Mailman 3 December 2022 - Python-announce-list

NumPy 1.24.0 released
by Charles R Harris Dec. 18, 2022

Dec. 18, 2022

Hi All, On behalf of the NumPy team, I'm pleased to announce the release of NumPy 1.24.0. The NumPy 1.24.0 release continues the ongoing work to improve the handling and promotion of dtypes, increase execution speed, and clarify the documentation. There are also a large number of new and expired deprecations due to changes in promotion and cleanups. This might be called a deprecation release. Highlights are - Many new deprecations. - Many expired deprecations. - New f2py features and fixes. - New "dtype" and "casting" keywords for stacking functions. The Python versions supported in this release are 3.8-3.11 Note that 32 bit wheels are only provided for Windows, all other wheels are 64 bits on account of Ubuntu, Fedora, and other Linux distributions dropping 32 bit support. Wheels can be downloaded from PyPI <https://pypi.org/project/numpy/1.24.0/>; source archives, release notes, and wheel hashes are available on Github <https://github.com/numpy/numpy/releases/tag/v1.24.0>. *Contributors* A total of 177 people contributed to this release. People with a "+" by their names contributed a patch for the first time. - @DWesl - @amagicmuffin + - @dg3192 + - @h-vetinari - @juztamau5 + - @swagatip + - Aaron Meurer - Aayush Agrawal + - Adam Knapp + - Adarsh Singh + - Al-Baraa El-Hag - Alban Desmaison + - Ales Crocaro + - Alex Low + - Alexander Grund + - Alexander Kanavin + - Andras Deak - Andrew Nelson - Angéllica Araujo + - Anselm Hahn + - Ari Cooper Davis + - Axel Huebl + - Bas van Beek - Bhavuk Kalra - Bram Ton + - Brent Tan + - Brigitta Sipőcz - Callum O'Riley + - Charles Harris - Chiara Marmo - Christoph Reiter - Damien Caliste - Dan Schult + - Daniel da Silva - DanielHabenicht + - Dave Goel + - David Gilbertson + - Developer-Ecosystem-Engineering - Digya Acharya + - Dimitri Papadopoulos Orfanos - Eric-Shang + - Evgeni Burovski - Ewout ter Hoeven - Felix Hirwa Nshuti + - Frazer McLean + - Ganesh Kathiresan - Gavin Zhang + - Gaëtan de Menten - Greg Lucas - Greg Sadetsky + - Gregory P. Smith [Google LLC] + - Hameer Abbasi - Hannah Aizenman + - Hood Chatham - I-Shen Leong - Iantra Solari + - Ikko Ashimine + - Inessa Pawson - Jake Bowhay + - Jake Close + - Jarrod Millman - Jason Thai - JessePires + - Jessé Pires + - Jhonatan Cunha + - Jingxuan He + - Johnathon Cusick + - Jon Morris - Jordy Williams + - Josh Wilson - João Fontes Gonçalves + - Juan Luis Cano Rodríguez - Jyn Spring 琴春 + - KIU Shueng Chuan - Karl Otness + - Kevin Sheppard - Kinshuk Dua + - Leo Fang - Leona Taric + - Lev Maximov + - Lillian Zha + - Loïc Estève - M. Eric Irrgang + - Mariusz Felisiak - Mark Harfouche - Martin Zacho + - Matheus Santana Patriarca + - Matt Williams + - Matteo Raso + - Matthew Barber - Matthew Brett - Matthew Sterrett + - Matthias Bussonnier - Matthias Koeppe + - Matti Picus - Meekail Zain + - Melissa Weber Mendonça - Michael Osthege + - Michael Siebert + - Mike Toews - Miki Watanabe + - Miles Cranmer + - Monika Kubek + - Muhammad Jarir Kanji + - Mukulika Pahari - Namami Shanker - Nathan Goldbaum + - Nathan Rooy + - Navpreet Singh + - Noritada Kobayashi + - Oleksiy Kononenko + - Omar Ali + - Pal Barta + - Pamphile Roy - Patrick Hoefler + - Pearu Peterson - Pedro Nacht + - Petar Mlinarić + - Peter Hawkins - Pey Lian Lim - Pieter Eendebak - Pradipta Ghosh - Pranab Das + - Precision Wordcraft LLC + - PrecisionWordcraft + - Rafael CF Sousa + - Rafael Cardoso Fernandes Sousa - Rafael Sousa + - Raghuveer Devulapalli - Ralf Gommers - Rin Cat (鈴猫) + - Robert Kern - Rohit Davas + - Rohit Goswami - Ross Barnowski - Roy Smart + - Ruth Comer + - Sabiha Tahsin Soha + - Sachin Krishnan T V + - Sanjana M Moodbagil + - Sanya Sinha + - Sarah Coffland + - Saransh Chopra + - Satish Kumar Mishra + - Satish Mishra + - Sayed Adel - Schrijvers Luc + - Sebastian Berg - Serge Guelton - Seva Lotoshnikov + - Shashank Gupta + - Shoban Chiddarth + - Shreya Singh + - Shreyas Joshi + - Sicheng Zeng + - Simran Makandar + - Shuangchi He + - Srimukh Sripada + - Stefan van der Walt - Stefanie Molin + - Stuart Archibald - Tania Allard - Thomas A Caswell - Thomas Kastl + - Thomas Mansencal + - Tony Newton / Teng Liu + - Toshiki Kataoka - Tyler Reddy - Vardhaman Kalloli + - Warren Weckesser - Will Ayd + - William Stein + - XinRu Lin + - Yin Li + - Yunika Bajracharya + - Zachary Blackwood + - 渡邉美希 + Cheers, Charles Harris

