Update Cirrus CI configs (#291)

Author: abravalheri

.cirrus.yml

@@ -73,9 +73,9 @@ env:
 # ---- CI Pipeline ----
 
 build_task:
-  name: build and check (Linux - 3.11)
+  name: build and check (Linux - 3.12)
   alias: build
-  container: {image: "python:3.11-bullseye"}
+  container: {image: "python:3.12-trixie"}
   clone_script: *clone
   <<: *task-template
   install_script: pip install tox tox-uv
@@ -91,17 +91,16 @@ linux_task:
     - name: test (Linux - 3.8)
       container: {image: "python:3.8-bookworm"}
     - name: test (Linux - 3.10)
-      container: {image: "python:3.10-bookworm"}
+      container: {image: "python:3.10-trixie"}
       skip: $BRANCH !=~ "^(main|master)$"
     - name: test (Linux - 3.12)
-      container: {image: "python:3.12-bookworm"}
+      container: {image: "python:3.12-trixie"}
       skip: $BRANCH !=~ "^(main|master)$"
-    - name: test (Linux - 3.13)
-      container: {image: "python:3.13-bookworm"}
-    - name: test (Linux - 3.13)
-      container: {image: "python:3.13-trixie"}
     - name: test (Linux - 3.14)
-      container: {image: "python:3.14-bookworm"}
+      container: {image: "python:3.14-trixie"}
+    - name: test (Linux - 3.15)
+      container: {image: "python:3.15-rc-trixie"}
+      allow_failures: true  # RC
   install_script:
     - python -m pip install --upgrade pip tox tox-uv pipx
   <<: *test-template
@@ -139,7 +138,7 @@ freebsd_task:
   depends_on: [build, base-test]
 
 windows_task:
-  name: test (Windows - 3.12.5)
+  name: test (Windows - 3.12.10)
   windows_container:
     image: "cirrusci/windowsservercore:2019"
     os_version: 2019
@@ -149,25 +148,28 @@ windows_task:
   install_script:
     # Activate long file paths to avoid some errors
     - ps: New-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem" -Name "LongPathsEnabled" -Value 1 -PropertyType DWORD -Force
-    - choco install -y --no-progress python3 --version=3.12.5 --params "/NoLockdown"
+    - choco install -y --no-progress python3 --version=3.12.10 --params "/NoLockdown"
     - choco install -y --no-progress curl
-    - pip install --upgrade certifi
+    - python -m pip install --upgrade certifi
     - python -m pip install -U pip tox tox-uv pipx
+  configure_certs_script: |
+    CERT_PATH="$(python -m certifi | tr -d '\r\n')"
+    echo "SSL_CERT_FILE=$CERT_PATH" >> "$CIRRUS_ENV"
   <<: *test-template
   depends_on: [build, base-test]
 
 finalize_task:
-  container: {image: "python:3.10-bullseye"}
+  container: {image: "python:3.12-trixie"}
   depends_on: [test]
   <<: *task-template
   install_script: pip install 'coveralls<4'
     # ^-- https://github.com/TheKevJames/coveralls-python/issues/434
   finalize_coverage_script: coveralls --finish
 
 linkcheck_task:
-  name: linkcheck (Linux - 3.10)
+  name: linkcheck (Linux - 3.12)
   only_if: $BRANCH =~ "^(main|master)$"
-  container: {image: "python:3.10-bullseye"}
+  container: {image: "python:3.12-trixie"}
   depends_on: [finalize]
   allow_failures: true
   <<: *task-template
@@ -178,8 +180,8 @@ linkcheck_task:
 # # The following task is already covered by a GitHub Action,
 # # (commented to avoid errors when publishing duplicated packages to PyPI)
 # publish_task:
-#   name: publish (Linux - 3.10)
-#   container: {image: "python:3.10-bullseye"}
+#   name: publish (Linux - 3.12)
+#   container: {image: "python:3.12-trixie"}
 #   depends_on: [build, base-test, test]
 #   only_if: $CIRRUS_TAG =~ 'v\d.*' && $CIRRUS_USER_PERMISSION == "admin"
 #   <<: *task-template

tox.ini

@@ -16,6 +16,7 @@ passenv =
     HOME
     SETUPTOOLS_*
     VALIDATE_PYPROJECT_*
+    SSL_CERT_FILE
 dependency_groups = test
 extras = all
 commands =