@ai-ecoverse/slicc-bios 1.29.3 → 1.30.1

package/README.md

@@ -192,7 +192,10 @@ Below the system rows, Install / Update offers **Optional packages** (spectrum
 - **Readable by everyone:** after every pnpm install of `/opt/agent`, `/opt/grammars` and an optional project in `/opt/slicc`, bios makes that tree readable by everyone, as root: one `find` selects the files without `a+r`, the executables without `a+x` and the directories without `a+x`, and runs `chmod a+rX` on only those, so a tree of 15,000 entries with one `0600` file pays for one walk and one `chmod`, not 15,000. pnpm writes some files `0600`, such as `node_modules/.pnpm-workspace-state-v1.json`, and with kernel users every user must be able to read seven's installed packages. An install from before this runs the same pass once at its next check, marked by `var/lib/slicc/<project>/readable`.
 - **Failures** lead with one sentence and keep pnpm's output, starting with the package and version, under *Install log*, with **Retry**.
 - **Withdrawn and kept as exceptions** (homescoop#858/#859, #864): uv, esbuild, tsc and buf are withdrawn until attested rebuilds. They're retired rows (*No longer offered*, with Remove for an earlier install), and their certs lines are gone. Instead, use `pip` for uv's work for now (uv returns as `@ai-ecoverse/wasi-uv`, Astral's uv, once that's certified), and install esbuild and typescript straight from npm with `pnpm add -g`; buf has no stand-in. **git** and **gh** stay as recorded supply-chain exceptions until their attested rebuilds: their `certs.json` entries carry an `exception` field, which `pins.test.mjs` lists, and any other uncertified pin still fails it.
-- **Python data tools are back** as homescoop's attested CI builds (A3, A4): py-numpy 2.3.2-12, py-pandas 2.3.2-12 and py-matplotlib 3.11.2-10, with contourpy, kiwisolver, pillow and their pure dependencies, on the catalog's Python 3.14.2-28. They replace the withdrawn builds (homescoop#826, #730): no py-numpy 2.3.2-4 to -10 or py-pandas 2.3.2-5 to -11 is certified, and an install from before the withdrawal (version 2026.10.12) shows as outdated, with **Update**. numpy 2.3.2-12 has homescoop#1082's fix: `numpy.linalg` raises `LinAlgError` on a singular matrix instead of returning NaN. **scipy is back too:** py-scipy 1.18.1-1, an attested CI build (homescoop#1238) against the same numpy 2.3.2-12, with static OpenBLAS. Every scipy module loads except the deprecated `scipy.odr`, which needs Fortran, so `import scipy.odr` fails. The project's version is now 2026.10.19, so an install without scipy shows as outdated, with **Update**.
+- **Python data tools on Python 3.15:** the catalog's Python is wasix-python 3.15.0-2, and the data tools are homescoop's attested cp315 builds for it: py-numpy 2.5.4-1, py-pandas 3.0.6-1, py-matplotlib 3.11.2-11 and py-scipy 1.18.1-2, with contourpy, kiwisolver, pillow 13.0.0-1 and their pure dependencies. seven never mixes builds for two Pythons: Python and every py-* move in one PR, and Renovate groups them so (`renovate.json`). The project's version is 2026.10.20, so an install of the 3.14 data tools (2026.10.19 and earlier) shows as outdated, with **Update**, which moves Python first and then the project; nothing built for 3.14 stays in `/opt/slicc/pydata`, and the `.pth` lists only 3.15 site-packages.
+  - **What changed for code:** pandas 3.0 has copy-on-write, a `str` dtype for strings by default, and no longer needs pytz, so the project drops it (`six` stays, for dateutil). pillow 13 removed some deprecated APIs. numpy 2.5 keeps homescoop#1082's fix: `numpy.linalg` raises `LinAlgError` on a singular matrix instead of returning NaN.
+  - **scipy** has static OpenBLAS, and every module loads except the deprecated `scipy.odr`, which needs Fortran, so `import scipy.odr` fails.
+  - **The withdrawn builds** (homescoop#826, #730) stay uncertified: no py-numpy 2.3.2-4 to -10 or py-pandas 2.3.2-5 to -11.
 - **Project entries** (`kind: "project"`): **Python data tools** (numpy, pandas, matplotlib and scipy, about 240 MB on disk) can't be a global add. pnpm 12 gives each global add its own isolated project, so every py-* package would carry its own Python (about 1 GB in total), and Python wouldn't find the packages. So the entry is a pnpm project of its own in [`src/packages/optional/projects/pydata/`](src/packages/optional/projects/pydata/), which locks one numpy and no Python of its own:
   - **Install:** bios writes the project to `/opt/slicc/pydata` and installs it with `pnpm install --frozen-lockfile`, so pnpm checks every integrity against the lockfile bios ships. Its `pnpm-workspace.yaml` overrides `@ai-ecoverse/wasix-python` to nothing, and the entry `requires` the catalog's Python, which runs it.
   - **How Python finds it:** bios writes `/opt/slicc/python/slicc-pydata.pth`, which lists each package's site-packages (from its `slicc.python.sitePackages`), next to a `sitecustomize.py` that adds that folder as a site directory. The page's kernel puts `/opt/slicc/python` on every process's `PYTHONPATH`, so `python3` imports the packages from any shell or agent, as any user. Python's own discovery only looks in its own project, so the `.pth` stays. A `.pth` that an earlier version wrote to `/root/.local` is moved there the next time the optional packages are listed. The kernel's environment reaches every process, whichever client or user starts it, `sudo` included. `python -I` and `python -E` ignore `PYTHONPATH`, so they don't see the data tools; that's a known gap.
@@ -565,15 +568,15 @@ Every shard runs the files with a failing test once more and passes when they pa
 
 ## Hosting
 
-`main` is live at <https://seven.sliccy.ai/>, and every other branch at `https://<branch>.sliccy.ai/`, where the branch name is lowercased and runs of anything but letters and digits become `-` (`feat/edge-hosting` → <https://feat-edge-hosting.sliccy.ai/>). Each host is its own origin, so a branch gets its own OPFS and service worker and can't disturb `seven`. `https://www.sliccy.ai/7/` serves the same `seven/` next to SLICC 6 (sliccy-ai#51, see [Next to SLICC 6](#next-to-slicc-6-wwwsliccyai7)).
+`main` is live at <https://seven.sliccy.ai/>, and every `bb/**` branch at `https://<branch>.sliccy.ai/`, where the branch name is lowercased and runs of anything but letters and digits become `-` (`bb/edge-hosting` → <https://bb-edge-hosting.sliccy.ai/>). Other branches, Renovate's included, get no preview. Each host is its own origin, so a branch gets its own OPFS and service worker and can't disturb `seven`. `https://www.sliccy.ai/7/` serves the same `seven/` next to SLICC 6 (sliccy-ai#51, see [Next to SLICC 6](#next-to-slicc-6-wwwsliccyai7)).
 
 The hosts are served by the [sliccy-ai](https://github.com/ai-ecoverse/sliccy-ai) worker from the R2 bucket `slicc-bios`. This repo only publishes into that bucket:
 
 - [`edge/publish.mjs`](edge/publish.mjs) `<branch>` uploads `src/` to `seven/` for `main` and to `branches/<label>/` for every other branch, and deletes what the previous upload had and this one doesn't. A manifest next to it (`seven.json`, `branches/<label>.json`) records which branch owns the label, so two branches that map to the same label can't overwrite each other.
 - The bucket expires everything under `branches/` 30 days after upload. Every push uploads all files again, so a branch stays up while it's active and disappears a month after its last push. Nothing needs to be cleaned up when a branch is deleted.
-- [`.github/workflows/deploy.yml`](.github/workflows/deploy.yml) publishes on every push.
+- [`.github/workflows/deploy.yml`](.github/workflows/deploy.yml) publishes on every push to `main` or a `bb/**` branch, on the `CERT_LIGHT_RUNNER` pool. A newer push to a `bb/**` branch cancels its running publish; a publish of `main` is never cancelled.
   - **`main`** publishes `seven/` with `CLOUDFLARE_API_TOKEN`, an account token with Workers R2 Storage Write. That token could overwrite `seven/`, so it lives only in the `production` environment, whose deployment branch policy allows `main` alone. A branch that changes the workflow can't read it.
-  - **Every other branch** holds no secret. It runs in the `preview` environment, with no approval step and `id-token: write`. `edge/publish.mjs` asks GitHub for the job's OIDC token (audience `https://sliccy.ai`) and publishes through the sliccy-ai worker's `/api/publish/*` route. The route checks the token's signature, issuer, audience, expiry, repository and branch, then derives `branches/<label>/` from the branch itself. A branch can only ever write its own prefix, and never `seven/`. Files go up eight at a time, then deletions, then the manifest.
+  - **A `bb/**` branch** holds no secret. It runs in the `preview` environment, with no approval step and `id-token: write`. `edge/publish.mjs` asks GitHub for the job's OIDC token (audience `https://sliccy.ai`) and publishes through the sliccy-ai worker's `/api/publish/*` route. The route checks the token's signature, issuer, audience, expiry, repository and branch, then derives `branches/<label>/` from the branch itself. A branch can only ever write its own prefix, and never `seven/`. It first writes a manifest listing both the previous upload's files and this one's, so a publish cancelled midway leaves every file it uploaded on the list for the next publish to delete. Then files go up eight at a time, then deletions, then the final manifest.
 
