summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* [3.12] gh-115398: Expose Expat >=2.6.0 reparse deferral API (CVE-2023-52425) ↵Sebastian Pipping2024-03-0615-21/+439
| | | | | | | | | | | | | | | | | | | | | | | | | (GH-115623) (GH-116248) Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding five new methods: - `xml.etree.ElementTree.XMLParser.flush` - `xml.etree.ElementTree.XMLPullParser.flush` - `xml.parsers.expat.xmlparser.GetReparseDeferralEnabled` - `xml.parsers.expat.xmlparser.SetReparseDeferralEnabled` - `xml.sax.expatreader.ExpatParser.flush` Based on the "flush" idea from https://github.com/python/cpython/pull/115138#issuecomment-1932444270 . - Please treat as a security fix related to CVE-2023-52425. (cherry picked from commit 6a95676bb526261434dd068d6c49927c44d24a9b) (cherry picked from commit 73807eb634315f70a464a18feaae33d9e065de09) (cherry picked from commit eda2963378a3c292cf6bb202bb00e94e46ee6d90) --------- Includes code suggested-by: Snild Dolkow <snild@sony.com> and by core dev Serhiy Storchaka. Co-authored-by: Gregory P. Smith <greg@krypto.org>
* [3.12] gh-116143: Fix race condition in pydoc _start_server (GH-116144) ↵Miss Islington (bot)2024-03-062-3/+7
| | | | | | | | (#116415) gh-116143: Fix race condition in pydoc _start_server (GH-116144) (cherry picked from commit 02ee475ee3ce9468d44758df2cd79df9f0926303) Co-authored-by: Itamar Oren <itamarost@gmail.com>
* [3.12] gh-116404: Handle errors correctly in `wait_helper` in `posixmodule` ↵Miss Islington (bot)2024-03-061-26/+29
| | | | | | | | (GH-116405) (#116406) gh-116404: Handle errors correctly in `wait_helper` in `posixmodule` (GH-116405) (cherry picked from commit 22ccf13b332902142fe0c52c593f9efc152c7761) Co-authored-by: Nikita Sobolev <mail@sobolevn.me>
* [3.12] GH-116313: get WASI builds to run under wasmtime 18 w/ WASI ↵Brett Cannon2024-03-055-6/+9
| | | | 0.2/preview2 primitives (GH-116327) (GH-116373)
* [3.12] gh-115986: Fix inaccuracies in pprint docs (GH-116104) (#116382)Miss Islington (bot)2024-03-051-2/+2
| | | | | | Amend wording after gh-116019 was merged. (cherry picked from commit e205c5cd8f1a49d0ef126123312ee8a40d1416b6) Co-authored-by: Kerim Kabirov <39376984+Privat33r-dev@users.noreply.github.com>
* [3.12] chore: fix typos (#116345) (#116370)Terry Jan Reedy2024-03-0510-11/+11
| | | | Co-authored-by: cui fliter <imcusg@gmail.com> (cherry picked from commit e7ba6e9dbe5433b4a0bcb0658da6a68197c28630)
* [3.12] gh-74668: Fix support of bytes in urllib.parse.parse_qsl() ↵Miss Islington (bot)2024-03-053-26/+64
| | | | | | | | | (GH-115771) (GH-116366) urllib.parse functions parse_qs() and parse_qsl() now support bytes arguments containing raw and percent-encoded non-ASCII data. (cherry picked from commit bdba8ef42b15e651dc23374a08143cc2b4c4657d) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.12] gh-76511: Fix email.Message.as_string() for non-ASCII message with ↵Miss Islington (bot)2024-03-054-2/+21
| | | | | | | ASCII charset (GH-116125) (GH-116364) (cherry picked from commit f97f25ef5dfcdfec0d9a359fd970abd139cf3428) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* gh-115554: Improved logic for handling multiple existing py.exe launcher ↵Miss Islington (bot)2024-03-054-74/+140
