* OpenCollectrive API is blocked by a Cloudflare challenge page in some locations so allow to specify the OpenCollective API data manually

---------

Co-authored-by: Ivan Pozdeev <vano@mail.mipt.ru>

* Default 30 seems enough for our needs
* comments on critical knowledge
* Cleaner handling of t thunk patches
* Fix an error when adding a release for which there's also a prerelease
* Workaround excepthook not working in Github Actions
* requirements.txt workaround is only needed for old Python

Co-authored-by: native-api <2670332+native-api@users.noreply.github.com>

They finally made a release with our fix

- Prevent OpenSSL from bumping across major versions
- Skip adding versions that already have pending PRs
- Copy/move patches when adding new releases in the same series

---------

Co-authored-by: Ivan Pozdeev <vano@mail.mipt.ru>

---------

Co-authored-by: native-api <2670332+native-api@users.noreply.github.com>
Co-authored-by: Ivan Pozdeev <vano@mail.mipt.ru>

Fixes #3470

* reduce stale lock TTL to 2 min, check for stale lock before acquiring and each time -- to hold up new shell sessions for as little as possible

---------

Co-authored-by: Ivan Pozdeev <vano@mail.mipt.ru>

Co-authored-by: native-api <2670332+native-api@users.noreply.github.com>

pypy3.5-c-jit-latest and pypy3.7-c-jit-latest are no longer available

3.14.0-5: Support building against OpenSSL 4

Supposedly lightweight tasks, we'll see

* Fix erroneous use in tests that didn't show until now

3.11.0+: Use the `--with-openssl-rpath' Configure option when possible

The options is available since 3.10.0+ (https://github.com/python/cpython/pull/24820)
but has no effect until 3.11.0 (cpython b9e9292d75)
and broken in MacOS until 3.12.2 (cpython cc13eabc7c),
we add downstream patches to fix that except for 3.11-dev where we disabled it

* Add graalpy-25.0.3

* CI: modified_scripts_build : fix GraalPy version detection

---------

Co-authored-by: Ivan Pozdeev <vano@mail.mipt.ru>

fixes stalling for 60s and failing if some past fault
has resulting in a stale lockfile being present

---------

Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>

GCC 15+ uses C23 by default
(https://www.phoronix.com/news/GCC-15-Default-C23)

fixes "error: static declaration of ‘sinpi’ follows non-static declaration"
fixes "error: cannot use keyword ‘false’ as enumeration constant"

* use OpenSSL 1.0 and 1.1 only from formulae

According to Miniforge README, they are only meant for interactive installation

* Keep bundled OpenSSL 3
There's no support for OpenSSL 4 yet

---------

Co-authored-by: native-api <2670332+native-api@users.noreply.github.com>
Co-authored-by: Ivan Pozdeev <vano@mail.mipt.ru>

* CI: add_version: correctly handle exceptions

exit code 1 is used as a signal that no new version is found -- so have to use a different exit code for unhandled exceptions

* CI: add_version: support prereleases for non-initial releases

They unexpectedly made a prerelease 3.14.5rc1

* clarify confusing error message

They unexpectedly made a prerelease 3.14.5rc1

exit code 1 is used as a signal that no new version is found -- so have to use a different exit code for unhandled exceptions

3.15.0b1 released means we need 3.16 support