delta/cpython-git.git, branch v3.7.10

3.7.10

2021-02-16T01:29:22+00:00

Add a warning block around the get_referrers() documentation (GH-24511) (GH-24544)

2021-02-16T00:58:05+00:00

(cherry picked from commit 813db24f7c2c536d587d1832c3c52b44fa9e242e)

Co-authored-by: Pablo Galindo

[3.7] bpo-42967: only use '&' as a query string separator (GH-24297) (GH-24531)

2021-02-15T18:34:14+00:00

bpo-42967: [security] Address a web cache-poisoning issue reported in
urllib.parse.parse_qsl().

urllib.parse will only us "&" as query string separator by default
instead of both ";" and "&" as allowed in earlier versions. An optional
argument seperator with default value "&" is added to specify the
separator.

Co-authored-by: Éric Araujo 
Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
Co-authored-by: Adam Goldschmidt 
(cherry picked from commit fcbe0cb04d35189401c0c880ebfb4311e952d776)

[3.7] closes bpo-42938: Replace snprintf with Python unicode formatting in ctypes param reprs. (GH-24249)

2021-01-18T21:24:02+00:00

(cherry picked from commit 916610ef90a0d0761f08747f7b0905541f0977c7)

Co-authored-by: Benjamin Peterson

Bring Python into the new year. (GH-24036) (GH-24052)

2021-01-01T18:40:58+00:00

(cherry picked from commit de6f20a6de48d63066b2cf5b317f50629f01d74a)

Co-authored-by: Dong-hee Na

bpo-42794: Update test_nntplib to use offical group name for testing (GH-24037) (GH-24041)

2021-01-01T18:37:35+00:00

(cherry picked from commit ec3165320e81ac87edcb85c86c452528ddbaec1c)

Co-authored-by: Dong-hee Na

bpo-17140: Document multiprocessing's ThreadPool (GH-23812) (GH-23836)

2020-12-18T18:38:49+00:00

Up until now, the `multiprocessing.pool.ThreadPool` class has gone
undocumented, despite being a public class in multiprocessing that is
included in `multiprocessing.pool.__all__`.
(cherry picked from commit 84ebcf271a2cc8bfd1762acb279502b8b6ef236e)

Co-authored-by: Matt Wozniski

[3.7] Bumps [actions/cache](https://github.com/actions/cache) from v1 to v2.1.3. (GH-23596)

2020-12-01T15:05:57+00:00

* build(deps): bump actions/cache from v2.1.2 to v2.1.3 (23582)

Bumps [actions/cache](https://github.com/actions/cache) from v2.1.2 to v2.1.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.2...0781355a23dac32fd3bac414512f4b903437991a)

Signed-off-by: dependabot[bot] 

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a43fea88577c460eed7cc92a37b5fce787d6aab1)

* [3.7] build(deps): bump actions/cache from v2.1.2 to v2.1.3 (23582)

Bumps [actions/cache](https://github.com/actions/cache) from v2.1.2 to v2.1.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.2...0781355a23dac32fd3bac414512f4b903437991a)

Signed-off-by: dependabot[bot] 

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>.
(cherry picked from commit a43fea88577c460eed7cc92a37b5fce787d6aab1)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

bpo-40791: Make compare_digest more constant-time. (GH-23438)

2020-11-22T17:33:09+00:00

The existing volatile `left`/`right` pointers guarantee that the reads will all occur, but does not guarantee that they will be _used_. So a compiler can still short-circuit the loop, saving e.g. the overhead of doing the xors and especially the overhead of the data dependency between `result` and the reads. That would change performance depending on where the first unequal byte occurs. This change removes that optimization.

(This is change GH-1 from https://bugs.python.org/issue40791 .)
(cherry picked from commit 31729366e2bc09632e78f3896dbce0ae64914f28)

Co-authored-by: Devin Jeanpierre

[3.7] bpo-42336: Improve PCbuild batch files (GH-23325) (GH-23373)

2020-11-18T18:01:52+00:00

* bpo-42336: Improve PCbuild batch files (GH-23325)

* Remove ARM platforms