| | | | | | | installs (GH-115793) (cherry picked from commit 9b7f253b55f10df03d43c8a7c2da40ea523ac7a1) Co-authored-by: Steve Dower <steve.dower@python.org>
* [3.12] Fix the PyGetSetDef documentation (GH-116056) (GH-116363)Miss Islington (bot)2024-03-051-3/+3
| | | | | | closure is not a function pointer, it is a user data pointer. (cherry picked from commit df594011089a83d151ac7000954665536f3461b5) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.12] gh-115777: Fix double versionadded directives (GH-116269) (GH-116361)Miss Islington (bot)2024-03-056-24/+8
| | | | | (cherry picked from commit 0064dfa0919cc93257c351a609f99461f6e4e3ac) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.12] gh-116326: Handler errors correctly in `getwindowsversion` in ↵Miss Islington (bot)2024-03-051-18/+32
| | | | | | | | `sysmodule` (GH-116339) (#116354) * gh-116326: Handler errors correctly in `getwindowsversion` in `sysmodule` (GH-116339) (cherry picked from commit c91bdf86ef1cf9365b61a46aa2e51e5d1932b00a) Co-authored-by: Nikita Sobolev <mail@sobolevn.me>
* [3.12] gh-116325: Raise `SyntaxError` rather than `IndexError` on ForwardRef ↵Miss Islington (bot)2024-03-053-1/+9
| | | | | | | | with empty string arg (GH-116341) (#116347) gh-116325: Raise `SyntaxError` rather than `IndexError` on ForwardRef with empty string arg (GH-116341) (cherry picked from commit a29998a06bf75264c3faaeeec4584a5f75b45a1f) Co-authored-by: Nikita Sobolev <mail@sobolevn.me>
* [3.12] gh-116265: Remove obsolete sentence. (GH-116284) (#116331)Miss Islington (bot)2024-03-041-4/+2
| | | | | | | Remove sentence in Tools/c-analyzer/README referring to deleted ignore-globals.txt. (cherry picked from commit 88b5c665ee1624af1bc5097d3eb2af090b9cabed) Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>
* [3.12] gh-115320: Refactor `get_hash_info` in `sysmodule.c` not to swallow ↵Miss Islington (bot)2024-03-041-23/+25
| | | | | | | | errors (GH-115321) (#116323) gh-115320: Refactor `get_hash_info` in `sysmodule.c` not to swallow errors (GH-115321) (cherry picked from commit 207030f5527d405940b79c10c1413c1e8ff696c1) Co-authored-by: Nikita Sobolev <mail@sobolevn.me>
* [3.12] Docs: update using/configure.rst (GH-116274) (#116276)Hugo van Kemenade2024-03-041-13/+21
|
* gh-116116: Backport blake2 change to fix building with clang-cl on ↵Miss Islington (bot)2024-03-044-6/+8
| | | | | | | windows-i686 (GH-116117) (cherry picked from commit 9b9e819b5116302cb4e471763feb2764eb17dde8) Co-authored-by: Yuriy Chernyshov <thegeorg@yandex-team.com>
* [3.12] Consistently spell out *predicate* instead of *pred*. (gh-116308) ↵Miss Islington (bot)2024-03-042-26/+19
| | | | (gh-116312)
* [3.12] GH-116271 Docs: provide clarification for object assignments in the ↵Miss Islington (bot)2024-03-041-7/+24
| | | | | | | | Tutorial section (GH-116283) (#116305) Co-authored-by: Kerim Kabirov <39376984+Privat33r-dev@users.noreply.github.com> Co-authored-by: Ned Batchelder <ned@nedbatchelder.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
* gh-104711: Add security warning to the CGIHTTPRequestHandler document ↵AN Long2024-03-041-0/+6
| | | | | (GH-115915) (cherry picked from commit dac8ff4c401f75e65a5eef1514f2d7987e63bbfe)
* [3.12] gh-116296: Fix refleak in reduce_newobj() corner case (GH-116297) ↵Miss Islington (bot)2024-03-042-0/+2
