From 8ebf3270d9153c53995bbcd2b46b52470768913e Mon Sep 17 00:00:00 2001
From: John Pappas <john.pappas.ctr@amentum.com>
Date: Thu, 22 Oct 2026 09:33:00 -0600
Subject: [PATCH 1/8] Pull in fixes from bad demo

---
 kickstart.sh | 57 ++++++++++++++++++++++++++++++++++++++++------------
 mkiso.sh     | 41 +++++++++++++++++++++++++++++++++++++
 upload.sh    | 32 +++++++++++++++++------------
 3 files changed, 104 insertions(+), 26 deletions(-)
 create mode 100755 mkiso.sh

diff --git a/kickstart.sh b/kickstart.sh
index 5b29c81..c206cb3 100755
--- a/kickstart.sh
+++ b/kickstart.sh
@@ -3,23 +3,54 @@ set -euo pipefail
 
 PYTHON="${PYTHON:-python3.12}"
 VENV="${VENV:-.venv}"
-WHEELHOUSE="${WHEELHOUSE:-pypi}"
 
-if [[ ${LOCK+x} ]]; then
-  echo "LOCK is set."
-  REQFILE="${REQFILE:-requirements-lock.txt}"
-else
-  REQFILE="${REQFILE:-requirements.txt}"
-fi
+command -v "${PYTHON}" >/dev/null 2>&1 || {
+    echo "ERROR: Python interpreter not found: ${PYTHON}" >&2
+    exit 1
+}
 
-CA_BUNDLE="${CA_BUNDLE:-/etc/ssl/certs/ca-certificates.crt}"
-export TWINE_CA_BUNDLE="${CA_BUNDLE}"
+if [[ -z "${WHEELHOUSE:-}" ]]; then
+    PYTHON_SERIES=$(
+        "${PYTHON}" -c \
+            'import sys; print(f"{sys.version_info.major}.{sys.version_info.minor}")'
+    )
 
-command -v "${PYTHON}" >/dev/null 2>&1 || {
-    echo "ERROR: ${PYTHON} is not installed." >&2
+    shopt -s nullglob
+    matches=( "pypi-${PYTHON_SERIES}."* )
+    shopt -u nullglob
+
+    case "${#matches[@]}" in
+        0)
+            echo "ERROR: No pypi-${PYTHON_SERIES}.* directory found." >&2
+            exit 1
+            ;;
+        1)
+            WHEELHOUSE="${matches[0]}"
+            ;;
+        *)
+            echo "ERROR: Multiple matching wheelhouses found:" >&2
+            printf '  %s\n' "${matches[@]}" >&2
+            echo "Set WHEELHOUSE explicitly to select one." >&2
+            exit 1
+            ;;
+    esac
+fi
+
+[[ -d "${WHEELHOUSE}" ]] || {
+    echo "ERROR: Wheelhouse is not a directory: ${WHEELHOUSE}" >&2
     exit 1
 }
 
+echo "Using Python:     $("${PYTHON}" --version 2>&1)"
+echo "Using wheelhouse: ${WHEELHOUSE}"
+
+if [[ ${LOCK+x} ]]; then
+    echo "LOCK is set."
+    REQFILE="${REQFILE:-requirements-lock.txt}"
+else
+    REQFILE="${REQFILE:-requirements-dev.txt}"
+fi
+
 [[ -d "${WHEELHOUSE}" ]] || {
     echo "ERROR: Wheelhouse not found: ${WHEELHOUSE}" >&2
     exit 1
@@ -41,13 +72,13 @@ echo "Python environment:"
 echo
 echo "Installing packages from ${WHEELHOUSE}..."
 if [[ ${LOCK+x} ]]; then
-  "${VENV}/bin/python" -m pip install \
+    "${VENV}/bin/python" -m pip install \
     --no-index \
     --find-links "${WHEELHOUSE}" \
     --require-hashes \
     --requirement "${REQFILE}"
 else
-  "${VENV}/bin/python" -m pip install \
+    "${VENV}/bin/python" -m pip install \
     --no-index \
     --find-links "${WHEELHOUSE}" \
     --requirement "${REQFILE}"
diff --git a/mkiso.sh b/mkiso.sh
new file mode 100755
index 0000000..7a61606
--- /dev/null
+++ b/mkiso.sh
@@ -0,0 +1,41 @@
+#!/bin/bash
+set -e
+if [ $1 ]; then
+  ROOTDIR=$1
+  echo -e "\n$ROOTDIR"
+else
+  echo -e "\nUsage Instructions:"
+  echo -e "\t $0 directory"
+  echo -e "\nUsing default
+  ROOTDIR=${basename $PWD}
+  echo -e "\n$ROOTDIR"
+fi
+
+if [ -n $DATE ]; then
+  DATE=`date '+%Y%m%d-%H%M'`
+fi
+
+echo "Run Collection Script for $ROOTDIR.txt"
+./collect.sh $ROOTDIR.txt
+  
+echo "Copy README to ISO"
+cp -v README.md $ROOTDIR/
+
+echo "Make ISO"
+echo -e "\nMaking ISO of $1"
+mkisofs -J -R -v -T -l \
+  -V $ROOTDIR-$DATE \
+  -A $ROOTDIR-$DATE \
+  -o $ROOTDIR-$DATE.iso \
+  $ROOTDIR
+
+echo "Implant MD5 sum into iso"
+implantisomd5 $ROOTDIR-$DATE.iso
+
+echo "Generate Hash"
+sha256sum -b $ROOTDIR-$DATE.iso >>\
+  $ROOTDIR-$DATE.iso.sha
+cat $ROOTDIR-$DATE.iso.sha
+
+echo "Show ISO & Hash"
+ls -Alht *.iso*
\ No newline at end of file
diff --git a/upload.sh b/upload.sh
index f0aacf6..ced6ff5 100755
--- a/upload.sh
+++ b/upload.sh
@@ -5,7 +5,12 @@ set -euo pipefail
 : "${NEXUS_USER:?}"
 : "${NEXUS_PASSWORD:?}"
 
-CA_BUNDLE="${CA_BUNDLE:-/etc/ssl/certs/ca-certificates.crt}"
+if [[ ${CA_BUNDLE+x} ]]; then
+    echo "CA_BUNDLE is set: ${CA_BUNDLE}"
+else
+    CA_BUNDLE="${CA_BUNDLE:-/etc/ssl/cert.pem}"
+    echo "Using CA_BUNDLE: ${CA_BUNDLE}"
+fi
 
 command -v twine >/dev/null || {
     echo "ERROR: twine not found"
@@ -18,16 +23,17 @@ REPORT="upload.log"
 : > "${REPORT}"
 
 [[ -r "${CA_BUNDLE}" ]] || {
-  echo "ERROR: CA bundle is not readable: ${CA_BUNDLE}" >&2
-  exit 1
+    echo "ERROR: CA bundle is not readable: ${CA_BUNDLE}" >&2
+    exit 1
 }
-export TWINE_CA_BUNDLE="${CA_BUNDLE}"
+export TWINE_CERT="${CA_BUNDLE}"
+export REQUESTS_CA_BUNDLE="${CA_BUNDLE}"
 
 echo -en "\nFinding files to upload: "
-find pypi \
-  -type f \
-  \( -name "*.whl" -o -name "*.tar.gz" -o -name "*.zip" \) \
-  | sort > upload.lst
+find pypi-* \
+-type f \
+\( -name "*.whl" -o -name "*.tar.gz" -o -name "*.zip" \) \
+| sort > upload.lst
 TOTAL=$(wc -l < upload.lst)
 echo "Done. Found ${TOTAL} files."
 
@@ -35,11 +41,11 @@ echo -e "\nUploading files:"
 while IFS= read -r FILE
 do
     if twine upload \
-        --repository-url "${NEXUS_URL}" \
-        --username "${NEXUS_USER}" \
-        --password "${NEXUS_PASSWORD}" \
-        "${FILE}" \
-        >> "${REPORT}" 2>&1
+    --repository-url "${NEXUS_URL}" \
+    --username "${NEXUS_USER}" \
+    --password "${NEXUS_PASSWORD}" \
+    "${FILE}" \
+    >> "${REPORT}" 2>&1
     then
         echo "SUCCESS: ${FILE}" | tee -a "${REPORT}"
     else

From d9aac9ec70940ec83344d1aba8da1bb0dfc4d093 Mon Sep 17 00:00:00 2001
From: John Pappas <john.pappas.ctr@amentum.com>
Date: Thu, 22 Oct 2026 09:54:53 -0600
Subject: [PATCH 2/8] Remove ubuntu as the driver of  Python version

---
 .github/workflows/branch.yml | 8 +++-----
 .github/workflows/main.yml   | 8 +++-----
 2 files changed, 6 insertions(+), 10 deletions(-)

diff --git a/.github/workflows/branch.yml b/.github/workflows/branch.yml
index e6fc452..e387bf2 100644
--- a/.github/workflows/branch.yml
+++ b/.github/workflows/branch.yml
@@ -54,24 +54,22 @@ jobs:
 
           python_versions=$(curl --fail --silent --show-error \
             https://raw.githubusercontent.com/actions/python-versions/main/versions-manifest.json)
-          os_version=$(. /etc/os-release; echo "$VERSION_ID")
 
           get_version() {
             local version
             version=$(echo "$python_versions" \
-              | jq -r --arg series "$1" --arg os_version "$os_version" '
+              | jq -r --arg series "$1" '
                   .[] | select(.stable == true)
                   | select(.version | startswith($series + "."))
                   | select(any(.files[];
-                      .platform == "linux" and .platform_version == $os_version
-                      and .arch == "x64"))
+                      .platform == "linux" and .arch == "x64"))
                   | .version
                 ' \
               | sort -V \
               | tail -1) || return 1
 
             if [[ -z "$version" ]]; then
-              echo "No stable Python $1 x64 build available for Ubuntu $os_version" >&2
+              echo "No stable Python $1 x64 build available" >&2
               return 1
             fi
             echo "$version"
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index be5a847..d7854b7 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -54,24 +54,22 @@ jobs:
 
           python_versions=$(curl --fail --silent --show-error \
             https://raw.githubusercontent.com/actions/python-versions/main/versions-manifest.json)
-          os_version=$(. /etc/os-release; echo "$VERSION_ID")
 
           get_version() {
             local version
             version=$(echo "$python_versions" \
-              | jq -r --arg series "$1" --arg os_version "$os_version" '
+              | jq -r --arg series "$1" '
                   .[] | select(.stable == true)
                   | select(.version | startswith($series + "."))
                   | select(any(.files[];
-                      .platform == "linux" and .platform_version == $os_version
-                      and .arch == "x64"))
+                      .platform == "linux" and .arch == "x64"))
                   | .version
                 ' \
               | sort -V \
               | tail -1) || return 1
 
             if [[ -z "$version" ]]; then
-              echo "No stable Python $1 x64 build available for Ubuntu $os_version" >&2
+              echo "No stable Python $1 x64 build available" >&2
               return 1
             fi
             echo "$version"

From b8b549663b52c158e0e0878664f2b3aa90e9ddcd Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Oct 2026 16:01:04 +0000
Subject: [PATCH 3/8] Pin Python collection jobs to compatible Ubuntu 24.04
 runners

