Update to Python 3.13.13, ok kmos sthen

https://www.python.org/downloads/release/python-31313/

Apply the fixes for CVE-2026-6100 (also ok kmos sthen) and on top of this
pull in an additional missing bit in the fix for CVE-2026-4519.
This commit is contained in:
tb
2026-04-14 10:51:23 +00:00
parent 6dec9bf1b8
commit 51c3d04d4b
15 changed files with 141 additions and 277 deletions
+1 -1
View File
@@ -3,7 +3,7 @@
# requirement of the PSF license, if it constitutes a change to
# Python itself.
FULL_VERSION = 3.13.12
FULL_VERSION = 3.13.13
SHARED_LIBS = python3.13 0.0
VERSION_SPEC = >=3.13,<3.14
PORTROACH = limit:^3\.12
+2 -2
View File
@@ -1,2 +1,2 @@
SHA256 (Python-3.13.12.tgz) = EufLFwrS0aaa7pahzH/I3lsel6K9rFFoOj2wFuyaKZY=
SIZE (Python-3.13.12.tgz) = 29803459
SHA256 (Python-3.13.13.tgz) = +c3nsOLsgWXXMm4qD1nqJobOnQxhfbuz1mp+VNMbdLk=
SIZE (Python-3.13.13.tgz) = 29842908
+1 -1
View File
@@ -24,7 +24,7 @@ which results in loading an incorrect version in some cases.
8. Work around expat_config.h missing from base.
9. Cherry-pick fixes for CVE-2026-3644, CVE-2026-4224
9. Cherry-pick fixes for CVE-2026-4519, CVE-2026-6100.
These changes are available in the OpenBSD CVS repository
<http://www.openbsd.org/anoncvs.html> in ports/lang/python/3.
@@ -1,71 +0,0 @@
https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
From d16ecc6c3626f0e2cc8f08c309c83934e8a979dd Mon Sep 17 00:00:00 2001
From: "Miss Islington (bot)"
<31488909+miss-islington@users.noreply.github.com>
Date: Mon, 16 Mar 2026 15:05:13 +0100
Subject: [PATCH] [3.13] gh-145599, CVE 2026-3644: Reject control characters in
`http.cookies.Morsel.update()` (GH-145600) (#146024)
gh-145599, CVE 2026-3644: Reject control characters in `http.cookies.Morsel.update()` (GH-145600)
Reject control characters in `http.cookies.Morsel.update()` and `http.cookies.BaseCookie.js_output`.
(cherry picked from commit 57e88c1cf95e1481b94ae57abe1010469d47a6b4)
Index: Lib/http/cookies.py
--- Lib/http/cookies.py.orig
+++ Lib/http/cookies.py
@@ -335,9 +335,16 @@ class Morsel(dict):
key = key.lower()
if key not in self._reserved:
raise CookieError("Invalid attribute %r" % (key,))
+ if _has_control_character(key, val):
+ raise CookieError("Control characters are not allowed in "
+ f"cookies {key!r} {val!r}")
data[key] = val
dict.update(self, data)
+ def __ior__(self, values):
+ self.update(values)
+ return self
+
def isReservedKey(self, K):
return K.lower() in self._reserved
@@ -363,9 +370,15 @@ class Morsel(dict):
}
def __setstate__(self, state):
- self._key = state['key']
- self._value = state['value']
- self._coded_value = state['coded_value']
+ key = state['key']
+ value = state['value']
+ coded_value = state['coded_value']
+ if _has_control_character(key, value, coded_value):
+ raise CookieError("Control characters are not allowed in cookies "
+ f"{key!r} {value!r} {coded_value!r}")
+ self._key = key
+ self._value = value
+ self._coded_value = coded_value
def output(self, attrs=None, header="Set-Cookie:"):
return "%s %s" % (header, self.OutputString(attrs))
@@ -377,13 +390,16 @@ class Morsel(dict):
def js_output(self, attrs=None):
