|
1 | | -From: Ingy döt Net <ingy@ingy.net> |
| 1 | +From: Tina Müller <post@tinita.de> |
2 | 2 | To: python-list@python.org, python-announce@python.org, yaml-core@lists.sourceforge.net |
3 | | -Subject: [ANN] PyYAML-5.1.2: YAML parser and emitter for Python |
| 3 | +Subject: [ANN] PyYAML-5.2: YAML parser and emitter for Python |
4 | 4 |
|
5 | 5 | ======================= |
6 | | -Announcing PyYAML-5.1.2 |
| 6 | +Announcing PyYAML-5.2 |
7 | 7 | ======================= |
8 | 8 |
|
9 | | -A new minor release of PyYAML is now available: |
| 9 | +A new release of PyYAML is now available: |
10 | 10 | https://pypi.org/project/PyYAML/ |
11 | 11 |
|
12 | | -This is a maintenance re-release of PyYAML 5.1 with re-generated Cython |
13 | | -bindings to allow the extension to build properly for Python 3.8b2+. No code |
14 | | -changes were made in the PyYAML sources. |
| 12 | +This fixes some incompatibilities introduced in version 5.1 and also removes |
| 13 | +another possibility of loading arbitrary code. |
15 | 14 |
|
16 | 15 | Changes |
17 | 16 | ======= |
18 | 17 |
|
19 | | -* None |
| 18 | +* Repair incompatibilities introduced with 5.1. The default Loader was changed, |
| 19 | + but several methods like add_constructor still used the old default |
| 20 | + https://github.com/yaml/pyyaml/pull/279 -- A more flexible fix for custom tag constructors |
| 21 | + https://github.com/yaml/pyyaml/pull/287 -- Change default loader for yaml.add_constructor |
| 22 | + https://github.com/yaml/pyyaml/pull/305 -- Change default loader for add_implicit_resolver, add_path_resolver |
| 23 | +* Make FullLoader safer by removing python/object/apply from the default FullLoader |
| 24 | + https://github.com/yaml/pyyaml/pull/347 -- Move constructor for object/apply to UnsafeConstructor |
| 25 | +* Fix bug introduced in 5.1 where quoting went wrong on systems with sys.maxunicode <= 0xffff |
| 26 | + https://github.com/yaml/pyyaml/pull/276 -- Fix logic for quoting special characters |
| 27 | +* Other PRs: |
| 28 | + https://github.com/yaml/pyyaml/pull/280 -- Update CHANGES for 5.1 |
20 | 29 |
|
21 | 30 | Resources |
22 | 31 | ========= |
|
0 commit comments