Log message:
python311 py311-html-docs: updated to 3.11.11

Python 3.11.11

Tools/Demos

gh-123418: Update GitHub CI workflows to use OpenSSL 3.0.15 and multissltests to \ 
use 3.0.15, 3.1.7, and 3.2.3.

Tests

gh-125041: Re-enable skipped tests for zlib on the s390x architecture: only skip \ 
checks of the compressed bytes, which can be different between zlib’s software \ 
implementation and the hardware-accelerated implementation.

Security

gh-126623: Upgrade libexpat to 2.6.4
gh-122792: Changed IPv4-mapped ipaddress.IPv6Address to consistently use the \ 
mapped IPv4 address value for deciding properties. Properties which have their \ 
behavior fixed are is_multicast, is_reserved, is_link_local, is_global, and \ 
is_unspecified.

Library

gh-124651: Properly quote template strings in venv activation scripts.

Log message:
python311 py311-html-docs: updated to 3.11.9

Python 3.11.9 final
Release date: 2024-04-02

Security

gh-115398: Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) \ 
by adding five new methods:
xml.etree.ElementTree.XMLParser.flush()
xml.etree.ElementTree.XMLPullParser.flush()
xml.parsers.expat.xmlparser.GetReparseDeferralEnabled()
xml.parsers.expat.xmlparser.SetReparseDeferralEnabled()
xml.sax.expatreader.ExpatParser.flush()
gh-115399: Update bundled libexpat to 2.6.0
gh-115243: Fix possible crashes in collections.deque.index() when the deque is \ 
concurrently modified.
gh-114572: ssl.SSLContext.cert_store_stats() and ssl.SSLContext.get_ca_certs() \ 
now correctly lock access to the certificate store, when the ssl.SSLContext is \ 
shared across multiple threads.

Core and Builtins

gh-116296: Fix possible refleak in object.__reduce__() internal error handling.
gh-116034: Fix location of the error on a failed assertion.
gh-115823: Properly calculate error ranges in the parser when raising \ 
SyntaxError exceptions caused by invalid byte sequences. Patch by Pablo Galindo
gh-112087: For an empty reverse iterator for list will be reduced to reversed(). \ 
Patch by Donghee Na.
gh-115011: Setters for members with an unsigned integer type now support the \ 
same range of valid values for objects that has a __index__() method as for int.
gh-96497: Fix incorrect resolution of mangled class variables used in assignment \ 
expressions in comprehensions.

Library

gh-117310: Fixed an unlikely early & extra Py_DECREF triggered crash in ssl \ 
when creating a new _ssl._SSLContext if CPython was built implausibly such that \ 
the default cipher list is empty or the SSL library it was linked against \ 
reports a failure from its C SSL_CTX_set_cipher_list() API.

gh-117178: Fix regression in lazy loading of self-referential modules, \ 
introduced in gh-114781.

gh-117084: Fix zipfile extraction for directory entries with the name containing \ 
backslashes on Windows.

gh-117110: Fix a bug that prevents subclasses of typing.Any to be instantiated \ 
with arguments. Patch by Chris Fu.

gh-90872: On Windows, subprocess.Popen.wait() no longer calls \ 
WaitForSingleObject() with a negative timeout: pass 0 ms if the timeout is \ 
negative. Patch by Victor Stinner.

gh-116957: configparser: Don’t leave ConfigParser values in an invalid state \ 
(stored as a list instead of a str) after an earlier read raised \ 
DuplicateSectionError or DuplicateOptionError.

gh-90095: Ignore empty lines and comments in .pdbrc

gh-116764: Restore support of None and other false values in urllib.parse \ 
functions parse_qs() and parse_qsl(). Also, they now raise a TypeError for \ 
non-zero integers and non-empty sequences.

gh-116811: In PathFinder.invalidate_caches, delegate to \ 
MetadataPathFinder.invalidate_caches.

gh-116600: Fix repr() for global Flag members.

gh-116484: Change automatically generated tkinter.Checkbutton widget names to \ 
avoid collisions with automatically generated tkinter.ttk.Checkbutton widget \ 
names within the same parent widget.

gh-116401: Fix blocking os.fwalk() and shutil.rmtree() on opening named pipe.

gh-116143: Fix a race in pydoc _start_server, eliminating a window in which \ 
_start_server can return a thread that is “serving” but without a docserver \ 
set.

gh-116325: typing: raise SyntaxError instead of AttributeError on forward \ 
references as empty strings.

gh-90535: Fix support of interval values > 1 in \ 
logging.TimedRotatingFileHandler for when='MIDNIGHT' and when='Wx'.

gh-115978: Disable preadv(), readv(), pwritev(), and writev() on WASI.

Under wasmtime for WASI 0.2, these functions don’t pass test_posix \ 
(https://github.com/bytecodealliance/wasmtime/issues/7830).

gh-88352: Fix the computation of the next rollover time in the \ 
logging.TimedRotatingFileHandler handler. computeRollover() now always returns a \ 
timestamp larger than the specified time and works correctly during the DST \ 
change. doRollover() no longer overwrite the already rolled over file, saving \ 
from data loss when run at midnight or during repeated time at the DST change.

gh-87115: Set __main__.__spec__ to None when running a script with pdb

gh-76511: Fix UnicodeEncodeError in email.Message.as_string() that results when \ 
a message that claims to be in the ascii character set actually has non-ascii \ 
characters. Non-ascii characters are now replaced with the U+FFFD replacement \ 
character, like in the replace error handler.

gh-75988: Fixed unittest.mock.create_autospec() to pass the call through to the \ 
wrapped object to return the real result.

gh-115881: Fix issue where ast.parse() would incorrectly flag conditional \ 
context managers (such as with (x() if y else z()): ...) as invalid syntax if \ 
feature_version=(3, 8) was passed. This reverts changes to the grammar made as \ 
part of gh-94949.

gh-115886: Fix silent truncation of the name with an embedded null character in \ 
multiprocessing.shared_memory.SharedMemory.

gh-115809: Improve algorithm for computing which rolled-over log files to delete \ 
in logging.TimedRotatingFileHandler. It is now reliable for handlers without \ 
namer and with arbitrary deterministic namer that leaves the datetime part in \ 
the file name unmodified.

gh-74668: urllib.parse functions parse_qs() and parse_qsl() now support bytes \ 
arguments containing raw and percent-encoded non-ASCII data.

gh-67044: csv.writer() now always quotes or escapes '\r' and '\n', regardless of \ 
lineterminator value.

gh-115712: csv.writer() now quotes empty fields if delimiter is a space and \ 
skipinitialspace is true and raises exception if quoting is not possible.

gh-115618: Fix improper decreasing the reference count for None argument in \ 
property methods getter(), setter() and deleter().

gh-115570: A DeprecationWarning is no longer omitted on access to the __doc__ \ 
attributes of the deprecated typing.io and typing.re pseudo-modules.

gh-112006: Fix inspect.unwrap() for types with the __wrapper__ data descriptor.

gh-101293: Support callables with the __call__() method and types with __new__() \ 
and __init__() methods set to class methods, static methods, bound methods, \ 
partial functions, and other types of methods and descriptors in \ 
inspect.Signature.from_callable().

gh-115392: Fix a bug in doctest where incorrect line numbers would be reported \ 
for decorated functions.

gh-114563: Fix several format() bugs when using the C implementation of Decimal: \ 
* memory leak in some rare cases when using the z format option (coerce negative \ 
0) * incorrect output when applying the z format option to type F (fixed-point \ 
with capital NAN / INF) * incorrect output when applying the # format option \ 
(alternate form)

gh-115197: urllib.request no longer resolves the hostname before checking it \ 
against the system’s proxy bypass list on macOS and Windows.

gh-115198: Fix support of Docutils >= 0.19 in distutils.

gh-115165: Most exceptions are now ignored when attempting to set the \ 
__orig_class__ attribute on objects returned when calling typing generic aliases \ 
(including generic aliases created using typing.Annotated). Previously only \ 
AttributeError was ignored. Patch by Dave Shawley.

gh-115133: Fix tests for XMLPullParser with Expat 2.6.0.

gh-115059: io.BufferedRandom.read1() now flushes the underlying write buffer.

gh-79382: Trailing ** no longer allows to match files and non-existing paths in \ 
recursive glob().

gh-114763: Protect modules loaded with importlib.util.LazyLoader from race \ 
conditions when multiple threads try to access attributes before the loading is \ 
complete.

