Mailman 3 May 2012 - Python-announce-list

Roundup 1.4.20 released
by Ralf Schlatterbeck 15 May '12

15 May '12

I'm proud to release version 1.4.20 of Roundup which can be seen as a security release. We've fixed several security issues, in particular some XSS issues. We've also dropped support for python 2.4 with this release. This release also introduces some minor features and, as usual, fixes some bugs: Features: - Experimental support for the new Chameleon templating engine. We now have two configurable templating engines, the old Zope TAL templates (called zopetal in the config) and the new Chameleon (called chameleon in the config). A new config-option "template_engine" under [main] can take these config-options, the default is zopetal. Thanks to Cheer Xiao for the idea of making this configurable *and* for the actual implementation! (Ralf) WARNING: Chameleon support is highly experimental and *not* recommended for production use. It has known performance issues and i18n is not yet functioning. It's still under active development. Only use this feature if you want to experiment with Chameleon and/or help with Roundup developement. If you found a bug in Chameleon support, please report after testing against latest Roundup source from the Mercurial repository. - issue2550678: Allow pagesize=-1 which returns all results. Suggested and implemented by John Kristensen. Tested by Satchidanand Haridas. (Bernhard) - Allow to turn off translation of generated html options in menu method of LinkHTMLProperty and MultilinkHTMLProperty -- default is translation as it used to be (Ralf) - Sending of OpenPGP encrypted mail to all users or selected users (via roles) is now working. (Ralf) - Add config-option "nosy" to messages_to_author setting in [nosy] section of config: This will send a message to the author only in the case where the author is on the nosy-list (either added earlier or via the add_author setting). Current config-options for this setting will send / not send to author without considering the nosy list. (Ralf) Fixed: - issue2550730: FAQ has broken link to Zope book. Reported and fixed by John Rouillard.(Bernhard) - issue2550728: remove buggy parentheses in TAL/DummyEngine.py. Reported and fixed by Ralf Hemmecke. (Bernhard) - issue2550715: IndexError when requesting non-existing file via http. Reported and fixed by Cedric Krier. (Bernhard) - issue2550712: exportcsvaction errors poorly when given invalid columns. Reported by Will Kahn-Greene, fixed by Cedric Krier. (Bernhard) - issue2550695: 'No sort or group' settings not retained when editing queries. Reported and fixed by John Kristensen. Tested by Satchidanand Haridas. (Bernhard) - Fix matching of incoming email addresses to the alternate_addresses field of a user -- this would match substrings, e.g. if the user has discuss-support(a)example.com as an alternate email and an incoming mail is addressed to support(a)example.com this would (wrongly) match. (Ralf) - issue2550729: Fix password history display for anydbm backend, thanks to Ralf Hemmecke for reporting. (Ralf) - OpenPGP support is again working (pyme API has changed significantly) and we now have a regression test. We now take care that bounce-messages for incoming encrypted mails or mails where the policy dictates that outgoing traffic should be encrypted is actually OpenPGP encrypted. (Ralf) - Ignore confirm set() fields by themselves in the absence of non-"confirm" values; otherwise a bare confirm field can be used to change the a password. Reported by Cam Blackwood. (Ralf) - Updated version of simplified Chinese message file by Cheer Xiao: Corrected some mistakes, added a few more items and did some formating. (Ralf) - Fix xmlrpc URL parsing so that passwords may contain a ':' character (Ralf) - Be more tolerant when parsing RFC2047 encoded mail headers. Use backported version of my proposed changes to email.header.decode_header in http://bugs.python.org/issue1079 (Ralf) - issue2550684 Fix XSS vulnerability when username contains HTML code, thanks to Thomas Arendsen Hein for reporting and patch. (Ralf) - issue2550711 Fix XSS vulnerability in @action parameter, thanks to "om" for reporting. (Ralf) - issue2550535 In some cases even when keep_quoted_text=yes is configured we would strip quoted sections. This hit the python bug-tracker especially for python interpreter examples with leading '>>>' strings. The fix is slightly different compared to the proposal as this broke keep_quoted_text=no in certain cases. We also fix a bug where keep_quoted_text=no would drop the last line of a non-quoted section if there wasn't an empty line between the next quotes. (Ralf) - issue2431638 wrong registration link in bounce mail for non-registered users reported *years* ago by anonymous (Ralf) - Fix doc/upgrading.txt which produces errors with latest docutils about wrong block structure. Fix .gitignore in doc directory. Thanks to Cheer Xiao for the patches. (Ralf) - Fix wrong execute permissions on some files, thanks to Cheer Xiao for the patch. (Ralf) - Fix override of TemplatingUtils in instance.py, thanks to Cheer Xiao for the patch. (Ralf) - Fix another XSS with the "otk" parameter, thanks to Jesse Ruderman for reporting. (Ralf) - Mark cookies HttpOnly and -- if https is used -- secure. Fixes issue2550689, but is untested if this really works in browsers. Thanks to Joseph Myers for reporting. (Ralf) - Fix another XSS with the ok- and error message, see issue2550724. We solve this differently from the proposals in the bug-report by not allowing *any* html-tags in ok/error messages anymore. Thanks to David Benjamin for the bug-report and to Ezio Melotti for several proposed fixes. (Ralf) If you're upgrading from an older version of Roundup you *must* follow the "Software Upgrade" guidelines given in the maintenance documentation. Roundup requires python 2.5 or later (but not 3+) for correct operation. To give Roundup a try, just download (see below), unpack and run:: python demo.py Release info and download page: http://pypi.python.org/pypi/roundup Source and documentation is available at the website: http://roundup-tracker.org/ Mailing lists - the place to ask questions: http://sourceforge.net/mail/?group_id=31577 About Roundup ============= Roundup is a simple-to-use and -install issue-tracking system with command-line, web and e-mail interfaces. It is based on the winning design from Ka-Ping Yee in the Software Carpentry "Track" design competition. Note: Ping is not responsible for this project. The contact for this project is richard(a)users.sourceforge.net. Roundup manages a number of issues (with flexible properties such as "description", "priority", and so on) and provides the ability to: (a) submit new issues, (b) find and edit existing issues, and (c) discuss issues with other participants. The system will facilitate communication among the participants by managing discussions and notifying interested parties when issues are edited. One of the major design goals for Roundup that it be simple to get going. Roundup is therefore usable "out of the box" with any python 2.5+ (but not 3+) installation. It doesn't even need to be "installed" to be operational, though an install script is provided. It comes with two issue tracker templates (a classic bug/feature tracker and a minimal skeleton) and four database back-ends (anydbm, sqlite, mysql and postgresql). -- Dr. Ralf Schlatterbeck Tel: +43/2243/26465-16 Open Source Consulting www: http://www.runtux.com Reichergasse 131, A-3411 Weidling email: office(a)runtux.com osAlliance member email: rsc(a)osalliance.com