# Print javascript
+ output_string = self.OutputString(attrs)
+ if _has_control_character(output_string):
+ raise CookieError("Control characters are not allowed in cookies")
return """
<script type="text/javascript">
<!-- begin hiding
document.cookie = \"%s\";
// end hiding -->
</script>
- """ % (self.OutputString(attrs).replace('"', r'\"'))
+ """ % (output_string.replace('"', r'\"'))
def OutputString(self, attrs=None):
# Build up our result
@@ -1,79 +0,0 @@
https://mail.python.org/archives/list/security-announce@python.org/thread/H6CADMBCDRFGWCMOXWUIHFJNV43GABJ7/
From d16ecc6c3626f0e2cc8f08c309c83934e8a979dd Mon Sep 17 00:00:00 2001
From: "Miss Islington (bot)"
<31488909+miss-islington@users.noreply.github.com>
Date: Mon, 16 Mar 2026 15:05:13 +0100
Subject: [PATCH] [3.13] gh-145599, CVE 2026-3644: Reject control
characters in
`http.cookies.Morsel.update()` (GH-145600) (#146024)
gh-145599, CVE 2026-3644: Reject control characters in
`http.cookies.Morsel.update()` (GH-145600)
Reject control characters in `http.cookies.Morsel.update()` and
`http.cookies.BaseCookie.js_output`.
(cherry picked from commit 57e88c1cf95e1481b94ae57abe1010469d47a6b4)
Index: Lib/test/test_http_cookies.py
--- Lib/test/test_http_cookies.py.orig
+++ Lib/test/test_http_cookies.py
@@ -574,6 +574,14 @@ class MorselTests(unittest.TestCase):
with self.assertRaises(cookies.CookieError):
morsel["path"] = c0
+ # .__setstate__()
+ with self.assertRaises(cookies.CookieError):
+ morsel.__setstate__({'key': c0, 'value': 'val', 'coded_value': 'coded'})
+ with self.assertRaises(cookies.CookieError):
+ morsel.__setstate__({'key': 'key', 'value': c0, 'coded_value': 'coded'})
+ with self.assertRaises(cookies.CookieError):
+ morsel.__setstate__({'key': 'key', 'value': 'val', 'coded_value': c0})
+
# .setdefault()
with self.assertRaises(cookies.CookieError):
morsel.setdefault("path", c0)
@@ -588,6 +596,18 @@ class MorselTests(unittest.TestCase):
with self.assertRaises(cookies.CookieError):
morsel.set("path", "val", c0)
+ # .update()
+ with self.assertRaises(cookies.CookieError):
+ morsel.update({"path": c0})
+ with self.assertRaises(cookies.CookieError):
+ morsel.update({c0: "val"})
+
+ # .__ior__()
+ with self.assertRaises(cookies.CookieError):
+ morsel |= {"path": c0}
+ with self.assertRaises(cookies.CookieError):
+ morsel |= {c0: "val"}
+
def test_control_characters_output(self):
# Tests that even if the internals of Morsel are modified
# that a call to .output() has control character safeguards.
@@ -607,6 +627,24 @@ class MorselTests(unittest.TestCase):
cookie["cookie"] = morsel
with self.assertRaises(cookies.CookieError):
cookie.output()
+
+ # Tests that .js_output() also has control character safeguards.
+ for c0 in support.control_characters_c0():
+ morsel = cookies.Morsel()
+ morsel.set("key", "value", "coded-value")
+ morsel._key = c0 # Override private variable.
+ cookie = cookies.SimpleCookie()
+ cookie["cookie"] = morsel
+ with self.assertRaises(cookies.CookieError):
+ cookie.js_output()
+
+ morsel = cookies.Morsel()
+ morsel.set("key", "value", "coded-value")
+ morsel._coded_value = c0 # Override private variable.
