Subject: CVS commit: pkgsrc/lang/python37
From: Adam Ciarcinski
Date: 2018-12-31 11:07:59
Message id: 20181231100800.150E1FB16@cvs.NetBSD.org

Log Message:
python37: updated to 3.7.2

Python 3.7.2 final

Library
- bpo-31715: Associate .mjs file extension with application/javascript MIME Type.

Build
- bpo-35499: make profile-opt no longer replaces CFLAGS_NODIST with CFLAGS. It \ 
now adds profile-guided optimization (PGO) flags to CFLAGS_NODIST: existing \ 
CFLAGS_NODIST flags are kept.
- bpo-35257: Avoid leaking the linker flags from Link Time Optimizations (LTO) \ 
into distutils when compiling C extensions.

C API
- bpo-35259: Conditionally declare Py_FinalizeEx() (new in 3.6) based on \ 
Py_LIMITED_API.

Python 3.7.2 release candidate 1

Security
- bpo-34812: The -I command line option (run Python in isolated mode) is now \ 
also copied by the multiprocessing and distutils modules when spawning child \ 
processes. Previously, only -E and -s options (enabled by -I) were copied.
- bpo-34791: The xml.sax and xml.dom.domreg no longer use environment variables \ 
to override parser implementations when sys.flags.ignore_environment is set by \ 
-E or -I arguments.

Core and Builtins
- bpo-35444: Fixed error handling in pickling methods when fail to look up \ 
builtin “getattr”.
- bpo-35436: Fix various issues with memory allocation error handling. Patch by \ 
Zackery Spytz.
- bpo-35357: Internal attributes’ names of unittest.mock._Call and \ 
unittest.mock.MagicProxy (name, parent & from_kall) are now prefixed with \ 
_mock_ in order to prevent clashes with widely used object attributes. Fixed \ 
minor typo in test function name.
- bpo-35372: Fixed the code page decoder for input longer than 2 GiB containing \ 
undecodable bytes.
- bpo-35336: Fix PYTHONCOERCECLOCALE=1 environment variable: only coerce the C \ 
locale if the LC_CTYPE locale is “C”.
- bpo-33954: For str.format(), float.__format__() and complex.__format__() \ 
methods for non-ASCII decimal point when using the “n” formatter.
- bpo-35269: Fix a possible segfault involving a newly-created coroutine. Patch \ 
by Zackery Spytz.
- bpo-35214: Fixed an out of bounds memory access when parsing a truncated \ 
unicode escape sequence at the end of a string such as '\N'. It would read one \ 
byte beyond the end of the memory allocation.
- bpo-35214: The interpreter and extension modules have had annotations added so \ 
that they work properly under clang’s Memory Sanitizer. A new configure flag \ 
–with-memory-sanitizer has been added to make test builds of this nature \ 
easier to perform.
- bpo-35193: Fix an off by one error in the bytecode peephole optimizer where it \ 
could read bytes beyond the end of bounds of an array when removing unreachable \ 
code. This bug was present in every release of Python 3.6 and 3.7 until now.
- bpo-29341: Clarify in the docstrings of os methods that path-like objects are \ 
also accepted as input parameters.
- bpo-35050: socket: Fix off-by-one bug in length check for AF_ALG name and type.
- bpo-34974: bytes and bytearray constructors no longer convert unexpected \ 
exceptions (e.g. MemoryError and KeyboardInterrupt) to TypeError.
- bpo-34973: Fixed crash in bytes() when the list argument is mutated while it \ 
is iterated.
- bpo-34824: Fix a possible null pointer dereference in Modules/_ssl.c. Patch by \ 
Zackery Spytz.
- bpo-1621: Do not assume signed integer overflow behavior (C undefined \ 
behavior) when performing set hash table resizing.