 ## Rules
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-ecoverse/slicc-bios",
-  "version": "1.29.3",
+  "version": "1.30.1",
   "description": "Slim loader that boots SLICC into OPFS and serves the UI from there",
   "type": "module",
   "license": "Apache-2.0",

package/src/packages/certs.json

@@ -11,14 +11,26 @@
     "integrity": "sha512-Oy3FiC/o8LuUVf+iIapErmPX+oTCfBsYtRTz0ErLbjLfNE3dD8c8AKfmk3SramaKskhEICsLKpR6tB2l2fyMgA==",
     "sha256": "ffbbb748115e6ec0385ebd83e3d9867e3cf9b5062786b4e265f0b9f71a85eb3a"
   },
+  "@ai-ecoverse/py-contourpy@1.4.0-10": {
+    "integrity": "sha512-0jxZ7mJTCmdNBP6mw8DmUsjwH+54/EVhq0tF4aazBZxOVNrIAhkxzyFO+axC03ruqeBmxqO7xrRjLXi4U8TrjQ==",
+    "sha256": "22d1972202793750c0482d103cbfd21706a5b5e29a4db994089e495318009582"
+  },
   "@ai-ecoverse/py-cycler@0.12.1-8": {
     "integrity": "sha512-pEQtaxKH+Wl7CFTh3Ib1yv7zBPyJwjp5J3w6uIcXCZ9rou6DsyTkArur8dV2MTTwWSeBSyA5Ab+lTKg1vynS8Q==",
     "sha256": "58a03a4c2edd71ac981b38618fabcf7871dde8772fabbe5067dd784fc2c6f02d"
   },
+  "@ai-ecoverse/py-cycler@0.12.1-9": {
+    "integrity": "sha512-dpDtTrDfvQoX7IGcpqedDqL8HnZr6EynEgfWgTU/oDSh5HIGYWFy8ZIzJVvWLNC91s4sRuR7f4pNhQcTljqBLA==",
+    "sha256": "9a933ed573e8e6ac0d36382982a922a23cd544d4274fe95ab517e417f2e0e74b"
+  },
   "@ai-ecoverse/py-fonttools@4.66.1-8": {
     "integrity": "sha512-JDnfWy47fB2DKIlXUL9F2kPiP3fk+88nRJ2vsG/PWS3HvJiXC3cBcH3EaofQ1IQkM8hYITC5vEbKcs52i1AqHQ==",
     "sha256": "8319843b69aa82c28533256413116bba91b823f8839da836d3bf9ad78e16761e"
   },
+  "@ai-ecoverse/py-fonttools@4.66.1-9": {
+    "integrity": "sha512-Iwq6OLXjbCEWy4Mp5JNVQbGcorqCOdM1caS5cKqZHtFWQLsc08osdfjvxgp9UATsTCxHEFtaDsPNcR0dt6vtbg==",
+    "sha256": "9e804981303c852f52179443115c646b533fa46ffe189091cc3c9ffaf83a0361"
+  },
   "@ai-ecoverse/py-kiwisolver@1.5.1-5": {
     "integrity": "sha512-iPlyNsJP6gLptvS6YwMm32zRCTrZiJjTDmJWDMtalQ6xNorR0Hvx+DW2WGaktsb92RuggbTQmJhrVY85j3UO2A==",
     "sha256": "b5eec3bb653874580f5e6ccb527e0a4fade7a9ccc98d62ae950d01e9a9873a7d"
@@ -31,22 +43,42 @@
     "integrity": "sha512-g8FYJbiJibagE/8EiXkHW1h/C3Mro3XBrPbryVjx0SRia1J8TSU/dLUMsCZsLFjhJIQ8BHgVJau1zRV8FOQTVw==",
     "sha256": "fc6034fc17ddc085fe3813d933caeb72845697474d550168bcf5a37fa10f5c9a"
   },
+  "@ai-ecoverse/py-kiwisolver@1.5.1-10": {
+    "integrity": "sha512-TZlFtzbVOIrfpc00OrW0geJKUEXvTtzkEthMPNgdxZL1Nu7ZPj0FlkDUZBe3mT+H38wHSf680uyQNnEQFGUmtw==",
+    "sha256": "ff450c4e07b5e18dd9fd3d2f09af78709c1425fbb3b0e4036fe6cde409db1b87"
