Make sure you have checked all steps below.

Prerequisite

• Please consider implementing the feature as a hook script or plugin as a first step.
  • pyenv has some powerful support for plugins and hook scripts. Please refer to Authoring plugins for details and try to implement it as a plugin if possible.
• Please consider contributing the patch upstream to rbenv, since we have borrowed most of the code from that project.
  • We occasionally import the changes from rbenv. In general, you can expect changes made in rbenv will be imported to pyenv too, eventually.
  • Generally speaking, we prefer not to make changes in the core in order to keep compatibility with rbenv.
• My PR addresses the following pyenv issue (if any)
  • N/A

Description

• Here are some details about my PR

As per python/cpython#148600 (comment), CPython devs have prepared a backport to 3.14 but did not apply it yet.

Tests

• My PR adds the following unit tests (if any)
  N/A

Summary by cubic

Add OpenSSL 4 build support for Python 3.14.0–3.14.5 in python-build. Lets pyenv build 3.14.x against openssl@4 on macOS and MacPorts, while still defaulting to openssl@3 with fallbacks.

• New Features

  • Added prefer_openssl3_to_4 to set selection order: openssl@3, openssl@4, openssl@1.1, openssl (openssl3, openssl4, openssl, openssl11 on MacPorts).
  • Updated 3.14.0–3.14.5 definitions to use prefer_openssl3_to_4.
  • Backported CPython patches: ASN1_STRING accessor fix (3.14.0) and “Add OpenSSL 4 support” for 3.14.0–3.14.5.

• Bug Fixes

  • CI: rebuild t-suffixed versions when base patches change.
  • Added patches/3.14.*t markers so t builds apply the same backports.

^{Written for commit bfc595b. Summary will update on new commits.}