Library
- bpo-35052: Fix xml.dom.minidom cloneNode() on a document with an entity: pass \ 
the correct arguments to the user data handler of an entity.
- bpo-35330: When a Mock instance was used to wrap an object, if side_effect is \ 
used in one of the mocks of it methods, don’t call the original implementation \ 
and return the result of using the side effect the same way that it is done with \ 
return_value.
- bpo-34172: Revert the fix for this issue previously released in 3.7.1 pending \ 
further investigation: Fix a reference issue inside multiprocessing.Pool that \ 
caused the pool to remain alive if it was deleted without being closed or \ 
terminated explicitly.
- bpo-10496: posixpath.expanduser() now returns the input path unchanged if the \ 
HOME environment variable is not set and the current user has no home directory \ 
(if the current user identifier doesn’t exist in the password database). This \ 
change fix the site module if the current user doesn’t exist in the password \ 
database (if the user has no home directory).
- bpo-35310: Fix a bug in select.select() where, in some cases, the file \ 
descriptor sequences were returned unmodified after a signal interruption, even \ 
though the file descriptors might not be ready yet. select.select() will now \ 
always return empty lists if a timeout has occurred. Patch by Oran Avraham.
- bpo-35380: Enable TCP_NODELAY on Windows for proactor asyncio event loop.
- bpo-35341: Add generic version of collections.OrderedDict to the typing \ 
module. Patch by Ismo Toijala.
- bpo-35371: Fixed possible crash in os.utime() on Windows when pass incorrect \ 
arguments.
- bpo-27903: Fix ResourceWarning in platform.dist() on SuSE and Caldera \ 
OpenLinux. Patch by Ville Skyttä.
- bpo-35308: Fix regression in webbrowser where default browsers may be \ 
preferred over browsers in the BROWSER environment variable.
- bpo-28604: locale.localeconv() now sets temporarily the LC_CTYPE locale to the \ 
LC_MONETARY locale if the two locales are different and monetary strings are \ 
non-ASCII. This temporary change affects other threads.
- bpo-35277: Update ensurepip to install pip 18.1 and setuptools 40.6.2.
- bpo-35226: Recursively check arguments when testing for equality of \ 
unittest.mock.call objects and add note that tracking of parameters used to \ 
create ancestors of mocks in mock_calls is not possible.
- bpo-29564: The warnings module now suggests to enable tracemalloc if the \ 
source is specified, the tracemalloc module is available, but tracemalloc is not \ 
tracing memory allocations.
- bpo-35189: Modify the following fnctl function to retry if interrupted by a \ 
signal (EINTR): flock, lockf, fnctl
- bpo-35062: Fix incorrect parsing of _io.IncrementalNewlineDecoder’s \ 
translate argument.
- bpo-35079: Improve difflib.SequenceManager.get_matching_blocks doc by adding \ 
‘non-overlapping’ and changing ‘!=’ to ‘<’.
- bpo-35017: socketserver.BaseServer.serve_forever() now exits immediately if \ 
it’s shutdown() method is called while it is polling for new events.
- bpo-31047: Fix ntpath.abspath regression where it didn’t remove a trailing \ 
separator on Windows. Patch by Tim Graham.
- bpo-34794: Fixed a leak in Tkinter when pass the Python wrapper around Tcl_Obj \ 
back to Tcl/Tk.
- bpo-35008: Fixed references leaks when call the __setstate__() method of \ 
xml.etree.ElementTree.Element in the C implementation for already initialized \ 
element.
- bpo-23420: Verify the value for the parameter ‘-s’ of the cProfile CLI. \ 
Patch by Robert Kuska
- bpo-33947: dataclasses now handle recursive reprs without raising RecursionError.
- bpo-16965: The 2to3 execfile fixer now opens the file with mode 'rb'. Patch by \ 
Zackery Spytz.
- bpo-34966: pydoc now supports aliases not only to methods defined in the end \ 
class, but also to inherited methods. The docstring is not duplicated for \ 
aliases.
- bpo-34941: Methods find(), findtext() and findall() of the Element class in \ 
the xml.etree.ElementTree module are now able to find children which are \ 
instances of Element subclasses.
- bpo-34936: Fix TclError in tkinter.Spinbox.selection_element(). Patch by \ 
Juliette Monsel.
- bpo-34866: Adding max_num_fields to cgi.FieldStorage to make DOS attacks \ 
harder by limiting the number of MiniFieldStorage objects created by \ 
FieldStorage.
- bpo-34022: The SOURCE_DATE_EPOCH environment variable no longer overrides the \ 
value of the invalidation_mode argument to py_compile.compile(), and determines \ 
its default value instead.
- bpo-34738: ZIP files created by distutils will now include entries for directories.
- bpo-31177: Fix bug that prevented using reset_mock on mock instances with \ 
deleted attributes
- bpo-34536: Enum._missing_: raise ValueError if None returned and TypeError if \ 
non-member is returned.
- bpo-34604: Fix possible mojibake in the error message of pwd.getpwnam and \ 
grp.getgrnam using string representation because of invisible characters or \ 
trailing whitespaces. Patch by William Grzybowski.
- bpo-34574: OrderedDict iterators are not exhausted during pickling anymore. \ 
Patch by Sergey Fedoseev.
- bpo-34052: sqlite3.Connection.create_aggregate(), \ 
sqlite3.Connection.create_function(), sqlite3.Connection.set_authorizer(), \ 
sqlite3.Connection.set_progress_handler() methods raises TypeError when \ 
unhashable objects are passed as callable. These methods now don’t pass such \ 
objects to SQLite API. Previous behavior could lead to segfaults. Patch by \ 
Sergey Fedoseev.
- bpo-29877: compileall: import ProcessPoolExecutor only when needed, preventing \ 
hangs on low resource platforms
- bpo-22005: Implemented unpickling instances of datetime, date and time pickled \ 
by Python 2. encoding='latin1' should be used for successful decoding.

Files:
RevisionActionfile
1.4modifypkgsrc/lang/python37/distinfo
1.4modifypkgsrc/lang/python37/PLIST
1.3modifypkgsrc/lang/python37/dist.mk
1.3modifypkgsrc/lang/python37/patches/patch-Makefile.pre.in