[Python-Dev] Re: New PEP website is horrible to read on mobile device

[Inada Naoki]

I can reproduce it. I reported it on
https://github.com/python/peps/issues/2437

On Thu, Mar 17, 2022 at 1:29 AM Patrick Arminio
 wrote:
>
> I've tried to reproduce the bug on ios and android (emulators) with no 
> success, usually something like this
> happens when the
>
> 
>
> meta is missing, but we do have it in the content, so it is strange, can you 
> reproduce consistently?
>
>
> On Tue, 15 Mar 2022 at 13:28, Nathan Cook  wrote:
>>
>> Please make https://peps.python.org/ more responsive to various form factors
>>
>> See attached screenshot from Chrome version 99.0.4844.58 on my Pixel 3aXL 
>> running Android 12
>>
>> Thank you,
>> Nathan Cook
>> ___
>> Python-Dev mailing list -- python-dev@python.org
>> To unsubscribe send an email to python-dev-le...@python.org
>> https://mail.python.org/mailman3/lists/python-dev.python.org/
>> Message archived at 
>> https://mail.python.org/archives/list/python-dev@python.org/message/TTZBNWW67IR26VWLV4NFTHP6WBQOD5FI/
>> Code of Conduct: http://python.org/psf/codeofconduct/
>
>
>
> --
> Patrick Arminio
> ___
> Python-Dev mailing list -- python-dev@python.org
> To unsubscribe send an email to python-dev-le...@python.org
> https://mail.python.org/mailman3/lists/python-dev.python.org/
> Message archived at 
> https://mail.python.org/archives/list/python-dev@python.org/message/LA6U263OUVJ2RBFHFYNFXZ2QSCZHVVUW/
> Code of Conduct: http://python.org/psf/codeofconduct/



-- 
Inada Naoki  
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/22XIKX2S3RRLGYBNTCCWKSZZ6O25PXYY/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: [RELEASE] Python 3.10.3, 3.9.11, 3.8.13, and 3.7.13 are now available with security content

[Michał Górny]

On Wed, 2022-03-16 at 13:19 -0400, Ned Deily wrote:
> On Mar 16, 2022, at 12:53, Michał Górny  wrote:
> > The 3.9 .tar.xz doesn't seem to pass signature verification:
> > 
> > $ gpg --verify Python-3.9.11.tar.xz.asc 
> > gpg: assuming signed data in 'Python-3.9.11.tar.xz'
> > gpg: Signature made wto, 15 mar 2022, 22:17:14 CET
> > gpg:using RSA key E3FF2839C048B25C084DEBE9B26995E310250568
> > gpg: BAD signature from "Łukasz Langa (GPG langa.pl) " 
> > [unknown]
> 
> Thanks for the report. It appears to have been a CDN caching issue. Try 
> again, it should be OK now.
> 

It works now, thanks!

-- 
Best regards,
Michał Górny

___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/JU4MGLIGRY3OGOYXXY6TZCUOGWZTOZRN/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: [RELEASE] Python 3.10.3, 3.9.11, 3.8.13, and 3.7.13 are now available with security content

[Ned Deily]

On Mar 16, 2022, at 12:53, Michał Górny  wrote:
> The 3.9 .tar.xz doesn't seem to pass signature verification:
> 
> $ gpg --verify Python-3.9.11.tar.xz.asc 
> gpg: assuming signed data in 'Python-3.9.11.tar.xz'
> gpg: Signature made wto, 15 mar 2022, 22:17:14 CET
> gpg:using RSA key E3FF2839C048B25C084DEBE9B26995E310250568
> gpg: BAD signature from "Łukasz Langa (GPG langa.pl) " 
> [unknown]

Thanks for the report. It appears to have been a CDN caching issue. Try again, 
it should be OK now.