gh-97959: Fix rendering class methods, bound methods, method and function \ 
aliases in pydoc. Class methods no longer have “method of builtins.type \ 
instance” note. Corresponding notes are now added for class and unbound \ 
methods. Method and function aliases now have references to the module or the \ 
class where the origin was defined if it differs from the current. Bound methods \ 
are now listed in the static methods section. Methods of builtin classes are now \ 
supported as well as methods of Python classes.

gh-112281: Allow creating union of types for typing.Annotated with unhashable \ 
metadata.

gh-111775: Fix importlib.resources.simple.ResourceHandle.open() for text mode, \ 
added missed stream argument.

gh-90095: Make .pdbrc and -c work with any valid pdb commands.

gh-107155: Fix incorrect output of help(x) where x is a lambda function, which \ 
has an __annotations__ dictionary attribute with a "return" key.

gh-105866: Fixed _get_slots bug which caused error when defining dataclasses \ 
with slots and a weakref_slot.

gh-60346: Fix ArgumentParser inconsistent with parse_known_args.

gh-100985: Update HTTPSConnection to consistently wrap IPv6 Addresses when using \ 
a proxy.

gh-100884: email: fix misfolding of comma in address-lists over multiple lines \ 
in combination with unicode encoding.

gh-95782: Fix io.BufferedReader.tell(), io.BufferedReader.seek(), \ 
_pyio.BufferedReader.tell(), io.BufferedRandom.tell(), io.BufferedRandom.seek() \ 
and _pyio.BufferedRandom.tell() being able to return negative offsets.

gh-96310: Fix a traceback in argparse when all options in a mutually exclusive \ 
group are suppressed.

gh-93205: Fixed a bug in logging.handlers.TimedRotatingFileHandler where \ 
multiple rotating handler instances pointing to files with the same name but \ 
different extensions would conflict and not delete the correct files.

bpo-44865: Add missing call to localization function in argparse.

bpo-43952: Fix multiprocessing.connection.Listener.accept() to accept empty \ 
bytes as authkey. Not accepting empty bytes as key causes it to hang \ 
indefinitely.

bpo-42125: linecache: get module name from __spec__ if available. This allows \ 
getting source code for the __main__ module when a custom loader is used.

gh-66543: Make mimetypes.guess_type() properly parsing of URLs with only a host \ 
name, URLs containing fragment or query, and filenames with only a UNC \ 
sharepoint on Windows. Based on patch by Dong-hee Na.

bpo-33775: Add ‘default’ and ‘version’ help text for localization in \ 
argparse.

Documentation

gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under “XML \ 
vulnerabilities”.
gh-115233: Fix an example for LoggerAdapter in the Logging Cookbook.

Tests

gh-83434: Disable JUnit XML output (--junit-xml=FILE command line option) in \ 
regrtest when hunting for reference leaks (-R option). Patch by Victor Stinner.
gh-117187: Fix XML tests for vanilla Expat <2.6.0.
gh-115979: Update test_importlib so that it passes under WASI SDK 21.
gh-116307: Added import helper isolated_modules as CleanImport does not remove \ 
modules imported during the context.
gh-115720: Leak tests (-R, --huntrleaks) now show a summary of the number of \ 
leaks found in each iteration.
gh-115122: Add --bisect option to regrtest test runner: run failed tests with \ 
test.bisect_cmd to identify failing tests. Patch by Victor Stinner.
gh-115596: Fix ProgramPriorityTests in test_os permanently changing the process \ 
priority.
gh-115198: Fix test_check_metadata_deprecate in distutils tests with a newer \ 
Docutils.

Build

gh-116313: Get WASI builds to work under wasmtime 18 w/ WASI 0.2/preview2 primitives.
gh-115167: Avoid vendoring vcruntime140_threads.dll when building with Visual \ 
Studio 2022 version 17.8.

Windows

gh-116773: Fix instances of <_overlapped.Overlapped object at 0xXXX> still \ 
has pending operation at deallocation, the process may crash.
gh-91227: Fix the asyncio ProactorEventLoop implementation so that sending a \ 
datagram to an address that is not listening does not prevent receiving any more \ 
datagrams.
gh-115554: The installer now has more strict rules about updating the Python \ 
Launcher for Windows. In general, most users only have a single launcher \ 
installed and will see no difference. When multiple launchers have been \ 
installed, the option to install the launcher is disabled until all but one have \ 
been removed. Downgrading the launcher (which was never allowed) is now more \ 
obviously blocked.
gh-115543: Python Launcher for Windows can now detect Python 3.13 when installed \ 
from the Microsoft Store, and will install Python 3.12 by default when \ 
PYLAUNCHER_ALLOW_INSTALL is set.
gh-115009: Update Windows installer to use SQLite 3.45.1.

IDLE

gh-88516: On macOS show a proxy icon in the title bar of editor windows to match \ 
platform behaviour.

Tools/Demos

gh-113516: Don’t set LDSHARED when building for WASI.

C API

gh-117021: Fix integer overflow in PyLong_AsPid() on non-Windows 64-bit platforms.

Log message:
python311 py311-html-docs: updated to 3.11.8

Python 3.11.8 final

Security
gh-113659: Skip .pth files with names starting with a dot or hidden file attribute.
Core and Builtins
gh-114887: Changed socket type validation in create_datagram_endpoint() to \ 
accept all non-stream sockets. This fixes a regression in compatibility with raw \ 
sockets.

gh-114388: Fix a RuntimeWarning emitted when assign an integer-like value that \ 
is not an instance of int to an attribute that corresponds to a C struct member \ 
of type T_UINT and T_ULONG. Fix a double RuntimeWarning emitted when assign a \ 
negative integer value to an attribute that corresponds to a C struct member of \ 
type T_UINT.

gh-89811: Check for a valid tp_version_tag before performing bytecode \ 
specializations that rely on this value being usable.

gh-113602: Fix an error that was causing the parser to try to overwrite existing \ 
errors and crashing in the process. Patch by Pablo Galindo

gh-113566: Fix a 3.11-specific crash when the repr of a Future is requested \ 
after the module has already been garbage-collected.

gh-106905: Use per AST-parser state rather than global state to track recursion \ 
depth within the AST parser to prevent potential race condition due to \ 
simultaneous parsing.

The issue primarily showed up in 3.11 by multithreaded users of ast.parse(). In \ 
3.12 a change to when garbage collection can be triggered prevented the race \ 
condition from occurring.

gh-112716: Fix SystemError in the import statement and in __reduce__() methods \ 
of builtin types when __builtins__ is not a dict.

gh-105967: Workaround a bug in Apple’s macOS platform zlib library where \ 
zlib.crc32() and binascii.crc32() could produce incorrect results on \ 
multi-gigabyte inputs. Including when using zipfile on zips containing large \ 
data.

