[3.8] Fix blurb for bpo-43176. (GH-25215) (GH-25218)

(cherry picked from commit 1744c96ebc98b240f2564f75191097704b37244f)

Co-authored-by: Eric V. Smith <ericvsmith@users.noreply.github.com>
Automerge-Triggered-By: GH:ericvsmith

bpo-43176: Fix processing of empty dataclasses (GH-24484)

When a dataclass inherits from an empty base, all immutability checks are omitted. This PR fixes this and adds tests for it.

Automerge-Triggered-By: GH:ericvsmith
(cherry picked from commit 376ffc6ac491da74920aed1b8e35bc371cb766ac)

Co-authored-by: Iurii Kemaev <6885137+hbq1@users.noreply.github.com>

bpo-36470: Allow dataclasses.replace() to handle InitVars with default values (GH-20867) (GH-25201)

Co-Authored-By: Claudiu Popa <pcmanticore@gmail.com>
Automerge-Triggered-By: GH:ericvsmith
(cherry picked from commit 75220674c07abfc90c2cd7862d04cfa2e2354450)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

Fix typo in turtledemo.two_canvases. (GH-25194)

(cherry picked from commit 4e2ef7084185d2220003b4b5538e3d8190b2dcd6)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

bpo-43705: Document that SyntaxError's offsets are 1-indexed (GH-25153)

Changed the inline mentions of the attributes into a proper attribute list like `SystemExit` has.

Automerge-Triggered-By: GH:gvanrossum
(cherry picked from commit b2a91e0c9ee18b50cc86b21211c2258520a9f5d0)

Co-authored-by: Ammar Askar <ammar@ammaraskar.com>

Post 3.8.9

Merge tag 'v3.8.9' into 3.8

Python 3.8.9

[3.9] bpo-26053: Fix args echoed by pdb run command  (GH-25149)

* bpo-26053: Fix args echoed by pdb run command (GH-22033)

(cherry picked from commit 652bfdee9495dca241d48278742fe035b7a82bdb)

* bpo-26053: Fix test_pdb.test_issue26053() (GH-25139)

(cherry picked from commit bd4ab8e73906a4f12d5353f567228b7c7497baf7)
(cherry picked from commit 7ad56e254519047aeb9c669b9ea2f2bf0acfd401)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>

Python 3.8.9

bpo-43700: Replace Zulip badge with Discourse badge (GH-25141)

Automerge-Triggered-By: GH:zware
(cherry picked from commit bef7b26f7229f8b7cde843118a7bc7e2b00f0372)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>

Doc: io: Remove "In-memory streams" section (GH-24927)

(cherry picked from commit b045cdaf341f80b7d1e4804b932b6e415600c2e1)
Co-authored-by: Inada Naoki <songofacandy@gmail.com>

Fix grammar in enum documentation. (GH-24689)

There is an extra `s` in the singular word `method`.
Reported in docs mailing list by Steven Nguyen.

Automerge-Triggered-By: GH:Mariatta
(cherry picked from commit f193874056fb185305084b79b32d2745ce9be7cf)

Co-authored-by: Mariatta Wijaya <Mariatta@users.noreply.github.com>

bpo-37945: Fix test_locale.test_getsetlocale_issue1813() (GH-25110) (GH-25113)

Skip the test if setlocale() fails.
(cherry picked from commit f3ab670fea75ebe177e3412a5ebe39263cd428e3)

Co-authored-by: Victor Stinner <vstinner@python.org>

bpo-42225: IDLE - document two unix-related problems. (GH-25078)

1. Bad IP masquerade rules can prevent startup.
2. X cannot handle some complex colored chars.
(cherry picked from commit 1b4a9c7956d5dc64f8002f62bf0faae2d1892f90)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

bpo-43399: Fix ElementTree.extend not working on iterators (GH-24751)

(cherry picked from commit 51a85ddce8b336addcb61b96f04c9c5edef07296)

Co-authored-by: Alex Prengère <2138730+alexprengere@users.noreply.github.com>

[3.8] bpo-43631: Update to OpenSSL 1.1.1k (GH-25024) (GH-25089)

Signed-off-by: Christian Heimes <christian@python.org>
Automerge-Triggered-By: GH:tiran.
(cherry picked from commit a54fc683f237d8f0b6e999a63aa9b8c0a45b7fef)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-43637: Fix a possible memory leak in winreg.SetValueEx() (GH-25038)

(cherry picked from commit dfeec347f21b86879ba8f27f567bb275b243f1bc)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

bpo-33164: blake2: Fix Coverity scan (GH-25060)

(cherry picked from commit 068ebf9729d440cef03e4c57e3db83c851146172)

Co-authored-by: Inada Naoki <songofacandy@gmail.com>

bpo-43660: Fix crash when displaying exceptions with custom values for sys.stderr (GH-25075)