--
  Ned Deily
  n...@python.org -- []

___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/W7UF3VKX4BYLFPQVW7QUS6CVGCMIKDUP/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: [RELEASE] Python 3.10.3, 3.9.11, 3.8.13, and 3.7.13 are now available with security content

[Michał Górny]

On Wed, 2022-03-16 at 17:11 +0100, Łukasz Langa wrote:
> 
>  
> Python
>  3.9.11
> 
> Get it here: https://www.python.org/downloads/release/python-3911/  
> 
> This is the penultimate planned full bugfix release of Python 3.9. In 
> mid-May, we’ll be releasing the last one, after which the 3.9 series will 
> enter its security-only fixes period. More details in PEP 596 
> .
> 
> Python 3.9 is the first Python version since 2.7 to have a regular bugfix 
> release larger than “.10”. It’s also still a significant release at 163 
> commits since 3.9.10. That’s in fact 30+ commits more than between 3.9.9 and 
> 3.9.10. The change log 
>  isn’t as 
> long as the 3.10.3 one but it’s still pretty extensive!
> 
> As a reminder, on macOS, the default installer is now the new universal2 
> variant. It’s compatible with Mac OS X 10.9 and newer, including macOS 11 Big 
> Sur and macOS 12 Monterey. Python installed with this variant will work 
> natively on Apple Silicon processors.

The 3.9 .tar.xz doesn't seem to pass signature verification:

$ gpg --verify Python-3.9.11.tar.xz.asc 
gpg: assuming signed data in 'Python-3.9.11.tar.xz'
gpg: Signature made wto, 15 mar 2022, 22:17:14 CET
gpg:using RSA key E3FF2839C048B25C084DEBE9B26995E310250568
gpg: BAD signature from "Łukasz Langa (GPG langa.pl) " 
[unknown]



-- 
Best regards,
Michał Górny

___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/ALTOBT4HLUFFFKKTOEQP6NFLPHR62UPI/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: Python 3.9.11

[Ned Deily]

On Mar 16, 2022, at 06:56, Adrian Freund  wrote:
> 
> It looks like the 3.9.11 commit was done 14 hours ago:
> https://github.com/python/cpython/commit/0f0c55c9f0f4c358d759470702821c471fcd1bc8
> 
> It hasn't been tagged and uploaded to the website yet. I'm not involved in 
> the release process, but I'd imagine that it will show up on the website 
> soon. 3.9.10 was released approximately one day after the commit was made.

3.10.3, 3.9.11, 3.8.13, and 3.7.13 were all released a few hours ago. Get them 
here!

https://www.python.org/downloads/

--
  Ned Deily
  n...@python.org -- []

___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/GXUMQDLPRLF2XXRIXNN2G4BBSY4A4C2Y/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: Python 3.9.11

[Adrian Freund]

It looks like the 3.9.11 commit was done 14 hours ago:
https://github.com/python/cpython/commit/0f0c55c9f0f4c358d759470702821c471fcd1bc8

It hasn't been tagged and uploaded to the website yet. I'm not involved 
in the release process, but I'd imagine that it will show up on the 
website soon. 3.9.10 was released approximately one day after the commit 
was made.


Regards,
Adrian Freund

On 3/15/22 18:43, Prasad, PCRaghavendra wrote:


Hi Team,

Can someone please let us know the release date of Python 3.9.11 ( 
with libexpat 2.4.8 security issues fixed )


In the python.org releases it was mentioned as 14-march-2022, but 
still, I couldn’t see the bin/source code.


Can someone help with this

Thanks,

Raghavendra


Internal Use - Confidential


___
Python-Dev mailing list --python-dev@python.org
To unsubscribe send an email topython-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived 
athttps://mail.python.org/archives/list/python-dev@python.org/message/5LWAYP7A4BBGPXXBAUWTSL6YQWHDX25N/
Code of Conduct:http://python.org/psf/codeofconduct/___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/JTOX2B4GDW2W2C4JJGQ7VI57NE4EUPXJ/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: Python 3.9.11

[Jean Abou Samra]

> Le 15 mars 2022 à 18:43, "Prasad, PCRaghavendra" 
>  a écrit :
> 
> Hi Team,
>  
> Can someone please let us know the release date of Python 3.9.11 ( with 
> libexpat 2.4.8 security issues fixed )
>  
> In the python.org releases it was mentioned as 14-march-2022, but still, I 
> couldn’t see the bin/source code.
>  
> Can someone help with this
>  
> Thanks,
> Raghavendra
> 


Have a look at
https://discuss.python.org/t/py-day-is-coming-a-joint-security-release-spree-for-python-3-7-3-8-3-9-and-3-10-on-march-14th/14109/2

Best,
Jean



> Internal Use - Confidential
> ___
> Python-Dev mailing list -- python-dev@python.org
> To unsubscribe send an email to python-dev-le...@python.org
> https://mail.python.org/mailman3/lists/python-dev.python.org/
> Message archived at 
> https://mail.python.org/archives/list/python-dev@python.org/message/5LWAYP7A4BBGPXXBAUWTSL6YQWHDX25N/
> Code of Conduct: http://python.org/psf/codeofconduct/
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/O2G6WQV3JZ7BB2J4Y5ALLIVKN53CHDGW/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: New PEP website is horrible to read on mobile device

[Patrick Arminio]

I've tried to reproduce the bug on ios and android (emulators) with no
success, usually something like this
happens when the



meta is missing, but we do have it in the content, so it is strange,
can you reproduce consistently?


