dependabot[bot]
83e3785a1c
Bump memmap2 from 0.9.9 to 0.9.10 ( #7415 )
...
Bumps [memmap2](https://github.com/RazrFalcon/memmap2-rs ) from 0.9.9 to 0.9.10.
- [Changelog](https://github.com/RazrFalcon/memmap2-rs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/RazrFalcon/memmap2-rs/compare/v0.9.9...v0.9.10 )
---
updated-dependencies:
- dependency-name: memmap2
dependency-version: 0.9.10
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 10:19:04 +09:00
dependabot[bot]
021286e9ab
Bump the openssl group with 2 updates ( #7413 )
...
Bumps the openssl group with 2 updates: [openssl](https://github.com/rust-openssl/rust-openssl ) and [openssl-sys](https://github.com/rust-openssl/rust-openssl ).
Updates `openssl` from 0.10.75 to 0.10.76
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases )
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-v0.10.75...openssl-v0.10.76 )
Updates `openssl-sys` from 0.9.111 to 0.9.112
- [Release notes](https://github.com/rust-openssl/rust-openssl/releases )
- [Commits](https://github.com/rust-openssl/rust-openssl/compare/openssl-sys-v0.9.111...openssl-sys-v0.9.112 )
---
updated-dependencies:
- dependency-name: openssl
dependency-version: 0.10.76
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: openssl
- dependency-name: openssl-sys
dependency-version: 0.9.112
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: openssl
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 08:53:28 +09:00
dependabot[bot]
3f20619ee0
Bump socket2 from 0.6.2 to 0.6.3 ( #7373 )
...
Bumps [socket2](https://github.com/rust-lang/socket2 ) from 0.6.2 to 0.6.3.
- [Release notes](https://github.com/rust-lang/socket2/releases )
- [Changelog](https://github.com/rust-lang/socket2/blob/master/CHANGELOG.md )
- [Commits](https://github.com/rust-lang/socket2/compare/v0.6.2...v0.6.3 )
---
updated-dependencies:
- dependency-name: socket2
dependency-version: 0.6.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-12 11:00:24 +09:00
ShaharNaveh
5c5aff8fd9
Base implementation of _tokenize module
...
Port from PR #6240 by ShaharNaveh, adapted to current codebase.
Uses ruff_python_parser for tokenization via TokenizerIter.
2026-03-10 11:28:16 +09:00
dependabot[bot]
abfb51efc9
Bump uuid from 1.21.0 to 1.22.0 ( #7372 )
...
Bumps [uuid](https://github.com/uuid-rs/uuid ) from 1.21.0 to 1.22.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.21.0...v1.22.0 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 1.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-07 20:30:52 +09:00
dependabot[bot]
89889acc08
Bump rustls from 0.23.36 to 0.23.37 ( #7374 )
...
Bumps [rustls](https://github.com/rustls/rustls ) from 0.23.36 to 0.23.37.
- [Release notes](https://github.com/rustls/rustls/releases )
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rustls/rustls/compare/v/0.23.36...v/0.23.37 )
---
updated-dependencies:
- dependency-name: rustls
dependency-version: 0.23.37
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-07 20:29:23 +09:00
dependabot[bot]
58a0f74c76
Bump aws-lc-rs from 1.15.4 to 1.16.0 ( #7298 )
...
Bumps [aws-lc-rs](https://github.com/aws/aws-lc-rs ) from 1.15.4 to 1.16.0.
- [Release notes](https://github.com/aws/aws-lc-rs/releases )
- [Commits](https://github.com/aws/aws-lc-rs/compare/v1.15.4...v1.16.0 )
---
updated-dependencies:
- dependency-name: aws-lc-rs
dependency-version: 1.16.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-01 23:27:40 +09:00
Jiseok CHOI
be29462087
Fix _hashlib.compare_digest to reject non-ASCII strings ( #7280 )
...
Add non-ASCII string check to _hashlib.compare_digest, matching the
behavior of _operator._compare_digest. When both arguments are strings,
non-ASCII characters now correctly raise TypeError.
Also replace the non-constant-time == comparison with constant_time_eq
for proper timing-attack resistance, and return PyResult<bool> instead
of PyResult<PyObjectRef>.
