snekomatic icon indicating copy to clipboard operation
snekomatic copied to clipboard

Keeping production Python runtime up to date

Open njsmith opened this issue 6 years ago • 1 comments

Currently we're deploying snekomatic on python 3.7.3: https://github.com/python-trio/snekomatic/blob/master/runtime.txt

Apparently 3.7.4 is out, so we should switch.

I only know this because I happened to do a manual deploy, and heroku popped up a message for a few seconds before it disappeared.

So more generally, like... how do we keep up with python security updates? I'd be fine with just being like "heroku please use the latest 3.7", but I don't know if there's any way to do that. I don't even know how to get notified (except by doing a manual deploy and watching the output like a hawk, apparently). We need some kind of better strategy here.

njsmith avatar Oct 20 '19 00:10 njsmith

I don't think there's an easy way to do this. Sometimes, the new Python interpreter is out but you can't use it on Heroku for a long time. If you want to just learn about Python versions, you can git ls-remote CPython's repo: https://github.com/cherrypy/cheroot/blob/2e2bd2c/.travis.yml#L111.

If you're talking about the appearance of Python releases in Heroku's Python buildpack, you could watch appearance of new files @ https://github.com/heroku/heroku-buildpack-python/tree/master/builds/runtimes

webknjaz avatar Oct 20 '19 22:10 webknjaz