+  },
   "@ai-ecoverse/py-matplotlib@3.11.2-10": {
     "integrity": "sha512-qPnMD//gTB3opOji5058b0Sxm20rFBqYJU+ryb72v57NbUcFtJjFwsKLIn9KWSQtDadTwXosy6OKJLuueGcGog==",
     "sha256": "ff8cbb8c321e89638986a0a2b7ab0463e716bb645b968557d0a36ce91cb716ee"
   },
+  "@ai-ecoverse/py-matplotlib@3.11.2-11": {
+    "integrity": "sha512-WL4C1xMt4Np1YSGL6lA/Rnew7QY+KFb4bYqkklemqpixuMVKDsSjhNu44kH9sYy1Pv9TKdL1NMlm8ek506yrDA==",
+    "sha256": "e5088258cfd5caf96b7181780740db2ce8c8ace0f5f9572dd49ef7699163741e"
+  },
   "@ai-ecoverse/py-numpy@2.3.2-12": {
     "integrity": "sha512-HTF1ZU/OnvHGB/yMh3rM0hOEg0WSPhZY3zwA9j9lP1rTw/dRx7HjgA5BLbOkb1CDcXUqIpzzuj8brBBXebqJqQ==",
     "sha256": "dc967993af49e0b14b9e921dc8f5787cb1847f1ec4648716d7ba00b1a0c50add"
   },
+  "@ai-ecoverse/py-numpy@2.5.4-1": {
+    "integrity": "sha512-jroJrpdiNCDBCh28XQUQ5o9yhnzdLi4atsmneTT/3fckF2RqD7yXPBPsQFSclEzI65XLoXxr01d3HhwbOpVw1g==",
+    "sha256": "9e983a3c6d6edbbdc34cdfbcd49710aa17c5f67161ac19c99a3e2d38cd4c0a6c"
+  },
   "@ai-ecoverse/py-packaging@26.3.0-8": {
     "integrity": "sha512-72/USkmgBx2nynrvsN/NDcxF3Fo3dLfrDm38hd3CrwY1F0DiWFb/K5rABgPJqL4dXlswmMCbh5yeq4SqDHdp6w==",
     "sha256": "a6ec815468b4d7671ed0348d257ecd4d3ce01158d4ed807f4afe01a5a41df7d7"
   },
+  "@ai-ecoverse/py-packaging@26.3.0-9": {
+    "integrity": "sha512-zO27IYtbxXR2EzC2iRcwFCjpKuq+2YehL+j1jZTw5pa2kIpfmnqPiq9VpWsW0KZEdtR8HSaOzRCSCMjdaEWcRQ==",
+    "sha256": "f6f428c41087905c63dd734529caeaba42c115c82647e75e500f4b2c0272aff7"
+  },
   "@ai-ecoverse/py-pandas@2.3.2-12": {
     "integrity": "sha512-nqsI28oT7QqY7hZaPQk4dyduoH5d9XyIo+ySHsl48y3NN//PBeJccLGvh1Oy3eFX/A20affs2LgeHtNW7Tq3jw==",
     "sha256": "bd93c7a9410a0203a3aab79e109cb4c6695638471fa8898ab5e7bfae3b204f7e"
   },
+  "@ai-ecoverse/py-pandas@3.0.6-1": {
+    "integrity": "sha512-YZsaCKm8sWw8l+tNJHxlMsrLv85Pnr6JN4sJbarbE0HD7yaDJKfAT1nRxqK+WDeBJeOxLEV35txPZUU1v9zTUQ==",
+    "sha256": "bde59722c75faab81ec20565dcf68e4bf90672c0963d3f690520fda1d2a511ff"
+  },
   "@ai-ecoverse/py-pillow@12.3.0-6": {
     "integrity": "sha512-oyuDfimQshBOfzQzWycwqxm4/a9FRojIHkPL/buwyyKE9zbGXdR7NRNFvmoNyOayNcgmUct0/sGXRVGXl4e7SA==",
     "sha256": "1e7811bc2f0c46ccef65588b8b323c2bf3e2cbcc7ad0ec7ec271edc7b8b4e134"
@@ -59,10 +91,18 @@
     "integrity": "sha512-F8aRhrIEaV+UsD4NE+nPsSPVzecwwY0KVigKWYLGm8hrwj0GkUVGBm3G8mZ4q35d0gS5cgRUHaVTC4OVfd2Jmw==",
     "sha256": "0f18b1f9af0524ad9976f941931bd436e85c0087e00db598075274bf63ff51b1"