+ cookie = cookies.SimpleCookie()
+ cookie["cookie"] = morsel
+ with self.assertRaises(cookies.CookieError):
+ cookie.js_output()
def load_tests(loader, tests, pattern):
@@ -1,47 +0,0 @@
https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/
From 196edfb06a7458377d4d0f4b3cd41724c1f3bd4a Mon Sep 17 00:00:00 2001
From: "Miss Islington (bot)"
<31488909+miss-islington@users.noreply.github.com>
Date: Mon, 16 Mar 2026 10:09:27 +0100
Subject: [PATCH] [3.13] gh-145986: Avoid unbound C recursion in
`conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987) (#145996)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
* gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987)
Fix C stack overflow (CVE-2026-4224) when an Expat parser
with a registered `ElementDeclHandler` parses inline DTD
containing deeply nested content model.
---------
(cherry picked from commit eb0e8be3a7e11b87d198a2c3af1ed0eccf532768)
Index: Lib/test/test_pyexpat.py
--- Lib/test/test_pyexpat.py.orig
+++ Lib/test/test_pyexpat.py
@@ -688,6 +688,22 @@ class ElementDeclHandlerTest(unittest.TestCase):
parser.ElementDeclHandler = lambda _1, _2: None
self.assertRaises(TypeError, parser.Parse, data, True)
+ def test_deeply_nested_content_model(self):
+ # This should raise a RecursionError and not crash.
+ # See https://github.com/python/cpython/issues/145986.
+ N = 500_000
+ data = (
+ b'<!DOCTYPE root [\n<!ELEMENT root '
+ + b'(a, ' * N + b'a' + b')' * N
+ + b'>\n]>\n<root/>\n'
+ )
+
+ parser = expat.ParserCreate()
+ parser.ElementDeclHandler = lambda _1, _2: None
+ with support.infinite_recursion():
+ with self.assertRaises(RecursionError):
+ parser.Parse(data)
+
class MalformedInputTest(unittest.TestCase):
def test1(self):
xml = b"\0\r\n"
@@ -0,0 +1,26 @@
Fix fix for CVE 2026-4519
A bypass in :mod:`webbrowser` allowed URLs prefixed with ``%action`` to pass
the dash-prefix safety check.
https://github.com/python/cpython/pull/148517
Index: Lib/test/test_webbrowser.py
--- Lib/test/test_webbrowser.py.orig
+++ Lib/test/test_webbrowser.py
@@ -118,6 +118,15 @@ class ChromeCommandTest(CommandTestMixin, unittest.Tes
arguments=[URL],
kw=dict(new=999))
+ def test_reject_action_dash_prefixes(self):
+ browser = self.browser_class(name=CMD_NAME)
+ with self.assertRaises(ValueError):
+ browser.open('%action--incognito')
+ # new=1: action is "--new-window", so "%action" itself expands to
+ # a dash-prefixed flag even with no dash in the original URL.
+ with self.assertRaises(ValueError):
+ browser.open('%action', new=1)
+
class EdgeCommandTest(CommandTestMixin, unittest.TestCase):
@@ -0,0 +1,28 @@
Fix fix for CVE 2026-4519
A bypass in :mod:`webbrowser` allowed URLs prefixed with ``%action`` to pass
the dash-prefix safety check.
https://github.com/python/cpython/pull/148517
Index: Lib/webbrowser.py
--- Lib/webbrowser.py.orig
+++ Lib/webbrowser.py
@@ -275,7 +275,6 @@ class UnixBrowser(BaseBrowser):
def open(self, url, new=0, autoraise=True):
sys.audit("webbrowser.open", url)
- self._check_url(url)
if new == 0:
action = self.remote_action
elif new == 1:
@@ -289,7 +288,9 @@ class UnixBrowser(BaseBrowser):
raise Error("Bad 'new' parameter to open(); "
f"expected 0, 1, or 2, got {new}")
- args = [arg.replace("%s", url).replace("%action", action)
+ self._check_url(url.replace("%action", action))
+
+ args = [arg.replace("%action", action).replace("%s", url)
for arg in self.remote_args]
args = [arg for arg in args if arg]
success = self._invoke(args, True, autoraise, url)
@@ -0,0 +1,21 @@
CVE-2026-6100:
Fix a dangling input pointer in :class:`lzma.LZMADecompressor`,
:class:`bz2.BZ2Decompressor`, and internal :class:`!zlib._ZlibDecompressor`
when memory allocation fails with :exc:`MemoryError`, which could let a
subsequent :meth:`!decompress` call read or write through a stale pointer to
the already-released caller buffer.