gh-94606: Fix UnicodeEncodeError when email.message.get_payload() reads a \ 
message with a Unicode surrogate character and the message content is not \ 
well-formed for surrogateescape encoding. Patch by Sidney Markowitz.
Library
gh-114965: Update bundled pip to 24.0
gh-114959: tarfile no longer ignores errors when trying to extract a directory \ 
on top of a file.
gh-109475: Fix support of explicit option value “–” in argparse (e.g. \ 
--option=--).
gh-110190: Fix ctypes structs with array on Windows ARM64 platform by setting \ 
MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo
gh-113280: Fix a leak of open socket in rare cases when error occurred in \ 
ssl.SSLSocket creation.
gh-77749: email.policy.EmailPolicy.fold() now always encodes non-ASCII \ 
characters in headers if utf8 is false.
gh-114492: Make the result of termios.tcgetattr() reproducible on Alpine Linux. \ 
Previously it could leave a random garbage in some fields.
gh-75128: Ignore an OSError in asyncio.BaseEventLoop.create_server() when IPv6 \ 
is available but the interface cannot actually support it.
gh-114257: Dismiss the FileNotFound error in ctypes.util.find_library() and just \ 
return None on Linux.
gh-101438: Avoid reference cycle in ElementTree.iterparse. The iterator returned \ 
by ElementTree.iterparse may hold on to a file descriptor. The reference cycle \ 
prevented prompt clean-up of the file descriptor if the returned iterator was \ 
not exhausted.
gh-104522: OSError raised when run a subprocess now only has filename attribute \ 
set to cwd if the error was caused by a failed attempt to change the current \ 
directory.
gh-109534: Fix a reference leak in asyncio.selector_events.BaseSelectorEventLoop \ 
when SSL handshakes fail. Patch contributed by Jamie Phan.
gh-114077: Fix possible OverflowError in socket.socket.sendfile() when pass \ 
count larger than 2 GiB on 32-bit platform.
gh-114014: Fixed a bug in fractions.Fraction where an invalid string using d in \ 
the decimals part creates a different error compared to other invalid \ 
letters/characters. Patch by Jeremiah Gabriel Pascual.
gh-113951: Fix the behavior of tag_unbind() methods of tkinter.Text and \ 
tkinter.Canvas classes with three arguments. Previously, widget.tag_unbind(tag, \ 
sequence, funcid) destroyed the current binding for sequence, leaving sequence \ 
unbound, and deleted the funcid command. Now it removes only funcid from the \ 
binding for sequence, keeping other commands, and deletes the funcid command. It \ 
leaves sequence unbound only if funcid was the last bound command.
gh-113877: Fix tkinter method winfo_pathname() on 64-bit Windows.
gh-113781: Silence unraisable AttributeError when warnings are emitted during \ 
Python finalization.
gh-113594: Fix UnicodeEncodeError in email when re-fold lines that contain \ 
unknown-8bit encoded part followed by non-unknown-8bit encoded part.
gh-113538: In asyncio.StreamReaderProtocol.connection_made(), there is callback \ 
that logs an error if the task wrapping the “connected callback” fails. This \ 
callback would itself fail if the task was cancelled. Prevent this by checking \ 
whether the task was cancelled first. If so, close the transport but don’t log \ 
an error.
gh-85567: Fix resource warnings for unclosed files in pickle and pickletools \ 
command line interfaces.
gh-101225: Increase the backlog for multiprocessing.connection.Listener objects \ 
created by multiprocessing.manager and multiprocessing.resource_sharer to \ 
significantly reduce the risk of getting a connection refused error when \ 
creating a multiprocessing.connection.Connection to them.
gh-113543: Make sure that webbrowser.MacOSXOSAScript sends webbrowser.open audit \ 
event.
gh-113028: When a second reference to a string appears in the input to pickle, \ 
and the Python implementation is in use, we are guaranteed that a single copy \ 
gets pickled and a single object is shared when reloaded. Previously, in \ 
protocol 0, when a string contained certain characters (e.g. newline) it \ 
resulted in duplicate objects.
gh-113421: Fix multiprocessing logger for %(filename)s.
gh-113358: Fix rendering tracebacks for exceptions with a broken __getattr__.
gh-113214: Fix an AttributeError during asyncio SSL protocol aborts in \ 
SSL-over-SSL scenarios.
gh-113246: Update bundled pip to 23.3.2.
gh-113199: Make http.client.HTTPResponse.read1 and \ 
http.client.HTTPResponse.readline close IO after reading all data when content \ 
length is known. Patch by Illia Volochii.
gh-113188: Fix shutil.copymode() and shutil.copystat() on Windows. Previously \ 
they worked differenly if dst is a symbolic link: they modified the permission \ 
bits of dst itself rather than the file it points to if follow_symlinks is true \ 
or src is not a symbolic link, and did not modify the permission bits if \ 
follow_symlinks is false and src is a symbolic link.
gh-61648: Detect line numbers of properties in doctests.
gh-112559: signal.signal() and signal.getsignal() no longer call repr on \ 
callable handlers. asyncio.run() and asyncio.Runner.run() no longer call repr on \ 
the task results. Patch by Yilei Yang.
gh-110190: Fix ctypes structs with array on PPC64LE platform by setting \ 
MAX_STRUCT_SIZE to 64 in stgdict. Patch by Diego Russo.
gh-79429: Ignore FileNotFoundError when remove a temporary directory in the \ 
multiprocessing finalizer.
gh-79325: Fix an infinite recursion error in tempfile.TemporaryDirectory() \ 
cleanup on Windows.
gh-110190: Fix ctypes structs with array on Arm platform by setting \ 
MAX_STRUCT_SIZE to 32 in stgdict. Patch by Diego Russo.
gh-81194: Fix a crash in socket.if_indextoname() with specific value (UINT_MAX). \ 
Fix an integer overflow in socket.if_indextoname() on 64-bit non-Windows \ 
platforms.
gh-75666: Fix the behavior of tkinter widget’s unbind() method with two \ 
arguments. Previously, widget.unbind(sequence, funcid) destroyed the current \ 
binding for sequence, leaving sequence unbound, and deleted the funcid command. \ 
Now it removes only funcid from the binding for sequence, keeping other \ 
commands, and deletes the funcid command. It leaves sequence unbound only if \ 
funcid was the last bound command.
gh-110345: Show the Tcl/Tk patchlevel (rather than version) in tkinter._test().
gh-109858: Protect zipfile from “quoted-overlap” zipbomb. It now raises \ 
BadZipFile when try to read an entry that overlaps with other entry or central \ 
directory.
gh-38807: Fix race condition in trace. Instead of checking if a directory exists \ 
and creating it, directly call os.makedirs() with the kwarg exist_ok=True.
gh-75705: Set unixfrom envelope in mailbox.mbox and mailbox.MMDF.
gh-105102: Allow ctypes.Union to be nested in ctypes.Structure when the system \ 
endianness is the opposite of the classes.
gh-104282: Fix null pointer dereference in lzma._decode_filter_properties() due \ 
to improper handling of BCJ filters with properties of zero length. Patch by \ 
Radislav Chugunov.
gh-102512: When os.fork() is called from a foreign thread (aka _DummyThread), \ 
the type of the thread in a child process is changed to _MainThread. Also \ 
changed its name and daemonic status, it can be now joined.
gh-91133: Fix a bug in tempfile.TemporaryDirectory cleanup, which now no longer \ 
dereferences symlinks when working around file system permission errors.
bpo-43153: On Windows, tempfile.TemporaryDirectory previously masked a \ 
PermissionError with NotADirectoryError during directory cleanup. It now \ 
correctly raises PermissionError if errors are not ignored. Patch by Andrei \ 
Kulakov and Ken Jin.
bpo-35332: The shutil.rmtree() function now ignores errors when calling \ 
os.close() when ignore_errors is True, and os.close() no longer retried after \ 
error.
bpo-35928: io.TextIOWrapper now correctly handles the decoding buffer after \ 
read() and write().
bpo-26791: shutil.move() now moves a symlink into a directory when that \ 
directory is the target of the symlink. This provides the same behavior as the \ 
mv shell command. The previous behavior raised an exception. Patch by Jeffrey \ 
Kintscher.
bpo-36959: Fix some error messages for invalid ISO format string combinations in \ 
strptime() that referred to directives not contained in the format string. Patch \ 
by Gordon P. Hemsley.
bpo-18060: Fixed a class inheritance issue that can cause segfaults when \ 
deriving two or more levels of subclasses from a base class of Structure or \ 
Union.
Documentation
gh-110746: Improved markup for valid options/values for methods \ 
ttk.treeview.column and ttk.treeview.heading, and for Layouts.
gh-95649: Document that the asyncio module contains code taken from v0.16.0 of \ 
the uvloop project, as well as the required MIT licensing information.
Tests
gh-109980: Fix test_tarfile_vs_tar in test_shutil for macOS, where system tar \ 
can include more information in the archive than shutil.make_archive.
gh-112769: The tests now correctly compare zlib version when \ 
zlib.ZLIB_RUNTIME_VERSION contains non-integer suffixes. For example zlib-ng \ 
defines the version as 1.3.0.zlib-ng.
gh-105089: Fix \ 
test.test_zipfile.test_core.TestWithDirectory.test_create_directory_with_write \ 
test in AIX by doing a bitwise AND of 0xFFFF on mode , so that it will be in \ 
sync with zinfo.external_attr
bpo-40648: Test modes that file can get with chmod() on Windows.
Build
gh-101778: Fix build error when there’s a dangling symlink in the directory \ 
containing ffi.h.
gh-112305: Fixed the check-clean-src step performed on out of tree builds to \ 
detect errant $(srcdir)/Python/frozen_modules/*.h files and recommend \ 
appropriate source tree cleanup steps to get a working build again.
bpo-11102: The os.major(), os.makedev(), and os.minor() functions are now \ 
available on HP-UX v3.
bpo-36351: Do not set ipv6type when cross-compiling.
Windows
gh-109991: Update Windows build to use OpenSSL 3.0.13.
gh-111239: Update Windows builds to use zlib v1.3.1.
gh-100107: The py.exe launcher will no longer attempt to run the Microsoft Store \ 
redirector when launching a script containing a /usr/bin/env shebang
gh-114096: Process privileges that are activated for creating directory \ 
junctions are now restored afterwards, avoiding behaviour changes in other parts \ 
of the program.
gh-113009: multiprocessing: On Windows, fix a race condition in \ 
Process.terminate(): no longer set the returncode attribute to always call \ 
WaitForSingleObject() in Process.wait(). Previously, sometimes the process was \ 
still running after TerminateProcess() even if GetExitCodeProcess() is not \ 
STILL_ACTIVE. Patch by Victor Stinner.
gh-87868: Correctly sort and remove duplicate environment variables in \ 
_winapi.CreateProcess().
bpo-37308: Fix mojibake in mmap.mmap when using a non-ASCII tagname argument on \ 
Windows.
macOS
gh-115009: Update macOS installer to use SQLite 3.45.1.
gh-109991: Update macOS installer to use OpenSSL 3.0.13.
gh-74573: Document that dbm.ndbm can silently corrupt DBM files on updates when \ 
exceeding undocumented platform limits, and can crash (segmentation fault) when \ 
reading such a corrupted file. (FB8919203)
gh-65701: The freeze tool doesn’t work with framework builds of Python. \ 
Document this and bail out early when running the tool with such a build.
gh-102362: Make sure the result of sysconfig.get_plaform() includes at least a \ 
major and minor versions, even if MACOSX_DEPLOYMENT_TARGET is set to only a \ 
major version during build to match the format expected by pip.
gh-110017: Disable a signal handling stress test on macOS due to a bug in macOS \ 
(FB13453490).
gh-109981: Use /dev/fd on macOS to determine the number of open files in \ 
test.support.os_helper.fd_count to avoid a crash with “guarded” file \ 
descriptors when probing for open files.
IDLE
gh-96905: In idlelib code, stop redefining built-ins ‘dict’ and ‘object’.
gh-72284: Improve the lists of features, editor key bindings, and shell key \ 
bingings in the IDLE doc.
gh-113903: Fix rare failure of test.test_idle, in test_configdialog.
gh-113729: Fix the “Help -> IDLE Doc” menu bug in 3.11.7 and 3.12.1.
gh-113269: Fix test_editor hang on macOS Catalina.
gh-112898: Fix processing unsaved files when quitting IDLE on macOS.
gh-103820: Revise IDLE bindings so that events from mouse button 4/5 on non-X11 \ 
windowing systems (i.e. Win32 and Aqua) are not mistaken for scrolling.
bpo-13586: Enter the selected text when opening the “Replace” dialog.
Tools/Demos
gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.13 and multissltests to \ 
use 1.1.1w, 3.0.13, 3.1.5, and 3.2.1.
gh-115015: Fix a bug in Argument Clinic that generated incorrect code for \ 
methods with no parameters that use the METH_METHOD | METH_FASTCALL | \ 
METH_KEYWORDS calling convention. Only the positional parameter count was \ 
checked; any keyword argument passed would be silently accepted.