2026-03-01 10:51:39 +09:00
dependabot[bot]
cdc7842bc4
Bump uuid from 1.20.0 to 1.21.0 ( #7258 )
...
Bumps [uuid](https://github.com/uuid-rs/uuid ) from 1.20.0 to 1.21.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.20.0...v1.21.0 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 1.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-28 22:07:49 +09:00
Jeong, YunWon
36cffabeda
xz2->liblzma and remove liblzma-sys
2026-02-27 17:39:12 +09:00
Jeong, YunWon
490a17f641
Implement Windows named mmap via CreateFileMappingW ( #7207 )
...
Use Win32 CreateFileMappingW + MapViewOfFile when tagname is
provided, enabling inter-process shared memory for
multiprocessing.heap.Arena. Anonymous mmaps without tagname
still use memmap2.
Remove expectedFailure from test_tagname in test_mmap.py.
2026-02-23 23:32:52 +09:00
Jeong, YunWon
6b4605280e
cap mt19937 version ( #7182 )
2026-02-17 20:02:28 +09:00
Jeong, YunWon
8e06707fc6
Implement _WindowsConsoleIO and _testconsole module
...
Add _WindowsConsoleIO class to _io module with ReadConsoleW/WriteConsoleW support.
Add _testconsole stdlib module with write_input for console input simulation.
Integrate console detection in io_open to use _WindowsConsoleIO for console handles.
2026-02-16 00:28:51 +09:00
Jeong, YunWon
12db02eaf0
Fix _hashlib
2026-02-14 21:40:04 +09:00
Jeong, YunWon and github-actions[bot]
f777416870
initial sandbox ( #7035 )
...
* Add host_env feature for sandbox isolation
Introduce a `host_env` feature flag that gates all host environment
access (filesystem, network, signals, processes). When disabled,
the VM operates in sandbox mode:
- _io module always available; FileIO gated by host_env
- SandboxStdio provides lightweight stdin/stdout/stderr via Rust std::io
- BytesIO/StringIO/BufferedIO/TextIOWrapper work without host_env
- open() returns UnsupportedOperation in sandbox
- stdlib modules (os, socket, signal, etc.) gated by host_env
- CI checks both host_env ON and OFF builds
* Auto-format: ruff check --select I --fix
---------
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-02-08 13:58:30 +00:00
dependabot[bot]
f709386ead
Bump flate2 from 1.1.8 to 1.1.9 ( #6991 )
...
* Bump flate2 from 1.1.8 to 1.1.9
Bumps [flate2](https://github.com/rust-lang/flate2-rs) from 1.1.8 to 1.1.9.
- [Release notes](https://github.com/rust-lang/flate2-rs/releases)
- [Commits](https://github.com/rust-lang/flate2-rs/compare/1.1.8...1.1.9)
---
updated-dependencies:
- dependency-name: flate2
dependency-version: 1.1.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
2026-02-04 14:30:59 +09:00
dependabot[bot]
0dd73170e5
Bump openssl-probe from 0.2.0 to 0.2.1
...
Bumps [openssl-probe](https://github.com/rustls/openssl-probe ) from 0.2.0 to 0.2.1.
- [Release notes](https://github.com/rustls/openssl-probe/releases )
- [Commits](https://github.com/rustls/openssl-probe/compare/0.2.0...0.2.1 )
---
updated-dependencies:
- dependency-name: openssl-probe
dependency-version: 0.2.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-01-26 23:47:39 +09:00
Lee Dogeon
49e6931c7e
Introduce flame_guard in rustpython-stdlib too ( #6722 )
2026-01-14 09:14:05 +09:00
dependabot[bot]
7e47212886
Bump flate2 from 1.1.5 to 1.1.8 ( #6711 )
...
Bumps [flate2](https://github.com/rust-lang/flate2-rs ) from 1.1.5 to 1.1.8.
- [Release notes](https://github.com/rust-lang/flate2-rs/releases )
- [Commits](https://github.com/rust-lang/flate2-rs/compare/1.1.5...1.1.8 )
---
updated-dependencies:
- dependency-name: flate2
dependency-version: 1.1.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 17:19:38 +09:00
42cc59a90c
Bump openssl-probe from 0.1.6 to 0.2.0 ( #6663 )
...
