Changelog for python313-Twisted-26.4.0-4.3.noarch.rpm :

* Tue Jun 16 2026 Dirk Müller - add pycryptography-use-csr.patch
* Tue May 12 2026 Steve Kowalik - Update to 26.4.0: [#]# Security
* Prevent a Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. (CVE-2026-42304) (bsc#1265265) [#]# Features
* twisted.internet.ssl.CertificateOptions has a new constructor argument, contextForServerName, which takes a callback that will get invoked when a client sends a server name indication, with the sent servername, and returns a new OpenSSL.SSL.Context that the connection will switch to.
* twisted.internet.endpoints.serverFromString now supports the tls endpoint type, which allows you to do twist web - -listen=tls:.../certbot-dir/config/live pointed at a certbot live configuration directory and have your certbot certificates automatically discovered and served appropriately.
* twisted.internet.reactor now has type annotations and will appear to be an object of an appropriate type, allowing for idiomatic common usages with correct type information.
* twisted.conch.ssh.SSHUserAuthServer now supports the security key ssh types \"sk-ecdsa-sha2-nistp256AATTopenssh.com\" and \"sk-ssh-ed25519AATTopenssh.com\" and extracting the application property from these new key types. [#]# Bugfixes
* twisted.mail.smtp will now return a meaningful Failure when TLS validation fails.
* TLS version range constraints passed to twisted.internet.ssl.CertificateOptions are now properly respected rather than excluding the version being passed as the desired constraint.
* A potential reference cycle that might cause intermittent memory spikes while using twisted.internet.defer.inlineCallbacks was removed.
* Trial no longer emits the error RuntimeWarning: TestResult has no addDuration method when running PyUnit tests.
* twisted.python.rebuild.rebuild() now handles changes to sys.modules gracefully. Prior to the change, it could possibly raise a \"dictionary changed size during iteration\" error if the module list changed.
* twisted.internet.protocol.ReconnectingClientFactory: Don\'t multiply by factor for initial delay, but use initialDelay directly.
* twisted.internet.ssl and twisted.protocols.tls no longer mutate the pyOpenSSL context after creating pyOpenSSL connections, maintaining compatibility with an upcoming version of pyOpenSSL and increasing reliability.
* twisted.internet.testing.MemoryReactor.callWhenRunning now invokes the callback immediately, if already started.
* Twisted now correctly detects EOF on OpenSSL 4. [#]# Deprecations and Removals
* Support for the obsolete TLS \"Next Protocol Negotiation\" has been removed from twisted.protocols.tls.
* Remove support for python3.8.- Dropped patches:
* no-test_successResultOfWithFailureHasTraceback.patch, no longer required
* py314.patch, merged upstream
* createElement.patch, merged upstream- Rebased patches:
* skip_MultiCast.patch
* 1521_delegate_parseqs_stdlib_bpo42967.patch
* no-cython_test_exception_raiser.patch
* remove-dependency-version-upper-bounds.patch- Drop unneeded BuildRequires on setuptools and wheel.
* Mon Dec 29 2025 Markéta Machová - Add createElement.patch to fix tests with fixed python interpreters (bsc#1256325)
* Fri Sep 26 2025 Markéta Machová - Update to 25.5.0
* twisted.internet.interfaces.IReactorMulticast now accept IPv6 literals and allow for IPv6 multicast.
* TCP throughput when sending data is slightly faster.
* twisted.trial.unittest.TestCase.defer
* methods were removed and converted to private methods.
* Deprecations and removals in twisted.internet.defer
* twisted.conch.client.direct.SSHClientTransport.verifyHostKey no longer crashes with an encoding error while attempting to verify the peer\'s IP address.
* The twisted.web.websockets module has been added, adding a websockets server and client based on the wsproto library.- Add py314.patch to fix or skip tests failing with Python 3.14
* Tue Aug 12 2025 Markéta Machová - Make the libalternatives transition conditional
* Wed Jun 25 2025 Markéta Machová - Convert to libalternatives
* Tue Oct 29 2024 Dirk Müller - update to 24.10.0:
* Python 3.13 is now supported.
* twisted.internet.defer.succeed() is significantly faster, and awaiting Deferred has also been sped up.
* twisted.python.failure.Failure creation no longer records the place where it was created. This reduces creation time by 60% at least, thereby speeding up Deferred error handling.
* twisted.internet.defer.Deferred no longer removes the traceback object from Failures. This may result in more objects staying in memory if you don\'t clean up failed Deferreds, but it speeds up error handling and enables improvements to traceback reporting.
* twisted.internet.defer APIs are 2%-4% faster in many cases.