https://github.com/python/cpython/pull/148479
Index: Modules/_bz2module.c
--- Modules/_bz2module.c.orig
+++ Modules/_bz2module.c
@@ -589,6 +589,7 @@ decompress(BZ2Decompressor *d, char *data, size_t len,
return result;
error:
+ bzs->next_in = NULL;
Py_XDECREF(result);
return NULL;
}
@@ -0,0 +1,21 @@
CVE-2026-6100:
Fix a dangling input pointer in :class:`lzma.LZMADecompressor`,
:class:`bz2.BZ2Decompressor`, and internal :class:`!zlib._ZlibDecompressor`
when memory allocation fails with :exc:`MemoryError`, which could let a
subsequent :meth:`!decompress` call read or write through a stale pointer to
the already-released caller buffer.
https://github.com/python/cpython/pull/148479
Index: Modules/_lzmamodule.c
--- Modules/_lzmamodule.c.orig
+++ Modules/_lzmamodule.c
@@ -1112,6 +1112,7 @@ decompress(Decompressor *d, uint8_t *data, size_t len,
return result;
error:
+ lzs->next_in = NULL;
Py_XDECREF(result);
return NULL;
}
+1 -61
View File
@@ -2,41 +2,10 @@
see textproc/xmlwf for another approach) needs to be kept unless expat
in base starts providing this config header
- other hunks are:
https://mail.python.org/archives/list/security-announce@python.org/thread/5M7CGUW3XBRY7II4DK43KF7NQQ3TPZ6R/
From 196edfb06a7458377d4d0f4b3cd41724c1f3bd4a Mon Sep 17 00:00:00 2001
From: "Miss Islington (bot)"
<31488909+miss-islington@users.noreply.github.com>
Date: Mon, 16 Mar 2026 10:09:27 +0100
Subject: [PATCH] [3.13] gh-145986: Avoid unbound C recursion in
`conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987) (#145996)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
* gh-145986: Avoid unbound C recursion in `conv_content_model` in `pyexpat.c` (CVE 2026-4224) (GH-145987)
Fix C stack overflow (CVE-2026-4224) when an Expat parser
with a registered `ElementDeclHandler` parses inline DTD
containing deeply nested content model.