1 0

Advanced Python Courses in Leipzig and Florence
by Mike Müller 14 May '12

14 May '12

Advanced Python Courses in Leipzig and Florence =============================================== We offer our Advanced Python course [1] next month in Leipzig. In addition, there will a one-day version on Saturday, July 7 in Florence [2]. This is just one day after the EuroPython talks. The course will take place right at the conference venue. Advanced Python --------------- You would like to learn more about metaclasses, decorators, descriptors, context managers, comprehensions, patterns and good Python programming practices? This courses teaches all this with plenty of hands-on examples that makes these, admittedly somewhat involved topics, accessibly to everybody with intermediate Python experience. Date: 08.06.-10.06.2012 Location: Leipzig, Germany Trainer: Mike Müller Course Language: English Link: http://www.python-academy.com/courses/specialtopics/python_course_advanced.… Questions? ---------- If you have any questions about the courses, please feel free to ask me. Cheers, Mike [1] http://www.python-academy.com/courses/specialtopics/python_course_advanced.… [2] https://ep2012.europython.eu/conference/talks/python-academy-training

1 0

Karlsruhe Python User Group, May 18th 2012, 7pm
by Jürgen A. Erhard 14 May '12

14 May '12

The Karlsruhe Python User Group (KaPy) meets again. Friday, 2012-05-18 (May 18th) at 19:00 (7pm) in the rooms of Entropia eV (the local affiliate of the CCC). See http://entropia.de/wiki/Anfahrt on how to get there. For your calendars: meetings are held monthly, on the 3rd Friday. There's also a mailing list at https://lists.bl0rg.net/cgi-bin/mailman/listinfo/kapy.

