[ofek]

Changes

Refresh the default CPython distributions to the 20261026 release and update the existing PyPy 3.11 and 2.7 targets to PyPy 8.0.1. Handle the .tar.gz suffix when deriving PyPy interpreter and site-packages paths. The newer PyPy Linux distributions require glibc 2.28 or newer, as documented in the changelog and upstream release notes.

Add the missing Fixed changelog entry for the TLS trust dependency refresh in #238. Explain that builds using the bundled lockfile, including cargo build --release and cargo install pyapp --locked, need the dependency refresh; cargo install pyapp without --locked already resolves the fixed dependencies. Preserve all existing distribution targets and frozen CPython entries.

Validation

Rust commands ran on Windows with PYAPP_PROJECT_NAME=cowsay and PYAPP_PROJECT_VERSION=5.0.0.

cargo clippy --locked --no-deps

Passed with warnings on existing code. Dependency compilation and individual warning details are omitted from this output excerpt.

warning: `pyapp` (build script) generated 8 warnings
warning: `pyapp` (bin "pyapp") generated 19 warnings
    Finished `dev` profile [unoptimized + debuginfo] target(s) in 55.71s

cargo run --locked -- Moo Success!

Passed. Output excerpt:

    Finished `dev` profile [unoptimized + debuginfo] target(s) in 31.25s
     Running `target\debug\pyapp.exe Moo Success!`
  ____________
| Moo Success! |
  ============

uv run python - (distribution URL and coverage validation)

Used a temporary Python validator to compare distribution keys with the base commit, check updated URLs against upstream release metadata, and issue HEAD requests for the updated PyPy URLs.

CPython: 214 targets preserved; 160 URLs verified against release 20261026; frozen targets unchanged
Updated CPython targets by version: 3.11: 20, 3.12: 20, 3.13: 40, 3.14: 40, 3.15: 40
PyPy: 20 targets preserved; 10 updated URLs verified against stable release metadata and HTTP 200 responses

uv run python - (compiled build-script distribution matrix validation)

Ran the compiled build script with each supported target configuration, using a temporary manifest directory. Checked archive formats, PyPy interpreter and site-packages paths, and the unsupported-version failure path.

PASS: compiled build script selects all 214 CPython targets and archive formats
PASS: all 20 PyPy targets resolve interpreter and site-packages paths for gzip, bzip2, and ZIP archives
PASS: unsupported Python version fails explicitly

cargo fmt --check

Passed with exit status 0 and no output.

uv run scripts/validate_options.py

Passed with exit status 0 and no output.

git diff --check

Passed with exit status 0 and no output.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-27T17:20:09.015824Z	cfb4f61	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.