---------
(cherry picked from commit eb0e8be3a7e11b87d198a2c3af1ed0eccf532768)
Index: Modules/pyexpat.c
--- Modules/pyexpat.c.orig
+++ Modules/pyexpat.c
@@ -3,6 +3,7 @@
#endif
#include "Python.h"
+#include "pycore_ceval.h" // _Py_EnterRecursiveCall()
#include "pycore_import.h" // _PyImport_SetModule()
#include "pycore_pyhash.h" // _Py_HashSecret
#include "pycore_traceback.h" // _PyTraceback_Add()
@@ -10,7 +11,6 @@
@@ -11,7 +11,6 @@
#include <stdbool.h>
#include <stddef.h> // offsetof()
@@ -44,32 +13,3 @@ Index: Modules/pyexpat.c
#include "expat.h"
#include "pyexpat.h"
@@ -572,6 +572,10 @@ static PyObject *
conv_content_model(XML_Content * const model,
PyObject *(*conv_string)(const XML_Char *))
{
+ if (_Py_EnterRecursiveCall(" in conv_content_model")) {
+ return NULL;
+ }
+
PyObject *result = NULL;
PyObject *children = PyTuple_New(model->numchildren);
int i;
@@ -583,7 +587,7 @@ conv_content_model(XML_Content * const model,
conv_string);
if (child == NULL) {
Py_XDECREF(children);
- return NULL;
+ goto done;
}
PyTuple_SET_ITEM(children, i, child);
}
@@ -591,6 +595,8 @@ conv_content_model(XML_Content * const model,
model->type, model->quant,
conv_string,model->name, children);
}
+done:
+ _Py_LeaveRecursiveCall();
return result;
}
@@ -0,0 +1,21 @@
CVE-2026-6100:
Fix a dangling input pointer in :class:`lzma.LZMADecompressor`,
:class:`bz2.BZ2Decompressor`, and internal :class:`!zlib._ZlibDecompressor`
when memory allocation fails with :exc:`MemoryError`, which could let a
subsequent :meth:`!decompress` call read or write through a stale pointer to
the already-released caller buffer.
https://github.com/python/cpython/pull/148479
Index: Modules/zlibmodule.c
--- Modules/zlibmodule.c.orig
+++ Modules/zlibmodule.c
@@ -1675,6 +1675,7 @@ decompress(ZlibDecompressor *self, uint8_t *data,
return result;
error:
+ self->zst.next_in = NULL;
Py_XDECREF(result);
return NULL;
}
+1 -1
View File
@@ -49,7 +49,7 @@ Index: configure.ac
# Any changes made here should be reflected in the GCC+Darwin case below
PGO_PROF_GEN_FLAG="-fprofile-instr-generate"
PGO_PROF_USE_FLAG="-fprofile-instr-use=\"\$(shell pwd)/code.profclangd\""
@@ -4366,11 +4367,7 @@ dnl Detect Tcl/Tk. Use pkg-config if available.
@@ -4369,11 +4370,7 @@ dnl Detect Tcl/Tk. Use pkg-config if available.
dnl
found_tcltk=no
for _QUERY in \
+3 -3
View File
@@ -2,6 +2,8 @@
@option is-branch
@conflict python->=3,<4
@conflict python3-*
@conflict glade-*
@conflict py3-bsddb3-*
@pkgpath lang/python/3.8,-main
@pkgpath lang/python/3.9,-main
@pkgpath lang/python/3.10,-main
@@ -9,8 +11,6 @@
@pkgpath meta/python3
@pkgpath devel/glade
@pkgpath databases/py-bsddb3
@conflict glade-*
@conflict py3-bsddb3-*
bin/pydoc3
bin/pydoc3.13
bin/python3
@@ -1809,7 +1809,7 @@ lib/python3.13/ensurepip/__pycache__/_uninstall.cpython-313.opt-1.pyc
lib/python3.13/ensurepip/__pycache__/_uninstall.cpython-313.opt-2.pyc
lib/python3.13/ensurepip/__pycache__/_uninstall.cpython-313.pyc
lib/python3.13/ensurepip/_bundled/
lib/python3.13/ensurepip/_bundled/pip-25.3-py3-none-any.whl
lib/python3.13/ensurepip/_bundled/pip-26.0.1-py3-none-any.whl
lib/python3.13/ensurepip/_uninstall.py
lib/python3.13/enum.py
lib/python3.13/filecmp.py
+15 -11
View File
@@ -1,10 +1,10 @@
@option no-default-conflict
