Commits

Commit history

1. Commits on Nov 10, 2026

   • Python 3.16.0a2

     savannahostrowski

     committed
     d1ff5e5View commit details

     Copy full SHA for d1ff5e5

     View code at this pointBrowse repository at this point

   • gh-160369: Reject buffered plaintext after IMAP STARTTLS (#160370)

     Show description for 2f0e294
     

     3 peopleauthored
     2f0e294View commit details

     Copy full SHA for 2f0e294

     View code at this pointBrowse repository at this point
2. Commits on Nov 9, 2026

   • gh-161705: Prevent shadowing stdlib in gzip/tarfile/zipfile CLI (#161706)

     Show description for e891a91
     

     4 peopleauthored
     e891a91View commit details

     Copy full SHA for e891a91

     View code at this pointBrowse repository at this point
3. Commits on Nov 7, 2026

   • gh-161569: Check cookie policy before deleting expired cookies in `http.cookiejar` (#161570)

     Show description for 8eb3d2c
     

     Eclips4

     and

     vstinner

     authored
     8eb3d2cView commit details

     Copy full SHA for 8eb3d2c

     View code at this pointBrowse repository at this point

   • gh-161503: Check hostname in `ssl.get_server_certificate` with custom `ca_certs` (#161507)

     brettcs

     authored
     8dde46eView commit details

     Copy full SHA for 8dde46e

     View code at this pointBrowse repository at this point
4. Commits on Nov 5, 2026

   • gh-158928: Fix overflow in bytearray.__init__ from an iterator (#158947)

     Show description for 25181ce
     

     cmaloney

     and

     claude

     authored
     25181ceView commit details

     Copy full SHA for 25181ce

     View code at this pointBrowse repository at this point
5. Commits on Nov 4, 2026

   • gh-161323: Refuse drive-relative paths in tarfile extraction filters (GH-161334)

     Show description for e4c751b
     

     gpshead

     and

     encukou

     authored
     e4c751bView commit details

     Copy full SHA for e4c751b

     View code at this pointBrowse repository at this point
6. Commits on Nov 2, 2026

   • gh-161192: Update bundled Expat to 2.10.0 (#161202)

     Show description for a7017f2
     

     StanFromIreland

     and

     gpshead

     authored
     a7017f2View commit details

     Copy full SHA for a7017f2

     View code at this pointBrowse repository at this point
7. Commits on Oct 31, 2026

   • gh-160506: Fix ntpath.realpath() for broken links via directory links (GH-160507)

     Show description for 65665a4
     gpshead

     authored
     65665a4View commit details

     Copy full SHA for 65665a4

     View code at this pointBrowse repository at this point
8. Commits on Oct 29, 2026

   • gh-160898: Reject null bytes in `socket.getaddrinfo()` host and port (#160899)

     Show description for 131a3a6
     

     sethmlarson

     and

     StanFromIreland

     authored
     131a3a6View commit details

     Copy full SHA for 131a3a6

     View code at this pointBrowse repository at this point

   • gh-160499: Pause asyncio TLS reads when SSL replies pile up (#160500)

     gpshead

     authored
     8a5e24aView commit details

     Copy full SHA for 8a5e24a

     View code at this pointBrowse repository at this point
9. Commits on Oct 27, 2026

   • gh-160279: Keep the venv directory off the import path when running pip (#160282)

     jelle-openai

     authored
     d9825d5View commit details

     Copy full SHA for d9825d5

     View code at this pointBrowse repository at this point
10. Commits on Oct 25, 2026

    • gh-160300: Reject cookies with a negative version in http.cookiejar (GH-160301)

      Show description for d59d968
      gpshead

      authored
      d59d968View commit details

      Copy full SHA for d59d968

      View code at this pointBrowse repository at this point
11. Commits on Oct 24, 2026

    • gh-160040: Distrust compromised eMudhra intermediate CA keys (CVE-2026-115557) (GH-160042)

      Show description for 7dd8b47
      

      tiran

      and

      claude

      authored
      7dd8b47View commit details

      Copy full SHA for 7dd8b47

      View code at this pointBrowse repository at this point
12. Commits on Oct 23, 2026

    • gh-160420: Reject drive letters in ZoneInfo key components on Windows (GH-160421)

      Show description for 0615b5c
      gpshead

      authored
      0615b5cView commit details

      Copy full SHA for 0615b5c

      View code at this pointBrowse repository at this point
13. Commits on Oct 22, 2026

    • gh-160097: Reject links replacing the destination in `tarfile.tar_filter` (#160098)

      StanFromIreland

      authored
      e7e0b35View commit details

      Copy full SHA for e7e0b35

      View code at this pointBrowse repository at this point
14. Commits on Oct 20, 2026

    • Regenerate `blurb` entry categories (#159566)