* twisted.internet.defer.Deferred runs callbacks with chained Deferreds a little faster.
* The reactor now will use a little less CPU when events have been scheduled with callLater().
* Creation of twisted.python.failure.Failure is now faster.
* Fixed unreleased regression caused by PR 12109.
* twisted.logger.eventAsText can now format the output having types/classes as input. This was a regression introduced in Twisted 24.3.0.
* twisted.internet.endpoints.clientFromString for TLS endpoints with \"bindAddress=\" no longer crashes during connect. twisted.internet.endpoints.HostnameEndpoint() no longer crashes when given a bindAddress= argument that is just a string, and that argument now accepts either address strings or (address, port) tuples.
* The URLs from README and pyproject.toml were updated.
* #11236, #12060, #12062, #12099, #12219, #12290, #12296, [#12305], #12329, #12331, #12339
* twisted.conch.ssh.keys.Key can now load public blob keys of type sk-ssh-ed25519AATTopenssh.com and sk-ecdsa- sha2-nistp256AATTopenssh.com.
* twisted.conch tests no longer rely on OpenSSH supporting DSA keys, fixing compatibility with OpenSSH >= 9.8.
* twisted.conch.ssh.SSHCiphers no longer supports the cast128-ctr, cast128-cbc, blowfish-ctr, and blowfish-cbc ciphers. The Blowfish and CAST5 ciphers were removed as they were deprecated by the Python cryptography library.
* #12313
* The twisted.web HTTP server and client now reject HTTP header names containing whitespace or other invalid characters by raising twisted.web.http_headers.InvalidHeaderName, improving compliance with RFC 9110. As a side effect, the server is slightly faster.
* twisted.web.client and twisted.web.server now disable the Nagle algorithm (enable TCP_NODELAY), reducing the latency of small HTTP queries.
* twisted.web.server is 1-2% faster in some cases.
* twisted.web\'s HTTP/1.1 server now rejects header values containing a NUL byte with a 400 error, in compliance with RFC 9110.
* twisted.internet.address no longer raises DeprecationWarning when used with attrs>=24.1.0.
* twisted.web\'s HTTP/1.1 server now accepts \'&\' within tokens (methods, header field names, etc.), in compliance with RFC 9110.
* #9743, #12276
* Trial\'s -j flag now accepts an auto keyword to spawn a number of workers based on the available CPUs.- drop 12313-fix-test_manhole.patch: upstream
* Wed Sep 25 2024 Markéta Machová - Add upstream patch 12313-fix-test_manhole.patch to fix test failure with latest python312
* Mon Sep 09 2024 John Paul Adrian Glaubitz - Update to 24.7.0
* 24.7.0.rc2 fixed an unreleased regression caused by PR 12109. (#12279)
* twisted.web.util.redirectTo now HTML-escapes the provided URL in the fallback response body it returns (GHSA-cf56-g6w6-pqq2, CVE-2024-41810). (#9839)
* The HTTP 1.0 and 1.1 server provided by twisted.web could process pipelined HTTP requests out-of-order, possibly resulting in information disclosure (CVE-2024-41671/GHSA-c8m8-j448-xjx7) (#12248)
* twisted.protocols.ftp now supports the IPv6 extensions defined in RFC 2428. (#9645)
* twisted.internet.defer.inlineCallbacks can now yield a coroutine. (#9972)
* twisted.python._shellcomp.ZshArgumentsGenerator was updated for Python 3.13. (#12065)
* twisted.web.wsgi request environment now contains the peer port number as `REMOTE_PORT`. (#12096)
* twisted.internet.defer.Deferred.callback() and twisted.internet.defer.Deferred.addCallbacks() no longer use `assert` to check the type of the arguments. You should now use type checking to validate your code. These changes were done to reduce the CPU usage. (#12122)
* Added two new methods, twisted.logger.Logger.failuresHandled and twisted.logger.Logger.\\ failureHandler, which allow for more concise and convenient handling of exceptions when dispatching out to application code. The former can arbitrarily customize failure handling at the call site, and the latter can be used for performance-sensitive cases where no additional information needs to be logged. (#12188)
* twisted.internet.defer.Deferred.addCallback now runs about 10% faster. (#12223)
* twisted.internet.defer.Deferred error handling is now faster, taking 40% less time to run. (#12227)
* twisted.internet.ssl.Certificate.__repr__ can now handle certificates without a common name (CN) in the certificate itself or the signing CA. (#5851)
* Type annotations have been added to twisted.conch.interfaces.IKnownHostEntry and its implementations, twisted.conch.client.knownhosts.PlainHost and twisted.conch.client.knownhosts.HashedHost, correcting a variety of type confusion issues throughout the conch client code. (#9713)
* twisted.python.failure.Failure once again utilizes the custom pickling logic it used to in the past. (#12112)
* twisted.conch.client.knownhosts.KnownHostsFile.verifyHostKey no longer logs an exception when automatically adding an IP address host key, which means the interactive `conch` command-line no longer will either. (#12141)
* The IRC server example found in the documentation was updated for readability. (#12097)
* Remove contextvars from list of optional dependencies. (#12128)
* The documentation for installing Twisted was moved into a single page. (#12145)
* The project\'s compatibility policy now clearly indicates that the GitHub Actions test matrix defines the supported platforms. (#12167)
* Updated imap4client.py example, it no longer references Python 2. (#12252)
* twisted.internet.defer.returnValue has been deprecated. You can replace it with the standard `return` statement. (#9930)
* The `twisted-iocpsupport` is no longer a hard dependency on Windows.