Co-authored-by: pappasjfed <163186936+pappasjfed@users.noreply.github.com>
---
 .github/workflows/branch.yml                  |   4 +--
 .github/workflows/main.yml                    |   4 +--
 README.md                                     |   8 +++---
 .../update_python_runtimes.cpython-312.pyc    | Bin 0 -> 5323 bytes
 .../test_collection_versions.cpython-312.pyc  | Bin 0 -> 7411 bytes
 ...est_update_python_runtimes.cpython-312.pyc | Bin 0 -> 6520 bytes
 tests/test_collection_versions.py             |  25 +++++++++++-------
 7 files changed, 25 insertions(+), 16 deletions(-)
 create mode 100644 scripts/__pycache__/update_python_runtimes.cpython-312.pyc
 create mode 100644 tests/__pycache__/test_collection_versions.cpython-312.pyc
 create mode 100644 tests/__pycache__/test_update_python_runtimes.cpython-312.pyc

diff --git a/.github/workflows/branch.yml b/.github/workflows/branch.yml
index e387bf2..8359aac 100644
--- a/.github/workflows/branch.yml
+++ b/.github/workflows/branch.yml
@@ -110,7 +110,7 @@ jobs:
           cat $GITHUB_OUTPUT
 
   Collect:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ Setup ]
 
     permissions:
@@ -217,7 +217,7 @@ jobs:
           if-no-files-found: error
 
   SecurityScan:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ Setup, Collect ]
 
     permissions:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index d7854b7..31a97ea 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -110,7 +110,7 @@ jobs:
           cat $GITHUB_OUTPUT
 
   Collect:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ Setup ]
 
     permissions:
@@ -217,7 +217,7 @@ jobs:
           if-no-files-found: error
 
   SecurityScan:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     needs: [ Setup, Collect ]
 
     permissions:
diff --git a/README.md b/README.md
index a35a22b..493cbcf 100644
--- a/README.md
+++ b/README.md
@@ -21,9 +21,11 @@ Use `upload.sh` on the highside to setup the venv to enable uploading
 
 ## Python runtime versions
 
-Collection jobs select the latest stable x64 Python build for the runner's Ubuntu
-version from the `actions/python-versions` manifest used by `setup-python`, rather
-than assuming every python.org release has an available Actions build.
+Collection jobs select the latest stable Linux x64 Python build from the
+`actions/python-versions` manifest used by `setup-python`, rather than assuming
+every python.org release has an available Actions build. Collection and security
+scan jobs use Ubuntu 24.04 so Python 3.9 remains available; moving these jobs to a
+newer runner requires checking build availability for every collected series.
 
 Both collection workflows read `python-runtimes.json`. Its `source_versions`
 list selects the Python source archives; `windows_versions` independently selects
diff --git a/scripts/__pycache__/update_python_runtimes.cpython-312.pyc b/scripts/__pycache__/update_python_runtimes.cpython-312.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..6d3c1e99225e1c8ce9b4e7ddd7856ce762b7a677
GIT binary patch
literal 5323
zcmZt~TTB~Q_Rh<1V=x8`gw#n08@IKcq>nT#O+%Z<CTVCCAZgu3*5DbiVf^TwaR^>p
zWvlEK+Ek(2bmOSamXCZ;g_TlirA6AG^e@u>*fAAkN~KEe$L5a`)JJ}H&mDV)N4em8
z@0@$?nRCzk&VQUv8-lj9Umd<>N9cR<pf|2Md9(_X>qtOhBv1k^QDI6O=`gL0OqhX@
zk=O(m<|u;0N~VN4Y}V$SWJy@VR&8#QYzceV4s&zZK_ihFZqZ-1HVPJiZ(DoTXSeCf
zEbOAuaU@tTBf%z`Z!=YBtzf^5!gWBE6X;pTZK?tn>ICOy>UNb#*e$vTDWT>v6|NUt
zfbS6-gxZlk2w@BC^yqjL8l%T(zdQTdS#c1Ha?BS^B?sd}87vCEGh<3DmGogz5_wsa
zeHl5P9P%kK(Z^#YKFCKE*_X}?NO3s^*npYVHUv|6DEN>t(&ML8tAsO=C?Ac9@L>Bx
z-|1J+@K_cxJh5kZB?hB8gQZkjOlEh+6eTTphC-vGqro*|p+O}bsyv3Wjc@J^9K7(<
zTfvQEw0dxDs0t80YKO=7K&2uARiZFGfj}tKWeX^h2BEMM=n@s?dXb+|xmV-K5jk3w
zrbdQHoctaghVB#UI#OV)v`H$5J_Ng2lcS<rkpau0NL6PDjiE279zUycawaWe)e?!s
zlW`>yQ5jiOR8AuA_R}gWi_)NKjYOgnFUygLOitn(f7~C6r4nKYXOc+~helI)B=ky3
zlEkQz!hwpKehZMJIG$GIP$n(#iWsQ~Fak7`ctVsxzSsfOvo+emgE~jG0F#@b`(+$0
zS)7yRlEpi3X<2IUe%wF7erS6HODJj_3?5kcX=3Vw$#s+i32TP7D~E;wvbhbf-&<WI
z+Q`vI4AJRE4dw}dex^sI_}{4J8QA=2KXj)MMc#`pxDa{^B$lW0G;o0k7czClk)!`c
zU8g8?rH(~o)IXR}iikRf#lfC0i0bL!UX>XU$5iejFJ(lTFzEC7a2<?~tzAQ6QoNML
zhq8Mrl8W(3K@uaf0$!l-L%}X773C%QP|(0^gpD%s`2P|q-fuhog>8nJ>7SGD4*om;
znOJH&{i|$&<#(M;)Regi*ugdMsG2IO@-rAtf>Z{ms~oQ=Sl+;s>e|FYwqZ-oJU~S5
zfNmTu+H0nEz2CX$sJ(h}^5lY}tpxvVr|*dKZKuC>oL**-qY=9S)o&ukndB297^f`~
zNu-1f95$jlB9XT<yi{4yEC)Y9m~>W+H7ZI{B;u#AW<bP^4r>C$<e*wd&Lop_{&E?u
z(lpollZEDbDDAZx!UheKZJJe`g$cNx;h2hHKMJutt%0SP_4(Q;P`VxIAyt0{kEeSc
zQ$ga9N+vCdDwE*TDicqFGs<Zxu8^>FQN(gQm6XY=E7qXetFQ=|3w{dV&G3`kpaXBQ
z*Iui?)?4`9=Ybo68K&Iwbh$22wg-!Bup(L@ncy$U@vOMvq$b#{o%B1HY&fYN$H2C;
zuqIHmw0@H3z{+#fun}}%x!UxQw53ECT>^PpfJ7%CogRf0>t+ghCdUlhb?Dmo4y{w6
z5MYofvZ?i=U1%Tp-Y89>H^4i=_x4_5-az1aY|q2(fKB8};!rB1JmxaWVBiJ6852pU
zmY2JGk4E~>zN)fV<OS6vh|!cFY8IlhgQ6&C&H}2l3URE3z%kVVxhoB-5>+<M4~eQN
zttA<mSO~asReNSgRSM)Vd=S7yY4V%UjiVo|wb#6b6Q#P{GkD&*e;H9+=uT|W)pRvK
zng8IO1=sG9Yxnd}*%h2%e`a9u2dDdk^W(=BS=)Q3{&Z@Joo5>s?R8hXCcBDk)6Z7G
z&}clCiS$14b+<ELwR7D8bJWl%z)3-(>HRK1q3ocJpbNbay=bsz!`cC-+H!`}^URtL
z<d`)t&~=IF93$5#hDYS+Pmw_1H1@wst?61|Ao4Q5jl2*yk8h&DuBX5v#jp&T#C%S-
zi6iJL8>M3?N?+Iur(tvKuv0(7+9;TGeB7pxprEy35^^`S91C`8Zb1e<r$hcqU)j&X
zd-AM8LYLMA%dAx|mGYd@pu=;<{=7+(^xui3hfvOxqq_hp2l<EiGU(tcteBO0W2aev
zGw@++L3vA#11v~wdFwhX>qe}cW#j<FJ?cusRygZm2K5oJ0>BRtY38hgiFmwDGjGe$
zf?dn1X2FrOf<B!$nHZI{3pLu4>n2m3)dHN(+jI7uZ3I#f=<ysmBRShJN$Z<h&fr_~
z(sw|whTRBtn&r52=1<X0R_EniibYqZS&&>W$ez;VKZ^YIJ&;sgaw>zPVnmOeYVBw|
zDWpba1CsUn5*b<X4L}j;OQw=yBCU-1h+l4qi6pLR`8^2}Bfkeg=G0my$We;nPrB_p
zprVr-A(|PvVXHWpGctn%RcnI~)CP#u2AKFIL>F5e%3VnE$tYw8S;4CL+|jeWCtmAO
zt%Dg!O7KcF28r7X*eZ3gQmIwq3~mKjwz-nbw<r&uf@K+eqgo!+^xfsJbr$$r_2v5A
zMc3~8uI}0M3xPwWz@fRf%Yp8qzq{<}F4gq?s)e(6pLveThAL8oVqM|mNguE|Ac?*N
zKb*qBL_7(7n(*f{6oDR7p@;v2)(1QjV^GalB&*^>B18Op=(6TYDH+JJL1ieLHCIZ;
zK-L!E6T<V)2E|Kawl*Lp21KC>$;Q*!9X+Xa*MPOF!C)$r6nujz?90-fKEFd{hC~G)
zBJXC2!d2TjQf?i^IE7V)PmZZ3IfWHbP%UCokVoT63?C-Eb(4+=O=X36R8dWQ8g2^$
zP&8F;D=IfA!f7k#vKVKEw<JeYD}RxXOGG}Z39>{+QdDy^gRuy?-UJtsxG1aEDAaUu
zQYHhbxC9VLC~s#Vy$CW%ZzP52ty0yHdmAPlsjuWR#A_(BT+go{jyp$9FpKrg*E>Jz
zEJQzkX~MGPYA)=#b!6V<|I)kU-Zsq?GR5|;V%v*l_o1TW(2~6dlzZ=m`I^43?R^G9
zZ?Ubf?Cvi*`j_p5=xPnBYx>cInzt7QKDGYDu~yr6wVp*+JxNl9-g(!KTSE&S2TC0W
z=GeL3xq&(Be8<bn9CFr8)lcnw|HKLdJ63JT>0PY#thy|9rtuT2ZdBu*>iFO-$Yq52
zM(#XezR^2jnvf^$i%o5X=tqBCK^`l>k1sX&rklzQ{+XRK`-%;LiDQdx9V^J~JWowo
zm+H3{#>(}TwfexF#{2aL7CqZ^@a(BMbNT7R_v;S>@PW6j5TDs~BUSbWr?_Pk^0pSY
zhwe9ppbYgsQ5Y+X%y^0o!ICEgYppw{{nM>8CyU+#i!D3Iy!doi(fi^u$Fwvqn^9f!
zaxL;~D`d*`?Ten4!ZRP8TJUs~JRQ?x^PYVVJk85H2#2ffsA)%W*O9xucaPq4-#dQq
zU~xx(x$#`F_S}zta=c}Z9DX^79PaVczpivsAT5~`Bwy`$?r5te3Nxb_726=_eSO6?
zY{Vl2cU>f!HKI-)^37IpNuU){_i9aGW?4OxL7j!Rs>E(raUm)iId<5{rqx9lpi(4d
z`KC5(<hZp3ftxilvmWvD^twE1R1r`eZcTNIEVGU~5-&Hk93z-#EqVkOtXi#0_^3*g
z+yebJ@-e|Kh?QF{l;!vgkjb{6t=wmQCwpJ(F+N`K3LyBDl&^ZBg6p0#mWJXmCQ4~c
zLN5@5C<BEhDF=^N04B&)5EUL%HosG~@OVfoBGsC1Jd{bmLgmASYK}yNRFqtactMB&
znzo2Z%2I9G76O!2c34g&;clPe1zBTOwUUB1qKKCiEp({1Q5=VxIRU7gkV&LvKZ{==
zbXY>c*ra`#fl#!unq?CZ`Y}n6<ccK!1v<EdI2#t6?ImaXKbz*A2elG)fo&?WO$Ey>
zrMUlfs88qFH=tNuux~5bx0UVN$B!&I>#l|;!v*$p`wjboH&F5h?u-__fwK3dvh(ox
zv8CF^sf!=ijGtI!Eu`LEU|ULT%V*Di-g%>QIzC6uw|36;m0G*+9WSyiU$cGMZHHVV
z34_|5@D<?A--rbm@BrzCpi^lql3bdEuNWyw#-tWj?J*@GLGmJ>h%h;?YKBY}li~vv
z0oTB{B6tXr@GL@BCa#G0X?W38A`P)y<+^)cIdP(rI<(6tNgZ0ruSs2#81@kuvDC`-
zQ@iS0x+=HbLwFPxNC_^#58X0DQPcy}|2=YjgY4fR>$m8MZ_&<gkr(>!?4fbXqRlh0
z^Xik6PeRnXL;uV2rKM~;IBs4wnW-LX;^ZnK<BEr(LO)s%ZJ&B}p7O5H9OZq)Ai8;(
p%pi!h?05ub>0WuAGEx21vKz6EiR^u*`2lPB^DzjGY>US0{{cAI+fV=i

