Log message:
python3*: when linking with pkgsrc gettext, pass -lintl. When linking
with builtin gettext, NFCI. Fixes PREFER_PKGSRC=gettext-lib builds on at
least NetBSD 9 and 10.

Log message:
Fix lang/python311 on Linux

Log message:
python311: Adjust to new configure interface for cross-compilation.

Restore patch to simplify sysconfigdata name in configure, now that
passing through this logic is mandatory for cross-compilation (at
least, mandatory without further patches to configure).

Log message:
python: Override sys.platform with PY_PLATNAME when cross-compiling.

For this purpose, factor the PY_PLATNAME definition out into a new
lang/pythonNN/platname.mk file.  It's not the same for 2.x and 3.x;
perhaps we could factor it out further into a single 2.x vs 3.x
conditional but this is a more mechanical change that makes it easier
to audit for now.

Log message:
lang/python39, 310, 311: Handle TOOLBASE/LOCALBASE split.

Log message:
python311: Do not define static_assert in C++ code.

Bump PKGREVISION.

Log message:
python311: updated to 3.11.4

Python 3.11.4

Security
gh-103142: The version of OpenSSL used in our binary builds has been upgraded to \ 
1.1.1u to address several CVEs.
gh-99889: Fixed a security in flaw in uu.decode() that could allow for directory \ 
traversal based on the input if no out_file was specified.
gh-104049: Do not expose the local on-disk location in directory indexes \ 
produced by http.client.SimpleHTTPRequestHandler.
gh-102153: urllib.parse.urlsplit() now strips leading C0 control and space \ 
characters following the specification for URLs defined by WHATWG in response to \ 
CVE-2023-24329. Patch by Illia Volochii.
Core and Builtins
gh-105164: Ensure annotations are set up correctly if the only annotation in a \ 
block is within a match block. Patch by Jelle Zijlstra.
gh-104615: Fix wrong ordering of assignments in code like a, a = x, y. \ 
Contributed by Carl Meyer.
gh-104482: Fix three error handling bugs in ast.c’s validation of pattern \ 
matching statements.
gh-102818: Do not add a frame to the traceback in the sys.setprofile and \ 
sys.settrace trampoline functions. This ensures that frames are not duplicated \ 
if an exception is raised in the callback function, and ensures that frames are \ 
not omitted if a C callback is used and that does not add the frame.
gh-104405: Fix an issue where some bytecode instructions could ignore PEP 523 \ 
when “inlining” calls.
gh-104018: Disallow the “z” format specifier in %-format of bytes objects.
gh-103971: Fix an issue where incorrect locations numbers could be assigned to \ 
code following case blocks.
gh-102310: Change the error range for invalid bytes literals.
gh-103590: Do not wrap a single exception raised from a try-except* construct in \ 
an ExceptionGroup.
gh-101517: Fix bug in line numbers of instructions emitted for except*.
gh-103242: Migrate set_ecdh_curve() method not to use deprecated OpenSSL APIs. \ 
Patch by Dong-hee Na.
gh-102700: Allow built-in modules to be submodules. This allows submodules to be \ 
statically linked into a CPython binary.
gh-101857: Fix xattr support detection on Linux systems by widening the check to \ 
linux, not just glibc. This fixes support for musl.
gh-99184: Bypass instance attribute access of __name__ in repr of weakref.ref.
gh-96670: The parser now raises SyntaxError when parsing source code containing \ 
null bytes. Backported from aab01e3. Patch by Pablo Galindo
bpo-31821: Fix pause_reading() to work when called from connection_made() in asyncio.

