Accepting request 1299840 from devel:languages:python:Factory

- Update to 3.14.0~rc2:
  - Library
    - gh-137426: Remove the code deprecation of
      importlib.abc.ResourceLoader. It is documented as
      deprecated, but left for backwards compatibility with other
      classes in importlib.abc.
    - gh-137282: Fix tab completion and dir() on
      concurrent.futures.
    - gh-137257: Bump the version of pip bundled in ensurepip to
      version 25.2
    - gh-137226: Fix behavior of
      annotationlib.ForwardRef.evaluate() when the type_params
      parameter is passed and the name of a type param is also
      present in an enclosing scope.
    - gh-130522: Fix unraisable TypeError raised during
      interpreter shutdown in the threading module.
    - gh-137059: Fix handling of file URLs with a
      Windows drive letter in the URL authority by
      urllib.request.url2pathname(). This fixes a regression in
      earlier pre-releases of Python 3.14.
    - gh-130577: tarfile now validates archives to ensure member
      offsets are non-negative. (Contributed by Alexander Enrique
      Urieles Nieto in gh-130577; CVE-2025-8194, bsc#1247249).
    - gh-135228: When dataclasses replaces a class with a slotted
      dataclass, the original class can now be garbage collected
      again. Earlier changes in Python 3.14 caused this class to
      always remain in existence together with the replacement
      class synthesized by dataclasses.
  - Documentation
    - gh-136155: We are now checking for fatal errors in EPUB
      builds in CI.
  - Core and Builtins
    - gh-137400: Fix a crash in the free threading
      build when disabling profiling or tracing across
      all threads with PyEval_SetProfileAllThreads()
      or PyEval_SetTraceAllThreads() or their Python
      equivalents threading.settrace_all_threads() and
      threading.setprofile_all_threads().
    - gh-137314: Fixed a regression where raw f-strings
      incorrectly interpreted escape sequences in format
      specifications. Raw f-strings now properly preserve literal
      backslashes in format specs, matching the behavior from
      Python 3.11. For example, rf"{obj:\xFF}" now correctly
      produces '\\xFF' instead of 'ÿ'. Patch by Pablo Galindo.
    - gh-137308: A standalone docstring in a node body is
      optimized as a pass statement to ensure that the node’s
      body is never empty. There was a ValueError in compile()
      otherwise.
    - gh-137288: Fix bug where some bytecode instructions of a
      boolean expression are not associated with the correct
      exception handler.
    - gh-134291: Remove some newer macOS API usage from the JIT
      compiler in order to restore compatibility with older OSX
      10.15 deployment targets.
    - gh-131338: Disable computed stack limit checks on non-glibc
      linux platforms to fix crashes on deep recursion.
    - gh-136870: Fix data races while de-instrumenting bytecode
      of code objects running concurrently in threads.
  - C API
    - gh-137573: Mark _PyOptimizer_Optimize as Py_NO_INLINE to
      prevent stack overflow crashes on macOS.
  - Build
    - gh-132339: Add support for OpenSSL 3.5.
- Replaces upstreamed patches:
  - CVE-2025-8194-tarfile-no-neg-offsets.patch

OBS-URL: https://build.opensuse.org/request/show/1299840
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python314?expand=0&rev=21
This commit is contained in:
2025-08-15 19:52:50 +00:00
committed by Git OBS Bridge
7 changed files with 76 additions and 222 deletions

File diff suppressed because one or more lines are too long