1 0

ANN: pdfdecrypt 1.0
by Hartmut Goebel Dec. 10, 2022

Dec. 10, 2022

I'm pleased to announce pdfdecrypt 1.0, a command line tool to remove passwords from PDF documents. It will read the encrypted document, ask for the password and write the decrypted document without touching any internal structure. :Licence: GNU Affero General Public License v3 or later (AGPLv3+) :Homepage: https://pdfdecrypt.readthedocs.io/ :Repository: https://gitlab.com/pdftools/pdfdecrypt/ Download --------------- :Quick Installation: pip install -U pdfdecrypt Relevant Changes since last release --------------------------------------- * Initial release -- Regards Hartmut Goebel | Hartmut Goebel | h.goebel(a)crazy-compilers.com | | www.crazy-compilers.com | compilers which you thought are impossible |

1 0

[RELEASE] Python 3.11.1, 3.10.9, 3.9.16, 3.8.16, 3.7.16, and 3.12.0 alpha 3 are now available
by Łukasz Langa Dec. 6, 2022

Dec. 6, 2022

Greetings! We bring you a slew of releases this fine Saint Nicholas / Sinterklaas day. Six simultaneous releases has got to be some record. There’s one more record we broke this time, you’ll see below. In any case, updating is recommended due to security content: 3.7 - 3.12: gh-98739 <https://github.com/python/cpython/issues/98739>: Updated bundled libexpat to 2.5.0 to fix CVE-2022-43680 <https://nvd.nist.gov/vuln/detail/CVE-2022-43680> (heap use-after-free). 3.7 - 3.12: gh-98433 <https://github.com/python/cpython/issues/98433>: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm to fix CVE-2022-45061 <https://nvd.nist.gov/vuln/detail/CVE-2022-45061>. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name. 3.7 - 3.12: gh-100001 <https://github.com/python/cpython/issues/100001>: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log. 3.8 - 3.12: gh-87604 <https://github.com/python/cpython/issues/87604>: Avoid publishing list of active per-interpreter audit hooks via the gc module. 3.9 - 3.10 (already released in 3.11+ before): gh-97514 <https://github.com/python/cpython/issues/97514>: On Linux the multiprocessing module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected. This prevents Linux CVE-2022-42919 <https://nvd.nist.gov/vuln/detail/CVE-2022-42919> (potential privilege escalation) as abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in Python 3.8 and earlier. 3.7 - 3.10: gh-98517 <https://github.com/python/cpython/issues/98517>: Port XKCP’s fix for the buffer overflows in SHA-3 to fix CVE-2022-37454 <https://nvd.nist.gov/vuln/detail/CVE-2022-37454>. 3.7 - 3.9 (already released in 3.10+ before): gh-68966 <https://github.com/python/cpython/issues/68966>: The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands to address CVE-2015-20107 <https://nvd.nist.gov/vuln/detail/CVE-2015-20107>. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed). <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.12.0 alpha 3 Get it here, read the change log, sing a GPT-3-generated Sinterklaas song: https://www.python.org/downloads/release/python-3120a3/ <https://www.python.org/downloads/release/python-3120a3/> 216 new commits since 3.12.0 alpha 2 last month. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.11.1 Get it here, see the change log, read the recipe for quark soup: https://www.python.org/downloads/release/python-3111/ <https://www.python.org/downloads/release/python-3111/> A whopping 495 new commits since 3.11.0. This is a massive increase of changes comparing to 3.10 at the same stage in the release cycle: there were “only” 339 commits between 3.10.0 and 3.10.1. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.10.9 Get it here, read the change log, see circular patterns: https://www.python.org/downloads/release/python-3109/ <https://www.python.org/downloads/release/python-3109/> 165 new commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.9.16 Get it here, read the change log, consider upgrading to a newer version: https://www.python.org/downloads/release/python-3916/ <https://www.python.org/downloads/release/python-3916/> Security-only release with no binaries. 10 commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.8.16 Get it here, see the change log, definitely upgrade to a newer version: https://www.python.org/downloads/release/python-3816/ <https://www.python.org/downloads/release/python-3816/> Security-only release with no binaries. 9 commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.7.16 Get it here, read the change log, check PEP 537 <https://peps.python.org/pep-0537/>to confirm EOL is coming to this version in June 2023: https://www.python.org/downloads/release/python-3716/ <https://www.python.org/downloads/release/python-3716/> Security-only release with no binaries. 8 commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>We hope you enjoy the new releases! Thanks to all of the many volunteers who help make Python Development and these releases possible! Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation. https://www.python.org/psf/ <https://www.python.org/psf/> Your friendly release team, Ned Deily @nad <https://discuss.python.org/u/nad> Steve Dower @steve.dower <https://discuss.python.org/u/steve.dower> Pablo Galindo Salgado @pablogsal <https://discuss.python.org/u/pablogsal> Łukasz Langa @ambv <https://discuss.python.org/u/ambv> Thomas Wouters @thomas <https://discuss.python.org/u/thomas>

