- Update to 3.13.0a5:

- Security
    - gh-115398: Allow controlling Expat >=2.6.0 reparse deferral
      (CVE-2023-52425) by adding five new methods:
        xml.etree.ElementTree.XMLParser.flush()
        xml.etree.ElementTree.XMLPullParser.flush()
        xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
        xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
        xml.sax.expatreader.ExpatParser.flush()
    - gh-114572: ssl.SSLContext.cert_store_stats() and
      ssl.SSLContext.get_ca_certs() now correctly lock access to
      the certificate store, when the ssl.SSLContext is shared
      across multiple threads.
  - Core and Builtins
    - gh-116604: Respect the status of the garbage collector when
      indirect calls are made via PyErr_CheckSignals() and the
      evaluation breaker. Patch by Pablo Galindo
    - gh-112087: list is now compatible with the implementation
      of PEP 703.
    - gh-116381: Add specialization for CONTAINS_OP.
    - gh-116296: Fix possible refleak in object.__reduce__()
      internal error handling.
    - gh-115823: Properly calculate error ranges in the parser
      when raising SyntaxError exceptions caused by invalid byte
      sequences. Patch by Pablo Galindo
    - gh-115778: Add tierN annotation for instruction definition
      in interpreter DSL.
    - gh-115733: Fix crash when calling next() on exhausted list
      iterators.
    - gh-115700: The regen-cases build stage now works on

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python313?expand=0&rev=10

Python-3.13.0a4.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:bcbd6daae3de381d64a84e9ac50889dce71c5fdff2b680b676537b09907425f6
-size 20648544

Python-3.13.0a4.tar.xz.asc

@@ -1,18 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQKTBAABCgB9FiEEcWlgX2LHUTVtBUomqCHmgOX6YwUFAmXOFBZfFIAAAAAALgAo
-aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDcx
-Njk2MDVGNjJDNzUxMzU2RDA1NEEyNkE4MjFFNjgwRTVGQTYzMDUACgkQqCHmgOX6
-YwVzQhAAgz4XVs3COWZxRyWVrmJ3+ZKgHpIPzncuxmMB93B9jwrQzZ4Xte7TNYIj
-kaG7HwH/+ZCnYq4PYv60tNkQ6AoIM0SWJGGZNxUFpHsKjOAs8hEoAsINxU4hKpQe
-vGu/n5u4Cvd0LfYxtUPNXu2QFGBu22kkGhHIaUeDoxnvcQTxFPOodRVEiMuf1BDO
-KpL7KRMJltPmBlU1f8GCDVEXEqur+43OJ55mTl72rAuFxwgQvfOFRMOTUfFbyE2z
-3QUBxllny7MJKK1wA+BfvEJZgs5xLNPSjXyySHISgTKpTIXjFTICEevVIU9DgfGs
-zikPmzwRvjnNqG4x0tkk38jlupIC8l1KrdQXBShCfoyOpZV7OGnMJ3Upl+2P9fTH
-+7ghss/B6+ez+sDux6mSaVYIX9W+x/JgqyzNFd7LNuPWQib+vIjggZYzVS2K5lxw
-SneP9sxUpxP4v8zgTPIi+gjVAfEyg2wAbghKyqsfmVejcvywaQHRaLeJQeDFN+Pb
-tcMBemHG48PtRJmdaGkfG2CoFktSREZYMQlDVfMybeJwlGVi3aWxawZiGy8k3iHW
-wr7jlehq5uBbjhkS2mNfVGvUDATOIubR/MDDUBF5GHIraAw0ACRzmlEyeM8HuFIH
-kwLs8sH9GQVj7dQBuQKesjOxBUo7JDz86xmizatMJlkG75+Egs8=
-=h6MK
------END PGP SIGNATURE-----

Python-3.13.0a5.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1e89b5355183e7c898a5a01b2f601728fe49fdb89d9c9781f13360847aaefa62
+size 20734172

Python-3.13.0a5.tar.xz.asc

@@ -0,0 +1,18 @@
+-----BEGIN PGP SIGNATURE-----
+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+=+psT
+-----END PGP SIGNATURE-----

