Changelog¶
Python 3.10.15 final¶
Release date: 2024-09-07
Windows¶
Tests¶
gh-112769: The tests now correctly compare zlib version when
zlib.ZLIB_RUNTIME_VERSION
contains non-integer suffixes. For example zlib-ng defines the version as1.3.0.zlib-ng
.gh-117187: Fix XML tests for vanilla Expat <2.6.0.
gh-100454: Fix SSL tests CI for OpenSSL 3.1+
Security¶
gh-123678: Upgrade libexpat to 2.6.3
gh-121957: Fixed missing audit events around interactive use of Python, now also properly firing for
python -i
, as well as forpython -m asyncio
. The event in question iscpython.run_stdin
.gh-122133: Authenticate the socket connection for the
socket.socketpair()
fallback on platforms whereAF_UNIX
is not available like Windows.Patch by Gregory P. Smith <greg@krypto.org> and Seth Larson <seth@python.org>. Reported by Ellie <el@horse64.org>
gh-121285: Remove backtracking from tarfile header parsing for
hdrcharset
, PAX, and GNU sparse headers.gh-118486:
os.mkdir()
on Windows now accepts mode of0o700
to restrict the new directory to the current user. This fixes CVE-2024-4030 affectingtempfile.mkdtemp()
in scenarios where the base temporary directory is more permissive than the default.gh-116741: Update bundled libexpat to 2.6.2
Library¶
gh-123693: Use platform-agnostic behavior when computing
zipfile.Path.name
.gh-123270: Applied a more surgical fix for malformed payloads in
zipfile.Path
causing infinite loops (gh-122905) without breaking contents using legitimate characters.gh-123067: Fix quadratic complexity in parsing
"
-quoted cookie values with backslashes byhttp.cookies
.gh-122905:
zipfile.Path
objects now sanitize names from the zipfile.gh-121650:
email
headers with embedded newlines are now quoted on output. Thegenerator
will now refuse to serialize (write) headers that are unsafely folded or delimited; seeverify_generated_headers
. (Contributed by Bas Bloemsaat and Petr Viktorin in gh-121650.)gh-113171: Fixed various false positives and false negatives in
ipaddress.IPv4Address.is_private
(see these docs for details)
Also in the corresponding
ipaddress.IPv4Network
andipaddress.IPv6Network
attributes.gh-102988:
email.utils.getaddresses()
andemail.utils.parseaddr()
now return('', '')
2-tuples in more situations where invalid email addresses are encountered instead of potentially inaccurate values. Add optional strict parameter to these two functions: usestrict=False
to get the old behavior, accept malformed inputs.getattr(email.utils, 'supports_strict_parsing', False)
can be use to check if the strict paramater is available. Patch by Thomas Dwyer and Victor Stinner to improve the CVE-2023-27043 fix.gh-67693: Fix
urllib.parse.urlunparse()
andurllib.parse.urlunsplit()
for URIs with path starting with multiple slashes and no authority. Based on patch by Ashwin Ramaswami.
Core and Builtins¶
gh-112275: A deadlock involving
pystate.c
’sHEAD_LOCK
inposixmodule.c
at fork is now fixed. Patch by ChuBoning based on previous Python 3.12 fix by Victor Stinner.
Python 3.10.14 final¶
Release date: 2024-03-19
Security¶
gh-115398: Allow controlling Expat >=2.6.0 reparse deferral (CVE-2023-52425) by adding five new methods:
gh-115399: Update bundled libexpat to 2.6.0
gh-114572:
ssl.SSLContext.cert_store_stats()
andssl.SSLContext.get_ca_certs()
now correctly lock access to the certificate store, when thessl.SSLContext
is shared across multiple threads.gh-113659: Skip
.pth
files with names starting with a dot or hidden file attribute.
Core and Builtins¶
gh-102388: Fix a bug where
iso2022_jp_3
andiso2022_jp_2004
codecs read out of bounds
Library¶
gh-115197:
urllib.request
no longer resolves the hostname before checking it against the system’s proxy bypass list on macOS and Windows.gh-115133: Fix tests for
XMLPullParser
with Expat 2.6.0.gh-81194: Fix a crash in
socket.if_indextoname()
with specific value (UINT_MAX). Fix an integer overflow insocket.if_indextoname()
on 64-bit non-Windows platforms.gh-109858: Protect
zipfile
from “quoted-overlap” zipbomb. It now raises BadZipFile when try to read an entry that overlaps with other entry or central directory.gh-91133: Fix a bug in
tempfile.TemporaryDirectory
cleanup, which now no longer dereferences symlinks when working around file system permission errors.
Documentation¶
gh-115399: Document CVE-2023-52425 of Expat <2.6.0 under “XML vulnerabilities”.
Windows¶
Tools/Demos¶
gh-109991: Update GitHub CI workflows to use OpenSSL 3.0.11 and multissltests to use 1.1.1w, 3.0.11, and 3.1.3.
Python 3.10.13 final¶
Release date: 2023-08-24
Security¶
gh-108310: Fixed an issue where instances of
ssl.SSLSocket
were vulnerable to a bypass of the TLS handshake and included protections (like certificate verification) and treating sent unencrypted data as if it were post-handshake TLS encrypted data. Security issue reported as CVE-2023-40217 by Aapo Oksman. Patch by Gregory P. Smith.
Library¶
gh-107845:
tarfile.data_filter()
now takes the location of symlinks into account when determining their target, so it will no longer reject some valid tarballs withLinkOutsideDestinationError
.
Tools/Demos¶
gh-107565: Update multissltests and GitHub CI workflows to use OpenSSL 1.1.1v, 3.0.10, and 3.1.2.
C API¶
gh-99612: Fix
PyUnicode_DecodeUTF8Stateful()
for ASCII-only data:*consumed
was not set.
Python 3.10.12 final¶
Release date: 2023-06-06
Security¶
gh-103142: The version of OpenSSL used in our binary builds has been upgraded to 1.1.1u to address several CVEs.
gh-99889: Fixed a security in flaw in
uu.decode()
that could allow for directory traversal based on the input if noout_file
was specified.gh-104049: Do not expose the local on-disk location in directory indexes produced by
http.client.SimpleHTTPRequestHandler
.gh-102153:
urllib.parse.urlsplit()
now strips leading C0 control and space characters following the specification for URLs defined by WHATWG in response to CVE-2023-24329. Patch by Illia Volochii.
Library¶
gh-103935: Use
io.open_code()
for files to be executed instead of rawopen()
gh-102953: The extraction methods in
tarfile
, andshutil.unpack_archive()
, have a new a filter argument that allows limiting tar features than may be surprising or dangerous, such as creating files outside the destination directory. See Extraction filters for details.
Documentation¶
gh-89412: Add missing documentation for the
end_lineno
andend_offset
attributes of thetraceback.TracebackException
class.
Build¶
gh-103262: Fixes Windows installer build to work with latest compilers.
Python 3.10.11 final¶
Release date: 2023-04-04
Security¶
gh-101727: Updated the OpenSSL version used in Windows and macOS binary release builds to 1.1.1t to address CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the OpenSSL 2023-02-07 security advisory.
gh-101283:
subprocess.Popen
now uses a safer approach to findcmd.exe
when launching withshell=True
. Patch by Eryk Sun, based on a patch by Oleg Iarygin.
Core and Builtins¶
gh-102416: Do not memoize incorrectly automatically generated loop rules in the parser. Patch by Pablo Galindo.
gh-102356: Fix a bug that caused a crash when deallocating deeply nested filter objects. Patch by Marta Gómez Macías.
gh-102397: Fix segfault from race condition in signal handling during garbage collection. Patch by Kumar Aditya.
gh-102126: Fix deadlock at shutdown when clearing thread states if any finalizer tries to acquire the runtime head lock. Patch by Kumar Aditya.
gh-102027: Fix SSE2 and SSE3 detection in
_blake2
internal module. Patch by Max Bachmann.gh-101967: Fix possible segfault in
positional_only_passed_as_keyword
function, when new list created.gh-101765: Fix SystemError / segmentation fault in iter
__reduce__
when internal access ofbuiltins.__dict__
keys mutates the iter object.
Library¶
gh-102947: Improve traceback when
dataclasses.fields()
is called on a non-dataclass. Patch by Alex Waygoodgh-101979: Fix a bug where parentheses in the
metavar
argument toargparse.ArgumentParser.add_argument()
were dropped. Patch by Yeojin Kim.gh-101961: For the binary mode,
fileinput.hookcompressed()
doesn’t set theencoding
value even if the value isNone
. Patch by Gihwan Kim.gh-101936: The default value of
fp
becomesio.BytesIO
ifHTTPError
is initialized without a designatedfp
parameter. Patch by Long Vo.gh-101566: In zipfile, apply fix for extractall on the underlying zipfile after being wrapped in
Path
.gh-101997: Upgrade pip wheel bundled with ensurepip (pip 23.0.1)
gh-101892: Callable iterators no longer raise
SystemError
when the callable object exhausts the iterator but forgets to either return a sentinel value or raiseStopIteration
.gh-97786: Fix potential undefined behaviour in corner cases of floating-point-to-time conversions.
gh-101517: Fixed bug where
bdb
looks up the source line withlinecache
with alineno=None
, which causes it to fail with an unhandled exception.gh-101673: Fix a
pdb
bug wherell
clears the changes to local variables.gh-96931: Fix incorrect results from
ssl.SSLSocket.shared_ciphers()
gh-88233: Correctly preserve “extra” fields in
zipfile
regardless of their ordering relative to a zip64 “extra.”gh-95495: When built against OpenSSL 3.0, the
ssl
module had a bug where it reported unauthenticated EOFs (i.e. without close_notify) as a clean TLS-level EOF. It now raisesSSLEOFError
, matching the behavior in previous versions of OpenSSL. Theoptions
attribute onSSLContext
also no longer includesOP_IGNORE_UNEXPECTED_EOF
by default. This option may be set to specify the previous OpenSSL 3.0 behavior.gh-94440: Fix a
concurrent.futures.process
bug whereProcessPoolExecutor
shutdown could hang after a future has been quickly submitted and canceled.
Documentation¶
gh-103112: Add docstring to
http.client.HTTPResponse.read()
to fixpydoc
output.gh-85417: Update
cmath
documentation to clarify behaviour on branch cuts.gh-97725: Fix
asyncio.Task.print_stack()
description forfile=None
. Patch by Oleg Iarygin.
Tests¶
Build¶
gh-102711: Fix
-Wstrict-prototypes
compiler warnings.
Windows¶
macOS¶
gh-103207: Add instructions to the macOS installer welcome display on how to workaround the macOS 13 Ventura “The installer encountered an error” failure.
gh-101759: Update macOS installer to SQLite 3.40.1.
gh-87235: On macOS
python3 /dev/fd/9 9</path/to/script.py
failed for any script longer than a couple of bytes.
Python 3.10.10 final¶
Release date: 2023-02-07
Core and Builtins¶
gh-101400: Fix wrong lineno in exception message on
continue
orbreak
which are not in a loop. Patch by Dong-hee Na.gh-101372: Fix
is_normalized()
to properly handle the UCD 3.2.0 cases. Patch by Dong-hee Na.gh-101046: Fix a possible memory leak in the parser when raising
MemoryError
. Patch by Pablo Galindogh-100942: Fixed segfault in property.getter/setter/deleter that occurred when a property subclass overrode the
__new__
method to return a non-property instance.gh-100892: Fix race while iterating over thread states in clearing
threading.local
. Patch by Kumar Aditya.gh-100776: Fix misleading default value in
input()
’s__text_signature__
.gh-100374: Fix incorrect result and delay in
socket.getfqdn()
. Patch by Dominic Socular.gh-100050: Honor existing errors obtained when searching for mismatching parentheses in the tokenizer. Patch by Pablo Galindo
bpo-32782:
ctypes
arrays of length 0 now report a correct itemsize when amemoryview
is constructed from them, rather than always giving a value of 0.
Library¶
gh-100795: Avoid potential unexpected
freeaddrinfo
call (double free) insocket
when when a libcgetaddrinfo()
implementation leaves garbage in an output pointer when returning an error. Original patch by Sergey G. Brester.gh-101143: Remove unused references to
TimerHandle
inasyncio.base_events.BaseEventLoop._add_callback
.gh-101144: Make
zipfile.Path.open()
andzipfile.Path.read_text()
also acceptencoding
as a positional argument. This was the behavior in Python 3.9 and earlier. Earlier 3.10 versions had a regression where supplying it as a positional argument would lead to aTypeError
.gh-100573: Fix a Windows
asyncio
bug with named pipes where a client doingos.stat()
on the pipe would cause an error in the server that disabled serving future requests.gh-90104: Avoid RecursionError on
repr
if a dataclass field definition has a cyclic reference.gh-100689: Fix crash in
pyexpat
by statically allocatingPyExpat_CAPI
capsule.gh-100740: Fix
unittest.mock.Mock
not respecting the spec for attribute names prefixed withassert
.gh-86508: Fix
asyncio.open_connection()
to skip binding to local addresses of different family. Patch by Kumar Aditya.gh-100287: Fix the interaction of
unittest.mock.seal()
withunittest.mock.AsyncMock
.gh-100474:
http.server
now checks that an index page is actually a regular file before trying to serve it. This avoids issues with directories namedindex.html
.gh-100160: Remove any deprecation warnings in
asyncio.get_event_loop()
. They are deferred to Python 3.12.gh-99952: Fix a reference undercounting issue in
ctypes.Structure
withfrom_param()
results larger than a C pointer.gh-98778: Update
HTTPError
to be initialized properly, even if thefp
isNone
. Patch by Dong-hee Na.gh-83035: Fix
inspect.getsource()
handling of decorator calls with nested parentheses.gh-99240: Fix double-free bug in Argument Clinic
str_converter
by extracting memory clean up to a newpost_parsing
section.gh-85267: Several improvements to
inspect.signature()
’s handling of__text_signature
. - Fixes a case whereinspect.signature()
dropped parameters - Fixes a case whereinspect.signature()
raisedtokenize.TokenError
- Allowsinspect.signature()
to understand defaults involving binary operations of constants -inspect.signature()
is documented as only raisingTypeError
orValueError
, but sometimes raisedRuntimeError
. These cases now raiseValueError
- Removed a dead code pathgh-96192: Fix handling of
bytes
path-like objects inos.ismount()
.bpo-44817: Ignore WinError 53 (ERROR_BAD_NETPATH), 65 (ERROR_NETWORK_ACCESS_DENIED) and 161 (ERROR_BAD_PATHNAME) when using ntpath.realpath().
bpo-40447: Accept
os.PathLike
(such aspathlib.Path
) in thestripdir
arguments ofcompileall.compile_file()
andcompileall.compile_dir()
.bpo-36880: Fix a reference counting issue when a
ctypes
callback with return typepy_object
returnsNone
, which could cause crashes.
Documentation¶
gh-100616: Document existing
attr
parameter tocurses.window.vline()
function incurses
.gh-100472: Remove claim in documentation that the
stripdir
,prependdir
andlimit_sl_dest
parameters ofcompileall.compile_dir()
andcompileall.compile_file()
could bebytes
.
Tests¶
Build¶
gh-101522: Allow overriding Windows dependencies versions and paths using MSBuild properties.
Windows¶
gh-82052: Fixed an issue where writing more than 32K of Unicode output to the console screen in one go can result in mojibake.
gh-100180: Update Windows installer to OpenSSL 1.1.1s
bpo-43984:
winreg.SetValueEx()
now leaves the target value untouched in the case of conversion errors. Previously,-1
would be written in case of such errors.
macOS¶
gh-100180: Update macOS installer to OpenSSL 1.1.1s
C API¶
gh-99240: In argument parsing, after deallocating newly allocated memory, reset its pointer to NULL.
Python 3.10.9 final¶
Release date: 2022-12-06
Security¶
gh-100001:
python -m http.server
no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log.This is done by changing the
http.server
BaseHTTPRequestHandler
.log_message
method to replace control characters with a\xHH
hex escape before printing.gh-87604: Avoid publishing list of active per-interpreter audit hooks via the
gc
modulegh-98433: The IDNA codec decoder used on DNS hostnames by
socket
orasyncio
related name resolution functions no longer involves a quadratic algorithm. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such asurllib
http3xx
redirects potentially allow for an attacker to supply such a name.gh-98739: Update bundled libexpat to 2.5.0
gh-98517: Port XKCP’s fix for the buffer overflows in SHA-3 (CVE-2022-37454).
gh-97514: On Linux the
multiprocessing
module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected.Abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in Python 3.8 and earlier.
This prevents Linux CVE-2022-42919.
Core and Builtins¶
gh-99578: Fix a reference bug in
_imp.create_builtin()
after the creation of the first sub-interpreter for modulesbuiltins
andsys
. Patch by Victor Stinner.gh-99581: Fixed a bug that was causing a buffer overflow if the tokenizer copies a line missing the newline caracter from a file that is as long as the available tokenizer buffer. Patch by Pablo galindo
gh-96055: Update
faulthandler
to emit an error message with the proper unexpected signal number. Patch by Dong-hee Na.gh-98852: Fix subscription of
types.GenericAlias
instances containing bare generic types: for exampletuple[A, T][int]
, whereA
is a generic type, andT
is a type variable.gh-98415: Fix detection of MAC addresses for
uuid
on certain OSs. Patch by Chaim Sandersgh-92119: Print exception class name instead of its string representation when raising errors from
ctypes
calls.gh-93696: Allow
pdb
to locate source for frozen modules in the standard library.bpo-31718: Raise
ValueError
instead ofSystemError
when methods of uninitializedio.IncrementalNewlineDecoder
objects are called. Patch by Oren Milman.bpo-38031: Fix a possible assertion failure in
io.FileIO
when the opener returns an invalid file descriptor.
Library¶
gh-100001: Also escape s in the http.server BaseHTTPRequestHandler.log_message so that it is technically possible to parse the line and reconstruct what the original data was. Without this a xHH is ambiguious as to if it is a hex replacement we put in or the characters r”x” came through in the original request line.
gh-93453:
asyncio.get_event_loop()
now only emits a deprecation warning when a new event loop was created implicitly. It no longer emits a deprecation warning if the current event loop was set.gh-51524: Fix bug when calling trace.CoverageResults with valid infile.
gh-99645: Fix a bug in handling class cleanups in
unittest.TestCase
. NowaddClassCleanup()
uses separate lists for differentTestCase
subclasses, anddoClassCleanups()
only cleans up the particular class.gh-97001: Release the GIL when calling termios APIs to avoid blocking threads.
gh-99341: Fix
ast.increment_lineno()
to also coverast.TypeIgnore
when changing line numbers.gh-74044: Fixed bug where
inspect.signature()
reported incorrect arguments for decorated methods.gh-99275: Fix
SystemError
inctypes
when exception was not set during__initsubclass__
.gh-99155: Fix
statistics.NormalDist
pickle with0
and1
protocols.gh-99134: Update the bundled copy of pip to version 22.3.1.
gh-99130: Apply bugfixes from importlib_metadata 4.11.4, namely: In
PathDistribution._name_from_stem
, avoid including parts of the extension in the result. InPathDistribution._normalized_name
, ensure names loaded from the stem of the filename are also normalized, ensuring duplicate entry points by packages varying only by non-normalized name are hidden.gh-83004: Clean up refleak on failed module initialisation in
_zoneinfo
gh-83004: Clean up refleaks on failed module initialisation in in
_pickle
gh-83004: Clean up refleak on failed module initialisation in
_io
.gh-98897: Fix memory leak in
math.dist()
when both points don’t have the same dimension. Patch by Kumar Aditya.gh-98793: Fix argument typechecks in
_overlapped.WSAConnect()
and_overlapped.Overlapped.WSASendTo()
functions.gh-98740: Fix internal error in the
re
module which in very rare circumstances prevented compilation of a regular expression containing a conditional expression without the “else” branch.gh-98703: Fix
asyncio.StreamWriter.drain()
to callprotocol.connection_lost
callback only once on Windows.gh-98624: Add a mutex to unittest.mock.NonCallableMock to protect concurrent access to mock attributes.
gh-89237: Fix hang on Windows in
subprocess.wait_closed()
inasyncio
withProactorEventLoop
. Patch by Kumar Aditya.gh-98458: Fix infinite loop in unittest when a self-referencing chained exception is raised
gh-97928:
tkinter.Text.count()
raises now an exception for options starting with “-” instead of silently ignoring them.gh-97966: On
uname_result
, restored expectation that_fields
and_asdict
would include all six properties includingprocessor
.gh-98331: Update the bundled copies of pip and setuptools to versions 22.3 and 65.5.0 respectively.
gh-96035: Fix bug in
urllib.parse.urlparse()
that causes certain port numbers containing whitespace, underscores, plus and minus signs, or non-ASCII digits to be incorrectly accepted.gh-98251: Allow
venv
to pass alongPYTHON*
variables toensurepip
andpip
when they do not impact path resolutiongh-98178: On macOS, fix a crash in
syslog.syslog()
in multi-threaded applications. On macOS, the libcsyslog()
function is not thread-safe, sosyslog.syslog()
no longer releases the GIL to call it. Patch by Victor Stinner.gh-96151: Allow
BUILTINS
to be a valid field name for frozen dataclasses.gh-98086: Make sure
patch.dict()
can be applied on async functions.gh-88863: To avoid apparent memory leaks when
asyncio.open_connection()
raises, break reference cycles generated by local exception and future instances (which has exception instance as its member var). Patch by Dong Uk, Kang.gh-93858: Prevent error when activating venv in nested fish instances.
bpo-46364: Restrict use of sockets instead of pipes for stdin of subprocesses created by
asyncio
to AIX platform only.bpo-38523:
shutil.copytree()
now applies the ignore_dangling_symlinks argument recursively.bpo-36267: Fix IndexError in
argparse.ArgumentParser
when astore_true
action is given an explicit argument.
Documentation¶
gh-92892: Document that calling variadic functions with ctypes requires special care on macOS/arm64 (and possibly other platforms).
Tests¶
Build¶
gh-99086: Fix
-Wimplicit-int
,-Wstrict-prototypes
, and-Wimplicit-function-declaration
compiler warnings in configure checks.gh-99086: Fix
-Wimplicit-int
compiler warning in configure check forPTHREAD_SCOPE_SYSTEM
.gh-97731: Specify the full path to the source location for
make docclean
(needed for cross-builds).gh-98671: Fix
NO_MISALIGNED_ACCESSES
being not defined for the SHA3 extension whenHAVE_ALIGNED_REQUIRED
is set. Allowing builds on hardware that unaligned memory accesses are not allowed.
Windows¶
gh-99345: Use faster initialization functions to detect install location for Windows Store package
gh-98689: Update Windows builds to zlib v1.2.13. v1.2.12 has CVE-2022-37434, but the vulnerable
inflateGetHeader
API is not used by Python.gh-94328: Update Windows installer to use SQLite 3.39.4.
bpo-40882: Fix a memory leak in
multiprocessing.shared_memory.SharedMemory
on Windows.
macOS¶
gh-94328: Update macOS installer to SQLite 3.39.4.
IDLE¶
gh-97527: Fix a bug in the previous bugfix that caused IDLE to not start when run with 3.10.8, 3.12.0a1, and at least Microsoft Python 3.10.2288.0 installed without the Lib/test package. 3.11.0 was never affected.
Tools/Demos¶
gh-95731: Fix handling of module docstrings in
Tools/i18n/pygettext.py
.
Python 3.10.8 final¶
Release date: 2022-10-11
Security¶
gh-97616: Fix multiplying a list by an integer (
list *= int
): detect the integer overflow when the new allocated length is close to the maximum size. Issue reported by Jordan Limor. Patch by Victor Stinner.gh-97612: Fix a shell code injection vulnerability in the
get-remote-certificate.py
example script. The script no longer uses a shell to runopenssl
commands. Issue reported and initial fix by Caleb Shortt. Patch by Victor Stinner.gh-68966: The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed).
Core and Builtins¶
gh-96078:
os.sched_yield()
now release the GIL while calling sched_yield(2). Patch by Dong-hee Na.gh-97943: Bugfix:
PyFunction_GetAnnotations()
should return a borrowed reference. It was returning a new reference.gh-97591: Fixed a missing incref/decref pair in
Exception.__setstate__()
. Patch by Ofey Chan.gh-96848: Fix command line parsing: reject
-X int_max_str_digits
option with no value (invalid) when thePYTHONINTMAXSTRDIGITS
environment variable is set to a valid limit. Patch by Victor Stinner.gh-95921: Fix overly-broad source position information for chained comparisons used as branching conditions.
gh-96821: Fix undefined behaviour in
_testcapimodule.c
.gh-95778: When
ValueError
is raised if an integer is larger than the limit, mention thesys.set_int_max_str_digits()
function in the error message. Patch by Victor Stinner.gh-96387: At Python exit, sometimes a thread holding the GIL can wait forever for a thread (usually a daemon thread) which requested to drop the GIL, whereas the thread already exited. To fix the race condition, the thread which requested the GIL drop now resets its request before exiting. Issue discovered and analyzed by Mingliang ZHAO. Patch by Victor Stinner.
gh-96864: Fix a possible assertion failure, fatal error, or
SystemError
if a line tracing event raises an exception while opcode tracing is enabled.gh-96678: Fix undefined behaviour in C code of null pointer arithmetic.
gh-96641: Do not expose
KeyWrapper
in_functools
.gh-96611: When loading a file with invalid UTF-8 inside a multi-line string, a correct SyntaxError is emitted.
gh-95196: Disable incorrect pickling of the C implemented classmethod descriptors.
gh-96352: Fix
AttributeError
missingname
andobj
attributes inobject.__getattribute__()
. Patch by Philip Georgi.bpo-42316: Document some places where an assignment expression needs parentheses.
Library¶
gh-87730: Wrap network errors consistently in urllib FTP support, so the test suite doesn’t fail when a network is available but the public internet is not reachable.
gh-97825: Fixes
AttributeError
whensubprocess.check_output()
is used with argumentinput=None
and either of the arguments encoding or errors are used.gh-96827: Avoid spurious tracebacks from
asyncio
when default executor cleanup is delayed until after the event loop is closed (e.g. as the result of a keyboard interrupt).gh-97592: Avoid a crash in the C version of
asyncio.Future.remove_done_callback()
when an evil argument is passed.gh-97545: Make Semaphore run faster.
gh-73588: Fix generation of the default name of
tkinter.Checkbutton
. Previously, checkbuttons in different parent widgets could have the same short name and share the same state if arguments “name” and “variable” are not specified. Now they are globally unique.gh-97005: Update bundled libexpat to 2.4.9
gh-85760: Fix race condition in
asyncio
whereprocess_exited()
called before thepipe_data_received()
leading to inconsistent output. Patch by Kumar Aditya.gh-96819: Fixed check in
multiprocessing.resource_tracker
that guarantees that the length of a write to a pipe is not greater thanPIPE_BUF
.gh-96741: Corrected type annotation for dataclass attribute
pstats.FunctionProfile.ncalls
to bestr
.gh-96652: Fix the faulthandler implementation of
faulthandler.register(signal, chain=True)
if thesigaction()
function is not available: don’t call the previous signal handler if it’s NULL. Patch by Victor Stinner.gh-96073: In
inspect
, fix overeager replacement of “typing.
” in formatting annotations.gh-90467: Fix
asyncio.streams.StreamReaderProtocol
to keep a strong reference to the created task, so that it’s not garbage collectedgh-96052: Fix handling compiler warnings (SyntaxWarning and DeprecationWarning) in
codeop.compile_command()
when checking for incomplete input. Previously it emitted warnings and raised a SyntaxError. Now it always returnsNone
for incomplete input without emitting any warnings.gh-91212: Fixed flickering of the turtle window when the tracer is turned off. Patch by Shin-myoung-serp.
gh-74116: Allow
asyncio.StreamWriter.drain()
to be awaited concurrently by multiple tasks. Patch by Kumar Aditya.gh-90155: Fix broken
asyncio.Semaphore
when acquire is cancelled.gh-92986: Fix
ast.unparse()
whenImportFrom.level
is Nonegh-91539: Improve performance of
urllib.request.getproxies_environment
when there are many environment variables
Documentation¶
gh-97741: Fix
!
in c domain ref target syntax via aconf.py
patch, so it works as intended to disable ref target resolution.gh-95588: Clarified the conflicting advice given in the
ast
documentation aboutast.literal_eval()
being “safe” for use on untrusted input while at the same time warning that it can crash the process. The latter statement is true and is deemed unfixable without a large amount of work unsuitable for a bugfix. So we keep the warning and no longer claim thatliteral_eval
is safe.gh-93031: Update tutorial introduction output to use 3.10+ SyntaxError invalid range.
Build¶
gh-96729: Ensure that Windows releases built with
Tools\msi\buildrelease.bat
are upgradable to and from official Python releases.
Windows¶
gh-97728: Fix possible crashes caused by the use of uninitialized variables when pass invalid arguments in
os.system()
on Windows and in Windows-specific modules (likewinreg
).gh-90989: Clarify some text in the Windows installer.
macOS¶
gh-97897: The macOS 13 SDK includes support for the
mkfifoat
andmknodat
system calls. Using thedir_fd
option with eitheros.mkfifo()
oros.mknod()
could result in a segfault if cpython is built with the macOS 13 SDK but run on an earlier version of macOS. Prevent this by adding runtime support for detection of these system calls (“weaklinking”) as is done for other newer syscalls on macOS.
Python 3.10.7 final¶
Release date: 2022-09-05
Security¶
gh-95778: Converting between
int
andstr
in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises aValueError
if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity. This is a mitigation for CVE-2020-10735.This new limit can be configured or disabled by environment variable, command line flag, or
sys
APIs. See the integer string conversion length limitation documentation. The default limit is 4300 digits in string form.Patch by Gregory P. Smith [Google] and Christian Heimes [Red Hat] with feedback from Victor Stinner, Thomas Wouters, Steve Dower, Ned Deily, and Mark Dickinson.
Core and Builtins¶
gh-96187: Fixed a bug that caused
_PyCode_GetExtra
to return garbage for negative indexes. Patch by Pablo Galindogh-95876: Fix format string in
_PyPegen_raise_error_known_location
that can lead to memory corruption on some 64bit systems. The function was building a tuple withi
(int) instead ofn
(Py_ssize_t) for Py_ssize_t arguments.gh-95605: Fix misleading contents of error message when converting an all-whitespace string to
float
.gh-93592:
coroutine.throw()
now properly initializes theframe.f_back
when resuming a stack of coroutines. This allows e.g.traceback.print_stack()
to work correctly when an exception (such asCancelledError
) is thrown into a coroutine.gh-94996:
ast.parse()
will no longer parse function definitions with positional-only params when passedfeature_version
less than(3, 8)
. Patch by Shantanu Jain.
Library¶
gh-68163: Correct conversion of
numbers.Rational
’s tofloat
.gh-96159: Fix a performance regression in logging TimedRotatingFileHandler. Only check for special files when the rollover time has passed.
gh-96175: Fix unused
localName
parameter in theAttr
class inxml.dom.minidom
.gh-95609: Update bundled pip to 22.2.2.
gh-95231: Fail gracefully if
EPERM
orENOSYS
is raised when loadingcrypt
methods. This may happen when trying to loadMD5
on a Linux kernel with FIPS enabled.
Documentation¶
gh-96098: Improve discoverability of the higher level concurrent.futures module by providing clearer links from the lower level threading and multiprocessing modules.
gh-95789: Update the default RFC base URL from deprecated tools.ietf.org to datatracker.ietf.org
gh-91207: Fix stylesheet not working in Windows CHM htmlhelp docs. Contributed by C.A.M. Gerlach.
bpo-47115: The documentation now lists which members of C structs are part of the Limited API/Stable ABI.
Tests¶
gh-95243: Mitigate the inherent race condition from using find_unused_port() in testSockName() by trying to find an unused port a few times before failing. Patch by Ross Burton.
Build¶
gh-94682: Build and test with OpenSSL 1.1.1q
IDLE¶
Python 3.10.6 final¶
Release date: 2022-08-01
Security¶
gh-87389:
http.server
: Fix an open redirection vulnerability in the HTTP server when an URI path starts with//
. Vulnerability discovered, and initial fix proposed, by Hamza Avvan.gh-92888: Fix
memoryview
use after free when accessing the backing buffer in certain cases.
