conda / conda-package-handling

Create and extract conda packages of various formats
https://conda.github.io/conda-package-handling/
BSD 3-Clause "New" or "Revised" License
26 stars 37 forks source link

Update python matrix (add 3.10, 3.11, 3.12 - drop 3.7) #231

Closed Callek closed 4 months ago

Callek commented 6 months ago

Description

Checklist - did you ...

Extra Note

In python 3.12 this now raises the following warning:

DeprecationWarning: Python 3.14 will, by default, filter extracted tar archives and reject files or modify their metadata. Use the filter argument to control this behavior.

That relates to https://docs.python.org/3/library/tarfile.html#extraction-filters and specifically in 3.8->3.12 an non-specified filter will default to fully_trusted which may not be secure. I went with not altering the behavior in this PR, but a followup issue should be filed/acted on to decide how we want to proceed.

This is a warning that is also present on 3.12 CI for conda itself.

conda-bot commented 6 months ago

We require contributors to sign our Contributor License Agreement and we don't have one on file for @Callek.

In order for us to review and merge your code, please e-sign the Contributor License Agreement PDF. We then need to manually verify your signature, merge the PR (https://github.com/conda/infrastructure/pull/889), and ping the bot to refresh the PR.

kenodegard commented 6 months ago

@conda-bot check