summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorIngy döt Net <ingy@ingy.net>2021-01-20 16:38:14 -0500
committerIngy döt Net <ingy@ingy.net>2021-01-20 16:40:50 -0500
commitee37f4653c08fc07aecff69cfd92848e6b1a540e (patch)
treed045d2ffa3b96544b5c43e6254063ab2369e3c40
parent2b37f155d4313ea352f8576d84dda3025b8edf9c (diff)
downloadpyyaml-git-ee37f4653c08fc07aecff69cfd92848e6b1a540e.tar.gz
5.4.1 release5.4.1
-rw-r--r--CHANGES4
-rw-r--r--announcement.msg27
-rw-r--r--lib/yaml/__init__.py2
-rw-r--r--lib3/yaml/__init__.py2
-rw-r--r--setup.py2
5 files changed, 16 insertions, 21 deletions
diff --git a/CHANGES b/CHANGES
index 876bd33..8d647a5 100644
--- a/CHANGES
+++ b/CHANGES
@@ -4,6 +4,10 @@ For a complete changelog, see:
* https://github.com/yaml/pyyaml/commits/
* https://bitbucket.org/xi/pyyaml/commits/
+5.4.1 (2021-01-20)
+
+* https://github.com/yaml/pyyaml/pull/480 -- Fix stub compat with older pyyaml versions that may unwittingly load it
+
5.4 (2021-01-19)
* https://github.com/yaml/pyyaml/pull/407 -- Build modernization, remove distutils, fix metadata, build wheels, CI to GHA
diff --git a/announcement.msg b/announcement.msg
index 118d5e3..9117d51 100644
--- a/announcement.msg
+++ b/announcement.msg
@@ -1,34 +1,25 @@
From: Ingy döt Net <ingy@ingy.net>
To: python-list@python.org, python-announce@python.org, yaml-core@lists.sourceforge.net
-Subject: [ANN] PyYAML-5.4 Released
+Subject: [ANN] PyYAML-5.4.1 Released
-=====================
-Announcing PyYAML-5.4
-=====================
+=======================
+Announcing PyYAML-5.4.1
+=======================
A new release of PyYAML is now available:
-https://github.com/yaml/pyyaml/releases/tag/5.4
+https://github.com/yaml/pyyaml/releases/tag/5.4.1
-This release contains a security fix for CVE-2020-14343. It removes the
-python/module, python/object, and python/object/new tags from the FullLoader.
-YAML that uses these tags must be loaded by UnsafeLoader, or a custom loader
-that has explicitly enabled them.
+This release contains a fix for AttributeError during module import in some
+mixed version installations.
-This release also adds Python wheels for manylinux1 (x86_64) and MacOS (x86_64)
-with the libyaml extension included (built on libyaml 0.2.5).
-
-PyYAML 5.4 will be the last release to support Python 2.7 (except for possible
+PyYAML 5.4.1 will be the last release to support Python 2.7 (except for possible
critical bug fix releases).
Changes
=======
-* https://github.com/yaml/pyyaml/pull/407 -- build modernization, remove distutils, fix metadata, build wheels, CI to GHA
-* https://github.com/yaml/pyyaml/pull/472 -- fix for CVE-2020-14343, moves arbitrary python tags to UnsafeLoader
-* https://github.com/yaml/pyyaml/pull/441 -- fix memory leak in implicit resolver setup
-* https://github.com/yaml/pyyaml/pull/392 -- fix py2 copy support for timezone objects
-* https://github.com/yaml/pyyaml/pull/378 -- fix compatibility with Jython
+* https://github.com/yaml/pyyaml/pull/480 -- Fix stub compat with older pyyaml versions that may unwittingly load it
Resources
diff --git a/lib/yaml/__init__.py b/lib/yaml/__init__.py
index 1263d96..3c98819 100644
--- a/lib/yaml/__init__.py
+++ b/lib/yaml/__init__.py
@@ -8,7 +8,7 @@ from nodes import *
from loader import *
from dumper import *
-__version__ = '5.4'
+__version__ = '5.4.1'
try:
from cyaml import *
diff --git a/lib3/yaml/__init__.py b/lib3/yaml/__init__.py
index ee3d4b3..86d07b5 100644
--- a/lib3/yaml/__init__.py
+++ b/lib3/yaml/__init__.py
@@ -8,7 +8,7 @@ from .nodes import *
from .loader import *
from .dumper import *
-__version__ = '5.4'
+__version__ = '5.4.1'
try:
from .cyaml import *
__with_libyaml__ = True
diff --git a/setup.py b/setup.py
index ed2487d..d7476c6 100644
--- a/setup.py
+++ b/setup.py
@@ -1,6 +1,6 @@
NAME = 'PyYAML'
-VERSION = '5.4'
+VERSION = '5.4.1'
DESCRIPTION = "YAML parser and emitter for Python"
LONG_DESCRIPTION = """\
YAML is a data serialization format designed for human readability