Please confirm the following
Describe the bug
Because cibuildwheel does not clear out the built extensions from other Python versions, the following builds pick up the previously built ones from disk and include them into wheels.
To Reproduce
- Run
python -Im build --wheel under two different Python versions (like 3.11 and 3.12), one after the other
wheel unpack the last artifact
- See
*.so files for both 3.11 and 3.12 in there
Expected behavior
Only shared objects compatible with the current runtime should be a part of each wheel.
Logs/tracebacks
$ ls dist/yarl-*/yarl/*.so
dist/yarl-1.22.1.dev0/yarl/_quoting_c.cpython-312-x86_64-linux-gnu.so dist/yarl-1.22.1.dev0/yarl/_quoting_c.cpython-313-x86_64-linux-gnu.so
Python Version
multidict Version
propcache Version
yarl Version
OS
N/A
Additional context
This is basically the same as ansible/pylibssh#686 since it is the build backend upstream.
Please confirm the following
vulnerability, to the best of my knowledge. (These must be shared by
submitting this report form instead, if
any hesitation exists.)
Describe the bug
Because
cibuildwheeldoes not clear out the built extensions from other Python versions, the following builds pick up the previously built ones from disk and include them into wheels.To Reproduce
python -Im build --wheelunder two different Python versions (like 3.11 and 3.12), one after the otherwheel unpackthe last artifact*.sofiles for both 3.11 and 3.12 in thereExpected behavior
Only shared objects compatible with the current runtime should be a part of each wheel.
Logs/tracebacks
Python Version
N/Amultidict Version
N/Apropcache Version
N/Ayarl Version
`master`OS
N/A
Additional context
This is basically the same as ansible/pylibssh#686 since it is the build backend upstream.