* The IOCP support is now installed together with the other Windows soft
* dependencies via `twisted[windows-platform]`. (#11893)
* twisted.python.deprecate helper function will now always strip whitespaces from the docstrings.
* This is done to have the same behaviour as with Python 3.13. (#12063)
* twisted.conch.manhole.ManholeInterpreter.write, twisted.conch.manhole.ManholeInterpreter. addOutput, twisted.mail.imap4.IMAP4Server.sendUntaggedResponse `async` argument, deprecated since 18.9.0, has been removed. (#12130)
* twisted.web.soap was removed.
* The SOAP support was already broken, for at least the last 4 years.
* The SOAP support in Twisted has no active maintainer. (#12146)
* Fix #11744, #11771, #12113, #12154, #12169, #12179, #12193, #12195, [#12197], #12215, #12221, #12243, #12249, #12254, #12259, #12669
* twisted.conch.insults.window.Widget.functionKeyReceived now dispatches functional key events to corresponding `func_KEYNAME` methods, where `KEYNAME` can be `F1`, `F2`, `HOME`, `UP_ARROW` etc. This is a regression introduced with #8214 in Twisted 16.5.0, where events changed from `const` objects to bytestrings in square brackets like `[F1]`. (#12046)
* twisted.web.agent.Agent now allows duplicate Content-Length headers having the same value, per RFC 9110 section 8.6. It is otherwise more strict when parsing Content-Length header values. (#9064)
* twisted.web.client.HTTPConnectionPool used by HTTP clients now runs faster by using a little less CPU. (#12108)
* twisted.web.http_headers now uses less CPU, making a small HTTP client request 10% faster or so. (#12116)
* twisted.web\'s HTTP/1.1 server now runs a little faster, with about 10% lower CPU overhead. (#12133)
* twisted.web\'s HTTP 1.1 server is an additional 5% faster. (#12155)
* twisted.web.http.IM_A_TEAPOT was added and returns `I\'m a teapot`
* as default message for the status code 418,
* as defined in RFC 2324 section 2.3.2. (#12104)
* The HTTP 1.0/1.1 server provided by twisted.web is now more picky about the first line of a request, improving compliance with RFC 9112. (#12233)
* The HTTP 1.0/1.1 server provided by twisted.web now constraints the character set of HTTP header names, improving compliance with RFC 9110. (#12235)
* Fix ReverseProxyResource example in developer guide. (#12152)
* twisted.web.util.ChildRedirector, which has never worked on Python 3, has been removed. (#9591)
* ``twisted.web.http.Request.setResponseCode()`` no longer validates the types of inputs; we encourage you to use a type checker like mypy to catch these sort of errors. The long-deprecated ``twisted.web.server.string_date_time()`` and ``twisted.web.server.date_time_string()`` APIs were removed altogether. (#12133)
* twisted.web.http.HTTPClient is now deprecated in favor of twisted.web.client.Agent (#12158)
* Fix #12098, #12194, #12200, #12241, #12257- Drop CVE-2024-41671.patch, merged upstream- Drop CVE-2024-41810.patch, merged upstream- Refresh 1521_delegate_parseqs_stdlib_bpo42967.patch- Refresh no-cython_test_exception_raiser.patch
* Wed Jul 31 2024 Daniel Garcia - Add a couple of upstream patches to fix http process information disclosure (CVE-2024-41671, bsc#1228549) and XSS via html injection (CVE-2024-41810, bsc#1228552):
* CVE-2024-41671.patch gh#twisted/twistedAATT4a930de12fb6
* CVE-2024-41810.patch gh#twisted/twistedAATT046a164f89a0
* Tue Jul 02 2024 Dirk Müller - update to 24.3.0:
* twisted.logger.formatEvent now honors dotted method names, not just flat function names, in format strings, as it has long been explicitly documented to do. So, you will now get the expected result from formatEvent(\"here\'s the result of calling a method at log-format time: {obj.method()}\", obj=...)