   },
+  "@ai-ecoverse/py-pillow@13.0.0-1": {
+    "integrity": "sha512-wEPGCPhqRV71C96UBOoFtyQ9AOMjcPlY+ENLdJ/w/jKCL2POxg96I25r/ivGIKu39czB9SDbw+v9FYPYpbAPbg==",
+    "sha256": "c0c1576184994545261fb2b6afa2d8d41375662d8b9b89d1bc4b2d93982fb256"
+  },
   "@ai-ecoverse/py-pyparsing@3.3.3-8": {
     "integrity": "sha512-vNSPczlRvzU3fcAH8c3GerZIm1LTOO8xijkDSe0NfBIXibJwdSHoq8Uzln5ikSnKx9nPBCWBwQF1B9XZ0UVJGQ==",
     "sha256": "56a9fc027288e0f7d7ab56f10de2f6bfc9913a139489174d0c3cdee942eb4d16"
   },
+  "@ai-ecoverse/py-pyparsing@3.3.3-9": {
+    "integrity": "sha512-lw4vEDWDXCq5/xtljJ6UyWWNN9SBgWmOxEh18gqEkfnHMO7x0+znktkafypZHBZurmCgC/0L93M91Np9Cvnnlw==",
+    "sha256": "5e848d736032e4ec66722f2e42dc0f61ab81bf202bbf57bb5214b7b5830359b5"
+  },
   "@ai-ecoverse/py-python-dateutil@2.9.0-post0.2": {
     "integrity": "sha512-RCa4x3MbuASOiDFxmiK6vmstyUvl8KffqQWJarGQa4MAHvtoT8tM3vl3iPTqbgGIPPUVfYSTy0bMKLNWx7uG9w==",
     "sha256": "2a355c9dd7e008d27970b8cd4eef641756bec74d61f393dae7452a7a55f61c48"
@@ -83,6 +123,10 @@
     "integrity": "sha512-cTMwklMN+Y0LgPyZvlfSEElzkkgP1fkrSGQGs3d3TOeATJmuP7CEBjpJBgkXOn1BFWsFUY6s2jPOaJKc3s9Thg==",
     "sha256": "656cdceb2c122caf491e55a926195163b27750219de0c92f7379784a4a0488b2"
   },
+  "@ai-ecoverse/py-scipy@1.18.1-2": {
+    "integrity": "sha512-0OYAxms267R9M9nrfdhcptk3T7AUnW6la4hsp54JVybLpEqa26cCi2KK43UUjjW/xmjLNQBBHIOFT+5A14KKug==",
+    "sha256": "e8b9ea8b0f4dc9aec1dc7132991ad2e7f95a1e369c034b8b11224b69c7262450"
+  },
   "@ai-ecoverse/py-six@1.17.0-2": {
     "integrity": "sha512-BNEgSp4l+y5dhmvKqqId7TO2Krchq/uw5vg/Q6bB6UKj+dfmr8ad42vGs4VFzTCnmqpGSgNRVg+TYeRi50t3yg==",
     "sha256": "53fd2ac9ba87baebe147fdfcbdd0ea0af9498f725d0d3702d960a209722779cc"
@@ -476,6 +520,10 @@
     "integrity": "sha512-hXJFFUR4/K1WMMjXjqng5jrv5YsMt4R4tqc0LA5zwMzivPbU62Ba9P0FFsLWsuFPYCPGcpHCR9iNUD4bCkzC8A==",
     "sha256": "f8fc4224a524c55fdeddf91fcb6d103ceb134907440137758b67696417c8cec1"
   },
+  "@ai-ecoverse/wasix-python@3.15.0-2": {
+    "integrity": "sha512-vmq/gfnaicQHkVsrJqHjt5j+iNC3xuFh9RWkJo2wId/cWCykOJICKS1EE4OPNCYi3NoMfud7y++BFP+oSJ/djg==",
+    "sha256": "1c256bbc490a7c434187b8f444a7df662a4a9e080ac8a5bcce85287958b01a8b"
+  },
   "@ai-ecoverse/wasix-ruby@3.4.11-10": {
     "integrity": "sha512-HY2DH3Mgvcpmn0icZqrv7oivk3eb4jcuf+HDCUuYq9YP1+rdQ/auyZpfVhu7UOQsTc+xkVyTsxHvLKifWxNVBw==",
     "sha256": "6852e7668ada97a107af743b992a3073da189b32cb18f4eccf4f32d5de741456"