1 0

Introducing Plumbum: Shell Combinators
by Tomer Filiba 11 May '12

11 May '12

Write shell-like scripts in pure python (and never resort to writing bash scripts again!) Plumbum provides local and remote process execution, path abstraction, lots of shell-like utilities and a command-line interface (CLI) application toolkit that beats optparse/argparse to the ground. Give it a try. http://plumbum.readthedocs.org/ >>> from plumbum.cmd import ls, grep, wc, cat, head >>> ls() u'build.py\ndist\ndocs\nLICENSE\nplumbum\nREADME.rst\nsetup.py\ntests\ntodo.txt\n' >>> (ls["-a"] | grep["-v", "\\.py"] | wc["-l"]) u'13\n' >>> ((cat["setup.py"] | head["-n", 4]) > "output.txt")() u'' >>> cat("output.txt") u'#!/usr/bin/env python\nimport os\n\ntry:\n'

1 0

[ANN Python Tools for Visual Studio 1.5 Alpha
by Dino Viehland 10 May '12

10 May '12

We're pleased to announce the release of Python Tools for Visual Studio 1.5 Alpha http://pytools.codeplex.com/releases/view/82011 . Python Tools for Visual Studio (PTVS) is an open-source plug-in for Visual Studio which supports programming with the Python language. PTVS supports a broad range of features including: * Supports Cpython, IronPython, Jython and Pypy * Python editor with advanced member, signature intellisense and refactoring * Code navigation: "Find all refs", goto definition, and object browser * Local and remote debugging * Profiling with multiple views * Integrated REPL window with inline matplotlib graphics * Support for HPC clusters and MPI, including debugging & Profiling * Interactive parallel computing via integrated IPython REPL The primary new feature for this release is Django! The http://www.djangoproject.com is a popular Python webframework/CMS which is used by many reputable companies and high traffic websites. In this Alpha release the following are supported: * Create a New Project / Django Application * Add Django HTML Template * Intellisense for Django templates * Runtime debugging of Django templates * Use IIS with a pure Python FastCGI interface There have also been a couple of new intellisense features contributed from the community. This includes completions after "def " based upon methods defined in base classes and completions for exception types after "raise" statements" (thanks Zooba!). Full list of issues addressed in this release: * 673 Setting Interpreter Programmatically * 336 Pixelated Icons on Windows 7 * 665 Relative interpreter path * 664 Display each available doc strings for one element * 657 Code Completion / IntelliSense Python 3.2 (re.compile) * 662 IronPython interactive running incredibly slow * 654 Built-in functions have parameter info default value issues * 226 Display list of exceptions after typing raise or except * 637 Provide completions after "raise " for known exception types * 580 Provide completions as "def" We'd like to thank the following people who took the time to report the issues and feedback for this release: Anna0311, golubdr, hjyh, tramsay, zooba.

1 0

ANN: Intro+Intermediate Python, San Francisco, Aug 1-3
by wesley chun 10 May '12

10 May '12

Greetings! I'll be doing another hardcore Python course this summer in the San Francisco area. If you're somewhat new to Python or have tinkered but want to fill-in the holes, this course is for you. It's somewhat true you can learn Python online, watching videos, or reading books, but it still takes time and experience to master... I help accelerate this process. The course is based on my bestselling "Core Python" books and is made up of 3 full days complete with lectures and three hands-on coding labs per day. Please pass on this message to your colleagues who also need to learn Python. It's also a great excuse to coming to beautiful Northern California for a summer vacation! More details at http://goo.gl/uW4oF as well as the links in my .signature below. Since I hate spam, I'll only send out one more reminder as the date gets closer... probably around OSCON's timeframe. Hope to meet some of you soon! --Wesley Chun - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - "A computer never does what you want... only what you tell it." wesley chun : wescpy at gmail : @wescpy/+wescpy Python training & consulting : http://CyberwebConsulting.com "Core Python" books : http://CorePython.com Python blog: http://wescpy.blogspot.com

1 0

[ANN] Passlib 1.6
by Eli Collins 09 May '12

09 May '12

I'm pleased to announce the release of Passlib 1.6. Passlib is a comprehensive password hashing library for Python, supporting over 30 different hash schemes and an extensive framework for managing existing hashes. This release adds more password hashing algorithms, additional security precautions, speed improvements for selected hashes, and a general cleanup of the internal code (see the release notes for more details). Release Notes: http://packages.python.org/passlib/history.html#whats-new Homepage: http://passlib.googlecode.com Docs: http://packages.python.org/passlib PyPI: http://pypi.python.org/pypi/passlib Cheers, Eli Collins