Library
gh-105080: Fixed inconsistent signature on derived classes for inspect.signature()
gh-104874: Document the __name__ and __supertype__ attributes of typing.NewType. \ 
Patch by Jelle Zijlstra.
gh-104340: When an asyncio pipe protocol loses its connection due to an error, \ 
and the caller doesn’t await wait_closed() on the corresponding StreamWriter, \ 
don’t log a warning about an exception that was never retrieved. After all, \ 
according to the StreamWriter.close() docs, the wait_closed() call is optional \ 
(“not mandatory”).
gh-104372: Refactored the _posixsubprocess internals to avoid Python C API usage \ 
between fork and exec when marking pass_fds= file descriptors inheritable.
gh-75367: Fix data descriptor detection in inspect.getattr_static().
gh-104536: Fix a race condition in the internal multiprocessing.process cleanup \ 
logic that could manifest as an unintended AttributeError when calling \ 
process.close().
gh-104399: Prepare the _tkinter module for building with Tcl 9.0 and future \ 
libtommath by replacing usage of deprecated functions mp_to_unsigned_bin_n() and \ 
mp_unsigned_bin_size() when necessary.
gh-104307: socket.getnameinfo() now releases the GIL while contacting the DNS server
gh-87695: Fix issue where pathlib.Path.glob() raised OSError when it encountered \ 
a symlink to an overly long path.
gh-104265: Prevent possible crash by disallowing instantiation of the \ 
_csv.Reader and _csv.Writer types. The regression was introduced in 3.10.0a4 \ 
with PR 23224 (bpo-14935). Patch by Radislav Chugunov.
gh-104035: Do not ignore user-defined __getstate__ and __setstate__ methods for \ 
slotted frozen dataclasses.
gh-103987: In mmap, fix several bugs that could lead to access to memory-mapped \ 
files after they have been invalidated.
gh-103935: Use io.open_code() for files to be executed instead of raw open()
gh-100370: Fix potential OverflowError in sqlite3.Connection.blobopen() for \ 
32-bit builds. Patch by Erlend E. Aasland.
gh-103848: Add checks to ensure that [ bracketed ] hosts found by \ 
urllib.parse.urlsplit() are of IPv6 or IPvFuture format.
gh-103872: Update the bundled copy of pip to version 23.1.2.
gh-103861: Fix zipfile.Zipfile creating invalid zip files when force_zip64 was \ 
used to add files to them. Patch by Carey Metcalfe.
gh-103685: Prepare tkinter.Menu.index() for Tk 8.7 so that it does not raise \ 
TclError: expected integer but got "" when it should return None.
gh-81403: urllib.request.CacheFTPHandler no longer raises URLError if a cached \ 
FTP instance is reused. ftplib’s endtransfer method calls voidresp to drain \ 
the connection to handle FTP instance reuse properly.
gh-103578: Fixed a bug where pdb crashes when reading source file with different \ 
encoding by replacing io.open() with io.open_code(). The new method would also \ 
call into the hook set by PyFile_SetOpenCodeHook().
gh-103556: Now creating inspect.Signature objects with positional-only parameter \ 
with a default followed by a positional-or-keyword parameter without one is \ 
impossible.
gh-103559: Update the bundled copy of pip to version 23.1.1.
gh-103365: Set default Flag boundary to STRICT and fix bitwise operations.
gh-103472: Avoid a potential ResourceWarning in http.client.HTTPConnection by \ 
closing the proxy / tunnel’s CONNECT response explicitly.
gh-103449: Fix a bug in doc string generation in dataclasses.dataclass().
gh-103256: Fixed a bug that caused hmac to raise an exception when the requested \ 
hash algorithm was not available in OpenSSL despite being available separately \ 
as part of hashlib itself. It now falls back properly to the built-in. This \ 
could happen when, for example, your OpenSSL does not include SHA3 support and \ 
you want to compute hmac.digest(b'K', b'M', 'sha3_256').
gh-103225: Fix a bug in pdb when displaying line numbers of module-level source code.
gh-93910: Remove deprecation of enum memmber.member access.
gh-102978: Fixes unittest.mock.patch() not enforcing function signatures for \ 
methods decorated with @classmethod or @staticmethod when patch is called with \ 
autospec=True.
gh-103204: Fixes http.server accepting HTTP requests with HTTP version numbers \ 
preceded by ‘+’, or ‘-’, or with digit-separating ‘_’ characters. \ 
The length of the version numbers is also constrained.
gh-102953: The extraction methods in tarfile, and shutil.unpack_archive(), have \ 
a new a filter argument that allows limiting tar features than may be surprising \ 
or dangerous, such as creating files outside the destination directory. See \ 
Extraction filters for details.
gh-101640: argparse.ArgumentParser now catches errors when writing messages, \ 
such as when sys.stderr is None. Patch by Oleg Iarygin.
gh-96522: Fix potential deadlock in pty.spawn()
gh-87474: Fix potential file descriptor leaks in subprocess.Popen.

