scriptworker 63.1.0__tar.gz → 63.3.0__tar.gz

{scriptworker-63.1.0 → scriptworker-63.3.0}/HISTORY.rst

@@ -4,6 +4,42 @@ Change Log
 All notable changes to this project will be documented in this file.
 This project adheres to `Semantic Versioning <http://semver.org/>`__.
 
+63.3.0 - 2026-08-05
+-------------------
+
+Added
+~~~~~
+
+- `cot_product` is now optional. When unset, `by-cot-product` mappings resolve to
+  `None`, and `check_config` requires `verify_chain_of_trust` to be off (#810)
+- `download_file` accepts an optional `expected_content_type` kwarg that rejects
+  `text/html` responses when another type was requested (#791)
+
+Fixed
+~~~~~
+
+- Event loop creation in a fresh process, which raised a `RuntimeError` on
+  Python 3.14 since `asyncio.get_event_loop()` no longer creates a loop (#811)
+- JSON/YAML load failures now include the file path and, for downloaded
+  artifacts, the source URL in the error message (#791)
+- `load_json_or_yaml_from_url` retries the download when the cached file fails
+  to parse, turning transient artifact-server glitches into self-healing
+  retries instead of hard failures (#791)
+
+63.2.0 - 2026-06-18
+-------------------
+
+Added
+~~~~~
+- When Chain of Trust verification fails, the log is also exposed as public/logs/live_backing.log
+  (https://bugzilla.mozilla.org/show_bug.cgi?id=2039779)
+- Values for ESR 153 to scriptworker constants (https://bugzilla.mozilla.org/show_bug.cgi?id=2046216)
+
+Fixed
+~~~~~
+- The TASKCLUSTER_CREDENTIALS_FD feature uses a regular temporary file rather than a memfd, to
+  make things work again on macOS
+
 63.1.0 - 2026-05-26
 -------------------
 

{scriptworker-63.1.0 → scriptworker-63.3.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: scriptworker
-Version: 63.1.0
+Version: 63.3.0
 Summary: Taskcluster scriptworker
 Author-email: Mozilla Release Engineering <releng@mozilla.com>
 License-File: LICENSE

{scriptworker-63.1.0 → scriptworker-63.3.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "scriptworker"
-version = "63.1.0"
+version = "63.3.0"
 description = "Taskcluster scriptworker"
 authors = [
     { name = "Mozilla Release Engineering", email = "releng@mozilla.com" },

{scriptworker-63.1.0 → scriptworker-63.3.0}/src/scriptworker/artifacts.py

@@ -183,6 +183,29 @@ async def create_artifact(context, path, target_path, content_type, content_enco
                     raise ScriptWorkerRetryException("Bad status {}".format(resp.status))
 
 
+async def create_link_artifact(context, target_path, link_to, content_type, expires=None):
+    """Create a Taskcluster link artifact that redirects to another artifact in the same task.
+
+    Args:
+        context (scriptworker.context.Context): the scriptworker context.
+        target_path (str): the artifact name to create (e.g., ``public/logs/live_backing.log``).
+        link_to (str): the artifact name to link to (e.g., ``public/logs/chain_of_trust.log``).
+        content_type (str): Content type (MIME type) of the linked artifact.
+        expires (str, optional): ISO datestring of when the artifact expires.
+            Defaults to ``context.task["expires"]``.
+
+    """
+    payload = {
+        "storageType": "link",
+        "expires": expires or get_expiration_arrow(context).isoformat(),
+        "contentType": content_type,
+        "artifact": link_to,
+    }
+    args = [get_task_id(context.claim_task), get_run_id(context.claim_task), target_path, payload]
+    log.info("Creating link artifact {} -> {}".format(target_path, link_to))
+    await context.temp_queue.createArtifact(*args)
+
+
 def _craft_artifact_put_headers(content_type, encoding=None):
     log.debug("{} {}".format(content_type, encoding))
     headers = {aiohttp.hdrs.CONTENT_TYPE: content_type}

{scriptworker-63.1.0 → scriptworker-63.3.0}/src/scriptworker/config.py

@@ -125,11 +125,17 @@ def check_config(config, path):
         if key not in DEFAULT_CONFIG:
             messages.append("Unknown key {} in {}!".format(key, path))
             continue
+        is_by_cot_product = isinstance(DEFAULT_CONFIG[key], Mapping) and "by-cot-product" in DEFAULT_CONFIG[key]
         if value is None:
-            messages.append(_VALUE_UNDEFINED_MESSAGE.format(path=path, key=key))
+            if key != "cot_product" and not is_by_cot_product:
+                messages.append(_VALUE_UNDEFINED_MESSAGE.format(path=path, key=key))
         else:
             value_type = type(value)
-            if isinstance(DEFAULT_CONFIG[key], Mapping) and "by-cot-product" in DEFAULT_CONFIG[key]:
+            if key == "cot_product":
+                # `cot_product`'s own default is `None`, so its type can't be
+                # inferred from `DEFAULT_CONFIG` the way other keys' can.
+                default_type = str
+            elif is_by_cot_product:
                 default_type = type(DEFAULT_CONFIG[key]["by-cot-product"][config["cot_product"]])
             else:
                 default_type = type(DEFAULT_CONFIG[key])
@@ -139,6 +145,8 @@ def check_config(config, path):
             messages.append(_VALUE_UNDEFINED_MESSAGE.format(path=path, key=key))
         if key in ("provisioner_id", "worker_group", "worker_type", "worker_id") and not _is_id_valid(value):
             messages.append('{} doesn\'t match "{}" (required by Taskcluster)'.format(key, _GENERIC_ID_REGEX.pattern))
+    if config.get("cot_product") is None and config.get("verify_chain_of_trust"):
+        messages.append("{} verify_chain_of_trust can't be True when cot_product is not set!".format(path))
     return messages
 
 
@@ -161,6 +169,9 @@ def apply_product_config(config):
 
     for key in config:
         if isinstance(config[key], Mapping) and "by-cot-product" in config[key]:
+            if cot_product is None:
+                config[key] = None
+                continue
             try:
                 config[key] = config[key]["by-cot-product"][cot_product]
             except KeyError: