- Update to 3.13.0a5:

- Security
    - gh-115398: Allow controlling Expat >=2.6.0 reparse deferral
      (CVE-2023-52425) by adding five new methods:
        xml.etree.ElementTree.XMLParser.flush()
        xml.etree.ElementTree.XMLPullParser.flush()
        xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
        xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
        xml.sax.expatreader.ExpatParser.flush()
    - gh-114572: ssl.SSLContext.cert_store_stats() and
      ssl.SSLContext.get_ca_certs() now correctly lock access to
      the certificate store, when the ssl.SSLContext is shared
      across multiple threads.
  - Core and Builtins
    - gh-116604: Respect the status of the garbage collector when
      indirect calls are made via PyErr_CheckSignals() and the
      evaluation breaker. Patch by Pablo Galindo
    - gh-112087: list is now compatible with the implementation
      of PEP 703.
    - gh-116381: Add specialization for CONTAINS_OP.
    - gh-116296: Fix possible refleak in object.__reduce__()
      internal error handling.
    - gh-115823: Properly calculate error ranges in the parser
      when raising SyntaxError exceptions caused by invalid byte
      sequences. Patch by Pablo Galindo
    - gh-115778: Add tierN annotation for instruction definition
      in interpreter DSL.
    - gh-115733: Fix crash when calling next() on exhausted list
      iterators.
    - gh-115700: The regen-cases build stage now works on

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python313?expand=0&rev=10
This commit is contained in:
Matej Cepl 2024-03-20 05:23:44 +00:00 committed by Git OBS Bridge
parent 46a04323e0
commit d51b4f3c7a
6 changed files with 306 additions and 22 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:bcbd6daae3de381d64a84e9ac50889dce71c5fdff2b680b676537b09907425f6
size 20648544

View File

@ -1,18 +0,0 @@
-----BEGIN PGP SIGNATURE-----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=h6MK
-----END PGP SIGNATURE-----

3
Python-3.13.0a5.tar.xz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:1e89b5355183e7c898a5a01b2f601728fe49fdb89d9c9781f13360847aaefa62
size 20734172

View File

@ -0,0 +1,18 @@
-----BEGIN PGP SIGNATURE-----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=+psT
-----END PGP SIGNATURE-----

View File

@ -1,3 +1,287 @@
-------------------------------------------------------------------
Wed Mar 20 05:08:29 UTC 2024 - Matej Cepl <mcepl@cepl.eu>
- Update to 3.13.0a5:
- Security
- gh-115398: Allow controlling Expat >=2.6.0 reparse deferral
(CVE-2023-52425) by adding five new methods:
xml.etree.ElementTree.XMLParser.flush()
xml.etree.ElementTree.XMLPullParser.flush()
xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
xml.sax.expatreader.ExpatParser.flush()
- gh-114572: ssl.SSLContext.cert_store_stats() and
ssl.SSLContext.get_ca_certs() now correctly lock access to
the certificate store, when the ssl.SSLContext is shared
across multiple threads.
- Core and Builtins
- gh-116604: Respect the status of the garbage collector when
indirect calls are made via PyErr_CheckSignals() and the
evaluation breaker. Patch by Pablo Galindo
- gh-112087: list is now compatible with the implementation
of PEP 703.
- gh-116381: Add specialization for CONTAINS_OP.
- gh-116296: Fix possible refleak in object.__reduce__()
internal error handling.
- gh-115823: Properly calculate error ranges in the parser
when raising SyntaxError exceptions caused by invalid byte
sequences. Patch by Pablo Galindo
- gh-115778: Add tierN annotation for instruction definition
in interpreter DSL.
- gh-115733: Fix crash when calling next() on exhausted list
iterators.
- gh-115700: The regen-cases build stage now works on
Windows.
- gh-115347: Fix bug where docstring was replaced by a
redundant NOP when Python is run with -OO.
- gh-115323: Make error message more meaningful for when
bytearray.extend() is called with a str object.
- gh-112175: Every PyThreadState now has its own
eval_breaker, allowing specific threads to be interrupted.
- gh-115154: Fix a bug that was causing the
tokenize.untokenize() function to handle unicode named
literals incorrectly. Patch by Pablo Galindo
- gh-112433: Add ability to force alignment of
ctypes.Structure by way of the new _align_ attribute on the
class.
- gh-104090: The multiprocessing resource tracker now
exits with non-zero status code if a resource leak was
detected. It still exits with status code 0 otherwise.
- gh-105858: Improve the constructors for ast
nodes. Arguments of list types now default to an empty list
if omitted, and optional fields default to None. AST nodes
now have an __annotations__ attribute with the expected
types of their attributes. Passing unrecognized extra
arguments to AST nodes is deprecated and will become an
error in Python 3.15. Omitting a required argument to an
AST node is deprecated and will become an error in Python
3.15. Patch by Jelle Zijlstra.
- gh-101860: Expose __name__ attribute on property.
- gh-96497: Fix incorrect resolution of mangled class
variables used in assignment expressions in comprehensions.
- Library
- gh-116600: Fix repr() for global Flag members.
- gh-116349: platform.java_ver() is deprecated and will be
removed in 3.15. It was largely untested, had a confusing
API, and was only useful for Jython support.
- gh-116143: Fix a race in pydoc _start_server, eliminating a
window in which _start_server can return a thread that is
“serving” but without a docserver set.
- gh-116127: typing: implement PEP 705 which adds
typing.ReadOnly support to typing.TypedDict.
- gh-116325: typing: raise SyntaxError instead of
AttributeError on forward references as empty strings.
- gh-115957: When asyncio.TaskGroup.create_task is called on
an inactive asyncio.TaskGroup, the given coroutine will be
closed (which prevents a RuntimeWarning).
- gh-115978: Disable preadv(), readv(), pwritev(),
and writev() on WASI. Under wasmtime for WASI
0.2, these functions dont pass test_posix
(gh-bytecodealliance/wasmtime#7830).
- gh-88352: Fix the computation of the next rollover
time in the logging.TimedRotatingFileHandler handler.
computeRollover() now always returns a timestamp larger
than the specified time and works correctly during the DST
change. doRollover() no longer overwrite the already rolled
over file, saving from data loss when run at midnight or
during repeated time at the DST change.
- gh-87115: Set __main__.__spec__ to None when running a
script with pdb
- gh-76511: Fix UnicodeEncodeError in
email.Message.as_string() that results when a message
that claims to be in the ascii character set actually has
non-ascii characters. Non-ascii characters are now replaced
with the U+FFFD replacement character, like in the replace
error handler.
- gh-89547: Add support for nested typing special forms like
Final[ClassVar[int]].
- gh-65824: Improve the less prompt in pydoc.