Core and Builtins¶
gh-95355:
_PyPegen_Parser_New
now properly detects token memory allocation errors. Patch by Honglin Zhu.gh-94938: Fix error detection in some builtin functions when keyword argument name is an instance of a str subclass with overloaded
__eq__
and__hash__
. Previously it could cause SystemError or other undesired behavior.gh-94949:
ast.parse()
will no longer parse parenthesized context managers when passedfeature_version
less than(3, 9)
. Patch by Shantanu Jain.gh-94947:
ast.parse()
will no longer parse assignment expressions when passedfeature_version
less than(3, 8)
. Patch by Shantanu Jain.gh-94869: Fix the column offsets for some expressions in multi-line f-strings
ast
nodes. Patch by Pablo Galindo.gh-91153: Fix an issue where a
bytearray
item assignment could crash if it’s resized by the new value’s__index__()
method.gh-94329: Compile and run code with unpacking of extremely large sequences (1000s of elements). Such code failed to compile. It now compiles and runs correctly.
gh-94360: Fixed a tokenizer crash when reading encoded files with syntax errors from
stdin
with non utf-8 encoded text. Patch by Pablo Galindogh-94192: Fix error for dictionary literals with invalid expression as value.
gh-93964: Strengthened compiler overflow checks to prevent crashes when compiling very large source files.
gh-93671: Fix some exponential backtrace case happening with deeply nested sequence patterns in match statements. Patch by Pablo Galindo
gh-93021: Fix the
__text_signature__
for__get__()
methods implemented in C. Patch by Jelle Zijlstra.gh-92930: Fixed a crash in
_pickle.c
from mutating collections during__reduce__
orpersistent_id
.gh-92914: Always round the allocated size for lists up to the nearest even number.
gh-92858: Improve error message for some suites with syntax error before ‘:’
Library¶
gh-95339: Update bundled pip to 22.2.1.
gh-95045: Fix GC crash when deallocating
_lsprof.Profiler
by untracking it before calling any callbacks. Patch by Kumar Aditya.gh-95087: Fix IndexError in parsing invalid date in the
email
module.gh-95199: Upgrade bundled setuptools to 63.2.0.
gh-95194: Upgrade bundled pip to 22.2.
gh-93899: Fix check for existence of
os.EFD_CLOEXEC
,os.EFD_NONBLOCK
andos.EFD_SEMAPHORE
flags on older kernel versions where these flags are not present. Patch by Kumar Aditya.gh-95166: Fix
concurrent.futures.Executor.map()
to cancel the currently waiting on future on an error - e.g. TimeoutError or KeyboardInterrupt.gh-93157: Fix
fileinput
module didn’t supporterrors
option wheninplace
is true.gh-94821: Fix binding of unix socket to empty address on Linux to use an available address from the abstract namespace, instead of “0”.
gh-94736: Fix crash when deallocating an instance of a subclass of
_multiprocessing.SemLock
. Patch by Kumar Aditya.gh-94637:
SSLContext.set_default_verify_paths()
now releases the GIL aroundSSL_CTX_set_default_verify_paths
call. The function call performs I/O and CPU intensive work.gh-94510: Re-entrant calls to
sys.setprofile()
andsys.settrace()
now raiseRuntimeError
. Patch by Pablo Galindo.gh-92336: Fix bug where
linecache.getline()
fails on bad files withUnicodeDecodeError
orSyntaxError
. It now returns an empty string as per the documentation.gh-89988: Fix memory leak in
pickle.Pickler
when looking updispatch_table
. Patch by Kumar Aditya.gh-94254: Fixed types of
struct
module to be immutable. Patch by Kumar Aditya.gh-94245: Fix pickling and copying of
typing.Tuple[()]
.gh-94207: Made
_struct.Struct
GC-tracked in order to fix a reference leak in the_struct
module.gh-94101: Manual instantiation of
ssl.SSLSession
objects is no longer allowed as it lead to misconfigured instances that crashed the interpreter when attributes where accessed on them.gh-84753:
inspect.iscoroutinefunction()
,inspect.isgeneratorfunction()
, andinspect.isasyncgenfunction()
now properly returnTrue
for duck-typed function-like objects like instances ofunittest.mock.AsyncMock
.This makes
inspect.iscoroutinefunction()
consistent with the behavior ofasyncio.iscoroutinefunction()
. Patch by Mehdi ABAAKOUK.gh-83499: Fix double closing of file description in
tempfile
.gh-79512: Fixed names and
__module__
value ofweakref
classesReferenceType
,ProxyType
,CallableProxyType
. It makes them pickleable.gh-90494:
copy.copy()
andcopy.deepcopy()
now always raise a TypeError if__reduce__()
returns a tuple with length 6 instead of silently ignore the 6th item or produce incorrect result.gh-90549: Fix a multiprocessing bug where a global named resource (such as a semaphore) could leak when a child process is spawned (as opposed to forked).
gh-79579:
sqlite3
now correctly detects DML queries with leading comments. Patch by Erlend E. Aasland.gh-93421: Update
sqlite3.Cursor.rowcount
when a DML statement has run to completion. This fixes the row count for SQL queries likeUPDATE ... RETURNING
. Patch by Erlend E. Aasland.gh-91810: Suppress writing an XML declaration in open files in
ElementTree.write()
withencoding='unicode'
andxml_declaration=None
.gh-93353: Fix the
importlib.resources.as_file()
context manager to remove the temporary file if destroyed late during Python finalization: keep a local reference to theos.remove()
function. Patch by Victor Stinner.gh-83658: Make
multiprocessing.Pool
raise an exception ifmaxtasksperchild
is notNone
or a positive int.gh-74696:
shutil.make_archive()
no longer temporarily changes the current working directory during creation of standard.zip
or tar archives.gh-91577: Move imports in
SharedMemory
methods to module level so that they can be executed late in python finalization.bpo-47231: Fixed an issue with inconsistent trailing slashes in tarfile longname directories.
bpo-46755: In
QueueHandler
, clearstack_info
fromLogRecord
to prevent stack trace from being written twice.bpo-46053: Fix OSS audio support on NetBSD.
bpo-46197: Fix
ensurepip
environment isolation for subprocess runningpip
.bpo-45924: Fix
asyncio
incorrect traceback when future’s exception is raised multiple times. Patch by Kumar Aditya.bpo-34828:
sqlite3.Connection.iterdump()
now handles databases that useAUTOINCREMENT
in one or more tables.
Documentation¶
gh-94321: Document the PEP 246 style protocol type
sqlite3.PrepareProtocol
.gh-86128: Document a limitation in ThreadPoolExecutor where its exit handler is executed before any handlers in atexit.
gh-61162: Clarify
sqlite3
behavior when How to use the connection context manager.gh-87260: Align
sqlite3
argument specs with the actual implementation.gh-86986: The minimum Sphinx version required to build the documentation is now 3.2.
gh-88831: Augmented documentation of asyncio.create_task(). Clarified the need to keep strong references to tasks and added a code snippet detailing how to do this.
bpo-47161: Document that
pathlib.PurePath
does not collapse initial double slashes because they denote UNC paths.
Tests¶
gh-95280: Fix problem with
test_ssl
test_get_ciphers
on systems that require perfect forward secrecy (PFS) ciphers.gh-95212: Make multiprocessing test case
test_shared_memory_recreate
parallel-safe.gh-91330: Added more tests for
dataclasses
to cover behavior with data descriptor-based fields.gh-94208:
test_ssl
is now checking for supported TLS version and protocols in more tests.gh-93951: In test_bdb.StateTestCase.test_skip, avoid including auxiliary importers.
gh-93957: Provide nicer error reporting from subprocesses in test_venv.EnsurePipTest.test_with_pip.
gh-57539: Increase calendar test coverage for
calendar.LocaleTextCalendar.formatweekday()
.gh-92886: Fixing tests that fail when running with optimizations (
-O
) intest_zipimport.py
bpo-47016: Create a GitHub Actions workflow for verifying bundled pip and setuptools. Patch by Illia Volochii and Adam Turner.
Build¶
gh-94841: Fix the possible performance regression of
PyObject_Free()
compiled with MSVC version 1932.bpo-45816: Python now supports building with Visual Studio 2022 (MSVC v143, VS Version 17.0). Patch by Jeremiah Vivian.
Windows¶
gh-90844: Allow virtual environments to correctly launch when they have spaces in the path.
gh-92841:
asyncio
no longer throwsRuntimeError: Event loop is closed
on interpreter exit after asynchronous socket activity. Patch by Oleg Iarygin.bpo-42658: Support native Windows case-insensitive path comparisons by using
LCMapStringEx
instead ofstr.lower()
inntpath.normcase()
. AddLCMapStringEx
to the_winapi
module.
IDLE¶
gh-95511: Fix the Shell context menu copy-with-prompts bug of copying an extra line when one selects whole lines.
gh-95471: In the Edit menu, move
Select All
and add a new separator.gh-95411: Enable using IDLE’s module browser with .pyw files.
gh-89610: Add .pyi as a recognized extension for IDLE on macOS. This allows opening stub files by double clicking on them in the Finder.
Tools/Demos¶
C API¶
gh-94930: Fix
SystemError
raised whenPyArg_ParseTupleAndKeywords()
is used with#
in(...)
but withoutPY_SSIZE_T_CLEAN
defined.gh-94864: Fix
PyArg_Parse*
with deprecated format units “u” and “Z”. It returned 1 (success) when warnings are turned into exceptions.
Python 3.10.5 final¶
Release date: 2022-06-06
Core and Builtins¶
gh-93418: Fixed an assert where an f-string has an equal sign ‘=’ following an expression, but there’s no trailing brace. For example, f”{i=”.
gh-91924: Fix
__ltrace__
debug feature if the stdout encoding is not UTF-8. Patch by Victor Stinner.gh-93061: Backward jumps after
async for
loops are no longer given dubious line numbers.gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees.
The bug was discovered and fixed by Eli Libman. See MagicStack/immutables#84 for more details.
gh-92311: Fixed a bug where setting
frame.f_lineno
to jump over a list comprehension could misbehave or crash.gh-92112: Fix crash triggered by an evil custom
mro()
on a metaclass.gh-92036: Fix a crash in subinterpreters related to the garbage collector. When a subinterpreter is deleted, untrack all objects tracked by its GC. To prevent a crash in deallocator functions expecting objects to be tracked by the GC, leak a strong reference to these objects on purpose, so they are never deleted and their deallocator functions are not called. Patch by Victor Stinner.
gh-91421: Fix a potential integer overflow in _Py_DecodeUTF8Ex.
bpo-47212: Raise
IndentationError
instead ofSyntaxError
for a bareexcept
with no following indent. ImproveSyntaxError
locations for an un-parenthesized generator used as arguments. Patch by Matthieu Dartiailh.bpo-47182: Fix a crash when using a named unicode character like
"\N{digit nine}"
after the main interpreter has been initialized a second time.bpo-46775: Some Windows system error codes(>= 10000) are now mapped into the correct errno and may now raise a subclass of
OSError
. Patch by Dong-hee Na.bpo-47117: Fix a crash if we fail to decode characters in interactive mode if the tokenizer buffers are uninitialized. Patch by Pablo Galindo.
bpo-39829: Removed the
__len__()
call when initializing a list and moved initializing tolist_extend
. Patch by Jeremiah Pascual.bpo-46962: Classes and functions that unconditionally declared their docstrings ignoring the
--without-doc-strings
compilation flag no longer do so.The classes affected are
ctypes.UnionType
,pickle.PickleBuffer
,testcapi.RecursingInfinitelyError
, andtypes.GenericAlias
.The functions affected are 24 methods in
ctypes
.Patch by Oleg Iarygin.
bpo-36819: Fix crashes in built-in encoders with error handlers that return position less or equal than the starting position of non-encodable characters.
Library¶
gh-93156: Accessing the
pathlib.PurePath.parents
sequence of an absolute path using negative index values produced incorrect results.gh-89973: Fix
re.error
raised infnmatch
if the pattern contains a character range with upper bound lower than lower bound (e.g.[c-a]
). Now such ranges are interpreted as empty ranges.gh-93010: In a very special case, the email package tried to append the nonexistent
InvalidHeaderError
to the defect list. It should have beenInvalidHeaderDefect
.gh-92839: Fixed crash resulting from calling bisect.insort() or bisect.insort_left() with the key argument not equal to None.
gh-91581:
utcfromtimestamp()
no longer attempts to resolvefold
in the pure Python implementation, since the fold is never 1 in UTC. In addition to being slightly faster in the common case, this also prevents some errors when the timestamp is close todatetime.min
. Patch by Paul Ganssle.gh-92530: Fix an issue that occurred after interrupting
threading.Condition.notify()
.gh-92049: Forbid pickling constants
re._constants.SUCCESS
etc. Previously, pickling did not fail, but the result could not be unpickled.bpo-47029: Always close the read end of the pipe used by
multiprocessing.Queue
after the last write of buffered data to the write end of the pipe to avoidBrokenPipeError
at garbage collection and atmultiprocessing.Queue.close()
calls. Patch by Géry Ogam.gh-91401: Provide a fail-safe way to disable
subprocess
use ofvfork()
via a privatesubprocess._USE_VFORK
attribute. While there is currently no known need for this, if you find a need please only set it toFalse
. File a CPython issue as to why you needed it and link to that from a comment in your code. This attribute is documented as a footnote in 3.11.gh-91910: Add missing f prefix to f-strings in error messages from the
multiprocessing
andasyncio
modules.gh-91810:
ElementTree
methodwrite()
and functiontostring()
now use the text file’s encoding (“UTF-8” if not available) instead of locale encoding in XML declaration whenencoding="unicode"
is specified.gh-91832: Add
required
attribute toargparse.Action
repr output.gh-91734: Fix OSS audio support on Solaris.
gh-91700: Compilation of regular expression containing a conditional expression
(?(group)...)
now raises an appropriatere.error
if the group number refers to not defined group. Previously an internal RuntimeError was raised.gh-91676: Fix
unittest.IsolatedAsyncioTestCase
to shutdown the per test event loop executor before returning from itsrun
method so that a not yet stopped or garbage collected executor state does not persist beyond the test.gh-90568: Parsing
\N
escapes of Unicode Named Character Sequences in aregular expression
raises nowre.error
instead ofTypeError
.gh-91595: Fix the comparison of character and integer inside
Tools.gdb.libpython.write_repr()
. Patch by Yu Liu.gh-90622: Worker processes for
concurrent.futures.ProcessPoolExecutor
are no longer spawned on demand (a feature added in 3.9) when the multiprocessing context start method is"fork"
as that can lead to deadlocks in the child processes due to a fork happening while threads are running.gh-91575: Update case-insensitive matching in the
re
module to the latest Unicode version.gh-91581: Remove an unhandled error case in the C implementation of calls to
datetime.fromtimestamp
with no time zone (i.e. getting a local time from an epoch timestamp). This should have no user-facing effect other than giving a possibly more accurate error message when called with timestamps that fall on 10000-01-01 in the local time. Patch by Paul Ganssle.bpo-47260: Fix
os.closerange()
potentially being a no-op in a Linux seccomp sandbox.bpo-39064:
zipfile.ZipFile
now raiseszipfile.BadZipFile
instead ofValueError
when reading a corrupt zip file in which the central directory offset is negative.bpo-47151: When subprocess tries to use vfork, it now falls back to fork if vfork returns an error. This allows use in situations where vfork isn’t allowed by the OS kernel.
bpo-27929: Fix
asyncio.loop.sock_connect()
to only resolve names forsocket.AF_INET
orsocket.AF_INET6
families. Resolution may not make sense for other families, likesocket.AF_BLUETOOTH
andsocket.AF_UNIX
.bpo-43323: Fix errors in the
email
module if the charset itself contains undecodable/unencodable characters.bpo-47101:
hashlib.algorithms_available
now lists only algorithms that are provided by activated crypto providers on OpenSSL 3.0. Legacy algorithms are not listed unless the legacy provider has been loaded into the default OSSL context.bpo-46787: Fix
concurrent.futures.ProcessPoolExecutor
exception memory leakbpo-45393: Fix the formatting for
await x
andnot x
in the operator precedence table when using thehelp()
system.bpo-46415: Fix ipaddress.ip_{address,interface,network} raising TypeError instead of ValueError if given invalid tuple as address parameter.
bpo-28249: Set
doctest.DocTest.lineno
toNone
when object does not have__doc__
.bpo-45138: Fix a regression in the
sqlite3
trace callback where bound parameters were not expanded in the passed statement string. The regression was introduced in Python 3.10 by bpo-40318. Patch by Erlend E. Aasland.bpo-44493: Add missing terminated NUL in sockaddr_un’s length
This was potentially observable when using non-abstract AF_UNIX datagram sockets to processes written in another programming language.
bpo-42627: Fix incorrect parsing of Windows registry proxy settings
bpo-36073: Raise
ProgrammingError
instead of segfaulting on recursive usage of cursors insqlite3
converters. Patch by Sergey Fedoseev.
Documentation¶
gh-86438: Clarify that
-W
andPYTHONWARNINGS
are matched literally and case-insensitively, rather than as regular expressions, inwarnings
.gh-92240: Added release dates for “What’s New in Python 3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
gh-91888: Add a new
gh
role to the documentation to link to GitHub issues.gh-91783: Document security issues concerning the use of the function
shutil.unpack_archive()
gh-91547: Remove “Undocumented modules” page.
bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
shutil.copytree()
.bpo-38668: Update the introduction to documentation for
os.path
to remove warnings that became irrelevant after the implementations of PEP 383 and PEP 529.bpo-47138: Pin Jinja to a version compatible with Sphinx version 3.2.1.
bpo-46962: All docstrings in code snippets are now wrapped into
PyDoc_STR()
to follow the guideline of PEP 7’s Documentation Strings paragraph. Patch by Oleg Iarygin.bpo-26792: Improve the docstrings of
runpy.run_module()
andrunpy.run_path()
. Original patch by Andrew Brezovsky.bpo-40838: Document that
inspect.getdoc()
,inspect.getmodule()
, andinspect.getsourcefile()
might returnNone
.bpo-45790: Adjust inaccurate phrasing in Defining Extension Types: Tutorial about the
ob_base
field and the macros used to access its contents.bpo-42340: Document that in some circumstances
KeyboardInterrupt
may cause the code to enter an inconsistent state. Provided a sample workaround to avoid it if needed.bpo-41233: Link the errnos referenced in
Doc/library/exceptions.rst
to their respective section inDoc/library/errno.rst
, and vice versa. Previously this was only done for EINTR and InterruptedError. Patch by Yan “yyyyyyyan” Orestes.bpo-38056: Overhaul the Error Handlers documentation in
codecs
.bpo-13553: Document tkinter.Tk args.
Tests¶
gh-92886: Fixing tests that fail when running with optimizations (
-O
) intest_imaplib.py
.gh-92670: Skip
test_shutil.TestCopy.test_copyfile_nonexistent_dir
test on AIX as the test uses a trailing slash to force the OS consider the path as a directory, but on AIX the trailing slash has no effect and is considered as a file.gh-91904: Fix initialization of
PYTHONREGRTEST_UNICODE_GUARD
which prevented running regression tests on non-UTF-8 locale.gh-91607: Fix
test_concurrent_futures
to test the correct multiprocessing start method context in several cases where the test logic mixed this up.bpo-47205: Skip test for
sched_getaffinity()
andsched_setaffinity()
error case on FreeBSD.bpo-47104: Rewrite
asyncio.to_thread()
tests to useunittest.IsolatedAsyncioTestCase
.bpo-29890: Add tests for
ipaddress.IPv4Interface
andipaddress.IPv6Interface
construction with tuple arguments. Original patch and tests by louisom.
Build¶
bpo-47103: Windows
PGInstrument
builds now copy a required DLL into the output directory, making it easier to run the profile stage of a PGO build.
Windows¶
gh-92984: Explicitly disable incremental linking for non-Debug builds
bpo-47194: Update
zlib
to v1.2.12 to resolve CVE-2018-25032.bpo-46785: Fix race condition between
os.stat()
and unlinking a file on Windows, by using errors codes returned byFindFirstFileW()
when appropriate inwin32_xstat_impl
.bpo-40859: Update Windows build to use xz-5.2.5
Tools/Demos¶
gh-91583: Fix regression in the code generated by Argument Clinic for functions with the
defining_class
parameter.
Python 3.10.4 final¶
Release date: 2022-03-23
Core and Builtins¶
bpo-46968: Check for the existence of the “sys/auxv.h” header in
faulthandler
to avoid compilation problems in systems where this header doesn’t exist. Patch by Pablo Galindo
Library¶
bpo-23691: Protect the
re.finditer()
iterator from re-entering.bpo-42369: Fix thread safety of
zipfile._SharedFile.tell()
to avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception when reading aZipFile
from multiple threads.bpo-38256: Fix
binascii.crc32()
when it is compiled to use zlib’c crc32 to work properly on inputs 4+GiB in length instead of returning the wrong result. The workaround prior to this was to always feed the function data in increments smaller than 4GiB or to just call the zlib module function.bpo-39394: A warning about inline flags not at the start of the regular expression now contains the position of the flag.
bpo-47061: Deprecate the various modules listed by PEP 594:
aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt, imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd, sndhdr, spwd, sunau, telnetlib, uu, xdrlib
bpo-2604: Fix bug where doctests using globals would fail when run multiple times.
bpo-45997: Fix
asyncio.Semaphore
re-aquiring FIFO order.bpo-47022: The
asynchat
,asyncore
andsmtpd
modules have been deprecated since at least Python 3.6. Their documentation and deprecation warnings and have now been updated to note they will removed in Python 3.12 (PEP 594).bpo-46421: Fix a unittest issue where if the command was invoked as
python -m unittest
and the filename(s) began with a dot (.), aValueError
is returned.
Python 3.10.3 final¶
Release date: 2022-03-16
Core and Builtins¶
bpo-46940: Avoid overriding
AttributeError
metadata information for nested attribute access calls. Patch by Pablo Galindo.bpo-46852: Rename the private undocumented
float.__set_format__()
method tofloat.__setformat__()
to fix a typo introduced in Python 3.7. The method is only used by test_float. Patch by Victor Stinner.bpo-46794: Bump up the libexpat version into 2.4.6
bpo-46820: Fix parsing a numeric literal immediately (without spaces) followed by “not in” keywords, like in
1not in x
. Now the parser only emits a warning, not a syntax error.bpo-46762: Fix an assert failure in debug builds when a ‘<’, ‘>’, or ‘=’ is the last character in an f-string that’s missing a closing right brace.
bpo-46724: Make sure that all backwards jumps use the
JUMP_ABSOLUTE
instruction, rather thanJUMP_FORWARD
with an argument of(2**32)+offset
.bpo-46732: Correct the docstring for the
__bool__()
method. Patch by Jelle Zijlstra.bpo-46707: Avoid potential exponential backtracking when producing some syntax errors involving lots of brackets. Patch by Pablo Galindo.
bpo-40479: Add a missing call to
va_end()
inModules/_hashopenssl.c
.bpo-46615: When iterating over sets internally in
setobject.c
, acquire strong references to the resulting items from the set. This prevents crashes in corner-cases of various set operations where the set gets mutated.bpo-45773: Remove two invalid “peephole” optimizations from the bytecode compiler.
bpo-43721: Fix docstrings of
getter
,setter
, anddeleter
to clarify that they create a new copy of the property.bpo-46503: Fix an assert when parsing some invalid N escape sequences in f-strings.
bpo-46417: Fix a race condition on setting a type
__bases__
attribute: the internal functionadd_subclass()
now gets thePyTypeObject.tp_subclasses
member after callingPyWeakref_NewRef()
which can trigger a garbage collection which can indirectly modifyPyTypeObject.tp_subclasses
. Patch by Victor Stinner.bpo-46383: Fix invalid signature of
_zoneinfo
’smodule_free
function to resolve a crash on wasm32-emscripten platform.bpo-46070:
Py_EndInterpreter()
now explicitly untracks all objects currently tracked by the GC. Previously, if an object was used later by another interpreter, callingPyObject_GC_UnTrack()
on the object crashed if the previous or the next object of thePyGC_Head
structure became a dangling pointer. Patch by Victor Stinner.bpo-46339: Fix a crash in the parser when retrieving the error text for multi-line f-strings expressions that do not start in the first line of the string. Patch by Pablo Galindo
bpo-46240: Correct the error message for unclosed parentheses when the tokenizer doesn’t reach the end of the source when the error is reported. Patch by Pablo Galindo
bpo-46091: Correctly calculate indentation levels for lines with whitespace character that are ended by line continuation characters. Patch by Pablo Galindo
Library¶
bpo-43253: Fix a crash when closing transports where the underlying socket handle is already invalid on the Proactor event loop.
bpo-47004: Apply bugfixes from importlib_metadata 4.11.3, including bugfix for EntryPoint.extras, which was returning match objects and not the extras strings.
bpo-46985: Upgrade pip wheel bundled with ensurepip (pip 22.0.4)
bpo-46968:
faulthandler
: On Linux 5.14 and newer, dynamically determine size of signal handler stack size CPython allocates usinggetauxval(AT_MINSIGSTKSZ)
. This changes allows for Python extension’s request to Linux kernel to use AMX_TILE instruction set on Sapphire Rapids Xeon processor to succeed, unblocking use of the ISA in frameworks.bpo-46955: Expose
asyncio.base_events.Server
asasyncio.Server
. Patch by Stefan Zabka.bpo-23325: The
signal
module no longer assumes thatSIG_IGN
andSIG_DFL
are small int singletons.bpo-46932: Update bundled libexpat to 2.4.7
bpo-25707: Fixed a file leak in
xml.etree.ElementTree.iterparse()
when the iterator is not exhausted. Patch by Jacob Walls.bpo-44886: Inherit asyncio proactor datagram transport from
asyncio.DatagramTransport
.bpo-46827: Support UDP sockets in
asyncio.loop.sock_connect()
for selector-based event loops. Patch by Thomas Grainger.bpo-46811: Make test suite support Expat >=2.4.5
bpo-46252: Raise
TypeError
ifssl.SSLSocket
is passed to transport-based APIs.bpo-46784: Fix libexpat symbols collisions with user dynamically loaded or statically linked libexpat in embedded Python.
bpo-39327:
shutil.rmtree()
can now work with VirtualBox shared folders when running from the guest operating-system.bpo-46756: Fix a bug in
urllib.request.HTTPPasswordMgr.find_user_password()
andurllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated()
which allowed to bypass authorization. For example, access to URIexample.org/foobar
was allowed if the user was authorized for URIexample.org/foo
.bpo-46643: In
typing.get_type_hints()
, support evaluating stringifiedParamSpecArgs
andParamSpecKwargs
annotations. Patch by Gregory Beauregard.bpo-45863: When the
tarfile
module creates a pax format archive, it will put an integer representation of timestamps in the ustar header (if possible) for the benefit of older unarchivers, in addition to the existing full-precision timestamps in the pax extended header.bpo-46676: Make
typing.ParamSpec
args and kwargs equal to themselves. Patch by Gregory Beauregard.bpo-46672: Fix
NameError
inasyncio.gather()
when initial type check fails.bpo-46655: In
typing.get_type_hints()
, support evaluating bare stringifiedTypeAlias
annotations. Patch by Gregory Beauregard.bpo-45948: Fixed a discrepancy in the C implementation of the
xml.etree.ElementTree
module. Now, instantiating anxml.etree.ElementTree.XMLParser
with atarget=None
keyword provides a defaultxml.etree.ElementTree.TreeBuilder
target as the Python implementation does.bpo-46521: Fix a bug in the
codeop
module that was incorrectly identifying invalid code involving string quotes as valid code.bpo-46581: Brings
ParamSpec
propagation forGenericAlias
in line withConcatenate
(and others).bpo-46591: Make the IDLE doc URL on the About IDLE dialog clickable.
bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4
bpo-46487: Add the
get_write_buffer_limits
method toasyncio.transports.WriteTransport
and to the SSL transport.bpo-45173: Note the configparser deprecations will be removed in Python 3.12.
bpo-46539: In
typing.get_type_hints()
, support evaluating stringifiedClassVar
andFinal
annotations insideAnnotated
. Patch by Gregory Beauregard.bpo-46491: Allow
typing.Annotated
to wraptyping.Final
andtyping.ClassVar
. Patch by Gregory Beauregard.bpo-46436: Fix command-line option
-d
/--directory
in modulehttp.server
which is ignored when combined with command-line option--cgi
. Patch by Géry Ogam.bpo-41403: Make
mock.patch()
raise aTypeError
with a relevant error message on invalid arg. Previously it allowed a crypticAttributeError
to escape.bpo-46474: In
importlib.metadata.EntryPoint.pattern
, avoid potential REDoS by limiting ambiguity in consecutive whitespace.bpo-46469:
asyncio
generic classes now returntypes.GenericAlias
in__class_getitem__
instead of the same class.bpo-46434:
pdb
now gracefully handleshelp
when__doc__
is missing, for example when run with pregenerated optimized.pyc
files.bpo-46333: The
__eq__()
and__hash__()
methods oftyping.ForwardRef
now honor themodule
parameter oftyping.ForwardRef
. Forward references from different modules are now differentiated.bpo-46246: Add missing
__slots__
toimportlib.metadata.DeprecatedList
. Patch by Arie Bovenberg.bpo-46266: Improve day constants in
calendar
.Now all constants (
MONDAY
…SUNDAY
) are documented, tested, and added to__all__
.bpo-46232: The
ssl
module now handles certificates with bit strings in DN correctly.bpo-43118: Fix a bug in
inspect.signature()
that was causing it to fail on some subclasses of classes with a__text_signature__
referencing module globals. Patch by Weipeng Hong.bpo-26552: Fixed case where failing
asyncio.ensure_future()
did not close the coroutine. Patch by Kumar Aditya.bpo-21987: Fix an issue with
tarfile.TarFile.getmember()
getting a directory name with a trailing slash.bpo-20392: Fix inconsistency with uppercase file extensions in
MimeTypes.guess_type()
. Patch by Kumar Aditya.bpo-46080: Fix exception in argparse help text generation if a
argparse.BooleanOptionalAction
argument’s default isargparse.SUPPRESS
and it hashelp
specified. Patch by Felix Fontein.bpo-44439: Fix
.write()
method of a member file inZipFile
, when the input data is an object that supports the buffer protocol, the file length may be wrong.bpo-45703: When a namespace package is imported before another module from the same namespace is created/installed in a different
sys.path
location while the program is running, calling theimportlib.invalidate_caches()
function will now also guarantee the new module is noticed.bpo-24959: Fix bug where
unittest
sometimes drops frames from tracebacks of exceptions raised in tests.bpo-44791: Fix substitution of
ParamSpec
inConcatenate
with different parameter expressions. Substitution with a list of types returns now a tuple of types. Substitution withConcatenate
returns now aConcatenate
with concatenated lists of arguments.bpo-14156: argparse.FileType now supports an argument of ‘-’ in binary mode, returning the .buffer attribute of sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and ‘a’ are treated equivalently to ‘w’ when argument is ‘-’. Patch contributed by Josh Rosenberg
Documentation¶
bpo-46463: Fixes
escape4chm.py
script used when building the CHM documentation file
Tests¶
bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is built with undefined behavior sanitizer (UBSAN): disable UBSAN on the faulthandler_sigfpe() function. Patch by Victor Stinner.
bpo-46708: Prevent default asyncio event loop policy modification warning after
test_asyncio
execution.bpo-46678: The function
make_legacy_pyc
inLib/test/support/import_helper.py
no longer fails whenPYTHONPYCACHEPREFIX
is set to a directory on a different device from where tempfiles are stored.bpo-46616: Ensures
test_importlib.test_windows
cleans up registry keys after completion.bpo-44359: test_ftplib now silently ignores socket errors to prevent logging unhandled threading exceptions. Patch by Victor Stinner.
bpo-46542: Fix a Python crash in test_lib2to3 when using Python built in debug mode: limit the recursion limit. Patch by Victor Stinner.
bpo-46576: test_peg_generator now disables compiler optimization when testing compilation of its own C extensions to significantly speed up the testing on non-debug builds of CPython.
bpo-46542: Fix
test_json
tests checking forRecursionError
: modify these tests to usesupport.infinite_recursion()
. Patch by Victor Stinner.bpo-13886: Skip test_builtin PTY tests on non-ASCII characters if the readline module is loaded. The readline module changes input() behavior, but test_builtin is not intented to test the readline module. Patch by Victor Stinner.
Build¶
bpo-47032: Ensure Windows install builds fail correctly with a non-zero exit code when part of the build fails.
bpo-47024: Update OpenSSL to 1.1.1n for macOS installers and all Windows builds.
bpo-38472: Fix GCC detection in setup.py when cross-compiling. The C compiler is now run with LC_ALL=C. Previously, the detection failed with a German locale.
bpo-46513: configure no longer uses
AC_C_CHAR_UNSIGNED
macro andpyconfig.h
no longer defines reserved symbol__CHAR_UNSIGNED__
.bpo-45925: Update Windows installer to use SQLite 3.37.2.
Windows¶
bpo-44549: Update bzip2 to 1.0.8 in Windows builds to mitigate CVE-2016-3189 and CVE-2019-12900
bpo-46948: Prevent CVE-2022-26488 by ensuring the Add to PATH option in the Windows installer uses the correct path when being repaired.
bpo-46638: Ensures registry virtualization is consistently disabled. For 3.10 and earlier, it remains enabled (some registry writes are protected), while for 3.11 and later it is disabled (registry modifications affect all applications).
macOS¶
bpo-45925: Update macOS installer to SQLite 3.37.2.
IDLE¶
bpo-46630: Make query dialogs on Windows start with a cursor in the entry box.
bpo-45296: Clarify close, quit, and exit in IDLE. In the File menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows). In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there are no other windows, this also exits IDLE.
bpo-45447: Apply IDLE syntax highlighting to
pyi
files. Patch by Alex Waygood and Terry Jan Reedy.
C API¶
Python 3.10.2 final¶
Release date: 2022-01-13
Core and Builtins¶
bpo-46347: Fix memory leak in PyEval_EvalCodeEx.
bpo-46289: ASDL declaration of
FormattedValue
has changed to reflectconversion
field is not optional.bpo-46237: Fix the line number of tokenizer errors inside f-strings. Patch by Pablo Galindo.
bpo-46006: Fix a regression when a type method like
__init__()
is modified in a subinterpreter. Fix a regression in_PyUnicode_EqualToASCIIId()
and typeupdate_slot()
. Revert the change which made the Unicode dictionary of interned strings compatible with subinterpreters: the internal interned dictionary is shared again by all interpreters. Patch by Victor Stinner.bpo-46085: Fix iterator cache mechanism of
OrderedDict
.bpo-46110: Add a maximum recursion check to the PEG parser to avoid stack overflow. Patch by Pablo Galindo
bpo-46054: Fix parser error when parsing non-utf8 characters in source files. Patch by Pablo Galindo.
bpo-46042: Improve the location of the caret in
SyntaxError
exceptions emitted by the symbol table. Patch by Pablo Galindo.bpo-46025: Fix a crash in the
atexit
module involving functions that unregister themselves before raising exceptions. Patch by Pablo Galindo.bpo-46009: Restore behavior from 3.9 and earlier when sending non-None to newly started generator. In 3.9 this did not affect the state of the generator. In 3.10.0 and 3.10.1
gen_func().send(0)
is equivalent togen_func().throw(TypeError(...)
which exhausts the generator. In 3.10.2 onward, the behavior has been reverted to that of 3.9.bpo-46000: Improve compatibility of the
curses
module with NetBSD curses.bpo-46004: Fix the
SyntaxError
location for errors involving for loops with invalid targets. Patch by Pablo Galindobpo-42918: Fix bug where the built-in
compile()
function did not always raise aSyntaxError
when passed multiple statements in ‘single’ mode. Patch by Weipeng Hong.