@option is-branch
@conflict python-tests->=3,<4
@pkgpath lang/python/3.8,-tests
@pkgpath lang/python/3.9,-tests
@option is-branch
@option no-default-conflict
@pkgpath lang/python/3.10,-tests
@pkgpath lang/python/3.11,-tests
@pkgpath lang/python/3.8,-tests
@pkgpath lang/python/3.9,-tests
lib/python3.13/test/
lib/python3.13/test/NormalizationTest-3.2.0.txt
lib/python3.13/test/__init__.py
@@ -91,6 +91,9 @@ lib/python3.13/test/__pycache__/mp_preload.cpython-313.pyc
lib/python3.13/test/__pycache__/mp_preload_flush.cpython-313.opt-1.pyc
lib/python3.13/test/__pycache__/mp_preload_flush.cpython-313.opt-2.pyc
lib/python3.13/test/__pycache__/mp_preload_flush.cpython-313.pyc
lib/python3.13/test/__pycache__/mp_preload_large_sysargv.cpython-313.opt-1.pyc
lib/python3.13/test/__pycache__/mp_preload_large_sysargv.cpython-313.opt-2.pyc
lib/python3.13/test/__pycache__/mp_preload_large_sysargv.cpython-313.pyc
lib/python3.13/test/__pycache__/mp_preload_main.cpython-313.opt-1.pyc
lib/python3.13/test/__pycache__/mp_preload_main.cpython-313.opt-2.pyc
lib/python3.13/test/__pycache__/mp_preload_main.cpython-313.pyc
@@ -1785,6 +1788,7 @@ lib/python3.13/test/mock_socket.py
lib/python3.13/test/mp_fork_bomb.py
lib/python3.13/test/mp_preload.py
lib/python3.13/test/mp_preload_flush.py
lib/python3.13/test/mp_preload_large_sysargv.py
lib/python3.13/test/mp_preload_main.py
lib/python3.13/test/mp_preload_sysargv.py
lib/python3.13/test/multibytecodec_support.py
@@ -3490,8 +3494,8 @@ lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/_
lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/__pycache__/a_test.cpython-313.opt-1.pyc
lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/__pycache__/a_test.cpython-313.opt-2.pyc
lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/__pycache__/a_test.cpython-313.pyc
lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/a_test/
lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/a_test.py
lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/a_test/
lib/python3.13/test/test_importlib/namespace_pkgs/module_and_namespace_package/a_test/empty
lib/python3.13/test/test_importlib/namespace_pkgs/nested_portion1.zip
lib/python3.13/test/test_importlib/namespace_pkgs/not_a_namespace_pkg/
@@ -4051,9 +4055,6 @@ lib/python3.13/test/test_pyrepl/__pycache__/__init__.cpython-313.pyc
lib/python3.13/test/test_pyrepl/__pycache__/__main__.cpython-313.opt-1.pyc
lib/python3.13/test/test_pyrepl/__pycache__/__main__.cpython-313.opt-2.pyc
lib/python3.13/test/test_pyrepl/__pycache__/__main__.cpython-313.pyc
lib/python3.13/test/test_pyrepl/__pycache__/eio_test_script.cpython-313.opt-1.pyc
lib/python3.13/test/test_pyrepl/__pycache__/eio_test_script.cpython-313.opt-2.pyc
lib/python3.13/test/test_pyrepl/__pycache__/eio_test_script.cpython-313.pyc
lib/python3.13/test/test_pyrepl/__pycache__/support.cpython-313.opt-1.pyc
lib/python3.13/test/test_pyrepl/__pycache__/support.cpython-313.opt-2.pyc
lib/python3.13/test/test_pyrepl/__pycache__/support.cpython-313.pyc
@@ -4084,7 +4085,6 @@ lib/python3.13/test/test_pyrepl/__pycache__/test_utils.cpython-313.pyc
lib/python3.13/test/test_pyrepl/__pycache__/test_windows_console.cpython-313.opt-1.pyc
