diff --git a/CHANGES b/CHANGES index 876bd33c..8d647a59 100644 --- a/CHANGES +++ b/CHANGES @@ -4,6 +4,10 @@ For a complete changelog, see: * https://github.com/yaml/pyyaml/commits/ * https://bitbucket.org/xi/pyyaml/commits/ +5.4.1 (2021-01-20) + +* https://github.com/yaml/pyyaml/pull/480 -- Fix stub compat with older pyyaml versions that may unwittingly load it + 5.4 (2021-01-19) * https://github.com/yaml/pyyaml/pull/407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA diff --git a/announcement.msg b/announcement.msg index 118d5e35..9117d510 100644 --- a/announcement.msg +++ b/announcement.msg @@ -1,34 +1,25 @@ From: Ingy döt Net To: python-list@python.org, python-announce@python.org, yaml-core@lists.sourceforge.net -Subject: [ANN] PyYAML-5.4 Released +Subject: [ANN] PyYAML-5.4.1 Released -===================== -Announcing PyYAML-5.4 -===================== +======================= +Announcing PyYAML-5.4.1 +======================= A new release of PyYAML is now available: -https://github.com/yaml/pyyaml/releases/tag/5.4 +https://github.com/yaml/pyyaml/releases/tag/5.4.1 -This release contains a security fix for CVE-2020-14343. It removes the -python/module, python/object, and python/object/new tags from the FullLoader. -YAML that uses these tags must be loaded by UnsafeLoader, or a custom loader -that has explicitly enabled them. +This release contains a fix for AttributeError during module import in some +mixed version installations. -This release also adds Python wheels for manylinux1 (x86_64) and MacOS (x86_64) -with the libyaml extension included (built on libyaml 0.2.5). - -PyYAML 5.4 will be the last release to support Python 2.7 (except for possible +PyYAML 5.4.1 will be the last release to support Python 2.7 (except for possible critical bug fix releases). Changes ======= -* https://github.com/yaml/pyyaml/pull/407 -- build modernization, remove distutils, fix metadata, build wheels, CI to GHA -* https://github.com/yaml/pyyaml/pull/472 -- fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader -* https://github.com/yaml/pyyaml/pull/441 -- fix memory leak in implicit resolver setup -* https://github.com/yaml/pyyaml/pull/392 -- fix py2 copy support for timezone objects -* https://github.com/yaml/pyyaml/pull/378 -- fix compatibility with Jython +* https://github.com/yaml/pyyaml/pull/480 -- Fix stub compat with older pyyaml versions that may unwittingly load it Resources diff --git a/lib/yaml/__init__.py b/lib/yaml/__init__.py index 1263d96f..3c988198 100644 --- a/lib/yaml/__init__.py +++ b/lib/yaml/__init__.py @@ -8,7 +8,7 @@ from loader import * from dumper import * -__version__ = '5.4' +__version__ = '5.4.1' try: from cyaml import * diff --git a/lib3/yaml/__init__.py b/lib3/yaml/__init__.py index ee3d4b3e..86d07b55 100644 --- a/lib3/yaml/__init__.py +++ b/lib3/yaml/__init__.py @@ -8,7 +8,7 @@ from .loader import * from .dumper import * -__version__ = '5.4' +__version__ = '5.4.1' try: from .cyaml import * __with_libyaml__ = True diff --git a/setup.py b/setup.py index ed2487d9..d7476c61 100644 --- a/setup.py +++ b/setup.py @@ -1,6 +1,6 @@ NAME = 'PyYAML' -VERSION = '5.4' +VERSION = '5.4.1' DESCRIPTION = "YAML parser and emitter for Python" LONG_DESCRIPTION = """\ YAML is a data serialization format designed for human readability