1 0

[ANN] Shed Skin 0.9.2
by Mark Dufour 09 May '12

09 May '12

Hi all, I have just released version 0.9.2 of Shed Skin, a restricted-Python (2.4-2.6) to C++ compiler. This is the second maintenance release since 0.9, so no new major features were added. The biggest improvement is probably some optimizations for the array module. Other than this, the changes are mostly unrelated minor optimizations and bug fixes. Please see the release notes for more detail: http://code.google.com/p/shedskin/wiki/releasenotes Three nice new examples were also added for this release, bringing the number of examples to 67, with a total linecount of about 17,000 lines (sloccount): a "stereo vision" program, and two Rubik's cube solvers. http://code.google.com/p/shedskin/ Thanks, Mark Dufour. -- http://www.youtube.com/watch?v=E6LsfnBmdnk

1 0

RELEASED: Pymacs 0.25
by François Pinard 07 May '12

07 May '12

Hello to everybody, and Emacs users in the Python community. Pymacs 0.25 is now available. There has been a while, so I advise current Pymacs users to switch with caution. - Python 3 is now supported. This required new installation mechanics, and a Python pre-processor written for the circumstance (named *pppp*). - Pymacs now installs a single Python file instead of a Python module. Nice thanks to Pymacs contributors. It surely has been fun working with you all! -------------------------------------- Pymacs is a powerful tool which, once started from Emacs, allows both-way communication between Emacs Lisp and Python. Pymacs aims Python as an extension language for Emacs rather than the other way around, and this asymmetry is reflected in some design choices. Within Emacs Lisp code, one may load and use Python modules. Python functions may themselves use Emacs services, and handle Emacs Lisp objects kept in Emacs Lisp space. For more information, see http://pymacs.progiciels-bpi.ca/ . You may fetch the distribution as one of: - https://github.com/pinard/Pymacs/tarball/v0.25 - https://github.com/pinard/Pymacs/zipball/v0.25 -- François Pinard http://pinard.progiciels-bpi.ca

1 0

PyCon DE 2012 - Call for Tutorials
by Mike Müller 07 May '12

07 May '12

PyCon DE 2012 - Call for Tutorials ================================== The second PyCon DE will be held October 29 - November 3, 2012 in Leipzig, Germany. We ask you to submit your proposal for a tutorial [1]. Details of the call are below in German. The conference language will be German. However, tutorials in English by non-native German speakers will be accepted. PyCon DE 2012 - Aufruf zu Tutorials =================================== Wir rufen alle erfahrenen Python-Nutzer auf, Bewerbungen für Tutorials für die PyCon DE 2012 einzureichen. Die Tutorials finden am 29. Oktober 2012 im Rahmen der PyCon DE (http://de.pycon.org) statt. Ein Tutorial soll drei Stunden dauern. Die Themen der Tutorials können Einführung in Python, fortgeschrittene Themen, Web-Frameworks oder andere große Python-Bibliotheken sowie typische Softwareentwicklungsarbeiten wie Testen oder Versionskontrolle mit Python sein. Bitte reichen Sie Ihren Vorschlag bis zum 31. Mai 2012 über Konferenz-Website [1] ein. Der Vorschlag muss Folgendes enthalten: * Titel * Kurzbeschreibung des Inhaltes * Zielgruppe (Anfänger, Fortgeschrittene, Experten) * stichpunktartige Gliederung des Tutorials mit Zeitangaben zu den einzelnen Punkten (die Summe muss 180 Minuten betragen) Jedes Tutorial umfasst zwei Blöcke mit je 90 Minuten mit einer halbstündigen Pause. Eine Person kann Vorschläge für zwei Tutorials machen. Wenn sich das Thema nicht sinnvoll in drei Stunden behandeln lässt, können auch zwei aufeinander aufbauende Tutorials vorgeschlagen werden. Vor jedem Tutorial müssen die Teilnehmer die Unterlagen als Datei oder ausgedruckt erhalten. Tutorial-Trainer erhalten freien Eintritt zur Konferenz. [1] http://2012.de.pycon.org/proposals/submit/tutorial/

1 0