literal 0
HcmV?d00001

diff --git a/tests/__pycache__/test_collection_versions.cpython-312.pyc b/tests/__pycache__/test_collection_versions.cpython-312.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..067a2a7c9ffd84880451f86f188b627b914ed9a0
GIT binary patch
literal 7411
zcmbtZT~HKRmcIE{SyfO_{1*yRC@9qmSb#s+t&WH^j)*^?t<`F7QJFwh7gd;<B~TU}
zOpFsvM>wIxZVb$BZ;bBlgmh?Z&>I`k?$g*E^UxFXFjV6%6{)+?5xXz_#*Y!ix-WZ9
zW@Uj`YV7PqZ{B<Exi@d#d(Zj4bL)=|hn+z3G;5(-1%&)3R?K8c7gn!PgiI5Wh*X&P
zj3?!zpiYPBA;!m0hK%*Gx(?^#^ryvV(Vx7J*Pm9Ol_nA+*&f1pm_jASb7TH6T?v(L
zlp1A`DTjhDS7dz-7|9x{cwGnNY-ro-a*;FNI!eif6nUeb#ncn|hqN&cO+F-|^%fCr
z@J{#ZV?SgJnK^e~fmA5kKdB=`F4X6_GfSVeh$3Uu80E?N5$oL^N@LIZ)xjTeg*<fJ
z-Y5Gbfx(8cp>W(f<PS!$q_KT|Wl*C-*W=#f(QsG_sKIE&eM6EJe2PIO5QWN^Tb8cJ
zg0iHzQQz&4i0;t!K>EG<BmI43^$=92i9~Q$eY8m3B0fg6iS#WB_S7!2@Z>}eq!!Tv
zIWO{%TX9W%wlT(&qm`~t<f1W;UP)1vKzgV3xABnUO0E8r{<Z`OZEV$52%Ir<{ol||
zzoVUbM?3qD_RKjM;1Wd0%y5i&EZuQSb3<!G)4n+0+~D;#cw6*BQ-ik&TfESy3!u2y
zLu<S&g(bftX|QvVU_Yz}Zm%MR`xPA4{qjQNV01`olw*;IBsY#k<xd*Z%NUjG&yJ~s
z(a7rp71y;9b0Lt~d?CI0O2hD&#wn6|VK`oqeM=hj)?%1|@*!js<cD16ovzQjW?T!o
z+f(Us`9kiFY~{^5OF5Qu`y~5I$0}}LAZ-U&Cg?qK;QuNb=`=}D2{>0GEixke1(RTY
zOASyW_XX2~>#A|#U?esg=bBm?_O@uu=>8TDqgjW;eziX;4{1)bWPYc{`sKhN=<w+e
z*DQ+a?+Z&B*B=Z^%9q5$%DM1j8Qq9n2AP(JEdpAG926x*VL|AIBs)+A-C%s%8<s4+
zk(HpMG(rZ8R<<owTJb~0j#SO=l&f-?=gRVytfZ)V$%ZAumF6$=Hm7}w*lcz=ANq6$
z@P%f=*Xgz(f(=d+)s(~ekHe~oH0BAt9NM_5X+6`^jI#+g#AP~X3b@Lq_Yzt3n&X^`
z_NS+i)hw+)6I|ADxXt5a)v|2R;_+>!jg4DWJOg?P;eKpN=6CEP<GhNiq^AUL_7|<V
z4&zo8u*pcFLbJ5~1W#oba}t&~hz6J-QSo%^DI1FXmQrzwdP-Q$HznwaDs`(V&xS1E
zkFwy3**^m3d&9UHFC^xE0cTxwh>k~j57Q@L+?KE<tf6Z2ZR<~SJ!B`ezh&Pel$hU7
z2WY@m_%nB!B0XdW@e+j^p(%2iQ1CZKMw!cGgz`AMU-AtDL3J?Jr`gcg^oOG(O8h-E
z0k^x}9q|uIhuj}Zsyh&qWhtV%4G(1Eiei^>`tf|D1K3S0a>$*q$7>A1#u3uMGX$e3
zZZtc)j8LOlqA_(irpkC?<8*x>-erfEh3h=-n|2&!SPn+ie)q0gWtV$<P49`GUg7ky
z?vou**sd$ck{XjEX4~-#=evZS-ebKNdbZog?cfd^AD-;(ywE0`xzKy|La*j{WeClw
zS2y(Pg)WQ~xuN9+{KGIZxCecL8mmg9szy8o8hifCnO@B%OMX$%g`6@R4yu|JD<iUh
zShI+d2p@`)p<(=3t*{qLQQ0q#wFCSH)Tlfr<7R4hCDu1AM+4w}GzQjBqoaz(!vunI
zG@>zzDr;;=fg&fyhK3axZAY_6qd{=_9=q<)G^@FHMr#f(pa9NKjVYQn5RIs~=m0aS
z1XEK2a&TDHY+_~}c!V_zkb+oPRnQ9=yN9{%2sNw8AL3PS@P?*>2YM@w0A&;8d9iDz
zHCbG9?`E>NY3@?8`0!#;XR@esq3EZR)>MAkoligibbi~Z@6IjcpP4^<E}4IRl6_uK
zK3z3cb+7ormit@g_Z)dbEmXHX@g}QJELNXNR-a1cHqV_~W$5kpAM82H9K9VthAzyT
zw7js8ywXKSUD8pv;COF|6xvQwv%%*j<ujhY6z+{COByFTo|jZjUz@s?Dkz&N25;<U
zm+XXhEaz};2UH94mU6k0!sn%~>CjYYiGlKe)z;0H{{6?Pwx7<oo&Sg42fq8hIreME
zSB|H(N9Hg6#q+w|v!@p74zAchcPW>+Yf>fUFDmm(^Cml%+@yHRT<O=9Use8d)y)3I
zt-F(3cR$@)|D<oesB^6rr?;k0az)QyDhN2=(rsJXcQU`<$+b7~uh66nH0;r#0o)F#
zZ%)~q188Q00s!4djOilYpu>vXBg;E<c+vXE_6{9z!|&9|)m>qldcI*k`47{?Yam0%
zDWaMI327%+!Pk#d(A&0oWe_$WInDn2zy*R98q%he$PmpdFqd(9oB=)DnN2A{hw?Uw
zpeh!C-1)lP3<dPJW*dzO6=ms_77Y-w@b4&djrFkV759ES!Gc5I?BZ{KmUi()-6s7!
z092|8sFa725erT6L2y=nc_bJCIZnfrw`!bU9s<%u$rzHQ#Z7zTPGDm7{jwyfgXjSz
zF>cp+Zj)CIcsoEHnU&6cTN=DyQu02i>aO0y#&d2o?`=JtCd|1vn!R4A7_1p<O<2>Z
zGuE212LBF#n=`#0crsDvWt#1yGv`lrbe;LAN8`bTVrU_M0I$+={E8yU>WS+ye^|2{
z=n#mC64F5th#q)c^wz*GCB<Zf`W)ZKiJ~ujl?G}@bYcx09o)7e0RKduZBR?0FBS}o
zLNFpq!!R>&vqH3Ai1o!HYRu%N@e6P8ng73GkK;uD2eJv0vgY1#eC}AZRwS(z8Hzsl
z(PY;`?%_;*_7c|juh+}4?#<NaJ@2F715;2jD`CCGtRv4~a`4;iF9>hTdEq4G+gFIi
zRy5g}Dkzz*n5wupdbeVsVDB>F97U<>+6R^QD`!U+st-=(-L=eEQqJN<r#tC%-z#0L
zZc0`+%^jP&@%8vu<4>I@UTa&ZZdoDpfx;JrE+|^#VL<TEj-q7--nT}Z)wI{FKDMph
z&i&rbwHMi5@tWud5Mx*W1G0^T8hphi^c8B_<6wyS8pY1yH%%%w4j~JS(E?+jhscm<
zcuhJ%Xu~|p(CxIx$>x`6kxMXtLqyBpX8ds$8{f~8+rF%JemrgGe7B52m5lKS#+m6e
zr{(rYzy^ZqSWmzo@zA<8YD_5F7w7Aa4tcJ*-SKUQu0(XKk42RFC=fW~{MI+MTmg4c
z<Kg5s92qYx<XxEI(KF5Lyfh$<zG6lPP^Am9O=fgZKkvhO2rCTvRXI2+z&sQorbvPj
z?+PQpMTN9VbE{!pO8m^*4Cv1ouooxy3&?<^xT;s+IG0X#K6h2jj3r%lv+pNe`yacK
zu49X3UCFYpg|coq;bl!LZ~#m1G63<@SEjDa9(-JM_sT-a;bp=Wl%|SZi^Vm-by6;O
zYU}oU&G%~Ocb%Abb-du1lF~H>RF+V0nSn8uIe6ci#gx5N(6{}r?AQ+en;qP-Jvpx&
zVLV#;5&ji`A4JSqfxn&Hp#t;(3D8#|iUA0uL<+;1Y=l6}+?B}GZC8StqHk|yp(g^T
z0DX+4BCXdG9P^t9g>N|KNF&m){I)}G>gce_K!lndewl3X;CdXX18629G-n9L3nr8m
zc+=*s_sasY30BMyoGeB+js_Qis0mkR<aLPs<+|zNjY6E$;Y$7qly$s|d%B};11HS5
z2{qh+pKcvD-2NN>U>L6`<XY%t!kiuY$f|<2U|1g7n}Kb42DWua4S17JK#OKIgeN0%
z2P(GXP@EAMP_hBP>(GW?4UIj`>|1oB911E*Fft$jZU!Yq=!aP;x-CNJBMis-!a-#a
z+l@#_iJy9#LH-{Hy9N_d@b(XItfub4>HDYu&E=c9{<z?A>%UYiww_J4o}E8;>0etf
z|8>FlF5e`3+o9VmXRCi5cvwgM8-Qm=(z)Ya$70RCWX-<0>rb7n06Ei+DaZV_li%(C
z)8RiHe(Jou0flA@pE~!f*<d`dTSq<Et*!pQR~S<MF}22;(w7P{ojc`ihuAM!$i8tN
zt7<#SeS4HUZhaMq@NPx7;)}W!t57u(Sl3^n#TvI@D(dJdl(9ck0u+{nGGupMDzXC<
z-f@@~CUX6BKMUjb6S9HCW`iEModA%snDq2*v=}u_J$+Pm9Bx9hQe!qNHRjd{EcDCV
z+^l~`f?K~^&ti*%0D!;B3V^Y+6<WLDZrmD)s&0&y4Z=ykq(8ozF3K0-Wk2eMnm^<Z
z;~k<Tx`DAlAdY^*!x*MwFij(PHq6pySYZ<=$<3IdiVlLhQOf7Aik4`Yp2fIi)G4K|
zxgVR>Ef6<Rx4^Us9@R}S7`fpO2Sorz<62mNt9e0;jzq#yxMe_##H$E=W(?D`#*1&W
z#y@}D0hp)q7_u}<+HKy+&L5mrDQ9`gx#c-<zAaN*X4-#q`q!uD>yOOuIhw3Ex=`?w
zC)M-LcDV6;FK>m|9Nwg}_O5kiH-yKfThhQe_}xu}&X1P~Q{YY2dLCT8e|7HQ<4aF&
zF4Xo+b>Hon>CgdnSF(85tYxvTHCfmC*!#5ja0X`YU7S7tw0Q3t4+AXWD9a9b)iMK9
zT+1_M20Q%5ag1xL;=irp+UjyVRIi8bHn!WYSp@+vxCBA73&K!TjKNi~pydhzMh-@c
zjA5Q0Zx~zMiPdh*kVD9qF+-%)Z*z@HW3+V{GXyGSCuFzCik;`|tA%#RTrTb;wbGK$
z6|HQya-}Q9JXgP3n8SIEA+RG(41d=V1W&Q7pSnhr^26{WP&n9UTpL-G!I&Bh%k|JC
z@5aodca24YDjp~tM8Dh?@HYn~8onXn2zZI77*q~P9mGPP1cxs~;CfuqxRJqNU{JI6
zLigkF8-@NAvJcf*oX@5&eQEu`ShOSZAm|_qQ2r6JC5ED?XC&ttvHd%7JtK~1q~ICJ
zH~uYKh&6Yz^XH!~@|8)xa)GZ}<aZ_cU9(h@e{X_K<?fuYEm;U%GT~aJij!1vigiwO
zeAe}|uDhiRtm}KWapua*#ot`{^_AJ0h04YhdtjAgX!?a!peXOmrNzpIWM#uD{6<50
nS8dR+q&F<JGlb2ZjDOFRr`Upt&d*N&?DQ|rEP-%~zU==Cif@B7