- gh-116040: [Enum] fix by-value calls when second value is
falsey; e.g. Cardinal(1, 0)
- gh-115821: [Enum] Improve error message when calling
super().__new__() in custom __new__.
- gh-85644: Use the XDG_CURRENT_DESKTOP environment variable
in webbrowser to check desktop. Prefer it to the deprecated
GNOME_DESKTOP_SESSION_ID for GNOME detection.
- gh-75988: Fixed unittest.mock.create_autospec() to pass
the call through to the wrapped object to return the real
result.
- gh-115881: Fix issue where ast.parse() would incorrectly
flag conditional context managers (such as with (x() if y
else z()): ...) as invalid syntax if feature_version=(3,
8) was passed. This reverts changes to the grammar made as
part of gh-94949.
- gh-115886: Fix silent truncation of the
name with an embedded null character in
multiprocessing.shared_memory.SharedMemory.
- gh-115532: Add kernel density estimation to the statistics
module.
- gh-115714: On WASI, the time module no longer get process
time using times() or CLOCK_PROCESS_CPUTIME_ID, system API
is that is unreliable and is likely to be removed from
WASI. The affected clock functions fall back to calling
clock().
- gh-115809: Improve algorithm for computing
which rolled-over log files to delete in
logging.TimedRotatingFileHandler. It is now reliable for
handlers without namer and with arbitrary deterministic
namer that leaves the datetime part in the file name
unmodified.
- gh-74668: urllib.parse functions parse_qs() and
parse_qsl() now support bytes arguments containing raw and
percent-encoded non-ASCII data.
- gh-67044: csv.writer() now always quotes or escapes '\r'
and '\n', regardless of lineterminator value.
- gh-115712: Restore support of space delimiter with
skipinitialspace=True in csv. csv.writer() now quotes empty
fields if delimiter is a space and skipinitialspace is true
and raises exception if quoting is not possible.
- gh-112364: Fixed ast.unparse() to handle format_spec with
", ' or \\. Patched by Frank Hoffmann.
- gh-112997: Stop logging potentially sensitive callback
arguments in asyncio unless debug mode is active.
- gh-114914: Fix an issue where an abandoned StreamWriter
would not be garbage collected.
- gh-111358: Fix a bug in
asyncio.BaseEventLoop.shutdown_default_executor() to ensure
the timeout passed to the coroutine behaves as expected.
- gh-115618: Fix improper decreasing the reference count for
None argument in property methods getter(), setter() and
deleter().
- gh-112720: Refactor dis.ArgResolver to make it possible to
subclass and change the way jump args are interpreted.
- gh-112006: Fix inspect.unwrap() for types
with the __wrapper__ data descriptor. Fix
inspect.Signature.from_callable() for builtins
classmethod() and staticmethod().
- gh-101293: Support callables with the __call__() method
and types with __new__() and __init__() methods set to
class methods, static methods, bound methods, partial
functions, and other types of methods and descriptors in
inspect.Signature.from_callable().
- gh-103092: Isolate _lsprof (apply PEP 687).
- gh-113942: pydoc no longer skips global functions
implemented as builtin methods, such as
MethodDescriptorType and WrapperDescriptorType.
- gh-115256: Added DeprecationWarning when accessing the
tarfile attribute of TarInfo objects. The attribute is
never used internally and is only attached to TarInfos when
the tarfile is opened in write-mode, not read-mode. The
attribute creates an unnecessary reference cycle which may
cause corruption when not closing the handle after writing
a tarfile.
- gh-115197: urllib.request no longer resolves the hostname
before checking it against the systems proxy bypass list
on macOS and Windows.
- gh-113812: DatagramTransport.sendto() will now send
zero-length datagrams if called with an empty bytes
object. The transport flow control also now accounts for
the datagram header when calculating the buffer size.
- gh-114763: Protect modules loaded with
importlib.util.LazyLoader from race conditions when
multiple threads try to access attributes before the
loading is complete.
- gh-114709: posixpath.commonpath() now raises a ValueError
exception when passed an empty iterable. Previously,
IndexError was raised.
posixpath.commonpath() now raises a TypeError exception
when passed None. Previously, ValueError was raised.
- gh-114610: Fix bug where pathlib.PurePath.with_stem()
converted a non-empty path suffix to a stem when given an
empty stem argument. It now raises ValueError, just like
pathlib.PurePath.with_suffix() does when called on a path