| | | | | | | | (#116299) (cherry picked from commit 17c4849981905fb1c9bfbb2b963b6ee12e3efb2c) Co-authored-by: Erlend E. Aasland <erlend@python.org> Co-authored-by: Brandt Bucher <brandtbucher@microsoft.com>
* [3.12] gh-116010: Remove link to deprecated PEP 6 in FAQ guide (GH-116246) ↵Miss Islington (bot)2024-03-031-3/+5
| | | | | | | (#116286) Co-authored-by: Iman Tabrizian <iman.tabrizian@gmail.com> Co-authored-by: Hugo van Kemenade <1324225+hugovk@users.noreply.github.com>
* [3.12] gh-116281: Remove wrong '\' from '\*' in some doc signatures ↵Miss Islington (bot)2024-03-033-6/+6
| | | | | | | | (GH-116282) (#116285) gh-116281: Remove wrong '\' from '\*' in some doc signatures (GH-116282) (cherry picked from commit 4859ecb8609b51e2f6b8fb1b295e9ee0f83e1be6) Co-authored-by: HarryLHW <123lhw321@gmail.com>
* [3.12] gh-115809: Improve TimedRotatingFileHandler.getFilesToDelete() ↵Miss Islington (bot)2024-03-033-36/+56
| | | | | | | | | | | (GH-115812) (GH-116261) Improve algorithm for computing which rolled-over log files to delete in logging.TimedRotatingFileHandler. It is now reliable for handlers without namer and with arbitrary deterministic namer that leaves the datetime part in the file name unmodified. (cherry picked from commit 87faec28c78f6fa8eaaebbd1ababf687c7508e71) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.12] gh-72971: Clarify the special no-TypeError behavior for equality ↵Miss Islington (bot)2024-03-031-1/+4
| | | | | | | (GH-110729) (#116254) (cherry picked from commit 67f742e03aacb6217c5bb496e31f96dbf31c6f86) Co-authored-by: Gouvernathor <44340603+Gouvernathor@users.noreply.github.com>
* [3.12] gh-114494: Change logging docstring to bool for exec_info (GH=114558) ↵Miss Islington (bot)2024-03-021-6/+6
| | | | | | | (GH-114624) (cherry picked from commit 07236f5b39a2e534cf190cd4f7c73300d209520b) Co-authored-by: Tristan Pank <tristanpank@gmail.com>
* [3.12] GH-115978: Disable `*readv()` and `*writev()` on WASI (GH-116228) ↵Miss Islington (bot)2024-03-022-0/+13
| | | | | | | | | | (GH-116231) GH-115978: Disable `*readv()` and `*writev()` on WASI (GH-116228) Wasmtime doesn't implement these functions in a way to pass test_posix (https://github.com/bytecodealliance/wasmtime/issues/7830). (cherry picked from commit 5dc8c84d397110f9edfa56793ad8887b1f176d79) Co-authored-by: Brett Cannon <brett@python.org>
* [3.12] gh-112281: Allow `Union` with unhashable `Annotated` metadata ↵Miss Islington (bot)2024-03-014-18/+156
| | | | | | | (GH-112283) (#116213) Co-authored-by: Nikita Sobolev <mail@sobolevn.me> Co-authored-by: Alex Waygood <Alex.Waygood@Gmail.com>
* [3.12] gh-116035: Document that both tzinfo and fold are ignored in ↵Miss Islington (bot)2024-03-011-2/+8
| | | | | | | | comparisons if tzinfo is the same (GH-116187) (GH-116216) This mostly restores information removed in c12240ed28aac6494750e00143bc550c4d6d8ad1 (GH-114749). (cherry picked from commit 05b04903a14279421ecdc6522b8202822de6ebb5) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.12] gh-88352: Fix logging.TimedRotatingFileHandler (GH-116191) (GH-116208)Miss Islington (bot)2024-03-013-32/+373
| | | | | | | | | | * Do not overwrite already rolled over files. It happened at midnight or during the DST change and caused the loss of data. * computeRollover() now always return the timestamp larger than the specified time. * Fix computation of the rollover time during the DST change. (cherry picked from commit fee86fd9a422612b39e5aabf2571b8fe4abac770) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.12] gh-104219: Document that idunders can return NotImplemented ↵Miss Islington (bot)2024-03-011-2/+4