Log message:
python311 py311-html-docs: updated to 3.11.7

Python 3.11.7 final

Core and Builtins

gh-112625: Fixes a bug where a bytearray object could be cleared while iterating \ 
over an argument in the bytearray.join() method that could result in reading \ 
memory after it was freed.
gh-112388: Fix an error that was causing the parser to try to overwrite \ 
tokenizer errors. Patch by pablo Galindo
gh-112387: Fix error positions for decoded strings with backwards tokenize \ 
errors. Patch by Pablo Galindo
gh-112266: Change docstrings of __dict__ and __weakref__.
gh-109181: Speed up Traceback object creation by lazily compute the line number. \ 
Patch by Pablo Galindo
gh-102388: Fix a bug where iso2022_jp_3 and iso2022_jp_2004 codecs read out of bounds
gh-111366: Fix an issue in the codeop that was causing SyntaxError exceptions \ 
raised in the presence of invalid syntax to not contain precise error messages. \ 
Patch by Pablo Galindo
gh-111380: Fix a bug that was causing SyntaxWarning to appear twice when parsing \ 
if invalid syntax is encountered later. Patch by Pablo galindo
gh-88116: Traceback location ranges involving wide unicode characters (like \ 
emoji and asian characters) now are properly highlighted. Patch by Batuhan \ 
Taskaya and Pablo Galindo.
gh-94438: Fix a regression that prevented jumping across is None and is not None \ 
when debugging. Patch by Savannah Ostrowski.
gh-110696: Fix incorrect error message for invalid argument unpacking. Patch by \ 
Pablo Galindo
gh-110237: Fix missing error checks for calls to PyList_Append in _PyEval_MatchClass.
gh-109216: Fix possible memory leak in BUILD_MAP.
Library
gh-112618: Fix a caching bug relating to typing.Annotated. Annotated[str, True] \ 
is no longer identical to Annotated[str, 1].
gh-112509: Fix edge cases that could cause a key to be present in both the \ 
__required_keys__ and __optional_keys__ attributes of a typing.TypedDict. Patch \ 
by Jelle Zijlstra.
gh-94722: Fix bug where comparison between instances of DocTest fails if one of \ 
them has None as its lineno.
gh-112105: Make readline.set_completer_delims() work with libedit
gh-111942: Fix SystemError in the TextIOWrapper constructor with non-encodable \ 
“errors” argument in non-debug mode.
gh-109538: Issue warning message instead of having RuntimeError be displayed \ 
when event loop has already been closed at StreamWriter.__del__().
gh-111942: Fix crashes in io.TextIOWrapper.reconfigure() when pass invalid \ 
arguments, e.g. non-string encoding.
gh-111804: Remove posix.fallocate() under WASI as the underlying \ 
posix_fallocate() is not available in WASI preview2.
gh-111841: Fix truncating arguments on an embedded null character in os.putenv() \ 
and os.unsetenv() on Windows.
gh-111541: Fix doctest for SyntaxError not-builtin subclasses.
gh-110894: Call loop exception handler for exceptions in client_connected_cb of \ 
asyncio.start_server() so that applications can handle it. Patch by Kumar \ 
Aditya.
gh-111531: Fix reference leaks in bind_class() and bind_all() methods of tkinter \ 
widgets.
gh-111356: Added io.text_encoding(), io.DEFAULT_BUFFER_SIZE, and \ 
io.IncrementalNewlineDecoder to io.__all__.
gh-68166: Remove mention of not supported “vsapi” element type in \ 
tkinter.ttk.Style.element_create(). Add tests for element_create() and other \ 
ttk.Style methods. Add examples for element_create() in the documentation.
gh-111251: Fix _blake2 not checking for errors when initializing.
gh-111174: Fix crash in io.BytesIO.getbuffer() called repeatedly for empty BytesIO.
gh-111187: Postpone removal version for locale.getdefaultlocale() to Python 3.15.
gh-111159: Fix doctest output comparison for exceptions with notes.
gh-110910: Fix invalid state handling in asyncio.TaskGroup and asyncio.Timeout. \ 
They now raise proper RuntimeError if they are improperly used and are left in \ 
consistent state after this.
gh-111092: Make turtledemo run without default root enabled.
gh-110590: Fix a bug in _sre.compile() where TypeError would be overwritten by \ 
OverflowError when the code argument was a list of non-ints.
gh-65052: Prevent pdb from crashing when trying to display undisplayable objects
gh-110519: Deprecation warning about non-integer number in gettext now alwais \ 
refers to the line in the user code where gettext function or method is used. \ 
Previously it could refer to a line in gettext code.
gh-110378: contextmanager() and asynccontextmanager() context managers now close \ 
an invalid underlying generator object that yields more then one value.
gh-110365: Fix termios.tcsetattr() bug that was overwritting existing errors \ 
during parsing integers from term list.
gh-110196: Add __reduce__ method to IPv6Address in order to keep scope_id
gh-109747: Improve errors for unsupported look-behind patterns. Now re.error is \ 
raised instead of OverflowError or RuntimeError for too large width of \ 
look-behind pattern.
gh-109786: Fix possible reference leaks and crash when re-enter the __next__() \ 
method of itertools.pairwise.
gh-108791: Improved error handling in pdb command line interface, making it \ 
produce more concise error messages.
gh-73561: Omit the interface scope from an IPv6 address when used as Host header \ 
by http.client.
gh-86826: zipinfo now supports the full range of values in the TZ string \ 
determined by RFC 8536 and detects all invalid formats. Both Python and C \ 
implementations now raise exceptions of the same type on invalid data.
bpo-41422: Fixed memory leaks of pickle.Pickler and pickle.Unpickler involving \ 
cyclic references via the internal memo mapping.
bpo-40262: The ssl.SSLSocket.recv_into() method no longer requires the buffer \ 
argument to implement __len__ and supports buffers with arbitrary item size.
bpo-35191: Fix unexpected integer truncation in socket.setblocking() which \ 
caused it to interpret multiples of 2**32 as False.