with an empty stem, given a non-empty suffix argument.
- gh-107361: Add ssl.VERIFY_X509_PARTIAL_CHAIN and
VERIFY_X509_STRICT to the default SSL context created with
ssl.create_default_context().
- gh-112281: Allow creating union of types for
typing.Annotated with unhashable metadata.
- gh-111775: Fix
importlib.resources.simple.ResourceHandle.open() for text
mode, added missed stream argument.
- gh-90095: Make .pdbrc and -c work with any valid pdb
commands.
- gh-107625: Raise configparser.ParsingError from read()
and read_file() methods of configparser.ConfigParser if a
key without a corresponding value is continued (that is,
followed by an indented line).
- gh-107155: Fix incorrect output of help(x) where x is a
lambda function, which has an __annotations__ dictionary
attribute with a "return" key.
- gh-57141: Add option for non-shallow comparisons to
filecmp.dircmp like filecmp.cmp(). Original patch by Steven
Ward. Enhanced by Tobias Rautenkranz
- gh-69990: Profile.print_stats() has been improved to accept
multiple sort arguments. Patched by Chiu-Hsiang Hsu and
Furkan Onder.
- gh-104061: Add socket.SO_BINDTOIFINDEX constant.
- gh-60346: Fix ArgumentParser inconsistent with
parse_known_args.
- gh-102389: Add windows_31j to aliases for cp932 codec
- gh-72249: functools.partial`s of :func:`repr() has been
improved to include the module name. Patched by Furkan
Onder and Anilyka Barry.
- gh-100985: Update HTTPSConnection to consistently wrap IPv6
Addresses when using a proxy.
- gh-100884: email: fix misfolding of comma in address-lists
over multiple lines in combination with unicode encoding.
- gh-95782: Fix io.BufferedReader.tell(),
io.BufferedReader.seek(), _pyio.BufferedReader.tell(),
io.BufferedRandom.tell(), io.BufferedRandom.seek() and
_pyio.BufferedRandom.tell() being able to return negative
offsets.
- gh-96310: Fix a traceback in argparse when all options in a
mutually exclusive group are suppressed.
- gh-93205: Fixed a bug in
logging.handlers.TimedRotatingFileHandler where multiple
rotating handler instances pointing to files with the same
name but different extensions would conflict and not delete
the correct files.
- bpo-31116: Add Z85 encoding to base64.
- bpo-44865: Add missing call to localization function in
argparse.
- bpo-43952: Fix multiprocessing.connection.Listener.accept()
to accept empty bytes as authkey. Not accepting empty bytes
as key causes it to hang indefinitely.
- bpo-42125: linecache: get module name from __spec__ if
available. This allows getting source code for the __main__
module when a custom loader is used.
- bpo-41122: Failing to pass arguments properly to
functools.singledispatchmethod() now throws a TypeError
instead of hitting an index out of bounds internally.
- bpo-40818: The asyncio REPL now runs
sys.__interactivehook__ on startup. The default
implementation of sys.__interactivehook__ provides
auto-completion to the asyncio REPL. Patch contributed by
Rémi Lapeyre.
- bpo-33775: Add default and version help text for
localization in argparse.
- Documentation
- gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under
“XML vulnerabilities”.
- gh-109653: Improve import time of uuid on Linux.
- Tests
- gh-71052: Add test exclusions to support running the test
suite on Android.
- gh-71052: Enable test_concurrent_futures on platforms that
support threading but not multiprocessing.
- gh-115796: Make _testinternalcapi.assemble_code_object
construct the exception table for the code object.
- gh-115720: Leak tests (-R, --huntrleaks) now show a summary
of the number of leaks found in each iteration.
- gh-115122: Add --bisect option to regrtest test runner:
run failed tests with test.bisect_cmd to identify failing
tests. Patch by Victor Stinner.
- gh-115596: Fix ProgramPriorityTests in test_os permanently
changing the process priority.
- gh-115556: On Windows, commas passed in arguments to
Tools\buildbot\test.bat and PCbuild\\rt.bat are now
properly handled.
- gh-115420: Fix translation of exception hander targets by
_testinternalcapi.optimize_cfg.
- gh-115376: Fix segfault in
_testinternalcapi.compiler_codegen on bad input.
-------------------------------------------------------------------
Thu Mar 7 08:16:28 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>

View File

@ -105,7 +105,7 @@
%define dynlib() %{sitedir}/lib-dynload/%{1}.cpython-%{abi_tag}-%{archname}-%{_os}%{?_gnu}%{?armsuffix}.so
%bcond_without profileopt
Name: %{python_pkg_name}%{psuffix}
Version: 3.13.0a4
Version: 3.13.0a5
Release: 0
Summary: Python 3 Interpreter
License: Python-2.0