On Tue, 15 Mar 2022 at 13:28, Nathan Cook  wrote:

> Please make https://peps.python.org/ more responsive to various form
> factors
>
> See attached screenshot from Chrome version 99.0.4844.58 on my Pixel 3aXL
> running Android 12
>
> Thank you,
> Nathan Cook
> ___
> Python-Dev mailing list -- python-dev@python.org
> To unsubscribe send an email to python-dev-le...@python.org
> https://mail.python.org/mailman3/lists/python-dev.python.org/
> Message archived at
> https://mail.python.org/archives/list/python-dev@python.org/message/TTZBNWW67IR26VWLV4NFTHP6WBQOD5FI/
> Code of Conduct: http://python.org/psf/codeofconduct/
>


-- 
Patrick Arminio
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/LA6U263OUVJ2RBFHFYNFXZ2QSCZHVVUW/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] [RELEASE] Python 3.10.3, 3.9.11, 3.8.13, and 3.7.13 are now available with security content

[Łukasz Langa]

Welcome again to the exciting world of releasing new Python versions!

Last time around I was complaining about cursed releases 
.
 This time around I could complain about security content galore and how one of 
them 
 
ruined my ingenious idea to release Python on Pi Day and call it Py Day 
.
 Well, you can’t have everything in life. Or at least not everything at once.

And yet it seems this time around we’ve got a lot of security fixes all at 
once. Just look at this list:

15 (sic!) CVEs: libexpat upgraded from 2.4.1 to 2.4.7 (BPO-46794 
, BPO-46932 
, BPO-46811 
, BPO-46784 
, BPO-46400 
)
CVE-2022-0778: OpenSSL upgraded from 1.1.1l to 1.1.1n in macOS and Windows 
installers (BPO-47024 )
CVE-2016-3189, CVE-2019-12900: bzip2 upgraded from 1.0.6 to 1.0.8 in Windows 
installers (BPO-44549 )
CVE-2022-26488: Windows installer now ensures the correct path is being 
repaired when “Add to PATH” is used (BPO-46948 
)
CVE-2021-28363: bundled pip upgraded from 21.2.4 to 22.0.4 (BPO-46985 
)
authorization bypass fixed in urllib.request (BPO-46756 
)
REDoS avoided in importlib.metadata (BPO-46474 
)
SQLite upgraded from 3.36.0 to 3.37.2 in macOS and Windows installers 
(BPO-45925 )
 
Python
 3.10.3

Get it here: https://www.python.org/downloads/release/python-3103/ 

Python 3.10.3 is the third maintenance release of the newest version of the 
Python programming language, which contains many new features and 
optimizations. We recommend it over the other releases listed below.

This is a large bugfix release with 220 commits since 3.10.2. Just look at the 
change log !

The next maintenance release of Python 3.10 is planned for early June.

 
Python
 3.9.11

Get it here: https://www.python.org/downloads/release/python-3911/  

This is the penultimate planned full bugfix release of Python 3.9. In mid-May, 
we’ll be releasing the last one, after which the 3.9 series will enter its 
security-only fixes period. More details in PEP 596 
.

Python 3.9 is the first Python version since 2.7 to have a regular bugfix 
release larger than “.10”. It’s also still a significant release at 163 commits 
since 3.9.10. That’s in fact 30+ commits more than between 3.9.9 and 3.9.10. 
The change log  
isn’t as long as the 3.10.3 one but it’s still pretty extensive!

As a reminder, on macOS, the default installer is now the new universal2 
variant. It’s compatible with Mac OS X 10.9 and newer, including macOS 11 Big 
Sur and macOS 12 Monterey. Python installed with this variant will work 
natively on Apple Silicon processors.