Library¶
bpo-40479: Fix
hashlib
usedforsecurity option to work correctly with OpenSSL 3.0.0 in FIPS mode.bpo-46070: Fix possible segfault when importing the
asyncio
module from different sub-interpreters in parallel. Patch by Erlend E. Aasland.bpo-46278: Reflect
context
argument inAbstractEventLoop.call_*()
methods. Loop implementations already support it.bpo-46239: Improve error message when importing
asyncio.windows_events
on non-Windows.bpo-20369:
concurrent.futures.wait()
no longer blocks forever when given duplicate Futures. Patch by Kumar Aditya.bpo-46105: Honor spec when generating requirement specs with urls and extras (importlib_metadata 4.8.3).
bpo-26952:
argparse
raisesValueError
with clear message when trying to render usage for an empty mutually-exclusive group. Previously it raised a crypticIndexError
.bpo-27718: Fix help for the
signal
module. Some functions (e.g.signal()
andgetsignal()
) were omitted.bpo-46032: The
registry()
method offunctools.singledispatch()
functions checks now the first argument or the first parameter annotation and raises a TypeError if it is not supported. Previously unsupported “types” were ignored (e.g.typing.List[int]
) or caused an error at calling time (e.g.list[int]
).bpo-46018: Ensure that
math.expm1()
does not raise on underflow.bpo-45755:
typing
generic aliases now reveal the class attributes of the original generic class when passed todir()
. This was the behavior up to Python 3.6, but was changed in 3.7-3.9.bpo-13236:
unittest.TextTestResult
andunittest.TextTestRunner
flush now the output stream more often.bpo-42378: Fixes the issue with log file being overwritten when
logging.FileHandler
is used inatexit
with filemode set to'w'
. Note this will cause the message in atexit not being logged if the log stream is already closed due to shutdown of logging.
Documentation¶
bpo-46120: State that
|
is preferred for readability overUnion
in thetyping
docs.bpo-46040: Fix removal Python version for
@asyncio.coroutine
, the correct value is 3.11.bpo-19737: Update the documentation for the
globals()
function.bpo-45840: Improve cross-references in the documentation for the data model.
Tests¶
bpo-46205: Fix hang in runtest_mp due to race condition
bpo-46263: Fix test_capi on FreeBSD 14-dev: instruct jemalloc to not fill freed memory with junk byte.
bpo-46150: Now
fakename
intest_pathlib.PosixPathTest.test_expanduser
is checked to be non-existent.bpo-46129: Rewrite
asyncio.locks
tests withunittest.IsolatedAsyncioTestCase
usage.bpo-46114: Fix test case for OpenSSL 3.0.1 version. OpenSSL 3.0 uses
0xMNN00PP0L
.
Build¶
macOS¶
bpo-40477: The Python Launcher app for macOS now properly launches scripts and, if necessary, the Terminal app when running on recent macOS releases.
C API¶
bpo-46236: Fix a bug in
PyFunction_GetAnnotations()
that caused it to return atuple
instead of adict
.
Python 3.10.1 final¶
Release date: 2021-12-06
Core and Builtins¶
bpo-42268: Fail the configure step if the selected compiler doesn’t support memory sanitizer. Patch by Pablo Galindo
bpo-45727: Refine the custom syntax error that suggests that a comma may be missing to trigger only when the expressions are detected between parentheses or brackets. Patch by Pablo Galindo
bpo-45614: Fix
traceback
display for exceptions with invalid module name.bpo-45848: Allow the parser to obtain error lines directly from encoded files. Patch by Pablo Galindo
bpo-45826: Fixed a crash when calling
.with_traceback(None)
onNameError
. This occurs internally inunittest.TestCase.assertRaises()
.bpo-45822: Fixed a bug in the parser that was causing it to not respect PEP 263 coding cookies when no flags are provided. Patch by Pablo Galindo
bpo-45820: Fix a segfault when the parser fails without reading any input. Patch by Pablo Galindo
bpo-42540: Fix crash when
os.fork()
is called with an active non-default memory allocator.bpo-45738: Fix computation of error location for invalid continuation characters in the parser. Patch by Pablo Galindo.
bpo-45773: Fix a compiler hang when attempting to optimize certain jump patterns.
bpo-45716: Improve the
SyntaxError
message when usingTrue
,None
orFalse
as keywords in a function call. Patch by Pablo Galindo.bpo-45688:
sys.stdlib_module_names
now contains the macOS-specific module_scproxy
.bpo-30570: Fixed a crash in
issubclass()
from infinite recursion when searching pathological__bases__
tuples.bpo-45521: Fix a bug in the obmalloc radix tree code. On 64-bit machines, the bug causes the tree to hold 46-bits of virtual addresses, rather than the intended 48-bits.
bpo-45494: Fix parser crash when reporting errors involving invalid continuation characters. Patch by Pablo Galindo.
bpo-45408: Fix a crash in the parser when reporting tokenizer errors that occur at the same time unclosed parentheses are detected. Patch by Pablo Galindo.
bpo-45385: Fix reference leak from descr_check. Patch by Dong-hee Na.
bpo-45167: Fix deepcopying of
types.GenericAlias
objects.bpo-44219: Release the GIL while performing
isatty
system calls on arbitrary file descriptors. In particular, this affectsos.isatty()
,os.device_encoding()
andio.TextIOWrapper
. By extension,io.open()
in text mode is also affected. This change solves a deadlock inos.isatty()
. Patch by Vincent Michel in bpo-44219.bpo-44959: Added fallback to extension modules with ‘.sl’ suffix on HP-UX
bpo-44050: Extensions that indicate they use global state (by setting
m_size
to -1) can again be used in multiple interpreters. This reverts to behavior of Python 3.8.bpo-45121: Fix issue where
Protocol.__init__
raisesRecursionError
when it’s called directly or viasuper()
. Patch provided by Yurii Karabas.bpo-45083: When the interpreter renders an exception, its name now has a complete qualname. Previously only the class name was concatenated to the module name, which sometimes resulted in an incorrect full name being displayed.
(This issue impacted only the C code exception rendering, the
traceback
module was using qualname already).bpo-45056: Compiler now removes trailing unused constants from co_consts.
Library¶
bpo-27946: Fix possible crash when getting an attribute of class:
xml.etree.ElementTree.Element
simultaneously with replacing theattrib
dict.bpo-37658: Fix issue when on certain conditions
asyncio.wait_for()
may allow a coroutine to complete successfully, but fail to return the result, potentially causing memory leaks or other issues.bpo-44649: Handle dataclass(slots=True) with a field that has default a default value, but for which init=False.
bpo-45803: Added missing kw_only parameter to dataclasses.make_dataclass().
bpo-45831:
faulthandler
can now write ASCII-only strings (like filenames and function names) with a single write() syscall when dumping a traceback. It reduces the risk of getting an unreadable dump when two threads or two processes dump a traceback to the same file (like stderr) at the same time. Patch by Victor Stinner.bpo-41735: Fix thread lock in
zlib.Decompress.flush()
method beforePyObject_GetBuffer
.bpo-45235: Reverted an argparse bugfix that caused regression in the handling of default arguments for subparsers. This prevented leaf level arguments from taking precedence over root level arguments.
bpo-45765: In importlib.metadata, fix distribution discovery for an empty path.
bpo-45757: Fix bug where
dis
produced an incorrect oparg whenEXTENDED_ARG
is followed by an opcode that does not use its argument.bpo-45644: In-place JSON file formatting using
python3 -m json.tool infile infile
now works correctly, previously it left the file empty. Patch by Chris Wesseling.bpo-45679: Fix caching of multi-value
typing.Literal
.Literal[True, 2]
is no longer equal toLiteral[1, 2]
.bpo-45664: Fix
types.resolve_bases()
andtypes.new_class()
fortypes.GenericAlias
instance as a base.bpo-45663: Fix
dataclasses.is_dataclass()
for dataclasses which are subclasses oftypes.GenericAlias
.bpo-45662: Fix the repr of
dataclasses.InitVar
with a type alias to the built-in class, e.g.InitVar[list[int]]
.bpo-45438: Fix typing.Signature string representation for generic builtin types.
bpo-45574: Fix warning about
print_escape
being unused.bpo-45581:
sqlite3.connect()
now correctly raisesMemoryError
if the underlying SQLite API signals memory error. Patch by Erlend E. Aasland.bpo-45557: pprint.pprint() now handles underscore_numbers correctly. Previously it was always setting it to False.
bpo-45515: Add references to
zoneinfo
in thedatetime
documentation, mostly replacing outdated references todateutil.tz
. Change by Paul Ganssle.bpo-45475: Reverted optimization of iterating
gzip.GzipFile
,bz2.BZ2File
, andlzma.LZMAFile
(see bpo-43787) because it caused regression when user iterate them without having reference of them. Patch by Inada Naoki.bpo-45428: Fix a regression in py_compile when reading filenames from standard input.
bpo-45467: Fix incremental decoder and stream reader in the “raw-unicode-escape” codec. Previously they failed if the escape sequence was split.
bpo-45461: Fix incremental decoder and stream reader in the “unicode-escape” codec. Previously they failed if the escape sequence was split.
bpo-45239: Fixed
email.utils.parsedate_tz()
crashing withUnboundLocalError
on certain invalid input instead of returningNone
. Patch by Ben Hoyt.bpo-45249: Fix the behaviour of
traceback.print_exc()
when displaying the caret when theend_offset
in the exception is set to 0. Patch by Pablo Galindobpo-45416: Fix use of
asyncio.Condition
with explicitasyncio.Lock
objects, which was a regression due to removal of explicit loop arguments. Patch by Joongi Kim.bpo-45419: Correct interfaces on DegenerateFiles.Path.
bpo-44904: Fix bug in the
doctest
module that caused it to fail if a docstring included an example with aclassmethod
property
. Patch by Alex Waygood.bpo-45406: Make
inspect.getmodule()
catchFileNotFoundError
raised by :’func:inspect.getabsfile
, and returnNone
to indicate that the module could not be determined.bpo-45262: Prevent use-after-free in asyncio. Make sure the cached running loop holder gets cleared on dealloc to prevent use-after-free in get_running_loop
bpo-45386: Make
xmlrpc.client
more robust to C runtimes where the underlying Cstrftime
function results in aValueError
when testing for year formatting options.bpo-45371: Fix clang rpath issue in
distutils
. The UnixCCompiler now uses correct clang option to add a runtime library directory (rpath) to a shared library.bpo-20028: Improve error message of
csv.Dialect
when initializing. Patch by Vajrasky Kok and Dong-hee Na.bpo-45343: Update bundled pip to 21.2.4 and setuptools to 58.1.0
bpo-45329: Fix freed memory access in
pyexpat.xmlparser
when building it with an installed expat library <= 2.2.0.bpo-41710: On Unix, if the
sem_clockwait()
function is available in the C library (glibc 2.30 and newer), thethreading.Lock.acquire()
method now uses the monotonic clock (time.CLOCK_MONOTONIC
) for the timeout, rather than using the system clock (time.CLOCK_REALTIME
), to not be affected by system clock changes. Patch by Victor Stinner.bpo-45328: Fixed
http.client.HTTPConnection
to work properly in OSs that don’t support theTCP_NODELAY
socket option.bpo-1596321: Fix the
threading._shutdown()
function when thethreading
module was imported first from a thread different than the main thread: no longer log an error at Python exit.bpo-45274: Fix a race condition in the
Thread.join()
method of thethreading
module. If the function is interrupted by a signal and the signal handler raises an exception, make sure that the thread remains in a consistent state to prevent a deadlock. Patch by Victor Stinner.bpo-45238: Fix
unittest.IsolatedAsyncioTestCase.debug()
: it runs now asynchronous methods and callbacks.bpo-36674:
unittest.TestCase.debug()
raises now aunittest.SkipTest
if the class or the test method are decorated with the skipping decorator.bpo-45235: Fix an issue where argparse would not preserve values in a provided namespace when using a subparser with defaults.
bpo-45183: Have zipimport.zipimporter.find_spec() not raise an exception when the underlying zip file has been deleted and the internal cache has been reset via invalidate_cache().
bpo-45234: Fixed a regression in
copyfile()
,copy()
,copy2()
raisingFileNotFoundError
when source is a directory, which should raiseIsADirectoryError
bpo-45228: Fix stack buffer overflow in parsing J1939 network address.
bpo-45192: Fix the
tempfile._infer_return_type
function so that thedir
argument of thetempfile
functions accepts an object implementing theos.PathLike
protocol.Patch by Kyungmin Lee.
bpo-42135: Fix typo:
importlib.find_loader
is really slated for removal in Python 3.12 not 3.10, like the others in PR 25169.Patch by Hugo van Kemenade.
bpo-45160: When tracing a tkinter variable used by a ttk OptionMenu, callbacks are no longer made twice.
bpo-35474: Calling
mimetypes.guess_all_extensions()
withstrict=False
no longer affects the result of the following call withstrict=True
. Also, mutating the returned list no longer affects the global state.bpo-45166:
typing.get_type_hints()
now works withFinal
wrapped inForwardRef
.bpo-20499: Improve the speed and accuracy of statistics.pvariance().
bpo-24444: Fixed an error raised in
argparse
help display when help for an option is set to 1+ blank spaces or when choices arg is an empty container.bpo-45021: Fix a potential deadlock at shutdown of forked children when using
concurrent.futures
modulebpo-39039: tarfile.open raises
ReadError
when a zlib error occurs during file extraction.bpo-44594: Fix an edge case of
ExitStack
andAsyncExitStack
exception chaining. They will now matchwith
block behavior when__context__
is explicitly set toNone
when the exception is in flight.bpo-44295: Ensure deprecation warning from
assertDictContainsSubset()
points at calling code - by Anthony Sottile.bpo-43498: Avoid a possible “RuntimeError: dictionary changed size during iteration” when adjusting the process count of
ProcessPoolExecutor
.
Documentation¶
bpo-45640: Properly marked-up grammar tokens in the documentation are now clickable and take you to the definition of a given piece of grammar. Patch by Arthur Milchior.
bpo-45788: Link doc for sys.prefix to sysconfig doc on installation paths.
bpo-45772:
socket.socket
documentation is corrected to a class from a function.bpo-45392: Update the docstring of the
type
built-in to remove a redundant line and to mention keyword arguments for the constructor.bpo-45726: Improve documentation for
functools.singledispatch()
andfunctools.singledispatchmethod
.bpo-45680: Amend the docs on
GenericAlias
objects to clarify that non-container classes can also implement__class_getitem__
. Patch contributed by Alex Waygood.bpo-45655: Add a new “relevant PEPs” section to the top of the documentation for the
typing
module. Patch by Alex Waygood.bpo-45604: Add
level
argument tomultiprocessing.log_to_stderr
function docs.bpo-45250: Update the documentation to note that CPython does not consistently require iterators to define
__iter__
.bpo-45464: Mention in the documentation of Built-in Exceptions that inheriting from multiple exception types in a single subclass is not recommended due to possible memory layout incompatibility.
bpo-45449: Add note about PEP 585 in
collections.abc
.bpo-45516: Add protocol description to the
importlib.abc.Traversable
documentation.bpo-20692: Add Programming FAQ entry explaining that int literal attribute access requires either a space after or parentheses around the literal.
bpo-45216: Remove extra documentation listing methods in
difflib
. It was rendering twice in pydoc and was outdated in some places.bpo-45024:
collections.abc
documentation has been expanded to explicitly cover how instance and subclass checks work, with additional doctest examples and an exhaustive list of ABCs which test membership purely by presence of the right special methods. Patch by Raymond Hettinger.bpo-25381: In the extending chapter of the extending doc, update a paragraph about the global variables containing exception information.
bpo-43905: Expanded
astuple()
andasdict()
docs, warning about deepcopy being applied and providing a workaround.
Tests¶
bpo-19460: Add new Test for
email.mime.nonmultipart.MIMENonMultipart
.bpo-45835: Fix race condition in test_queue tests with multiple “feeder” threads.
bpo-45678: Add tests for scenarios in which
functools.singledispatchmethod
is stacked on top of a method that has already been wrapped by two other decorators. Patch by Alex Waygood.bpo-45578: Add tests for
dis.distb()
bpo-45678: Add tests to ensure that
functools.singledispatchmethod
correctly wraps the attributes of the target function.bpo-45577: Add subtests for all
pickle
protocols intest_zoneinfo
.bpo-45566: Fix
test_frozen_pickle
intest_dataclasses
to check allpickle
versions.bpo-43592:
test.libregrtest
now raises the soft resource limit for the maximum number of file descriptors when the default is too low for our test suite as was often the case on macOS.bpo-39679: Add more test cases for
@functools.singledispatchmethod
when combined with@classmethod
or@staticmethod
.bpo-45400: Fix test_name_error_suggestions_do_not_trigger_for_too_many_locals() of test_exceptions if a directory name contains “a1” (like “Python-3.11.0a1”): use a stricter regular expression. Patch by Victor Stinner.
bpo-40173: Fix
test.support.import_helper.import_fresh_module()
.bpo-45280: Add a test case for empty
typing.NamedTuple
.bpo-45269: Cover case when invalid
markers
type is supplied toc_make_encoder
.bpo-45128: Fix
test_multiprocessing_fork
failure due totest_logging
andsys.modules
manipulation.bpo-45209: Fix
UserWarning: resource_tracker
warning in_test_multiprocessing._TestSharedMemory.test_shared_memory_cleaned_after_process_termination
bpo-45195: Fix test_readline.test_nonascii(): sometimes, the newline character is not written at the end, so don’t expect it in the output. Patch by Victor Stinner.
bpo-45156: Fixes infinite loop on
unittest.mock.seal()
of mocks created bycreate_autospec()
.bpo-45125: Improves pickling tests and docs of
SharedMemory
andSharableList
objects.bpo-44860: Update
test_sysconfig.test_user_similar()
for the posix_user scheme:platlib
doesn’t usesys.platlibdir
. Patch by Victor Stinner.bpo-25130: Add calls of
gc.collect()
in tests to support PyPy.
Build¶
bpo-44035: CI now verifies that autoconf files have been regenerated with a current and unpatched autoconf package.
bpo-33393: Update
config.guess
to 2021-06-03 andconfig.sub
to 2021-08-14.Makefile
now has anupdate-config
target to make updating more convenient.bpo-45866:
make regen-all
now produces the same output when run from a directory other than the source tree: when building Python out of the source tree. pegen now strips directory of the “generated by pygen from <FILENAME>” header Patch by Victor Stinner.bpo-41498: Python now compiles on platforms without
sigset_t
. Several functions insignal
are not available whensigset_t
is missing.Based on patch by Roman Yurchak for pyodide.
bpo-45881:
setup.py
now usesCC
from environment first to discover multiarch and cross compile paths.bpo-43158:
setup.py
now uses values from configure script to build the_uuid
extension module. Configure now detects util-linux’slibuuid
, too.bpo-45571:
Modules/Setup
now usePY_CFLAGS_NODIST
instead ofPY_CFLAGS
to compile shared modules.bpo-45561: Run smelly.py tool from $(srcdir).
bpo-45532: Update
sys.version
to usemain
as fallback information. Patch by Jeong YunWon.bpo-45536: The
configure
script now checks whether OpenSSL headers and libraries provide required APIs. Most common APIs are verified. The check detects outdated or missing OpenSSL. Failures do not stop configure.bpo-45221: Fixed regression in handling of
LDFLAGS
andCPPFLAGS
options whereargparse.parse_known_args()
could interpret an option as one of the built-in command line argument, for example-h
for help.bpo-45405: Prevent
internal configure error
when runningconfigure
with recent versions of non-Apple clang. Patch by David Bohman.bpo-45220: Avoid building with the Windows 11 SDK previews automatically. This may be overridden by setting the
DefaultWindowsSDKVersion
environment variable before building.bpo-45067: The ncurses function extended_color_content was introduced in 2017
(https://invisible-island.net/ncurses/NEWS.html#index-t20170401). The
ncurses-devel package in CentOS 7 had a older version ncurses resulted in compilation error. For compiling ncurses with extended color support, we verify the version of the ncurses library >= 20170401.
Windows¶
bpo-45901: When installed through the Microsoft Store and set as the default app for
*.py
files, command line arguments will now be passed to Python when invoking a script without explicitly launching Python (that is,script.py args
rather thanpython script.py args
).bpo-45616: Fix Python Launcher’s ability to distinguish between versions 3.1 and 3.10 when either one is explicitly requested. Previously, 3.1 would be used if 3.10 was requested but not installed, and 3.10 would be used if 3.1 was requested but 3.10 was installed.
bpo-45732: Updates bundled Tcl/Tk to 8.6.12.
bpo-45720: Internal reference to
shlwapi.dll
was dropped to help improve startup time. This DLL will no longer be loaded at the start of every Python process.bpo-43652: Update Tcl/Tk to 8.6.11, actually this time. The previous update incorrectly included 8.6.10.
bpo-45337: venv now warns when the created environment may need to be accessed at a different path, due to redirections, links or junctions. It also now correctly installs or upgrades components when the alternate path is required.
macOS¶
bpo-45732: Update python.org macOS installer to use Tcl/Tk 8.6.12.
bpo-44828: Avoid tkinter file dialog failure on macOS 12 Monterey when using the Tk 8.6.11 provided by python.org macOS installers. Patch by Marc Culler of the Tk project.
bpo-34602: When building CPython on macOS with
./configure --with-undefined-behavior-sanitizer --with-pydebug
, the stack size is now quadrupled to allow for the entire test suite to pass.
IDLE¶
Tools/Demos¶
bpo-44786: Fix a warning in regular expression in the c-analyzer script.
C API¶
bpo-39026: Fix Python.h to build C extensions with Xcode: remove a relative include from
Include/cpython/pystate.h
.bpo-45307: Restore the private C API function
_PyImport_FindExtensionObject()
. It will be removed in Python 3.11.bpo-44687:
BufferedReader.peek()
no longer raisesValueError
when the entire file has already been buffered.bpo-44751: Remove
crypt.h
include from the publicPython.h
header.
Python 3.10.0 final¶
Release date: 2021-10-04
Core and Builtins¶
bpo-45121: Fix issue where
Protocol.__init__
raisesRecursionError
when it’s called directly or viasuper()
. Patch provided by Yurii Karabas.
Library¶
bpo-45234: Fixed a regression in
copyfile()
,copy()
,copy2()
raisingFileNotFoundError
when source is a directory, which should raiseIsADirectoryError
Documentation¶
bpo-45216: Remove extra documentation listing methods in
difflib
. It was rendering twice in pydoc and was outdated in some places.bpo-45024:
collections.abc
documentation has been expanded to explicitly cover how instance and subclass checks work, with additional doctest examples and an exhaustive list of ABCs which test membership purely by presence of the right special methods. Patch by Raymond Hettinger.
Tests¶
bpo-45128: Fix
test_multiprocessing_fork
failure due totest_logging
andsys.modules
manipulation.bpo-44860: Update
test_sysconfig.test_user_similar()
for the posix_user scheme:platlib
doesn’t usesys.platlibdir
. Patch by Victor Stinner.
Build¶
bpo-45067: The ncurses function extended_color_content was introduced in 2017
(https://invisible-island.net/ncurses/NEWS.html#index-t20170401). The
ncurses-devel package in CentOS 7 had a older version ncurses resulted in compilation error. For compiling ncurses with extended color support, we verify the version of the ncurses library >= 20170401.
IDLE¶
bpo-45193: Make completion boxes appear on Ubuntu again.
C API¶
bpo-45307: Restore the private C API function
_PyImport_FindExtensionObject()
. It will be removed in Python 3.11.
Python 3.10.0 release candidate 2¶
Release date: 2021-09-07
Security¶
bpo-42278: Replaced usage of
tempfile.mktemp()
withTemporaryDirectory
to avoid a potential race condition.bpo-44394: Update the vendored copy of libexpat to 2.4.1 (from 2.2.8) to get the fix for the CVE-2013-0340 “Billion Laughs” vulnerability. This copy is most used on Windows and macOS.
bpo-43124: Made the internal
putcmd
function insmtplib
sanitize input for presence of\r
and\n
characters to avoid (unlikely) command injection.
Core and Builtins¶
bpo-45123: Fix PyAiter_Check to only check for the __anext__ presence (not for __aiter__). Rename PyAiter_Check to PyAIter_Check, PyObject_GetAiter -> PyObject_GetAIter.
bpo-45018: Fixed pickling of range iterators that iterated for over 2**32 times.
bpo-45000: A
SyntaxError
is now raised when trying to delete__debug__
. Patch by Dong-hee Na.bpo-44963: Implement
send()
andthrow()
methods foranext_awaitable
objects. Patch by Pablo Galindo.bpo-44962: Fix a race in WeakKeyDictionary, WeakValueDictionary and WeakSet when two threads attempt to commit the last pending removal. This fixes asyncio.create_task and fixes a data loss in asyncio.run where shutdown_asyncgens is not run
bpo-44954: Fixed a corner case bug where the result of
float.fromhex('0x.8p-1074')
was rounded the wrong way.bpo-44947: Refine the syntax error for trailing commas in import statements. Patch by Pablo Galindo.
bpo-44698: Restore behaviour of complex exponentiation with integer-valued exponent of type
float
orcomplex
.bpo-44885: Correct the ast locations of f-strings with format specs and repeated expressions. Patch by Pablo Galindo
bpo-44872: Use new trashcan macros (Py_TRASHCAN_BEGIN/END) in frameobject.c instead of the old ones (Py_TRASHCAN_SAFE_BEGIN/END).
bpo-33930: Fix segmentation fault with deep recursion when cleaning method objects. Patch by Augusto Goulart and Pablo Galindo.
bpo-25782: Fix bug where
PyErr_SetObject
hangs when the current exception has a cycle in its context chain.bpo-44856: Fix reference leaks in the error paths of
update_bases()
and__build_class__
. Patch by Pablo Galindo.bpo-44838: Fixed a bug that was causing the parser to raise an incorrect custom
SyntaxError
for invalid ‘if’ expressions. Patch by Pablo Galindo.bpo-44584: The threading debug (
PYTHONTHREADDEBUG
environment variable) is deprecated in Python 3.10 and will be removed in Python 3.12. This feature requires a debug build of Python. Patch by Victor Stinner.bpo-39091: Fix crash when using passing a non-exception to a generator’s
throw()
method. Patch by Noah Oxer
Library¶
bpo-45081: Fix issue when dataclasses that inherit from
typing.Protocol
subclasses have wrong__init__
. Patch provided by Yurii Karabas.bpo-41620:
run()
now always return aTestResult
instance. Previously it returnedNone
if the test class or method was decorated with a skipping decorator.bpo-43913: Fix bugs in cleaning up classes and modules in
unittest
:Functions registered with
addModuleCleanup()
were not called unless the user definestearDownModule()
in their test module.Functions registered with
addClassCleanup()
were not called iftearDownClass
is set toNone
.Buffering in
TestResult
did not work with functions registered withaddClassCleanup()
andaddModuleCleanup()
.Errors in functions registered with
addClassCleanup()
andaddModuleCleanup()
were not handled correctly in buffered and debug modes.Errors in
setUpModule()
and functions registered withaddModuleCleanup()
were reported in wrong order.And several lesser bugs.
bpo-45030: Fix integer overflow in pickling and copying the range iterator.
bpo-45001: Made email date parsing more robust against malformed input, namely a whitespace-only
Date:
header. Patch by Wouter Bolsterlee.bpo-44449: Fix a crash in the signal handler of the
faulthandler
module: no longer modify the reference count of frame objects. Patch by Victor Stinner.bpo-44955: Method
stopTestRun()
is now always called in pair with methodstartTestRun()
forTestResult
objects implicitly created inrun()
. Previously it was not called for test methods and classes decorated with a skipping decorator.bpo-44935:
subprocess
on Solaris now also usesos.posix_spawn()
for better performance.bpo-44911:
IsolatedAsyncioTestCase
will no longer throw an exception while cancelling leaked tasks. Patch by Bar Harel.bpo-44524: Make exception message more useful when subclass from typing special form alias. Patch provided by Yurii Karabas.
bpo-38956:
argparse.BooleanOptionalAction
’s default value is no longer printed twice when used withargparse.ArgumentDefaultsHelpFormatter
.bpo-44860: Fix the
posix_user
scheme insysconfig
to not depend onsys.platlibdir
.bpo-44581: Upgrade bundled pip to 21.2.3 and setuptools to 57.4.0
bpo-44849: Fix the
os.set_inheritable()
function on FreeBSD 14 for file descriptor opened with theO_PATH
flag: ignore theEBADF
error onioctl()
, fallback on thefcntl()
implementation. Patch by Victor Stinner.bpo-44605: The @functools.total_ordering() decorator now works with metaclasses.
bpo-44524: Fixed an issue wherein the
__name__
and__qualname__
attributes of subscribed specialforms could beNone
.bpo-44822:
sqlite3
user-defined functions and aggregators returningstrings
with embedded NUL characters are no longer truncated. Patch by Erlend E. Aasland.bpo-44801: Ensure that the
ParamSpec
variable in Callable can only be substituted with a parameters expression (a list of types, an ellipsis, ParamSpec or Concatenate).bpo-27334: The
sqlite3
context manager now performs a rollback (thus releasing the database lock) if commit failed. Patch by Luca Citi and Erlend E. Aasland.bpo-41402: Fix
email.message.EmailMessage.set_content()
when called with binary data and7bit
content transfer encoding.bpo-32695: The compresslevel and preset keyword arguments of
tarfile.open()
are now both documented and tested.bpo-34990: Fixed a Y2k38 bug in the compileall module where it would fail to compile files with a modification time after the year 2038.
bpo-38840: Fix
test___all__
on platforms lacking a shared memory implementation.bpo-26228: pty.spawn no longer hangs on FreeBSD, macOS, and Solaris.
bpo-33349: lib2to3 now recognizes async generators everywhere.
Documentation¶
bpo-44957: Promote PEP 604 union syntax by using it where possible. Also, mention
X | Y
more prominently in section aboutUnion
and mentionX | None
at all in section aboutOptional
.bpo-44903: Removed the othergui.rst file, any references to it, and the list of GUI frameworks in the FAQ. In their place I’ve added links to the Python Wiki
page on GUI frameworks
.bpo-33479: Tkinter documentation has been greatly expanded with new “Architecture” and “Threading model” sections.
bpo-36700:
base64
RFC references were updated to point to RFC 4648; a section was added to point users to the new “security considerations” section of the RFC.bpo-44756: Reverted automated virtual environment creation on
make html
when building documentation. It turned out to be disruptive for downstream distributors.bpo-42958: Updated the docstring and docs of
filecmp.cmp()
to be more accurate and less confusing especially in respect to shallow arg.bpo-43066: Added a warning to
zipfile
docs: filename arg with a leading slash may cause archive to be un-openable on Windows systems.bpo-39452: Rewrote
Doc/library/__main__.rst
. Broadened scope of the document to explicitly discuss and differentiate between__main__.py
in packages versus the__name__ == '__main__'
expression (and the idioms that surround it).bpo-27752: Documentation of csv.Dialect is more descriptive.
bpo-41576: document BaseException in favor of bare except
bpo-39498: Add a “Security Considerations” index which links to standard library modules that have explicitly documented security considerations.
bpo-33479: Remove the unqualified claim that tkinter is threadsafe. It has not been true for several years and likely never was. An explanation of what is true may be added later, after more discussion, and possibly after patching _tkinter.c,
Tests¶
bpo-45052:
WithProcessesTestSharedMemory.test_shared_memory_basics
test was ignored, becauseself.assertEqual(sms.size, sms2.size)
line was failing. It is now removed and test is unskipped.The main motivation for this line to be removed from the test is that the
size
ofSharedMemory
is not ever guaranteed to be the same. It is decided by the platform.bpo-45042: Fixes that test classes decorated with
@hashlib_helper.requires_hashdigest
were skipped all the time.bpo-45011: Made tests relying on the
_asyncio
C extension module optional to allow running on alternative Python implementations. Patch by Serhiy Storchaka.bpo-44949: Fix auto history tests of test_readline: sometimes, the newline character is not written at the end, so don’t expect it in the output.
bpo-44891: Tests were added to clarify
id()
is preserved whenobj * 1
is used onstr
andbytes
objects. Patch by Nikita Sobolev.bpo-44852: Add ability to wholesale silence DeprecationWarnings while running the regression test suite.
bpo-40928: Notify users running test_decimal regression tests on macOS of potential harmless “malloc can’t allocate region” messages spewed by test_decimal.
Windows¶
bpo-45007: Update to OpenSSL 1.1.1l in Windows build
macOS¶
bpo-45007: Update macOS installer builds to use OpenSSL 1.1.1l.
bpo-44689:
ctypes.util.find_library()
now works correctly on macOS 11 Big Sur even if Python is built on an older version of macOS. Previously, when built on older macOS systems,find_library
was not able to find macOS system libraries when running on Big Sur due to changes in how system libraries are stored.
