summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Python 3.13.4v3.13.4Thomas Wouters2025-06-03101-246/+1037
|
* [3.13] gh-135034: Normalize link targets in tarfile, add ↵T. Wouters2025-06-0311-164/+965
| | | | | | | | | | | | | | `os.path.realpath(strict='allow_missing')` (GH-135037) (GH-135064) Addresses CVEs 2024-12718, 2025-4138, 2025-4330, and 2025-4517. (cherry picked from commit 3612d8f51741b11f36f8fb0494d79086bac9390a) Co-authored-by: Łukasz Langa <lukasz@langa.pl> Signed-off-by: Łukasz Langa <lukasz@langa.pl> Co-authored-by: Petr Viktorin <encukou@gmail.com> Co-authored-by: Seth Michael Larson <seth@python.org> Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com> Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.13] gh-128605: Add branch protections for x86_64 in asm_trampoline.S ↵Miss Islington (bot)2025-06-032-0/+27
| | | | | | | | | | | | | | | | | (GH-128606) (GH-135077) (#135083) [3.14] gh-128605: Add branch protections for x86_64 in asm_trampoline.S (GH-128606) (GH-135077) Apply Intel Control-flow Technology for x86-64 on asm_trampoline.S. Required for mitigation against return-oriented programming (ROP) and Call or Jump Oriented Programming (COP/JOP) attacks. Manual application is required for the assembly files. See also: https://sourceware.org/annobin/annobin.html/Test-cf-protection.html (cherry picked from commit 899cca6dbf76bf3e06a99f60a5f996ad6ba0761f) Co-authored-by: stratakis <cstratak@redhat.com>
* [3.13] gh-134875: Fix mimallc build error for the old compilers (gh-134994) ↵Miss Islington (bot)2025-06-031-2/+2
| | | | | | | | (gh-135054) gh-134875: Fix mimallc build error for the old compilers (gh-134994) (cherry picked from commit b525e31b7fc50e7a498f8b9b16437cb7b9656f6f) Co-authored-by: Donghee Na <donghee.na@python.org>
* [3.13] gh-133454: Mark test_queue tests with many threads as bigmem ↵Miss Islington (bot)2025-06-021-10/+10
| | | | | | | | (gh-134575) (GH-135047) 50 producer and 50 consumer threads need more than 5GB of memory. (cherry picked from commit 7a79f52d83c22f5a9787e590f267325c1175d389) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.13] gh-74232: Add a note about roundtrip of non-float numerics in CSV ↵Miss Islington (bot)2025-06-021-2/+8
| | | | | | | (GH-134963) (GH-135049) (cherry picked from commit e814f43f2c655b931af8ee9e1c128bd1027549fb) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.13] gh-133489: Remove size restrictions on getrandbits() and randbytes() ↵Serhiy Storchaka2025-06-025-26/+47
| | | | | | | (GH-133658) (GH-134965) random.getrandbits() can now generate more that 2**31 bits. random.randbytes() can now generate more that 256 MiB. (cherry picked from commit 68784fed78aa297f0de0d038742495709185bef5)
* [3.13] gh-134908: Protect `textiowrapper_iternext` with critical section ↵Sam Gross2025-06-023-1/+47
| | | | | | | | | (gh-134910) (gh-135040) The `textiowrapper_iternext` function called `_textiowrapper_writeflush`, but did not use a critical section, making it racy in free-threaded builds. (cherry picked from commit 44fb7c361cb24dcf9989a7a1cfee4f6aad5c81aa) Co-authored-by: Duane Griffin <duaneg@dghda.com>
* [3.13] gh-130999: Avoid exiting the new REPL when there are non-string ↵Miss Islington (bot)2025-06-024-4/+51
| | | | | candidates for suggestions (gh-131001) (gh-135020) Co-authored-by: Łukasz Langa <lukasz@langa.pl>
* [3.13] gh-122153: indicate that Windows does not support ↵Bénédikt Tran2025-06-021-3/+3
| | | | | | | | `socket.{send,recv}_fds` (GH-134960) (#135017) This amends commit e3b6ff19aaa318a813130ba9ad2ab0a332f27feb. (cherry picked from commit 128195e12eb6d5b9542558453df7045dd7aa1e15) Co-authored-by: GalaxySnail <me@glxys.nl>