1 0

Lona: a simple pythonic framework to write responsive web apps in full Python
by Florian Scherf Dec. 6, 2022

Dec. 6, 2022

Web: https://lona-web.org/1.x/ Github: https://github.com/lona-web-org/lona/ What is Lona? ============= Lona is a web application framework, designed to write responsive web apps in full Python. Web is a solved problem in Python since ages, but traditionally Python handles only the server side. If you want to have client side interaction like click events or you want update content live, you have to write an additional Javascript application. Lona handles the server side and the client side, and provides a simple, pythonic API to write self contained views. Lona is very easy to use. You can write a whole web app, using only one simple Python script. https://lona-web.org/1.x/demos/ Get involved! ============= I released 1.10.5 yesterday. Lona is pretty stable and well tested right now, but a major release is right around the corner. Helping hands, feedback and new ideas in any form are very welcome. Best regards, Florian Scherf <mail(a)florianscherf.de>

1 0

NumPy 1.24.0rc2 released
by Charles R Harris Dec. 4, 2022

Dec. 4, 2022

Hi All, On behalf of the NumPy team, I'm pleased to announce the release of NumPy 1.24.0rc1. The NumPy 1.24.0 release continues the ongoing work to improve the handling and promotion of dtypes, increase execution speed, and clarify the documentation. There are also a large number of new and expired deprecations due to changes in promotion and cleanups. This might be called a deprecation release. Highlights are - Many new deprecations. - Many expired deprecations. - New f2py features and fixes. - New "dtype" and "casting" keywords for stacking functions. The Python versions supported in this release are 3.8-3.11 Note that 32 bit wheels are only provided for Windows, all other wheels are 64 bits on account of Ubuntu, Fedora, and other Linux distributions dropping 32 bit support. Wheels can be downloaded from PyPI <https://pypi.org/project/numpy/1.24.0rc2/>; source archives, release notes, and wheel hashes are available on Github <https://github.com/numpy/numpy/releases/tag/v1.24.0rc2>. *Contributors* A total of 175 people contributed to this release. People with a "+" by their names contributed a patch for the first time. - @DWesl - @amagicmuffin + - @dg3192 + - @h-vetinari - @juztamau5 + - @swagatip + - Aaron Meurer - Aayush Agrawal + - Adam Knapp + - Adarsh Singh + - Al-Baraa El-Hag - Alban Desmaison + - Ales Crocaro + - Alex Low + - Alexander Grund + - Alexander Kanavin + - Andras Deak - Angéllica Araujo + - Anselm Hahn + - Ari Cooper Davis + - Axel Huebl + - Bas van Beek - Bhavuk Kalra - Bram Ton + - Brent Tan + - Brigitta Sipőcz - Callum O'Riley + - Charles Harris - Chiara Marmo - Christoph Reiter - Damien Caliste - Dan Schult + - Daniel da Silva - DanielHabenicht + - Dave Goel + - David Gilbertson + - Developer-Ecosystem-Engineering - Digya Acharya + - Dimitri Papadopoulos Orfanos - Eric-Shang + - Evgeni Burovski - Ewout ter Hoeven - Felix Hirwa Nshuti + - Frazer McLean + - Ganesh Kathiresan - Gavin Zhang + - Gaëtan de Menten - Greg Lucas - Greg Sadetsky + - Gregory P. Smith [Google LLC] + - Hameer Abbasi - Hannah Aizenman + - Hood Chatham - I-Shen Leong - Iantra Solari + - Ikko Ashimine + - Inessa Pawson - Jake Bowhay + - Jake Close + - Jarrod Millman - Jason Thai - JessePires + - Jessé Pires + - Jhonatan Cunha + - Jingxuan He + - Johnathon Cusick + - Jon Morris - Jordy Williams + - Josh Wilson - João Fontes Gonçalves + - Juan Luis Cano Rodríguez - Jyn Spring 琴春 + - KIU Shueng Chuan - Karl Otness + - Kevin Sheppard - Kinshuk Dua + - Leo Fang - Leona Taric + - Lev Maximov + - Lillian Zha + - Loïc Estève - M. Eric Irrgang + - Mariusz Felisiak - Mark Harfouche - Martin Zacho + - Matheus Santana Patriarca + - Matt Williams + - Matteo Raso + - Matthew Barber - Matthew Brett - Matthew Sterrett + - Matthias Bussonnier - Matthias Koeppe + - Matti Picus - Meekail Zain + - Melissa Weber Mendonça - Michael Osthege + - Michael Siebert + - Mike Toews - Miki Watanabe + - Miles Cranmer + - Monika Kubek + - Muhammad Jarir Kanji + - Mukulika Pahari - Namami Shanker - Nathan Goldbaum + - Nathan Rooy + - Navpreet Singh + - Noritada Kobayashi + - Oleksiy Kononenko + - Omar Ali + - Pal Barta + - Pamphile Roy - Patrick Hoefler + - Pearu Peterson - Pedro Nacht + - Petar Mlinarić + - Peter Hawkins - Pey Lian Lim - Pieter Eendebak - Pradipta Ghosh - Pranab Das + - Precision Wordcraft LLC + - PrecisionWordcraft + - Rafael CF Sousa + - Rafael Cardoso Fernandes Sousa - Rafael Sousa + - Raghuveer Devulapalli - Ralf Gommers - Rin Cat (鈴猫) + - Robert Kern - Rohit Davas + - Rohit Goswami - Ross Barnowski - Ruth Comer + - Sabiha Tahsin Soha + - Sachin Krishnan T V + - Sanjana M Moodbagil + - Sanya Sinha + - Sarah Coffland + - Saransh Chopra + - Satish Kumar Mishra + - Satish Mishra + - Sayed Adel - Schrijvers Luc + - Sebastian Berg - Serge Guelton - Seva Lotoshnikov + - Shashank Gupta + - Shoban Chiddarth + - Shreya Singh + - Shreyas Joshi + - Sicheng Zeng + - Simran Makandar + - Shuangchi He + - Srimukh Sripada + - Stefan van der Walt - Stefanie Molin + - Stuart Archibald - Tania Allard - Thomas A Caswell - Thomas Kastl + - Thomas Mansencal + - Tony Newton / Teng Liu + - Toshiki Kataoka - Tyler Reddy - Vardhaman Kalloli + - Warren Weckesser - Will Ayd + - William Stein + - XinRu Lin + - Yin Li + - Yunika Bajracharya + - Zachary Blackwood + - 渡邉美希 + Cheers, Charles Harris

1 0

python-oracledb 1.2.1
by Anthony Tuininga Dec. 1, 2022

Dec. 1, 2022

What is python-oracledb? python-oracledb is a Python extension module that enables access to Oracle Database for Python and conforms to the Python database API 2.0 specifications with a number of enhancements. This module is intended to eventually replace cx_Oracle. Where do I get it? https://pypi.org/project/oracledb/1.2.1/ The easiest method to install/upgrade python-oracledb is via pip as in python -m pip install oracledb --upgrade What's new? This release addresses a number of reported issues. See the full release notes for all of the details: https://python-oracledb.readthedocs.io/en/latest/release_notes.html#oracled… Please provide any feedback via GitHub issues: https://github.com/oracle/ python-oracledb/issues or discussions: https://github.com/oracle/python- oracledb/discussions

1 0