python313.changes

@@ -1,3 +1,287 @@
+-------------------------------------------------------------------
+Wed Mar 20 05:08:29 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
+
+- Update to 3.13.0a5:
+  - Security
+    - gh-115398: Allow controlling Expat >=2.6.0 reparse deferral
+      (CVE-2023-52425) by adding five new methods:
+        xml.etree.ElementTree.XMLParser.flush()
+        xml.etree.ElementTree.XMLPullParser.flush()
+        xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
+        xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
+        xml.sax.expatreader.ExpatParser.flush()
+    - gh-114572: ssl.SSLContext.cert_store_stats() and
+      ssl.SSLContext.get_ca_certs() now correctly lock access to
+      the certificate store, when the ssl.SSLContext is shared
+      across multiple threads.
+  - Core and Builtins
+    - gh-116604: Respect the status of the garbage collector when
+      indirect calls are made via PyErr_CheckSignals() and the
+      evaluation breaker. Patch by Pablo Galindo
+    - gh-112087: list is now compatible with the implementation
+      of PEP 703.
+    - gh-116381: Add specialization for CONTAINS_OP.
+    - gh-116296: Fix possible refleak in object.__reduce__()
+      internal error handling.
+    - gh-115823: Properly calculate error ranges in the parser
+      when raising SyntaxError exceptions caused by invalid byte
+      sequences. Patch by Pablo Galindo
+    - gh-115778: Add tierN annotation for instruction definition
+      in interpreter DSL.
+    - gh-115733: Fix crash when calling next() on exhausted list
+      iterators.
+    - gh-115700: The regen-cases build stage now works on
+      Windows.
+    - gh-115347: Fix bug where docstring was replaced by a
+      redundant NOP when Python is run with -OO.
+    - gh-115323: Make error message more meaningful for when
+      bytearray.extend() is called with a str object.
+    - gh-112175: Every PyThreadState now has its own
+      eval_breaker, allowing specific threads to be interrupted.
+    - gh-115154: Fix a bug that was causing the
+      tokenize.untokenize() function to handle unicode named
+      literals incorrectly. Patch by Pablo Galindo
+    - gh-112433: Add ability to force alignment of
+      ctypes.Structure by way of the new _align_ attribute on the
+      class.
+    - gh-104090: The multiprocessing resource tracker now
+      exits with non-zero status code if a resource leak was
+      detected. It still exits with status code 0 otherwise.
+    - gh-105858: Improve the constructors for ast
+      nodes. Arguments of list types now default to an empty list
+      if omitted, and optional fields default to None. AST nodes
+      now have an __annotations__ attribute with the expected
+      types of their attributes. Passing unrecognized extra
+      arguments to AST nodes is deprecated and will become an
+      error in Python 3.15. Omitting a required argument to an
+      AST node is deprecated and will become an error in Python
+      3.15. Patch by Jelle Zijlstra.
+    - gh-101860: Expose __name__ attribute on property.
+    - gh-96497: Fix incorrect resolution of mangled class
+      variables used in assignment expressions in comprehensions.
+  - Library
+    - gh-116600: Fix repr() for global Flag members.
+    - gh-116349: platform.java_ver() is deprecated and will be
+      removed in 3.15. It was largely untested, had a confusing
+      API, and was only useful for Jython support.
+    - gh-116143: Fix a race in pydoc _start_server, eliminating a
+      window in which _start_server can return a thread that is
+      “serving” but without a docserver set.
+    - gh-116127: typing: implement PEP 705 which adds
+      typing.ReadOnly support to typing.TypedDict.
+    - gh-116325: typing: raise SyntaxError instead of
+      AttributeError on forward references as empty strings.
+    - gh-115957: When asyncio.TaskGroup.create_task is called on
+      an inactive asyncio.TaskGroup, the given coroutine will be
+      closed (which prevents a RuntimeWarning).
+    - gh-115978: Disable preadv(), readv(), pwritev(),
+      and writev() on WASI. Under wasmtime for WASI
+      0.2, these functions don’t pass test_posix
+      (gh-bytecodealliance/wasmtime#7830).
+    - gh-88352: Fix the computation of the next rollover
+      time in the logging.TimedRotatingFileHandler handler.
+      computeRollover() now always returns a timestamp larger
+      than the specified time and works correctly during the DST
+      change. doRollover() no longer overwrite the already rolled
+      over file, saving from data loss when run at midnight or
+      during repeated time at the DST change.
+    - gh-87115: Set __main__.__spec__ to None when running a
+      script with pdb
+    - gh-76511: Fix UnicodeEncodeError in
+      email.Message.as_string() that results when a message
+      that claims to be in the ascii character set actually has
+      non-ascii characters. Non-ascii characters are now replaced
+      with the U+FFFD replacement character, like in the replace
+      error handler.
+    - gh-89547: Add support for nested typing special forms like
