+++++++++++
Python News
+++++++++++
What's New in Python 3.12.12 final?
===================================
*Release date: 2025-10-09*
Tools/Demos
-----------
- gh-139330: SBOM generation tool didn't cross-check the version and
checksum values against the ``Modules/expat/refresh.sh`` script, leading
to the values becoming out-of-date during routine updates.
Security
--------
- gh-139700: Check consistency of the zip64 end of central directory record.
Support records with "zip64 extensible data" if there are no bytes
prepended to the ZIP file.
- gh-139400: :mod:`xml.parsers.expat`: Make sure that parent Expat parsers
are only garbage-collected once they are no longer referenced by
subparsers created by
:meth:`~xml.parsers.expat.xmlparser.ExternalEntityParserCreate`. Patch by
Sebastian Pipping.
- gh-135661: Fix parsing start and end tags in
:class:`html.parser.HTMLParser` according to the HTML5 standard.
* Whitespaces no longer accepted between ```` and the tag name.
E.g. `` script>`` does not end the script section.
* Vertical tabulation (``\v``) and non-ASCII whitespaces no longer recognized
as whitespaces. The only whitespaces are ``\t\n\r\f`` and space.
* Null character (U+0000) no longer ends the tag name.
* Attributes and slashes after the tag name in end tags are now ignored,
instead of terminating after the first ``>`` in quoted attribute value.
E.g. ``"/>``.
* Multiple slashes and whitespaces between the last attribute and closing ``>``
are now ignored in both start and end tags. E.g. ````.
* Multiple ``=`` between attribute name and value are no longer collapsed.
E.g. ```` produces attribute "foo" with value "=bar".
- gh-135661: Fix CDATA section parsing in :class:`html.parser.HTMLParser`
according to the HTML5 standard: ``] ]>`` and ``]] >`` no longer end the
CDATA section. Add private method ``_set_support_cdata()`` which can be
used to specify how to parse ``<[CDATA[`` --- as a CDATA section in
foreign content (SVG or MathML) or as a bogus comment in the HTML
namespace.
- gh-102555: Fix comment parsing in :class:`html.parser.HTMLParser`
according to the HTML5 standard. ``--!>`` now ends the comment. ``-- >``
no longer ends the comment. Support abnormally ended empty comments
``<-->`` and ``<--->``.
- gh-135462: Fix quadratic complexity in processing specially crafted input
in :class:`html.parser.HTMLParser`. End-of-file errors are now handled
according to the HTML5 specs -- comments and declarations are
automatically closed, tags are ignored.
- gh-118350: Fix support of escapable raw text mode (elements "textarea" and
"title") in :class:`html.parser.HTMLParser`.
- gh-86155: :meth:`html.parser.HTMLParser.close` no longer loses data when
the ``