package/src/packages/optional/catalog.json

@@ -30,9 +30,9 @@
   "@ai-ecoverse/wasix-python": {
     "id": "python",
     "label": "Python",
-    "description": "Python 3.14 with pip (pip, pip3 or python3 -m pip), for scripts and data work.",
+    "description": "Python 3.15 with pip (pip, pip3 or python3 -m pip), for scripts and data work.",
     "commands": ["python3", "pip", "pip3"],
-    "size": 57417828
+    "size": 61095245
   },
   "slicc-py-datatools": {
     "id": "pydata",
@@ -41,7 +41,7 @@
     "description": "numpy, pandas, matplotlib and scipy for Python, about 240 MB on disk. scipy lacks only the deprecated scipy.odr.",
     "commands": [],
     "requires": ["python"],
-    "size": 67796756
+    "size": 67207958
   },
   "@ai-ecoverse/slicc-jsh": {
     "id": "node",

package/src/packages/optional/package-lock.json

@@ -18,7 +18,7 @@
         "@ai-ecoverse/wasix-gnupg": "2.4.9-11",
         "@ai-ecoverse/wasix-openssh": "10.6.0-11",
         "@ai-ecoverse/wasix-perl": "5.42.0-20",
-        "@ai-ecoverse/wasix-python": "3.14.2-28",
+        "@ai-ecoverse/wasix-python": "3.15.0-2",
         "@ai-ecoverse/wasix-ruby": "3.4.11-20",
         "@ai-ecoverse/wasix-websocat": "4.0.0-alpha3-5",
         "@ai-ecoverse/wasm-git": "2.55.0-17",
@@ -162,12 +162,12 @@
       }
     },
     "node_modules/@ai-ecoverse/wasix-python": {
-      "version": "3.14.2-28",
-      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasix-python/-/wasix-python-3.14.2-28.tgz",
-      "integrity": "sha512-hXJFFUR4/K1WMMjXjqng5jrv5YsMt4R4tqc0LA5zwMzivPbU62Ba9P0FFsLWsuFPYCPGcpHCR9iNUD4bCkzC8A==",
+      "version": "3.15.0-2",
+      "resolved": "https://registry.npmjs.org/@ai-ecoverse/wasix-python/-/wasix-python-3.15.0-2.tgz",
+      "integrity": "sha512-vmq/gfnaicQHkVsrJqHjt5j+iNC3xuFh9RWkJo2wId/cWCykOJICKS1EE4OPNCYi3NoMfud7y++BFP+oSJ/djg==",
       "license": "PSF-2.0 AND GPL-3.0-or-later",
       "engines": {
-        "slicc-kernel": ">=1.120.0"
+        "slicc-kernel": ">=1.122.3"
       }
     },
     "node_modules/@ai-ecoverse/wasix-ruby": {

package/src/packages/optional/package.json

@@ -15,7 +15,7 @@
     "@ai-ecoverse/wasix-gnupg": "2.4.9-11",
     "@ai-ecoverse/wasix-openssh": "10.6.0-11",
     "@ai-ecoverse/wasix-perl": "5.42.0-20",
-    "@ai-ecoverse/wasix-python": "3.14.2-28",
+    "@ai-ecoverse/wasix-python": "3.15.0-2",
     "@ai-ecoverse/wasix-ruby": "3.4.11-20",
     "@ai-ecoverse/wasix-websocat": "4.0.0-alpha3-5",
     "@ai-ecoverse/wasm-git": "2.55.0-17",