lib/python3.13/test/test_pyrepl/__pycache__/test_windows_console.cpython-313.opt-2.pyc
lib/python3.13/test/test_pyrepl/__pycache__/test_windows_console.cpython-313.pyc
lib/python3.13/test/test_pyrepl/eio_test_script.py
lib/python3.13/test/test_pyrepl/support.py
lib/python3.13/test/test_pyrepl/test_eventqueue.py
lib/python3.13/test/test_pyrepl/test_input.py
@@ -4314,11 +4314,11 @@ lib/python3.13/test/test_tomllib/__pycache__/test_misc.cpython-313.pyc
lib/python3.13/test/test_tomllib/burntsushi.py
lib/python3.13/test/test_tomllib/data/
lib/python3.13/test/test_tomllib/data/invalid/
lib/python3.13/test/test_tomllib/data/invalid/array/
lib/python3.13/test/test_tomllib/data/invalid/array-missing-comma.toml
lib/python3.13/test/test_tomllib/data/invalid/array-of-tables/
lib/python3.13/test/test_tomllib/data/invalid/array-of-tables/overwrite-array-in-parent.toml
lib/python3.13/test/test_tomllib/data/invalid/array-of-tables/overwrite-bool-with-aot.toml
lib/python3.13/test/test_tomllib/data/invalid/array/
lib/python3.13/test/test_tomllib/data/invalid/array/file-end-after-val.toml
lib/python3.13/test/test_tomllib/data/invalid/array/unclosed-after-item.toml
lib/python3.13/test/test_tomllib/data/invalid/array/unclosed-empty.toml
@@ -4333,8 +4333,8 @@ lib/python3.13/test/test_tomllib/data/invalid/dotted-keys/access-non-table.toml
lib/python3.13/test/test_tomllib/data/invalid/dotted-keys/extend-defined-aot.toml
lib/python3.13/test/test_tomllib/data/invalid/dotted-keys/extend-defined-table-with-subtable.toml
lib/python3.13/test/test_tomllib/data/invalid/dotted-keys/extend-defined-table.toml
lib/python3.13/test/test_tomllib/data/invalid/inline-table/
lib/python3.13/test/test_tomllib/data/invalid/inline-table-missing-comma.toml
lib/python3.13/test/test_tomllib/data/invalid/inline-table/
lib/python3.13/test/test_tomllib/data/invalid/inline-table/define-twice-in-subtable.toml
lib/python3.13/test/test_tomllib/data/invalid/inline-table/define-twice.toml
lib/python3.13/test/test_tomllib/data/invalid/inline-table/file-end-after-key-val.toml
@@ -4416,6 +4416,9 @@ lib/python3.13/test/test_tools/__pycache__/__init__.cpython-313.pyc
lib/python3.13/test/test_tools/__pycache__/__main__.cpython-313.opt-1.pyc
lib/python3.13/test/test_tools/__pycache__/__main__.cpython-313.opt-2.pyc
lib/python3.13/test/test_tools/__pycache__/__main__.cpython-313.pyc
lib/python3.13/test/test_tools/__pycache__/test_compute_changes.cpython-313.opt-1.pyc
lib/python3.13/test/test_tools/__pycache__/test_compute_changes.cpython-313.opt-2.pyc
lib/python3.13/test/test_tools/__pycache__/test_compute_changes.cpython-313.pyc
lib/python3.13/test/test_tools/__pycache__/test_freeze.cpython-313.opt-1.pyc
lib/python3.13/test/test_tools/__pycache__/test_freeze.cpython-313.opt-2.pyc
lib/python3.13/test/test_tools/__pycache__/test_freeze.cpython-313.pyc
@@ -4467,6 +4470,7 @@ lib/python3.13/test/test_tools/msgfmt_data/fuzzy.po
lib/python3.13/test/test_tools/msgfmt_data/general.json
lib/python3.13/test/test_tools/msgfmt_data/general.mo
lib/python3.13/test/test_tools/msgfmt_data/general.po
lib/python3.13/test/test_tools/test_compute_changes.py
lib/python3.13/test/test_tools/test_freeze.py
lib/python3.13/test/test_tools/test_i18n.py
lib/python3.13/test/test_tools/test_makefile.py