Accepting request 1311758 from devel:languages:python:Factory

OBS-URL: https://build.opensuse.org/request/show/1311758
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python313?expand=0&rev=33

Python-3.13.7.tar.xz.sigstore

@@ -1 +0,0 @@
-{"mediaType": "application/vnd.dev.sigstore.bundle.v0.3+json", "verificationMaterial": {"certificate": {"rawBytes": "MIICyTCCAlCgAwIBAgIUZMI+1qoqVltZwoOEGQ4+re/SlS4wCgYIKoZIzj0EAwMwNzEVMBMGA1UEChMMc2lnc3RvcmUuZGV2MR4wHAYDVQQDExVzaWdzdG9yZS1pbnRlcm1lZGlhdGUwHhcNMjUwODE0MTM0OTQyWhcNMjUwODE0MTM1OTQyWjAAMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEkKFnh1U6aDYKiIU0p7mtDbbxTezpcJrivGvrwtuUviVav74GRKEp/vcRZnlnVn6olDcrk33qi78husSHeD1VN6OCAW8wggFrMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAzAdBgNVHQ4EFgQUaes5BWscCJHaWxt5BY13fiF+sb8wHwYDVR0jBBgwFoAU39Ppz1YkEZb5qNjpKFWixi4YZD8wHwYDVR0RAQH/BBUwE4ERdGhvbWFzQHB5dGhvbi5vcmcwKQYKKwYBBAGDvzABAQQbaHR0cHM6Ly9hY2NvdW50cy5nb29nbGUuY29tMCsGCisGAQQBg78wAQgEHQwbaHR0cHM6Ly9hY2NvdW50cy5nb29nbGUuY29tMIGKBgorBgEEAdZ5AgQCBHwEegB4AHYA3T0wasbHETJjGR4cmWc3AqJKXrjePK3/h4pygC8p7o4AAAGYqNf2TAAABAMARzBFAiB3VC3ZdiYFvHtFHxRfU4vdiUZjC+VM/cY0nUHpRZ+aqQIhALglsfszSnn7LZNgw3no+XTnlO+mzMAdCLArnFKuyQo0MAoGCCqGSM49BAMDA2cAMGQCME73khzLHp2xLGwh1g0U5yt9CZu0YfQ52BJ0gL3J2adJsuCvmr76YbDnGWOM2IJLYwIwbWuLaywCs9V1hHqx4IewPWU6kGTDL2p3t7RMb7OK9etOkF4xHxV9IaGZZSFwDmSC"}, "tlogEntries": [{"logIndex": "394375946", "logId": {"keyId": "wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="}, "kindVersion": {"kind": "hashedrekord", "version": "0.0.1"}, "integratedTime": "1755179382", "inclusionPromise": {"signedEntryTimestamp": "MEYCIQDofYinceCg3x7ldRHdwLc7aoB6pX2+kukjFdQXFflKdwIhAK7YnONsVnbwsSZpLex8Q7tSMHHglIEQaqavuKAD5taI"}, "inclusionProof": {"logIndex": "272471684", "rootHash": "D6O1d0rPsmFUhblg+N/WsWhcTQVKMGbTlauX5huq8Q0=", "treeSize": "272471685", "hashes": ["12rv4cU8JBEnhl8jcQleuU0gXnRpH2B6oGsUtKoIBHQ=", "PXscKvmfKyXbaxsj99FlqImW6Bg1k3WBNWtHTzgtSVk=", "BaDXQZRZZLXILekCZ5e2TyrtJiYKeNUb2BW6hgybhG0=", "IQvrVF5nsAhxYBjFEIIqcy67H9HEwRdM5XEvXGMlcSc=", "I/JNRoCea85lOiusHIKoAblvRmo6NwnDAtfOV/JiSvQ=", "CjR2KouFHnbUwdf0xk9/f1IcsYFdo4/LMKPy9TV0keM=", "uSQzyFvNic+ZM0goS8qbxn95hvb1YCdWvV0/TnqHDEg=", "LM7bDk+koNXHbb9JB2IH+truLnDDC6WfDzp12zjdFkQ=", "4k9InE/ch3n4a/TapEK+nqfXhlMZEcbvL849wNGtBuo=", "6QfFjG3kfyjFx5PdzVrWBdbNza9Mf4ldecvoXhR3Ip8=", "RllwumeGwAfTxo/zlW3B2deC36+2Lu0FY/hP+QL2aT8=", "vS7O4ozHIQZJWBiov+mkpI27GE8zAmVCEkRcP3NDyNE="], "checkpoint": {"envelope": "rekor.sigstore.dev - 1193050959916656506\n272471685\nD6O1d0rPsmFUhblg+N/WsWhcTQVKMGbTlauX5huq8Q0=\n\n\u2014 rekor.sigstore.dev wNI9ajBEAiBr7yQXNBvCAOgKzReWm4ERI79K22ifVZFn9VUxx5nSxQIgWIPYVrO1E+vP3VRWPptUMs1arlLguTIMkT1tX5WCRoM=\n"}}, "canonicalizedBody": "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"}], "timestampVerificationData": {}}, "messageSignature": {"messageDigest": {"algorithm": "SHA2_256", "digest": "VGL5CZ39MOI43vg8cdkYl9jKpf9uvHpQ8U1IAs2qp5o="}, "signature": "MEUCIQDxF39gETd8/Qc0lwyJNLnNM+tkNj3hF2XMCzVCv6W8BAIgdALHY9w1MxmSJaCJ2Sm/ZyAdk/X0IQxLqD4p7M+yS6Q="}}

