Skip to content

Commit

Permalink
5.4.1 release
Browse files Browse the repository at this point in the history
  • Loading branch information
ingydotnet committed Jan 20, 2021
1 parent 2b37f15 commit ee37f46
Show file tree
Hide file tree
Showing 5 changed files with 16 additions and 21 deletions.
4 changes: 4 additions & 0 deletions CHANGES
Expand Up @@ -4,6 +4,10 @@ For a complete changelog, see:
* https://github.com/yaml/pyyaml/commits/
* https://bitbucket.org/xi/pyyaml/commits/

5.4.1 (2021-01-20)

* https://github.com/yaml/pyyaml/pull/480 -- Fix stub compat with older pyyaml versions that may unwittingly load it

5.4 (2021-01-19)

* https://github.com/yaml/pyyaml/pull/407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
Expand Down
27 changes: 9 additions & 18 deletions announcement.msg
@@ -1,34 +1,25 @@
From: Ingy döt Net <ingy@ingy.net>
To: python-list@python.org, python-announce@python.org, yaml-core@lists.sourceforge.net
Subject: [ANN] PyYAML-5.4 Released
Subject: [ANN] PyYAML-5.4.1 Released

=====================
Announcing PyYAML-5.4
=====================
=======================
Announcing PyYAML-5.4.1
=======================

A new release of PyYAML is now available:
https://github.com/yaml/pyyaml/releases/tag/5.4
https://github.com/yaml/pyyaml/releases/tag/5.4.1

This release contains a security fix for CVE-2020-14343. It removes the
python/module, python/object, and python/object/new tags from the FullLoader.
YAML that uses these tags must be loaded by UnsafeLoader, or a custom loader
that has explicitly enabled them.
This release contains a fix for AttributeError during module import in some
mixed version installations.

This release also adds Python wheels for manylinux1 (x86_64) and MacOS (x86_64)
with the libyaml extension included (built on libyaml 0.2.5).

PyYAML 5.4 will be the last release to support Python 2.7 (except for possible
PyYAML 5.4.1 will be the last release to support Python 2.7 (except for possible
critical bug fix releases).


Changes
=======

* https://github.com/yaml/pyyaml/pull/407 -- build modernization, remove distutils, fix metadata, build wheels, CI to GHA
* https://github.com/yaml/pyyaml/pull/472 -- fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
* https://github.com/yaml/pyyaml/pull/441 -- fix memory leak in implicit resolver setup
* https://github.com/yaml/pyyaml/pull/392 -- fix py2 copy support for timezone objects
* https://github.com/yaml/pyyaml/pull/378 -- fix compatibility with Jython
* https://github.com/yaml/pyyaml/pull/480 -- Fix stub compat with older pyyaml versions that may unwittingly load it


Resources
Expand Down
2 changes: 1 addition & 1 deletion lib/yaml/__init__.py
Expand Up @@ -8,7 +8,7 @@
from loader import *
from dumper import *

__version__ = '5.4'
__version__ = '5.4.1'

try:
from cyaml import *
Expand Down
2 changes: 1 addition & 1 deletion lib3/yaml/__init__.py
Expand Up @@ -8,7 +8,7 @@
from .loader import *
from .dumper import *

__version__ = '5.4'
__version__ = '5.4.1'
try:
from .cyaml import *
__with_libyaml__ = True
Expand Down
2 changes: 1 addition & 1 deletion setup.py
@@ -1,6 +1,6 @@

NAME = 'PyYAML'
VERSION = '5.4'
VERSION = '5.4.1'
DESCRIPTION = "YAML parser and emitter for Python"
LONG_DESCRIPTION = """\
YAML is a data serialization format designed for human readability
Expand Down

0 comments on commit ee37f46

Please sign in to comment.