[ANN] PyYAML-5.4b2: Linux and Mac users, please test wheels!
Matt Davis <[email protected]> Thu, 14 Jan 2021 14:19:32 -0800
| Newsgroups | gmane.text.yaml.general |
|---|---|
| Message-ID | <CAJD0Ssg_NCz1K+pzvRFS7dNXzRbuy-gJ0BbNASNxpmhiU_Upqg@mail.gmail.com> |
--===============2717906353619011590==
Content-Type: multipart/alternative; boundary="0000000000000c975005b8e3a7ae"
--0000000000000c975005b8e3a7ae
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Announcing PyYAML-5.4b2
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
A beta release of PyYAML is now available:
https://github.com/yaml/pyyaml/releases/tag/5.4b2
This release contains a security fix for CVE-2020-14343. It removes the
python/module, python/object, and python/object/new tags from the
FullLoader.
YAML that uses these tags must be loaded by UnsafeLoader, or a custom loade=
r
that has explicitly enabled them.
This beta release also adds Python wheels for manylinux1 (x86_64) and
MacOS (x86_64) with the libyaml extension included (built on libyaml 0.2.5)=
.
We believe these wheels to be stable, but please take the opportunity to
test
against your local Linux and MacOS environments, and file any issues at
https://github.com/yaml/pyyaml/issues.
PyYAML 5.4 will be the last release to support Python 2.7.
Changes
=3D=3D=3D=3D=3D=3D=3D
* https://github.com/yaml/pyyaml/pull/407 -- build modernization, remove
distutils, fix metadata, build wheels, CI to GHA
* https://github.com/yaml/pyyaml/pull/472 -- fix for CVE-2020-14343, moves
arbitrary python tags to UnsafeLoader
* https://github.com/yaml/pyyaml/pull/441 -- fix memory leak in implicit
resolver setup
* https://github.com/yaml/pyyaml/pull/392 -- fix py2 copy support for
timezone objects
* https://github.com/yaml/pyyaml/pull/378 -- fix compatibility with Jython
Resources
=3D=3D=3D=3D=3D=3D=3D=3D=3D
PyYAML IRC Channel: #pyyaml on irc.freenode.net
PyYAML homepage: https://github.com/yaml/pyyaml
PyYAML documentation: http://pyyaml.org/wiki/PyYAMLDocumentation
Source and binary installers: https://pypi.org/project/PyYAML/
GitHub repository: https://github.com/yaml/pyyaml/
Bug tracking: https://github.com/yaml/pyyaml/issues
YAML homepage: http://yaml.org/
YAML-core mailing list:
http://lists.sourceforge.net/lists/listinfo/yaml-core
About PyYAML
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
YAML is a data serialization format designed for human readability and
interaction with scripting languages. PyYAML is a YAML parser and emitter
for
Python.
PyYAML features a complete YAML 1.1 parser, Unicode support, pickle support=
,
capable extension API, and sensible error messages. PyYAML supports standar=
d
YAML tags and provides Python-specific tags that allow to represent an
arbitrary Python object.
PyYAML is applicable for a broad range of tasks from complex configuration
files to object serialization and persistence.
Example
=3D=3D=3D=3D=3D=3D=3D
>>> import yaml
>>> yaml.full_load("""
... name: PyYAML
... description: YAML parser and emitter for Python
... homepage: https://github.com/yaml/pyyaml
... keywords: [YAML, serialization, configuration, persistence, pickle]
... """)
{'keywords': ['YAML', 'serialization', 'configuration', 'persistence',
'pickle'], 'homepage': 'https://github.com/yaml/pyyaml', 'description':
'YAML parser and emitter for Python', 'name': 'PyYAML'}
>>> print(yaml.dump(_))
name: PyYAML
homepage: https://github.com/yaml/pyyaml
description: YAML parser and emitter for Python
keywords: [YAML, serialization, configuration, persistence, pickle]
Maintainers
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
The following people are currently responsible for maintaining PyYAML:
* Ingy d=C3=B6t Net
* Matt Davis
and many thanks to all who have contribributed!
See: https://github.com/yaml/pyyaml/pulls
Copyright
=3D=3D=3D=3D=3D=3D=3D=3D=3D
Copyright (c) 2017-2021 Ingy d=C3=B6t Net <[email protected]>
Copyright (c) 2006-2016 Kirill Simonov <xi-RCSp1WnSyaseIZ0/[email protected]>
The PyYAML module was written by Kirill Simonov <xi-RCSp1WnSyaseIZ0/[email protected]>.
It is currently maintained by the YAML and Python communities.
PyYAML is released under the MIT license.
See the file LICENSE for more details.
--0000000000000c975005b8e3a7ae
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
<div dir=3D"ltr"><span style=3D"font-family:monospace">=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</span><br style=3D"font=
-family:monospace"><span style=3D"font-family:monospace">Announcing PyYAML-=
5.4b2</span><br style=3D"font-family:monospace"><span style=3D"font-family:=
monospace">=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D</span><br style=3D"font-family:monospace"><br style=3D"font-family:m=
onospace"><span style=3D"font-family:monospace">A beta release of PyYAML is=
now available:</span><br style=3D"font-family:monospace"><font face=3D"mon=
ospace"><a href=3D"https://github.com/yaml/pyyaml/releases/tag/5.4b2">https=
://github.com/yaml/pyyaml/releases/tag/5.4b2</a></font><br style=3D"font-fa=
mily:monospace"><br style=3D"font-family:monospace"><span style=3D"font-fam=
ily:monospace">This release contains a security fix for CVE-2020-14343. It =
removes the</span><br style=3D"font-family:monospace"><span style=3D"font-f=
amily:monospace">python/module, python/object, and python/object/new tags f=
rom the FullLoader.</span><br style=3D"font-family:monospace"><span style=
=3D"font-family:monospace">YAML that uses these tags must be loaded by Unsa=
feLoader, or a custom loader</span><br style=3D"font-family:monospace"><spa=
n style=3D"font-family:monospace">that has explicitly enabled them.</span><=
br style=3D"font-family:monospace"><br style=3D"font-family:monospace"><spa=
n style=3D"font-family:monospace">This beta release also adds Python wheels=
for manylinux1 (x86_64) and</span><br style=3D"font-family:monospace"><spa=
n style=3D"font-family:monospace">MacOS (x86_64) with the libyaml extension=
included (built on libyaml 0.2.5).</span><br style=3D"font-family:monospac=
e"><span style=3D"font-family:monospace">We believe these wheels to be stab=
le, but please take the opportunity to test</span><br style=3D"font-family:=
monospace"><span style=3D"font-family:monospace">against your local Linux a=
nd MacOS environments, and file any issues at</span><br style=3D"font-famil=
y:monospace"><a href=3D"https://github.com/yaml/pyyaml/issues" target=3D"_b=
lank" style=3D"font-family:monospace">https://github.com/yaml/pyyaml/issues=
</a><span style=3D"font-family:monospace">.</span><br style=3D"font-family:=
monospace"><br style=3D"font-family:monospace"><span style=3D"font-family:m=
onospace">PyYAML 5.4 will be the last release to support Python 2.7.</span>=
<br style=3D"font-family:monospace"><br style=3D"font-family:monospace"><br=
style=3D"font-family:monospace"><span style=3D"font-family:monospace">Chan=
ges</span><br style=3D"font-family:monospace"><span style=3D"font-family:mo=
nospace">=3D=3D=3D=3D=3D=3D=3D</span><br style=3D"font-family:monospace"><b=
r style=3D"font-family:monospace"><span style=3D"font-family:monospace">*=
=C2=A0</span><a href=3D"https://github.com/yaml/pyyaml/pull/407" target=3D"=
_blank" style=3D"font-family:monospace">https://github.com/yaml/pyyaml/pull=
/407</a><span style=3D"font-family:monospace">=C2=A0-- build modernization,=
remove distutils, fix metadata, build wheels, CI to GHA</span><br style=3D=
"font-family:monospace"><span style=3D"font-family:monospace">*=C2=A0</span=
><a href=3D"https://github.com/yaml/pyyaml/pull/472" target=3D"_blank" styl=
e=3D"font-family:monospace">https://github.com/yaml/pyyaml/pull/472</a><spa=
n style=3D"font-family:monospace">=C2=A0-- fix for CVE-2020-14343, moves ar=
bitrary python tags to UnsafeLoader</span><br style=3D"font-family:monospac=
e"><span style=3D"font-family:monospace">*=C2=A0</span><a href=3D"https://g=
ithub.com/yaml/pyyaml/pull/441" target=3D"_blank" style=3D"font-family:mono=
space">https://github.com/yaml/pyyaml/pull/441</a><span style=3D"font-famil=
y:monospace">=C2=A0-- fix memory leak in implicit resolver setup</span><br =
style=3D"font-family:monospace"><span style=3D"font-family:monospace">*=C2=
=A0</span><a href=3D"https://github.com/yaml/pyyaml/pull/392" target=3D"_bl=
ank" style=3D"font-family:monospace">https://github.com/yaml/pyyaml/pull/39=
2</a><span style=3D"font-family:monospace">=C2=A0-- fix py2 copy support fo=
r timezone objects</span><br style=3D"font-family:monospace"><span style=3D=
"font-family:monospace">*=C2=A0</span><a href=3D"https://github.com/yaml/py=
yaml/pull/378" target=3D"_blank" style=3D"font-family:monospace">https://gi=
thub.com/yaml/pyyaml/pull/378</a><span style=3D"font-family:monospace">=C2=
=A0-- fix compatibility with Jython</span><br style=3D"font-family:monospac=
e"><br style=3D"font-family:monospace"><br style=3D"font-family:monospace">=
<span style=3D"font-family:monospace">Resources</span><br style=3D"font-fam=
ily:monospace"><span style=3D"font-family:monospace">=3D=3D=3D=3D=3D=3D=3D=
=3D=3D</span><br style=3D"font-family:monospace"><br style=3D"font-family:m=
onospace"><span style=3D"font-family:monospace">PyYAML IRC Channel: #pyyaml=
on=C2=A0</span><a href=3D"http://irc.freenode.net/" target=3D"_blank" styl=
e=3D"font-family:monospace">irc.freenode.net</a><br style=3D"font-family:mo=
nospace"><span style=3D"font-family:monospace">PyYAML homepage:=C2=A0</span=
><a href=3D"https://github.com/yaml/pyyaml" target=3D"_blank" style=3D"font=
-family:monospace">https://github.com/yaml/pyyaml</a><br style=3D"font-fami=
ly:monospace"><span style=3D"font-family:monospace">PyYAML documentation:=
=C2=A0</span><a href=3D"http://pyyaml.org/wiki/PyYAMLDocumentation" target=
=3D"_blank" style=3D"font-family:monospace">http://pyyaml.org/wiki/PyYAMLDo=
cumentation</a><br style=3D"font-family:monospace"><span style=3D"font-fami=
ly:monospace">Source and binary installers:=C2=A0</span><a href=3D"https://=
pypi.org/project/PyYAML/" target=3D"_blank" style=3D"font-family:monospace"=
>https://pypi.org/project/PyYAML/</a><br style=3D"font-family:monospace"><s=
pan style=3D"font-family:monospace">GitHub repository:=C2=A0</span><a href=
=3D"https://github.com/yaml/pyyaml/" target=3D"_blank" style=3D"font-family=
:monospace">https://github.com/yaml/pyyaml/</a><br style=3D"font-family:mon=
ospace"><span style=3D"font-family:monospace">Bug tracking:=C2=A0</span><a =
href=3D"https://github.com/yaml/pyyaml/issues" target=3D"_blank" style=3D"f=
ont-family:monospace">https://github.com/yaml/pyyaml/issues</a><br style=3D=
"font-family:monospace"><br style=3D"font-family:monospace"><span style=3D"=
font-family:monospace">YAML homepage:=C2=A0</span><a href=3D"http://yaml.or=
g/" target=3D"_blank" style=3D"font-family:monospace">http://yaml.org/</a><=
br style=3D"font-family:monospace"><span style=3D"font-family:monospace">YA=
ML-core mailing list:=C2=A0</span><a href=3D"http://lists.sourceforge.net/l=
ists/listinfo/yaml-core" target=3D"_blank" style=3D"font-family:monospace">=
http://lists.sourceforge.net/lists/listinfo/yaml-core</a><br style=3D"font-=
family:monospace"><br style=3D"font-family:monospace"><br style=3D"font-fam=
ily:monospace"><span style=3D"font-family:monospace">About PyYAML</span><br=
style=3D"font-family:monospace"><span style=3D"font-family:monospace">=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</span><br style=3D"font-family:monospace"=
><br style=3D"font-family:monospace"><span style=3D"font-family:monospace">=
YAML is a data serialization format designed for human readability and</spa=
n><br style=3D"font-family:monospace"><span style=3D"font-family:monospace"=
>interaction with scripting languages. PyYAML is a YAML parser and emitter =
for</span><br style=3D"font-family:monospace"><span style=3D"font-family:mo=
nospace">Python.</span><br style=3D"font-family:monospace"><br style=3D"fon=
t-family:monospace"><span style=3D"font-family:monospace">PyYAML features a=
complete YAML 1.1 parser, Unicode support, pickle support,</span><br style=
=3D"font-family:monospace"><span style=3D"font-family:monospace">capable ex=
tension API, and sensible error messages. PyYAML supports standard</span><b=
r style=3D"font-family:monospace"><span style=3D"font-family:monospace">YAM=
L tags and provides Python-specific tags that allow to represent an</span><=
br style=3D"font-family:monospace"><span style=3D"font-family:monospace">ar=
bitrary Python object.</span><br style=3D"font-family:monospace"><br style=
=3D"font-family:monospace"><span style=3D"font-family:monospace">PyYAML is =
applicable for a broad range of tasks from complex configuration</span><br =
style=3D"font-family:monospace"><span style=3D"font-family:monospace">files=
to object serialization and persistence.</span><br style=3D"font-family:mo=
nospace"><br style=3D"font-family:monospace"><br style=3D"font-family:monos=
pace"><span style=3D"font-family:monospace">Example</span><br style=3D"font=
-family:monospace"><span style=3D"font-family:monospace">=3D=3D=3D=3D=3D=3D=
=3D</span><br style=3D"font-family:monospace"><br style=3D"font-family:mono=
space"><span style=3D"font-family:monospace">>>> import yaml</span=
><br style=3D"font-family:monospace"><br style=3D"font-family:monospace"><s=
pan style=3D"font-family:monospace">>>> yaml.full_load(""=
;"</span><br style=3D"font-family:monospace"><span style=3D"font-famil=
y:monospace">... name: PyYAML</span><br style=3D"font-family:monospace"><sp=
an style=3D"font-family:monospace">... description: YAML parser and emitter=
for Python</span><br style=3D"font-family:monospace"><span style=3D"font-f=
amily:monospace">... homepage:=C2=A0</span><a href=3D"https://github.com/ya=
ml/pyyaml" target=3D"_blank" style=3D"font-family:monospace">https://github=
.com/yaml/pyyaml</a><br style=3D"font-family:monospace"><span style=3D"font=
-family:monospace">... keywords: [YAML, serialization, configuration, persi=
stence, pickle]</span><br style=3D"font-family:monospace"><span style=3D"fo=
nt-family:monospace">... """)</span><br style=3D"font-family=
:monospace"><span style=3D"font-family:monospace">{'keywords': [=
9;YAML', 'serialization', 'configuration', 'persist=
ence',</span><br style=3D"font-family:monospace"><span style=3D"font-fa=
mily:monospace">'pickle'], 'homepage': '</span><a href=
=3D"https://github.com/yaml/pyyaml" target=3D"_blank" style=3D"font-family:=
monospace">https://github.com/yaml/pyyaml</a><span style=3D"font-family:mon=
ospace">', 'description':</span><br style=3D"font-family:monosp=
ace"><span style=3D"font-family:monospace">'YAML parser and emitter for=
Python', 'name': 'PyYAML'}</span><br style=3D"font-fam=
ily:monospace"><br style=3D"font-family:monospace"><span style=3D"font-fami=
ly:monospace">>>> print(yaml.dump(_))</span><br style=3D"font-fami=
ly:monospace"><span style=3D"font-family:monospace">name: PyYAML</span><br =
style=3D"font-family:monospace"><span style=3D"font-family:monospace">homep=
age:=C2=A0</span><a href=3D"https://github.com/yaml/pyyaml" target=3D"_blan=
k" style=3D"font-family:monospace">https://github.com/yaml/pyyaml</a><br st=
yle=3D"font-family:monospace"><span style=3D"font-family:monospace">descrip=
tion: YAML parser and emitter for Python</span><br style=3D"font-family:mon=
ospace"><span style=3D"font-family:monospace">keywords: [YAML, serializatio=
n, configuration, persistence, pickle]</span><br style=3D"font-family:monos=
pace"><br style=3D"font-family:monospace"><br style=3D"font-family:monospac=
e"><span style=3D"font-family:monospace">Maintainers</span><br style=3D"fon=
t-family:monospace"><span style=3D"font-family:monospace">=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D</span><br style=3D"font-family:monospace"><br style=3D"f=
ont-family:monospace"><span style=3D"font-family:monospace">The following p=
eople are currently responsible for maintaining PyYAML:</span><br style=3D"=
font-family:monospace"><br style=3D"font-family:monospace"><span style=3D"f=
ont-family:monospace">* Ingy d=C3=B6t Net</span><br style=3D"font-family:mo=
nospace"><span style=3D"font-family:monospace">* Matt Davis</span><br style=
=3D"font-family:monospace"><br style=3D"font-family:monospace"><span style=
=3D"font-family:monospace">and many thanks to all who have contribributed!<=
/span><br style=3D"font-family:monospace"><span style=3D"font-family:monosp=
ace">See:=C2=A0</span><a href=3D"https://github.com/yaml/pyyaml/pulls" targ=
et=3D"_blank" style=3D"font-family:monospace">https://github.com/yaml/pyyam=
l/pulls</a><br style=3D"font-family:monospace"><br style=3D"font-family:mon=
ospace"><br style=3D"font-family:monospace"><span style=3D"font-family:mono=
space">Copyright</span><br style=3D"font-family:monospace"><span style=3D"f=
ont-family:monospace">=3D=3D=3D=3D=3D=3D=3D=3D=3D</span><br style=3D"font-f=
amily:monospace"><br style=3D"font-family:monospace"><span style=3D"font-fa=
mily:monospace">Copyright (c) 2017-2021 Ingy d=C3=B6t Net <</span><a hre=
f=3D"mailto:[email protected]" target=3D"_blank" style=3D"font-family:monospace=
">[email protected]</a><span style=3D"font-family:monospace">></span><br sty=
le=3D"font-family:monospace"><span style=3D"font-family:monospace">Copyrigh=
t (c) 2006-2016 Kirill Simonov <</span><a href=3D"mailto:[email protected]=
t" target=3D"_blank" style=3D"font-family:monospace">xi-RCSp1WnSyaseIZ0/[email protected]</a><s=
pan style=3D"font-family:monospace">></span><br style=3D"font-family:mon=
ospace"><br style=3D"font-family:monospace"><span style=3D"font-family:mono=
space">The PyYAML module was written by Kirill Simonov <</span><a href=
=3D"mailto:xi-RCSp1WnSyaseIZ0/[email protected]" target=3D"_blank" style=3D"font-family:monospa=
ce">xi-RCSp1WnSyaseIZ0/[email protected]</a><span style=3D"font-family:monospace">>.</span><=
br style=3D"font-family:monospace"><span style=3D"font-family:monospace">It=
is currently maintained by the YAML and Python communities.</span><br styl=
e=3D"font-family:monospace"><br style=3D"font-family:monospace"><span style=
=3D"font-family:monospace">PyYAML is released under the MIT license.</span>=
<br style=3D"font-family:monospace"><span style=3D"font-family:monospace">S=
ee the file LICENSE for more details.</span><br></div>
--0000000000000c975005b8e3a7ae--
--===============2717906353619011590==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
--===============2717906353619011590==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Yaml-core mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/yaml-core
--===============2717906353619011590==--