literal 0
HcmV?d00001

diff --git a/tests/__pycache__/test_update_python_runtimes.cpython-312.pyc b/tests/__pycache__/test_update_python_runtimes.cpython-312.pyc
new file mode 100644
index 0000000000000000000000000000000000000000..fa0274a55c97d11bb39c31f1c87b4a62dcd45c9b
GIT binary patch
literal 6520
zcmcgwYitzP6~41GvorfLUgO8wII!U0vN+zw4<3GCik*bKa3TUp>?oZsJLBCo`*7}z
zV>~gDD-p%1sAAMs1~m~zK@AAhP^nV$s{*G#Dpjg>yN+yasD#u?RsY#I6_tPW+&eSt
z2WvxHsUz*#bI(2Z+<Rxv`Odlbj~<T`!E>)UKe)$(&|gWzdU%srx&X`+l99|LP`~ld
z^fS=5C2UEypJj-QO>jxRpHJHR?Mb0uV2}+RLo#<B$-Kf0mRd$v{%^7d-|tYIvi-~+
zgm9S+fv$T+$Kr0941-3QQ6?b#gS2}COr9SKYmr!h&GWCsQ)kpXmkh^KdHe8?9M+VG
zHJtq0%*N95z)T?pksb8gWad2TXBAGiok!Lz{k+VA)J|64FUUMlQMLnh$O2HOECO|n
zIs(po*@@wl7Edat=!7Q~RZ}C3ITQI4;YaqlGyw$OAtT$OFejz#r?xR9f!ugv@U}i@
z#?YYoUMxBJmzkTURhf@5vOTtuo~@uK$YRVUJ3!m{sQ~j>`$wZF;Obqrw*;G-f^EwJ
z{5J=i_62PDEoyogM-=Hj1*`FNO3jy!#8Yy5L@h|V$ad%u7!_J}8DpDq1RBH;7z{0o
zlxf;m;93lh%u?WB0MTm>wzY-yve!nnSUS~c4h(8heVwdjy$p;sQJHV3FqX&~!%6u-
zYfw3>=oKqg$uzJ?G9V!25hmV<y@ZqzvXzi>LMniOGub2Q)IdC%cZ9JP9|%V@l{i{d
zQExDLPE`^ED)}1z<+nnybW#c7;Z#b&p^-E`6Y5DP5=ul%<3?lpM+F*jk`SSi;ii(Y
z1qsX$S5kvRqj_Fcv{OU6?@{*((jEuQul@kYIJ)oOb3KsR(K^2~aJ?<#-@nMSRn7_S
zg6n~k^_DD%$X7e{!Nm`zW4Wr(e05{S7c{A__Dad+lIhW$uZc)PFJ^o%%~$Ws_?i|g
zT$NzrC(b390j+Up0t(cjp9Y3F^ceaD0KsRh%u<dkaQtU%jC~yi?7g~RehQtV-%Kzz
z+^9QOeXi0*C3#wrO^F^Kx`80R1<M)f3&*uEDfR);Ym2;@!q?gc8fpuWakOAZTPi1`
zlYN)ujJs~Wq=NE;8F#?sGuwk1cW6Q2N}UUcb2#yK7`JB2b`a1l{}>iAg)}n~5gIJS
z6lj<a#4l&@EB{tho?|q@k`~tlDG9Q5&mcwVwZfa`?B@VQ1_8U*KVyJ1)gY8@G8?s7
z+6>xIo1@yiY<~jnqPrYp9yiOX-IG=ShdUixwF^Kop%;@>p&Q84)IuSMfB+_M1Cv*V
zT|gk@xkws<N|Y64h;X=y^pWq1$)58rNs203TvL*gly`+yRl(YG?+%9(0TvTq%8O|n
zkH%BsMBagw0j#JoMOKMV`2BwBl=(Iq&?bVWQ;AUtD+wj6Dyk%>rBqsj_D~`W@M?kT
zX|RXmimJa-#FhVRYjv<F^)irgbZ=|b)ZvSVr^~<Cc6D2BYvY7?ue|0`>y?hn9oM-p
zoj06wd%CiFx^m@5CLHskdrtIaMc<|BOkHcXdjD6BJ8hYR$7jXfHC_9&)d#-vLD!+R
zUFBD{UEVewn-xO^^-n9O9oJjGY`@Vy*Kjo3a5Puledon*#NJH;?02y4DdM1o5Cehv
ztfWBbFA{jNtrIk%&njE2f$+b|?TR{Gaf_P;oy^i;;bdlYuz*wYy_kFgBb^ldFkq*s
zMZFDwkMvXLqi$GFnl(U-q++;JBXxk3G9pnoDR`5aGF0hwT8kC(vi|*zT<A$HG?4j^
z0~ts2J9mGv{p$AHj@-`n3GNf;$Ii+2thl}KUGKTeCR?XEE_O_FUpTKi=lln<{sTGp
z!OWqTvhJ7XJr$Fq8TZbA^6aKq`pb1#YSmuFKZVR}@^Q(lq>o&{hy92_8p)CL0h>ke
zv-nI!t54J2Xq^kS?h48QvXV-yh;^BJq7`$Nt^e1GM^PPW0#_TcF{lsT5`!*8&a!=I
zgjp{iMTVTXG%c8jH=AG!<rINlKvovY5d%cM25z1R#{u+CC{g8X-uXs2F|0g?aT-6)
z;rCL9PsUX>o{CC^OfH2}G63jEDvHB0VCg_Op3o0(<n2#1ycrg*UIPLM>96~oH+{S<
zD?T;v@y>bbvYxtYFJ<<1=R7@&h;bY$>hQDfgAZBgyuY{Q`Zh4(`q-5z-<=if*Vs6k
z^K?Jn#sZn;p#X$(%Ma}ZRwWSetA_3lc1CFE5!jgyzK0XO7Wkf0VNH=jQYkG`Dj~2w
z0u+rJhYg0fsEne_0RJp{CxXy9=HsIHI>y}MtTKf-;~3E^hO<0zZ0IY7vxQJxZD}PC
zi(8yP18}4{FIu5cB+SSGb5+<~P&hcotasQ8<;5NO!kFpEP%w~4)g8uB1x^IIBNz-B
zEmCa8Q}2ZnahduyysDLlyjgNeSR!Ekb7qR{f72WVb+4^guQ`=c&JMwGK#~0^MI#3U
zKUUryhT0#d<A^h_ApbZ;{$;T<5l)_#!(DpsMs98{Q!-8|G$tS+C<AG%NCOI-harT5
zor!cLoKU-fG3*_IrK{x7^RIDqoBOTf*N#m48@YXNjw70p1AJakhfkk`wbAk@?_M3x
zcpnU;F&wbbk_eOXS|$GRL$d-3&<K8#wdtMz%g)-##8W_EAM?JNOD{~nKb^dN=Jq>x
zPTqMwQ}yx#sN(yWiDUELimBR*wbRkb+MGAIh*(b_Gv9P*lACf}bY*HAv!%iLit4$F
z`fNr0H9c3+41wzHV+u7=ZqJ*u<!?cdgYY3wMlVnsi!8AZF$!{sSD?$QyO-5ESliXz
zN00D#?KMYRgu8x`@Gbn&PS@Q-0^yJF-J)Yn_!7S)PPTMwU0x)21*_|KnkNdbCv!4?
z%WehEx;{Z87U?64RzTizY@qG5H1-2TKu#+b-UT>V(S<x)IMG-+{Lug&V+IS^*jf`R
z+_yZcPr`k5z(1~C1Pt0Y0E6HL^5zZX2a3xJ+0oUji|VKv4CCl~di91UdcE8{^kVCj
zKd7ctdL`Un#S-z;!PnqFh?TG`Y06nm-|_ygb+<9Q+Wl|uGN5YLJLdpC+*r|uaY_Qn
z8dmh(Y6QoJG&Q)v3Jh^xNDmAo;wc5jyVSU>NXozf;FDgpW*s9K&O&q{0Ui@4$_uZ)
zZlv);(89zw@@BrLXB$A8gd&^Jkmu=m3J%ussL8BnDF#x+8V0bE(~#21*~pmCz_Vc-
z*5LX{e|95~Fp>0$tQ>`vs(%79j{fHMPVUX@XwP(>$ZUT-=RUc}ijI1aX3F+v+WKeR
zZ!hv7_|A?zWtp<J-;exZG<U3T*4@7-5V1(b4LSES3l3<*y-L%8``(H<@2;$O*R_K=
zZv)_mr|Mp5`OoYC8lI~AZttACF6*wFb?<)Yg&_~o8nQr}ZqNi2@l-88^boT|xJ)%S
zW7Rlp>64NkC;M4dcNhN~cXzXJ7gcuGJMLDxx@%l_clrq5CW3s15kY0fA%gZy4c}e2
zWoCx}y)*TEcgQo-AP}8qzPrOUb5J0fU3`z=_?i_!|7$1TvvqBu!NJTFsWf0#--cMx
z59q;ceuqi#Ad27%j4KonVBCCUTWr<60vxf}UcIX`?2o}o{ID4jp<P|(al11VhR!at
z5~QtoGU``xgzCce0MRA&Y=FaLFOY^6MW%<cJP)C9Mz!47J`~1q6R^gQjU*?>F}>p(
zl?)Zg#PrrrmFUTzTG=?sJ;~@-U}fqvK%hwVR{peV!agsS7)9pES@BfiFm|c(O6}#^
z>yGL7zY$w#9`6mf^P(iB!bt@#Gn|r?Ov}Rw!n-Aj+-Vp+_$jh?x2i#~MUo2KzsklD
zbuY*<nHe_`(nbi0BK$ldenQ9%nQ;|Is!mJ@`KcX1&Z7smQr@}nG_sd1+IZf%!~(ZK
zxCbS6{#E8dsmUH9Tp#nG#KG4uRkD1mVV77U8z2|?k`!>^r>S5#71s!c<UJM_Or|4e
z40PJQIr!1<OhJoQFnN&_IX!SULzj+^!366z2345x+Pd&-&`a{I+5=>PWf<mL<oXtE
z`3u_dchr?dUEkS{F-+?v-(2<HZ1vvn5NR!(v?0ztq5qk!p69&dFMM?TN5?;Wb%8}(
I4c+Cx0TesR4*&oF

literal 0
HcmV?d00001

diff --git a/tests/test_collection_versions.py b/tests/test_collection_versions.py
index 5892fe1..71e12d1 100644
--- a/tests/test_collection_versions.py
+++ b/tests/test_collection_versions.py
@@ -13,14 +13,11 @@
 