python313.changes

@@ -1,3 +1,174 @@
+-------------------------------------------------------------------
+Wed Oct 15 09:15:38 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
+
+- Update to 3.13.9:
+  - Library
+    - gh-139783: Fix inspect.getsourcelines() for the case when a
+      decorator is followed by a comment or an empty line.
+- Update to 3.13.8:
+  - macOS
+    - gh-124111: Update macOS installer to use Tcl/Tk 8.6.17.
+    - gh-139573: Updated bundled version of OpenSSL to 3.0.18.
+  - Windows
+    - gh-139573: Updated bundled version of OpenSSL to 3.0.18.
+    - gh-138896: Fix error installing C runtime on non-updated Windows
+      machines
+  - Tools/Demos
+    - gh-139330: SBOM generation tool didn’t cross-check the version
+      and checksum values against the Modules/expat/refresh.sh script,
+      leading to the values becoming out-of-date during routine
+      updates.
+    - gh-137873: The iOS test runner has been simplified, resolving
+      some issues that have been observed using the runner in GitHub
+      Actions and Azure Pipelines test environments.
+  - Tests
+    - gh-139208: Fix regrtest --fast-ci --verbose: don’t ignore the
+      --verbose option anymore. Patch by Victor Stinner.
+  - Security
+    - gh-139400: xml.parsers.expat: Make sure that parent Expat
+      parsers are only garbage-collected once they are no longer
+      referenced by subparsers created by
+      ExternalEntityParserCreate(). Patch by Sebastian Pipping.
+    - gh-139283: sqlite3: correctly handle maximum number of rows to
+      fetch in Cursor.fetchmany and reject negative values for
+      Cursor.arraysize. Patch by Bénédikt Tran.
+    - gh-135661: Fix CDATA section parsing in html.parser.HTMLParser
+      according to the HTML5 standard: ] ]> and ]] > no longer end the
+      CDATA section. Add private method _set_support_cdata() which can
+      be used to specify how to parse <[CDATA[ — as a CDATA section in
+      foreign content (SVG or MathML) or as a bogus comment in the
+      HTML namespace.
+  - Library
+    - gh-139312: Upgrade bundled libexpat to 2.7.3
+    - gh-139289: Do a real lazy-import on rlcompleter in pdb and
+      restore the existing completer after importing rlcompleter.
+    - gh-139210: Fix use-after-free when reporting unknown event in
+      xml.etree.ElementTree.iterparse(). Patch by Ken Jin.
+    - gh-138860: Lazy import rlcompleter in pdb to avoid deadlock in
+      subprocess.
+    - gh-112729: Fix crash when calling _interpreters.create when the
+      process is out of memory.
+    - gh-139076: Fix a bug in the pydoc module that was hiding
+      functions in a Python module if they were implemented in an
+      extension module and the module did not have __all__.
+    - gh-138998: Update bundled libexpat to 2.7.2
+    - gh-130567: Fix possible crash in locale.strxfrm() due to a
+      platform bug on macOS.
+    - gh-138779: Support device numbers larger than 2**63-1 for the
+      st_rdev field of the os.stat_result structure.
+    - gh-128636: Fix crash in PyREPL when os.environ is overwritten
+      with an invalid value for mac
+    - gh-88375: Fix normalization of the robots.txt rules and URLs in
+      the urllib.robotparser module. No longer ignore trailing ?.
+      Distinguish raw special characters ?, = and & from the
+      percent-encoded ones.
+    - gh-138515: email is added to Emscripten build.