* twisted.web.http.HTTPChannel now ignores the trailer headers provided in the last chunk of a chunked encoded response, rather than raising an exception.
* twisted.protocols.tls.BufferingTLSTransport, used by default by twisted.protocols.tls.TLSMemoryBIOFactory, was refactored for improved performance when doing a high number of small writes.
* twisted.python.failure.Failure now throws exception for generators without triggering a deprecation warnings on Python 3.12.
* twisted.internet.process.Process, used by reactor.spawnProcess, now copies the parent environment when the env=None argument is passed on Posix systems and os.posix_spawnp is used internally.
* twisted.internet.defer.inlineCallbacks.returnValue\'s stack introspection was adjusted for the latest PyPy 7.3.14 release, allowing legacy AATTinlineCallbacks to run on new PyPY versions.
* twisted.trial.reporter.TestRun.startTest() is no longer called for tests with skip annotation or skip attribute for Python 3.12.1 or newer. This is the result of upstream Python gh-106584 change. The behavior is not change in 3.12.0 or older.- drop twisted-pr12054-testinvokationpy3.12.1.patch, stop-using-3-arg-throw.patch (upstream)
* Thu Feb 01 2024 Steve Kowalik - Add stop-using-3-arg-throw.patch:
* Avoid 3-arg throw to fix a DeprecationWarning in Python 3.12.
* Thu Jan 18 2024 Ben Greiner - Add twisted-pr12054-testinvokationpy3.12.1.patch
* Pull request gh#twisted/twisted#12054 fixes failing tests on python312 gh#twisted/twisted#12052- Fix rpmlint errors
* Thu Nov 23 2023 Markéta Machová - Update to 23.10.0
* reactor.spawnProcess() now uses posix_spawnp when possible, making it much more efficient (#5710)
* Twisted now officially supports Python 3.11. (#10343)
* twisted.internet.defer.race has been added as a way to get the first available result from a list of Deferreds. (#11817)
* The CI suite was updated to execute the tests using a Python 3.12 pre-release (#11857)
* PyAsn1 has been removed as a conch dependency.
* Due to changes in the way raw private key byte serialization are handled in Cryptography, and widespread support for Ed25519 in current versions of OpenSSL, we no longer support PyNaCl as a fallback for Ed25519 keys in Conch. (#11871)
* In Twisted 16.3.0, we changed twisted.web to stop dispatching HTTP/1.1 pipelined requests to application code. There was a bug in this change which still allowed clients which could send multiple full HTTP requests in a single TCP segment to trigger asynchronous processing of later requests, which could lead to out-of-order responses. This has now been corrected and twisted.web should never process a pipelined request over HTTP/1.1 until the previous request has fully completed. (CVE-2023-46137, GHSA-cq7q-gv5w-rwx2) (#11976)
* Drop support for Python 3.7. Remove twisted[contextvars] extra (contextvars are always available in Python 3.7+) (#11913)
* When using CPython, functions wrapped by twisted.internet.defer.inlineCallbacks can have their arguments and return values freed immediately after completion (due to there no longer being circular references). (#11885)- Delete merged patches:
* regenerate-cert-to-work-with-latest-service-identity.patch
* no-pygtkcompat.patch
* support-new-glibc.patch
* CVE-2023-46137-HTTP-pipeline-response.patch
* remove-pynacl-optional-dependency.patch
* py311-tests-compat.patch
* Wed Nov 15 2023 Matej Cepl - Add CVE-2023-46137-HTTP-pipeline-response.patch (bsc#1216588, CVE-2023-46137) serializing pipelined HTTP requests.
* Mon Jun 26 2023 Dirk Müller - add regenerate-cert-to-work-with-latest-service-identity.patch remove-pynacl-optional-dependency.patch: backports from main git to fix tests with newer dependency versions
* Sun Apr 23 2023 Matej Cepl - Switch documentation to be within the main package.
* Fri Apr 21 2023 Dirk Müller - add sle15_python_module_pythons (jsc#PED-68)
* Thu Apr 13 2023 Matej Cepl - Make calling of %{sle15modernpython} optional.
* Wed Feb 08 2023 Steve Kowalik - Add patch support-new-glibc.patch:
* Support new glibc changes.
* Tue Jan 10 2023 Daniel Garcia - Add py311-tests-compat.patch to fix tests with python 3.11 gh#twisted/twisted#11734 gh#twisted/twisted#11733