Documentation
gh-89455: Add missing documentation for the max_group_depth and max_group_width \ 
parameters and the exceptions attribute of the traceback.TracebackException \ 
class.
gh-89412: Add missing documentation for the end_lineno and end_offset attributes \ 
of the traceback.TracebackException class.
gh-104943: Remove mentions of old Python versions in typing.NamedTuple.
gh-67056: Document that the effect of registering or unregistering an atexit \ 
cleanup function from within a registered cleanup function is undefined.
gh-48241: Clarifying documentation about the url parameter to \ 
urllib.request.urlopen and urllib.request.Requst needing to be encoded properly.

Tests
gh-104494: Update test_pack_configure_in and test_place_configure_in for changes \ 
to error message formatting in Tk 8.7.
gh-104461: Run test_configure_screen on X11 only, since the DISPLAY environment \ 
variable and -screen option for toplevels are not useful on Tk for Win32 or \ 
Aqua.
gh-103329: Regression tests for the behaviour of unittest.mock.PropertyMock were \ 
added.
gh-85984: Utilize new “winsize” functions from termios in pty tests.
gh-75729: Fix the os.spawn* tests failing on Windows when the working directory \ 
or interpreter path contains spaces.

Build
gh-90005: Fix a regression in configure where we could end up unintentionally \ 
linking with libbsd.
gh-104106: Add gcc fallback of mkfifoat/mknodat for macOS. Patch by Dong-hee Na.
gh-99069: Extended workaround defining static_assert when missing from the libc \ 
headers to all clang and gcc builds. In particular, this fixes building on macOS \ 
<= 10.10.

Windows
gh-105146: Updated the links at the end of the installer to point to Discourse \ 
rather than the mailing lists.
gh-104623: Update Windows installer to use SQLite 3.42.0.
gh-102997: Update Windows installer to use SQLite 3.41.2.
gh-88013: Fixed a bug where TypeError was raised when calling ntpath.realpath() \ 
with a bytes parameter in some cases.

macOS
gh-103142: Update macOS installer to use OpenSSL 1.1.1u.
gh-104623: Update macOS installer to SQLite 3.42.0.
gh-102997: Update macOS installer to SQLite 3.41.2.

IDLE
gh-104719: Remove IDLE’s modification of tokenize.tabsize and test other uses \ 
of tokenize data and methods.
gh-104499: Fix completions for Tk Aqua 8.7 (currently blank).
gh-104496: About prints both tcl and tk versions if different (expected someday).
gh-88496: Fix IDLE test hang on macOS.

Log message:
python311 py311-html-docs: updated to 3.11.3

Python 3.11.3

Security

gh-101727: Updated the OpenSSL version used in Windows and macOS binary release \ 
builds to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per \ 
the OpenSSL 2023-02-07 security advisory.
gh-101283: subprocess.Popen now uses a safer approach to find cmd.exe when \ 
launching with shell=True. Patch by Eryk Sun, based on a patch by Oleg Iarygin.

Core and Builtins

gh-101975: Fixed stacktop value on tracing entries to avoid corruption on \ 
garbage collection.
gh-102701: Fix overflow when creating very large dict.
gh-102416: Do not memoize incorrectly automatically generated loop rules in the \ 
parser. Patch by Pablo Galindo.
gh-102356: Fix a bug that caused a crash when deallocating deeply nested filter \ 
objects. Patch by Marta Gómez Macías.
gh-102397: Fix segfault from race condition in signal handling during garbage \ 
collection. Patch by Kumar Aditya.
gh-102281: Fix potential nullptr dereference and use of uninitialized memory in \ 
fileutils. Patch by Max Bachmann.
gh-102126: Fix deadlock at shutdown when clearing thread states if any finalizer \ 
tries to acquire the runtime head lock. Patch by Kumar Aditya.
gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal module. Patch by Max \ 
Bachmann.
gh-101967: Fix possible segfault in positional_only_passed_as_keyword function, \ 
when new list created.
gh-101765: Fix SystemError / segmentation fault in iter __reduce__ when internal \ 
access of builtins.__dict__ keys mutates the iter object.
gh-101696: Invalidate type version tag in _PyStaticType_Dealloc for static \ 
types, avoiding bug where a false cache hit could crash the interpreter. Patch \ 
by Kumar Aditya.

