Skip to content

Conversation

@ajkerrigan
Copy link
Member

@ajkerrigan ajkerrigan commented Nov 17, 2025

  • Support Python 3.14 (feat: support python 3.14 #269)
  • Update to upstream Trivy v0.67.2 v0.68.2
    • The most notable tfparse-facing change is taking advantage of the local Terraform module cache (reference)
  • Update dependencies
  • Update CI to use Go 1.25.4

@ajkerrigan ajkerrigan requested a review from kapilt November 17, 2025 17:00
@mikecowie-seequent
Copy link
Contributor

Hey! We're looking forward to having this released, as it's the last blocker for our entire monorepo to be able to run python 3.14 . How are you going with it? Is there anything we could give a hand with?

@ajkerrigan
Copy link
Member Author

Just brought this up as a c7n release blocker during yesterday's community meeting. Given the time since I originally opened this though, it probably needs another dependency update pass. No action needed on your end, just need to land and release this and pull it into c7n-left.

Regarding release blockers, are you relying on just tfparse or c7n-left?

@mikecowie-seequent
Copy link
Contributor

mikecowie-seequent commented Jan 8, 2026

Just brought this up as a c7n release blocker during yesterday's community meeting. Given the time since I originally opened this though, it probably needs another dependency update pass. No action needed on your end, just need to land and release this and pull it into c7n-left.

Regarding release blockers, are you relying on just tfparse or c7n-left?

Thanks. No, we just use tfparse in isolation as a helper and test agent in isolation as most of our own toolkit is python ecosystem and it's a nice way to comfortablly analyze our terraform assets. I do keep an eye on your ecosystem because tfparse gives us a good sense of what you're doing and we really appreciate your efforts on it :) .

ajkerrigan and others added 2 commits January 7, 2026 21:57
- trivy v0.67.2 --> v0.68.2
- update remaining go dependencies
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
with:
go-version: "1.21.5"
go-version: "1.25.4"

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: december 1.25.5 was released with some security and bug fixes. given this program doesnt do any crypto that I can see not a big deal. just wanted to record this for the next release.

Copy link

@ChrisMcKenzie ChrisMcKenzie left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ajkerrigan ajkerrigan merged commit 5900976 into cloud-custodian:main Jan 13, 2026
15 checks passed
@ajkerrigan ajkerrigan deleted the ajk/release/0.6.19 branch January 13, 2026 16:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants