COMMITS
April 7, 2026
M
[3.12] gh-137586: Open external osascript program with absolute path (GH-137584) (#148175)
Miss Islington (bot) committed
April 5, 2026
H
E
[3.12] Add `permissions: {}` to all reusable workflows (#148114) (#148122)
Ezio Melotti committed
April 3, 2026
April 2, 2026
W
[3.12] gh-146488: hash-pin all action references (gh-146489) (#147980)
William Woodruff committed
H
[3.12] Remove MSI build from security-only branch (#148007)
Hugo van Kemenade committed
March 30, 2026
H
[3.12] gh-145098: Run Apple Silicon macOS CI on macos-26 (Tahoe) (GH-145099) (GH-146412) (GH-146414) (#146635)
Hugo van Kemenade committed
March 24, 2026
March 5, 2026
M
[3.12] gh-145455: Show output of blurb & sphinx-build version commands (GH-145457) (#145490)
Miss Islington (bot) committed
March 3, 2026
H
[3.12] gh-136155: Docs: check for EPUB fatal errors in CI (GH-134074) (#145471)
Hugo van Kemenade committed
T
Post 3.12.13
Thomas Wouters committed
T
Python 3.12.13
Thomas Wouters committed
March 2, 2026
M
[3.12] gh-100538: Add workflow to verify bundled libexpat (GH-145359) (#145409)
Miss Islington (bot) committed
February 23, 2026
M
[3.12] gh-143916: Allow HTAB in wsgiref header values (#145141)
Miss Islington (bot) committed
M
[3.12] gh-144363: Update bundled libexpat to 2.7.4 (GH-144365) (#144501)
Miss Islington (bot) committed
M
[3.12] gh-144833: Fix use-after-free in SSL module when SSL_new() fails (GH-144843) (#144860)
Miss Islington (bot) committed
February 13, 2026
M
[3.12] gh-144125: email: verify headers are sound in BytesGenerator
Miss Islington (bot) committed
February 5, 2026
M
[3.12] gh-144484: Warn users not to use wsgiref in production
Miss Islington (bot) committed
February 3, 2026
M
[3.12] gh-74453: Add stronger security warning to os.path.commonprefix
Miss Islington (bot) committed
January 26, 2026
M
[3.12] gh-143935: Email preserve parens when folding comments (GH-143936) (#144036)
Miss Islington (bot) committed
January 25, 2026
M
[3.12] gh-143919: Reject control characters in http cookies (#144091)
Miss Islington (bot) committed
S
[3.12] gh-143925: Reject control characters in data: URL mediatypes (#144113)
Seth Michael Larson committed
January 19, 2026
G
[3.12] gh-143916: Reject control characters in wsgiref.headers.Headers (GH-143917) (GH-143973) (#143974)
Gregory P. Smith committed
January 13, 2026
H
[3.12] Bump GitHub Actions (GH-143757) (#143801)
Hugo van Kemenade committed
December 22, 2025
M
[3.12] Use ``sphinxext-opengraph`` v0.13.0 (GH-140425) (#140430)
Miss Islington (bot) committed
M
[3.12] gh-136063: fix quadratic-complexity parsing in `email.message._parseparam` (GH-136072) (#140829)
Miss Islington (bot) committed
M
[3.12] gh-119451: Fix a potential denial of service in http.client (GH-119454) (#142140)
Miss Islington (bot) committed
S
[3.12] gh-119342: Fix a potential denial of service in plistlib (GH-119343) (#142149)
Serhiy Storchaka committed
M
[3.12] gh-142145: Remove quadratic behavior in node ID cache clearing (GH-142146) (#142211)
Miss Islington (bot) committed
December 17, 2025
S
[3.12] gh-90949: add Expat API to prevent XML deadly allocations (CVE-2025-59375) (GH-139234) (#139527)
Sebastian Pipping committed