* Bump openssl-probe from 0.1.6 to 0.2.0
Bumps [openssl-probe](https://github.com/alexcrichton/openssl-probe ) from 0.1.6 to 0.2.0.
- [Release notes](https://github.com/alexcrichton/openssl-probe/releases )
- [Commits](https://github.com/alexcrichton/openssl-probe/compare/0.1.6...0.2.0 )
---
updated-dependencies:
- dependency-name: openssl-probe
dependency-version: 0.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* Fix openssl-probe 0.2.0 API compatibility (#6669 )
* Bump openssl-probe from 0.1.6 to 0.2.0
Bumps [openssl-probe](https://github.com/alexcrichton/openssl-probe ) from 0.1.6 to 0.2.0.
- [Release notes](https://github.com/alexcrichton/openssl-probe/releases )
- [Commits](https://github.com/alexcrichton/openssl-probe/compare/0.1.6...0.2.0 )
---
updated-dependencies:
- dependency-name: openssl-probe
dependency-version: 0.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* Initial plan
* Fix openssl-probe 0.2.0 API compatibility
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Copilot <198982749+Copilot@users.noreply.github.com >
Co-authored-by: youknowone <69878+youknowone@users.noreply.github.com >
2026-01-07 10:13:13 +09:00
dependabot[bot]
985961b013
Bump rustls from 0.23.35 to 0.23.36 ( #6666 )
...
Bumps [rustls](https://github.com/rustls/rustls ) from 0.23.35 to 0.23.36.
- [Release notes](https://github.com/rustls/rustls/releases )
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rustls/rustls/compare/v/0.23.35...v/0.23.36 )
---
updated-dependencies:
- dependency-name: rustls
dependency-version: 0.23.36
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-07 08:54:10 +09:00
7b9f0d9657
More tkinter ( #5784 )
...
* fix build
* fix usage of Tcl_GetVar2Ex
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
* no panic on mainloop
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
* add static var
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
* fix getvar
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
* add globalgetvar support
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
* formatting
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
* address review
* fix build
* Auto-format: cargo fmt --all
---------
Signed-off-by: Ashwin Naren <arihant2math@gmail.com >
Co-authored-by: Jeong YunWon <jeong@youknowone.org >
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2025-12-30 17:07:03 +09:00
Jiseok CHOI
00205aad14
Bump libsqlite3-sys from 0.28 to 0.36 ( #6472 )
...
* Bump libsqlite3-sys from 0.28 to 0.36
Update libsqlite3-sys to version 0.36 and adapt to API changes by
replacing sqlite3_close_v2 with sqlite3_close. The v2 variant is no
longer directly exported in the newer version.
Fixes #6471
* Fix clippy
2025-12-24 13:10:57 +09:00
dependabot[bot]
2342006b37
Bump aws-lc-rs from 1.15.1 to 1.15.2 ( #6469 )
...
Bumps [aws-lc-rs](https://github.com/aws/aws-lc-rs ) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/aws/aws-lc-rs/releases )
- [Commits](https://github.com/aws/aws-lc-rs/compare/v1.15.1...v1.15.2 )
---
updated-dependencies:
- dependency-name: aws-lc-rs
dependency-version: 1.15.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-23 08:57:03 +09:00
Jeong, YunWon
04d55fa5c6
Faulthandler ( #6400 )
2025-12-12 00:08:55 +09:00
dependabot[bot]
f723974924
Bump system-configuration from 0.6.1 to 0.7.0 ( #6385 )
...
Bumps [system-configuration](https://github.com/mullvad/system-configuration-rs ) from 0.6.1 to 0.7.0.
- [Changelog](https://github.com/mullvad/system-configuration-rs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/mullvad/system-configuration-rs/compare/v0.6.1...v0.7.0 )
---
updated-dependencies:
- dependency-name: system-configuration
dependency-version: 0.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 09:01:29 +09:00
dependabot[bot]
42b969b088
Bump oid-registry from 0.7.1 to 0.8.1 ( #6383 )
...
Bumps [oid-registry](https://github.com/rusticata/oid-registry ) from 0.7.1 to 0.8.1.