 
 @unittest.skipUnless(
-    shutil.which("bash") and shutil.which("jq") and Path("/etc/os-release").exists(),
-    "Collection version discovery requires bash, jq, and /etc/os-release",
+    shutil.which("bash") and shutil.which("jq"),
+    "Collection version discovery requires bash and jq",
 )
 class CollectionVersionTests(unittest.TestCase):
     def setUp(self):
-        self.os_version = subprocess.check_output(
-            ["bash", "-c", '. /etc/os-release; echo "$VERSION_ID"'], text=True
-        ).strip()
         self.manifest = [
             self.release("3.9.25"),
             self.release("3.11.14"),
@@ -35,7 +32,7 @@ def release(self, version, stable=True, **file_overrides):
             "stable": stable,
             "files": [{
                 "platform": "linux",
-                "platform_version": self.os_version,
+                "platform_version": "24.04",
                 "arch": "x64",
                 **file_overrides,
             }],
@@ -67,9 +64,9 @@ def discover(self, workflow, manifest=None, curl_status=0):
             )
             return result, output.read_text() if output.exists() else ""
 
-    def test_selects_latest_supported_stable_build_for_each_series(self):
+    def test_selects_latest_stable_build_independent_of_ubuntu_version(self):
         self.manifest.extend([
-            self.release("3.13.17", platform_version="unsupported"),
+            self.release("3.13.17", platform_version="22.04"),
             self.release("3.13.18", platform="darwin"),
             self.release("3.13.19", arch="arm64"),
             self.release("3.13.20", arch="x64-freethreaded"),
@@ -81,9 +78,19 @@ def test_selects_latest_supported_stable_build_for_each_series(self):
                 result, output = self.discover(workflow)
                 self.assertEqual(result.returncode, 0, result.stderr)
                 self.assertEqual(output.splitlines(), [
-                    "v309=3.9.25", "v311=3.11.14", "v312=3.12.12", "v313=3.13.10",
+                    "v309=3.9.25", "v311=3.11.14", "v312=3.12.12", "v313=3.13.17",
                 ])
 
+    def test_python_matrix_jobs_use_runner_with_python_39_builds(self):
+        for workflow in WORKFLOWS:
+            contents = (ROOT / ".github" / "workflows" / workflow).read_text()
+            for job in ("Collect", "SecurityScan"):
+                with self.subTest(workflow=workflow, job=job):
+                    self.assertRegex(
+                        contents,
+                        rf"(?m)^  {job}:\n    runs-on: ubuntu-24\.04$",
+                    )
+
     def test_missing_series_fails_without_publishing_outputs(self):
         self.manifest = [r for r in self.manifest if not r["version"].startswith("3.13.")]
         for workflow in WORKFLOWS:

From ba23b6b7f9dd15ebf88f61d7b558e7eb13557f90 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Thu, 22 Oct 2026 16:03:16 +0000
Subject: [PATCH 4/8] Exclude generated Python bytecode from repository

Co-authored-by: pappasjfed <163186936+pappasjfed@users.noreply.github.com>
---
 .gitignore                                       |   2 ++
 .../update_python_runtimes.cpython-312.pyc       | Bin 5323 -> 0 bytes
 .../test_collection_versions.cpython-312.pyc     | Bin 7411 -> 0 bytes
 .../test_update_python_runtimes.cpython-312.pyc  | Bin 6520 -> 0 bytes
 4 files changed, 2 insertions(+)
 delete mode 100644 scripts/__pycache__/update_python_runtimes.cpython-312.pyc
 delete mode 100644 tests/__pycache__/test_collection_versions.cpython-312.pyc
 delete mode 100644 tests/__pycache__/test_update_python_runtimes.cpython-312.pyc

diff --git a/.gitignore b/.gitignore
index 637ee79..4b29572 100644
--- a/.gitignore
+++ b/.gitignore
@@ -8,9 +8,11 @@ dist/
 pypi*/
 pypi
 coverage/
+__pycache__/
 docs/
 
 # Ignore Files
+*.pyc
 *.tgz
 *.tar.gz
 *.gz
diff --git a/scripts/__pycache__/update_python_runtimes.cpython-312.pyc b/scripts/__pycache__/update_python_runtimes.cpython-312.pyc
deleted file mode 100644
index 6d3c1e99225e1c8ce9b4e7ddd7856ce762b7a677..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 5323
zcmZt~TTB~Q_Rh<1V=x8`gw#n08@IKcq>nT#O+%Z<CTVCCAZgu3*5DbiVf^TwaR^>p
zWvlEK+Ek(2bmOSamXCZ;g_TlirA6AG^e@u>*fAAkN~KEe$L5a`)JJ}H&mDV)N4em8
z@0@$?nRCzk&VQUv8-lj9Umd<>N9cR<pf|2Md9(_X>qtOhBv1k^QDI6O=`gL0OqhX@
zk=O(m<|u;0N~VN4Y}V$SWJy@VR&8#QYzceV4s&zZK_ihFZqZ-1HVPJiZ(DoTXSeCf
zEbOAuaU@tTBf%z`Z!=YBtzf^5!gWBE6X;pTZK?tn>ICOy>UNb#*e$vTDWT>v6|NUt
zfbS6-gxZlk2w@BC^yqjL8l%T(zdQTdS#c1Ha?BS^B?sd}87vCEGh<3DmGogz5_wsa
zeHl5P9P%kK(Z^#YKFCKE*_X}?NO3s^*npYVHUv|6DEN>t(&ML8tAsO=C?Ac9@L>Bx
z-|1J+@K_cxJh5kZB?hB8gQZkjOlEh+6eTTphC-vGqro*|p+O}bsyv3Wjc@J^9K7(<
zTfvQEw0dxDs0t80YKO=7K&2uARiZFGfj}tKWeX^h2BEMM=n@s?dXb+|xmV-K5jk3w
zrbdQHoctaghVB#UI#OV)v`H$5J_Ng2lcS<rkpau0NL6PDjiE279zUycawaWe)e?!s
zlW`>yQ5jiOR8AuA_R}gWi_)NKjYOgnFUygLOitn(f7~C6r4nKYXOc+~helI)B=ky3
zlEkQz!hwpKehZMJIG$GIP$n(#iWsQ~Fak7`ctVsxzSsfOvo+emgE~jG0F#@b`(+$0
zS)7yRlEpi3X<2IUe%wF7erS6HODJj_3?5kcX=3Vw$#s+i32TP7D~E;wvbhbf-&<WI
z+Q`vI4AJRE4dw}dex^sI_}{4J8QA=2KXj)MMc#`pxDa{^B$lW0G;o0k7czClk)!`c
zU8g8?rH(~o)IXR}iikRf#lfC0i0bL!UX>XU$5iejFJ(lTFzEC7a2<?~tzAQ6QoNML
zhq8Mrl8W(3K@uaf0$!l-L%}X773C%QP|(0^gpD%s`2P|q-fuhog>8nJ>7SGD4*om;
znOJH&{i|$&<#(M;)Regi*ugdMsG2IO@-rAtf>Z{ms~oQ=Sl+;s>e|FYwqZ-oJU~S5
zfNmTu+H0nEz2CX$sJ(h}^5lY}tpxvVr|*dKZKuC>oL**-qY=9S)o&ukndB297^f`~
zNu-1f95$jlB9XT<yi{4yEC)Y9m~>W+H7ZI{B;u#AW<bP^4r>C$<e*wd&Lop_{&E?u
z(lpollZEDbDDAZx!UheKZJJe`g$cNx;h2hHKMJutt%0SP_4(Q;P`VxIAyt0{kEeSc
zQ$ga9N+vCdDwE*TDicqFGs<Zxu8^>FQN(gQm6XY=E7qXetFQ=|3w{dV&G3`kpaXBQ
z*Iui?)?4`9=Ybo68K&Iwbh$22wg-!Bup(L@ncy$U@vOMvq$b#{o%B1HY&fYN$H2C;
zuqIHmw0@H3z{+#fun}}%x!UxQw53ECT>^PpfJ7%CogRf0>t+ghCdUlhb?Dmo4y{w6
z5MYofvZ?i=U1%Tp-Y89>H^4i=_x4_5-az1aY|q2(fKB8};!rB1JmxaWVBiJ6852pU
zmY2JGk4E~>zN)fV<OS6vh|!cFY8IlhgQ6&C&H}2l3URE3z%kVVxhoB-5>+<M4~eQN
zttA<mSO~asReNSgRSM)Vd=S7yY4V%UjiVo|wb#6b6Q#P{GkD&*e;H9+=uT|W)pRvK
zng8IO1=sG9Yxnd}*%h2%e`a9u2dDdk^W(=BS=)Q3{&Z@Joo5>s?R8hXCcBDk)6Z7G
z&}clCiS$14b+<ELwR7D8bJWl%z)3-(>HRK1q3ocJpbNbay=bsz!`cC-+H!`}^URtL
z<d`)t&~=IF93$5#hDYS+Pmw_1H1@wst?61|Ao4Q5jl2*yk8h&DuBX5v#jp&T#C%S-
zi6iJL8>M3?N?+Iur(tvKuv0(7+9;TGeB7pxprEy35^^`S91C`8Zb1e<r$hcqU)j&X
zd-AM8LYLMA%dAx|mGYd@pu=;<{=7+(^xui3hfvOxqq_hp2l<EiGU(tcteBO0W2aev
zGw@++L3vA#11v~wdFwhX>qe}cW#j<FJ?cusRygZm2K5oJ0>BRtY38hgiFmwDGjGe$
zf?dn1X2FrOf<B!$nHZI{3pLu4>n2m3)dHN(+jI7uZ3I#f=<ysmBRShJN$Z<h&fr_~
z(sw|whTRBtn&r52=1<X0R_EniibYqZS&&>W$ez;VKZ^YIJ&;sgaw>zPVnmOeYVBw|
zDWpba1CsUn5*b<X4L}j;OQw=yBCU-1h+l4qi6pLR`8^2}Bfkeg=G0my$We;nPrB_p
zprVr-A(|PvVXHWpGctn%RcnI~)CP#u2AKFIL>F5e%3VnE$tYw8S;4CL+|jeWCtmAO
zt%Dg!O7KcF28r7X*eZ3gQmIwq3~mKjwz-nbw<r&uf@K+eqgo!+^xfsJbr$$r_2v5A
zMc3~8uI}0M3xPwWz@fRf%Yp8qzq{<}F4gq?s)e(6pLveThAL8oVqM|mNguE|Ac?*N
zKb*qBL_7(7n(*f{6oDR7p@;v2)(1QjV^GalB&*^>B18Op=(6TYDH+JJL1ieLHCIZ;
zK-L!E6T<V)2E|Kawl*Lp21KC>$;Q*!9X+Xa*MPOF!C)$r6nujz?90-fKEFd{hC~G)
zBJXC2!d2TjQf?i^IE7V)PmZZ3IfWHbP%UCokVoT63?C-Eb(4+=O=X36R8dWQ8g2^$
zP&8F;D=IfA!f7k#vKVKEw<JeYD}RxXOGG}Z39>{+QdDy^gRuy?-UJtsxG1aEDAaUu
zQYHhbxC9VLC~s#Vy$CW%ZzP52ty0yHdmAPlsjuWR#A_(BT+go{jyp$9FpKrg*E>Jz
zEJQzkX~MGPYA)=#b!6V<|I)kU-Zsq?GR5|;V%v*l_o1TW(2~6dlzZ=m`I^43?R^G9
zZ?Ubf?Cvi*`j_p5=xPnBYx>cInzt7QKDGYDu~yr6wVp*+JxNl9-g(!KTSE&S2TC0W
z=GeL3xq&(Be8<bn9CFr8)lcnw|HKLdJ63JT>0PY#thy|9rtuT2ZdBu*>iFO-$Yq52
zM(#XezR^2jnvf^$i%o5X=tqBCK^`l>k1sX&rklzQ{+XRK`-%;LiDQdx9V^J~JWowo
zm+H3{#>(}TwfexF#{2aL7CqZ^@a(BMbNT7R_v;S>@PW6j5TDs~BUSbWr?_Pk^0pSY
zhwe9ppbYgsQ5Y+X%y^0o!ICEgYppw{{nM>8CyU+#i!D3Iy!doi(fi^u$Fwvqn^9f!
zaxL;~D`d*`?Ten4!ZRP8TJUs~JRQ?x^PYVVJk85H2#2ffsA)%W*O9xucaPq4-#dQq
zU~xx(x$#`F_S}zta=c}Z9DX^79PaVczpivsAT5~`Bwy`$?r5te3Nxb_726=_eSO6?
zY{Vl2cU>f!HKI-)^37IpNuU){_i9aGW?4OxL7j!Rs>E(raUm)iId<5{rqx9lpi(4d
z`KC5(<hZp3ftxilvmWvD^twE1R1r`eZcTNIEVGU~5-&Hk93z-#EqVkOtXi#0_^3*g
z+yebJ@-e|Kh?QF{l;!vgkjb{6t=wmQCwpJ(F+N`K3LyBDl&^ZBg6p0#mWJXmCQ4~c
zLN5@5C<BEhDF=^N04B&)5EUL%HosG~@OVfoBGsC1Jd{bmLgmASYK}yNRFqtactMB&
znzo2Z%2I9G76O!2c34g&;clPe1zBTOwUUB1qKKCiEp({1Q5=VxIRU7gkV&LvKZ{==
zbXY>c*ra`#fl#!unq?CZ`Y}n6<ccK!1v<EdI2#t6?ImaXKbz*A2elG)fo&?WO$Ey>
zrMUlfs88qFH=tNuux~5bx0UVN$B!&I>#l|;!v*$p`wjboH&F5h?u-__fwK3dvh(ox
zv8CF^sf!=ijGtI!Eu`LEU|ULT%V*Di-g%>QIzC6uw|36;m0G*+9WSyiU$cGMZHHVV
z34_|5@D<?A--rbm@BrzCpi^lql3bdEuNWyw#-tWj?J*@GLGmJ>h%h;?YKBY}li~vv
z0oTB{B6tXr@GL@BCa#G0X?W38A`P)y<+^)cIdP(rI<(6tNgZ0ruSs2#81@kuvDC`-
zQ@iS0x+=HbLwFPxNC_^#58X0DQPcy}|2=YjgY4fR>$m8MZ_&<gkr(>!?4fbXqRlh0
z^Xik6PeRnXL;uV2rKM~;IBs4wnW-LX;^ZnK<BEr(LO)s%ZJ&B}p7O5H9OZq)Ai8;(
p%pi!h?05ub>0WuAGEx21vKz6EiR^u*`2lPB^DzjGY>US0{{cAI+fV=i

