…3547)

(cherry picked from commit 56b5daf)

Co-authored-by: Stanley <46876382+slateny@users.noreply.github.com>

(cherry picked from commit 2985fea)

Co-authored-by: Christian Heimes <christian@python.org>

…GH-93066) (#93148)

Also while there, clarify a few things about why we reduce the hash to 32 bits.

Co-authored-by: Eli Libman <eli@hyro.ai>
Co-authored-by: Yury Selivanov <yury@edgedb.com>
Co-authored-by: Łukasz Langa <lukasz@langa.pl>

(cherry picked from commit c1f5c90)

…ters (#92333)

(cherry picked from commit c908dc5)

Co-authored-by: Sergey Fedoseev <fedoseev.sergey@gmail.com>
Co-authored-by: Jelle Zijlstra <jelle.zijlstra@gmail.com>

GH-32241) (GH-32250)

(cherry picked from commit 6066739)

Co-authored-by: Zachary Ware <zach@python.org>

GH-92605)

(cherry picked from commit 45e1721)

Co-authored-by: Dong-hee Na <donghee.na@python.org>

* Update Sphinx bpo role to use redirect URI. (GH-32342)

* [3.8] Update Sphinx bpo role to use redirect URI. (GH-32342).
(cherry picked from commit 08cfe07)

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>

(cherry picked from commit 17dbb6b)

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>

…1936)

* gh-91888: Add a :gh: role to the documentation (GH-91889).

* [3.8] gh-91888: add a `:gh:` role to the documentation (GH-91889)

* Add a new :gh:`...` role for GitHub issues.

* Fix a GitHub id to use the :gh: role.

* Add Misc/NEWS entry.

* Refactoring and rephrasing.

Co-authored-by: Hugo van Kemenade <hugovk@users.noreply.github.com>.
(cherry picked from commit f7641a2)

Co-authored-by: Ezio Melotti <ezio.melotti@gmail.com>

* Fix use of the default role in NEWS entry

…other platforms (GH-32161) (#32183)

Co-authored-by: Ned Deily <nad@python.org>

…3.0.3 (GH-32109)

Co-authored-by: Ned Deily <nad@python.org>

This reverts commit e5f711f.

…1460) (GH-31827)

As per the comments, this mirrors the [datetime documentation](https://docs.python.org/3/library/datetime.htmlGH-datetime.datetime.fromtimestamp).

```
>>> import time
>>> time.localtime(999999999999999999999)
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
OverflowError: timestamp out of range for platform time_t
>>> time.localtime(-3600)
Traceback (most recent call last):
File "<stdin>", line 1, in <module>
OSError: [Errno 22] Invalid argument
```
(cherry picked from commit c83fc9c)

Co-authored-by: slateny <46876382+slateny@users.noreply.github.com>

…fix (GH-31920) (GH-31924)

(cherry picked from commit 7088120)

Co-authored-by: Steve Dower <steve.dower@python.org>

…se OpenSSL 1.1.1n. (GH-31912)

* bpo-47024: Update Windows builds and macOS installer build to use OpenSSL 1.1.1n.

* Revert inadvertent sqlite downgrade

(cherry picked from commit d87f1b7)

Co-authored-by: Pradyun Gedam <pgedam@bloomberg.net>

…th recent versions of clang. (GH-28845) (GH-31889)

Change the configure logic to function properly on macOS when the compiler
outputs a platform triplet for option --print-multiarch.
The Apple Clang included with Xcode 13.3 now supports --print-multiarch
causing configure to fail without this change.

Co-authored-by: Ned Deily <nad@python.org>
(cherry picked from commit 9c47667)

Co-authored-by: David Bohman <debohman@gmail.com>

Automerge-Triggered-By: GH:ned-deily
(cherry picked from commit 9901d15)

Co-authored-by: Miss Islington (bot) <31488909+miss-islington@users.noreply.github.com>

…) (GH-31419)

The libexpat 2.4.1 upgrade from  introduced the following new exported symbols:

* `testingAccountingGetCountBytesDirect`
* `testingAccountingGetCountBytesIndirect`
* `unsignedCharToPrintable`
* `XML_SetBillionLaughsAttackProtectionActivationThreshold`
* `XML_SetBillionLaughsAttackProtectionMaximumAmplification`

We need to adjust [Modules/expat/pyexpatns.h](https://github.com/python/cpython/blob/master/Modules/expat/pyexpatns.h)

(The newer libexpat upgrade  has no new symbols).

Automerge-Triggered-By: GH:gpshead
(cherry picked from commit 6312c10)

Co-authored-by: Yilei "Dolee" Yang <yileiyang@google.com>

Automerge-Triggered-By: GH:benjaminp
(cherry picked from commit ba00f0d)

Co-authored-by: Benjamin Peterson <benjamin@python.org>

…16-3189 and CVE-2019-12900 (GH-31732) (GH-31734)

…ctly uses the install path during repair (GH-31729)

(cherry picked from commit 176835c)

Co-authored-by: Steve Dower <steve.dower@python.org>

…1572)

Fix a bug in urllib.request.HTTPPasswordMgr.find_user_password() and
urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated() which
allowed to bypass authorization. For example, access to URI "example.org/foobar"
was allowed if the user was authorized for URI "example.org/foo".
(cherry picked from commit e2e7256)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

(cherry picked from commit 1935e1c)

Co-authored-by: Dong-hee Na <donghee.na@python.org>

…m toolkit

Curly brackets were never allowed in namespace URIs
according to RFC 3986, and so-called namespace-validating
XML parsers have the right to reject them a invalid URIs.

libexpat >=2.4.5 has become strcter in that regard due to
related security issues; with ET.XML instantiating a
namespace-aware parser under the hood, this test has no
future in CPython.

References:
- https://datatracker.ietf.org/doc/html/rfc3968
- https://www.w3.org/TR/xml-names/

Also, test_minidom.py: Support Expat >=2.4.5
(cherry picked from commit 2cae938)

Co-authored-by: Sebastian Pipping <sebastian@pipping.org>

Co-authored-by: Cyril Jouve <jv.cyril@gmail.com>

…0344)

(cherry picked from commit ee2549c)

Co-authored-by: Julien Palard <julien@palard.fr>

(cherry picked from commit 6fb62b4)

Co-authored-by: Victor Stinner <vstinner@python.org>

…ib_metadata 4.10.1) (GH-30803). (#30829)

(cherry picked from commit 51c3e28)

Co-authored-by: Jason R. Coombs <jaraco@jaraco.com>

POST requests to http://www.example.com/ fail randomly.
(cherry picked from commit 1578de2)

Co-authored-by: Victor Stinner <vstinner@python.org>