Documentation

gh-108826: dis module command-line interface is now mentioned in documentation.

Tests

gh-110367: Make regrtest --verbose3 option compatible with --huntrleaks -jN \ 
options. The ./python -m test -j1 -R 3:3 --verbose3 command now works as \ 
expected. Patch by Victor Stinner.
gh-111309: distutils tests can now be run via unittest.
gh-111165: Remove no longer used functions run_unittest() and run_doctest() and \ 
class BasicTestRunner from the test.support module.
gh-110932: Fix regrtest if the SOURCE_DATE_EPOCH environment variable is \ 
defined: use the variable value as the random seed. Patch by Victor Stinner.
gh-110995: test_gdb: Fix detection of gdb built without Python scripting \ 
support. Patch by Victor Stinner.
gh-110918: Test case matching patterns specified by options --match, --ignore, \ 
--matchfile and --ignorefile are now tested in the order of specification, and \ 
the last match determines whether the test case be run or ignored.
gh-110647: Fix test_stress_modifying_handlers() of test_signal. Patch by Victor \ 
Stinner.
gh-103053: Fix test_tools.test_freeze on FreeBSD: run “make distclean” \ 
instead of “make clean” in the copied source directory to remove also the \ 
“python” program. Patch by Victor Stinner.
gh-110167: Fix a deadlock in test_socket when server fails with a timeout but \ 
the client is still running in its thread. Don’t hold a lock to call cleanup \ 
functions in doCleanups(). One of the cleanup function waits until the client \ 
completes, whereas the client could deadlock if it called addCleanup() in such \ 
situation. Patch by Victor Stinner.
gh-110388: Add tests for tty.
gh-81002: Add tests for termios.
gh-110267: Add tests for pickling and copying PyStructSequence objects. Patched \ 
by Xuehai Pan.
gh-109974: Fix race conditions in test_threading lock tests. Wait until a \ 
condition is met rather than using time.sleep() with a hardcoded number of \ 
seconds. Patch by Victor Stinner.
gh-109972: Split test_gdb.py file into a test_gdb package made of multiple \ 
tests, so tests can now be run in parallel. Patch by Victor Stinner.
gh-104736: Fix test_gdb on Python built with LLVM clang 16 on Linux ppc64le (ex: \ 
Fedora 38). Search patterns in gdb “bt” command output to detect when gdb \ 
fails to retrieve the traceback. For example, skip a test if Backtrace stopped: \ 
frame did not save the PC is found. Patch by Victor Stinner.
gh-108927: Fixed order dependence in running tests in the same process when a \ 
test that has submodules (e.g. test_importlib) follows a test that imports its \ 
submodule (e.g. test_importlib.util) and precedes a test (e.g. test_unittest or \ 
test_compileall) that uses that submodule.

Build

gh-103053: “make check-clean-src” now also checks if the “python” \ 
program is found in the source directory: fail with an error if it does exist. \ 
Patch by Victor Stinner.
gh-109191: Fix compile error when building with recent versions of libedit.

Windows

gh-110913: WindowsConsoleIO now correctly chunks large buffers without splitting \ 
up UTF-8 sequences.
gh-110437: Allows overriding the source of VC redistributables so that releases \ 
can be guaranteed to never downgrade between updates.
gh-109286: Update Windows installer to use SQLite 3.43.1.

macOS

gh-110950: Update macOS installer to include an upstream Tcl/Tk fix for the \ 
Secure coding is not enabled for restorable state! warning encountered in \ 
Tkinter on macOS 14 Sonoma.
gh-111015: Ensure that IDLE.app and Python Launcher.app are installed with \ 
appropriate permissions on macOS builds.
gh-109286: Update macOS installer to use SQLite 3.43.1.
gh-71383: Update macOS installer to include an upstream Tcl/Tk fix for the \ 
ttk::ThemeChanged error encountered in Tkinter.
gh-92603: Update macOS installer to include a fix accepted by upstream Tcl/Tk \ 
for a crash encountered after the first tkinter.Tk() instance is destroyed.
gh-99834: Update macOS installer to Tcl/Tk 8.6.13.

IDLE

bpo-35668: Add docstrings to the IDLE debugger module. Fix two bugs: initialize \ 
Idb.botframe (should be in Bdb); in Idb.in_rpc_code, check whether prev_frame is \ 
None before trying to use it. Greatly expand test_debugger.

C API

gh-112438: Fix support of format units “es”, “et”, “es#”, and \ 
“et#” in nested tuples in PyArg_ParseTuple()-like functions.
gh-109521: PyImport_GetImporter() now sets RuntimeError if it fails to get \ 
sys.path_hooks or sys.path_importer_cache or they are not list and dict \ 
correspondingly. Previously it could return NULL without setting error in \ 
obscure cases, crash or raise SystemError if these attributes have wrong type.

Log message:
python311 py311-html-docs: updated to 3.11.6

Python 3.11.6 final

Core and Builtins
gh-109351: Fix crash when compiling an invalid AST involving a named (walrus) \ 
expression.

gh-109207: Fix a SystemError in __repr__ of symtable entry object.

gh-109179: Fix bug where the C traceback display drops notes from SyntaxError.

gh-88943: Improve syntax error for non-ASCII character that follows a numerical \ 
literal. It now points on the invalid non-ASCII character, not on the valid \ 
numerical literal.

gh-108959: Fix caret placement for error locations for subscript and binary \ 
operations that involve non-semantic parentheses and spaces. Patch by Pablo \ 
Galindo

gh-108520: Fix multiprocessing.synchronize.SemLock.__setstate__() to properly \ 
initialize multiprocessing.synchronize.SemLock._is_fork_ctx. This fixes a \ 
regression when passing a SemLock accross nested processes.

Rename multiprocessing.synchronize.SemLock.is_fork_ctx to \ 
multiprocessing.synchronize.SemLock._is_fork_ctx to avoid exposing it as public \ 
API.

Library
gh-110036: On Windows, multiprocessing Popen.terminate() now catchs \ 
PermissionError and get the process exit code. If the process is still running, \ 
raise again the PermissionError. Otherwise, the process terminated as expected: \ 
store its exit code. Patch by Victor Stinner.
gh-110038: Fixed an issue that caused KqueueSelector.select() to not return all \ 
the ready events in some cases when a file descriptor is registered for both \ 
read and write.
gh-109631: re functions such as re.findall(), re.split(), re.search() and \ 
re.sub() which perform short repeated matches can now be interrupted by user.
gh-109593: Avoid deadlocking on a reentrant call to the multiprocessing resource \ 
tracker. Such a reentrant call, though unlikely, can happen if a GC pass invokes \ 
the finalizer for a multiprocessing object such as SemLock.
gh-109613: Fix os.stat() and os.DirEntry.stat(): check for exceptions. \ 
Previously, on Python built in debug mode, these functions could trigger a fatal \ 
Python error (and abort the process) when a function succeeded with an exception \ 
set. Patch by Victor Stinner.
gh-109375: The pdb alias command now prevents registering aliases without arguments.
gh-107219: Fix a race condition in concurrent.futures. When a process in the \ 
process pool was terminated abruptly (while the future was running or pending), \ 
close the connection write end. If the call queue is blocked on sending bytes to \ 
a worker process, closing the connection write end interrupts the send, so the \ 
queue can be closed. Patch by Victor Stinner.
gh-50644: Attempts to pickle or create a shallow or deep copy of codecs streams \ 
now raise a TypeError. Previously, copying failed with a RecursionError, while \ 
pickling produced wrong results that eventually caused unpickling to fail with a \ 
RecursionError.
gh-108987: Fix _thread.start_new_thread() race condition. If a thread is created \ 
during Python finalization, the newly spawned thread now exits immediately \ 
instead of trying to access freed memory and lead to a crash. Patch by Victor \ 
Stinner.
gh-108843: Fix an issue in ast.unparse() when unparsing f-strings containing \ 
many quote types.
gh-108682: Enum: raise TypeError if super().__new__() is called from a custom \ 
__new__.
gh-105829: Fix concurrent.futures.ProcessPoolExecutor deadlock
gh-64662: Fix support for virtual tables in sqlite3.Connection.iterdump(). Patch \ 
by Aviv Palivoda.
gh-107913: Fix possible losses of errno and winerror values in OSError \ 
exceptions if they were cleared or modified by the cleanup code before creating \ 
the exception object.
gh-104372: On Linux where subprocess can use the vfork() syscall for faster \ 
spawning, prevent the parent process from blocking other threads by dropping the \ 
GIL while it waits for the vfork’ed child process exec() outcome. This \ 
prevents spawning a binary from a slow filesystem from blocking the rest of the \ 
application.
gh-84867: unittest.TestLoader no longer loads test cases from exact \ 
unittest.TestCase and unittest.FunctionTestCase classes.