- [Commits](https://github.com/rusticata/oid-registry/compare/oid-registry-0.7.1...oid-registry-0.8.1 )
---
updated-dependencies:
- dependency-name: oid-registry
dependency-version: 0.8.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 09:01:05 +09:00
dependabot[bot]
904cc0a575
Bump pem-rfc7468 from 0.7.0 to 1.0.0 ( #6369 )
...
Bumps [pem-rfc7468](https://github.com/RustCrypto/formats ) from 0.7.0 to 1.0.0.
- [Commits](https://github.com/RustCrypto/formats/compare/pem-rfc7468/v0.7.0...pem-rfc7468/v1.0.0 )
---
updated-dependencies:
- dependency-name: pem-rfc7468
dependency-version: 1.0.0
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-09 10:46:14 +09:00
dependabot[bot]
df7694ca51
Bump x509-parser from 0.16.0 to 0.18.0 ( #6364 )
...
Bumps [x509-parser](https://github.com/rusticata/x509-parser ) from 0.16.0 to 0.18.0.
- [Changelog](https://github.com/rusticata/x509-parser/blob/x509-parser-0.18.0/CHANGELOG.md )
- [Commits](https://github.com/rusticata/x509-parser/compare/x509-parser-0.16.0...x509-parser-0.18.0 )
---
updated-dependencies:
- dependency-name: x509-parser
dependency-version: 0.18.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-09 06:24:38 +09:00
dependabot[bot]
d432cfd350
Bump uuid from 1.18.1 to 1.19.0 ( #6362 )
...
Bumps [uuid](https://github.com/uuid-rs/uuid ) from 1.18.1 to 1.19.0.
- [Release notes](https://github.com/uuid-rs/uuid/releases )
- [Commits](https://github.com/uuid-rs/uuid/compare/v1.18.1...v1.19.0 )
---
updated-dependencies:
- dependency-name: uuid
dependency-version: 1.19.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-09 06:08:04 +09:00
dependabot[bot]
2a425351e2
Bump phf from 0.11.3 to 0.13.1 ( #6345 )
...
Bumps [phf](https://github.com/rust-phf/rust-phf ) from 0.11.3 to 0.13.1.
- [Release notes](https://github.com/rust-phf/rust-phf/releases )
- [Changelog](https://github.com/rust-phf/rust-phf/blob/main/RELEASE_PROCESS.md )
- [Commits](https://github.com/rust-phf/rust-phf/compare/phf-v0.11.3...v0.13.1 )
---
updated-dependencies:
- dependency-name: phf
dependency-version: 0.13.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-08 23:55:58 +09:00
dependabot[bot]
4e6ef4150d
Bump webpki-roots from 0.26.11 to 1.0.4 ( #6347 )
...
Bumps [webpki-roots](https://github.com/rustls/webpki-roots ) from 0.26.11 to 1.0.4.
- [Release notes](https://github.com/rustls/webpki-roots/releases )
- [Commits](https://github.com/rustls/webpki-roots/compare/v/0.26.11...v/1.0.4 )
---
updated-dependencies:
- dependency-name: webpki-roots
dependency-version: 1.0.4
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-08 23:09:23 +09:00
Jeong, YunWon
590da47499
pin flate2 under 1.1.5 ( #6335 )
2025-12-07 12:10:09 +09:00
Jeong, YunWon
b3141d1231
mmap for windows ( #6329 )
2025-12-06 09:26:33 +09:00
dependabot[bot]
817f91b5bf
Bump xml from 1.0.1 to 1.2.0 ( #6292 )
...
Bumps [xml](https://github.com/kornelski/xml-rs ) from 1.0.1 to 1.2.0.
- [Changelog](https://github.com/kornelski/xml-rs/blob/main/Changelog.md )
- [Commits](https://github.com/kornelski/xml-rs/compare/1.0.1...1.2.0 )
---
updated-dependencies:
- dependency-name: xml
dependency-version: 1.2.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-25 05:29:53 +09:00
Shahar Naveh
88eca9693a
Move stdlib -> crates/stdlib ( #6268 )
2025-11-16 23:25:45 +09:00