 
Python
 3.8.13

Get it here: https://www.python.org/downloads/release/python-3813/ 

Changes  here 
are almost exclusively security-only as the life cycle of Python versions 
prescribes. You might have noticed there is a small number of regular bug fixes 
nonetheless. This is because without those we wouldn’t be able to continue 
running the full test suite for the 3.8 branch. This in turn could hide 
regressions in future security fixes.

 
Python
 3.7.13

Get it here: https://www.python.org/downloads/release/python-3713/ 

Just like 3.8, Python 3.7 is in its security-only fixes period. In turn, the 
changes in 3.7.13 
 look almost 
identical to the ones in 3.8.13.

Python 3.7 will 

[Python-Dev] Re: New PEP website is horrible to read on mobile device

[Eric V. Smith]

On 3/16/2022 11:23 AM, Skip Montanaro wrote:

Dang auto-correct... I meant "anti-tracking," in case it wasn't obvious.


It wasn't obvious! I was wondering what nefarious entity had created an 
anti-teaching VPN, and just what that would involve. Thanks for clarifying!


Eric


___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/HJSNHJBUDUYCQGZPSRQ32WHQEZEZPASW/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: New PEP website is horrible to read on mobile device

[Skip Montanaro]

Dang auto-correct... I meant "anti-tracking," in case it wasn't obvious.

Skip

On Wed, Mar 16, 2022, 10:19 AM Skip Montanaro 
wrote:

> One thing I would mention though is people who can reproduce it check if
>> you have any extensions enabled or other tools that can block network
>> traffic. Sometimes privacy based extensions and tools can have false
>> positives and block resources required to render sites correctly.
>>
>
> (I have not yet tried to reproduce this...)
>
> Sure, maybe the people seeing this should do some debugging, but... My
> counterargument is that in this day and age of invasive tracking and the
> corresponding attempts by people to (rightly imo) suppress such tracking,
> it's incumbent upon website developers to insure their sites operate in the
> face of such tools. I'm referring to common tools, Brave, DuckDuckGo
> anti-teaching VPN, pihole, Firefox, etc.
>
> Skip
>
>
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/7H6PLUFGTGWVSEIMGHMRXMC2Z4NEXU2X/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: New PEP website is horrible to read on mobile device

[Skip Montanaro]

>
> One thing I would mention though is people who can reproduce it check if
> you have any extensions enabled or other tools that can block network
> traffic. Sometimes privacy based extensions and tools can have false
> positives and block resources required to render sites correctly.
>

(I have not yet tried to reproduce this...)

Sure, maybe the people seeing this should do some debugging, but... My
counterargument is that in this day and age of invasive tracking and the
corresponding attempts by people to (rightly imo) suppress such tracking,
it's incumbent upon website developers to insure their sites operate in the
face of such tools. I'm referring to common tools, Brave, DuckDuckGo
anti-teaching VPN, pihole, Firefox, etc.

Skip
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/JITOYHE56PRWKFSID52WDFYKR3NNVMKB/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Re: Python 3.9.11

[Steve Dower]

We're still working on it. Hopefully it will be today, but we have had 
other issues arise that have delayed things by a few days (including new 
critical OpenSSL fixes that were just released yesterday).


Cheers,
Steve

On 15Mar2022 1743, Prasad, PCRaghavendra wrote:

Hi Team,

Can someone please let us know the release date of Python 3.9.11 ( with 
libexpat 2.4.8 security issues fixed )


In the python.org releases it was mentioned as 14-march-2022, but still, 
I couldn’t see the bin/source code.


Can someone help with this

Thanks,

Raghavendra

___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/ZPC2ZLVUSNMKUYENL22OGEGXZCTMEPGN/
Code of Conduct: http://python.org/psf/codeofconduct/

[Python-Dev] Python 3.9.11

[Prasad, PCRaghavendra]

Hi Team,

Can someone please let us know the release date of Python 3.9.11 ( with 
libexpat 2.4.8 security issues fixed )

In the python.org releases it was mentioned as 14-march-2022, but still, I 
couldn't see the bin/source code.

Can someone help with this

Thanks,
Raghavendra


Internal Use - Confidential
___
Python-Dev mailing list -- python-dev@python.org
To unsubscribe send an email to python-dev-le...@python.org
https://mail.python.org/mailman3/lists/python-dev.python.org/
Message archived at 
https://mail.python.org/archives/list/python-dev@python.org/message/5LWAYP7A4BBGPXXBAUWTSL6YQWHDX25N/
Code of Conduct: http://python.org/psf/codeofconduct/