diff --git a/tests/__pycache__/test_collection_versions.cpython-312.pyc b/tests/__pycache__/test_collection_versions.cpython-312.pyc
deleted file mode 100644
index 067a2a7c9ffd84880451f86f188b627b914ed9a0..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 7411
zcmbtZT~HKRmcIE{SyfO_{1*yRC@9qmSb#s+t&WH^j)*^?t<`F7QJFwh7gd;<B~TU}
zOpFsvM>wIxZVb$BZ;bBlgmh?Z&>I`k?$g*E^UxFXFjV6%6{)+?5xXz_#*Y!ix-WZ9
zW@Uj`YV7PqZ{B<Exi@d#d(Zj4bL)=|hn+z3G;5(-1%&)3R?K8c7gn!PgiI5Wh*X&P
zj3?!zpiYPBA;!m0hK%*Gx(?^#^ryvV(Vx7J*Pm9Ol_nA+*&f1pm_jASb7TH6T?v(L
zlp1A`DTjhDS7dz-7|9x{cwGnNY-ro-a*;FNI!eif6nUeb#ncn|hqN&cO+F-|^%fCr
z@J{#ZV?SgJnK^e~fmA5kKdB=`F4X6_GfSVeh$3Uu80E?N5$oL^N@LIZ)xjTeg*<fJ
z-Y5Gbfx(8cp>W(f<PS!$q_KT|Wl*C-*W=#f(QsG_sKIE&eM6EJe2PIO5QWN^Tb8cJ
zg0iHzQQz&4i0;t!K>EG<BmI43^$=92i9~Q$eY8m3B0fg6iS#WB_S7!2@Z>}eq!!Tv
zIWO{%TX9W%wlT(&qm`~t<f1W;UP)1vKzgV3xABnUO0E8r{<Z`OZEV$52%Ir<{ol||
zzoVUbM?3qD_RKjM;1Wd0%y5i&EZuQSb3<!G)4n+0+~D;#cw6*BQ-ik&TfESy3!u2y
zLu<S&g(bftX|QvVU_Yz}Zm%MR`xPA4{qjQNV01`olw*;IBsY#k<xd*Z%NUjG&yJ~s
z(a7rp71y;9b0Lt~d?CI0O2hD&#wn6|VK`oqeM=hj)?%1|@*!js<cD16ovzQjW?T!o
z+f(Us`9kiFY~{^5OF5Qu`y~5I$0}}LAZ-U&Cg?qK;QuNb=`=}D2{>0GEixke1(RTY
zOASyW_XX2~>#A|#U?esg=bBm?_O@uu=>8TDqgjW;eziX;4{1)bWPYc{`sKhN=<w+e
z*DQ+a?+Z&B*B=Z^%9q5$%DM1j8Qq9n2AP(JEdpAG926x*VL|AIBs)+A-C%s%8<s4+
zk(HpMG(rZ8R<<owTJb~0j#SO=l&f-?=gRVytfZ)V$%ZAumF6$=Hm7}w*lcz=ANq6$
z@P%f=*Xgz(f(=d+)s(~ekHe~oH0BAt9NM_5X+6`^jI#+g#AP~X3b@Lq_Yzt3n&X^`
z_NS+i)hw+)6I|ADxXt5a)v|2R;_+>!jg4DWJOg?P;eKpN=6CEP<GhNiq^AUL_7|<V
z4&zo8u*pcFLbJ5~1W#oba}t&~hz6J-QSo%^DI1FXmQrzwdP-Q$HznwaDs`(V&xS1E
zkFwy3**^m3d&9UHFC^xE0cTxwh>k~j57Q@L+?KE<tf6Z2ZR<~SJ!B`ezh&Pel$hU7
z2WY@m_%nB!B0XdW@e+j^p(%2iQ1CZKMw!cGgz`AMU-AtDL3J?Jr`gcg^oOG(O8h-E
z0k^x}9q|uIhuj}Zsyh&qWhtV%4G(1Eiei^>`tf|D1K3S0a>$*q$7>A1#u3uMGX$e3
zZZtc)j8LOlqA_(irpkC?<8*x>-erfEh3h=-n|2&!SPn+ie)q0gWtV$<P49`GUg7ky
z?vou**sd$ck{XjEX4~-#=evZS-ebKNdbZog?cfd^AD-;(ywE0`xzKy|La*j{WeClw
zS2y(Pg)WQ~xuN9+{KGIZxCecL8mmg9szy8o8hifCnO@B%OMX$%g`6@R4yu|JD<iUh
zShI+d2p@`)p<(=3t*{qLQQ0q#wFCSH)Tlfr<7R4hCDu1AM+4w}GzQjBqoaz(!vunI
zG@>zzDr;;=fg&fyhK3axZAY_6qd{=_9=q<)G^@FHMr#f(pa9NKjVYQn5RIs~=m0aS
z1XEK2a&TDHY+_~}c!V_zkb+oPRnQ9=yN9{%2sNw8AL3PS@P?*>2YM@w0A&;8d9iDz
zHCbG9?`E>NY3@?8`0!#;XR@esq3EZR)>MAkoligibbi~Z@6IjcpP4^<E}4IRl6_uK
zK3z3cb+7ormit@g_Z)dbEmXHX@g}QJELNXNR-a1cHqV_~W$5kpAM82H9K9VthAzyT
zw7js8ywXKSUD8pv;COF|6xvQwv%%*j<ujhY6z+{COByFTo|jZjUz@s?Dkz&N25;<U
zm+XXhEaz};2UH94mU6k0!sn%~>CjYYiGlKe)z;0H{{6?Pwx7<oo&Sg42fq8hIreME
zSB|H(N9Hg6#q+w|v!@p74zAchcPW>+Yf>fUFDmm(^Cml%+@yHRT<O=9Use8d)y)3I
zt-F(3cR$@)|D<oesB^6rr?;k0az)QyDhN2=(rsJXcQU`<$+b7~uh66nH0;r#0o)F#
zZ%)~q188Q00s!4djOilYpu>vXBg;E<c+vXE_6{9z!|&9|)m>qldcI*k`47{?Yam0%
zDWaMI327%+!Pk#d(A&0oWe_$WInDn2zy*R98q%he$PmpdFqd(9oB=)DnN2A{hw?Uw
zpeh!C-1)lP3<dPJW*dzO6=ms_77Y-w@b4&djrFkV759ES!Gc5I?BZ{KmUi()-6s7!
z092|8sFa725erT6L2y=nc_bJCIZnfrw`!bU9s<%u$rzHQ#Z7zTPGDm7{jwyfgXjSz
zF>cp+Zj)CIcsoEHnU&6cTN=DyQu02i>aO0y#&d2o?`=JtCd|1vn!R4A7_1p<O<2>Z
zGuE212LBF#n=`#0crsDvWt#1yGv`lrbe;LAN8`bTVrU_M0I$+={E8yU>WS+ye^|2{
z=n#mC64F5th#q)c^wz*GCB<Zf`W)ZKiJ~ujl?G}@bYcx09o)7e0RKduZBR?0FBS}o
zLNFpq!!R>&vqH3Ai1o!HYRu%N@e6P8ng73GkK;uD2eJv0vgY1#eC}AZRwS(z8Hzsl
z(PY;`?%_;*_7c|juh+}4?#<NaJ@2F715;2jD`CCGtRv4~a`4;iF9>hTdEq4G+gFIi
zRy5g}Dkzz*n5wupdbeVsVDB>F97U<>+6R^QD`!U+st-=(-L=eEQqJN<r#tC%-z#0L
zZc0`+%^jP&@%8vu<4>I@UTa&ZZdoDpfx;JrE+|^#VL<TEj-q7--nT}Z)wI{FKDMph
z&i&rbwHMi5@tWud5Mx*W1G0^T8hphi^c8B_<6wyS8pY1yH%%%w4j~JS(E?+jhscm<
zcuhJ%Xu~|p(CxIx$>x`6kxMXtLqyBpX8ds$8{f~8+rF%JemrgGe7B52m5lKS#+m6e
zr{(rYzy^ZqSWmzo@zA<8YD_5F7w7Aa4tcJ*-SKUQu0(XKk42RFC=fW~{MI+MTmg4c
z<Kg5s92qYx<XxEI(KF5Lyfh$<zG6lPP^Am9O=fgZKkvhO2rCTvRXI2+z&sQorbvPj
z?+PQpMTN9VbE{!pO8m^*4Cv1ouooxy3&?<^xT;s+IG0X#K6h2jj3r%lv+pNe`yacK
zu49X3UCFYpg|coq;bl!LZ~#m1G63<@SEjDa9(-JM_sT-a;bp=Wl%|SZi^Vm-by6;O
zYU}oU&G%~Ocb%Abb-du1lF~H>RF+V0nSn8uIe6ci#gx5N(6{}r?AQ+en;qP-Jvpx&
zVLV#;5&ji`A4JSqfxn&Hp#t;(3D8#|iUA0uL<+;1Y=l6}+?B}GZC8StqHk|yp(g^T
z0DX+4BCXdG9P^t9g>N|KNF&m){I)}G>gce_K!lndewl3X;CdXX18629G-n9L3nr8m
zc+=*s_sasY30BMyoGeB+js_Qis0mkR<aLPs<+|zNjY6E$;Y$7qly$s|d%B};11HS5
z2{qh+pKcvD-2NN>U>L6`<XY%t!kiuY$f|<2U|1g7n}Kb42DWua4S17JK#OKIgeN0%
z2P(GXP@EAMP_hBP>(GW?4UIj`>|1oB911E*Fft$jZU!Yq=!aP;x-CNJBMis-!a-#a
z+l@#_iJy9#LH-{Hy9N_d@b(XItfub4>HDYu&E=c9{<z?A>%UYiww_J4o}E8;>0etf
z|8>FlF5e`3+o9VmXRCi5cvwgM8-Qm=(z)Ya$70RCWX-<0>rb7n06Ei+DaZV_li%(C
z)8RiHe(Jou0flA@pE~!f*<d`dTSq<Et*!pQR~S<MF}22;(w7P{ojc`ihuAM!$i8tN
zt7<#SeS4HUZhaMq@NPx7;)}W!t57u(Sl3^n#TvI@D(dJdl(9ck0u+{nGGupMDzXC<
z-f@@~CUX6BKMUjb6S9HCW`iEModA%snDq2*v=}u_J$+Pm9Bx9hQe!qNHRjd{EcDCV
z+^l~`f?K~^&ti*%0D!;B3V^Y+6<WLDZrmD)s&0&y4Z=ykq(8ozF3K0-Wk2eMnm^<Z
z;~k<Tx`DAlAdY^*!x*MwFij(PHq6pySYZ<=$<3IdiVlLhQOf7Aik4`Yp2fIi)G4K|
zxgVR>Ef6<Rx4^Us9@R}S7`fpO2Sorz<62mNt9e0;jzq#yxMe_##H$E=W(?D`#*1&W
z#y@}D0hp)q7_u}<+HKy+&L5mrDQ9`gx#c-<zAaN*X4-#q`q!uD>yOOuIhw3Ex=`?w
zC)M-LcDV6;FK>m|9Nwg}_O5kiH-yKfThhQe_}xu}&X1P~Q{YY2dLCT8e|7HQ<4aF&
zF4Xo+b>Hon>CgdnSF(85tYxvTHCfmC*!#5ja0X`YU7S7tw0Q3t4+AXWD9a9b)iMK9
zT+1_M20Q%5ag1xL;=irp+UjyVRIi8bHn!WYSp@+vxCBA73&K!TjKNi~pydhzMh-@c
zjA5Q0Zx~zMiPdh*kVD9qF+-%)Z*z@HW3+V{GXyGSCuFzCik;`|tA%#RTrTb;wbGK$
z6|HQya-}Q9JXgP3n8SIEA+RG(41d=V1W&Q7pSnhr^26{WP&n9UTpL-G!I&Bh%k|JC
z@5aodca24YDjp~tM8Dh?@HYn~8onXn2zZI77*q~P9mGPP1cxs~;CfuqxRJqNU{JI6
zLigkF8-@NAvJcf*oX@5&eQEu`ShOSZAm|_qQ2r6JC5ED?XC&ttvHd%7JtK~1q~ICJ
zH~uYKh&6Yz^XH!~@|8)xa)GZ}<aZ_cU9(h@e{X_K<?fuYEm;U%GT~aJij!1vigiwO
zeAe}|uDhiRtm}KWapua*#ot`{^_AJ0h04YhdtjAgX!?a!peXOmrNzpIWM#uD{6<50
nS8dR+q&F<JGlb2ZjDOFRr`Upt&d*N&?DQ|rEP-%~zU==Cif@B7

