From 47f37a10e57e59228f60c61e66c79438a95a50ce Mon Sep 17 00:00:00 2001
From: "sentry-release-bot[bot]"
 <180476844+sentry-release-bot[bot]@users.noreply.github.com>
Date: Thu, 26 Feb 2026 18:34:06 +0000
Subject: [PATCH 1/3] update sentry_arroyo==2.38.2

---
 packages.ini | 1 +
 1 file changed, 1 insertion(+)

diff --git a/packages.ini b/packages.ini
index 68cf7e49..fe960a9d 100644
--- a/packages.ini
+++ b/packages.ini
@@ -2108,6 +2108,7 @@ python_versions = <3.14
 [sentry-arroyo==2.37.1]
 [sentry-arroyo==2.38.0]
 [sentry-arroyo==2.38.1]
+[sentry-arroyo==2.38.2]
 
 [sentry-cli==2.14.3]
 [sentry-cli==2.14.4]

From 34da68cd8ccff2484889e5b2422bc09218da3d23 Mon Sep 17 00:00:00 2001
From: Joshua Li <joshuarli98@gmail.com>
Date: Fri, 27 Feb 2026 13:24:56 -0800
Subject: [PATCH 2/3] build older version of cf on 3.14

---
 packages.ini | 1 -
 1 file changed, 1 deletion(-)

diff --git a/packages.ini b/packages.ini
index fe960a9d..74119683 100644
--- a/packages.ini
+++ b/packages.ini
@@ -306,7 +306,6 @@ apt_requires =
     wget
 brew_requires = wget
 custom_prebuild = prebuild/librdkafka v2.8.0
-python_versions = <3.14
 [confluent-kafka==2.12.2]
 apt_requires =
     patch

From 51cbe39ff59256cc1ab3a613a62eecf06a110fce Mon Sep 17 00:00:00 2001
From: Joshua Li <joshuarli98@gmail.com>
Date: Fri, 27 Feb 2026 13:43:19 -0800
Subject: [PATCH 3/3] fix librdkafka: restore --source-deps-only on Linux to
 avoid GSSAPI

Without --source-deps-only, librdkafka picks up system-installed SASL
which includes GSSAPI/Kerberos support. auditwheel doesn't bundle
libgssapi_krb5.so, leaving GSS_C_NT_HOSTBASED_SERVICE unresolved at
import time.

On macOS, GSSAPI is always available as a system framework so bundling
isn't needed. On macOS, --source-deps-only is skipped because bundled
deps fail to compile with Xcode 16.

Also pin pyupgrade hook to python3.11 to avoid a crash on Python 3.14
(tokenize.cookie_re API change).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 .pre-commit-config.yaml |  1 +
 prebuild/librdkafka     | 23 ++++++++++++++---------
 2 files changed, 15 insertions(+), 9 deletions(-)

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index ce437e39..fc8cd033 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -21,6 +21,7 @@ repos:
     hooks:
     -   id: pyupgrade
         args: [--py311-plus]
+        language_version: python3.11
 -   repo: https://github.com/PyCQA/flake8
     rev: 7.0.0
     hooks:
diff --git a/prebuild/librdkafka b/prebuild/librdkafka
index fd60a6f6..87c52508 100755
--- a/prebuild/librdkafka
+++ b/prebuild/librdkafka
@@ -4,6 +4,7 @@ from __future__ import annotations
 import argparse
 import os
 import subprocess
+import sys
 import tempfile
 
 
@@ -34,15 +35,19 @@ def main() -> int:
 
         # https://github.com/confluentinc/confluent-kafka-python/blob/cdc5f3b6b5d32c4b9f97ee4f648ad64857fb8223/tools/bootstrap-librdkafka.sh#L42
         print("configuring...")
-        subprocess.check_call(
-            (
-                "./configure",
-                "--enable-static",
-                "--install-deps",
-                f"--prefix={args.prefix}",
-            ),
-            cwd=tmpdir,
-        )
+        configure_args = [
+            "./configure",
+            "--enable-static",
+            "--install-deps",
+        ]
+        # on Linux, use only bundled source deps to avoid picking up system
+        # GSSAPI/Kerberos which auditwheel won't bundle (undefined symbol at
+        # import time). on macOS, system deps are fine: GSSAPI is always
+        # available as a system framework, and bundled deps fail with Xcode 16.
+        if sys.platform == "linux":
+            configure_args.append("--source-deps-only")
+        configure_args.append(f"--prefix={args.prefix}")
+        subprocess.check_call(configure_args, cwd=tmpdir)
 
         print("building...")
         subprocess.check_call(("make", "-j", "-C", "src"), cwd=tmpdir)