Documentation
gh-109209: The minimum Sphinx version required for the documentation is now 4.2.
gh-105052: Update timeit doc to specify that time in seconds is just the default.
gh-102823: Document the return type of x // y when x and y have type float.

Tests
gh-110031: Skip test_threading tests using thread+fork if Python is built with \ 
Address Sanitizer (ASAN). Patch by Victor Stinner.
gh-110088: Fix test_asyncio timeouts: don’t measure the maximum duration, a \ 
test should not measure a CI performance. Only measure the minimum duration when \ 
a task has a timeout or delay. Add CLOCK_RES to test_asyncio.utils. Patch by \ 
Victor Stinner.
gh-110033: Fix test_interprocess_signal() of test_signal. Make sure that the \ 
subprocess.Popen object is deleted before the test raising an exception in a \ 
signal handler. Otherwise, Popen.__del__() can get the exception which is logged \ 
as Exception ignored in: ... and the test fails. Patch by Victor Stinner.
gh-109594: Fix test_timeout() of test_concurrent_futures.test_wait. Remove the \ 
future which may or may not complete depending if it takes longer than the \ 
timeout ot not. Keep the second future which does not complete before wait() \ 
timeout. Patch by Victor Stinner.
gh-109748: Fix test_zippath_from_non_installed_posix() of test_venv: don’t \ 
copy __pycache__/ sub-directories, because they can be modified by other Python \ 
tests running in parallel. Patch by Victor Stinner.
gh-103053: Skip test_freeze_simple_script() of test_tools.test_freeze if Python \ 
is built with ./configure --enable-optimizations, which means with Profile \ 
Guided Optimization (PGO): it just makes the test too slow. The freeze tool is \ 
tested by many other CIs with other (faster) compiler flags. Patch by Victor \ 
Stinner.
gh-109396: Fix test_socket.test_hmac_sha1() in FIPS mode. Use a longer key: FIPS \ 
mode requires at least of at least 112 bits. The previous key was only 32 bits. \ 
Patch by Victor Stinner.
gh-104736: Fix test_gdb on Python built with LLVM clang 16 on Linux ppc64le (ex: \ 
Fedora 38). Search patterns in gdb “bt” command output to detect when gdb \ 
fails to retrieve the traceback. For example, skip a test if Backtrace stopped: \ 
frame did not save the PC is found. Patch by Victor Stinner.
gh-109237: Fix test_site.test_underpth_basic() when the working directory \ 
contains at least one non-ASCII character: encode the ._pth file to UTF-8 and \ 
enable the UTF-8 Mode to use UTF-8 for the child process stdout. Patch by Victor \ 
Stinner.
gh-109230: Fix test_pyexpat.test_exception(): it can now be run from a directory \ 
different than Python source code directory. Before, the test failed in this \ 
case. Skip the test if Modules/pyexpat.c source is not available. Skip also the \ 
test on Python implementations other than CPython. Patch by Victor Stinner.
gh-109015: Fix test_asyncio, test_imaplib and test_socket tests on FreeBSD if \ 
the TCP blackhole is enabled (sysctl net.inet.tcp.blackhole). Skip the few tests \ 
which failed with ETIMEDOUT which such non standard configuration. Currently, \ 
the FreeBSD GCP image enables TCP and UDP blackhole (sysctl \ 
net.inet.tcp.blackhole=2 and sysctl net.inet.udp.blackhole=1). Patch by Victor \ 
Stinner.
gh-91960: Skip test_gdb if gdb is unable to retrieve Python frame objects: if a \ 
frame is <optimized out>. When Python is built with “clang -Og”, gdb \ 
can fail to retrive the frame parameter of _PyEval_EvalFrameDefault(). In this \ 
case, tests like py_bt() are likely to fail. Without getting access to Python \ 
frames, python-gdb.py is mostly clueless on retrieving the Python traceback. \ 
Moreover, test_gdb is no longer skipped on macOS if Python is built with Clang. \ 
Patch by Victor Stinner.
gh-108962: Skip test_tempfile.test_flags() if chflags() fails with “OSError: \ 
[Errno 45] Operation not supported” (ex: on FreeBSD 13). Patch by Victor \ 
Stinner.
gh-89392: Removed support of test_main() function in tests. They now always use \ 
normal unittest test runner.
gh-108851: Fix test_tomllib recursion tests for WASI buildbots: reduce the \ 
recursion limit and compute the maximum nested array/dict depending on the \ 
current available recursion limit. Patch by Victor Stinner.
gh-108851: Add get_recursion_available() and get_recursion_depth() functions to \ 
the test.support module. Patch by Victor Stinner.
gh-108822: regrtest now computes statistics on all tests: successes, failures \ 
and skipped. test_netrc, test_pep646_syntax and test_xml_etree now return \ 
results in their test_main() function. Patch by Victor Stinner and Alex Waygood.
gh-108388: Convert test_concurrent_futures to a package of 7 sub-tests. Patch by \ 
Victor Stinner.
gh-108388: Split test_multiprocessing_fork, test_multiprocessing_forkserver and \ 
test_multiprocessing_spawn into test packages. Each package is made of 4 \ 
sub-tests: processes, threads, manager and misc. It allows running more tests in \ 
parallel and so reduce the total test duration. Patch by Victor Stinner.
gh-101634: When running the Python test suite with -jN option, if a worker \ 
stdout cannot be decoded from the locale encoding report a failed testn so the \ 
exitcode is non-zero. Patch by Victor Stinner.
gh-100086: The Python test runner (libregrtest) now logs Python build \ 
information like “debug” vs “release” build, or LTO and PGO \ 
optimizations. Patch by Victor Stinner.
gh-98903: The Python test suite now fails wit exit code 4 if no tests ran. It \ 
should help detecting typos in test names and test methods.
gh-95027: On Windows, when the Python test suite is run with the -jN option, the \ 
ANSI code page is now used as the encoding for the stdout temporary file, rather \ 
than using UTF-8 which can lead to decoding errors. Patch by Victor Stinner.
gh-93353: regrtest now checks if a test leaks temporary files or directories if \ 
run with -jN option. Patch by Victor Stinner.

Build
gh-63760: Fix Solaris build: no longer redefine the gethostname() function. \ 
Solaris defines the function since 2005. Patch by Victor Stinner, original patch \ 
by Jakub Kulík.
gh-108740: Fix a race condition in make regen-all. The deepfreeze.c source and \ 
files generated by Argument Clinic are now generated or updated before \ 
generating “global objects”. Previously, some identifiers may miss depending \ 
on the order in which these files were generated. Patch by Victor Stinner.

Windows
gh-109991: Update Windows build to use OpenSSL 3.0.11.
gh-107565: Update Windows build to use OpenSSL 3.0.10.

macOS
gh-109991: Update macOS installer to use OpenSSL 3.0.11.

Tools/Demos
gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.11 and multissltests to \ 
use 1.1.1w, 3.0.11, and 3.1.3.

Log message:
python311 py311-html-docs: updated to 3.11.5

Python 3.11.5

Security

gh-108310: Fixed an issue where instances of ssl.SSLSocket were vulnerable to a \ 
bypass of the TLS handshake and included protections (like certificate \ 
verification) and treating sent unencrypted data as if it were post-handshake \ 
TLS encrypted data. Security issue reported as CVE-2023-40217 by Aapo Oksman. \ 
Patch by Gregory P. Smith.

