Add support for Python 3.13.

#41

PiperOrigin-RevId: 748323022
Change-Id: Ifa23b7ddfa3599ee908f5c2e24f1c1b423de8f21

Author: morambro

examples/WORKSPACE

@@ -28,9 +28,9 @@ load("@rules_python//python:repositories.bzl", "py_repositories", "python_regist
 py_repositories()
 
 python_register_toolchains(
-    name = "python_3_12",
+    name = "python_3_13",
     ignore_root_user_error = True,
-    python_version = "3.12",
+    python_version = "3.13",
 )
 
 load("@tink_cc//:tink_cc_deps.bzl", "tink_cc_deps")

kokoro/gcp_windows/release/bdist/create/run.bat

@@ -23,7 +23,7 @@ CD !WORKSPACE_DIR!
 IF %errorlevel% neq 0 EXIT /B 1
 
 @REM Install protoc.
-choco install -y --no-progress protoc --version=25.2.0
+choco install -y --no-progress protoc --version=30.2.0
 SET OLD_PATH=%PATH%
 
 SET /p TINK_VERSION=<VERSION
@@ -52,7 +52,11 @@ CALL :UsePython "3.11.9" "311" || GOTO :Error
 CALL :BuildAndInstallWheel || GOTO :Error
 CALL :RunTests || GOTO :Error
 
-CALL :UsePython "3.12.3" "312" || GOTO :Error
+CALL :UsePython "3.12.9" "312" || GOTO :Error
+CALL :BuildAndInstallWheel || GOTO :Error
+CALL :RunTests || GOTO :Error
+
+CALL :UsePython "3.13.3" "313" || GOTO :Error
 CALL :BuildAndInstallWheel || GOTO :Error
 CALL :RunTests || GOTO :Error
 

kokoro/macos_external/bazel/run_tests.sh

@@ -29,10 +29,15 @@ if [[ -n "${KOKORO_ROOT:-}" ]]; then
   cd "${TINK_BASE_DIR}/tink_py"
 fi
 
-# Make sure we use the latest Python 3.12 available with pyenv.
-eval "$(pyenv init -)"
-pyenv install -s "3.12"
-pyenv global "3.12"
+# Make sure we use the latest Python 3.13 available with pyenv.
+# The macOS image exports a PYENV_ROOT env variable.
+(
+  cd "${PYENV_ROOT:-"${HOME}/.pyenv"}"
+  git pull
+  eval "$(pyenv init -)"
+  pyenv install -s "3.13"
+  pyenv global "3.13"
+)
 
 ./kokoro/testutils/copy_credentials.sh "testdata" "all"
 ./kokoro/testutils/copy_credentials.sh "examples/testdata" "gcp"

kokoro/macos_external/pip/run_tests.sh

@@ -35,10 +35,15 @@ if [[ -n "${KOKORO_ROOT:-}" ]]; then
   cd "${TINK_BASE_DIR}/tink_py"
 fi
 
-# Make sure we use the latest Python 3.12 available with pyenv.
-eval "$(pyenv init -)"
-pyenv install -s "3.12"
-pyenv global "3.12"
+# Make sure we use the latest Python 3.13 available with pyenv.
+# The macOS image exports a PYENV_ROOT env variable.
+(
+  cd "${PYENV_ROOT:-"${HOME}/.pyenv"}"
+  git pull
+  eval "$(pyenv init -)"
+  pyenv install -s "3.13"
+  pyenv global "3.13"
+)
 
 # Sourcing required to update callers environment.
 source ./kokoro/testutils/install_protoc.sh "30.2"

kokoro/macos_external/release/bdist/create/run.sh

@@ -42,6 +42,13 @@ if [[ -n "${TINK_REMOTE_BAZEL_CACHE_GCS_BUCKET:-}" ]]; then
 fi
 readonly CREATE_DIST_OPTIONS
 
+# Update pyenv.
+# The macOS image exports a PYENV_ROOT env variable.
+(
+  cd "${PYENV_ROOT:-"${HOME}/.pyenv"}"
+  git pull
+)
+
 # Sourcing required to update callers environment.
 source ./kokoro/testutils/install_protoc.sh "30.2"
 

kokoro/testutils/py_test_container_images.sh

@@ -25,12 +25,12 @@ _image_prefix() {
 
 # Linux x86_64 container image.
 readonly TINK_PY_BASE_IMAGE_NAME="linux-tink-py-base"
-readonly TINK_PY_BASE_IMAGE_HASH="32c19ce721994942c2f8a6bfa99bd193d6bbd8a3edbb466b8a965501e4ae8b04"
+readonly TINK_PY_BASE_IMAGE_HASH="eb0e710d9e61a238ae193535cf4c06d9b77b27d67392b701db55fba2b0b88223"
 readonly TINK_PY_BASE_IMAGE="$(_image_prefix)/${TINK_PY_BASE_IMAGE_NAME}@sha256:${TINK_PY_BASE_IMAGE_HASH}"
 