* [3.13] gh-133503: clarify `compileall -s/-p` docs (GH-134756) (#134996)Miss Islington (bot)2025-06-011-3/+10
| | | | | | | gh-133503: clarify `compileall -s/-p` docs (GH-134756) (cherry picked from commit fe6f8a3619242b287a793a5b5d8645f402482c71) Co-authored-by: Rihaan Meher <meherrihaan@gmail.com> Co-authored-by: Bénédikt Tran <10796600+picnixz@users.noreply.github.com>
* [3.13] gh-134696: align OpenSSL and HACL*-based hash functions constructors ↵Bénédikt Tran2025-06-0118-439/+868
| | | | | | | | | | AC signatures (GH-134713) (#134962) OpenSSL and HACL*-based hash functions constructors now support both `data` and `string` parameters. Previously these constructor functions inconsistently supported sometimes `data` and sometimes `string`, while the documentation expected `data` to be given in all cases. (cherry picked from commit c6e63d9d351f6d952000ec3bf84b3a7607989f92) (cherry picked from commit 379d0bc95646dfe923e7ea05fb7f1befbd85572d)
* [3.13] gh-134835: Remove outdated list from `howto/urllib2.rst` (GH-134844) ↵Miss Islington (bot)2025-05-311-67/+19
| | | | | | | | | | (#134985) gh-134835: Remove outdated list from `howto/urllib2.rst` (GH-134844) :teapot: (cherry picked from commit 3704171415c1ea6ebbeb2f992758b6565f42e378) Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
* [3.13] gh-134954: Hard-cap max file descriptors in subprocess test fd_status ↵Miss Islington (bot)2025-05-311-2/+2
| | | | | | | | | | | | | | | | | (GH-134955) (#134981) gh-134954: Hard-cap max file descriptors in subprocess test fd_status (GH-134955) * Hard-cap max file descriptors in subprocess test fd_status On some systems, `SC_OPEN_MAX` may return a very large value (i.e. 10**30), leading to the subprocess test timing out (or run forever). Prevent this situation by applying a hard cap on how many file descriptors are checked. * Fix typo in usage docstring s/fd_stats/fd_status/ (cherry picked from commit f58873e4b2b7aad8e3a08a6188c6eb08d0a3001b) Co-authored-by: Itamar Oren <itamarost@gmail.com>
* [3.13] gh-134918: Fix and improve doctest's documentation (GH-134919) ↵Miss Islington (bot)2025-05-311-48/+47
| | | | | | | (GH-134967) (cherry picked from commit 3c66e5976669a599adfb260514c03815b1a9e4e9) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.13] GH-106235: Clarify `parse_known_args` documentation by removing ↵Miss Islington (bot)2025-05-301-6/+9
| | | | | | | | "remaining" (GH-126921) (#134914) GH-106235: Clarify `parse_known_args` documentation by removing "remaining" (GH-126921) (cherry picked from commit a4251411a97304ab001721c6231d86ddf4eac3f0) Co-authored-by: Savannah Bailey <savannahostrowski@gmail.com>
* gh-134923: Use /GENPROFILE and /USEPROFILE for Windows PGO builds (GH-134924)Steve Dower2025-05-303-7/+9
|
* [3.13] gh-134733: Fix documentation for the show_empty option of ast.dump() ↵Miss Islington (bot)2025-05-301-2/+3
| | | | | | | | (GH-134925) (GH-134941) Optional None values are always omitted. (cherry picked from commit 1a89991d2362867a9127e151376135615bc92a4c) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.13] gh-134718: Fix ast.dump() for empty non-default values (GH-134926) ↵Serhiy Storchaka2025-05-303-12/+24
| | | | | (GH-134936) (cherry picked from commit cc344e8dd0a6fdc83a032c229f9b3cf53f76a887)
* Doc: remove unnecessary section header (GH-134917)Miss Islington (bot)2025-05-301-4/+0
| | | (cherry picked from commit b367e27af9b52528e395f95b277ec7b69e98e287)