diff --git a/tests/__pycache__/test_update_python_runtimes.cpython-312.pyc b/tests/__pycache__/test_update_python_runtimes.cpython-312.pyc
deleted file mode 100644
index fa0274a55c97d11bb39c31f1c87b4a62dcd45c9b..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 6520
zcmcgwYitzP6~41GvorfLUgO8wII!U0vN+zw4<3GCik*bKa3TUp>?oZsJLBCo`*7}z
zV>~gDD-p%1sAAMs1~m~zK@AAhP^nV$s{*G#Dpjg>yN+yasD#u?RsY#I6_tPW+&eSt
z2WvxHsUz*#bI(2Z+<Rxv`Odlbj~<T`!E>)UKe)$(&|gWzdU%srx&X`+l99|LP`~ld
z^fS=5C2UEypJj-QO>jxRpHJHR?Mb0uV2}+RLo#<B$-Kf0mRd$v{%^7d-|tYIvi-~+
zgm9S+fv$T+$Kr0941-3QQ6?b#gS2}COr9SKYmr!h&GWCsQ)kpXmkh^KdHe8?9M+VG
zHJtq0%*N95z)T?pksb8gWad2TXBAGiok!Lz{k+VA)J|64FUUMlQMLnh$O2HOECO|n
zIs(po*@@wl7Edat=!7Q~RZ}C3ITQI4;YaqlGyw$OAtT$OFejz#r?xR9f!ugv@U}i@
z#?YYoUMxBJmzkTURhf@5vOTtuo~@uK$YRVUJ3!m{sQ~j>`$wZF;Obqrw*;G-f^EwJ
z{5J=i_62PDEoyogM-=Hj1*`FNO3jy!#8Yy5L@h|V$ad%u7!_J}8DpDq1RBH;7z{0o
zlxf;m;93lh%u?WB0MTm>wzY-yve!nnSUS~c4h(8heVwdjy$p;sQJHV3FqX&~!%6u-
zYfw3>=oKqg$uzJ?G9V!25hmV<y@ZqzvXzi>LMniOGub2Q)IdC%cZ9JP9|%V@l{i{d
zQExDLPE`^ED)}1z<+nnybW#c7;Z#b&p^-E`6Y5DP5=ul%<3?lpM+F*jk`SSi;ii(Y
z1qsX$S5kvRqj_Fcv{OU6?@{*((jEuQul@kYIJ)oOb3KsR(K^2~aJ?<#-@nMSRn7_S
zg6n~k^_DD%$X7e{!Nm`zW4Wr(e05{S7c{A__Dad+lIhW$uZc)PFJ^o%%~$Ws_?i|g
zT$NzrC(b390j+Up0t(cjp9Y3F^ceaD0KsRh%u<dkaQtU%jC~yi?7g~RehQtV-%Kzz
z+^9QOeXi0*C3#wrO^F^Kx`80R1<M)f3&*uEDfR);Ym2;@!q?gc8fpuWakOAZTPi1`
zlYN)ujJs~Wq=NE;8F#?sGuwk1cW6Q2N}UUcb2#yK7`JB2b`a1l{}>iAg)}n~5gIJS
z6lj<a#4l&@EB{tho?|q@k`~tlDG9Q5&mcwVwZfa`?B@VQ1_8U*KVyJ1)gY8@G8?s7
z+6>xIo1@yiY<~jnqPrYp9yiOX-IG=ShdUixwF^Kop%;@>p&Q84)IuSMfB+_M1Cv*V
zT|gk@xkws<N|Y64h;X=y^pWq1$)58rNs203TvL*gly`+yRl(YG?+%9(0TvTq%8O|n
zkH%BsMBagw0j#JoMOKMV`2BwBl=(Iq&?bVWQ;AUtD+wj6Dyk%>rBqsj_D~`W@M?kT
zX|RXmimJa-#FhVRYjv<F^)irgbZ=|b)ZvSVr^~<Cc6D2BYvY7?ue|0`>y?hn9oM-p
zoj06wd%CiFx^m@5CLHskdrtIaMc<|BOkHcXdjD6BJ8hYR$7jXfHC_9&)d#-vLD!+R
zUFBD{UEVewn-xO^^-n9O9oJjGY`@Vy*Kjo3a5Puledon*#NJH;?02y4DdM1o5Cehv
ztfWBbFA{jNtrIk%&njE2f$+b|?TR{Gaf_P;oy^i;;bdlYuz*wYy_kFgBb^ldFkq*s
zMZFDwkMvXLqi$GFnl(U-q++;JBXxk3G9pnoDR`5aGF0hwT8kC(vi|*zT<A$HG?4j^
z0~ts2J9mGv{p$AHj@-`n3GNf;$Ii+2thl}KUGKTeCR?XEE_O_FUpTKi=lln<{sTGp
z!OWqTvhJ7XJr$Fq8TZbA^6aKq`pb1#YSmuFKZVR}@^Q(lq>o&{hy92_8p)CL0h>ke
zv-nI!t54J2Xq^kS?h48QvXV-yh;^BJq7`$Nt^e1GM^PPW0#_TcF{lsT5`!*8&a!=I
zgjp{iMTVTXG%c8jH=AG!<rINlKvovY5d%cM25z1R#{u+CC{g8X-uXs2F|0g?aT-6)
z;rCL9PsUX>o{CC^OfH2}G63jEDvHB0VCg_Op3o0(<n2#1ycrg*UIPLM>96~oH+{S<
zD?T;v@y>bbvYxtYFJ<<1=R7@&h;bY$>hQDfgAZBgyuY{Q`Zh4(`q-5z-<=if*Vs6k
z^K?Jn#sZn;p#X$(%Ma}ZRwWSetA_3lc1CFE5!jgyzK0XO7Wkf0VNH=jQYkG`Dj~2w
z0u+rJhYg0fsEne_0RJp{CxXy9=HsIHI>y}MtTKf-;~3E^hO<0zZ0IY7vxQJxZD}PC
zi(8yP18}4{FIu5cB+SSGb5+<~P&hcotasQ8<;5NO!kFpEP%w~4)g8uB1x^IIBNz-B
zEmCa8Q}2ZnahduyysDLlyjgNeSR!Ekb7qR{f72WVb+4^guQ`=c&JMwGK#~0^MI#3U
zKUUryhT0#d<A^h_ApbZ;{$;T<5l)_#!(DpsMs98{Q!-8|G$tS+C<AG%NCOI-harT5
zor!cLoKU-fG3*_IrK{x7^RIDqoBOTf*N#m48@YXNjw70p1AJakhfkk`wbAk@?_M3x
zcpnU;F&wbbk_eOXS|$GRL$d-3&<K8#wdtMz%g)-##8W_EAM?JNOD{~nKb^dN=Jq>x
zPTqMwQ}yx#sN(yWiDUELimBR*wbRkb+MGAIh*(b_Gv9P*lACf}bY*HAv!%iLit4$F
z`fNr0H9c3+41wzHV+u7=ZqJ*u<!?cdgYY3wMlVnsi!8AZF$!{sSD?$QyO-5ESliXz
zN00D#?KMYRgu8x`@Gbn&PS@Q-0^yJF-J)Yn_!7S)PPTMwU0x)21*_|KnkNdbCv!4?
z%WehEx;{Z87U?64RzTizY@qG5H1-2TKu#+b-UT>V(S<x)IMG-+{Lug&V+IS^*jf`R
z+_yZcPr`k5z(1~C1Pt0Y0E6HL^5zZX2a3xJ+0oUji|VKv4CCl~di91UdcE8{^kVCj
zKd7ctdL`Un#S-z;!PnqFh?TG`Y06nm-|_ygb+<9Q+Wl|uGN5YLJLdpC+*r|uaY_Qn
z8dmh(Y6QoJG&Q)v3Jh^xNDmAo;wc5jyVSU>NXozf;FDgpW*s9K&O&q{0Ui@4$_uZ)
zZlv);(89zw@@BrLXB$A8gd&^Jkmu=m3J%ussL8BnDF#x+8V0bE(~#21*~pmCz_Vc-
z*5LX{e|95~Fp>0$tQ>`vs(%79j{fHMPVUX@XwP(>$ZUT-=RUc}ijI1aX3F+v+WKeR
zZ!hv7_|A?zWtp<J-;exZG<U3T*4@7-5V1(b4LSES3l3<*y-L%8``(H<@2;$O*R_K=
zZv)_mr|Mp5`OoYC8lI~AZttACF6*wFb?<)Yg&_~o8nQr}ZqNi2@l-88^boT|xJ)%S
zW7Rlp>64NkC;M4dcNhN~cXzXJ7gcuGJMLDxx@%l_clrq5CW3s15kY0fA%gZy4c}e2
zWoCx}y)*TEcgQo-AP}8qzPrOUb5J0fU3`z=_?i_!|7$1TvvqBu!NJTFsWf0#--cMx
z59q;ceuqi#Ad27%j4KonVBCCUTWr<60vxf}UcIX`?2o}o{ID4jp<P|(al11VhR!at
z5~QtoGU``xgzCce0MRA&Y=FaLFOY^6MW%<cJP)C9Mz!47J`~1q6R^gQjU*?>F}>p(
zl?)Zg#PrrrmFUTzTG=?sJ;~@-U}fqvK%hwVR{peV!agsS7)9pES@BfiFm|c(O6}#^
z>yGL7zY$w#9`6mf^P(iB!bt@#Gn|r?Ov}Rw!n-Aj+-Vp+_$jh?x2i#~MUo2KzsklD
zbuY*<nHe_`(nbi0BK$ldenQ9%nQ;|Is!mJ@`KcX1&Z7smQr@}nG_sd1+IZf%!~(ZK
zxCbS6{#E8dsmUH9Tp#nG#KG4uRkD1mVV77U8z2|?k`!>^r>S5#71s!c<UJM_Or|4e
z40PJQIr!1<OhJoQFnN&_IX!SULzj+^!366z2345x+Pd&-&`a{I+5=>PWf<mL<oXtE
z`3u_dchr?dUEkS{F-+?v-(2<HZ1vvn5NR!(v?0ztq5qk!p69&dFMM?TN5?;Wb%8}(
I4c+Cx0TesR4*&oF


