+++++++++++ Python News +++++++++++ What's New in Python 3.12.12 final? =================================== *Release date: 2025-10-09* Tools/Demos ----------- - gh-139330: SBOM generation tool didn't cross-check the version and checksum values against the ``Modules/expat/refresh.sh`` script, leading to the values becoming out-of-date during routine updates. Security -------- - gh-139700: Check consistency of the zip64 end of central directory record. Support records with "zip64 extensible data" if there are no bytes prepended to the ZIP file. - gh-139400: :mod:`xml.parsers.expat`: Make sure that parent Expat parsers are only garbage-collected once they are no longer referenced by subparsers created by :meth:`~xml.parsers.expat.xmlparser.ExternalEntityParserCreate`. Patch by Sebastian Pipping. - gh-135661: Fix parsing start and end tags in :class:`html.parser.HTMLParser` according to the HTML5 standard. * Whitespaces no longer accepted between ```` does not end the script section. * Vertical tabulation (``\v``) and non-ASCII whitespaces no longer recognized as whitespaces. The only whitespaces are ``\t\n\r\f`` and space. * Null character (U+0000) no longer ends the tag name. * Attributes and slashes after the tag name in end tags are now ignored, instead of terminating after the first ``>`` in quoted attribute value. E.g. ````. * Multiple slashes and whitespaces between the last attribute and closing ``>`` are now ignored in both start and end tags. E.g. ````. * Multiple ``=`` between attribute name and value are no longer collapsed. E.g. ```` produces attribute "foo" with value "=bar". - gh-135661: Fix CDATA section parsing in :class:`html.parser.HTMLParser` according to the HTML5 standard: ``] ]>`` and ``]] >`` no longer end the CDATA section. Add private method ``_set_support_cdata()`` which can be used to specify how to parse ``<[CDATA[`` --- as a CDATA section in foreign content (SVG or MathML) or as a bogus comment in the HTML namespace. - gh-102555: Fix comment parsing in :class:`html.parser.HTMLParser` according to the HTML5 standard. ``--!>`` now ends the comment. ``-- >`` no longer ends the comment. Support abnormally ended empty comments ``<-->`` and ``<--->``. - gh-135462: Fix quadratic complexity in processing specially crafted input in :class:`html.parser.HTMLParser`. End-of-file errors are now handled according to the HTML5 specs -- comments and declarations are automatically closed, tags are ignored. - gh-118350: Fix support of escapable raw text mode (elements "textarea" and "title") in :class:`html.parser.HTMLParser`. - gh-86155: :meth:`html.parser.HTMLParser.close` no longer loses data when the ``