* [3.13] ast docs: Fix description of ast.Constant (GH-134741) (#134912)Miss Islington (bot)2025-05-301-3/+3
| | | | | | | | | | | Contrary to the current docs, ast.Constant will never hold containers such as frozenset or tuple; the Python parser only emits it for simple literals. For precision, add the exact list of types that may be contained in an ast.Constant. (cherry picked from commit 381020d41fb1f8b33421f01c609ba0d0edb99764) Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
* [3.13] gh-133260: Remove claim that PyUnicode_InternFromString immortalizes ↵Miss Islington (bot)2025-05-291-4/+0
| | | | | | | (GH-134213) (GH-134884) (cherry picked from commit 4109a9c6b33faa0032ffc95d96cd0db482af3ce2) Co-authored-by: Petr Viktorin <encukou@gmail.com>
* [3.13] gh-69011: : clarify & deduplicate `ctypes.create_*_buffer` docs ↵Miss Islington (bot)2025-05-291-16/+36
| | | | | | | | | (GH-132858) (GH-134882) This adds a warning about the possibly-missing NUL terminator, but in a way that doesn't make it sound like a bug/wart. (cherry picked from commit b783e1791b2076ef560104f8207156d75859c0a6) Co-authored-by: Stan Ulbrych <89152624+StanFromIreland@users.noreply.github.com>
* gh-134262: Add retries to downloads in PCbuild\get_external.py (GH-134820)Miss Islington (bot)2025-05-281-2/+21
| | | | | (cherry picked from commit e9d845b41dca9ad84b76ef777d05e647a4b4d8cd) Co-authored-by: Emma Smith <emma@emmatyping.dev>
* [3.13] gh-108885: Imporove tests for doctest (GH-134832) (GH-134856)Miss Islington (bot)2025-05-285-8/+545
| | | | | | Test the error and failure report in more detail. (cherry picked from commit f6324bc7eedc615c3c961fe368a8c56697d42936) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.13] GH-134848: Use a set to store ``AuditEvents.sources`` (GH-134849) ↵Miss Islington (bot)2025-05-281-8/+8
| | | | | | | | (#134854) GH-134848: Use a set to store ``AuditEvents.sources`` (GH-134849) (cherry picked from commit b265a7ddeb12b2040d80b471d447ce4c3ff4bb95) Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
* [3.13] gh-133711: Fix test_readline.test_nonascii() for UTF-8 Mode ↵Miss Islington (bot)2025-05-281-0/+8
| | | | | | | | | | | (GH-134841) (#134852) gh-133711: Fix test_readline.test_nonascii() for UTF-8 Mode (GH-134841) Skip the test if the Python UTF-8 Mode is enabled and the LC_CTYPE encoding is not UTF-8. (cherry picked from commit 4635115c3f1495fa20e553937df37861fffa7054) Co-authored-by: Victor Stinner <vstinner@python.org>
* [3.13] gh-128840: Fix parsing long IPv6 addresses with embedded IPv4 address ↵Miss Islington (bot)2025-05-283-6/+24
| | | | | | | | (GH-134836) (#134846) gh-128840: Fix parsing long IPv6 addresses with embedded IPv4 address (GH-134836) (cherry picked from commit d83576bf48d07d5e29d5d171c4e25afb048622aa) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.13] gh-133711: Fix test_regrtest for PYTHONUTF8=1 (GH-134839) (#134843)Miss Islington (bot)2025-05-281-1/+4
| | | | | | | | | | | | | | | | | | | gh-133711: Fix test_regrtest for PYTHONUTF8=1 (GH-134839) Use "backslashreplace" error handler to decode stdout and stderr. Example: vstinner@WIN C:\victor\python\main\build\test_python_worker_8360\x91> "C:\victor\python\main\PCbuild\amd64\python_d.exe" -m test --fast-ci --slow-ci --testdir C:\Users\vstinner\AppData\Local\Temp\tmp0t59e8da test_regrtest_noop1 test_regrtest_noop2 test_regrtest_noop3 test_regrtest_noop4 Notice the "\x91" byte at the end of the first line: it's the non-ASCII U+00E6 character encoded to the OEM cp437 code page. (cherry picked from commit 91618278e7cd1ffc222efa03bb5334bd5a13dc5b) Co-authored-by: Victor Stinner <vstinner@python.org>