Core and Builtins

gh-104432: Fix potential unaligned memory access on C APIs involving returned \ 
sequences of char * pointers within the grp and socket modules. These were \ 
revealed using a -fsaniziter=alignment build on ARM macOS. Patch by Christopher \ 
Chavez.
gh-77377: Ensure that multiprocessing synchronization objects created in a fork \ 
context are not sent to a different process created in a spawn context. This \ 
changes a segfault into an actionable RuntimeError in the parent process.
gh-106092: Fix a segmentation fault caused by a use-after-free bug in \ 
frame_dealloc when the trashcan delays the deallocation of a PyFrameObject.
gh-106719: No longer suppress arbitrary errors in the __annotations__ getter and \ 
setter in the type and module types.
gh-106723: Propagate frozen_modules to multiprocessing spawned process interpreters.
gh-105979: Fix crash in _imp.get_frozen_object() due to improper exception handling.
gh-105840: Fix possible crashes when specializing function calls with too many \ 
__defaults__.
gh-105588: Fix an issue that could result in crashes when compiling malformed \ 
ast nodes.
gh-105375: Fix bugs in the builtins module where exceptions could end up being \ 
overwritten.
gh-105375: Fix bug in the compiler where an exception could end up being overwritten.
gh-105375: Improve error handling in PyUnicode_BuildEncodingMap() where an \ 
exception could end up being overwritten.
gh-105235: Prevent out-of-bounds memory access during mmap.find() calls.
gh-101006: Improve error handling when read marshal data.

Library

gh-105736: Harmonized the pure Python version of OrderedDict with the C version. \ 
Now, both versions set up their internal state in __new__. Formerly, the pure \ 
Python version did the set up in __init__.
gh-107963: Fix multiprocessing.set_forkserver_preload() to check the given list \ 
of modules names. Patch by Dong-hee Na.
gh-106242: Fixes os.path.normpath() to handle embedded null characters without \ 
truncating the path.
gh-107845: tarfile.data_filter() now takes the location of symlinks into account \ 
when determining their target, so it will no longer reject some valid tarballs \ 
with LinkOutsideDestinationError.
gh-107715: Fix doctest.DocTestFinder.find() in presence of class names with \ 
special characters. Patch by Gertjan van Zwieten.
gh-100814: Passing a callable object as an option value to a Tkinter image now \ 
raises the expected TclError instead of an AttributeError.
gh-106684: Close asyncio.StreamWriter when it is not closed by application \ 
leading to memory leaks. Patch by Kumar Aditya.
gh-107077: Seems that in some conditions, OpenSSL will return SSL_ERROR_SYSCALL \ 
instead of SSL_ERROR_SSL when a certification verification has failed, but the \ 
error parameters will still contain ERR_LIB_SSL and \ 
SSL_R_CERTIFICATE_VERIFY_FAILED. We are now detecting this situation and raising \ 
the appropiate ssl.SSLCertVerificationError. Patch by Pablo Galindo
gh-107396: tarfiles; Fixed use before assignment of self.exception for gzip \ 
decompression
gh-62519: Make gettext.pgettext() search plural definitions when translation is \ 
not found.
gh-83006: Document behavior of shutil.disk_usage() for non-mounted filesystems \ 
on Unix.
gh-106186: Do not report MultipartInvariantViolationDefect defect when the \ 
email.parser.Parser class is used to parse emails with headersonly=True.
gh-106831: Fix potential missing NULL check of d2i_SSL_SESSION result in _ssl.c.
gh-106774: Update the bundled copy of pip to version 23.2.1.
gh-106752: Fixed several bug in zipfile.Path in name/suffix/suffixes/stem \ 
operations when no filename is present and the Path is not at the root of the \ 
zipfile.
gh-106602: Add __copy__ and __deepcopy__ in enum
gh-106530: Revert a change to colorsys.rgb_to_hls() that caused division by zero \ 
for certain almost-white inputs. Patch by Terry Jan Reedy.
gh-106052: re module: fix the matching of possessive quantifiers in the case of \ 
a subpattern containing backtracking.
gh-106510: Improve debug output for atomic groups in regular expressions.
gh-105497: Fix flag mask inversion when unnamed flags exist.
gh-90876: Prevent multiprocessing.spawn from failing to import in environments \ 
where sys.executable is None. This regressed in 3.11 with the addition of \ 
support for path-like objects in multiprocessing.
gh-106350: Detect possible memory allocation failure in the libtommath function \ 
mp_init() used by the _tkinter module.
gh-102541: Make pydoc.doc catch bad module ImportError when output stream is not \ 
None.
gh-106263: Fix crash when calling repr with a manually constructed SignalDict \ 
object. Patch by Charlie Zhao.
gh-105375: Fix a bug in _Unpickler_SetInputStream() where an exception could end \ 
up being overwritten in case of failure.
gh-105375: Fix bugs in sys where exceptions could end up being overwritten \ 
because of deferred error handling.
gh-105605: Harden pyexpat error handling during module initialisation to prevent \ 
exceptions from possibly being overwritten, and objects from being dereferenced \ 
twice.
gh-105375: Fix bug in decimal where an exception could end up being overwritten.
gh-105375: Fix bugs in _datetime where exceptions could be overwritten in case \ 
of module initialisation failure.
gh-105375: Fix bugs in _ssl initialisation which could lead to leaked references \ 
and overwritten exceptions.
gh-105375: Fix a bug in array.array where an exception could end up being \ 
overwritten.
gh-105375: Fix bugs in _ctypes where exceptions could end up being overwritten.
gh-105375: Fix a bug in the posix module where an exception could be overwritten.
gh-105375: Fix bugs in _elementtree where exceptions could be overwritten.
gh-105375: Fix bugs in zoneinfo where exceptions could be overwritten.
gh-105375: Fix bugs in pickle where exceptions could be overwritten.
gh-105497: Fix flag inversion when alias/mask members exist.
gh-105375: Fix bugs in pickle where exceptions could be overwritten.
gh-103171: Revert undocumented behaviour change with runtime-checkable protocols \ 
decorated with typing.final() in Python 3.11. The behaviour change had meant \ 
that objects would not be considered instances of these protocols at runtime \ 
unless they had a __final__ attribute. Patch by Alex Waygood.
gh-105375: Fix a bug in sqlite3 where an exception could be overwritten in the \ 
collation callback.
gh-105332: Revert pickling method from by-name back to by-value.
gh-104554: Add RTSPS scheme support in urllib.parse
gh-100061: Fix a bug that causes wrong matches for regular expressions with \ 
possessive qualifier.
gh-102541: Hide traceback in help() prompt, when import failed.
gh-99203: Restore following CPython <= 3.10.5 behavior of \ 
shutil.make_archive(): do not create an empty archive if root_dir is not a \ 
directory, and, in that case, raise FileNotFoundError or NotADirectoryError \ 
regardless of format choice. Beyond the brought-back behavior, the function may \ 
now also raise these exceptions in dry_run mode.
gh-94777: Fix hanging multiprocessing ProcessPoolExecutor when a child process \ 
crashes while data is being written in the call queue.
bpo-18319: Ensure gettext(msg) retrieve translations even if a plural form \ 
exists. In other words: gettext(msg) == ngettext(msg, '', 1).

Documentation

gh-107008: Document the curses module variables LINES and COLS.
gh-106948: Add a number of standard external names to nitpick_ignore.
gh-54738: Add documentation on how to localize the argparse module.

Tests

gh-105776: Fix test_cppext when the C compiler command -std=c11 option: remove \ 
-std= options from the compiler command. Patch by Victor Stinner.
gh-107237: test_logging: Fix test_udp_reconnection() by increasing the timeout \ 
from 100 ms to 5 minutes (LONG_TIMEOUT). Patch by Victor Stinner.
gh-101634: When running the Python test suite with -jN option, if a worker \ 
stdout cannot be decoded from the locale encoding report a failed testn so the \ 
exitcode is non-zero. Patch by Victor Stinner.

Build

gh-107814: When calling find_python.bat with -q it did not properly silence the \ 
output of nuget. That is now fixed.

gh-106881: Check for linux/limits.h before including it in Modules/posixmodule.c.

gh-104692: Include commoninstall as a prerequisite for bininstall

This ensures that commoninstall is completed before bininstall is started when \ 
parallel builds are used (make -j install), and so the python3 symlink is only \ 
installed after all standard library modules are installed.

gh-100340: Allows -Wno-int-conversion for wasm-sdk 17 and onwards, thus enables \ 
building WASI builds once against the latest sdk.