From f9fb0132e80db9154d33290f93aa490c33b442e0 Mon Sep 17 00:00:00 2001
From: John Pappas <john.pappas.ctr@amentum.com>
Date: Thu, 22 Oct 2026 09:57:39 -0600
Subject: [PATCH 5/8] WIP: Vagrantfile

---
 Vagrantfile | 125 ++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 125 insertions(+)
 create mode 100644 Vagrantfile

diff --git a/Vagrantfile b/Vagrantfile
new file mode 100644
index 0000000..b0145c8
--- /dev/null
+++ b/Vagrantfile
@@ -0,0 +1,125 @@
+# -*- mode: ruby -*-
+# vi: set ft=ruby :
+
+# All Vagrant configuration is done below.
+Vagrant.configure("2") do |config|
+  # The most common configuration options are documented and commented below.
+  # For a complete reference, please see the online documentation at
+  # https://docs.vagrantup.com.
+
+  # Every Vagrant development environment requires a box. You can search for
+  # boxes at https://vagrantcloud.com/search.
+  config.vm.box = "oraclelinux/9-btrfs"
+  config.vm.box_url = "https://oracle.github.io/vagrant-projects/boxes/oraclelinux/9-btrfs.json"
+  config.vm.hostname = "Node-Collector"
+
+  config.ssh.key_type = :ecdsa521 # Requires Vagrant 2.4.1
+
+  ############################################################################
+  # Provider-specific configuration                                          #
+  ############################################################################
+  config.vm.provider "virtualbox" do |vb|
+    # Set Name
+    vb.name = "Node Collector - OEL9"
+
+    # Display the VirtualBox GUI when booting the machine
+    vb.gui = false
+    
+    # Set up VM options
+    vb.customize ["modifyvm", :id, "--vm-process-priority", "normal"]
+    vb.customize ["modifyvm", :id, "--graphiccontroller", "vmsvga"]
+    vb.customize ["modifyvm", :id, "--vram", "160"]
+    vb.customize ["modifyvm", :id, "--clipboard-mode", "bidirectional"]
+    vb.customize ["modifyvm", :id, "--draganddrop", "bidirectional"]
+    vb.customize ["modifyvm", :id, "--usbxhci", "on"]
+    vb.customize ["modifyvm", :id, "--audioin", "on"]
+    vb.customize ["modifyvm", :id, "--audiocontroller", "hda"]
+    vb.customize ["modifyvm", :id, "--vrde", "off"]
+  end
+
+  ############################################################################
+  # File copy provisioners                                                   #
+  ############################################################################
+  config.vm.provision "file", source: "~/.ssh", destination: ".ssh"
+  config.vm.provision "file", source: "~/.gitconfig", destination: ".gitconfig"
+
+  ############################################################################
+  # Shell script provisioner                                                 #
+  ############################################################################
+  config.vm.provision "shell", inline: <<-'SHELL'
+    ############################################################################
+    # Add Software                                                             #
+    ############################################################################
+    # Add EPEL
+    echo -e "\nInstalling additional repos\n"
+    dnf install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
+    curl -fsSL https://cli.github.com/packages/rpm/gh-cli.repo >\
+      "/etc/yum.repos.d/github-cli.repo"
+    echo
+    /usr/bin/crb enable
+
+    # Software Update
+    echo -e "\nInstalling Updates\n"
+    dnf update -y
+
+    # Install Container/Additional Software
+    echo -e "\nInstalling additional software\n"
+    dnf install -y podman skopeo podman-docker tmux tree \
+      git git-lfs gh rsync mkisofs isomd5sum \
+      python3.12 python3.12-venv python3.12-pip
+
+    # Setup Rootless Podman
+    echo -e "\nSetting up rootless podman"
+    sysctl user.max_user_namespaces=15000
+    sed -i 's/user.max_user_namespaces=0/user.max_user_namespaces=15000/i' /etc/sysctl.conf
+    usermod --add-subuids 200000-201000 --add-subgids 200000-201000 vagrant
+    groupadd -r docker
+    usermod -aG docker vagrant
+    touch /etc/containers/nodocker
+
+    # Import .ssh to vagrant user
+    echo -e "\nSetting up vagrant user .ssh"
+    cp -v /root/.gitconfig /home/vagrant/
+    git config --global http.sslBackend openssl
+    cat /home/vagrant/.ssh/id*.pub >> /home/vagrant/.ssh/authorized_keys
+    cat /root/.ssh/id*.pub >> /root/.ssh/authorized_keys
+    chown -R vagrant:vagrant /home/vagrant
+    chmod -R 600 /home/vagrant/.ssh
+    chmod 700 /home/vagrant/.ssh
+    
+    echo -e "\nDone Updating. Rebooting.\n"
+  SHELL
+
+  # Reboot to enable updates
+  config.vm.provision 'shell', reboot: true
+
+  # Enable FIPS
+  config.vm.provision "shell", inline: <<-'SHELL'
+    echo -e "\nEnabling FIPS\n"
+    fips-mode-setup --enable
+  SHELL
+    
+  # Reboot to enable FIPS
+  config.vm.provision 'shell', reboot: true
+
+  # Run Local routine to set up environment
+  config.vm.provision "shell", privileged: false,
+  env: {
+    GITHUB_TOKEN:ENV['GITHUB_TOKEN']
+  }, inline: <<-'SHELL'
+    echo -e "\nRunning user provisioning\n"
+    if [[ -z "$GITHUB_TOKEN" ]]; then
+      echo "GITHUB_TOKEN undefined. Will Prompt authentication via browser"
+      gh auth login
+    else
+      echo "GITHUB_TOKEN detected. Respecting token."
+    fi
+    export DATE=`date '+%Y%m%d-%H%M'`
+
+    ./setup.sh
+    ./collect.sh
+    # ./mkiso.sh
+    
+  SHELL
+
+end

From 27059b59af725c704a20483ba1ec99364ede7a25 Mon Sep 17 00:00:00 2001
From: John Pappas <163186936+pappasjfed@users.noreply.github.com>
Date: Thu, 22 Oct 2026 13:46:22 -0600
Subject: [PATCH 6/8] Fix password variable name in upload script to be
 consistent

---
 upload.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/upload.sh b/upload.sh
index ced6ff5..81db90f 100755
--- a/upload.sh
+++ b/upload.sh
@@ -43,7 +43,7 @@ do
     if twine upload \
     --repository-url "${NEXUS_URL}" \
     --username "${NEXUS_USER}" \
-    --password "${NEXUS_PASSWORD}" \
+    --password "${NEXUS_PASS}" \
     "${FILE}" \
     >> "${REPORT}" 2>&1
     then
@@ -68,4 +68,4 @@ echo -e "\nUpload complete. See ${REPORT} for details."
 
 if [ "${FAILED}" -gt 0 ]; then
     exit 1
-fi
\ No newline at end of file
+fi

From 6a84295e29b5c613589ea02d6c7120e876c02caa Mon Sep 17 00:00:00 2001
From: John Pappas <163186936+pappasjfed@users.noreply.github.com>
Date: Thu, 22 Oct 2026 13:47:01 -0600
Subject: [PATCH 7/8] Update requirements-dev.txt to include gcovr

---
 requirements-dev.txt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index ce39f9c..6987758 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -13,4 +13,5 @@ reprotest
 twine
 virtualenv
 wheel
-ruff
\ No newline at end of file
+ruff
+gcovr

From 479bc3e42f0ad0c97340d8a3afda3e031767c164 Mon Sep 17 00:00:00 2001
From: John Pappas <163186936+pappasjfed@users.noreply.github.com>
Date: Thu, 22 Oct 2026 13:53:50 -0600
Subject: [PATCH 8/8] Add step to copy shell scripts to ISO

Added a step to copy shell scripts to the ISO directory.
---
 .github/workflows/branch.yml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/branch.yml b/.github/workflows/branch.yml
index 8359aac..34733ad 100644
--- a/.github/workflows/branch.yml
+++ b/.github/workflows/branch.yml
@@ -522,16 +522,19 @@ jobs:
       - name: Copy Markdowns to ISO
         run: cp -v *.md ISO/
 
+      - name: Copy scripts to ISO
+        run: cp -v *.sh ISO/
+
+      - name: Copy package manifests to ISO
+        run: |
+          cp -v requirements*.txt ISO/
+
       - name: Move evidence to ISO/evidence
         run: |
           mkdir -p ISO/evidence
           mv -v ISO/*report* ISO/evidence/
           mv -v ISO/*sbom* ISO/evidence/
 
-      - name: Copy package manifests to ISO
-        run: |
-          cp -v requirements*.txt ISO/
-
       - name: Package source repository into ISO
         run: |
           echo -e "\nPackaging source repository"