* [3.13] gh-134817: Document [Timed]RotatingFileHandler shouldRollover method ↵Miss Islington (bot)2025-05-281-1/+9
| | | | | (GH-134818) (GH-134824) (cherry picked from commit 7be5916f6dc3db95744b5fec945327d82cce0183)
* [3.13] gh-134744: Fix fcntl error handling (GH-134748) (GH-134795) (#134798)Miss Islington (bot)2025-05-282-2/+20
| | | | | | | | | | | | | [3.14] gh-134744: Fix fcntl error handling (GH-134748) (GH-134795) gh-134744: Fix fcntl error handling (GH-134748) Fix also reference leak on buffer overflow. (cherry picked from commit 8a6a6f39c869a6601babc31592e156ce22478a47) (cherry picked from commit 9300a596d37d058e6e58d00a2ad70617c863a3de) Co-authored-by: Victor Stinner <vstinner@python.org>
* [3.13] gh-134160: Block multiple module initialization (GH-134773) (#134828)Miss Islington (bot)2025-05-281-4/+24
| | | | | | | gh-134160: Block multiple module initialization (GH-134773) (cherry picked from commit 469a56470b1d8df03862d8ceb73aebca14772dcf) Co-authored-by: Petr Viktorin <encukou@gmail.com> Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
* [3.13] Update outdated statement from `math` about C standard (GH-134621) ↵Miss Islington (bot)2025-05-281-2/+2
| | | | | | | | | (#134826) Update outdated statement from `math` about C standard (GH-134621) (cherry picked from commit 21672b694bd1786bad6eb71a9eff89291a91554b) Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Adam Turner <9087854+aa-turner@users.noreply.github.com>
* [3.13] gh-134789: Document del s[i] operation for mutable sequences ↵Miss Islington (bot)2025-05-271-0/+2
| | | | | | | | | | | | | | (GH-134804) (#134809) gh-134789: Document del s[i] operation for mutable sequences (GH-134804) [main] Update stdtypes.rst - Added explicit mention of `del s[i]` (item deletion by index) to the Mutable Sequence Types section. - Clarified that this operation removes the item at the specified index from the sequence. - Addresses issue GH-134789. (cherry picked from commit 967f361993c9c97eb3ff3076a409b78ea32938df) Co-authored-by: Rishabh Singh <67859818+rishabh11336@users.noreply.github.com>
* [3.13] GH-128161: Fix refleak introduced in GH-134788 (GH-134799)Mark Shannon2025-05-271-1/+3
|
* [3.13] gh-133678: Document C API third party tools (GH-134526) (#134792)Miss Islington (bot)2025-05-274-35/+46
| | | | | | | | gh-133678: Document C API third party tools (GH-134526) (cherry picked from commit c3c88064f5905889057dcdfaaaa4a48f8e2d53d4) Co-authored-by: Victor Stinner <vstinner@python.org> Co-authored-by: Petr Viktorin <encukou@gmail.com> Co-authored-by: Steve Dower <steve.dower@python.org>
* [3.13] gh-128161: Remove redundant GET_ITER from list comprehension code ↵Mark Shannon2025-05-274-17/+51
| | | | (backport of GH-134778) (GH-134788)
* [3.13] Add CODEOWNERS and YAML to end-of-file-fixer and trailing-whitespace ↵Hugo van Kemenade2025-05-272-4/+5
| | | | | | (GH-134730) (#134787) Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
* [3.13] gh-134210: handle signals in `_curses.window.getch` (GH-134326) (#134784)Bénédikt Tran2025-05-273-12/+19
| | | (cherry picked from commit 51762b6cadb8f316dd783716bc5c168c2e2d07f0)
* [3.13] gh-134664: document `cleanup_socket` parameter in ↵Miss Islington (bot)2025-05-271-1/+8
| | | | | | | | `asyncio.start_unix_server` (GH-134750) (#134780) gh-134664: document `cleanup_socket` parameter in `asyncio.start_unix_server` (GH-134750) (cherry picked from commit 92ea1eb38ff97ac046a0031d505c30a51f58a43f) Co-authored-by: Shamil <ashm.tech@proton.me>