Library

gh-102549: Don’t ignore exceptions in member type creation.

gh-102947: Improve traceback when dataclasses.fields() is called on a \ 
non-dataclass. Patch by Alex Waygood

gh-102780: The asyncio.Timeout context manager now works reliably even when \ 
performing cleanup due to task cancellation. Previously it could raise a \ 
CancelledError instead of an TimeoutError in such cases.

gh-88965: typing: Fix a bug relating to substitution in custom classes generic \ 
over a ParamSpec. Previously, if the ParamSpec was substituted with a parameters \ 
list that itself contained a TypeVar, the TypeVar in the parameters list could \ 
not be subsequently substituted. This is now fixed.

Patch by Nikita Sobolev.

gh-101979: Fix a bug where parentheses in the metavar argument to \ 
argparse.ArgumentParser.add_argument() were dropped. Patch by Yeojin Kim.

gh-102179: Fix os.dup2() error message for negative fds.

gh-101961: For the binary mode, fileinput.hookcompressed() doesn’t set the \ 
encoding value even if the value is None. Patch by Gihwan Kim.

gh-101936: The default value of fp becomes io.BytesIO if HTTPError is \ 
initialized without a designated fp parameter. Patch by Long Vo.

gh-102069: Fix __weakref__ descriptor generation for custom dataclasses.

gh-101566: In zipfile, apply fix for extractall on the underlying zipfile after \ 
being wrapped in Path.

gh-101892: Callable iterators no longer raise SystemError when the callable \ 
object exhausts the iterator but forgets to either return a sentinel value or \ 
raise StopIteration.

gh-97786: Fix potential undefined behaviour in corner cases of \ 
floating-point-to-time conversions.

gh-101517: Fixed bug where bdb looks up the source line with linecache with a \ 
lineno=None, which causes it to fail with an unhandled exception.

gh-101673: Fix a pdb bug where ll clears the changes to local variables.

gh-96931: Fix incorrect results from ssl.SSLSocket.shared_ciphers()

gh-88233: Correctly preserve “extra” fields in zipfile regardless of their \ 
ordering relative to a zip64 “extra.”

gh-96127: inspect.signature was raising TypeError on call with mock objects. Now \ 
it correctly returns (*args, **kwargs) as infered signature.

gh-95495: When built against OpenSSL 3.0, the ssl module had a bug where it \ 
reported unauthenticated EOFs (i.e. without close_notify) as a clean TLS-level \ 
EOF. It now raises SSLEOFError, matching the behavior in previous versions of \ 
OpenSSL. The options attribute on SSLContext also no longer includes \ 
OP_IGNORE_UNEXPECTED_EOF by default. This option may be set to specify the \ 
previous OpenSSL 3.0 behavior.

gh-94440: Fix a concurrent.futures.process bug where ProcessPoolExecutor \ 
shutdown could hang after a future has been quickly submitted and canceled.

Documentation

gh-103112: Add docstring to http.client.HTTPResponse.read() to fix pydoc output.
gh-85417: Update cmath documentation to clarify behaviour on branch cuts.
gh-97725: Fix asyncio.Task.print_stack() description for file=None. Patch by \ 
Oleg Iarygin.

Tests

gh-102980: Improve test coverage on pdb.
gh-102537: Adjust the error handling strategy in \ 
test_zoneinfo.TzPathTest.python_tzpath_context. Patch by Paul Ganssle.
gh-89792: test_tools now copies up to 10x less source data to a temporary \ 
directory during the freeze test by ignoring git metadata and other artifacts. \ 
It also limits its python build parallelism based on os.cpu_count instead of \ 
hard coding it as 8 cores.
gh-101377: Improved test_locale_calendar_formatweekday of calendar.

Build

gh-102711: Fix -Wstrict-prototypes compiler warnings.

Windows

gh-101849: Ensures installer will correctly upgrade existing py.exe launcher \ 
installs.
gh-101763: Updates copy of libffi bundled with Windows installs to 3.4.4.
gh-101759: Update Windows installer to SQLite 3.40.1.
gh-101614: Correctly handle extensions built against debug binaries that \ 
reference python3_d.dll.

macOS

gh-103207: Add instructions to the macOS installer welcome display on how to \ 
workaround the macOS 13 Ventura “The installer encountered an error” \ 
failure.
gh-101759: Update macOS installer to SQLite 3.40.1.

Log message:
python311: clean up some pkglint

Log message:
python311: regen distinfo