| | | | | | | | | (GH-104220) (#116210) (cherry picked from commit 2713c2abc8d0f30cd0060cd307bb4ec92f1f04bf) Co-authored-by: Gouvernathor <44340603+Gouvernathor@users.noreply.github.com> Co-authored-by: C.A.M. Gerlach <CAM.Gerlach@Gerlach.CAM> Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
* [3.12] gh-101293: Fix support of custom callables and types in ↵Miss Islington (bot)2024-03-013-89/+438
| | | | | | | | | | | | | inspect.Signature.from_callable() (GH-115530) (GH-116198) Support callables with the __call__() method and types with __new__() and __init__() methods set to class methods, static methods, bound methods, partial functions, and other types of methods and descriptors. Add tests for numerous types of callables and descriptors. (cherry picked from commit 59167c962efcae72e8d88aa4b33062ed3de4f120) Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>
* [3.12] gh-115811: Update documentation to add some Logger attributes. ↵Miss Islington (bot)2024-03-011-0/+36
| | | | | (GH-116109) (GH-116185) (cherry picked from commit 3b6f4cadf19e6a4edd2cbbbc96a0a4024b395648)
* [3.12] gh-115881: Document feature_version limitations (#115980) (#116173)Shantanu2024-03-011-6/+9
|
* [3.12] gh-116026: Try disabling rebuilds of dependents in Homebrew ↵Miss Islington (bot)2024-03-011-0/+1
| | | | | | | (GH-116027) (#116158) (cherry picked from commit 02beb9f0208d22fd8bd893e6e6ec813f7e51b235) Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
* [3.12] gh-87115: Set `__main__.__spec__` to `None` in pdb (GH-116141) (#116154)Tian Gao2024-02-293-0/+14
| | | | | | | | | | * gh-87115: Set `__main__.__spec__` to `None` in pdb (#116141) (cherry picked from commit ccfc042bbf31e53c44b8aae444afd8365b798422) * [3.12] gh-87115: Set `__main__.__spec__` to `None` in pdb (GH-116141) (cherry picked from commit ccfc042bbf31e53c44b8aae444afd8365b798422) Co-authored-by: Tian Gao <gaogaotiantian@hotmail.com>
* [3.12] Fix rendering of null character in ast.rst (GH-116080) (#116160)Miss Islington (bot)2024-02-291-1/+1
| | | | | | Fix rendering of null character in ast.rst (GH-116080) (cherry picked from commit c04a981ff414b101736688773dbe24f824ca32ce) Co-authored-by: Shantanu <12621235+hauntsaninja@users.noreply.github.com>
* [3.12] gh-112844: Add SBOM for external dependencies (GH-115789) (#116128)Miss Islington (bot)2024-02-293-17/+287
| | | | Co-authored-by: Seth Michael Larson <seth@python.org>
* [3.12] gh-73580: Docs for tunnelling TLS through TLS (GH-22539) (GH-116149)Miss Islington (bot)2024-02-291-0/+3
| | | | | (cherry picked from commit 91c3c64237f56bde9d1c1b8127fdcb02a112b5a4) Co-authored-by: Carl Bordum Hansen <carl@bordum.dk>
* [3.12] Docs: mark up NotImplemented using the :data: role throughout the ↵Miss Islington (bot)2024-02-2916-39/+39
| | | | | | | docs (GH-116135) (#116147) (cherry picked from commit dbe44f150cd161bd327ed662e527a4c93829fb3e) Co-authored-by: Erlend E. Aasland <erlend@python.org>
* [3.12] gh-72463: Fix ctypes/test_loading.py so that test_find reports ↵Miss Islington (bot)2024-02-291-0/+4
