chango.git, branch stable/4.0.x

[4.0.x] Added CVE-2023-24580 to security archive.

2023-02-14T08:53:46Z

Backport of ecafcaf634fcef93f9da8cb12795273dd1c3a576 from main

[4.0.x] Post-release version bump.

2023-02-14T08:10:50Z

[4.0.x] Bumped version for 4.0.10 release.

2023-02-14T08:09:00Z

[4.0.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.

2023-02-07T09:36:32Z

Thanks to Jakob Ackermann for the report.

[4.0.x] Added stub release notes for 4.0.10 and 3.2.18.

2023-02-07T09:13:28Z

Backport of 7e003428f96d616c1f77fed84882a95e63bc3644 from main

[4.0.x] Fixed thread termination in servers.tests.LiveServerPort on Python < 3.10.9.

2023-02-02T12:13:25Z

TestCase.doClassCleanups() cannot be called on Python < 3.10.9 because setUpClass()/tearDownClass() are called multiple times in LiveServerTestCase tests (refs #27079).

[4.0.x] Fixed thread termination in servers.tests.LiveServerPort on Python 3.10.9+.

2023-02-02T06:16:47Z

Class cleanups registered in TestCase subclasses are no longer called as TestCase.doClassCleanups() only cleans up the particular class, see https://github.com/python/cpython/commit/c2102136be569e6fc8ed90181f229b46d07142f8 Backport of d02a9f0cee84e3d23f676bdf2ab6aadbf4a5bfe8 from main.

[4.0.x] Added CVE-2023-23969 to security archive.

2023-02-01T11:10:34Z

Backport of 36e3eef7d5a4c88671d20a561788679d0d9c334c from main

[4.0.x] Ignored e565a5cd187197a6349e55d7a4c68a9e12e2fd20 formatting changes in git blame.

2023-02-01T10:52:55Z

[4.0.x] Refs #33476 -- Applied Black's 2023 stable style.

2023-02-01T10:52:33Z

Black 23.1.0 is released which, as the first release of the year, introduces the 2023 stable style. This incorporates most of last year's preview style. https://github.com/psf/black/releases/tag/23.1.0 Backport of 097e3a70c1481ee7b042b2edd91b2be86fb7b5b6 from main.