+    - gh-111788: Fix parsing errors in the urllib.robotparser module.
+      Don’t fail trying to parse weird paths. Don’t fail trying to
+      decode non-UTF-8 robots.txt files.
+    - gh-138432: zoneinfo.reset_tzpath() will now convert any
+      os.PathLike objects it receives into strings before adding them
+      to TZPATH. It will raise TypeError if anything other than a
+      string is found after this conversion. If given an os.PathLike
+      object that represents a relative path, it will now raise
+      ValueError instead of TypeError, and present a more informative
+      error message.
+    - gh-138008: Fix segmentation faults in the ctypes module due to
+      invalid argtypes. Patch by Dung Nguyen.
+    - gh-60462: Fix locale.strxfrm() on Solaris (and possibly other
+      platforms).
+    - gh-138204: Forbid expansion of shared anonymous memory maps on
+      Linux, which caused a bus error.
+    - gh-138010: Fix an issue where defining a class with a
+      @warnings.deprecated-decorated base class may not invoke the
+      correct __init_subclass__() method in cases involving multiple
+      inheritance. Patch by Brian Schubert.
+    - gh-138133: Prevent infinite traceback loop when sending CTRL^C
+      to Python through strace.
+    - gh-134869: Fix an issue where pressing Ctrl+C during tab
+      completion in the REPL would leave the autocompletion menu in a
+      corrupted state.
+    - gh-137317: inspect.signature() now correctly handles classes
+      that use a descriptor on a wrapped __init__() or __new__()
+      method. Contributed by Yongyu Yan.
+    - gh-137754: Fix import of the zoneinfo module if the C
+      implementation of the datetime module is not available.
+    - gh-137490: Handle ECANCELED in the same way as EINTR in
+      signal.sigwaitinfo() on NetBSD.
+    - gh-137477: Fix inspect.getblock(), inspect.getsourcelines() and
+      inspect.getsource() for generator expressions.
+    - gh-137017: Fix threading.Thread.is_alive to remain True until
+      the underlying OS thread is fully cleaned up. This avoids false
+      negatives in edge cases involving thread monitoring or premature
+      threading.Thread.is_alive calls.
+    - gh-136134: SMTP.auth_cram_md5() now raises an SMTPException
+      instead of a ValueError if Python has been built without MD5
+      support. In particular, SMTP clients will not attempt to use
+      this method even if the remote server is assumed to support it.
+      Patch by Bénédikt Tran.
+    - gh-136134: IMAP4.login_cram_md5 now raises an IMAP4.error if
+      CRAM-MD5 authentication is not supported. Patch by Bénédikt
+      Tran.
+    - gh-135386: Fix opening a dbm.sqlite3 database for reading from
+      read-only file or directory.
+    - gh-126631: Fix multiprocessing forkserver bug which prevented
+      __main__ from being preloaded.
+    - gh-123085: In a bare call to importlib.resources.files(), ensure
+      the caller’s frame is properly detected when importlib.resources
+      is itself available as a compiled module only (no source).
+    - gh-118981: Fix potential hang in
+      multiprocessing.popen_spawn_posix that can happen when the child
+      proc dies early by closing the child fds right away.
+    - gh-78319: UTF8 support for the IMAP APPEND command has been made
+      RFC compliant.
+    - bpo-38735: Fix failure when importing a module from the root