Windows

gh-106242: Fixes realpath() to behave consistently when passed a path containing \ 
an embedded null character on Windows. In strict mode, it now raises OSError \ 
instead of the unexpected ValueError, and in non-strict mode will make the path \ 
absolute.
gh-106844: Fix integer overflow in _winapi.LCMapStringEx() which affects \ 
ntpath.normcase().
gh-99079: Update Windows build to use OpenSSL 3.0.9
gh-105436: Ensure that an empty environment block is terminated by two null \ 
characters, as is required by Windows.

macOS

gh-107565: Update macOS installer to use OpenSSL 3.0.10.
gh-99079: Update macOS installer to use OpenSSL 3.0.9.

Tools/Demos

gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, \ 
3.0.10, and 3.1.2.
gh-95065: Argument Clinic now supports overriding automatically generated \ 
signature by using directive @text_signature. See How to override the generated \ 
signature.
gh-106970: Fix bugs in the Argument Clinic destination <name> clear \ 
command; the destination buffers would never be cleared, and the destination \ 
directive parser would simply continue to the fault handler after processing the \ 
command. Patch by Erlend E. Aasland.

C API

gh-107916: C API functions PyErr_SetFromErrnoWithFilename(), \ 
PyErr_SetExcFromWindowsErrWithFilename() and \ 
PyErr_SetFromWindowsErrWithFilename() save now the error code before calling \ 
PyUnicode_DecodeFSDefault().
gh-107915: Such C API functions as PyErr_SetString(), PyErr_Format(), \ 
PyErr_SetFromErrnoWithFilename() and many others no longer crash or ignore \ 
errors if it failed to format the error message or decode the filename. Instead, \ 
they keep a corresponding error.
gh-107226: PyModule_AddObjectRef() is now only available in the limited API \ 
version 3.10 or later.
gh-105375: Fix a bug in PyErr_WarnExplicit() where an exception could end up \ 
being overwritten if the API failed internally.
gh-99612: Fix PyUnicode_DecodeUTF8Stateful() for ASCII-only data: *consumed was \ 
not set.

Log message:
py311-html-docs: updated to 3.11.4

Log message:
python311 py311-html-docs: updated to 3.11.3

Python 3.11.3

Security

gh-101727: Updated the OpenSSL version used in Windows and macOS binary release \ 
builds to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per \ 
the OpenSSL 2023-02-07 security advisory.
gh-101283: subprocess.Popen now uses a safer approach to find cmd.exe when \ 
launching with shell=True. Patch by Eryk Sun, based on a patch by Oleg Iarygin.

Core and Builtins

gh-101975: Fixed stacktop value on tracing entries to avoid corruption on \ 
garbage collection.
gh-102701: Fix overflow when creating very large dict.
gh-102416: Do not memoize incorrectly automatically generated loop rules in the \ 
parser. Patch by Pablo Galindo.
gh-102356: Fix a bug that caused a crash when deallocating deeply nested filter \ 
objects. Patch by Marta Gómez Macías.
gh-102397: Fix segfault from race condition in signal handling during garbage \ 
collection. Patch by Kumar Aditya.
gh-102281: Fix potential nullptr dereference and use of uninitialized memory in \ 
fileutils. Patch by Max Bachmann.
gh-102126: Fix deadlock at shutdown when clearing thread states if any finalizer \ 
tries to acquire the runtime head lock. Patch by Kumar Aditya.
gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal module. Patch by Max \ 
Bachmann.
gh-101967: Fix possible segfault in positional_only_passed_as_keyword function, \ 
when new list created.
gh-101765: Fix SystemError / segmentation fault in iter __reduce__ when internal \ 
access of builtins.__dict__ keys mutates the iter object.
gh-101696: Invalidate type version tag in _PyStaticType_Dealloc for static \ 
types, avoiding bug where a false cache hit could crash the interpreter. Patch \ 
by Kumar Aditya.

Library

gh-102549: Don’t ignore exceptions in member type creation.

gh-102947: Improve traceback when dataclasses.fields() is called on a \ 
non-dataclass. Patch by Alex Waygood

gh-102780: The asyncio.Timeout context manager now works reliably even when \ 
performing cleanup due to task cancellation. Previously it could raise a \ 
CancelledError instead of an TimeoutError in such cases.

gh-88965: typing: Fix a bug relating to substitution in custom classes generic \ 
over a ParamSpec. Previously, if the ParamSpec was substituted with a parameters \ 
list that itself contained a TypeVar, the TypeVar in the parameters list could \ 
not be subsequently substituted. This is now fixed.

Patch by Nikita Sobolev.

gh-101979: Fix a bug where parentheses in the metavar argument to \ 
argparse.ArgumentParser.add_argument() were dropped. Patch by Yeojin Kim.

gh-102179: Fix os.dup2() error message for negative fds.

gh-101961: For the binary mode, fileinput.hookcompressed() doesn’t set the \ 
encoding value even if the value is None. Patch by Gihwan Kim.

gh-101936: The default value of fp becomes io.BytesIO if HTTPError is \ 
initialized without a designated fp parameter. Patch by Long Vo.

gh-102069: Fix __weakref__ descriptor generation for custom dataclasses.

gh-101566: In zipfile, apply fix for extractall on the underlying zipfile after \ 
being wrapped in Path.

gh-101892: Callable iterators no longer raise SystemError when the callable \ 
object exhausts the iterator but forgets to either return a sentinel value or \ 
raise StopIteration.

gh-97786: Fix potential undefined behaviour in corner cases of \ 
floating-point-to-time conversions.

gh-101517: Fixed bug where bdb looks up the source line with linecache with a \ 
lineno=None, which causes it to fail with an unhandled exception.

gh-101673: Fix a pdb bug where ll clears the changes to local variables.

gh-96931: Fix incorrect results from ssl.SSLSocket.shared_ciphers()

gh-88233: Correctly preserve “extra” fields in zipfile regardless of their \ 
ordering relative to a zip64 “extra.”

gh-96127: inspect.signature was raising TypeError on call with mock objects. Now \ 
it correctly returns (*args, **kwargs) as infered signature.

gh-95495: When built against OpenSSL 3.0, the ssl module had a bug where it \ 
reported unauthenticated EOFs (i.e. without close_notify) as a clean TLS-level \ 
EOF. It now raises SSLEOFError, matching the behavior in previous versions of \ 
OpenSSL. The options attribute on SSLContext also no longer includes \ 
OP_IGNORE_UNEXPECTED_EOF by default. This option may be set to specify the \ 
previous OpenSSL 3.0 behavior.

gh-94440: Fix a concurrent.futures.process bug where ProcessPoolExecutor \ 
shutdown could hang after a future has been quickly submitted and canceled.

Documentation

gh-103112: Add docstring to http.client.HTTPResponse.read() to fix pydoc output.
gh-85417: Update cmath documentation to clarify behaviour on branch cuts.
gh-97725: Fix asyncio.Task.print_stack() description for file=None. Patch by \ 
Oleg Iarygin.

Tests

gh-102980: Improve test coverage on pdb.
gh-102537: Adjust the error handling strategy in \ 
test_zoneinfo.TzPathTest.python_tzpath_context. Patch by Paul Ganssle.
gh-89792: test_tools now copies up to 10x less source data to a temporary \ 
directory during the freeze test by ignoring git metadata and other artifacts. \ 
It also limits its python build parallelism based on os.cpu_count instead of \ 
hard coding it as 8 cores.
gh-101377: Improved test_locale_calendar_formatweekday of calendar.

Build

gh-102711: Fix -Wstrict-prototypes compiler warnings.

Windows

gh-101849: Ensures installer will correctly upgrade existing py.exe launcher \ 
installs.
gh-101763: Updates copy of libffi bundled with Windows installs to 3.4.4.
gh-101759: Update Windows installer to SQLite 3.40.1.
gh-101614: Correctly handle extensions built against debug binaries that \ 
reference python3_d.dll.

macOS

gh-103207: Add instructions to the macOS installer welcome display on how to \ 
workaround the macOS 13 Ventura “The installer encountered an error” \ 
failure.
gh-101759: Update macOS installer to SQLite 3.40.1.