Python 3.10.0 release candidate 1¶
Release date: 2021-08-02
Security¶
Core and Builtins¶
bpo-44792: Improve syntax errors for if expressions. Patch by Miguel Brito
bpo-34013: Generalize the invalid legacy statement custom error message (like the one generated when “print” is called without parentheses) to include more generic expressions. Patch by Pablo Galindo
bpo-44732: Rename
types.Union
totypes.UnionType
.bpo-44698: Fix undefined behaviour in complex object exponentiation.
bpo-44653: Support
typing
types in parameter substitution in the union type.bpo-44676: Add ability to serialise
types.Union
objects. Patch provided by Yurii Karabas.bpo-44633: Parameter substitution of the union type with wrong types now raises
TypeError
instead of returningNotImplemented
.bpo-44662: Add
__module__
totypes.Union
. This also fixestypes.Union
issues withtyping.Annotated
. Patch provided by Yurii Karabas.bpo-44655: Include the name of the type in unset __slots__ attribute errors. Patch by Pablo Galindo
bpo-44655: Don’t include a missing attribute with the same name as the failing one when offering suggestions for missing attributes. Patch by Pablo Galindo
bpo-44646: Fix the hash of the union type: it no longer depends on the order of arguments.
bpo-44636: Collapse union of equal types. E.g. the result of
int | int
is nowint
. Fix comparison of the union type with non-hashable objects. E.g.int | str == {}
no longer raises a TypeError.bpo-44635: Convert
None
totype(None)
in the union type constructor.bpo-44589: Mapping patterns in
match
statements with two or more equal literal keys will now raise aSyntaxError
at compile-time.bpo-44606: Fix
__instancecheck__
and__subclasscheck__
for the union type.bpo-42073: The
@classmethod
decorator can now wrap other classmethod-like descriptors.bpo-44490:
typing
now searches for type parameters intypes.Union
objects.get_type_hints
will also properly resolve annotations with nestedtypes.Union
objects. Patch provided by Yurii Karabas.bpo-44490: Add
__parameters__
attribute and__getitem__
operator totypes.Union
. Patch provided by Yurii Karabas.bpo-44472: Fix ltrace functionality when exceptions are raised. Patch by Pablo Galindo
Library¶
bpo-44806: Non-protocol subclasses of
typing.Protocol
ignore now the__init__
method inherited from protocol base classes.bpo-44793: Fix checking the number of arguments when subscribe a generic type with
ParamSpec
parameter.bpo-44784: In importlib.metadata tests, override warnings behavior under expected DeprecationWarnings (importlib_metadata 4.6.3).
bpo-44667: The
tokenize.tokenize()
doesn’t incorrectly generate aNEWLINE
token if the source doesn’t end with a new line character but the last line is a comment, as the function is already generating aNL
token. Patch by Pablo Galindobpo-44752:
rcompleter
does not callgetattr()
onproperty
objects to avoid the side-effect of evaluating the corresponding method.bpo-44720:
weakref.proxy
objects referencing non-iterators now raiseTypeError
rather than dereferencing the nulltp_iternext
slot and crashing.bpo-44704: The implementation of
collections.abc.Set._hash()
now matches that offrozenset.__hash__()
.bpo-44666: Fixed issue in
compileall.compile_file()
whensys.stdout
is redirected. Patch by Stefan Hölzl.bpo-42854: Fixed a bug in the
_ssl
module that was throwingOverflowError
when using_ssl._SSLSocket.write()
and_ssl._SSLSocket.read()
for a big value of thelen
parameter. Patch by Pablo Galindobpo-44353: Refactor
typing.NewType
from function into callable class. Patch provided by Yurii Karabas.bpo-44524: Add missing
__name__
and__qualname__
attributes totyping
module classes. Patch provided by Yurii Karabas.bpo-40897: Give priority to using the current class constructor in
inspect.signature()
. Patch by Weipeng Hong.bpo-44648: Fixed wrong error being thrown by
inspect.getsource()
when examining a class in the interactive session. Instead ofTypeError
, it should beOSError
with appropriate error message.bpo-44608: Fix memory leak in
_tkinter._flatten()
if it is called with a sequence or set, but not list or tuple.bpo-44559: [Enum] module reverted to 3.9; 3.10 changes pushed until 3.11
bpo-41928: Update
shutil.copyfile()
to raiseFileNotFoundError
instead of confusingIsADirectoryError
when a path ending with aos.path.sep
does not exist;shutil.copy()
andshutil.copy2()
are also affected.bpo-44566: handle StopIteration subclass raised from @contextlib.contextmanager generator
bpo-41249: Fixes
TypedDict
to work withtyping.get_type_hints()
and postponed evaluation of annotations across modules.bpo-44461: Fix bug with
pdb
’s handling of import error due to a package which does not have a__main__
modulebpo-43625: Fix a bug in the detection of CSV file headers by
csv.Sniffer.has_header()
and improve documentation of same.bpo-42892: Fixed an exception thrown while parsing a malformed multipart email by
email.message.EmailMessage
.bpo-27827:
pathlib.PureWindowsPath.is_reserved()
now identifies a greater range of reserved filenames, including those with trailing spaces or colons.bpo-38741:
configparser
: using ‘]’ inside a section header will no longer cut the section name short at the ‘]’bpo-27513:
email.utils.getaddresses()
now acceptsemail.header.Header
objects along with string values. Patch by Zackery Spytz.bpo-29298: Fix
TypeError
when required subparsers withoutdest
do not receive arguments. Patch by Anthony Sottile.
Documentation¶
bpo-44740: Replaced occurences of uppercase “Web” and “Internet” with lowercase versions per the 2016 revised Associated Press Style Book.
bpo-44693: Update the definition of __future__ in the glossary by replacing the confusing word “pseudo-module” with a more accurate description.
bpo-35183: Add typical examples to os.path.splitext docs
bpo-30511: Clarify that
shutil.make_archive()
is not thread-safe due to reliance on changing the current working directory.bpo-44561: Update of three expired hyperlinks in Doc/distributing/index.rst: “Project structure”, “Building and packaging the project”, and “Uploading the project to the Python Packaging Index”.
bpo-44613: importlib.metadata is no longer provisional.
bpo-44544: List all kwargs for
textwrap.wrap()
,textwrap.fill()
, andtextwrap.shorten()
. Now, there are nav links to attributes ofTextWrap
, which makes navigation much easier while minimizing duplication in the documentation.bpo-44453: Fix documentation for the return type of
sysconfig.get_path()
.
Tests¶
bpo-44734: Fixed floating point precision issue in turtle tests.
bpo-44708: Regression tests, when run with -w, are now re-running only the affected test methods instead of re-running the entire test file.
bpo-44647: Added a permanent Unicode-valued environment variable to regression tests to ensure they handle this use case in the future. If your test environment breaks because of that, report a bug to us, and temporarily set PYTHONREGRTEST_UNICODE_GUARD=0 in your test environment.
bpo-44515: Adjust recently added contextlib tests to avoid assuming the use of a refcounted GC
Windows¶
bpo-44572: Avoid consuming standard input in the
platform
modulebpo-40263: This is a follow-on bug from https://bugs.python.org/issue26903. Once that is applied we run into an off-by-one assertion problem. The assert was not correct.
macOS¶
Tools/Demos¶
bpo-44756: In the Makefile for documentation (
Doc/Makefile
), thebuild
rule is dependent on thevenv
rule. Therefore,html
,latex
, and other build-dependent rules are also now dependent onvenv
. Thevenv
rule only performs an action if$(VENVDIR)
does not exist.Doc/README.rst
was updated; most users now only need to typemake html
.
C API¶
bpo-41103: Reverts removal of the old buffer protocol because they are part of stable ABI.
bpo-42747: The
Py_TPFLAGS_HAVE_VERSION_TAG
type flag now does nothing. ThePy_TPFLAGS_HAVE_AM_SEND
flag (which was added in 3.10) is removed. Both were unnecessary because it is not possible to have type objects with the relevant fields missing.
Python 3.10.0 beta 4¶
Release date: 2021-07-10
Security¶
bpo-41180: Add auditing events to the
marshal
module, and stop raisingcode.__init__
events for every unmarshalled code object. Directly instantiated code objects will continue to raise an event, and audit event handlers should inspect or collect the raw marshal data. This reduces a significant performance overhead when loading from.pyc
files.
Core and Builtins¶
bpo-44562: Remove uses of
PyObject_GC_Del()
in error path when initializingtypes.GenericAlias
.bpo-41486: Fix a memory consumption and copying performance regression in earlier 3.10 beta releases if someone used an output buffer larger than 4GiB with zlib.decompress on input data that expands that large.
bpo-44553: Implement GC methods for
types.Union
to break reference cycles and prevent memory leaks.bpo-44523: Remove the pass-through for
hash()
ofweakref.proxy
objects to prevent unintended consequences when the original referred object dies while the proxy is part of a hashable object. Patch by Pablo Galindo.bpo-44483: Fix a crash in
types.Union
objects when creating a union of an object with bad__module__
field.bpo-44297: Make sure that the line number is set when entering a comprehension scope. Ensures that backtraces inclusing generator expressions show the correct line number.
bpo-44456: Improve the syntax error when mixing positional and keyword patterns. Patch by Pablo Galindo.
bpo-44368: Improve syntax errors for invalid “as” targets. Patch by Pablo Galindo
bpo-44317: Improve tokenizer error with improved locations. Patch by Pablo Galindo.
bpo-43667: Improve Unicode support in non-UTF locales on Oracle Solaris. This issue does not affect other Solaris systems.
Library¶
bpo-44558: Make the implementation consistency of
indexOf()
between C and Python versions. Patch by Dong-hee Na.bpo-34798: Break up paragraph about
pprint.PrettyPrinter
construction parameters to make it easier to read.bpo-44516: Update vendored pip to 21.1.3
bpo-44468:
typing.get_type_hints()
now finds annotations in classes and base classes with unexpected__module__
. Previously, it skipped those MRO elements.bpo-43977: Set the proper
Py_TPFLAGS_MAPPING
andPy_TPFLAGS_SEQUENCE
flags for subclasses created before a parent has been registered as acollections.abc.Mapping
orcollections.abc.Sequence
.bpo-44482: Fix very unlikely resource leak in
glob
in alternate Python implementations.bpo-44466: The
faulthandler
module now detects if a fatal error occurs during a garbage collector collection. Patch by Victor Stinner.bpo-44404:
tkinter
’safter()
method now supports callables without the__name__
attribute.bpo-44458:
BUFFER_BLOCK_SIZE
is now declared static, to avoid linking collisions when bz2, lmza or zlib are statically linked.bpo-44464: Remove exception for flake8 in deprecated importlib.metadata interfaces. Sync with importlib_metadata 4.6.
bpo-44446: Take into account that
lineno
might beNone
intraceback.FrameSummary
.bpo-44439: Fix in
bz2.BZ2File.write()
/lzma.LZMAFile.write()
methods, when the input data is an object that supports the buffer protocol, the file length may be wrong.bpo-44434: _thread.start_new_thread() no longer calls PyThread_exit_thread() explicitly at the thread exit, the call was redundant. On Linux with the glibc, pthread_exit() aborts the whole process if dlopen() fails to open libgcc_s.so file (ex: EMFILE error). Patch by Victor Stinner.
bpo-44395: Fix
as_string()
to pass unixfrom properly. Patch by Dong-hee Na.bpo-34266: Handle exceptions from parsing the arg of
pdb
’s run/restart command.bpo-44077: It’s now possible to receive the type of service (ToS), a.k.a. differentiated services (DS), a.k.a. differenciated services code point (DSCP) and excplicit congestion notification (ECN) IP header fields with
socket.IP_RECVTOS
.bpo-43024: Improve the help signature of
traceback.print_exception()
,traceback.format_exception()
andtraceback.format_exception_only()
.bpo-30256: Pass multiprocessing BaseProxy argument
manager_owned
through AutoProxy.
Documentation¶
bpo-44558: Match the docstring and python implementation of
countOf()
to the behavior of its c implementation.bpo-38062: Clarify that atexit uses equality comparisons internally.
bpo-40620: Convert examples in tutorial controlflow.rst section 4.3 to be interpreter-demo style.
bpo-13814: In the Design FAQ, answer “Why don’t generators support the with statement?”
bpo-41621: Document that
collections.defaultdict
parameterdefault_factory
defaults to None and is positional-only.
Tests¶
bpo-44287: Fix asyncio test_popen() of test_windows_utils by using a longer timeout. Use military grade battle-tested
test.support.SHORT_TIMEOUT
timeout rather than a hardcoded timeout of 10 seconds: it’s 30 seconds by default, but it is made longer on slow buildbots. Patch by Victor Stinner.bpo-44451: Reset
DeprecationWarning
filters intest.test_importlib.test_metadata_api.APITests.test_entry_points_by_index
to avoidStopIteration
error ifDeprecationWarnings
are ignored.bpo-30256: Add test for nested queues when using
multiprocessing
shared objectsAutoProxy[Queue]
insideListProxy
andDictProxy
Build¶
Windows¶
bpo-44582: Accelerate speed of
mimetypes
initialization using a native implementation of the registry scan.bpo-41299: Fix 16ms jitter when using timeouts in
threading
, such as withthreading.Lock.acquire()
orthreading.Condition.wait()
.
C API¶
bpo-44441:
Py_RunMain()
now resetsPyImport_Inittab
to its initial value at exit. It must be possible to callPyImport_AppendInittab()
orPyImport_ExtendInittab()
at each Python initialization. Patch by Victor Stinner.bpo-40939: Removed documentation for the removed
PyParser_*
C API.
Python 3.10.0 beta 3¶
Release date: 2021-06-17
Core and Builtins¶
bpo-44409: Fix error location information for tokenizer errors raised on initialization of the tokenizer. Patch by Pablo Galindo.
bpo-44396: Fix a possible crash in the tokenizer when raising syntax errors for unclosed strings. Patch by Pablo Galindo.
bpo-44349: Fix an edge case when displaying text from files with encoding in syntax errors. Patch by Pablo Galindo.
bpo-44335: Fix a regression when identifying incorrect characters in syntax errors. Patch by Pablo Galindo
bpo-44304: Fix a crash in the
sqlite3
module that happened when the garbage collector clearssqlite.Statement
objects. Patch by Pablo Galindobpo-44305: Improve error message for
try
blocks withoutexcept
orfinally
blocks. Patch by Pablo Galindo.bpo-43833: Emit a deprecation warning if the numeric literal is immediately followed by one of keywords: and, else, for, if, in, is, or. Raise a syntax error with more informative message if it is immediately followed by other keyword or identifier.
bpo-11105: When compiling
ast.AST
objects with recursive references throughcompile()
, the interpreter doesn’t crash anymore instead it raises aRecursionError
.
Library¶
bpo-42972: The _thread.RLock type now fully implement the GC protocol: add a traverse function and the
Py_TPFLAGS_HAVE_GC
flag. Patch by Victor Stinner.bpo-44422: The
threading.enumerate()
function now uses a reentrant lock to prevent a hang on reentrant call. Patch by Victor Stinner.bpo-44389: Fix deprecation of
ssl.OP_NO_TLSv1_3
bpo-44362: Improve
ssl
module’s deprecation messages, error reporting, and documentation for deprecations.bpo-44342: [Enum] Change pickling from by-value to by-name.
bpo-44356: [Enum] Allow multiple data-type mixins if they are all the same.
bpo-44351: Restore back
parse_makefile()
indistutils.sysconfig
because it behaves differently than the similar implementation insysconfig
.bpo-44242: Remove missing flag check from Enum creation and move into a
verify
decorator.bpo-44246: In
importlib.metadata
, restore compatibility in the result fromDistribution.entry_points
(EntryPoints
) to honor expectations in older implementations and issuing deprecation warnings for these cases: A.EntryPoints
objects are once again mutable, allowing forsort()
and other list-based mutation operations. Avoid deprecation warnings by casting to a mutable sequence (e.g.list(dist.entry_points).sort()
). B.EntryPoints
results once again allow for access by index. To avoid deprecation warnings, cast the result to a Sequence first (e.g.tuple(dist.entry_points)[0]
).bpo-44246: In importlib.metadata.entry_points, de-duplication of distributions no longer requires loading the full metadata for PathDistribution objects, improving entry point loading performance by ~10x.
bpo-43853: Improved string handling for
sqlite3
user-defined functions and aggregates:It is now possible to pass strings with embedded null characters to UDFs
Conversion failures now correctly raise
MemoryError
Patch by Erlend E. Aasland.
bpo-43318: Fix a bug where
pdb
does not always echo cleared breakpoints.bpo-37022:
pdb
now displays exceptions fromrepr()
with itsp
andpp
commands.
Documentation¶
bpo-44392: Added a new section in the C API documentation for types used in type hinting. Documented
Py_GenericAlias
andPy_GenericAliasType
.bpo-38291: Mark
typing.io
andtyping.re
as deprecated since Python 3.8 in the documentation. They were never properly supported by type checkers.bpo-44322: Document that SyntaxError args have a details tuple and that details are adjusted for errors in f-string field replacement expressions.
Tests¶
bpo-44363: Account for address sanitizer in test_capi. test_capi now passes when run GCC address sanitizer.
bpo-43921: Fix test_ssl.test_wrong_cert_tls13(): use
suppress_ragged_eofs=False
, sinceread()
can raisessl.SSLEOFError
on Windows. Patch by Victor Stinner.bpo-43921: Fix test_pha_required_nocert() of test_ssl: catch two more EOF cases (when the
recv()
method returns an empty string). Patch by Victor Stinner.
Build¶
bpo-44381: The Windows build now accepts
EnableControlFlowGuard
set toguard
to enable CFG.
IDLE¶
bpo-40128: Mostly fix completions on macOS when not using tcl/tk 8.6.11 (as with 3.9). The added update_idletask call should be harmless and possibly helpful otherwise.
bpo-33962: Move the indent space setting from the Font tab to the new Windows tab. Patch by Mark Roseman and Terry Jan Reedy.
bpo-40468: Split the settings dialog General tab into Windows and Shell/ED tabs. Move help sources, which extend the Help menu, to the Extensions tab. Make space for new options and shorten the dialog. The latter makes the dialog better fit small screens.
C API¶
bpo-43795: The list in Contents of Limited API now shows the public name
PyFrameObject
rather than_frame
. The non-existing entry_node
no longer appears in the list.bpo-44378:
Py_IS_TYPE()
no longer usesPy_TYPE()
to avoid a compiler warning: no longer castconst PyObject*
toPyObject*
. Patch by Victor Stinner.
Python 3.10.0 beta 2¶
Release date: 2021-05-31
Security¶
bpo-44022: mod:
http.client
now avoids infinitely reading potential HTTP headers after a100 Continue
status response from the server.
Core and Builtins¶
bpo-43667: Improve Unicode support in non-UTF locales on Oracle Solaris. This issue does not affect other Solaris systems.
bpo-44232: Fix a regression in
type()
when a metaclass raises an exception. The C functiontype_new()
must properly report the exception when a metaclass constructor raises an exception and the winner class is not the metaclass. Patch by Victor Stinner.bpo-44201: Avoid side effects of checking for specialized syntax errors in the REPL that was causing it to ask for extra tokens after a syntax error had been detected. Patch by Pablo Galindo
bpo-44184: Fix a crash at Python exit when a deallocator function removes the last strong reference to a heap type. Patch by Victor Stinner.
bpo-44180: The parser doesn’t report generic syntax errors that happen in a position further away that the one it reached in the first pass. Patch by Pablo Galindo
bpo-44168: Fix error message in the parser involving keyword arguments with invalid expressions. Patch by Pablo Galindo
bpo-44143: Fixed a crash in the parser that manifest when raising tokenizer errors when an existing exception was present. Patch by Pablo Galindo.
bpo-44114: Fix incorrect dictkeys_reversed and dictitems_reversed function signatures in C code, which broke webassembly builds.
bpo-43149: Corrent the syntax error message regarding multiple exception types to not refer to “exception groups”. Patch by Pablo Galindo
bpo-44056: Syntax errors when default
except
is not the lastexcept
are reported with the correct location. Patch by Mark Shannon.bpo-43822: The parser will prioritize tokenizer errors over custom syntax errors when raising exceptions. Patch by Pablo Galindo.
bpo-28146: Fix a confusing error message in
str.format()
.
Library¶
bpo-44254: On Mac, give turtledemo button text a color that works on both light or dark background. Programmers cannot control the latter.
bpo-38693: Prefer f-strings to
.format
in importlib.resources.bpo-33693: Importlib.metadata now prefers f-strings to .format.
bpo-44241: Incorporate minor tweaks from importlib_metadata 4.1: SimplePath protocol, support for Metadata 2.2.
bpo-44210: Make importlib.metadata._meta.PackageMetadata public.
bpo-43643: Declare readers.MultiplexedPath.name as a property per the spec.
bpo-33433: For IPv4 mapped IPv6 addresses (RFC 4291 Section 2.5.5.2), the
ipaddress.IPv6Address.is_private
check is deferred to the mapped IPv4 address. This solves a bug where public mapped IPv4 addresses were considered private by the IPv6 check.bpo-44145:
hmac
computations were not releasing the GIL while calling the OpenSSLHMAC_Update
C API (a new feature in 3.9). This unintentionally prevented parallel computation as otherhashlib
algorithms support.bpo-37788: Fix a reference leak when a Thread object is never joined.
bpo-38908: Subclasses of
typing.Protocol
which only have data variables declared will now raise aTypeError
when checked withisinstance
unless they are decorated withruntime_checkable()
. Previously, these checks passed silently. Patch provided by Yurii Karabas.bpo-44098:
typing.ParamSpec
will no longer be found in the__parameters__
of mosttyping
generics except in valid use locations specified by PEP 612. This prevents incorrect usage liketyping.List[P][int]
. This change means incorrect usage which may have passed silently in 3.10 beta 1 and earlier will now error.bpo-44089: Allow subclassing
csv.Error
in 3.10 (it was allowed in 3.9 and earlier but was disallowed in early versions of 3.10).bpo-44059: Register the SerenityOS Browser in the
webbrowser
module.bpo-36515: The
hashlib
module no longer does unaligned memory accesses when compiled for ARM platforms.bpo-44018: random.seed() no longer mutates bytearray inputs.
bpo-38352: Add
IO
,BinaryIO
,TextIO
,Match
, andPattern
totyping.__all__
. Patch by Jelle Zijlstra.bpo-43972: When
http.server.SimpleHTTPRequestHandler
sends a301 (Moved Permanently)
for a directory path not ending with/
, add aContent-Length: 0
header. This improves the behavior for certain clients.bpo-28528: Fix a bug in
pdb
wherecheckline()
raisesAttributeError
if it is called afterreset()
.bpo-43650: Fix
MemoryError
inshutil.unpack_archive()
which fails insideshutil._unpack_zipfile()
on large files. Patch by Igor Bolshakov.bpo-41730:
DeprecationWarning
is now raised when importingtkinter.tix
, which has been deprecated in documentation since Python 3.6.
Documentation¶
bpo-42392: Document the deprecation and removal of the
loop
parameter for many functions and classes inasyncio
.bpo-44195: Corrected references to
TraversableResources
in docs. There is noTraversableReader
.bpo-41963: Document that
ConfigParser
strips off comments when reading configuration files.bpo-44072: Correct where in the numeric ABC hierarchy
**
support is added, i.e., in numbers.Complex, not numbers.Integral.bpo-43558: Add the remark to
dataclasses
documentation that the__init__()
of any base class has to be called in__post_init__()
, along with a code example.bpo-44025: Clarify when ‘_’ in match statements is a keyword, and when not.
Tests¶
bpo-31904: Ignore error string case in test_py_compile
test_file_not_exists()
.bpo-42083: Add test to check that
PyStructSequence_NewType
accepts aPyStructSequence_Desc
withdoc
field set toNULL
.bpo-35753: Fix crash in doctest when doctest parses modules that include unwrappable functions by skipping those functions.
Build¶
bpo-41282: Fix broken
make install
that caused standard library extension modules to be unnecessarily and incorrectly rebuilt during the install phase of cpython.
Windows¶
macOS¶
bpo-43109: Allow –with-lto configure option to work with Apple-supplied Xcode or Command Line Tools.
IDLE¶
bpo-41611: Avoid uncaught exceptions in
AutoCompleteWindow.winconfig_event()
.bpo-41611: Fix IDLE sometimes freezing upon tab-completion on macOS.
bpo-44010: Highlight the new match statement’s soft keywords:
match
,case
, and_
. However, this highlighting is not perfect and will be incorrect in some rare cases, including some_
-s incase
patterns.bpo-44026: Include interpreter’s typo fix suggestions in message line for NameErrors and AttributeErrors. Patch by E. Paine.
Tools/Demos¶
bpo-44074: Make patchcheck automatically detect the correct base branch name (previously it was hardcoded to ‘master’)
C API¶
bpo-43795: The undocumented function
Py_FrozenMain()
is removed from the Limited API.bpo-43795:
PyCodec_Unregister()
is now properly exported as a function in the Windows Stable ABI DLL.
Python 3.10.0 beta 1¶
Release date: 2021-05-03
Security¶
bpo-43434: Creating
sqlite3.Connection
objects now also producessqlite3.connect
andsqlite3.connect/handle
auditing events. Previously these events were only produced bysqlite3.connect()
calls. Patch by Erlend E. Aasland.bpo-43998: The
ssl
module sets more secure cipher suites defaults. Ciphers without forward secrecy and with SHA-1 MAC are disabled by default. Security level 2 prohibits weak RSA, DH, and ECC keys with less than 112 bits of security.SSLContext
defaults to minimum protocol version TLS 1.2. Settings are based on Hynek Schlawack’s research.bpo-43882: The presence of newline or tab characters in parts of a URL could allow some forms of attacks.
Following the controlling specification for URLs defined by WHATWG
urllib.parse()
now removes ASCII newlines and tabs from URLs, preventing such attacks.bpo-43472: Ensures interpreter-level audit hooks receive the
cpython.PyInterpreterState_New
event when called through the_xxsubinterpreters
module.bpo-43362: Fix invalid free in _sha3 module. The issue was introduced in 3.10.0a1. Python 3.9 and earlier are not affected.
bpo-43762: Add audit events for
sqlite3.connect/handle()
,sqlite3.Connection.enable_load_extension()
, andsqlite3.Connection.load_extension()
. Patch by Erlend E. Aasland.bpo-43756: Add new audit event
glob.glob/2
to incorporate the new root_dir and dir_fd arguments added toglob.glob()
andglob.iglob()
.bpo-36384:
ipaddress
module no longer accepts any leading zeros in IPv4 address strings. Leading zeros are ambiguous and interpreted as octal notation by some libraries. For example the legacy functionsocket.inet_aton()
treats leading zeros as octal notatation. glibc implementation of moderninet_pton()
does not accept any leading zeros. For a while theipaddress
module used to accept ambiguous leading zeros.bpo-43075: Fix Regular Expression Denial of Service (ReDoS) vulnerability in
urllib.request.AbstractBasicAuthHandler
. The ReDoS-vulnerable regex has quadratic worst-case complexity and it allows cause a denial of service when identifying crafted invalid RFCs. This ReDoS issue is on the client side and needs remote attackers to control the HTTP server.bpo-42800: Audit hooks are now fired for frame.f_code, traceback.tb_frame, and generator code/frame attribute access.
bpo-37363: Add audit events to the
http.client
module.
Core and Builtins¶
bpo-43977: Prevent classes being both a sequence and a mapping when pattern matching.
bpo-43977: Use
tp_flags
on the class object to determine if the subject is a sequence or mapping when pattern matching. Avoids the need to importcollections.abc
when pattern matching.bpo-43892: Restore proper validation of complex literal value patterns when parsing
match
blocks.bpo-43933: Set frame.f_lineno to the line number of the ‘with’ kweyword when executing the call to
__exit__
.bpo-43933: If the current position in a frame has no line number then set the f_lineno attribute to None, instead of -1, to conform to PEP 626. This should not normally be possible, but might occur in some unusual circumstances.
bpo-43963: Importing the
_signal
module in a subinterpreter has no longer side effects.bpo-42739: The internal representation of line number tables is changed to not use sentinels, and an explicit length parameter is added to the out of process API function
PyLineTable_InitAddressRange
. This makes the handling of line number tables more robust in some circumstances.bpo-43908: Make
re
types immutable. Patch by Erlend E. Aasland.bpo-43908: Make the
array.array
type immutable. Patch by Erlend E. Aasland.bpo-43901: Change class and module objects to lazy-create empty annotations dicts on demand. The annotations dicts are stored in the object’s __dict__ for backwards compatibility.
bpo-43892: Match patterns now use new dedicated AST nodes (
MatchValue
,MatchSingleton
,MatchSequence
,MatchStar
,MatchMapping
,MatchClass
) rather than reusing expression AST nodes.MatchAs
andMatchOr
are now defined as pattern nodes rather than as expression nodes. Patch by Nick Coghlan.bpo-42725: Usage of
await
/yield
/yield from
and named expressions within an annotation is now forbidden when PEP 563 is activated.bpo-43754: When performing structural pattern matching (PEP 634), captured names are now left unbound until the entire pattern has matched successfully.
bpo-42737: Annotations for complex targets (everything beside simple names) no longer cause any runtime effects with
from __future__ import annotations
.bpo-43914:
SyntaxError
exceptions raised by the interpreter will highlight the full error range of the expression that consistutes the syntax error itself, instead of just where the problem is detected. Patch by Pablo Galindo.bpo-38605: Revert making
from __future__ import annotations
the default. This follows the Steering Council decision to postpone PEP 563 changes to at least Python 3.11. See the original email for more information regarding the decision: https://mail.python.org/archives/list/python-dev@python.org/thread/CLVXXPQ2T2LQ5MP2Y53VVQFCXYWQJHKZ/. Patch by Pablo Galindo.bpo-43475: Hashes of NaN values now depend on object identity. Formerly, they always hashed to 0 even though NaN values are not equal to one another. Having the same hash for unequal values caused pile-ups in hash tables.
bpo-43859: Improve the error message for
IndentationError
exceptions. Patch by Pablo Galindobpo-41323: Constant tuple folding in bytecode optimizer now reuses tuple in constant table.
bpo-43846: Data stack usage is much reduced for large literal and call expressions.
bpo-38530: When printing
NameError
raised by the interpreter,PyErr_Display()
will offer suggestions of similar variable names in the function that the exception was raised from. Patch by Pablo Galindobpo-43823: Improve syntax errors for invalid dictionary literals. Patch by Pablo Galindo.
bpo-43822: Improve syntax errors in the parser for missing commas between expressions. Patch by Pablo Galindo.
bpo-43798:
ast.alias
nodes now include source location metadata attributes e.g. lineno, col_offset.bpo-43797: Improve
SyntaxError
error messages for invalid comparisons. Patch by Pablo Galindo.bpo-43760: Move the flag for checking whether tracing is enabled to the C stack, from the heap. Should speed up dispatch in the interpreter.
bpo-43682: Static methods (
@staticmethod
) and class methods (@classmethod
) now inherit the method attributes (__module__
,__name__
,__qualname__
,__doc__
,__annotations__
) and have a new__wrapped__
attribute. Patch by Victor Stinner.bpo-43751: Fixed a bug where
anext(ait, default)
would erroneously return None.bpo-42128:
__match_args__
is no longer allowed to be a list.bpo-43683: Add GEN_START opcode. Marks start of generator, including async, or coroutine and handles sending values to a newly created generator or coroutine.
bpo-43105: Importlib now resolves relative paths when creating module spec objects from file locations.
bpo-43682: Static methods (
@staticmethod
) are now callable as regular functions. Patch by Victor Stinner.bpo-42609: Prevented crashes in the AST validator and optimizer when compiling some absurdly long expressions like
"+0"*1000000
.RecursionError
is now raised instead.bpo-38530: When printing
AttributeError
,PyErr_Display()
will offer suggestions of similar attribute names in the object that the exception was raised from. Patch by Pablo Galindo
Library¶
bpo-44015: In @dataclass(), raise a TypeError if KW_ONLY is specified more than once.
bpo-25478: Added a total() method to collections.Counter() to compute the sum of the counts.
bpo-43733: Change
netrc.netrc
to use UTF-8 encoding before using locale encoding.bpo-43979: Removed an unnecessary list comprehension before looping from
urllib.parse.parse_qsl()
. Patch by Christoph Zwerschke and Dong-hee Na.bpo-43993: Update bundled pip to 21.1.1.
bpo-43957: [Enum] Deprecate
TypeError
when non-member is used in a containment check; In 3.12True
orFalse
will be returned instead, and containment will returnTrue
if the value is either a member of that enum or one of its members’ value.bpo-42904: For backwards compatibility with previous minor versions of Python, if
typing.get_type_hints()
receives no namespace dictionary arguments,typing.get_type_hints()
will search through the global then local namespaces during evaluation of stringized type annotations (string forward references) inside a class.bpo-43945: [Enum] Deprecate non-standard mixin format() behavior: in 3.12 the enum member, not the member’s value, will be used for format() calls.
bpo-41139: Deprecate undocumented
cgi.log()
API.bpo-43937: Fixed the
turtle
module working with non-default root window.bpo-43930: Update bundled pip to 21.1 and setuptools to 56.0.0
bpo-43907: Fix a bug in the pure-Python pickle implementation when using protocol 5, where bytearray instances that occur several time in the pickled object graph would incorrectly unpickle into repeated copies of the bytearray object.
bpo-43926: In
importlib.metadata
, provide a uniform interface toDescription
, allow for any field to be encoded with multiline values, remove continuation lines from multiline values, and add a.json
property for easy access to the PEP 566 JSON-compatible form. Sync withimportlib_metadata 4.0
.bpo-43920: OpenSSL 3.0.0:
load_verify_locations()
now returns a consistent error message when cadata contains no valid certificate.bpo-43607:
urllib
can now convert Windows paths with\\?\
prefixes into URL paths.bpo-43817: Add
inspect.get_annotations()
, which safely computes the annotations defined on an object. It works around the quirks of accessing the annotations from various types of objects, and makes very few assumptions about the object passed in.inspect.get_annotations()
can also correctly un-stringize stringized annotations.inspect.signature()
,inspect.from_callable()
, andinspect.from_function()
now callinspect.get_annotations()
to retrieve annotations. This meansinspect.signature()
andinspect.from_callable()
can now un-stringize stringized annotations, too.bpo-43284: platform.win32_ver derives the windows version from sys.getwindowsversion().platform_version which in turn derives the version from kernel32.dll (which can be of a different version than Windows itself). Therefore change the platform.win32_ver to determine the version using the platform module’s _syscmd_ver private function to return an accurate version.