+      directory on unix-like platforms with sys.pycache_prefix set.
+    - bpo-41839: Allow negative priority values from
+      os.sched_get_priority_min() and os.sched_get_priority_max()
+      functions.
+  - Core and Builtins
+    - gh-134466: Don’t run PyREPL in a degraded environment where
+      setting termios attributes is not allowed.
+    - gh-71810: Raise OverflowError for (-1).to_bytes() for signed
+      conversions when bytes count is zero. Patch by Sergey B
+      Kirpichev.
+    - gh-105487: Remove non-existent __copy__(), __deepcopy__(), and
+      __bases__ from the __dir__() entries of types.GenericAlias.
+    - gh-134163: Fix a hang when the process is out of memory inside
+      an exception handler.
+    - gh-138479: Fix a crash when a generic object’s __typing_subst__
+      returns an object that isn’t a tuple.
+    - gh-137576: Fix for incorrect source code being shown in
+      tracebacks from the Basic REPL when PYTHONSTARTUP is given.
+      Patch by Adam Hartz.
+    - gh-132744: Certain calls now check for runaway recursion and
+      respect the system recursion limit.
+  - C API
+    - gh-87135: Attempting to acquire the GIL after runtime
+      finalization has begun in a different thread now causes the
+      thread to hang rather than terminate, which avoids potential
+      crashes or memory corruption caused by attempting to terminate a
+      thread that is running code not specifically designed to support
+      termination. In most cases this hanging is harmless since the
+      process will soon exit anyway.
+      While not officially marked deprecated until 3.14,
+      PyThread_exit_thread is no longer called internally and remains
+      solely for interface compatibility. Its behavior is inconsistent
+      across platforms, and it can only be used safely in the unlikely
+      case that every function in the entire call stack has been
+      designed to support the platform-dependent termination
+      mechanism. It is recommended that users of this function change
+      their design to not require thread termination. In the unlikely
+      case that thread termination is needed and can be done safely,
+      users may migrate to calling platform-specific APIs such as
+      pthread_exit (POSIX) or _endthreadex (Windows) directly.
+  - Build
+    - gh-135734: Python can correctly be configured and built with
+      ./configure --enable-optimizations --disable-test-modules.
+      Previously, the profile data generation step failed due to PGO
+      tests where immortalization couldn’t be properly suppressed.
+      Patch by Bénédikt Tran.
+
 -------------------------------------------------------------------
 Mon Sep 29 06:52:07 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
 

python313.spec

@@ -167,7 +167,7 @@
 # _md5.cpython-38m-x86_64-linux-gnu.so
 %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so
 Name:           %{python_pkg_name}%{psuffix}
-Version:        3.13.7
+Version:        3.13.9
 %define         tarversion %{version}
 %define         tarname    Python-%{tarversion}
 Release:        0
@@ -555,7 +555,7 @@ rm Lib/site-packages/README.txt
 tar xvf %{SOURCE21}
 
 # Don't fail on warnings when building documentation
-# sed -i -e '/^SPHINXERRORHANDLING/s/-W//' Doc/Makefile
+sed -i -e '/^SPHINXERRORHANDLING/s/--fail-on-warning//' Doc/Makefile
 
 %build
 export SUSE_VERSION="0%{?suse_version}"