config/software/python3.rb index fbfc7d226fcc..7fe67a5b6479 100644 --- a/omnibus/config/software/python3.rb +++ b/omnibus/config/software/python3.rb @@ -1,6 +1,6 @@ name "python3" -default_version "3.13.14" +default_version "3.13.15" relative_path "Python-#{version}" diff --git a/packaging/aix/lib/env.sh b/packaging/aix/lib/env.sh index 45d6a2230a6f..220617b9c831 100644 --- a/packaging/aix/lib/env.sh +++ b/packaging/aix/lib/env.sh @@ -11,7 +11,7 @@ # any variable before sourcing this file. # ── Python version ──────────────────────────────────────────────────────────── -PYTHON_VERSION="3.13.14" +PYTHON_VERSION="3.13.15" PYTHON_MAJ_MIN="${PYTHON_VERSION%.*}" # e.g. 3.13 export PYTHON_VERSION PYTHON_MAJ_MIN diff --git a/releasenotes/notes/Bump-embedded-Python-to-3.13.15-3ce1819a2b93b6bd.yaml b/releasenotes/notes/Bump-embedded-Python-to-3.13.15-3ce1819a2b93b6bd.yaml new file mode 100644 index 000000000000..7c4b1a47beb0 --- /dev/null +++ b/releasenotes/notes/Bump-embedded-Python-to-3.13.15-3ce1819a2b93b6bd.yaml @@ -0,0 +1,4 @@ +--- +enhancements: +- | + The Agent's embedded Python has been upgraded from 3.13.14 to 3.13.15 diff --git a/test/new-e2e/tests/agent-platform/common/agent_behaviour.go b/test/new-e2e/tests/agent-platform/common/agent_behaviour.go index b661dbf79679..a32e9d93b983 100644 --- a/test/new-e2e/tests/agent-platform/common/agent_behaviour.go +++ b/test/new-e2e/tests/agent-platform/common/agent_behaviour.go @@ -228,7 +228,7 @@ const ( ExpectedPythonVersion2 = "2.7.18" // ExpectedPythonVersion3 is the expected python 3 version // Bump this version when the version in omnibus/config/software/python3.rb changes - ExpectedPythonVersion3 = "3.13.14" + ExpectedPythonVersion3 = "3.13.15" // ExpectedUnloadedPython is the status value for uninitialized lazy loaded python runtime ExpectedUnloadedPython = "unused" )