bpo-42854: The
ssl
module now usesSSL_read_ex
andSSL_write_ex
internally. The functions support reading and writing of data larger than 2 GB. Writing zero-length data no longer fails with a protocol violation error.bpo-42333: Port
_ssl
extension module to multiphase initialization.bpo-43880:
ssl
now raises DeprecationWarning for OP_NO_SSL/TLS* options, old TLS versions, old protocols, and other features that have been deprecated since Python 3.6, 3.7, or OpenSSL 1.1.0.bpo-41559: PEP 612 is now implemented purely in Python; builtin
types.GenericAlias
objects no longer includetyping.ParamSpec
in__parameters__
(with the exception ofcollections.abc.Callable
‘sGenericAlias
). This means previously invalid uses ofParamSpec
(such aslist[P]
) which worked in earlier versions of Python 3.10 alpha, will now raiseTypeError
during substitution.bpo-43867: The
multiprocessing
Server
class now explicitly catchesSystemExit
and closes the client connection in this case. It happens when theServer.serve_client()
method reaches the end of file (EOF).bpo-40443: Remove unused imports: pyclbr no longer uses copy, and typing no longer uses ast. Patch by Victor Stinner.
bpo-43820: Remove an unneeded copy of the namespace passed to dataclasses.make_dataclass().
bpo-43787: Add
__iter__()
method tobz2.BZ2File
,gzip.GzipFile
, andlzma.LZMAFile
. It makes iterating them about 2x faster. Patch by Inada Naoki.bpo-43680: Deprecate io.OpenWrapper and _pyio.OpenWrapper: use io.open and _pyio.open instead. Until Python 3.9, _pyio.open was not a static method and builtins.open was set to OpenWrapper to not become a bound method when set to a class variable. _io.open is a built-in function whereas _pyio.open is a Python function. In Python 3.10, _pyio.open() is now a static method, and builtins.open() is now io.open().
bpo-43680: The Python
_pyio.open()
function becomes a static method to behave asio.open()
built-in function: don’t become a bound method when stored as a class variable. It becomes possible since static methods are now callable in Python 3.10. Moreover,_pyio.OpenWrapper()
becomes a simple alias to_pyio.open()
. Patch by Victor Stinner.bpo-41515: Fix
KeyError
raised intyping.get_type_hints()
due to synthetic modules that don’t appear insys.modules
.bpo-43776: When
subprocess.Popen
args are provided as a string or aspathlib.Path
, the Popen instance repr now shows the right thing.bpo-42248: [Enum] ensure exceptions raised in
_missing__
are releasedbpo-43744: fix issue with enum member name matching the start of a private variable name
bpo-43772: Fixed the return value of
TypeVar.__ror__
. Patch by Jelle Zijlstra.bpo-43764: Add match_args parameter to @dataclass decorator to allow suppression of __match_args__ generation.
bpo-43799: OpenSSL 3.0.0: define
OPENSSL_API_COMPAT
1.1.1 to suppress deprecation warnings. Python requires OpenSSL 1.1.1 APIs.bpo-43478: Mocks can no longer be used as the specs for other Mocks. As a result, an already-mocked object cannot have an attribute mocked using
autospec=True
or be the subject of acreate_autospec(...)
call. This can uncover bugs in tests since these Mock-derived Mocks will always pass certain tests (e.g.isinstance()
) and builtin assert functions (e.g. assert_called_once_with) will unconditionally pass.bpo-43794: Add
ssl.OP_IGNORE_UNEXPECTED_EOF
constants (OpenSSL 3.0.0)bpo-43785: Improve
bz2.BZ2File
performance by removing the RLock from BZ2File. This makes BZ2File thread unsafe in the face of multiple simultaneous readers or writers, just like its equivalent classes ingzip
andlzma
have always been. Patch by Inada Naoki.bpo-43789: OpenSSL 3.0.0: Don’t call the password callback function a second time when first call has signaled an error condition.
bpo-43788: The header files for
ssl
error codes are now OpenSSL version-specific. Exceptions will now show correct reason and library codes. Themake_ssl_data.py
script has been rewritten to use OpenSSL’s text file with error codes.bpo-43766: Implement PEP 647 in the
typing
module by addingTypeGuard
.bpo-25264:
os.path.realpath()
now accepts a strict keyword-only argument. When set toTrue
,OSError
is raised if a path doesn’t exist or a symlink loop is encountered.bpo-43780: In
importlib.metadata
, incorporate changes from importlib_metadata 3.10: Add mtime-based caching during distribution discovery. Flagged use of dict result fromentry_points()
as deprecated.The
P.args
andP.kwargs
attributes oftyping.ParamSpec
are now instances of the new classestyping.ParamSpecArgs
andtyping.ParamSpecKwargs
, which enables a more usefulrepr()
. Patch by Jelle Zijlstra.bpo-43731: Add an
encoding
parameterlogging.fileConfig()
.bpo-43712: Add
encoding
anderrors
parameters tofileinput.input()
andfileinput.FileInput
.bpo-38659: A
simple_enum
decorator is added to theenum
module to convert a normal class into an Enum.test_simple_enum
added to test simple enums against a corresponding normal Enum. Standard library modules updated to usesimple_enum
.bpo-43764: Fix an issue where
__match_args__
generation could fail for somedataclasses
.bpo-43752: Fix
sqlite3
regression for zero-sized blobs with converters, whereb""
was returned instead ofNone
. The regression was introduced by PR 24723. Patch by Erlend E. Aasland.bpo-43655:
tkinter
dialog windows are now recognized as dialogs by window managers on macOS and X Window.bpo-43723: The following
threading
methods are now deprecated and should be replaced:currentThread
=>threading.current_thread()
activeCount
=>threading.active_count()
Condition.notifyAll
=>threading.Condition.notify_all()
Event.isSet
=>threading.Event.is_set()
Thread.setName
=>threading.Thread.name
thread.getName
=>threading.Thread.name
Thread.isDaemon
=>threading.Thread.daemon
Thread.setDaemon
=>threading.Thread.daemon
Patch by Jelle Zijlstra.
bpo-2135: Deprecate find_module() and find_loader() implementations in importlib and zipimport.
bpo-43534:
turtle.textinput()
andturtle.numinput()
create now a transient window working on behalf of the canvas window.bpo-43532: Add the ability to specify keyword-only fields to dataclasses. These fields will become keyword-only arguments to the generated __init__.
bpo-43522: Fix problem with
hostname_checks_common_name
. OpenSSL does not copy hostflags from struct SSL_CTX to struct SSL.bpo-8978: Improve error message for
tarfile.open()
whenlzma
/bz2
are unavailable. Patch by Anthony Sottile.bpo-42967: Allow
bytes
separator
argument inurllib.parse.parse_qs
andurllib.parse.parse_qsl
when parsingstr
query strings. Previously, this raised aTypeError
.bpo-43296: Improve
sqlite3
error handling:sqlite3_value_blob()
errors that setSQLITE_NOMEM
now raiseMemoryError
. Patch by Erlend E. Aasland.bpo-43312: New functions
sysconfig.get_preferred_scheme()
andsysconfig.get_default_scheme()
are added to query a platform for its preferred “user”, “home”, and “prefix” (default) scheme names.bpo-43265: Improve
sqlite3.Connection.backup()
error handling. The error message for non-existent target database names is nowunknown database <database name>
instead ofSQL logic error
. Patch by Erlend E. Aasland.bpo-41282: Install schemes in
distutils.command.install
are now loaded fromsysconfig
.bpo-41282:
distutils.sysconfig
has been merged tosysconfig
.bpo-43176: Fixed processing of a dataclass that inherits from a frozen dataclass with no fields. It is now correctly detected as an error.
bpo-43080:
pprint
now has support fordataclasses.dataclass
. Patch by Lewis Gaul.bpo-39950: Add
pathlib.Path.hardlink_to()
method that supersedeslink_to()
. The new method has the same argument order assymlink_to()
.bpo-42904:
typing.get_type_hints()
now checks the local namespace of a class when evaluating PEP 563 annotations inside said class.bpo-42269: Add
slots
parameter todataclasses.dataclass
decorator to automatically generate__slots__
for class. Patch provided by Yurii Karabas.bpo-39529: Deprecated use of
asyncio.get_event_loop()
without running event loop. Emit deprecation warning forasyncio
functions which implicitly create aFuture
orTask
objects if there is no running event loop and no explicit loop argument is passed:ensure_future()
,wrap_future()
,gather()
,shield()
,as_completed()
and constructors ofFuture
,Task
,StreamReader
,StreamReaderProtocol
.bpo-18369: Certificate and PrivateKey classes were added to the ssl module. Certificates and keys can now be loaded from memory buffer, too.
bpo-41486: Use a new output buffer management code for
bz2
/lzma
/zlib
modules, and add.readall()
function to_compression.DecompressReader
class. These bring some performance improvements. Patch by Ma Lin.bpo-31870: The
ssl.get_server_certificate()
function now has a timeout parameter.bpo-41735: Fix thread locks in zlib module may go wrong in rare case. Patch by Ma Lin.
bpo-36470: Fix dataclasses with
InitVar
s andreplace()
. Patch by Claudiu Popa.bpo-40849: Expose X509_V_FLAG_PARTIAL_CHAIN ssl flag
bpo-35114:
ssl.RAND_status()
now returns a boolean value (as documented) instead of1
or0
.bpo-39906:
pathlib.Path.stat()
andchmod()
now accept a follow_symlinks keyword-only argument for consistency with corresponding functions in theos
module.bpo-39899:
os.path.expanduser()
now refuses to guess Windows home directories if the basename of current user’s home directory does not match their username.pathlib.Path.expanduser()
andhome()
now consistently raiseRuntimeError
exception when a home directory cannot be resolved. Previously aKeyError
exception could be raised on Windows when the"USERNAME"
environment variable was unset.bpo-36076: Added SNI support to
ssl.get_server_certificate()
.bpo-38490: Covariance, Pearson’s correlation, and simple linear regression functionality was added to statistics module. Patch by Tymoteusz Wołodźko.
bpo-33731: Provide a locale.localize() function, which converts a normalized number string into a locale format.
bpo-32745: Fix a regression in the handling of ctypes’
ctypes.c_wchar_p
type: embedded null characters would cause aValueError
to be raised. Patch by Zackery Spytz.
Documentation¶
bpo-43987: Add “Annotations Best Practices” document as a new HOWTO.
bpo-43977: Document the new
Py_TPFLAGS_MAPPING
andPy_TPFLAGS_SEQUENCE
type flags.bpo-43959: The documentation on the PyContextVar C-API was clarified.
bpo-43938: Update dataclasses documentation to express that FrozenInstanceError is derived from AttributeError.
bpo-43778: Fix the Sphinx glossary_search extension: create the _static/ sub-directory if it doesn’t exist.
bpo-43755: Update documentation to reflect that unparenthesized lambda expressions can no longer be the expression part in an
if
clause in comprehensions and generator expressions since Python 3.9.bpo-43739: Fixing the example code in Doc/extending/extending.rst to declare and initialize the pmodule variable to be of the right type.
Tests¶
bpo-43961: Fix test_logging.test_namer_rotator_inheritance() on Windows: use
os.replace()
rather thanos.rename()
. Patch by Victor Stinner.bpo-43842: Fix a race condition in the SMTP test of test_logging. Don’t close a file descriptor (socket) from a different thread while asyncore.loop() is polling the file descriptor. Patch by Victor Stinner.
bpo-43843:
test.libregrtest
now marks a test as ENV_CHANGED (altered the execution environment) if a thread raises an exception but does not catch it. It sets a hook onthreading.excepthook()
. Use--fail-env-changed
option to mark the test as failed. Patch by Victor Stinner.bpo-43811: Tests multiple OpenSSL versions on GitHub Actions. Use ccache to speed up testing.
bpo-43791: OpenSSL 3.0.0: Disable testing of legacy protocols TLS 1.0 and 1.1. Tests are failing with TLSV1_ALERT_INTERNAL_ERROR.
Build¶
Windows¶
bpo-35306: Adds additional arguments to
os.startfile()
function.bpo-43538: Avoid raising errors from
pathlib.Path.exists()
when passed an invalid filename.bpo-38822: Fixed
os.stat()
failing on inaccessible directories with a trailing slash, rather than falling back to the parent directory’s metadata. This implicitly affectedos.path.exists()
andos.path.isdir()
.bpo-26227: Fixed decoding of host names in
socket.gethostbyaddr()
andsocket.gethostbyname_ex()
.bpo-40432: Updated pegen regeneration script on Windows to find and use Python 3.8 or higher. Prior to this, pegen regeneration already required 3.8 or higher, but the script may have used lower versions of Python.
bpo-43745: Actually updates Windows release to OpenSSL 1.1.1k. Earlier releases were mislabelled and actually included 1.1.1i again.
bpo-43652: Update Tcl and Tk to 8.6.11 in Windows installer.
bpo-43492: Upgrade Windows installer to use SQLite 3.35.5.
bpo-30555: Fix
WindowsConsoleIO
errors in the presence of fd redirection. Patch by Segev Finer.
macOS¶
bpo-42119: Fix check for macOS SDK paths when building Python. Narrow search to match contents of SDKs, namely only files in
/System/Library
,/System/IOSSupport
, and/usr
other than/usr/local
. Previously, anything under/System
was assumed to be in an SDK which causes problems with the new file system layout in 10.15+ where user file systems may appear to be mounted under/System
. Paths in/Library
were also incorrectly treated as SDK locations.bpo-43568: Drop support for MACOSX_DEPLOYMENT_TARGET < 10.3
bpo-44009: Provide “python3.x-intel64” executable to allow reliably forcing macOS universal2 framework builds to run under Rosetta 2 Intel-64 emulation on Apple Silicon Macs. This can be useful for testing or when universal2 wheels are not yet available.
bpo-43851: Build SQLite with
SQLITE_OMIT_AUTOINIT
on macOS. Patch by Erlend E. Aasland.bpo-43492: Update macOS installer to use SQLite 3.35.4.
bpo-42235:
Mac/BuildScript/build-installer.py
will now use “–enable-optimizations” and--with-lto
when building on macOS 10.15 or later.
IDLE¶
bpo-37903: Add mouse actions to the shell sidebar. Left click and optional drag selects one or more lines, as with the editor line number sidebar. Right click after selecting raises a context menu with ‘copy with prompts’. This zips together prompts from the sidebar with lines from the selected text.
bpo-43981: Fix reference leak in test_sidebar and test_squeezer. Patches by Terry Jan Reedy and Pablo Galindo
bpo-37892: Indent IDLE Shell input with spaces instead of tabs
bpo-43655: IDLE dialog windows are now recognized as dialogs by window managers on macOS and X Window.
bpo-37903: IDLE’s shell now shows prompts in a separate side-bar.
C API¶
bpo-43916: Add a new
Py_TPFLAGS_DISALLOW_INSTANTIATION
type flag to disallow creating type instances. Patch by Victor Stinner.bpo-43774: Remove the now unused
PYMALLOC_DEBUG
macro. Debug hooks on memory allocators are now installed by default if Python is built in debug mode (ifPy_DEBUG
macro is defined). Moreover, they can now be used on Python build in release mode (ex: usingPYTHONMALLOC=debug
environment variable).bpo-43962: _PyInterpreterState_IDIncref() now calls _PyInterpreterState_IDInitref() and always increments id_refcount. Previously, calling _xxsubinterpreters.get_current() could create an id_refcount inconsistency when a _xxsubinterpreters.InterpreterID object was deallocated. Patch by Victor Stinner.
bpo-28254: Add new C-API functions to control the state of the garbage collector:
PyGC_Enable()
,PyGC_Disable()
,PyGC_IsEnabled()
, corresponding to the functions in thegc
module.bpo-43908: Introduce
Py_TPFLAGS_IMMUTABLETYPE
flag for immutable type objects, and modifyPyType_Ready()
to set it for static types. Patch by Erlend E. Aasland.bpo-43795:
PyMem_Calloc()
is now available in the limited C API (Py_LIMITED_API
).bpo-43868:
PyOS_ReadlineFunctionPointer()
is no longer exported by limited C API headers and bypython3.dll
on Windows. Like any function that takesFILE*
, it is not part of the stable ABI.bpo-43795: Stable ABI and limited API definitions are generated from a central manifest (PEP 652).
bpo-43753: Add the
Py_Is(x, y)
function to test if the x object is the y object, the same asx is y
in Python. Add also thePy_IsNone()
,Py_IsTrue()
,Py_IsFalse()
functions to test if an object is, respectively, theNone
singleton, theTrue
singleton or theFalse
singleton. Patch by Victor Stinner.
Python 3.10.0 alpha 7¶
Release date: 2021-04-05
Security¶
bpo-42988: CVE-2021-3426: Remove the
getfile
feature of thepydoc
module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer.bpo-43285:
ftplib
no longer trusts the IP address value returned from the server in response to the PASV command by default. This prevents a malicious FTP server from using the response to probe IPv4 address and port combinations on the client network.Code that requires the former vulnerable behavior may set a
trust_server_pasv_ipv4_address
attribute on theirftplib.FTP
instances toTrue
to re-enable it.bpo-43439: Add audit hooks for
gc.get_objects()
,gc.get_referrers()
andgc.get_referents()
. Patch by Pablo Galindo.
Core and Builtins¶
bpo-27129: Update CPython bytecode magic number.
bpo-43672: Raise ImportWarning when calling find_loader().
bpo-43660: Fix crash that happens when replacing
sys.stderr
with a callable that can remove the object while an exception is being printed. Patch by Pablo Galindo.bpo-27129: The bytecode interpreter uses instruction, rather byte, offsets internally. This reduces the number of EXTENDED_ARG instructions needed and streamlines instruction dispatch a bit.
bpo-40645: Fix reference leak in the
_hashopenssl
extension. Patch by Pablo Galindo.bpo-42134: Calls to find_module() by the import system now raise ImportWarning.
bpo-41064: Improve the syntax error for invalid usage of double starred elements (‘**’) in f-strings. Patch by Pablo Galindo.
bpo-43575: Speed up calls to
map()
by using the PEP 590vectorcall
calling convention. Patch by Dong-hee Na.bpo-42137: The import system now prefers using
__spec__
forModuleType.__repr__
overmodule_repr()
.bpo-43452: Added micro-optimizations to
_PyType_Lookup()
to improve cache lookup performance in the common case of cache hits.bpo-43555: Report the column offset for
SyntaxError
for invalid line continuation characters. Patch by Pablo Galindo.bpo-43517: Fix misdetection of circular imports when using
from pkg.mod import attr
, which caused false positives in non-trivial multi-threaded code.bpo-43497: Emit SyntaxWarnings for assertions with tuple constants, this is a regression introduced in python3.7
bpo-39316: Tracing now has correct line numbers for attribute accesses when the the attribute is on a different line from the object. Improves debugging and profiling for multi-line method chains.
bpo-35883: Python no longer fails at startup with a fatal error if a command line argument contains an invalid Unicode character. The
Py_DecodeLocale()
function now escapes byte sequences which would be decoded as Unicode characters outside the [U+0000; U+10ffff] range.bpo-43410: Fix a bug that was causing the parser to crash when emitting syntax errors when reading input from stdin. Patch by Pablo Galindo
bpo-43406: Fix a possible race condition where
PyErr_CheckSignals
tries to execute a non-Python signal handler.bpo-42128: Add
__match_args__
tostructsequence
based classes. Patch by Pablo Galindo.bpo-43390: CPython now sets the
SA_ONSTACK
flag inPyOS_setsig
for the VM’s default signal handlers. This is friendlier to other in-process code that an extension module or embedding use could pull in (such as Golang’s cgo) where tiny thread stacks are the norm andsigaltstack()
has been used to provide for signal handlers. This is a no-op change for the vast majority of processes that don’t use sigaltstack.bpo-43287: Speed up calls to
filter()
by using the PEP 590vectorcall
calling convention. Patch by Dong-hee Na.bpo-37448: Add a radix tree based memory map to track in-use obmalloc arenas. Use to replace the old implementation of address_in_range(). The radix tree approach makes it easy to increase pool sizes beyond the OS page size. Boosting the pool and arena size allows obmalloc to handle a significantly higher percentage of requests from its ultra-fast paths.
It also has the advantage of eliminating the memory unsanitary behavior of the previous address_in_range(). The old address_in_range() was marked with the annotations _Py_NO_SANITIZE_ADDRESS, _Py_NO_SANITIZE_THREAD, and _Py_NO_SANITIZE_MEMORY. Those annotations are no longer needed.
To disable the radix tree map, set a preprocessor flag as follows:
-DWITH_PYMALLOC_RADIX_TREE=0
.Co-authored-by: Tim Peters <tim.peters@gmail.com>
bpo-29988: Only handle asynchronous exceptions and requests to drop the GIL when returning from a call or on the back edges of loops. Makes sure that
__exit__()
is always called in with statements, even for interrupts.
Library¶
bpo-43720: Document various stdlib deprecations in imp, pkgutil, and importlib.util for removal in Python 3.12.
bpo-43433:
xmlrpc.client.ServerProxy
no longer ignores query and fragment in the URL of the server.bpo-31956: The
index()
method ofarray.array
now has optional start and stop parameters.bpo-40066: Enum: adjust
repr()
to show only enum and member name (not value, nor angle brackets) andstr()
to show only member name. Update and improve documentation to match.bpo-42136: Deprecate all module_repr() methods found in importlib as their use is being phased out by Python 3.12.
bpo-35930: Raising an exception raised in a “future” instance will create reference cycles.
bpo-41369: Finish updating the vendored libmpdec to version 2.5.1. Patch by Stefan Krah.
bpo-43422: Revert the _decimal C API which was added in bpo-41324.
bpo-43577: Fix deadlock when using
ssl.SSLContext
debug callback withssl.SSLContext.sni_callback()
.bpo-43571: It’s now possible to create MPTCP sockets with IPPROTO_MPTCP
bpo-43542:
image/heic
andimage/heif
were added tomimetypes
.bpo-40645: The
hmac
module now uses OpenSSL’s HMAC implementation when digestmod argument is a hash name or builtin hash function.bpo-43510: Implement PEP 597: Add
EncodingWarning
warning,-X warn_default_encoding
option,PYTHONWARNDEFAULTENCODING
environment variable andencoding="locale"
argument value.bpo-43521:
ast.unparse
can now render NaNs and empty sets.bpo-42914:
pprint.pprint()
gains a new booleanunderscore_numbers
optional argument to emit integers with thousands separated by an underscore character for improved readability (for example1_000_000
instead of1000000
).bpo-41361:
rotate()
calls are now slightly faster due to faster argument parsing.bpo-43423:
subprocess.communicate()
no longer raises an IndexError when there is an empty stdout or stderr IO buffer during a timeout on Windows.bpo-27820: Fixed long-standing bug of smtplib.SMTP where doing AUTH LOGIN with initial_response_ok=False will fail.
The cause is that SMTP.auth_login _always_ returns a password if provided with a challenge string, thus non-compliant with the standard for AUTH LOGIN.
Also fixes bug with the test for smtpd.
bpo-43445: Add frozen modules to
sys.stdlib_module_names
. For example, add"_frozen_importlib"
and"_frozen_importlib_external"
names.bpo-43245: Add keyword arguments support to
ChainMap.new_child()
.bpo-29982: Add optional parameter ignore_cleanup_errors to
tempfile.TemporaryDirectory()
and allow multiplecleanup()
attempts. Contributed by C.A.M. Gerlach.bpo-43428: Include changes from importlib_metadata 3.7:
Performance enhancements to distribution discovery.
entry_points
only returns unique distributions.Introduces new
EntryPoints
object for containing a set of entry points with convenience methods for selecting entry points by group or name.entry_points
now returns this object if selection parameters are supplied but continues to return a dict object for compatibility. Users are encouraged to rely on the selection interface. The dict object result is likely to be deprecated in the future.Added packages_distributions function to return a mapping of packages to the distributions that provide them.
bpo-43332: Improves the networking efficiency of
http.client
when using a proxy viaset_tunnel()
. Fewer small send calls are made during connection setup.bpo-43420: Improve performance of
fractions.Fraction
arithmetics for large components. Contributed by Sergey B. Kirpichev.bpo-43356: Allow passing a signal number to
_thread.interrupt_main()
.bpo-43399: Fix
ElementTree.extend
not working on iterators when using the Python implementationbpo-43369: Improve
sqlite3
error handling: Ifsqlite3_column_text()
andsqlite3_column_blob()
setSQLITE_NOMEM
,MemoryError
is now raised. Patch by Erlend E. Aasland.bpo-43368: Fix a regression introduced in PR 24562, where an empty bytestring was fetched as
None
instead ofb''
insqlite3
. Patch by Mariusz Felisiak.bpo-41282: Fixed stacklevel of
DeprecationWarning
emitted fromimport distutils
.bpo-42129:
importlib.resources
now honors namespace packages, merging resources from each location in the namespace as introduced inimportlib_resources
3.2 and including incidental changes through 5.0.3.bpo-43295:
datetime.datetime.strptime()
now raisesValueError
instead ofIndexError
when matching'z'
with the%z
format specifier.bpo-43125: Return empty string if base64mime.body_encode receive empty bytes
bpo-43084:
curses.window.enclose()
returns nowTrue
orFalse
(as was documented) instead of1
or0
.bpo-42994: Add MIME types for opus, AAC, 3gpp and 3gpp2
bpo-14678: Add an invalidate_caches() method to the zipimport.zipimporter class to support importlib.invalidate_caches(). Patch by Desmond Cheong.
bpo-42782: Fail fast in
shutil.move()
to avoid creating destination directories on failure.bpo-40066: Enum’s
repr()
andstr()
have changed:repr()
is now EnumClass.MemberName andstr()
is MemberName. Additionally, stdlib Enum’s whose contents are available as module attributes, such asRegexFlag.IGNORECASE
, have theirrepr()
as module.name, e.g.re.IGNORECASE
.bpo-26053: Fixed bug where the
pdb
interactive run command echoed the args from the shell command line, even if those have been overridden at the pdb prompt.bpo-24160: Fixed bug where breakpoints did not persist across multiple debugger sessions in
pdb
’s interactive mode.bpo-40701: When the
tempfile.tempdir
global variable is set to a value of type bytes, it is now handled consistently. Previously exceptions could be raised from some tempfile APIs when the directory did not already exist in this situation. Also ensures that thetempfile.gettempdir()
andtempfile.gettempdirb()
functions always returnstr
andbytes
respectively.bpo-39342: Expose
X509_V_FLAG_ALLOW_PROXY_CERTS
asVERIFY_ALLOW_PROXY_CERTS
to allow proxy certificate validation as explained in https://www.openssl.org/docs/man1.1.1/man7/proxy-certificates.html.bpo-31861: Add builtins.aiter and builtins.anext. Patch by Joshua Bronson (@jab), Daniel Pope (@lordmauve), and Justin Wang (@justin39).
Documentation¶
bpo-43199: Answer “Why is there no goto?” in the Design and History FAQ.
bpo-43407: Clarified that a result from
time.monotonic()
,time.perf_counter()
,time.process_time()
, ortime.thread_time()
can be compared with the result from any following call to the same function - not just the next immediate call.bpo-43354: Fix type documentation for
Fault.faultCode
; the type has to beint
instead ofstr
.bpo-41933: Clarified wording of s * n in the Common Sequence Operations
Tests¶
Build¶
bpo-43179: Introduce and correctly use ALIGNOF_X in place of SIZEOF_X for alignment-related code in optimized string routines. Patch by Jessica Clarke.
bpo-43631: Update macOS, Windows, and CI to OpenSSL 1.1.1k.
bpo-43617: Improve configure.ac: Check for presence of autoconf-archive package and remove our copies of M4 macros.
bpo-43466: The
configure
script now supports--with-openssl-rpath
option.bpo-43372: Use
_freeze_importlib
to generate code for the__hello__
module. This approach ensures the code matches the interpreter version. Previously, PYTHON_FOR_REGEN was used to generate the code, which might be wrong. The marshal format for code objects has changed with bpo-42246, commit 877df851. Update the code and the expected code sizes in ctypes test_frozentable.
Windows¶
IDLE¶
bpo-42225: Document that IDLE can fail on Unix either from misconfigured IP masquerade rules or failure displaying complex colored (non-ascii) characters.
C API¶
bpo-43688: The limited C API is now supported if Python is built in debug mode (if the
Py_DEBUG
macro is defined). In the limited C API, thePy_INCREF()
andPy_DECREF()
functions are now implemented as opaque function calls, rather than accessing directly thePyObject.ob_refcnt
member, if Python is built in debug mode and thePy_LIMITED_API
macro targets Python 3.10 or newer. It became possible to support the limited C API in debug mode because thePyObject
structure is the same in release and debug mode since Python 3.8 (see bpo-36465).The limited C API is still not supported in the
--with-trace-refs
special build (Py_TRACE_REFS
macro).Patch by Victor Stinner.
bpo-43244: Remove the
pyarena.h
header file with functions:PyArena_New()
PyArena_Free()
PyArena_Malloc()
PyArena_AddPyObject()
These functions were undocumented, excluded from the limited C API, and were only used internally by the compiler. Patch by Victor Stinner.
bpo-43244: Remove the compiler and parser functions using
struct _mod
type, because the public AST C API was removed:PyAST_Compile()
PyAST_CompileEx()
PyAST_CompileObject()
PyFuture_FromAST()
PyFuture_FromASTObject()
PyParser_ASTFromFile()
PyParser_ASTFromFileObject()
PyParser_ASTFromFilename()
PyParser_ASTFromString()
PyParser_ASTFromStringObject()
These functions were undocumented and excluded from the limited C API. Patch by Victor Stinner.
bpo-43244: Remove
ast.h
,asdl.h
, andPython-ast.h
header files. These functions were undocumented and excluded from the limited C API. Most names defined by these header files were not prefixed byPy
and so could create names conflicts. For example,Python-ast.h
defined aYield
macro which was conflict with theYield
name used by the Windows<winbase.h>
header. Use the Pythonast
module instead. Patch by Victor Stinner.bpo-43541: Fix a
PyEval_EvalCodeEx()
regression: fix reference counting on builtins. Patch by Victor Stinner.bpo-43244: Remove the
symtable.h
header file and the undocumented functions:PyST_GetScope()
PySymtable_Build()
PySymtable_BuildObject()
PySymtable_Free()
Py_SymtableString()
Py_SymtableStringObject()
The
Py_SymtableString()
function was part the stable ABI by mistake but it could not be used, because thesymtable.h
header file was excluded from the limited C API.The Python
symtable
module remains available and is unchanged.Patch by Victor Stinner.
bpo-43244: Remove the
PyAST_Validate()
function. It is no longer possible to build a AST object (mod_ty
type) with the public C API. The function was already excluded from the limited C API (PEP 384). Patch by Victor Stinner.
Python 3.10.0 alpha 6¶
Release date: 2021-03-01
Security¶
bpo-42967: Fix web cache poisoning vulnerability by defaulting the query args separator to
&
, and allowing the user to choose a custom separator.
Core and Builtins¶
bpo-43321: Fix
SystemError
raised whenPyArg_Parse*()
is used with#
but withoutPY_SSIZE_T_CLEAN
defined.bpo-36346:
PyArg_Parse*()
functions now emitsDeprecationWarning
whenu
orZ
format is used. See PEP 623 for detail.bpo-43277: Add a new
PySet_CheckExact()
function to the C-API to check if an object is an instance ofset
but not an instance of a subtype. Patch by Pablo Galindo.bpo-42990: The
types.FunctionType
constructor now inherits the current builtins if the globals dictionary has no"__builtins__"
key, rather than using{"None": None}
as builtins: same behavior aseval()
andexec()
functions. Defining a function withdef function(...): ...
in Python is not affected, globals cannot be overridden with this syntax: it also inherits the current builtins. Patch by Victor Stinner.bpo-42990: Functions have a new
__builtins__
attribute which is used to look for builtin symbols when a function is executed, instead of looking into__globals__['__builtins__']
. Patch by Mark Shannon and Victor Stinner.bpo-43149: Improve the error message in the parser for exception groups without parentheses. Patch by Pablo Galindo.
bpo-43121: Fixed an incorrect
SyntaxError
message for missing comma in literals. Patch by Pablo Galindo.bpo-42819:
readline
: Explicitly disable bracketed paste in the interactive interpreter, even if it’s set in the inputrc, is enabled by default (eg GNU Readline 8.1), or a user callsreadline.read_init_file()
. The Python REPL has not implemented bracketed paste support. Also, bracketed mode writes the"\x1b[?2004h"
escape sequence into stdout which causes test failures in applications that don’t support it. It can still be explicitly enabled by callingreadline.parse_and_bind("set enable-bracketed-paste on")
. Patch by Dustin Rodrigues.bpo-42808: Simple calls to
type(object)
are now faster due to thevectorcall
calling convention. Patch by Dennis Sweeney.bpo-42217: Make the compiler merges same co_code and co_linetable objects in a module like already did for co_consts.
bpo-41972: Substring search functions such as
str1 in str2
andstr2.find(str1)
now sometimes use the “Two-Way” string comparison algorithm to avoid quadratic behavior on long strings.bpo-42128: Implement PEP 634 (structural pattern matching). Patch by Brandt Bucher.
bpo-40692: In the
concurrent.futures.ProcessPoolExecutor
, validate thatmultiprocess.synchronize()
is available on a given platform and rely on that check in theconcurrent.futures
test suite so we can run tests that are unrelated toProcessPoolExecutor
on those platforms.bpo-38302: If
object.__ipow__()
returnsNotImplemented
, the operator will correctly fall back toobject.__pow__()
andobject.__rpow__()
as expected.