* [3.13] gh-134160: Use multi-phase init in documentation examples (GH-134296) ↵Miss Islington (bot)2025-05-2612-196/+228
| | | | | | | | | (#134754) gh-134160: Use multi-phase init in documentation examples (GH-134296) (cherry picked from commit 96905bdd273d2e5724d2c1b6b0f95ecb0daeaabe) Co-authored-by: neonene <53406459+neonene@users.noreply.github.com> Co-authored-by: Adam Turner <9087854+AA-Turner@users.noreply.github.com>
* [3.13] gh-134559: Add versionadded for ``object.__replace__()`` (GH-134672) ↵Miss Islington (bot)2025-05-261-0/+2
| | | | | | | | (#134700) gh-134559: Add versionadded for ``object.__replace__()`` (GH-134672) (cherry picked from commit 71290a6fbe79cef3773a3af6fcf08d8bf15c8460) Co-authored-by: tmlnv <108088921+tmlnv@users.noreply.github.com>
* [3.13] gh-134152: Fix UnboundLocalError in email._header_value_parser ↵Miss Islington (bot)2025-05-263-0/+37
| | | | | | _get_ptext_to_endchars (GH-134233) (#134677) Co-authored-by: R. David Murray <rdmurray@bitdance.com>
* [3.13] gh-132876: workaround broken ldexp() on Windows 10 (GH-133135) (#134685)Sergey B Kirpichev2025-05-263-0/+31
| | | | | | | | | * gh-132876: workaround broken ldexp() on Windows 10 ldexp() fails to round subnormal results before Windows 11, so hide their bug. (cherry picked from commit cf8941c60356acdd00055e5583a2d64761c34af4) Co-authored-by: Tim Peters <tim.peters@gmail.com>
* [3.13] Fix sphinx-lint warnings (default-role used). (GH-134647) (#134669)Miss Islington (bot)2025-05-253-3/+3
| | | | | | Fix sphinx-lint warnings (default-role used). (GH-134647) (cherry picked from commit 24a47155d2172966fab7d56f2bf9181056fba8d0) Co-authored-by: Julien Palard <julien@palard.fr>
* [3.13] gh-134595: Update HOWTO to reflect change in CIBW option (GH-134598) ↵Miss Islington (bot)2025-05-241-1/+1
| | | | | | (#134623) Co-authored-by: Jasper Wong <111284156+3willows@users.noreply.github.com>
* [3.13] gh-80334: fix multiprocessing.freeze_support for other spawn ↵Miss Islington (bot)2025-05-243-6/+8
| | | | | | | | | | | | | | platforms (GH-134462) (#134620) gh-80334: fix multiprocessing.freeze_support for other spawn platforms (GH-134462) Doc/library/multiprocessing.rst: freeze_support: Change to specify spawn method instead of platform Have multiprocessing.freeze_support() enable on spawn, not just win32. --------- (cherry picked from commit 80284b5c5eebd0e603c38322f94a97a2853ceeba) Co-authored-by: Eddy Mulyono <eddymul@gmail.com> Co-authored-by: Gregory P. Smith <greg@krypto.org>
* [3.13] gh-128840: Limit the number of parts in IPv6 address parsing ↵Miss Islington (bot)2025-05-243-2/+22
| | | | | | | | | | | | | | | | (GH-128841) (#134611) gh-128840: Limit the number of parts in IPv6 address parsing (GH-128841) GH-128840: Limit the number of parts in IPv6 address parsing Limit length of IP address string to 39 --------- (cherry picked from commit 47f1161d3a2bec52b5b5e952150141709c247da2) Co-authored-by: Seth Michael Larson <seth@python.org> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com> Co-authored-by: Serhiy Storchaka <storchaka@gmail.com> Co-authored-by: Gregory P. Smith <greg@krypto.org>
* [3.13] gh-134381: Fix RuntimeError when starting not-yet started Thread ↵Miss Islington (bot)2025-05-233-0/+29
| | | | | | | after fork (gh-134514) (gh-134597) (cherry picked from commit 9a2346df861f26d5f8d054ad2f9c37134dee3822) Co-authored-by: Jiucheng(Oliver) <git.jiucheng@gmail.com>
* [3.13] gh-134578: Mark more slow tests (GH-134579) (GH-134592)Serhiy Storchaka2025-05-233-0/+4
| | | (cherry picked from commit 77eade39f972a4f3d8e9fec00288779f35ceee21)