release: 0.29.3

.github/actions/build-emscripten/action.yml

@@ -0,0 +1,51 @@
+name: Build Emscripten
+description: Build the cached CPython Emscripten environment
+inputs:
+  save-cache:
+    description: Whether to save build caches
+    required: false
+    default: "false"
+runs:
+  using: composite
+  steps:
+    - name: Select Python
+      shell: bash
+      run: echo "UV_PYTHON=3.15" >> "$GITHUB_ENV"
+    - uses: astral-sh/setup-uv@v7
+      with:
+        save-cache: ${{ inputs.save-cache }}
+    - name: Install Rust toolchain
+      uses: dtolnay/rust-toolchain@stable
+      with:
+        targets: wasm32-unknown-emscripten
+        components: rust-src
+    - uses: actions/setup-node@v7
+      with:
+        node-version: 24
+    - name: Resolve CPython version
+      id: python
+      shell: bash
+      run: |
+        version=$(uv run --no-project --python "$UV_PYTHON" python -c 'import sys; print(sys.version.split()[0])')
+        echo "version=$version" >> "$GITHUB_OUTPUT"
+    - name: Restore build cache
+      if: inputs.save-cache != 'true'
+      id: cache-restore
+      uses: actions/cache/restore@v6
+      with:
+        path: .nox/emscripten
+        key: emscripten-${{ hashFiles('wasm/emscripten/*', 'wasm/common.mk') }}-${{ hashFiles('noxfile.py') }}-${{ steps.python.outputs.version }}
+    - name: Restore and save build cache
+      if: inputs.save-cache == 'true'
+      id: cache
+      uses: actions/cache@v6
+      with:
+        path: .nox/emscripten
+        key: emscripten-${{ hashFiles('wasm/emscripten/*', 'wasm/common.mk') }}-${{ hashFiles('noxfile.py') }}-${{ steps.python.outputs.version }}
+    - uses: Swatinem/rust-cache@v2
+      with:
+        save-if: ${{ inputs.save-cache }}
+    - name: Build
+      if: steps.cache.outputs.cache-hit != 'true' && steps.cache-restore.outputs.cache-hit != 'true'
+      shell: bash
+      run: uvx nox -s build-emscripten

.github/actions/build-wasi/action.yml

@@ -0,0 +1,59 @@
+name: Build WASI
+description: Build the cached CPython WASI environment
+inputs:
+  save-cache:
+    description: Whether to save caches
+    required: false
+    default: "false"
+runs:
+  using: composite
+  steps:
+    - name: Select Python
+      shell: bash
+      run: echo "UV_PYTHON=3.15" >> "$GITHUB_ENV"
+    - uses: astral-sh/setup-uv@v7
+      with:
+        save-cache: ${{ inputs.save-cache }}
+    - name: Install Rust toolchain
+      uses: dtolnay/rust-toolchain@stable
+      with:
+        targets: wasm32-wasip1
+        components: rust-src
+    - name: Install wasmtime
+      uses: bytecodealliance/actions/wasmtime/setup@v1
+    - name: Resolve CPython version
+      id: python
+      shell: bash
+      run: |
+        version=$(uv run --no-project --python "$UV_PYTHON" python -c 'import sys; print(sys.version.split()[0])')
+        echo "version=$version" >> "$GITHUB_OUTPUT"
+    - name: Restore build cache
+      if: inputs.save-cache != 'true'
+      id: cache-restore
+      uses: actions/cache/restore@v6
+      with:
+        path: .nox/wasi
+        key: wasi-${{ hashFiles('wasm/wasi/*', 'wasm/common.mk') }}-${{ hashFiles('noxfile.py') }}-${{ steps.python.outputs.version }}
+    - name: Restore and save build cache
+      if: inputs.save-cache == 'true'
+      id: cache
+      uses: actions/cache@v6
+      with:
+        path: .nox/wasi
+        key: wasi-${{ hashFiles('wasm/wasi/*', 'wasm/common.mk') }}-${{ hashFiles('noxfile.py') }}-${{ steps.python.outputs.version }}
+    - uses: Swatinem/rust-cache@v2
+      with:
+        save-if: ${{ inputs.save-cache }}
+    - name: Prepare CPython source
+      id: prepare
+      shell: bash
+      run: uvx nox -s prepare-wasm
+    - name: Install WASI SDK
+      uses: bytecodealliance/setup-wasi-sdk-action@v1
+      with:
+        version: ${{ steps.prepare.outputs.wasi-sdk-version }}
+        add-to-path: false
+    - name: Build
+      if: steps.cache.outputs.cache-hit != 'true' && steps.cache-restore.outputs.cache-hit != 'true'
+      shell: bash
+      run: uvx nox -s build-wasm

.github/workflows/benches.yml

@@ -18,14 +18,14 @@ jobs:
   benchmarks:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - uses: astral-sh/setup-uv@v7
         with:
           save-cache: ${{ github.ref == 'refs/heads/main' || contains(github.event.pull_request.labels.*.name, 'CI-save-pr-cache') }}
 
       # Using this action is still necessary for CodSpeed to build flamegraphs correctly,
       # see note about setup-python in https://codspeed.io/docs/benchmarks/python#recipes
-      - uses: actions/setup-python@v6
+      - uses: actions/setup-python@v7
         with:
           python-version: ${{ env.UV_PYTHON }}
 
@@ -47,7 +47,7 @@ jobs:
           tool: cargo-codspeed
 
       - name: Run the benchmarks
-        uses: CodSpeedHQ/action@v5.0.1
+        uses: CodSpeedHQ/action@v5.2.1
         with:
           run: uvx nox -s codspeed
           token: ${{ secrets.CODSPEED_TOKEN }}

.github/workflows/build.yml

@@ -36,20 +36,19 @@ jobs:
     runs-on: ${{ inputs.os }}
     if: ${{ !(startsWith(inputs.python-version, 'graalpy') && startsWith(inputs.os, 'windows')) }}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ inputs.sha }}
 
       # installs using setup-python do not work for arm macOS 3.9 and below
       - if: ${{ !(inputs.os == 'macos-latest' && contains(fromJSON('["3.8", "3.9"]'), inputs.python-version) && inputs.python-architecture == 'x64') }}
         name: Set up Python ${{ inputs.python-version }}
         id: setup-python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ inputs.python-version }}
           architecture: ${{ inputs.python-architecture }}
-          # PyPy can have FFI changes within Python versions, which creates pain in CI
-          check-latest: ${{ startsWith(inputs.python-version, 'pypy') }}
+          check-latest: true
 
       - name: Install zoneinfo backport for Python 3.8
         id: zoneinfo-backport

.github/workflows/changelog.yml

@@ -9,8 +9,8 @@ jobs:
     name: Check changelog entry
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
-      - uses: actions/setup-python@v6
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.14'
       - uses: astral-sh/setup-uv@v7

.github/workflows/ci-cache-warmup.yml

@@ -9,8 +9,8 @@ jobs:
   cross-compilation-windows:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7.0.0
-      - uses: actions/setup-python@v6
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.14"
       - uses: dtolnay/rust-toolchain@stable
@@ -32,3 +32,19 @@ jobs:
         with:
           path: ~/.cache/cargo-xwin
           key: cargo-xwin-cache
+
+  emscripten:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7.0.1
+      - uses: ./.github/actions/build-emscripten
+        with:
+          save-cache: true
+
+  wasm32-wasip1:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7.0.1
+      - uses: ./.github/actions/build-wasi
+        with:
+          save-cache: true