Library¶
bpo-43316: The
python -m gzip
command line application now properly fails when detecting an unsupported extension. It exits with a non-zero exit code and prints an error message to stderr.bpo-43317: Set the chunk size for the
gzip
module main function to io.DEFAULT_BUFFER_SIZE. This is slightly faster than the 1024 bytes constant that was used previously.bpo-43146: Handle None in single-arg versions of
print_exception()
andformat_exception()
.bpo-43260: Fix TextIOWrapper can not flush internal buffer forever after very large text is written.
bpo-43258: Prevent needless allocation of
sqlite3
aggregate function context when no rows match an aggregate query. Patch by Erlend E. Aasland.bpo-43251: Improve
sqlite3
error handling:sqlite3_column_name()
failures now result inMemoryError
. Patch by Erlend E. Aasland.bpo-40956: Fix segfault in
sqlite3.Connection.backup()
if no argument was provided. The regression was introduced by PR 23838. Patch by Erlend E. Aasland.bpo-43172: The readline module now passes its tests when built directly against libedit. Existing irreconcilable API differences remain in
readline.get_begidx()
andreadline.get_endidx()
behavior based on libreadline vs libedit use.bpo-43163: Fix a bug in
codeop
that was causing it to not ask for more input when multi-line snippets have unclosed parentheses. Patch by Pablo Galindobpo-43162: deprecate unsupported ability to access enum members as attributes of other enum members
bpo-43146: Fix recent regression in None argument handling in
traceback
module functions.bpo-43102: The namedtuple __new__ method had its __builtins__ set to None instead of an actual dictionary. This created problems for introspection tools.
bpo-43106: Added
O_EVTONLY
,O_FSYNC
,O_SYMLINK
andO_NOFOLLOW_ANY
for macOS. Patch by Dong-hee Na.bpo-42960: Adds
resource.RLIMIT_KQUEUES
constant from FreeBSD to theresource
module.bpo-42151: Make the pure Python implementation of
xml.etree.ElementTree
behave the same as the C implementation (_elementree
) regarding default attribute values (by not settingspecified_attributes=1
).bpo-29753: In ctypes, now packed bitfields are calculated properly and the first item of packed bitfields is now shrank correctly.
Documentation¶
Tests¶
bpo-43288: Fix test_importlib to correctly skip Unicode file tests if the filesystem does not support them.
Build¶
bpo-43174: Windows build now uses
/utf-8
compiler option.bpo-43103: Add a new configure
--without-static-libpython
option to not build thelibpythonMAJOR.MINOR.a
static library and not install thepython.o
object file.bpo-13501: The configure script can now use libedit instead of readline with the command line option
--with-readline=editline
.bpo-42603: Make configure script use pkg-config to detect the location of Tcl/Tk headers and libraries, used to build tkinter.
On macOS, a Tcl/Tk configuration provided by pkg-config will be preferred over Tcl/Tk frameworks installed in
/{System/,}Library/Frameworks
. If both exist and the latter is preferred, the appropriate--with-tcltk-*
configuration options need to be explicitly set.bpo-39448: Add the “regen-frozen” makefile target that regenerates the code for the frozen
__hello__
module.
Windows¶
bpo-43155:
PyCMethod_New()
is now present inpython3.lib
.
macOS¶
bpo-41837: Update macOS installer build to use OpenSSL 1.1.1j.
IDLE¶
bpo-43283: Document why printing to IDLE’s Shell is often slower than printing to a system terminal and that it can be made faster by pre-formatting a single string before printing.
C API¶
bpo-43278: Always put compiler and system information on the first line of the REPL welcome message.
bpo-43270: Remove the private
_PyErr_OCCURRED()
macro: use the publicPyErr_Occurred()
function instead.bpo-35134: Move odictobject.h, parser_interface.h, picklebufobject.h, pydebug.h, and pyfpe.h into the cpython/ directory. They must not be included directly, as they are already included by Python.h: Include Files.
bpo-35134: Move pyarena.h, pyctype.h, and pytime.h into the cpython/ directory. They must not be included directly, as they are already included by Python.h: Include Files.
bpo-40170:
PyExceptionClass_Name()
is now always declared as a function, in order to hide implementation details. The macro accessedPyTypeObject.tp_name
directly. Patch by Erlend E. Aasland.bpo-43239: The
PyCFunction_New()
function is now exported in the ABI when compiled with-fvisibility=hidden
.bpo-40170:
PyIter_Check()
is now always declared as a function, in order to hide implementation details. The macro accessedPyTypeObject.tp_iternext
directly. Patch by Erlend E. Aasland.bpo-40170: Convert
PyDescr_IsData()
macro to a function to hide implementation details: The macro accessedPyTypeObject.tp_descr_set
directly. Patch by Erlend E. Aasland.bpo-43181: Convert
PyObject_TypeCheck()
macro to a static inline function. Patch by Erlend E. Aasland.
Python 3.10.0 alpha 5¶
Release date: 2021-02-02
Security¶
bpo-42938: Avoid static buffers when computing the repr of
ctypes.c_double
andctypes.c_longdouble
values.
Core and Builtins¶
bpo-42990: Refactor the
PyEval_
family of functions.An new function
_PyEval_Vector
is added to simplify calls to Python from C._PyEval_EvalCodeWithName
is removedPyEval_EvalCodeEx
is retained as part of the API, but is not used internally
bpo-38631: Replace
Py_FatalError()
calls in the compiler with regularSystemError
exceptions. Patch by Victor Stinner.bpo-42997: Improve error message for missing “:” before blocks. Patch by Pablo Galindo.
bpo-43017: Improve error message in the parser when using un-parenthesised tuples in comprehensions. Patch by Pablo Galindo.
bpo-42986: Fix parser crash when reporting syntax errors in f-string with newlines. Patch by Pablo Galindo.
bpo-40176: Syntax errors for unterminated string literals now point to the start of the string instead of reporting EOF/EOL.
bpo-42927: The inline cache for
LOAD_ATTR
now also optimizes access to attributes defined by__slots__
. This makes reading such attribute up to 30% faster.bpo-42864: Improve error messages in the parser when parentheses are not closed. Patch by Pablo Galindo.
bpo-42924: Fix
bytearray
repetition incorrectly copying data from the start of the buffer, even if the data is offset within the buffer (e.g. after reassigning a slice at the start of thebytearray
to a shorter byte string).bpo-42882: Fix the
_PyUnicode_FromId()
function (_Py_IDENTIFIER(var) API) whenPy_Initialize()
/Py_Finalize()
is called multiple times: preserve_PyRuntime.unicode_ids.next_index
value.bpo-42827: Fix a crash when working out the error line of a
SyntaxError
in some multi-line expressions.bpo-42823: frame.f_lineno is correct even if frame.f_trace is set to True
bpo-37324: Remove deprecated aliases to Collections Abstract Base Classes from the
collections
module.bpo-41994: Fixed possible leak in
import
whensys.modules
is not adict
.bpo-27772: In string formatting, preceding the width field by
'0'
no longer affects the default alignment for strings.
Library¶
bpo-43108: Fixed a reference leak in the
curses
module. Patch by Pablo Galindobpo-43077: Update the bundled pip to 21.0.1 and setuptools to 52.0.0.
bpo-41282: Deprecate
distutils
in documentation and add warning on import.bpo-43014: Improve performance of
tokenize
by 20-30%. Patch by Anthony Sottile.bpo-42323: Fix
math.nextafter()
for NaN on AIX.bpo-42955: Add
sys.stdlib_module_names
, containing the list of the standard library module names. Patch by Victor Stinner.bpo-42944: Fix
random.Random.sample
whencounts
argument is notNone
.bpo-42934: Use
TracebackException
’s newcompact
param inTestResult
to reduce time and memory consumed by traceback formatting.bpo-42931: Add
randbytes()
torandom.__all__
.bpo-38250: [Enum] Flags consisting of a single bit are now considered canonical, and will be the only flags returned from listing and iterating over a Flag class or a Flag member. Multi-bit flags are considered aliases; they will be returned from lookups and operations that result in their value. Iteration for both Flag and Flag members is in definition order.
bpo-42877: Added the
compact
parameter to the constructor oftraceback.TracebackException
to reduce time and memory for use cases that only need to callTracebackException.format()
andTracebackException.format_exception_only()
.bpo-42923: The
Py_FatalError()
function and thefaulthandler
module now dump the list of extension modules on a fatal error.bpo-42848: Removed recursion from
TracebackException
to allow it to handle long exception chains.bpo-42901: [Enum] move member creation from
EnumMeta.__new__
to_proto_member.__set_name__
, allowing members to be created and visible in__init_subclass__
.bpo-42780: Fix os.set_inheritable() for O_PATH file descriptors on Linux.
bpo-42866: Fix a reference leak in the
getcodec()
function of CJK codecs. Patch by Victor Stinner.bpo-42846: Convert the 6 CJK codec extension modules (_codecs_cn, _codecs_hk, _codecs_iso2022, _codecs_jp, _codecs_kr and _codecs_tw) to the multiphase initialization API (PEP 489). Patch by Victor Stinner.
bpo-42851: remove __init_subclass__ support for Enum members
bpo-42834: Make internal caches of the
_json
module compatible with subinterpreters.bpo-41748: Fix HTMLParser parsing rules for element attributes containing commas with spaces. Patch by Karl Dubost.
bpo-40810: Require SQLite 3.7.15 or newer. Patch by Erlend E. Aasland.
bpo-1635741: Convert the _multibytecodec extension module (CJK codecs) to multi-phase initialization (PEP 489). Patch by Erlend E. Aasland.
bpo-42802: The distutils
bdist_wininst
command deprecated in Python 3.8 has been removed. The distutilsbdist_wheel
command is now recommended to distribute binary packages on Windows.bpo-24464: The undocumented built-in function
sqlite3.enable_shared_cache
is now deprecated, scheduled for removal in Python 3.12. Its use is strongly discouraged by the SQLite3 documentation. Patch by Erlend E. Aasland.bpo-42384: Make pdb populate sys.path[0] exactly the same as regular python execution.
bpo-42383: Fix pdb: previously pdb would fail to restart the debugging target if it was specified using a relative path and the current directory changed.
bpo-42005: Fix CLI of
cProfile
andprofile
to catchBrokenPipeError
.bpo-41604: Don’t decrement the reference count of the previous user_ptr when set_panel_userptr fails.
bpo-41149: Allow executing callables that have a boolean value of
False
when passed toThreading.thread
as the target. Patch contributed by Barney Stratford.bpo-38307: Add an ‘end_lineno’ attribute to the Class and Function objects that appear in the tree returned by pyclbr functions. This and the existing ‘lineno’ attribute define the extent of class and def statements. Patch by Aviral Srivastava.
bpo-39273: The
BUTTON5_*
constants are now exposed in thecurses
module if available.bpo-33289: Correct call to
tkinter.colorchooser
to return RGB triplet of ints instead of floats. Patch by Cheryl Sabella.
Documentation¶
Tests¶
Build¶
bpo-43031: Pass
--timeout=$(TESTTIMEOUT)
option to the default profile task./python -m test --pgo
command.bpo-36143:
make regen-all
now also runsregen-keyword
. Patch by Victor Stinner.bpo-42874: Removed the grep -q and -E flags in the tzpath validation section of the configure script to better accommodate users of some platforms (specifically Solaris 10).
bpo-31904: Add library search path by wr-cc in add_cross_compiling_paths() for VxWorks.
bpo-42856: Add
--with-wheel-pkg-dir=PATH
option to the./configure
script. If specified, theensurepip
module looks forsetuptools
andpip
wheel packages in this directory: if both are present, these wheel packages are used instead of ensurepip bundled wheel packages.Some Linux distribution packaging policies recommend against bundling dependencies. For example, Fedora installs wheel packages in the
/usr/share/python-wheels/
directory and don’t install theensurepip._bundled
package.
Windows¶
macOS¶
bpo-42504: Ensure that the value of sysconfig.get_config_var(‘MACOSX_DEPLOYMENT_TARGET’) is always a string, even in when the value is parsable as an integer.
IDLE¶
bpo-43008: Make IDLE invoke
sys.excepthook()
in normal, 2-process mode. Patch by Ken Hilton.bpo-33065: Fix problem debugging user classes with __repr__ method.
bpo-23544: Disable Debug=>Stack Viewer when user code is running or Debugger is active, to prevent hang or crash. Patch by Zackery Spytz.
bpo-32631: Finish zzdummy example extension module: make menu entries work; add docstrings and tests with 100% coverage.
C API¶
bpo-42979: When Python is built in debug mode (with C assertions), calling a type slot like
sq_length
(__len__()
in Python) now fails with a fatal error if the slot succeeded with an exception set, or failed with no exception set. The error message contains the slot, the type name, and the current exception (if an exception is set). Patch by Victor Stinner.bpo-43030: Fixed a compiler warning in
Py_UNICODE_ISSPACE()
on platforms with signedwchar_t
.
Python 3.10.0 alpha 4¶
Release date: 2021-01-04
Core and Builtins¶
bpo-42814: Fix undefined behavior in
Objects/genericaliasobject.c
.bpo-42806: Fix the column offsets for f-strings
ast
nodes surrounded by parentheses and for nodes that spawn multiple lines. Patch by Pablo Galindo.bpo-40631: Fix regression where a single parenthesized starred expression was a valid assignment target.
bpo-27794: Improve the error message for failed writes/deletes to property objects. When possible, the attribute name is now shown. Patch provided by Yurii Karabas.
bpo-42745: Make the type attribute lookup cache per-interpreter. Patch by Victor Stinner.
bpo-42246: Jumps to jumps are not eliminated when it would break PEP 626.
bpo-42246: Make sure that the
f_lasti
andf_lineno
attributes of a frame are set correctly when an exception is raised or re-raised. Required for PEP 626.bpo-32381: The coding cookie (ex:
# coding: latin1
) is now ignored in the command passed to the-c
command line option. Patch by Victor Stinner.bpo-30858: Improve error location in expressions that contain assignments. Patch by Pablo Galindo and Lysandros Nikolaou.
bpo-42615: Remove jump commands made redundant by the deletion of unreachable bytecode blocks
bpo-42639: Make the
atexit
module state per-interpreter. It is now safe have more than oneatexit
module instance. Patch by Dong-hee Na and Victor Stinner.bpo-32381: Fix encoding name when running a
.pyc
file on Windows:PyRun_SimpleFileExFlags()
now uses the correct encoding to decode the filename.bpo-42195: The
__args__
of the parameterized generics fortyping.Callable
andcollections.abc.Callable
are now consistent. The__args__
forcollections.abc.Callable
are now flattened whiletyping.Callable
’s have not changed. To allow this change,types.GenericAlias
can now be subclassed andcollections.abc.Callable
’s__class_getitem__
will now return a subclass oftypes.GenericAlias
. Tests for typing were also updated to not subclass things likeCallable[..., T]
as that is not a valid base class. Finally, bothCallable
s no longer validate theirargtypes
, inCallable[[argtypes], resulttype]
to prepare for PEP 612. Patch by Ken Jin.bpo-40137: Convert functools module to use
PyType_FromModuleAndSpec()
.bpo-40077: Convert
array
to use heap types, and establish module state for these.bpo-42008: Fix _random.Random() seeding.
bpo-1635741: Port the
pyexpat
extension module to multi-phase initialization (PEP 489).bpo-40521: Make the Unicode dictionary of interned strings compatible with subinterpreters. Patch by Victor Stinner.
bpo-39465: Make
_PyUnicode_FromId()
function compatible with subinterpreters. Each interpreter now has an array of identifier objects (interned strings decoded from UTF-8). Patch by Victor Stinner.
Library¶
bpo-42257: Handle empty string in variable executable in platform.libc_ver()
bpo-42772: randrange() now raises a TypeError when step is specified without a stop argument. Formerly, it silently ignored the step argument.
bpo-42759: Fixed equality comparison of
tkinter.Variable
andtkinter.font.Font
. Objects which belong to different Tcl interpreters are now always different, even if they have the same name.bpo-42756: Configure LMTP Unix-domain socket to use socket global default timeout when a timeout is not explicitly provided.
bpo-23328: Allow / character in username, password fields on _PROXY envars.
bpo-42740:
typing.get_args()
andtyping.get_origin()
now support PEP 604 union types and PEP 612 additions toCallable
.bpo-42655:
subprocess
extra_groups is now correctly passed into setgroups() system call.bpo-42727:
EnumMeta.__prepare__
now accepts**kwds
to properly support__init_subclass__
bpo-38308: Add optional weights to statistics.harmonic_mean().
bpo-42721: When simple query dialogs (
tkinter.simpledialog
), message boxes (tkinter.messagebox
) or color choose dialog (tkinter.colorchooser
) are created without arguments master and parent, and the default root window is not yet created, andNoDefaultRoot()
was not called, a new temporal hidden root window will be created automatically. It will not be set as the default root window and will be destroyed right after closing the dialog window. It will help to use these simple dialog windows in programs which do not need other GUI.bpo-25246: Optimized
collections.deque.remove()
.bpo-35728: Added a root parameter to
tkinter.font.nametofont()
.bpo-15303:
tkinter
supports now widgets with boolean value False.bpo-42681: Fixed range checks for color and pair numbers in
curses
.bpo-42685: Improved placing of simple query windows in Tkinter (such as
tkinter.simpledialog.askinteger()
). They are now centered at the center of the parent window if it is specified and shown, otherwise at the center of the screen.bpo-9694: Argparse help no longer uses the confusing phrase, “optional arguments”. It uses “options” instead.
bpo-1635741: Port the
_thread
extension module to the multiphase initialization API (PEP 489) and convert its static types to heap types.bpo-37961: Fix crash in
tracemalloc.Traceback.__repr__()
(regressed in Python 3.9).bpo-42630:
tkinter
functions and constructors which need a default root window raise nowRuntimeError
with descriptive message instead of obscureAttributeError
orNameError
if it is not created yet or cannot be created automatically.bpo-42639:
atexit._run_exitfuncs()
now logs callback exceptions usingsys.unraisablehook
, rather than logging them directly intosys.stderr
and raise the last exception.bpo-42644:
logging.disable
will now validate the types and value of its parameter. It also now accepts strings representing the levels (as doesloging.setLevel
) instead of only the numerical values.bpo-42639: At Python exit, if a callback registered with
atexit.register()
fails, its exception is now logged. Previously, only some exceptions were logged, and the last exception was always silently ignored.bpo-36541: Fixed lib2to3.pgen2 to be able to parse PEP-570 positional only argument syntax.
bpo-42382: In
importlib.metadata
: -EntryPoint
objects now expose a.dist
object referencing theDistribution
when constructed from aDistribution
. - Add support for package discovery under package normalization rules. - The object returned bymetadata()
now has a formally defined protocol calledPackageMetadata
with declared support for the.get_all()
method. - Synced with importlib_metadata 3.3.bpo-41877: A check is added against misspellings of autospect, auto_spec and set_spec being passed as arguments to patch, patch.object and create_autospec.
bpo-39717: [tarfile] update nested exception raising to use
from None
orfrom e
bpo-41877: AttributeError for suspected misspellings of assertions on mocks are now pointing out that the cause are misspelled assertions and also what to do if the misspelling is actually an intended attribute name. The unittest.mock document is also updated to reflect the current set of recognised misspellings.
bpo-41559: Implemented PEP 612: added
ParamSpec
andConcatenate
totyping
. Patch by Ken Jin.bpo-42385: StrEnum: fix _generate_next_value_ to return a str
bpo-31904: Define THREAD_STACK_SIZE for VxWorks.
bpo-34750: [Enum]
_EnumDict.update()
is now supportedbpo-42517: Enum: private names do not become members / do not generate errors – they remain normal attributes
bpo-42678:
Enum
: call__init_subclass__
after members have been addedbpo-28964:
ast.literal_eval()
adds line number information (if available) in error message for malformed nodes.bpo-42470:
random.sample()
no longer warns on a sequence which is also a set.bpo-31904:
posixpath.expanduser()
returns the input path unchanged if user home directory is None on VxWorks.bpo-42388: Fix subprocess.check_output(…, input=None) behavior when text=True to be consistent with that of the documentation and universal_newlines=True.
bpo-34463: Fixed discrepancy between
traceback
and the interpreter in formatting of SyntaxError with lineno not set (traceback
was changed to match interpreter).bpo-42393: Raise
OverflowError
instead of silent truncation insocket.ntohs()
andsocket.htons()
. Silent truncation was deprecated in Python 3.7. Patch by Erlend E. Aaslandbpo-42222: Harmonized
random.randrange()
argument handling to matchrange()
.The integer test and conversion in
randrange()
now usesoperator.index()
.Non-integer arguments to
randrange()
are deprecated.The
ValueError
is deprecated in favor of aTypeError
.It now runs a little faster than before.
(Contributed by Raymond Hettinger and Serhiy Storchaka.)
bpo-42163: Restore compatibility for
uname_result
around deepcopy and _replace.bpo-42090:
zipfile.Path.joinpath
now accepts arbitrary arguments, same aspathlib.Path.joinpath
.bpo-1635741: Port the _csv module to the multi-phase initialization API (PEP 489).
bpo-42059:
typing.TypedDict
types created using the alternative call-style syntax now correctly respect thetotal
keyword argument when setting their__required_keys__
and__optional_keys__
class attributes.bpo-41960: Add
globalns
andlocalns
parameters to theinspect.signature()
andinspect.Signature.from_callable()
.bpo-41907: fix
format()
behavior forIntFlag
bpo-41891: Ensure asyncio.wait_for waits for task completion
bpo-24792: Fixed bug where
zipimporter
sometimes reports an incorrect cause of import errors.bpo-31904: Fix site and sysconfig modules for VxWorks RTOS which has no home directories.
bpo-41462: Add
os.set_blocking()
support for VxWorks RTOS.bpo-40219: Lowered
tkinter.ttk.LabeledScale
dummy widget to prevent hiding part of the content label.bpo-37193: Fixed memory leak in
socketserver.ThreadingMixIn
introduced in Python 3.7.bpo-39068: Fix initialization race condition in
a85encode()
andb85encode()
inbase64
. Patch by Brandon Stansbury.
Documentation¶
bpo-17140: Add documentation for the
multiprocessing.pool.ThreadPool
class.bpo-34398: Prominently feature listings from the glossary in documentation search results. Patch by Ammar Askar.
Tests¶
bpo-42794: Update test_nntplib to use official group name of news.aioe.org for testing. Patch by Dong-hee Na.
bpo-31904: Skip some asyncio tests on VxWorks.
bpo-42641: Enhance
test_select.test_select()
: it now takes 500 ms rather than 10 seconds. Use Python rather than a shell to make the test more portable.bpo-31904: Skip some tests in _test_all_chown_common() on VxWorks.
bpo-42199: Fix bytecode helper assertNotInBytecode.
bpo-41443: Add more attribute checking in test_posix.py
bpo-31904: Disable os.popen and impacted tests on VxWorks
bpo-41439: Port test_ssl and test_uuid to VxWorks RTOS.
Build¶
bpo-42692: Fix __builtin_available check on older compilers. Patch by Joshua Root.
bpo-27640: Added
--disable-test-modules
option to theconfigure
script: don’t build nor install test modules. Patch by Xavier de Gaye, Thomas Petazzoni and Peixing Xin.bpo-42604: Now all platforms use a value for the “EXT_SUFFIX” build variable derived from SOABI (for instance in freeBSD, “EXT_SUFFIX” is now “.cpython-310d.so” instead of “.so”). Previously only Linux, Mac and VxWorks were using a value for “EXT_SUFFIX” that included “SOABI”.
bpo-42598: Fix implicit function declarations in configure which could have resulted in incorrect configuration checks. Patch contributed by Joshua Root.
bpo-31904: Enable libpython3.so for VxWorks.
bpo-29076: Add fish shell support to macOS installer.
macOS¶
Tools/Demos¶
C API¶
bpo-42591: Export the
Py_FrozenMain()
function: fix a Python 3.9.0 regression. Python 3.9 uses-fvisibility=hidden
and the function was not exported explicitly and so not exported.bpo-32381: Remove the private
_Py_fopen()
function which is no longer needed. Use_Py_wfopen()
or_Py_fopen_obj()
instead. Patch by Victor Stinner.bpo-1635741: Port
resource
extension module to module statebpo-42111: Update the
xxlimited
module to be a better example of how to use the limited C API.bpo-40052: Fix an alignment build warning/error in function
PyVectorcall_Function()
. Patch by Andreas Schneider, Antoine Pitrou and Petr Viktorin.
Python 3.10.0 alpha 3¶
Release date: 2020-12-07
Security¶
bpo-40791: Add
volatile
to the accumulator variable inhmac.compare_digest
, making constant-time-defeating optimizations less likely.
Core and Builtins¶
bpo-42576:
types.GenericAlias
will now raise aTypeError
when attempting to initialize with a keyword argument. Previously, this would cause the interpreter to crash if the interpreter was compiled with debug symbols. This does not affect interpreters compiled for release. Patch by Ken Jin.bpo-42536: Several built-in and standard library types now ensure that their internal result tuples are always tracked by the garbage collector:
Previously, they could have become untracked by a prior garbage collection. Patch by Brandt Bucher.
bpo-42500: Improve handling of exceptions near recursion limit. Converts a number of Fatal Errors in RecursionErrors.
bpo-42246: PEP 626: After a return, the f_lineno attribute of a frame is always the last line executed.
bpo-42435: Speed up comparison of bytes objects with non-bytes objects when option
-b
is specified. Speed up comparison of bytarray objects with non-buffer object.bpo-1635741: Port the
_warnings
extension module to the multi-phase initialization API (PEP 489). Patch by Victor Stinner.bpo-41686: On Windows, the
SIGINT
event,_PyOS_SigintEvent()
, is now created even if Python is configured to not install signal handlers (ifPyConfig.install_signal_handlers
equals to 0, orPy_InitializeEx(0)
).bpo-42381: Allow assignment expressions in set literals and set comprehensions as per PEP 572. Patch by Pablo Galindo.
bpo-42202: Change function parameters annotations internal representation to tuple of strings. Patch provided by Yurii Karabas.
bpo-42374: Fix a regression introduced by the new parser, where an unparenthesized walrus operator was not allowed within generator expressions.
bpo-42316: Allow an unparenthesized walrus in subscript indexes.
bpo-42349: Make sure that the compiler front-end produces a well-formed control flow graph. Be be more aggressive in the compiler back-end, as it is now safe to do so.
bpo-42296: On Windows, fix a regression in signal handling which prevented to interrupt a program using CTRL+C. The signal handler can be run in a thread different than the Python thread, in which case the test deciding if the thread can handle signals is wrong.
bpo-42332:
types.GenericAlias
objects can now be the targets of weakrefs.bpo-42282: Optimise constant subexpressions that appear as part of named expressions (previously the AST optimiser did not descend into named expressions). Patch by Nick Coghlan.
bpo-42266: Fixed a bug with the LOAD_ATTR opcode cache that was not respecting monkey-patching a class-level attribute to make it a descriptor. Patch by Pablo Galindo.
bpo-42246: Improved accuracy of line tracing events and f_lineno attribute of Frame objects. See PEP 626 for details.
bpo-42233: Allow
GenericAlias
objects to use union type expressions. This allows expressions likelist[int] | dict[float, str]
where previously aTypeError
would have been thrown. This also fixes union type expressions not de-duplicatingGenericAlias
objects. (Contributed by Ken Jin in bpo-42233.)bpo-26131: The import system triggers a
ImportWarning
when it falls back to usingload_module()
.
Library¶
bpo-5054: CGIHTTPRequestHandler.run_cgi() HTTP_ACCEPT improperly parsed. Replace the special purpose getallmatchingheaders with generic get_all method and add relevant tests.
Original Patch by Martin Panter. Modified by Senthil Kumaran.
bpo-42562: Fix issue when dis failed to parse function that has no line numbers. Patch provided by Yurii Karabas.
bpo-17735:
inspect.findsource()
now raisesOSError
instead ofIndexError
whenco_lineno
of a code object is greater than the file length. This can happen, for example, when a file is edited after it was imported. PR by Irit Katriel.bpo-42116: Fix handling of trailing comments by
inspect.getsource()
.bpo-42532: Remove unexpected call of
__bool__
when passing aspec_arg
argument to a Mock.bpo-38200: Added itertools.pairwise()
bpo-41818: Fix test_master_read() so that it succeeds on all platforms that either raise OSError or return b”” upon reading from master.
bpo-42487: ChainMap.__iter__ no longer calls __getitem__ on underlying maps
bpo-42482:
TracebackException
no longer holds a reference to the exception’s traceback object. Consequently, instances of TracebackException for equivalent but non-equal exceptions now compare as equal.bpo-41818: Make test_openpty() avoid unexpected success due to number of rows and/or number of columns being == 0.
bpo-42392: Remove loop parameter from
asyncio.subprocess
andasyncio.tasks
functions. Patch provided by Yurii Karabas.bpo-42392: Remove loop parameter from
asyncio.open_connection
andasyncio.start_server
functions. Patch provided by Yurii Karabas.bpo-28468: Add
platform.freedesktop_os_release()
function to parse freedesktop.orgos-release
files.bpo-42299: Removed the
formatter
module, which was deprecated in Python 3.4. It is somewhat obsolete, little used, and not tested. It was originally scheduled to be removed in Python 3.6, but such removals were delayed until after Python 2.7 EOL. Existing users should copy whatever classes they use into their code. Patch by Dong-hee Na and and Terry J. Reedy.bpo-26131: Deprecate zipimport.zipimporter.load_module() in favour of exec_module().
bpo-41818: Updated tests for the pty library. test_basic() has been changed to test_openpty(); this additionally checks if slave termios and slave winsize are being set properly by pty.openpty(). In order to add support for FreeBSD, NetBSD, OpenBSD, and Darwin, this also adds test_master_read(), which demonstrates that pty.spawn() should not depend on an OSError to exit from its copy loop.
bpo-42392: Remove loop parameter from
__init__
in allasyncio.locks
andasyncio.Queue
classes. Patch provided by Yurii Karabas.bpo-15450: Make
filecmp.dircmp
respect subclassing. Now thefilecmp.dircmp.subdirs
behaves as expected when subclassing dircmp.bpo-42413: The exception
socket.timeout
is now an alias ofTimeoutError
.bpo-31904: Support signal module on VxWorks.
bpo-42406: We fixed an issue in
pickle.whichmodule
in which importingmultiprocessing
could change the how pickle identifies which module an object belongs to, potentially breaking the unpickling of those objects.bpo-42403: Simplify the
importlib
external bootstrap code:importlib._bootstrap_external
now uses regular imports to import builtin modules. When it is imported, the builtin__import__()
function is already fully working and so can be used to import builtin modules likesys
. Patch by Victor Stinner.bpo-1635741: Convert _sre module types to heap types (PEP 384). Patch by Erlend E. Aasland.
bpo-42375: subprocess module update for DragonFlyBSD support.
bpo-41713: Port the
_signal
extension module to the multi-phase initialization API (PEP 489). Patch by Victor Stinner and Mohamed Koubaa.bpo-37205:
time.time()
,time.perf_counter()
andtime.monotonic()
functions can no longer fail with a Python fatal error, instead raise a regular Python exception on failure.bpo-42328: Fixed
tkinter.ttk.Style.map()
. The function accepts now the representation of the default state as empty sequence (as returned byStyle.map()
). The structure of the result is now the same on all platform and does not depend on the value ofwantobjects
.bpo-42345: Fix various issues with
typing.Literal
parameter handling (flatten, deduplicate, use type to cache key). Patch provided by Yurii Karabas.bpo-37205:
time.perf_counter()
on Windows andtime.monotonic()
on macOS are now system-wide. Previously, they used an offset computed at startup to reduce the precision loss caused by the float type. Usetime.perf_counter_ns()
andtime.monotonic_ns()
added in Python 3.7 to avoid this precision loss.bpo-42318: Fixed support of non-BMP characters in
tkinter
on macOS.bpo-42350: Fix the
threading.Thread
class at fork: do nothing if the thread is already stopped (ex: fork called at Python exit). Previously, an error was logged in the child process.bpo-42333: Port _ssl extension module to heap types.
bpo-42014: The
onerror
callback fromshutil.rmtree
now receives correct function whenos.open
fails.bpo-42237: Fix
os.sendfile()
on illumos.bpo-42308: Add
threading.__excepthook__
to allow retrieving the original value ofthreading.excepthook()
in case it is set to a broken or a different value. Patch by Mario Corchero.bpo-42131: Implement PEP 451/spec methods on zipimport.zipimporter: find_spec(), create_module(), and exec_module().
This also allows for the documented deprecation of find_loader(), find_module(), and load_module().
bpo-41877: Mock objects which are not unsafe will now raise an AttributeError if an attribute with the prefix asert, aseert, or assrt is accessed, in addition to this already happening for the prefixes assert or assret.
bpo-42264:
sqlite3.OptimizedUnicode
has been undocumented and obsolete since Python 3.3, when it was made an alias tostr
. It is now deprecated, scheduled for removal in Python 3.12.bpo-42251: Added
threading.gettrace()
andthreading.getprofile()
to retrieve the functions set bythreading.settrace()
andthreading.setprofile()
respectively. Patch by Mario Corchero.bpo-42249: Fixed writing binary Plist files larger than 4 GiB.
bpo-42236: On Unix, the
os.device_encoding()
function now returns'UTF-8'
rather than the device encoding if the Python UTF-8 Mode is enabled.bpo-41754: webbrowser: Ignore NotADirectoryError when calling
xdg-settings
.bpo-42183: Fix a stack overflow error for asyncio Task or Future repr().