      StanFromIreland

      authored
      30a55f3View commit details

      Copy full SHA for 30a55f3

      View code at this pointBrowse repository at this point

    • gh-159894: Upgrade bundled pip to 26.2.2 (#159910)

      notatallshaw

      authored
      39d7c0fView commit details

      Copy full SHA for 39d7c0f

      View code at this pointBrowse repository at this point

    • gh-158876: Update bundled Expat to 2.9.0 (GH-158881)

      Show description for 0071fb5
      

      StanFromIreland

      and

      encukou

      authored
      0071fb5View commit details

      Copy full SHA for 0071fb5

      View code at this pointBrowse repository at this point
15. Commits on Oct 15, 2026

    • gh-159428: Don't read mimetypes.knownfiles by default on Windows (GH-159445)

      Show description for 04a29bf
      cjames23

      authored
      04a29bfView commit details

      Copy full SHA for 04a29bf

      View code at this pointBrowse repository at this point
16. Commits on Oct 13, 2026

    • Python 3.16.0a1

      savannahostrowski

      committed
      22d79d9View commit details

      Copy full SHA for 22d79d9

      View code at this pointBrowse repository at this point
17. Commits on Sep 30, 2026

    • gh-156293: Use-after-free for server-side SSLContext with sni_callback (#158504)

      Show description for 34a53dc
      

      sethmlarson

      and

      gpshead

      authored
      34a53dcView commit details

      Copy full SHA for 34a53dc

      View code at this pointBrowse repository at this point

    • gh-156793: Validate SSLContext.wrap_bio() parameters like wrap_socket() (#158503)

      Show description for 1697ea3
      

      3 peopleauthored
      1697ea3View commit details

      Copy full SHA for 1697ea3

      View code at this pointBrowse repository at this point

    • gh-158446: Reject float format precision near INT_MAX (GH-158474)

      Show description for b7b4f3e
      gpshead

      authored
      b7b4f3eView commit details

      Copy full SHA for b7b4f3e

      View code at this pointBrowse repository at this point
18. Commits on Sep 29, 2026

    • gh-158010: Update macOS installer to use OpenSSL 3.5.9 (#158415)

      zware

      authored
      540274cView commit details

      Copy full SHA for 540274c

      View code at this pointBrowse repository at this point

    • gh-158010: Update Android and iOS build scripts to use OpenSSL 3.5.9 (GH-158417)

      zware

      authored
      596d923View commit details

      Copy full SHA for 596d923

      View code at this pointBrowse repository at this point

    • gh-157579: Fix race condition in the cleanup of `tempfile.TemporaryDirectory` (GH-157580)

      Show description for 5c20517
      

      StanFromIreland

      and

      encukou

      authored
      5c20517View commit details

      Copy full SHA for 5c20517

      View code at this pointBrowse repository at this point
19. Commits on Sep 23, 2026

    • gh-157953: Update bundled Expat to 2.8.5 (#157957)

      StanFromIreland

      authored
      5f1f218View commit details

      Copy full SHA for 5f1f218

      View code at this pointBrowse repository at this point
20. Commits on Sep 11, 2026

    • gh-157265: tarfile: Honor None result of filter for link fallbacks (GH-157266)

      Show description for fb2f0bb
      

      encukou

      and

      StanFromIreland

      authored
      fb2f0bbView commit details

      Copy full SHA for fb2f0bb

      View code at this pointBrowse repository at this point
21. Commits on Aug 31, 2026

    • gh-156723: Update bundled libexpat to version 2.8.4 (#156724)

      StanFromIreland

      authored
      287b7cfView commit details

      Copy full SHA for 287b7cf

      View code at this pointBrowse repository at this point
22. Commits on Aug 24, 2026

    • gh-156002: Bound zipfile decompression for bzip2/LZMA/Zstandard (GH-156003)

      Show description for f897dbf
      

      encukou

      and

      tonghuaroot

      authored
      f897dbfView commit details

      Copy full SHA for f897dbf

      View code at this pointBrowse repository at this point
23. Commits on Aug 19, 2026

    • gh-155999: `tarfile`: handle a member that leaves the destination but comes back (#156000)

      StanFromIreland

      authored
      9768834View commit details

      Copy full SHA for 9768834

      View code at this pointBrowse repository at this point
24. Commits on Aug 18, 2026

    • gh-155292: Don't consider Unicode codepoint attributes outside RFC 3454 (GH-155293)

      Show description for 7e109d0
      

      3 peopleauthored
      7e109d0View commit details

      Copy full SHA for 7e109d0

      View code at this pointBrowse repository at this point
25. Commits on Aug 17, 2026

    • gh-155694: Scope HTTPPasswordMgr credentials by URL scheme (#155696)

      Show description for a7bb524
      lkk7

      authored
      a7bb524View commit details

      Copy full SHA for a7bb524

      View code at this pointBrowse repository at this point
26. Commits on Aug 12, 2026

    • gh-155558: Update bundled Expat to 2.8.3 (GH-155560)

      StanFromIreland

      authored
      3d6a505View commit details

      Copy full SHA for 3d6a505

      View code at this pointBrowse repository at this point