+      Final[ClassVar[int]].
+    - gh-65824: Improve the less prompt in pydoc.
+    - gh-116040: [Enum] fix by-value calls when second value is
+      falsey; e.g. Cardinal(1, 0)
+    - gh-115821: [Enum] Improve error message when calling
+      super().__new__() in custom __new__.
+    - gh-85644: Use the XDG_CURRENT_DESKTOP environment variable
+      in webbrowser to check desktop. Prefer it to the deprecated
+      GNOME_DESKTOP_SESSION_ID for GNOME detection.
+    - gh-75988: Fixed unittest.mock.create_autospec() to pass
+      the call through to the wrapped object to return the real
+      result.
+    - gh-115881: Fix issue where ast.parse() would incorrectly
+      flag conditional context managers (such as with (x() if y
+      else z()): ...) as invalid syntax if feature_version=(3,
+      8) was passed. This reverts changes to the grammar made as
+      part of gh-94949.
+    - gh-115886: Fix silent truncation of the
+      name with an embedded null character in
+      multiprocessing.shared_memory.SharedMemory.
+    - gh-115532: Add kernel density estimation to the statistics
+      module.
+    - gh-115714: On WASI, the time module no longer get process
+      time using times() or CLOCK_PROCESS_CPUTIME_ID, system API
+      is that is unreliable and is likely to be removed from
+      WASI. The affected clock functions fall back to calling
+      clock().
+    - gh-115809: Improve algorithm for computing
+      which rolled-over log files to delete in
+      logging.TimedRotatingFileHandler. It is now reliable for
+      handlers without namer and with arbitrary deterministic
+      namer that leaves the datetime part in the file name
+      unmodified.
+    - gh-74668: urllib.parse functions parse_qs() and
+      parse_qsl() now support bytes arguments containing raw and
+      percent-encoded non-ASCII data.
+    - gh-67044: csv.writer() now always quotes or escapes '\r'
+      and '\n', regardless of lineterminator value.
+    - gh-115712: Restore support of space delimiter with
+      skipinitialspace=True in csv. csv.writer() now quotes empty
+      fields if delimiter is a space and skipinitialspace is true
+      and raises exception if quoting is not possible.
+    - gh-112364: Fixed ast.unparse() to handle format_spec with
+      ", ' or \\. Patched by Frank Hoffmann.
+    - gh-112997: Stop logging potentially sensitive callback
+      arguments in asyncio unless debug mode is active.
+    - gh-114914: Fix an issue where an abandoned StreamWriter
+      would not be garbage collected.
+    - gh-111358: Fix a bug in
+      asyncio.BaseEventLoop.shutdown_default_executor() to ensure
+      the timeout passed to the coroutine behaves as expected.
+    - gh-115618: Fix improper decreasing the reference count for
+      None argument in property methods getter(), setter() and
+      deleter().
+    - gh-112720: Refactor dis.ArgResolver to make it possible to
+      subclass and change the way jump args are interpreted.
+    - gh-112006: Fix inspect.unwrap() for types
+      with the __wrapper__ data descriptor. Fix
+      inspect.Signature.from_callable() for builtins
+      classmethod() and staticmethod().
+    - gh-101293: Support callables with the __call__() method
+      and types with __new__() and __init__() methods set to
+      class methods, static methods, bound methods, partial
+      functions, and other types of methods and descriptors in
+      inspect.Signature.from_callable().
+    - gh-103092: Isolate _lsprof (apply PEP 687).
+    - gh-113942: pydoc no longer skips global functions
+      implemented as builtin methods, such as
+      MethodDescriptorType and WrapperDescriptorType.
+    - gh-115256: Added DeprecationWarning when accessing the
+      tarfile attribute of TarInfo objects. The attribute is
+      never used internally and is only attached to TarInfos when
+      the tarfile is opened in write-mode, not read-mode. The
+      attribute creates an unnecessary reference cycle which may
+      cause corruption when not closing the handle after writing
+      a tarfile.
+    - gh-115197: urllib.request no longer resolves the hostname
+      before checking it against the system’s proxy bypass list
+      on macOS and Windows.
+    - gh-113812: DatagramTransport.sendto() will now send
+      zero-length datagrams if called with an empty bytes
+      object. The transport flow control also now accounts for
+      the datagram header when calculating the buffer size.
+    - gh-114763: Protect modules loaded with
+      importlib.util.LazyLoader from race conditions when
+      multiple threads try to access attributes before the
+      loading is complete.
+    - gh-114709: posixpath.commonpath() now raises a ValueError
+      exception when passed an empty iterable. Previously,
+      IndexError was raised.
+      posixpath.commonpath() now raises a TypeError exception
+      when passed None. Previously, ValueError was raised.
+    - gh-114610: Fix bug where pathlib.PurePath.with_stem()
+      converted a non-empty path suffix to a stem when given an
+      empty stem argument. It now raises ValueError, just like