The overflow occurs under some circumstances when a Task or Future recursively returns itself.
bpo-42140: Improve asyncio.wait function to create the futures set just one time.
bpo-42133: Update various modules in the stdlib to fall back on
__spec__.loader
when__loader__
isn’t defined on a module.bpo-26131: The
load_module()
methods found in importlib now trigger a DeprecationWarning.bpo-39825: Windows: Change
sysconfig.get_config_var('EXT_SUFFIX')
to the expected fullplatform_tag.extension
format. Previously it was hard-coded to.pyd
, now it is compatible withdistutils.sysconfig
and will result in something like.cp38-win_amd64.pyd
. This brings windows into conformance with the other platforms.bpo-26389: The
traceback.format_exception()
,traceback.format_exception_only()
, andtraceback.print_exception()
functions can now take an exception object as a positional-only argument.bpo-41889: Enum: fix regression involving inheriting a multiply inherited enum
bpo-41861: Convert
sqlite3
to use heap types (PEP 384). Patch by Erlend E. Aasland.bpo-40624: Added support for the XPath
!=
operator in xml.etreebpo-28850: Fix
pprint.PrettyPrinter.format()
overrides being ignored for contents of small containers. Thepprint._safe_repr()
function was removed.bpo-41625: Expose the
splice()
asos.splice()
in theos
module. Patch by Pablo Galindobpo-34215: Clarify the error message for
asyncio.IncompleteReadError
whenexpected
isNone
.bpo-41543: Add async context manager support for contextlib.nullcontext.
bpo-21041:
pathlib.PurePath.parents
now supports negative indexing. Patch contributed by Yaroslav Pankovych.bpo-41332: Added missing connect_accepted_socket() method to
asyncio.AbstractEventLoop
.bpo-12800: Extracting a symlink from a tarball should succeed and overwrite the symlink if it already exists. The fix is to remove the existing file or symlink before extraction. Based on patch by Chris AtLee, Jeffrey Kintscher, and Senthil Kumaran.
bpo-40968:
urllib.request
andhttp.client
now sendhttp/1.1
ALPN extension during TLS handshake when no custom context is supplied.bpo-41001: Add func:
os.eventfd
to provide a low level interface for Linux’s event notification file descriptor.bpo-40816: Add AsyncContextDecorator to contextlib to support async context manager as a decorator.
bpo-40550: Fix time-of-check/time-of-action issue in subprocess.Popen.send_signal.
bpo-39411: Add an
is_async
identifier topyclbr
’sFunction
objects. Patch by Batuhan Taskayabpo-35498: Add slice support to
pathlib.PurePath.parents
.
Documentation¶
bpo-42238: Tentative to deprecate
make suspicious
by first removing it from the CI and documentation builds, but keeping it around for manual uses.bpo-42153: Fix the URL for the IMAP protocol documents.
bpo-41028: Language and version switchers, previously maintained in every cpython branches, are now handled by docsbuild-script.
Tests¶
bpo-41473: Re-enable test_gdb on gdb 9.2 and newer: https://bugzilla.redhat.com/show_bug.cgi?id=1866884 bug is fixed in gdb 10.1.
bpo-42553: Fix
test_asyncio.test_call_later()
race condition: don’t measure asyncio performance in thecall_later()
unit test. The test failed randomly on the CI.bpo-31904: Fix test_netrc on VxWorks: create temporary directories using temp_cwd().
bpo-31904: skip test_getaddrinfo_ipv6_scopeid_symbolic and test_getnameinfo_ipv6_scopeid_symbolic on VxWorks
bpo-31904: skip test_test of test_mailcap on VxWorks
bpo-31904: add shell requirement for test_pipes
bpo-31904: skip some tests related to fifo on VxWorks
bpo-31904: Fix test_doctest.py failures for VxWorks.
bpo-40754: Include
_testinternalcapi
module in Windows installer for test suitebpo-41561: test_ssl: skip test_min_max_version_mismatch when TLS 1.0 is not available
bpo-31904: Fix os module failures for VxWorks RTOS.
bpo-31904: Fix fifo test cases for VxWorks RTOS.
Build¶
bpo-31904: remove libnet dependency from detect_socket() for VxWorks
bpo-42398: Fix a race condition in “make regen-all” when make -jN option is used to run jobs in parallel. The clinic.py script now only use atomic write to write files. Moveover, generated files are now left unchanged if the content does not change, to not change the file modification time.
bpo-41617: Fix building
pycore_bitutils.h
internal header on old clang version without__builtin_bswap16()
(ex: Xcode 4.6.3 on Mac OS X 10.7). Patch by Joshua Root and Victor Stinner.bpo-38823: It is no longer possible to build the
_ctypes
extension module withoutwchar_t
type: removeCTYPES_UNICODE
macro. Anyway, thewchar_t
type is required to build Python. Patch by Victor Stinner.bpo-42087: Support was removed for AIX 5.3 and below. See bpo-40680.
bpo-40998: Addressed three compiler warnings found by undefined behavior sanitizer (ubsan).
Windows¶
macOS¶
bpo-42504: Fix build on macOS Big Sur when MACOSX_DEPLOYMENT_TARGET=11
bpo-41116: Ensure distutils.unixxcompiler.find_library_file can find system provided libraries on macOS 11.
bpo-41100: Add support for macOS 11 and Apple Silicon systems.
It is now possible to build “Universal 2” binaries using “–enable-universalsdk –with-universal-archs=universal2”.
Binaries build on later macOS versions can be deployed back to older versions (tested up to macOS 10.9), when using the correct deployment target. This is tested using Xcode 11 and later.
bpo-42232: Added Darwin specific madvise options to mmap module.
bpo-38443: The
--enable-universalsdk
and--with-universal-archs
options for the configure script now check that the specified architectures can be used.
IDLE¶
bpo-42508: Keep IDLE running on macOS. Remove obsolete workaround that prevented running files with shortcuts when using new universal2 installers built on macOS 11.
bpo-42426: Fix reporting offset of the RE error in searchengine.
bpo-42415: Get docstrings for IDLE calltips more often by using inspect.getdoc.
Tools/Demos¶
C API¶
bpo-42423: The
PyType_FromSpecWithBases()
andPyType_FromModuleAndSpec()
functions now accept a single class as the bases argument.bpo-1635741: Port
select
extension module to multiphase initialization (PEP 489).bpo-1635741: Port _posixsubprocess extension module to multiphase initialization (PEP 489).
bpo-1635741: Port _posixshmem extension module to multiphase initialization (PEP 489)
bpo-1635741: Port _struct extension module to multiphase initialization (PEP 489)
bpo-1635741: Port
spwd
extension module to multiphase initialization (PEP 489)bpo-1635741: Port
gc
extension module to multiphase initialization (PEP 489)bpo-1635741: Port _queue extension module to multiphase initialization (PEP 489)
bpo-39573: Convert
Py_TYPE()
andPy_SIZE()
back to macros to allow using them as an l-value. Many third party C extension modules rely on the ability of using Py_TYPE() and Py_SIZE() to set an object type and size:Py_TYPE(obj) = type;
andPy_SIZE(obj) = size;
.bpo-1635741: Port
symtable
extension module to multiphase initialization (PEP 489)bpo-1635741: Port
grp
andpwd
extension modules to multiphase initialization (PEP 489)bpo-1635741: Port _random extension module to multiphase initialization (PEP 489)
bpo-1635741: Port _hashlib extension module to multiphase initialization (PEP 489)
bpo-41713: Removed the undocumented
PyOS_InitInterrupts()
function. Initializing Python already implicitly installs signal handlers: seePyConfig.install_signal_handlers
. Patch by Victor Stinner.bpo-40170: The
Py_TRASHCAN_BEGIN
macro no longer accesses PyTypeObject attributes, but now can get the condition by calling the new private_PyTrash_cond()
function which hides implementation details.bpo-42260:
Py_GetPath()
,Py_GetPrefix()
,Py_GetExecPrefix()
,Py_GetProgramFullPath()
,Py_GetPythonHome()
andPy_GetProgramName()
functions now returnNULL
if called beforePy_Initialize()
(before Python is initialized). Use the new Python Initialization Configuration API to get the Python Path Configuration.. Patch by Victor Stinner.bpo-42260: The
PyConfig_Read()
function now only parsesPyConfig.argv
arguments once:PyConfig.parse_argv
is set to2
after arguments are parsed. Since Python arguments are strippped fromPyConfig.argv
, parsing arguments twice would parse the application options as Python options.bpo-42262: Added
Py_NewRef()
andPy_XNewRef()
functions to increment the reference count of an object and return the object. Patch by Victor Stinner.bpo-42260: When
Py_Initialize()
is called twice, the second call now updates moresys
attributes for the configuration, rather than onlysys.argv
. Patch by Victor Stinner.bpo-41832: The
PyType_FromModuleAndSpec()
function now accepts NULLtp_doc
slot.bpo-1635741: Added
PyModule_AddObjectRef()
function: similar toPyModule_AddObject()
but don’t steal a reference to the value on success. Patch by Victor Stinner.bpo-42171: The
METH_FASTCALL
calling convention is added to the limited API. The functionsPyModule_AddType()
,PyType_FromModuleAndSpec()
,PyType_GetModule()
andPyType_GetModuleState()
are added to the limited API on Windows.bpo-42085: Add dedicated entry to PyAsyncMethods for sending values
bpo-41073:
PyType_GetSlot()
can now accept static types.bpo-30459:
PyList_SET_ITEM()
,PyTuple_SET_ITEM()
andPyCell_SET()
macros can no longer be used as l-value or r-value. For example,x = PyList_SET_ITEM(a, b, c)
andPyList_SET_ITEM(a, b, c) = x
now fail with a compiler error. It prevents bugs likeif (PyList_SET_ITEM (a, b, c) < 0) ...
test. Patch by Zackery Spytz and Victor Stinner.
Python 3.10.0 alpha 2¶
Release date: 2020-11-03
Security¶
bpo-42103: Prevented potential DoS attack via CPU and RAM exhaustion when processing malformed Apple Property List files in binary format.
bpo-42051: The
plistlib
module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities. This should not affect users as entity declarations are not used in regular plist files.
Core and Builtins¶
bpo-42236: If the
nl_langinfo(CODESET)
function returns an empty string, Python now uses UTF-8 as the filesystem encoding. Patch by Victor Stinner.bpo-42218: Fixed a bug in the PEG parser that was causing crashes in debug mode. Now errors are checked in left-recursive rules to avoid cases where such errors do not get handled in time and appear as long-distance crashes in other places.
bpo-42214: Fixed a possible crash in the PEG parser when checking for the ‘!=’ token in the
barry_as_flufl
rule. Patch by Pablo Galindo.bpo-42206: Propagate and raise the errors caused by
PyAST_Validate()
in the parser.bpo-41796: The
ast
module internal state is now per interpreter. Patch by Victor Stinner.bpo-42143: Fix handling of errors during creation of
PyFunctionObject
, which resulted in operations on uninitialized memory. Patch by Yonatan Goldschmidt.bpo-41659: Fix a bug in the parser, where a curly brace following a
primary
didn’t fail immediately. This led to invalid expressions likea {b}
to throw aSyntaxError
with a wrong offset, or invalid expressions ending with a curly brace likea {
to not fail immediately in the REPL.bpo-42150: Fix possible buffer overflow in the new parser when checking for continuation lines. Patch by Pablo Galindo.
bpo-42123: Run the parser two times. On the first run, disable all the rules that only generate better error messages to gain performance. If there’s a parse failure, run the parser a second time with those enabled.
bpo-42093: The
LOAD_ATTR
instruction now uses new “per opcode cache” mechanism and it is about 36% faster now. Patch by Pablo Galindo and Yury Selivanov.bpo-42030: Support for the legacy AIX-specific shared library loading support has been removed. All versions of AIX since 4.3 have supported and defaulted to using the common Unix mechanism instead.
bpo-41984: The garbage collector now tracks all user-defined classes. Patch by Brandt Bucher.
bpo-41993: Fixed potential issues with removing not completely initialized module from
sys.modules
when import fails.bpo-41979: Star-unpacking is now allowed for with item’s targets in the PEG parser.
bpo-41974: Removed special methods
__int__
,__float__
,__floordiv__
,__mod__
,__divmod__
,__rfloordiv__
,__rmod__
and__rdivmod__
of thecomplex
class. They always raised aTypeError
.bpo-41902: Micro optimization when compute
sq_item
andmp_subscript
ofrange
. Patch by Dong-hee Na.bpo-41894: When loading a native module and a load failure occurs, prevent a possible UnicodeDecodeError when not running in a UTF-8 locale by decoding the load error message using the current locale’s encoding.
bpo-41902: Micro optimization for range.index if step is 1. Patch by Dong-hee Na.
bpo-41435: Add
sys._current_exceptions()
function to retrieve a dictionary mapping each thread’s identifier to the topmost exception currently active in that thread at the time the function is called.bpo-38605: Enable
from __future__ import annotations
(PEP 563) by default. The values found in__annotations__
dicts are now strings, e.g.{"x": "int"}
instead of{"x": int}
.
Library¶
bpo-35455: On Solaris,
thread_time()
is now implemented withgethrvtime()
becauseclock_gettime(CLOCK_THREAD_CPUTIME_ID)
is not always available. Patch by Jakub Kulik.bpo-42233: The
repr()
oftyping
types containing Generic Alias Types previously did not show the parameterized types in theGenericAlias
. They have now been changed to do so.bpo-29566:
binhex.binhex()
consistently writes macOS 9 line endings.bpo-26789: The
logging.FileHandler
class now keeps a reference to the builtinopen()
function to be able to open or reopen the file during Python finalization. Fix errors like:NameError: name 'open' is not defined
. Patch by Victor Stinner.bpo-42157: Removed the
unicodedata.ucnhash_CAPI
attribute which was an internal PyCapsule object. The related private_PyUnicode_Name_CAPI
structure was moved to the internal C API. Patch by Victor Stinner.bpo-42157: Convert the
unicodedata
extension module to the multiphase initialization API (PEP 489) and convert theunicodedata.UCD
static type to a heap type. Patch by Mohamed Koubaa and Victor Stinner.bpo-42146: Fix memory leak in
subprocess.Popen()
in case an uid (gid) specified inuser
(group
,extra_groups
) overflowsuid_t
(gid_t
).bpo-42103:
InvalidFileException
andRecursionError
are now the only errors caused by loading malformed binary Plist file (previously ValueError and TypeError could be raised in some specific cases).bpo-41490: In
importlib.resources
,.path
method is more aggressive about releasing handles to zipfile objects early, enabling use-cases like certifi to leave the context open but delete the underlying zip file.bpo-41052: Pickling heap types implemented in C with protocols 0 and 1 raises now an error instead of producing incorrect data.
bpo-42089: In
importlib.metadata.PackageNotFoundError
, make reference to the package metadata being missing to improve the user experience.bpo-41491: plistlib: fix parsing XML plists with hexadecimal integer values
bpo-42065: Fix an incorrectly formatted error from
_codecs.charmap_decode()
when called with a mapped value outside the range of valid Unicode code points. PR by Max Bernstein.bpo-41966: Fix pickling pure Python
datetime.time
subclasses. Patch by Dean Inwood.bpo-19270:
sched.scheduler.cancel()
will now cancel the correct event, if two events with same priority are scheduled for the same time. Patch by Bar Harel.bpo-28660:
textwrap.wrap()
now attempts to break long words after hyphens whenbreak_long_words=True
andbreak_on_hyphens=True
.bpo-35823: Use
vfork()
instead offork()
forsubprocess.Popen()
on Linux to improve performance in cases where it is deemed safe.bpo-42043: Add support for
zipfile.Path
inheritance.zipfile.Path.is_file()
now returns False for non-existent names.zipfile.Path
objects now expose a.filename
attribute and rely on that to resolve.name
and.parent
when thePath
object is at the root of the zipfile.bpo-39101: Fixed tests using IsolatedAsyncioTestCase from hanging on BaseExceptions.
bpo-41976: Fixed a bug that was causing
ctypes.util.find_library()
to returnNone
when triying to locate a library in an environment when gcc>=9 is available andldconfig
is not. Patch by Pablo Galindobpo-41943: Fix bug where TestCase.assertLogs doesn’t correctly filter messages by level.
bpo-41923: Implement PEP 613, introducing
typing.TypeAlias
annotation.bpo-41905: A new function in abc: update_abstractmethods to re-calculate an abstract class’s abstract status. In addition, dataclass has been changed to call this function.
bpo-23706: Added newline parameter to
pathlib.Path.write_text()
.bpo-41876: Tkinter font class repr uses font name
bpo-41831:
str()
for thetype
attribute of thetkinter.Event
object always returns now the numeric code returned by Tk instead of the name of the event type.bpo-39337:
encodings.normalize_encoding()
now ignores non-ASCII characters.bpo-41747: Ensure all methods that generated from
dataclasses.dataclass()
objects now have the proper__qualname__
attribute referring to the class they belong to. Patch by Batuhan Taskaya.bpo-30681: Handle exceptions caused by unparsable date headers when using email “default” policy. Patch by Tim Bell, Georges Toth
bpo-41586: Add F_SETPIPE_SZ and F_GETPIPE_SZ to fcntl module. Allow setting pipesize on subprocess.Popen.
bpo-41229: Add
contextlib.aclosing
for deterministic cleanup of async generators which is analogous tocontextlib.closing
for non-async generators. Patch by Joongi Kim and John Belmonte.bpo-16396: Allow
ctypes.wintypes
to be imported on non-Windows systems.bpo-4356: Add a key function to the bisect module.
bpo-40592:
shutil.which()
now ignores empty entries inPATHEXT
instead of treating them as a match.bpo-40492: Fix
--outfile
forcProfile
/profile
not writing the output file in the original directory when the program being profiled changes the working directory. PR by Anthony Sottile.bpo-34204: The
shelve
module now usespickle.DEFAULT_PROTOCOL
by default instead ofpickle
protocol3
.bpo-27321: Fixed KeyError exception when flattening an email to a string attempts to replace a non-existent Content-Transfer-Encoding header.
bpo-38976: The
http.cookiejar
module now supports the parsing of cookies in CURL-style cookiejar files through MozillaCookieJar on all platforms. Previously, such cookie entries would be silently ignored when loading a cookiejar with such entries.Additionally, the HTTP Only attribute is persisted in the object, and will be correctly written to file if the MozillaCookieJar object is subsequently dumped.
Documentation¶
bpo-42061: Document __format__ functionality for IP addresses.
bpo-41910: Document the default implementation of
object.__eq__
.bpo-42010: Clarify that subscription expressions are also valid for certain classes and types in the standard library, and for user-defined classes and types if the classmethod
__class_getitem__()
is provided.bpo-41805: Documented generic alias type and
types.GenericAlias
. Also added an entry in glossary for generic types.bpo-39693: Fix tarfile’s extractfile documentation
bpo-39416: Document some restrictions on the default string representations of numeric classes.
Tests¶
bpo-41739: Fix test_logging.test_race_between_set_target_and_flush(): the test now waits until all threads complete to avoid leaking running threads.
bpo-41970: Avoid a test failure in
test_lib2to3
if the module has already imported at the time the test executes. Patch by Pablo Galindo.bpo-41944: Tests for CJK codecs no longer call
eval()
on content received via HTTP.bpo-41306: Fixed a failure in
test_tk.test_widgets.ScaleTest
happening when executing the test with Tk 8.6.10.
Build¶
bpo-38980: Add
-fno-semantic-interposition
to both the compile and link line when building with--enable-optimizations
. Patch by Victor Stinner and Pablo Galindo.
Windows¶
bpo-38439: Updates the icons for IDLE in the Windows Store package.
bpo-38252: Use 8-byte step to detect ASCII sequence in 64-bit Windows build.
bpo-39107: Update Tcl and Tk to 8.6.10 in Windows installer.
bpo-41557: Update Windows installer to use SQLite 3.33.0.
bpo-38324: Avoid Unicode errors when accessing certain locale data on Windows.
macOS¶
bpo-41471: Ignore invalid prefix lengths in system proxy excludes.
IDLE¶
bpo-33987: Mostly finish using ttk widgets, mainly for editor, settings, and searches. Some patches by Mark Roseman.
bpo-40511: Typing opening and closing parentheses inside the parentheses of a function call will no longer cause unnecessary “flashing” off and on of an existing open call-tip, e.g. when typed in a string literal.
bpo-38439: Add a 256×256 pixel IDLE icon to the Windows .ico file. Created by Andrew Clover. Remove the low-color gif variations from the .ico file.
C API¶
bpo-42157: The private
_PyUnicode_Name_CAPI
structure of the PyCapsule APIunicodedata.ucnhash_CAPI
has been moved to the internal C API. Patch by Victor Stinner.bpo-42015: Fix potential crash in deallocating method objects when dynamically allocated
PyMethodDef
’s lifetime is managed through theself
argument of aPyCFunction
.bpo-40423: The
subprocess
module andos.closerange
will now use theclose_range(low, high, flags)
syscall when it is available for more efficient closing of ranges of descriptors.bpo-41845:
PyObject_GenericGetDict()
is available again in the limited API when targeting 3.10 or later.bpo-40422: Add
_Py_closerange
function to provide performant closing of a range of file descriptors.bpo-41986:
Py_FileSystemDefaultEncodeErrors
andPy_UTF8Mode
are available again in limited API.bpo-41756: Add
PyIter_Send
function to allow sending value into generator/coroutine/iterator without raising StopIteration exception to signal return.bpo-41784: Added
PyUnicode_AsUTF8AndSize
to the limited C API.
Python 3.10.0 alpha 1¶
Release date: 2020-10-05
Security¶
bpo-41304: Fixes
python3x._pth
being ignored on Windows, caused by the fix for bpo-29778 (CVE-2020-15801).bpo-41162: Audit hooks are now cleared later during finalization to avoid missing events.
bpo-29778: Ensure
python3.dll
is loaded from correct locations when Python is embedded (CVE-2020-15523).bpo-41004: The __hash__() methods of ipaddress.IPv4Interface and ipaddress.IPv6Interface incorrectly generated constant hash values of 32 and 128 respectively. This resulted in always causing hash collisions. The fix uses hash() to generate hash values for the tuple of (address, mask length, network address).
bpo-39603: Prevent http header injection by rejecting control characters in http.client.putrequest(…).
Core and Builtins¶
bpo-41909: Fixed stack overflow in
issubclass()
andisinstance()
when getting the__bases__
attribute leads to infinite recursion.bpo-41922: Speed up calls to
reversed()
by using the PEP 590vectorcall
calling convention. Patch by Dong-hee Na.bpo-41873: Calls to
float()
are now faster due to thevectorcall
calling convention. Patch by Dennis Sweeney.bpo-41870: Speed up calls to
bool()
by using the PEP 590vectorcall
calling convention. Patch by Dong-hee Na.bpo-1635741: Port the
_bisect
module to the multi-phase initialization API (PEP 489).bpo-39934: Correctly count control blocks in ‘except’ in compiler. Ensures that a syntax error, rather a fatal error, occurs for deeply nested, named exception handlers.
bpo-41780: Fix
__dir__()
oftypes.GenericAlias
. Patch by Batuhan Taskaya.bpo-1635741: Port the
_lsprof
extension module to multi-phase initialization (PEP 489).bpo-1635741: Port the
cmath
extension module to multi-phase initialization (PEP 489).bpo-1635741: Port the
_scproxy
extension module to multi-phase initialization (PEP 489).bpo-1635741: Port the
termios
extension module to multi-phase initialization (PEP 489).bpo-1635741: Convert the
_sha256
extension module types to heap types.bpo-41690: Fix a possible stack overflow in the parser when parsing functions and classes with a huge amount of arguments. Patch by Pablo Galindo.
bpo-1635741: Port the
_overlapped
extension module to multi-phase initialization (PEP 489).bpo-1635741: Port the
_curses_panel
extension module to multi-phase initialization (PEP 489).bpo-1635741: Port the
_opcode
extension module to multi-phase initialization (PEP 489).bpo-41681: Fixes the wrong error description in the error raised by using 2
,
in format string in f-string andstr.format()
.bpo-41675: The implementation of
signal.siginterrupt()
now usessigaction()
(if it is available in the system) instead of the deprecatedsiginterrupt()
. Patch by Pablo Galindo.bpo-41670: Prevent line trace being skipped on platforms not compiled with
USE_COMPUTED_GOTOS
. Fixes issue where some lines nested within a try-except block were not being traced on Windows.bpo-41654: Fix a crash that occurred when destroying subclasses of
MemoryError
. Patch by Pablo Galindo.bpo-1635741: Port the
zlib
extension module to multi-phase initialization (PEP 489).bpo-41631: The
_ast
module uses again a global state. Using a module state per module instance is causing subtle practical problems. For example, the Mercurial project replaces the__import__()
function to implement lazy import, whereas Python expected thatimport _ast
always return a fully initialized_ast
module.bpo-40077: Convert
_operator
to usePyType_FromSpec()
.bpo-1653741: Port
_sha3
to multi-phase init. Convert static types to heap types.bpo-1635741: Port the
_blake2
extension module to the multi-phase initialization API (PEP 489).bpo-41533: Free the stack allocated in
va_build_stack
ifdo_mkstack
fails and the stack is not asmall_stack
.bpo-41531: Fix a bug that was dropping keys when compiling dict literals with more than 0xFFFF elements. Patch by Pablo Galindo.
bpo-41525: The output of
python --help
contains now only ASCII characters.bpo-1635741: Port the
_sha1
,_sha512
, and_md5
extension modules to multi-phase initialization API (PEP 489).bpo-41431: Optimize
dict_merge()
for copying dict (e.g.dict(d)
and{}.update(d)
).bpo-41428: Implement PEP 604. This supports (int | str) etc. in place of Union[str, int].
bpo-41340: Removed fallback implementation for
strdup
.bpo-38156: Handle interrupts that come after EOF correctly in
PyOS_StdioReadline
.bpo-41342:
round()
with integer argument is now faster (9–60%).bpo-41334: Constructors
str()
,bytes()
andbytearray()
are now faster (around 30–40% for small objects).bpo-41295: Resolve a regression in CPython 3.8.4 where defining “__setattr__” in a multi-inheritance setup and calling up the hierarchy chain could fail if builtins/extension types were involved in the base types.
bpo-41323: Bytecode optimizations are performed directly on the control flow graph. This will result in slightly more compact code objects in some circumstances.
bpo-41247: Always cache the running loop holder when running
asyncio.set_running_loop
.bpo-41252: Fix incorrect refcounting in _ssl.c’s
_servername_callback()
.bpo-1635741: Port
multiprocessing
to multi-phase initializationbpo-1635741: Port
winapi
to multiphase initializationbpo-41215: Use non-NULL default values in the PEG parser keyword list to overcome a bug that was preventing Python from being properly compiled when using the XLC compiler. Patch by Pablo Galindo.
bpo-41218: Python 3.8.3 had a regression where compiling with ast.PyCF_ALLOW_TOP_LEVEL_AWAIT would aggressively mark list comprehension with CO_COROUTINE. Now only list comprehension making use of async/await will tagged as so.
bpo-1635741: Port
faulthandler
to multiphase initialization.bpo-1635741: Port
sha256
to multiphase initializationbpo-41175: Guard against a NULL pointer dereference within bytearrayobject triggered by the
bytearray() + bytearray()
operation.bpo-41100: add arm64 to the allowable Mac OS arches in mpdecimal.h
bpo-41094: Fix decoding errors with audit when open files with non-ASCII names on non-UTF-8 locale.
bpo-39960: The “hackcheck” that prevents sneaking around a type’s __setattr__() by calling the superclass method was rewritten to allow C implemented heap types.
bpo-41084: Prefix the error message with ‘f-string: ‘, when parsing an f-string expression which throws a
SyntaxError
.bpo-40521: Empty frozensets are no longer singletons.
bpo-41076: Pre-feed the parser with the location of the f-string expression, not the f-string itself, which allows us to skip the shifting of the AST node locations after the parsing is completed.
bpo-41056: Fixes a reference to deallocated stack space during startup when constructing sys.path involving a relative symlink when code was supplied via -c. (discovered via Coverity)
bpo-41061: Fix incorrect expressions and asserts in hashtable code and tests.
bpo-41052: Opt out serialization/deserialization for _random.Random
bpo-40939: Rename
PyPegen*
functions toPyParser*
, so that we can remove the old set ofPyParser*
functions that were using the old parser, but keep everything backwards-compatible.bpo-35975: Stefan Behnel reported that cf_feature_version is used even when PyCF_ONLY_AST is not set. This is against the intention and against the documented behavior, so it’s been fixed.
bpo-40939: Remove the remaining files from the old parser and the
symbol
module.bpo-40077: Convert
_bz2
to usePyType_FromSpec()
.bpo-41006: The
encodings.latin_1
module is no longer imported at startup. Now it is only imported when it is the filesystem encoding or the stdio encoding.bpo-40636:
zip()
now supports PEP 618’sstrict
parameter, which raises aValueError
if the arguments are exhausted at different lengths. Patch by Brandt Bucher.bpo-1635741: Port
_gdbm
to multiphase initialization.bpo-40985: Fix a bug that caused the
SyntaxError
text to be empty when a file ends with a line ending in a line continuation character (i.e. backslash). The error text should contain the text of the last line.bpo-40958: Fix a possible buffer overflow in the PEG parser when gathering information for emitting syntax errors. Patch by Pablo Galindo.
bpo-1635741: Port
_dbm
to multiphase initialization.bpo-40957: Fix refleak in _Py_fopen_obj() when PySys_Audit() fails
bpo-40950: Add a state to the
nis
module (PEP 3121) and apply the multiphase initialization. Patch by Dong-hee Na.bpo-40947: The Python Path Configuration now takes
PyConfig.platlibdir
in account.bpo-40939: Remove the old parser, the
parser
module and all associated support code, command-line options and environment variables. Patch by Pablo Galindo.bpo-40847: Fix a bug where a line with only a line continuation character is not considered a blank line at tokenizer level. In such cases, more than a single
NEWLINE
token was emitted. The old parser was working around the issue, but the new parser threw aSyntaxError
for valid input due to this. For example, an empty line following a line continuation character was interpreted as aSyntaxError
.bpo-40890: Each dictionary view now has a
mapping
attribute that provides atypes.MappingProxyType
wrapping the original dictionary. Patch contributed by Dennis Sweeney.bpo-40889: Improved the performance of symmetric difference operations on dictionary item views. Patch by Dennis Sweeney.
bpo-40904: Fix possible segfault in the new PEG parser when parsing f-string containing yield statements with no value (
f"{yield}"
). Patch by Pablo Galindobpo-40903: Fixed a possible segfault in the new PEG parser when producing error messages for invalid assignments of the form
p=p=
. Patch by Pablo Galindobpo-40880: Fix invalid memory read in the new parser when checking newlines in string literals. Patch by Pablo Galindo.
bpo-40883: Fix memory leak in when parsing f-strings in the new parser. Patch by Pablo Galindo
bpo-40870: Raise
ValueError
when validating custom AST’s where the constantsTrue
,False
andNone
are used within aast.Name
node.bpo-40854: Allow overriding
sys.platlibdir
via a newPYTHONPLATLIBDIR
environment variable.bpo-40826: Fix GIL usage in
PyOS_Readline()
: lock the GIL to set an exception and pass the Python thread state when checking if there is a pending signal.bpo-1635741: Port
fcntl
to multiphase initialization.bpo-19468: Delete unnecessary instance check in importlib.reload(). Patch by Furkan Önder.
bpo-40824: Unexpected errors in calling the
__iter__
method are no longer masked byTypeError
in thein
operator and functionscontains()
,indexOf()
andcountOf()
of theoperator
module.bpo-40792: Attributes
start
,stop
andstep
of therange
object now always has exact typeint
. Previously, they could have been an instance of a subclass ofint
.bpo-40780: Fix a corner case where g-style string formatting of a float failed to remove trailing zeros.
bpo-38964: When there’s a
SyntaxError
in the expression part of an fstring, the filename attribute of theSyntaxError
gets correctly set to the name of the file the fstring resides in.bpo-40750: Support the “-d” debug flag in the new PEG parser. Patch by Pablo Galindo
bpo-40217: Instances of types created with
PyType_FromSpecWithBases()
will no longer automatically visit their class object when traversing references in the garbage collector. The user is expected to manually visit the object’s class. Patch by Pablo Galindo.bpo-39573:
Py_TYPE()
is changed to the inline static function. Patch by Dong-hee Na.bpo-40696: Fix a hang that can arise after
generator.throw()
due to a cycle in the exception context chain.bpo-40521: Each interpreter now its has own free lists, singletons and caches:
Free lists: float, tuple, list, dict, frame, context, asynchronous generator, MemoryError.
Singletons: empty tuple, empty bytes string, empty Unicode string, single byte character, single Unicode (latin1) character.
Slice cache.
They are no longer shared by all interpreters.
bpo-40679: Certain
TypeError
messages about missing or extra arguments now include the function’s qualified name. Patch by Dennis Sweeney.bpo-29590: Make the stack trace correct after calling
generator.throw()
on a generator that has yielded from ayield from
.bpo-4022: Improve performance of generators by not raising internal StopIteration.
bpo-1635741: Port
mmap
to multiphase initialization.bpo-1635741: Port
_lzma
to multiphase initialization.bpo-37999: Builtin and extension functions that take integer arguments no longer accept
Decimal
s,Fraction
s and other objects that can be converted to integers only with a loss (e.g. that have the__int__()
method but do not have the__index__()
method).bpo-29882: Add
int.bit_count()
, counting the number of ones in the binary representation of an integer. Patch by Niklas Fiekas.bpo-36982: Use ncurses extended color functions when available to support terminals with 256 colors, and add the new function
curses.has_extended_color_support()
to indicate whether extended color support is provided by the underlying ncurses library.bpo-19569: Add the private macros
_Py_COMP_DIAG_PUSH
,_Py_COMP_DIAG_IGNORE_DEPR_DECLS
, and_Py_COMP_DIAG_POP
.bpo-26680: The int type now supports the x.is_integer() method for compatibility with float.