| | | | | | | skipped (GH-18312) (GH-116136) (cherry picked from commit 04d1000071b5eefd4b1dd69051aacad343da4b21) Co-authored-by: Michael Felt <aixtools@users.noreply.github.com>
* [3.12] Make the iter_except() recipe more compact. (gh-116132) (gh0116133)Miss Islington (bot)2024-02-291-20/+1
|
* [3.12] gh-116103: Prevent error in WindowsLoadTracker.__del__ on permission ↵Miss Islington (bot)2024-02-291-0/+4
| | | | | | | | | | | error (GH-116105) (GH-116120) gh-116103: Prevent error in WindowsLoadTracker.__del__ on permission error (GH-116105) (cherry picked from commit 186fa9387669bcba6d3974a99c012c2b2c6fb4ce) gh-116103: Prevent error in WindowsLoadTracker.__del__ if there was a permission error Co-authored-by: Petr Viktorin <encukou@gmail.com>
* [3.12] gh-116034: fix location info on the error of a failed assertion (#116054)Irit Katriel2024-02-294-2/+20
|
* [3.12] gh-115937: Remove implementation details from inspect.signature() ↵Miss Islington (bot)2024-02-291-3/+7
| | | | | | | | | | | docs (GH-116086) (#116106) gh-115937: Remove implementation details from inspect.signature() docs (GH-116086) (cherry picked from commit fb2e17b642fc3089e4f98e4bf6b09dd362e6b27d) Co-authored-by: Erlend E. Aasland <erlend@python.org> Co-authored-by: Carol Willing <carolcode@willingconsulting.com> Co-authored-by: Gregory P. Smith <greg@krypto.org> Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>
* [3.12] gh-114572: Fix locking in cert_store_stats and get_ca_certs ↵Miss Islington (bot)2024-02-292-5/+64
| | | | | | | | | | | | | | | | | | | | | | | | (GH-114573) (GH-115547) gh-114572: Fix locking in cert_store_stats and get_ca_certs (GH-114573) * gh-114572: Fix locking in cert_store_stats and get_ca_certs cert_store_stats and get_ca_certs query the SSLContext's X509_STORE with X509_STORE_get0_objects, but reading the result requires a lock. See https://github.com/openssl/openssl/pull/23224 for details. Instead, use X509_STORE_get1_objects, newly added in that PR. X509_STORE_get1_objects does not exist in current OpenSSLs, but we can polyfill it with X509_STORE_lock and X509_STORE_unlock. * Work around const-correctness problem * Add missing X509_STORE_get1_objects failure check * Add blurb (cherry picked from commit bce693111bff906ccf9281c22371331aaff766ab) Co-authored-by: David Benjamin <davidben@google.com>
* [3.12] Update an out-of-date example in the itertools recipe intro ↵Miss Islington (bot)2024-02-281-1/+1
| | | | (gh-116082) (gh-116084)
* [3.12] gh-115821: [Enum] better error message for calling super().__new__() ↵Ethan Furman2024-02-281-0/+3
| | | | | (GH-116065) Add note to not call super().__new__() in docs.
* [3.12] Improve all_equal() recipe (gh-116081) (gh-116083)Miss Islington (bot)2024-02-281-3/+4
|
* [3.12] gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210)Miss Islington (bot)2024-02-283-44/+64
| | | | | | | | gh-115197: Stop resolving host in urllib.request proxy bypass (GH-115210) Use of a proxy is intended to defer DNS for the hosts to the proxy itself, rather than a potential for information leak of the host doing DNS resolution itself for any reason. Proxy bypass lists are strictly name based. Most implementations of proxy support agree. (cherry picked from commit c43b26d02eaa103756c250e8d36829d388c5f3be) Co-authored-by: Weii Wang <weii.wang@canonical.com>