+      pathlib.PurePath.with_suffix() does when called on a path
+      with an empty stem, given a non-empty suffix argument.
+    - gh-107361: Add ssl.VERIFY_X509_PARTIAL_CHAIN and
+      VERIFY_X509_STRICT to the default SSL context created with
+      ssl.create_default_context().
+    - gh-112281: Allow creating union of types for
+      typing.Annotated with unhashable metadata.
+    - gh-111775: Fix
+      importlib.resources.simple.ResourceHandle.open() for text
+      mode, added missed stream argument.
+    - gh-90095: Make .pdbrc and -c work with any valid pdb
+      commands.
+    - gh-107625: Raise configparser.ParsingError from read()
+      and read_file() methods of configparser.ConfigParser if a
+      key without a corresponding value is continued (that is,
+      followed by an indented line).
+    - gh-107155: Fix incorrect output of help(x) where x is a
+      lambda function, which has an __annotations__ dictionary
+      attribute with a "return" key.
+    - gh-57141: Add option for non-shallow comparisons to
+      filecmp.dircmp like filecmp.cmp(). Original patch by Steven
+      Ward. Enhanced by Tobias Rautenkranz
+    - gh-69990: Profile.print_stats() has been improved to accept
+      multiple sort arguments. Patched by Chiu-Hsiang Hsu and
+      Furkan Onder.
+    - gh-104061: Add socket.SO_BINDTOIFINDEX constant.
+    - gh-60346: Fix ArgumentParser inconsistent with
+      parse_known_args.
+    - gh-102389: Add windows_31j to aliases for cp932 codec
+    - gh-72249: functools.partial`s of :func:`repr() has been
+      improved to include the module name. Patched by Furkan
+      Onder and Anilyka Barry.
+    - gh-100985: Update HTTPSConnection to consistently wrap IPv6
+      Addresses when using a proxy.
+    - gh-100884: email: fix misfolding of comma in address-lists
+      over multiple lines in combination with unicode encoding.
+    - gh-95782: Fix io.BufferedReader.tell(),
+      io.BufferedReader.seek(), _pyio.BufferedReader.tell(),
+      io.BufferedRandom.tell(), io.BufferedRandom.seek() and
+      _pyio.BufferedRandom.tell() being able to return negative
+      offsets.
+    - gh-96310: Fix a traceback in argparse when all options in a
+      mutually exclusive group are suppressed.
+    - gh-93205: Fixed a bug in
+      logging.handlers.TimedRotatingFileHandler where multiple
+      rotating handler instances pointing to files with the same
+      name but different extensions would conflict and not delete
+      the correct files.
+    - bpo-31116: Add Z85 encoding to base64.
+    - bpo-44865: Add missing call to localization function in
+      argparse.
+    - bpo-43952: Fix multiprocessing.connection.Listener.accept()
+      to accept empty bytes as authkey. Not accepting empty bytes
+      as key causes it to hang indefinitely.
+    - bpo-42125: linecache: get module name from __spec__ if
+      available. This allows getting source code for the __main__
+      module when a custom loader is used.
+    - bpo-41122: Failing to pass arguments properly to
+      functools.singledispatchmethod() now throws a TypeError
+      instead of hitting an index out of bounds internally.
+    - bpo-40818: The asyncio REPL now runs
+      sys.__interactivehook__ on startup. The default
+      implementation of sys.__interactivehook__ provides
+      auto-completion to the asyncio REPL. Patch contributed by
+      Rémi Lapeyre.
+    - bpo-33775: Add ‘default’ and ‘version’ help text for
+      localization in argparse.
+  - Documentation
+    - gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under
+      “XML vulnerabilities”.
+    - gh-109653: Improve import time of uuid on Linux.
+  - Tests
+    - gh-71052: Add test exclusions to support running the test
+      suite on Android.
+    - gh-71052: Enable test_concurrent_futures on platforms that
+      support threading but not multiprocessing.
+    - gh-115796: Make ‘_testinternalcapi.assemble_code_object’
+      construct the exception table for the code object.
+    - gh-115720: Leak tests (-R, --huntrleaks) now show a summary
+      of the number of leaks found in each iteration.
+    - gh-115122: Add --bisect option to regrtest test runner:
+      run failed tests with test.bisect_cmd to identify failing
+      tests. Patch by Victor Stinner.
+    - gh-115596: Fix ProgramPriorityTests in test_os permanently
+      changing the process priority.
+    - gh-115556: On Windows, commas passed in arguments to
+      Tools\buildbot\test.bat and PCbuild\\rt.bat are now
+      properly handled.
+    - gh-115420: Fix translation of exception hander targets by
+      _testinternalcapi.optimize_cfg.
+    - gh-115376: Fix segfault in
+      _testinternalcapi.compiler_codegen on bad input.
+
 -------------------------------------------------------------------
 Thu Mar  7 08:16:28 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
 

python313.spec

@@ -105,7 +105,7 @@
 %define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so
 %bcond_without profileopt
 Name:           %{python_pkg_name}%{psuffix}
-Version:        3.13.0a4
+Version:        3.13.0a5
 Release:        0
 Summary:        Python 3 Interpreter
 License:        Python-2.0