Library¶
bpo-41900: C14N 2.0 serialisation in xml.etree.ElementTree failed for unprefixed attributes when a default namespace was defined.
bpo-41887: Strip leading spaces and tabs on
ast.literal_eval()
. Also document stripping of spaces and tabs foreval()
.bpo-41773: Note in documentation that
random.choices()
doesn’t support non-finite weights, raiseValueError
when given non-finite weights.bpo-41840: Fix a bug in the
symtable
module that was causing module-scope global variables to not be reported as both local and global. Patch by Pablo Galindo.bpo-41842: Add
codecs.unregister()
function to unregister a codec search function.bpo-40564: In
zipfile.Path
, mutate the passed ZipFile object type instead of making a copy. Prevents issues when both the local copy and the caller’s copy attempt to close the same file handle.bpo-40670: More reliable validation of statements in
timeit.Timer
. It now accepts “empty” statements (only whitespaces and comments) and rejects misindentent statements.bpo-41833: The
threading.Thread
constructor now uses the target name if the target argument is specified but the name argument is omitted.bpo-41817: fix
tkinter.EventType
Enum so all members are strings, and none are tuplesbpo-41810:
types.EllipsisType
,types.NotImplementedType
andtypes.NoneType
have been reintroduced, providing a new set of types readily interpretable by static type checkers.bpo-41815: Fix SQLite3 segfault when backing up closed database. Patch contributed by Peter David McCormick.
bpo-41816: StrEnum added: it ensures that all members are already strings or string candidates
bpo-41517: fix bug allowing Enums to be extended via multiple inheritance
bpo-39587: use the correct mix-in data type when constructing Enums
bpo-41792: Add is_typeddict function to typing.py to check if a type is a TypedDict class
Previously there was no way to check that without using private API. See the
relevant issue in python/typing
bpo-41789: Honor
object
overrides inEnum
class creation (specifically,__str__
,__repr__
,__format__
, and__reduce_ex__
).bpo-32218:
enum.Flag
andenum.IntFlag
members are now iterablebpo-39651: Fix a race condition in the
call_soon_threadsafe()
method ofasyncio.ProactorEventLoop
: do nothing if the self-pipe socket has been closed.bpo-1635741: Port the
mashal
extension module to the multi-phase initialization API (PEP 489).bpo-1635741: Port the
_string
extension module to the multi-phase initialization API (PEP 489).bpo-41732: Added an iterator to
memoryview
.bpo-41720: Fixed
turtle.Vec2D.__rmul__()
for arguments which are not int or float.bpo-41696: Fix handling of debug mode in
asyncio.run()
. This allows settingPYTHONASYNCIODEBUG
or-X dev
to enable asyncio debug mode when usingasyncio.run()
.bpo-41687: Fix implementation of sendfile to be compatible with Solaris.
bpo-41662: No longer override exceptions raised in
__len__()
of a sequence of parameters insqlite3
withProgrammingError
.bpo-39010: Restarting a
ProactorEventLoop
on Windows no longer logs spuriousConnectionResetErrors
.bpo-41638:
ProgrammingError
message for absent parameter insqlite3
contains now the name of the parameter instead of its index when parameters are supplied as a dict.bpo-41662: Fixed crash when mutate list of parameters during iteration in
sqlite3
.bpo-41513: Improved the accuracy of math.hypot(). Internally, each step is computed with extra precision so that the result is now almost always correctly rounded.
bpo-41609: The pdb whatis command correctly reports instance methods as ‘Method’ rather than ‘Function’.
bpo-39994: Fixed pprint’s handling of dict subclasses that override __repr__.
bpo-32751: When cancelling the task due to a timeout,
asyncio.wait_for()
will now wait until the cancellation is complete also in the case when timeout is <= 0, like it does with positive timeouts.bpo-37658:
asyncio.wait_for()
now properly handles races between cancellation of itself and the completion of the wrapped awaitable.bpo-40782: Change the method asyncio.AbstractEventLoop.run_in_executor to not be a coroutine.
bpo-41520: Fix
codeop
regression that prevented turning compile warnings into errors.bpo-41528: turtle uses math module functions to convert degrees to radians and vice versa and to calculate vector norm
bpo-41513: Minor algorithmic improvement to math.hypot() and math.dist() giving small gains in speed and accuracy.
bpo-41503: Fixed a race between setTarget and flush in logging.handlers.MemoryHandler.
bpo-41497: Fix potential UnicodeDecodeError in dis module.
bpo-41467: On Windows, fix asyncio
recv_into()
return value when the socket/pipe is closed (BrokenPipeError
): return0
rather than an empty byte string (b''
).bpo-41425: Make tkinter doc example runnable.
bpo-41421: Make an algebraic simplification to random.paretovariate(). It now is slightly less subject to round-off error and is slightly faster. Inputs that used to cause ZeroDivisionError now cause an OverflowError instead.
bpo-41440: Add
os.cpu_count()
support for VxWorks RTOS.bpo-41316: Fix the
tarfile
module to write only basename of TAR file to GZIP compression header.bpo-41384: Raise TclError instead of TypeError when an unknown option is passed to tkinter.OptionMenu.
bpo-41317: Use add_done_callback() in asyncio.loop.sock_accept() to unsubscribe reader early on cancellation.
bpo-35328: Set the environment variable
VIRTUAL_ENV_PROMPT
atvenv
activation.bpo-41341: Recursive evaluation of
typing.ForwardRef
inget_type_hints
.bpo-41344: Prevent creating
shared_memory.SharedMemory
objects withsize=0
.bpo-41333:
collections.OrderedDict.pop()
is now 2 times faster.bpo-41288: Unpickling invalid NEWOBJ_EX opcode with the C implementation raises now UnpicklingError instead of crashing.
bpo-39017: Avoid infinite loop when reading specially crafted TAR files using the tarfile module (CVE-2019-20907).
bpo-41273: Speed up any transport using
_ProactorReadPipeTransport
by callingrecv_into
instead ofrecv
, thus not creating a new buffer for eachrecv
call in the transport’s read loop.bpo-41235: Fix the error handling in
ssl.SSLContext.load_dh_params()
.bpo-41207: In distutils.spawn, restore expectation that DistutilsExecError is raised when the command is not found.
bpo-29727: Register
array.array
as aMutableSequence
. Patch by Pablo Galindo.bpo-39168: Remove the
__new__
method oftyping.Generic
.bpo-41194: Fix a crash in the
_ast
module: it can no longer be loaded more than once. It now uses a global state rather than a module state.bpo-41195: Add read-only ssl.SSLContext.security_level attribute to retrieve the context’s security level.
bpo-41193: The
write_history()
atexit function of the readline completer now ignores anyOSError
to ignore error if the filesystem is read-only, instead of only ignoringFileNotFoundError
andPermissionError
.bpo-41182: selector: use DefaultSelector based upon implementation
bpo-41161: The decimal module now requires libmpdec-2.5.0. Users of –with-system-libmpdec should update their system library.
bpo-40874: The decimal module now requires libmpdec-2.5.0.
bpo-41138: Fixed the
trace
module CLI for Python source files with non-UTF-8 encoding.bpo-31082: Use the term “iterable” in the docstring for
functools.reduce()
.bpo-40521: Remove freelist from collections.deque().
bpo-31938: Fix default-value signatures of several functions in the
select
module - by Anthony Sottile.bpo-41068: Fixed reading files with non-ASCII names from ZIP archive directly after writing them.
bpo-41058:
pdb.find_function()
now correctly determines the source file encoding.bpo-41056: Invalid file descriptor values are now prevented from being passed to os.fpathconf. (discovered by Coverity)
bpo-41056: Fix a NULL pointer dereference within the ssl module during a MemoryError in the keylog callback. (discovered by Coverity)
bpo-41056: Fixed an instance where a MemoryError within the zoneinfo module might not be reported or not reported at its source. (found by Coverity)
bpo-41048:
mimetypes.read_mime_types()
function reads the rule file using UTF-8 encoding, not the locale encoding. Patch by Srinivas Reddy Thatiparthy.bpo-41043: Fixed the use of
glob()
in the stdlib: literal part of the path is now always correctly escaped.bpo-41025: Fixed an issue preventing the C implementation of
zoneinfo.ZoneInfo
from being subclassed.bpo-35018: Add the
xml.sax.handler.LexicalHandler
class that is present in other SAX XML implementations.bpo-41002: Improve performance of HTTPResponse.read with a given amount. Patch by Bruce Merry.
bpo-40448:
ensurepip
now disables the use ofpip
cache when installing the bundled versions ofpip
andsetuptools
. Patch by Krzysztof Konopko.bpo-40967: Removed
asyncio.Task.current_task()
andasyncio.Task.all_tasks()
. Patch contributed by Rémi Lapeyre.bpo-40924: Ensure
importlib.resources.path
returns an extant path for the SourceFileLoader’s resource reader. Avoids the regression identified in master while a long-term solution is devised.bpo-40955: Fix a minor memory leak in
subprocess
module when extra_groups was specified.bpo-40855: The standard deviation and variance functions in the statistics module were ignoring their mu and xbar arguments.
bpo-40939: Use the new PEG parser when generating the stdlib
keyword
module.bpo-23427: Add
sys.orig_argv
attribute: the list of the original command line arguments passed to the Python executable.bpo-33689: Ignore empty or whitespace-only lines in .pth files. This matches the documentated behavior. Before, empty lines caused the site-packages dir to appear multiple times in sys.path. By Ido Michael, contributors Malcolm Smith and Tal Einat.
bpo-40884: Added a
defaults
parameter tologging.Formatter
, to allow specifying default values for custom fields. Patch by Asaf Alon and Bar Harel.bpo-39791: Refresh importlib.metadata from importlib_metadata 1.6.1.
bpo-40807: Stop codeop._maybe_compile, used by code.InteractiveInterpreter (and IDLE). from emitting each warning three times.
bpo-32604: Fix reference leak in the
select
module when the module is imported in a subinterpreter.bpo-39791: Built-in loaders (SourceFileLoader and ZipImporter) now supply
TraversableResources
implementations forResourceReader
, and the fallback function has been removed.bpo-39314:
rlcompleter.Completer
and the standard Python shell now close the parenthesis for functions that take no arguments. Patch contributed by Rémi Lapeyre.bpo-17005: The topological sort functionality that was introduced initially in the
functools
module has been moved to a newgraphlib
module to better accommodate the new tools and keep the original scope of thefunctools
module. Patch by Pablo Galindobpo-40834: Fix truncate when sending str object with_xxsubinterpreters.channel_send.
bpo-40755: Add rich comparisons to collections.Counter().
bpo-26407: Unexpected errors in calling the
__iter__
method are no longer masked byTypeError
incsv.reader()
,csv.writer.writerow()
andcsv.writer.writerows()
.bpo-39384: Fixed email.contentmanager to allow set_content() to set a null string.
bpo-40744: The
sqlite3
module uses SQLite API functions that require SQLite v3.7.3 or higher. This patch removes support for older SQLite versions, and explicitly requires SQLite 3.7.3 both at build, compile and runtime. Patch by Sergey Fedoseev and Erlend E. Aasland.bpo-40777: Initialize PyDateTime_IsoCalendarDateType.tp_base at run-time to avoid errors on some compilers.
bpo-38488: Update ensurepip to install pip 20.1.1 and setuptools 47.1.0.
bpo-40792: The result of
operator.index()
now always has exact typeint
. Previously, the result could have been an instance of a subclass ofint
.bpo-40767:
webbrowser
now properly finds the default browser in pure Wayland systems by checking the WAYLAND_DISPLAY environment variable. Patch contributed by Jérémy Attali.bpo-40791:
hashlib.compare_digest()
uses OpenSSL’sCRYPTO_memcmp()
function when OpenSSL is available.bpo-40795:
ctypes
module: If ctypes fails to convert the result of a callback or if a ctypes callback function raises an exception, sys.unraisablehook is now called with an exception set. Previously, the error was logged into stderr byPyErr_Print()
.bpo-16995: Add
base64.b32hexencode()
andbase64.b32hexdecode()
to support the Base32 Encoding with Extended Hex Alphabet.bpo-30008: Fix
ssl
code to be compatible with OpenSSL 1.1.x builds that useno-deprecated
and--api=1.1.0
.bpo-30064: Fix asyncio
loop.sock_*
race condition issuebpo-40759: Deprecate the
symbol
module.bpo-40756: The second argument (extra) of
LoggerAdapter.__init__
now defaults to None.bpo-37129: Add a new
os.RWF_APPEND
flag foros.pwritev()
.bpo-40737: Fix possible reference leak for
sqlite3
initialization.bpo-40726: Handle cases where the
end_lineno
isNone
onast.increment_lineno()
.bpo-40698:
distutils
upload creates SHA2-256 and Blake2b-256 digests. MD5 digests is skipped if platform blocks MD5.bpo-40695:
hashlib
no longer falls back to builtin hash implementations when OpenSSL provides a hash digest and the algorithm is blocked by security policy.bpo-9216: func:
hashlib.new
passedusedforsecurity
to OpenSSL EVP constructor_hashlib.new()
. test_hashlib and test_smtplib handle strict security policy better.bpo-40614:
ast.parse()
will not parse self documenting expressions in f-strings when passedfeature_version
is less than(3, 8)
.bpo-40626: Add h5 file extension as MIME Type application/x-hdf5, as per HDF Group recommendation for HDF5 formatted data files. Patch contributed by Mark Schwab.
bpo-25920: On macOS, when building Python for macOS 10.4 and older, which wasn’t the case for python.org macOS installer,
socket.getaddrinfo()
no longer uses an internal lock to prevent race conditions when callinggetaddrinfo()
which is thread-safe since macOS 10.5. Python 3.9 requires macOS 10.6 or newer. The internal lock caused random hang on fork when another thread was callingsocket.getaddrinfo()
. The lock was also used on FreeBSD older than 5.3, OpenBSD older than 201311 and NetBSD older than 4.bpo-40671: Prepare
_hashlib
for PEP 489 and usePyModule_AddType()
.bpo-32309: Added a new coroutine
asyncio.to_thread()
. It is mainly used for running IO-bound functions in a separate thread to avoid blocking the event loop, and essentially works as a high-level version ofrun_in_executor()
that can directly take keyword arguments.bpo-36543: Restored the deprecated
xml.etree.cElementTree
module.bpo-40611:
MAP_POPULATE
constant has now been added to the list of exportedmmap
module flags.bpo-39881: PEP 554 for use in the test suite. (Patch By Joannah Nanjekye)
bpo-13097:
ctypes
now raises anArgumentError
when a callback is invoked with more than 1024 arguments.bpo-39385: A new test assertion context-manager,
unittest.assertNoLogs()
will ensure a given block of code emits no log messages using the logging module. Contributed by Kit Yan Choi.bpo-23082: Updated the error message and docs of PurePath.relative_to() to better reflect the function behaviour.
bpo-40318: Use SQLite3 trace v2 API, if it is available.
bpo-40105: ZipFile truncates files to avoid corruption when a shorter comment is provided in append (“a”) mode. Patch by Jan Mazur.
bpo-40084: Fix
Enum.__dir__
: dir(Enum.member) now includes attributes as well as methods.bpo-31122: ssl.wrap_socket() now raises ssl.SSLEOFError rather than OSError when peer closes connection during TLS negotiation
bpo-39728: fix default
_missing_
so a duplicateValueError
is not set as the__context__
of the originalValueError
bpo-39244: Fixed
multiprocessing.context.get_all_start_methods
to properly return the default method first on macOS.bpo-39040: Fix parsing of invalid mime headers parameters by collapsing whitespace between encoded words in a bare-quote-string.
bpo-38731: Add
--quiet
option to command-line interface ofpy_compile
. Patch by Gregory Schevchenko.bpo-35714:
struct.error
is now raised if there is a null character in astruct
format string.bpo-38144: Added the root_dir and dir_fd parameters in
glob.glob()
.bpo-26543: Fix
IMAP4.noop()
when debug mode is enabled (ex:imaplib.Debug = 3
).bpo-12178:
csv.writer()
now correctly escapes escapechar when input contains escapechar. Patch by Catalin Iacob, Berker Peksag, and Itay Elbirt.bpo-36290: AST nodes are now raising
TypeError
on conflicting keyword arguments. Patch contributed by Rémi Lapeyre.bpo-33944: Added site.py site-packages tracing in verbose mode.
bpo-35078: Refactor formatweekday, formatmonthname methods in LocaleHTMLCalendar and LocaleTextCalendar classes in calendar module to call the base class methods.This enables customizable CSS classes for LocaleHTMLCalendar. Patch by Srinivas Reddy Thatiparthy
bpo-29620:
assertWarns()
no longer raises aRuntimeException
when accessing a module’s__warningregistry__
causes importation of a new module, or when a new module is imported in another thread. Patch by Kernc.bpo-31844: Remove
ParserBase.error()
method from the private and undocumented_markupbase
module.html.parser.HTMLParser
is the only subclass ofParserBase
and itserror()
implementation was deprecated in Python 3.4 and removed in Python 3.5.bpo-34226: Fix
cgi.parse_multipart
without content_length. Patch by Roger Duranbpo-33660: Fix pathlib.PosixPath to resolve a relative path located on the root directory properly.
bpo-28557: Improve the error message for a misbehaving
rawio.readinto
bpo-26680: The d.is_integer() method is added to the Decimal type, for compatibility with other number types.
bpo-26680: The x.is_integer() method is incorporated into the abstract types of the numeric tower, Real, Rational and Integral, with appropriate default implementations.
Documentation¶
bpo-41428: Add documentation for PEP 604 (Allow writing union types as
X | Y
).bpo-41774: In Programming FAQ “Sequences (Tuples/Lists)” section, add “How do you remove multiple items from a list”.
bpo-35293: Fix RemovedInSphinx40Warning when building the documentation. Patch by Dong-hee Na.
bpo-37149: Change Shipman tkinter doc link from archive.org to TkDocs. (The doc has been removed from the NMT server.) The new link responds much faster and includes a short explanatory note.
bpo-41726: Update the refcounts info of
PyType_FromModuleAndSpec
.bpo-41624: Fix the signature of
typing.Coroutine
.bpo-40204: Enable Sphinx 3.2
c_allow_pre_v3
option and disablec_warn_on_allowed_pre_v3
option to make the documentation compatible with Sphinx 2 and Sphinx 3.bpo-41045: Add documentation for debug feature of f-strings.
bpo-41314: Changed the release when
from __future__ import annotations
becomes the default from4.0
to3.10
(following a change in PEP 563).bpo-40979: Refactored typing.rst, arranging more than 70 classes, functions, and decorators into new sub-sections.
bpo-40552: Fix in tutorial section 4.2. Code snippet is now correct.
bpo-39883: Make code, examples, and recipes in the Python documentation be licensed under the more permissive BSD0 license in addition to the existing Python 2.0 license.
bpo-37703: Updated Documentation to comprehensively elaborate on the behaviour of gather.cancel()
Tests¶
bpo-41939: Fix test_site.test_license_exists_at_url(): call
urllib.request.urlcleanup()
to reset the globalurllib.request._opener
. Patch by Victor Stinner.bpo-41731: Make test_cmd_line_script pass with option ‘-vv’.
bpo-41602: Add tests for SIGINT handling in the runpy module.
bpo-41521:
test.support
: Renameblacklist
parameter ofcheck__all__()
tonot_exported
.bpo-41477: Make ctypes optional in test_genericalias.
bpo-41085: Fix integer overflow in the
array.array.index()
method on 64-bit Windows for index larger than2**31
.bpo-41069:
test.support.TESTFN
and the current directory for tests when run viatest.regrtest
contain now non-ascii characters if possible.bpo-38377: On Linux, skip tests using multiprocessing if the current user cannot create a file in
/dev/shm/
directory. Add theskip_if_broken_multiprocessing_synchronize()
function to thetest.support
module.bpo-41009: Fix use of
support.require_{linux|mac|freebsd}_version()
decorators as class decorator.bpo-41003: Fix
test_copyreg
whennumpy
is installed:test.pickletester
now saves/restores warnings filters when importingnumpy
, to ignore filters installed bynumpy
.bpo-40964: Disable remote
imaplib
tests, host cyrus.andrew.cmu.edu is blocking incoming connections.bpo-40927: Fix test_binhex when run twice: it now uses import_fresh_module() to ensure that it raises DeprecationWarning each time.
bpo-17258: Skip some
multiprocessing
tests when MD5 hash digest is blocked.bpo-31904: Increase LOOPBACK_TIMEOUT to 10 for VxWorks RTOS.
bpo-38169: Increase code coverage for SharedMemory and ShareableList
bpo-34401: Make test_gdb properly run on HP-UX. Patch by Michael Osipov.
Build¶
bpo-38249: Update
Py_UNREACHABLE
to use __builtin_unreachable() if only the compiler is able to use it. Patch by Dong-hee Na.bpo-41617: Fix
pycore_bitutils.h
header file to support old clang versions:__builtin_bswap16()
is not available in LLVM clang 3.0.bpo-40204: Pin Sphinx version to 2.3.1 in
Doc/Makefile
.bpo-36020: The C99 functions
snprintf()
andvsnprintf()
are now required to build Python.bpo-40684:
make install
now uses thePLATLIBDIR
variable for the destinationlib-dynload/
directory when./configure --with-platlibdir
is used.bpo-40683: Fixed an issue where the
zoneinfo
module and its tests were not included when Python is installed withmake
.
Windows¶
bpo-41744: Fixes automatic import of props file when using the Nuget package.
bpo-41627: The user site directory for 32-bit now includes a
-32
suffix to distinguish it from the 64-bit interpreter’s directory.bpo-41526: Fixed layout of final page of the installer by removing the special thanks to Mark Hammond (with his permission).
bpo-41492: Fixes the description that appears in UAC prompts.
bpo-40948: Improve post-install message to direct people to the “py” command.
bpo-41412: The installer will now fail to install on Windows 7 and Windows 8. Further, the UCRT dependency is now always downloaded on demand.
bpo-40741: Update Windows release to include SQLite 3.32.3.
bpo-41142:
msilib
now supports creating CAB files with non-ASCII file path and adding files with non-ASCII file path to them.bpo-41074: Fixed support of non-ASCII names in functions
msilib.OpenDatabase()
andmsilib.init_database()
and non-ASCII SQL in methodmsilib.Database.OpenView()
.bpo-41039: Stable ABI redirection DLL (python3.dll) now uses
#pragma comment(linker)
for re-exporting.bpo-40164: Updates Windows OpenSSL to 1.1.1g
bpo-39631: Changes the registered MIME type for
.py
files on Windows totext/x-python
instead oftext/plain
.bpo-40677: Manually define IO_REPARSE_TAG_APPEXECLINK in case some old Windows SDK doesn’t have it.
bpo-37556: Extend py.exe help to mention overrides via venv, shebang, environmental variables & ini files.
macOS¶
bpo-41557: Update macOS installer to use SQLite 3.33.0.
bpo-39580: Avoid opening Finder window if running installer from the command line. Patch contributed by Rick Heil.
bpo-41100: Fix configure error when building on macOS 11. Note that the current Python release was released shortly after the first developer preview of macOS 11 (Big Sur); there are other known issues with building and running on the developer preview. Big Sur is expected to be fully supported in a future bugfix release of Python 3.8.x and with 3.9.0.
bpo-40741: Update macOS installer to use SQLite 3.32.3.
bpo-41005: fixed an XDG settings issue not allowing macos to open browser in webbrowser.py
bpo-40741: Update macOS installer to use SQLite 3.32.2.
IDLE¶
bpo-41775: Use ‘IDLE Shell’ as shell title
bpo-35764: Rewrite the Calltips doc section.
bpo-40181: In calltips, stop reminding that ‘/’ marks the end of positional-only arguments.
bpo-41468: Improve IDLE run crash error message (which users should never see).
bpo-41373: Save files loaded with no line ending, as when blank, or different line endings, by setting its line ending to the system default. Fix regression in 3.8.4 and 3.9.0b4.
bpo-41300: Save files with non-ascii chars. Fix regression released in 3.9.0b4 and 3.8.4.
bpo-37765: Add keywords to module name completion list. Rewrite Completions section of IDLE doc.
bpo-41152: The encoding of
stdin
,stdout
andstderr
in IDLE is now always UTF-8.bpo-41144: Make Open Module open a special module such as os.path.
bpo-39885: Make context menu Cut and Copy work again when right-clicking within a selection.
bpo-40723: Make test_idle pass when run after import.
C API¶
bpo-41936: Removed undocumented macros
Py_ALLOW_RECURSION
andPy_END_ALLOW_RECURSION
and therecursion_critical
field of thePyInterpreterState
structure.bpo-41692: The
PyUnicode_InternImmortal()
function is now deprecated and will be removed in Python 3.12: usePyUnicode_InternInPlace()
instead. Patch by Victor Stinner.bpo-41842: Add
PyCodec_Unregister()
function to unregister a codec search function.bpo-41834: Remove the
_Py_CheckRecursionLimit
variable: it has been replaced byceval.recursion_limit
of thePyInterpreterState
structure. Patch by Victor Stinner.bpo-41689: Types created with
PyType_FromSpec()
now make any signature in theirtp_doc
slot accessible from__text_signature__
.bpo-41524: Fix bug in PyOS_mystrnicmp and PyOS_mystricmp that incremented pointers beyond the end of a string.
bpo-41324: Add a minimal decimal capsule API. The API supports fast conversions between Decimals up to 38 digits and their triple representation as a C struct.
bpo-30155: Add
PyDateTime_DATE_GET_TZINFO()
andPyDateTime_TIME_GET_TZINFO()
macros for accessing thetzinfo
attributes ofdatetime.datetime
anddatetime.time
objects.bpo-40170: Revert
PyType_HasFeature()
change: it reads again directly thePyTypeObject.tp_flags
member when the limited C API is not used, rather than always callingPyType_GetFlags()
which hides implementation details.bpo-41123: Remove
PyUnicode_AsUnicodeCopy
.bpo-41123: Removed
PyLong_FromUnicode()
.bpo-41123: Removed
PyUnicode_GetMax()
.bpo-41123: Removed
Py_UNICODE_str*
functions manipulatingPy_UNICODE*
strings.bpo-41103:
PyObject_AsCharBuffer()
,PyObject_AsReadBuffer()
,PyObject_CheckReadBuffer()
, andPyObject_AsWriteBuffer()
are removed. Please migrate to new buffer protocol;PyObject_GetBuffer()
andPyBuffer_Release()
.bpo-36346: Raises DeprecationWarning for
PyUnicode_FromUnicode(NULL, size)
andPyUnicode_FromStringAndSize(NULL, size)
withsize > 0
.bpo-36346: Mark
Py_UNICODE_COPY
,Py_UNICODE_FILL
,PyUnicode_WSTR_LENGTH
,PyUnicode_FromUnicode
,PyUnicode_AsUnicode
, andPyUnicode_AsUnicodeAndSize
as deprecated in C. RemovePy_UNICODE_MATCH
which was deprecated and broken since Python 3.3.bpo-40989: The
PyObject_INIT()
andPyObject_INIT_VAR()
macros become aliases to, respectively,PyObject_Init()
andPyObject_InitVar()
functions.bpo-36020: On Windows,
#include "pyerrors.h"
no longer definessnprintf
andvsnprintf
macros.bpo-40943: The
PY_SSIZE_T_CLEAN
macro must now be defined to usePyArg_ParseTuple()
andPy_BuildValue()
formats which use#
:es#
,et#
,s#
,u#
,y#
,z#
,U#
andZ#
. See Parsing arguments and building values and the PEP 353.bpo-40910: Export explicitly the
Py_GetArgcArgv()
function to the C API and document the function. Previously, it was exported implicitly which no longer works since Python is built with-fvisibility=hidden
.bpo-40724: Allow defining buffer slots in type specs.
bpo-40679: Fix a
_PyEval_EvalCode()
crash if qualname argument is NULL.bpo-40839: Calling
PyDict_GetItem()
without GIL held had been allowed for historical reason. It is no longer allowed.bpo-40826:
PyOS_InterruptOccurred()
now fails with a fatal error if it is called with the GIL released.bpo-40792: The result of
PyNumber_Index()
now always has exact typeint
. Previously, the result could have been an instance of a subclass ofint
.bpo-39573: Convert
Py_REFCNT()
andPy_SIZE()
macros to static inline functions. They cannot be used as l-value anymore: usePy_SET_REFCNT()
andPy_SET_SIZE()
to set an object reference count and size. This change is backward incompatible on purpose, to prepare the C API for an opaquePyObject
structure.bpo-40703: The PyType_FromSpec*() functions no longer overwrite the type’s “__module__” attribute if it is set via “Py_tp_members” or “Py_tp_getset”.
bpo-39583: Remove superfluous “extern C” declarations from
Include/cpython/*.h
.
Python 3.9.0 beta 1¶
Release date: 2020-05-19
Security¶
Core and Builtins¶
bpo-40663: Correctly generate annotations where parentheses are omitted but required (e.g:
Type[(str, int, *other))]
.bpo-40596: Fixed
str.isidentifier()
for non-canonicalized strings containing non-BMP characters on Windows.bpo-40593: Improved syntax errors for invalid characters in source code.
bpo-40585: Fixed a bug when using
codeop.compile_command()
that was causing exceptions to be swallowed with the new parser. Patch by Pablo Galindobpo-40502: Initialize
n->n_col_offset
. (Patch by Joannah Nanjekye)bpo-40527: Fix command line argument parsing: no longer write errors multiple times into stderr.
bpo-1635741: Port
errno
to multiphase initialization (PEP 489).bpo-40523: Add pass-throughs for
hash()
andreversed()
toweakref.proxy
objects. Patch by Pablo Galindo.bpo-1635741: Port
syslog
to multiphase initialization (PEP 489).bpo-40246: Reporting a specialised error message for invalid string prefixes, which was introduced in bpo-40246, is being reverted due to backwards compatibility concerns for strings that immediately follow a reserved keyword without whitespace between them. Constructs like
bg="#d00" if clear else"#fca"
were failing to parse, which is not an acceptable breakage on such short notice.bpo-40417: Fix imp module deprecation warning when PyImport_ReloadModule is called. Patch by Robert Rouhani.
bpo-40408: Fixed support of nested type variables in GenericAlias (e.g.
list[list[T]]
).bpo-1635741: Port _stat module to multiphase initialization (PEP 489).
bpo-29587: Enable implicit exception chaining when calling
generator.throw()
.bpo-40328: Add tools for generating mappings headers for CJKCodecs.
bpo-40228: Setting frame.f_lineno is now robust w.r.t. changes in the source-to-bytecode compiler
bpo-38880: Added the ability to list interpreters associated with channel ends in the internal subinterpreters module.
bpo-37986: Improve performance of
PyLong_FromDouble()
for values that fit intolong
.
Library¶
bpo-40662: Fixed
ast.get_source_segment()
for ast nodes that have incomplete location information. Patch by Irit Katriel.bpo-40536: Added the
available_timezones()
function to thezoneinfo
module. Patch by Paul Ganssle.bpo-40645: The
hmac.HMAC
exposes internal implementation details. The attributesdigest_cons
,inner
, andouter
are deprecated and will be removed in the future.bpo-40645: The internal module
_hashlib
wraps and exposes OpenSSL’s HMAC API. The new code will be used in Python 3.10 after the internal implementation details of the pure Python HMAC module are no longer part of the public API.bpo-40637: Builtin hash modules can now be disabled or selectively enabled with
configure --with-builtin-hashlib-hashes=sha3,blake1
or--without-builtin-hashlib-hashes
.bpo-37630: The
hashlib
module can now use SHA3 hashes and SHAKE XOF from OpenSSL when available.bpo-40479: The
hashlib
now compiles with OpenSSL 3.0.0-alpha2.bpo-40257: Revert changes to
inspect.getdoc()
.bpo-40607: When cancelling a task due to timeout,
asyncio.wait_for()
will now propagate the exception if an error happens during cancellation. Patch by Roman Skurikhin.bpo-40612: Fix edge cases in SyntaxError formatting. If the offset is <= 0, no caret is printed. If the offset is > line length, the caret is printed pointing just after the last character.
bpo-40597: If text content lines are longer than policy.max_line_length, always use a content-encoding to make sure they are wrapped.
bpo-40571: Added functools.cache() as a simpler, more discoverable way to access the unbounded cache variant of lru_cache(maxsize=None).
bpo-40503: PEP 615, the
zoneinfo
module. Adds support for the IANA time zone database.bpo-40397: Removed attributes
__args__
and__parameters__
from special generic aliases liketyping.List
(not subscripted).bpo-40549: Convert posixmodule.c (“posix” or “nt” module) to the multiphase initialization (PEP 489).
bpo-31033: Add a
msg
argument toFuture.cancel()
andTask.cancel()
.bpo-40541: Added an optional counts parameter to random.sample().
bpo-40515: The
ssl
andhashlib
modules now actively check that OpenSSL is build with thread support. Python 3.7.0 made thread support mandatory and no longer works safely with a no-thread builds.bpo-31033: When a
asyncio.Task
is cancelled, the exception traceback now chains all the way back to where the task was first interrupted.bpo-40504:
functools.lru_cache()
objects can now be the targets of weakrefs.bpo-40559: Fix possible memory leak in the C implementation of
asyncio.Task
.bpo-40480:
fnmatch.fnmatch()
could take exponential time in the presence of multiple*
pattern characters. This was repaired by generating more elaborate regular expressions to avoid futile backtracking.bpo-40495:
compileall
is now able to use hardlinks to prevent duplicates in a case when.pyc
files for different optimization levels have the same content.bpo-40457: The ssl module now support OpenSSL builds without TLS 1.0 and 1.1 methods.
bpo-40355: Improve error reporting in
ast.literal_eval()
in the presence of malformedast.Dict
nodes instead of silently ignoring any non-conforming elements. Patch by Curtis Bucher.bpo-40465: Deprecated the optional random argument to random.shuffle().
bpo-40459:
platform.win32_ver()
now produces correct ptype strings instead of empty strings.bpo-39435: The first argument of
pickle.loads()
is now positional-only.bpo-39305: Update
nntplib
to mergenntplib.NNTP
andnntplib._NNTPBase
. Patch by Dong-hee Na.bpo-32494: Update
dbm.gnu
to use gdbm_count if possible when callinglen()
. Patch by Dong-hee Na.bpo-40453: Add
isolated=True
keyword-only parameter to_xxsubinterpreters.create()
. An isolated subinterpreter cannot spawn threads, spawn a child process or callos.fork()
.bpo-40286: Remove