 # Linux arm64 container image.
 readonly TINK_PY_BASE_ARM64_IMAGE_NAME="linux-tink-py-base-arm64"
-readonly TINK_PY_BASE_ARM64_IMAGE_HASH="760df76aed0bc189b9d2e3b2e4f5926244ca021263d7375485f705c96840023b"
+readonly TINK_PY_BASE_ARM64_IMAGE_HASH="c96f37e417d2b2b1454b2ad78a03c91b23b4f76678d9b5b9adf34b88ac48309f"
 readonly TINK_PY_BASE_ARM64_IMAGE="$(_image_prefix)/${TINK_PY_BASE_ARM64_IMAGE_NAME}@sha256:${TINK_PY_BASE_ARM64_IMAGE_HASH}"
 
 unset -f _image_prefix

setup.py

@@ -251,6 +251,7 @@ def main() -> None:
           'Programming Language :: Python :: 3.10',
           'Programming Language :: Python :: 3.11',
           'Programming Language :: Python :: 3.12',
+          'Programming Language :: Python :: 3.13',
           'Topic :: Software Development :: Libraries',
       ],
       options=options(),

tink_py_deps.bzl

@@ -40,13 +40,12 @@ def tink_py_deps():
         },
     )
 
-    # Release from 2024-02-13
     maybe(
         http_archive,
         name = "rules_python",
-        sha256 = "c68bdc4fbec25de5b5493b8819cfc877c4ea299c0dcb15c244c5a00208cde311",
-        strip_prefix = "rules_python-0.31.0",
-        url = "https://github.com/bazelbuild/rules_python/releases/download/0.31.0/rules_python-0.31.0.tar.gz",
+        sha256 = "4f7e2aa1eb9aa722d96498f5ef514f426c1f55161c3c9ae628c857a7128ceb07",
+        strip_prefix = "rules_python-1.0.0",
+        url = "https://github.com/bazelbuild/rules_python/releases/download/1.0.0/rules_python-1.0.0.tar.gz",
     )
 
     # Release from 2023-07-17

tools/distribution/build_linux_binary_wheels.sh

@@ -31,6 +31,7 @@ PYTHON_VERSIONS["3.9"]="cp39-cp39"
 PYTHON_VERSIONS["3.10"]="cp310-cp310"
 PYTHON_VERSIONS["3.11"]="cp311-cp311"
 PYTHON_VERSIONS["3.12"]="cp312-cp312"
+PYTHON_VERSIONS["3.13"]="cp313-cp313"
 readonly -A PYTHON_VERSIONS
 
 export TINK_PYTHON_ROOT_PATH="${PWD}"

tools/distribution/create_bdist.sh

@@ -20,18 +20,18 @@ set -eEuox pipefail
 
 readonly GCS_URL="https://storage.googleapis.com"
 
-readonly PYTHON_VERSIONS=( "3.9" "3.10" "3.11" "3.12" )
+readonly PYTHON_VERSIONS=( "3.9" "3.10" "3.11" "3.12" "3.13" )
 
 readonly PLATFORM="$(uname | tr '[:upper:]' '[:lower:]')"
 
 export TINK_PYTHON_ROOT_PATH="${PWD}"
 
 readonly MANYLINUX_X86_64_IMAGE_NAME="quay.io/pypa/manylinux2014_x86_64"
-readonly MANYLINUX_X86_64_IMAGE_SHA256="sha256:2f9e5abda045d41f5418216fe7601cf12249989b9aba0a83d009b8cc434cb220"
+readonly MANYLINUX_X86_64_IMAGE_SHA256="sha256:a88c482d5403f0fe91836f48a37828ef1520c3a548715dd0d7f20c0c1d4d34e0"
 readonly MANYLINUX_X86_64_IMAGE="${MANYLINUX_X86_64_IMAGE_NAME}@${MANYLINUX_X86_64_IMAGE_SHA256}"
 
 readonly MANYLINUX_AARCH64_IMAGE_NAME="quay.io/pypa/manylinux2014_aarch64"
-readonly MANYLINUX_AARCH64_IMAGE_SHA256="sha256:8fd5c58bf1c6a217cddd711144e25af433f2e1f5928245b6e2476affb5d1a76b"
+readonly MANYLINUX_AARCH64_IMAGE_SHA256="sha256:a4f98ac4c63be3566e8af2b0dcec65d99937c886e9fd6931a3ded224a451ec63"
 readonly MANYLINUX_AARCH64_IMAGE="${MANYLINUX_AARCH64_IMAGE_NAME}@${MANYLINUX_AARCH64_IMAGE_SHA256}"
 
 readonly ARCH="$(uname -m)"