Skip to content

[Backport 7.83.x] [automated] Upgrade embedded Python patch version to 3.13.15 #54932

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dd-octo-sts wants to merge 1 commit into
base: 7.83.x
Choose a base branch
from
Open

[Backport 7.83.x] [automated] Upgrade embedded Python patch version to 3.13.15 #54932

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion CHANGELOG-AIX.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
<!-- Add entries here for changes not yet in a release. -->

- Set `NLSPATH` in the agent wrapper so the IBM MQ client library can locate its own message catalogs. Previously, `ibm_mq` check errors and other MQ client errors rendered as unreadable generic text (e.g. `AMQ9211E: Failed to find error message id`) instead of the real message, because the agent process only had AIX's default `NLSPATH` (`/usr/lib/nls/msg/...`), which doesn't include MQ's catalog directory.
- Bump the embedded Python from 3.13.12 to 3.13.14, matching the version used by the Linux omnibus/bazel build
- Bump the embedded Python from 3.13.12 to 3.13.15, matching the version used by the Linux omnibus/bazel build
- Build embedded OpenSSL with the same hardening flags as the Linux omnibus/bazel build (`no-idea no-mdc2 no-rc5 no-ssl3 no-gost no-filenames`, dynamic zlib loading) — the AIX build previously shipped OpenSSL with default settings, retaining legacy/weak algorithms and the GOST engine that Linux deliberately strips
- Add a `/usr/bin/datadog-agent` convenience symlink to the agent wrapper on install, matching the Linux packages
- Fix `/var/log/datadog` permissions: it was left world-readable (default `0755`) after install instead of the restrictive `0750` (owner/group `dd-agent`) used on other platforms
Expand Down
4 changes: 2 additions & 2 deletions deps/cpython/cpython.MODULE.bazel
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ http_archive = use_repo_rule("@bazel_tools//tools/build_defs/repo:http.bzl", "ht

constants_repo = use_repo_rule("//bazel/repo:constants_repo.bzl", "constants_repo")

PYTHON_VERSION = "3.13.14"
PYTHON_VERSION = "3.13.15"

PYTHON_MAJOR_MINOR = ".".join(PYTHON_VERSION.split(".")[:2])

Expand Down Expand Up @@ -32,7 +32,7 @@ http_archive(
"//deps/cpython:0004-Skip-bytecode-compilation-during-install.patch",
"//deps/cpython:0005-Honor-explicit-libffi-flags-on-Darwin.patch",
],
sha256 = "5ae535a36af0ebca6fca176ecb8197f5db9c1cb8c8f0cd12cdf1787046db1f41",
sha256 = "c28d9d213c09b5b5ab2c29812950e12f746999e099b82894231be954b26baed9",
strip_prefix = "Python-{}".format(PYTHON_VERSION),
url = "https://python.org/ftp/python/{0}/Python-{0}.tgz".format(PYTHON_VERSION),
)
Expand Down
2 changes: 1 addition & 1 deletion omnibus/config/software/python3.rb
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
name "python3"

default_version "3.13.14"
default_version "3.13.15"


relative_path "Python-#{version}"
Expand Down
2 changes: 1 addition & 1 deletion packaging/aix/lib/env.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@
# any variable before sourcing this file.

# ── Python version ────────────────────────────────────────────────────────────
PYTHON_VERSION="3.13.14"
PYTHON_VERSION="3.13.15"

@chatgpt-codex-connector chatgpt-codex-connector Bot Aug 14, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Invalidate cached AIX stages when bumping Python

When an AIX build host has already completed a build, this version bump is ignored because stages/02-python.sh exits whenever the version-independent /opt/dd-build/.done/02-python sentinel exists; the Python-extension stages use similarly unversioned sentinels, and build.sh does not clear them. Re-running build.sh for this release without manually invoking clean.sh can therefore package Python 3.13.14 while the source and changelog claim 3.13.15. Include the Python version in the relevant sentinel/cache identity or automatically invalidate the Python-dependent stages when it changes.

Useful? React with 👍 / 👎.

PYTHON_MAJ_MIN="${PYTHON_VERSION%.*}" # e.g. 3.13
export PYTHON_VERSION PYTHON_MAJ_MIN

Expand Down
4 changes: 4 additions & 0 deletions releasenotes/notes/Bump-embedded-Python-to-3.13.15-3ce1819a2b93b6bd.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,4 @@
---
enhancements:
- |
The Agent's embedded Python has been upgraded from 3.13.14 to 3.13.15
2 changes: 1 addition & 1 deletion test/new-e2e/tests/agent-platform/common/agent_behaviour.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -228,7 +228,7 @@ const (
ExpectedPythonVersion2 = "2.7.18"
// ExpectedPythonVersion3 is the expected python 3 version
// Bump this version when the version in omnibus/config/software/python3.rb changes
ExpectedPythonVersion3 = "3.13.14"
ExpectedPythonVersion3 = "3.13.15"
// ExpectedUnloadedPython is the status value for uninitialized lazy loaded python runtime
ExpectedUnloadedPython = "unused"
)
Expand Down
Loading