(cherry picked from commit 09b90a037d18f5d4acdf1b14082e57bda78e85d3)

Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

bpo-43562: fix test_ssl to skip on unreachable network (GH-24937) (GH-25047)

This test checks result code of the connection directly, so it never raises an exception that can be suppressed by `support.transient_internet`. Directly support skipping the test in case of unreachable network.
(cherry picked from commit 29c451c6989c3c94fa0a9facf187c24f3cbf2420)

Co-authored-by: Carl Meyer <carl@oddbird.net>
Co-authored-by: Carl Meyer <carl@oddbird.net>

bpo-35883: Py_DecodeLocale() escapes invalid Unicode characters (GH-24843) (GH-24906)

Python no longer fails at startup with a fatal error if a command
line argument contains an invalid Unicode character.

The Py_DecodeLocale() function now escapes byte sequences which would
be decoded as Unicode characters outside the [U+0000; U+10ffff]
range.

Use MAX_UNICODE constant in unicodeobject.c.
(cherry picked from commit 9976834f807ea63ca51bc4f89be457d734148682)

Co-authored-by: Victor Stinner <vstinner@python.org>
Co-authored-by: Victor Stinner <vstinner@python.org>

bpo-43659:  Fix test_curses on AIX (GH-25074)

curses.update_lines_cols() is only defined when the curses library
provides either resizeterm() or resize_term() functions which are optional
and are not provided on AIX.
(cherry picked from commit c8b5738810516df5722caf049003e9b319427bec)

Co-authored-by: Michael Felt <aixtools@users.noreply.github.com>

bpo-35930: Raising an exception raised in a "future" instance will create reference cycles (GH-24995) (#25071)

Before: https://lists.es.python.org/pipermail/general/attachments/20201229/0c14bc58/attachment-0002.png

After: https://lists.es.python.org/pipermail/general/attachments/20201229/0c14bc58/attachment-0003.png
(cherry picked from commit 32430aadadf6e012e39167d3c18a24e49fb84874)

Co-authored-by: Jesús Cea <jcea@jcea.es>
Co-authored-by: Jesús Cea <jcea@jcea.es>

bpo-42988: Remove the pydoc getfile feature (GH-25015)

CVE-2021-3426: Remove the "getfile" feature of the pydoc module which
could be abused to read arbitrary files on the disk (directory
traversal vulnerability). Moreover, even source code of Python
modules can contain sensitive data like passwords. Vulnerability
reported by David Schwörer.
(cherry picked from commit 9b999479c0022edfc9835a8a1f06e046f3881048)

Co-authored-by: Victor Stinner <vstinner@python.org>

[3.8] bpo-31907: [doc] clarify that str.format() does not support arbitrary expressions (GH-25053) (GH-25056)

(cherry picked from commit fb1d01b9630b5069fe975f16e07a027d90b89434)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>
Automerge-Triggered-By: GH:ericvsmith

[3.8] bpo-43617: Check autoconf-archive package in configure.ac (GH-25016) (GH-25035)

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit 5d6e8c1c1a5f667cdce99cb3c563ac922198678d)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-39231: correct tutorial annotations section (GH-25029)

(cherry picked from commit a53e9a7cf5912a44c5143e353912e44cfcfca7dc)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>

bpo-39616: clarify SSLContext.check_hostname effect (GH-18484)

It doesn't actually affect whether match_hostname() is called (it
never is in this context any longer), but whether hostname
verification occurs in the first place.
(cherry picked from commit 9798cef92b882cd82a338d3368eaf3c4a32f5c2d)

Co-authored-by: Ville Skyttä <ville.skytta@iki.fi>

bpo-43620: Remove reference to os.sep from os.path.join() doc (GH-25025, GH-5030)

- removed ambiguous reference to os.sep from os.path.join() doc
(cherry picked from commit 21a2cabb3795f5170c746ab8f29e9d25c7442550)

Co-authored-by: Jared Sutton <jpsutton@gmail.com>

Clarify attribute docs on types.ModuleType (GH-24974)

(cherry picked from commit 76b5d714e4e2b9f3b63847325cba51d4c4dc36bc)

Co-authored-by: Brett Cannon <brett@python.org>

bpo-43577: Fix deadlock with SSLContext._msg_callback and sni_callback (GH-24957)

OpenSSL copies the internal message callback from SSL_CTX->msg_callback to
SSL->msg_callback. SSL_set_SSL_CTX() does not update SSL->msg_callback
to use the callback value of the new context.

PySSL_set_context() now resets the callback and _PySSL_msg_callback()
resets thread state in error path.

Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit 77cde5042a2f1eae489c11a67540afaf43cd5cdf)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-41561: Add workaround for Ubuntu's custom security level (GH-24915)

Ubuntu 20.04 comes with a patched OpenSSL 1.1.1. Default security level
2 blocks TLS 1.0 and 1.1 connections. Regular OpenSSL 1.1.1 builds allow
TLS 1.0 and 1.1 on security level 2.

See:
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1899878
See: https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1917625
Signed-off-by: Christian Heimes <christian@python.org>
(cherry picked from commit f6c6b5821bff815bdc810de53992fd1fbdb2edd4)

Co-authored-by: Christian Heimes <christian@python.org>

bpo-43353: Document that logging.getLevelName() accepts string representation of logging level. (GH-24693) (#24825)

(cherry picked from commit bbba28212ce0f58096a4043f32442c6e727b74fc)

Automerge-Triggered-By: GH:vsajip

bpo-43506: Doc: Update removal schedule for Py_UNICODE encoder APIs (GH-24885)

See PEP 624.
(cherry picked from commit 1330338583d183250186a8123b99d2283e945b4f)

[3.8] bpo-43285: Whats New entry for 3.8.9. (GH-24889)

Covers the ftplib security fix.

[3.8] bpo-43285 Make ftplib not trust the PASV response. (GH-24838) (GH-24881)

bpo-43285: Make ftplib not trust the PASV response.

The IPv4 address value returned from the server in response to the PASV command
should not be trusted.  This prevents a malicious FTP server from using the
response to probe IPv4 address and port combinations on the client network.

Instead of using the returned address, we use the IP address we're
already connected to.  This is the strategy other ftp clients adopted,
and matches the only strategy available for the modern IPv6 EPSV command
where the server response must return a port number and nothing else.

For the rare user who _wants_ this ugly behavior, set a `trust_server_pasv_ipv4_address`
attribute on your `ftplib.FTP` instance to True..
(cherry picked from commit 0ab152c6b5d95caa2dc1a30fa96e10258b5f188e)

Co-authored-by: Gregory P. Smith <greg@krypto.org>

Fix typo in the word "spaghetti" (GH-24866)

Automerge-Triggered-By: GH:Mariatta
(cherry picked from commit 93d33b47af70ede473f82d7953509a0607259c31)

Co-authored-by: Kazantcev Andrey <45011689+heckad@users.noreply.github.com>

[3.8] [doc] Document logging.basicConfig default format (GH-23710) (GH-24847)

(cherry picked from commit 35cacce5253c50eed0d285836f9ca0ac568991ca)

bpo-43199: Briefly explain why no goto (GH-24852)

Answer "Why is there no goto?" in the Design and History FAQ.
(cherry picked from commit 5e29021a5eb10baa9147fd977cab82fa3f652bf0)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

[3.8] bpo-43439: Wrapt the tuple in the audit events for the gc module (GH-24836) (GH24854)

(cherry picked from commit 9c376bc1c4c8bcddb0bc4196b79ec8c75da494a8)

Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

Update client.py (GH-24827)

(cherry picked from commit b6884ad2688451dd3cbc5984b23da5840e1b6df8)

Co-authored-by: Géry Ogam <gery.ogam@gmail.com>

Update link to Django's Context class. (GH-24805) (#24842)

* Update link to Django's Context class.
* Update link to get-pip.py.
(cherry picked from commit d0a445490e2c0e1d2aef3005f14211d9a85196bf)

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

[3.8] bpo-27820: Fix AUTH LOGIN logic in smtplib.SMTP (GH-24118) (#24833)

* bpo-27820: Fix AUTH LOGIN logic in smtplib.SMTP (GH-24118)

* Fix auth_login logic (bpo-27820)

* Also fix a longstanding bug in the SimSMTPChannel.found_terminator() method that causes inability to test
SMTP AUTH with initial_response_ok=False.

(cherry picked from commit 7591d9455eb37525c832da3d65e1a7b3e6dbf613)

* Set timeout to 15 directly.

Co-authored-by: Pandu E POLUAN <pepoluan@gmail.com>

bpo-43423 Fix IndexError in subprocess _communicate function (GH-24777)

Check to make sure stdout and stderr are not empty before selecting an item from them in Windows subprocess._communicate.

Co-authored-by: Gregory P. Smith <greg@krypto.org>
(cherry picked from commit b4fc44bb2d209182390b4f9fdf074a46b0165a2f)

Co-authored-by: Chris Griffith <chris@cdgriffith.com>

bpo-43406: Fix test_signal.test_stress_modifying_handlers() (GH-24815)

Fix a race condition of test_stress_modifying_handlers() of
test_signal: only raise signals while we are in the
catch_unraisable_exception() context manager.
Moreover, don't check if we received at least one
signal if at least one signal got ignored.
(cherry picked from commit 1fa17e8cc62775a2e34b158135ce8589f9394f03)

Co-authored-by: Victor Stinner <vstinner@python.org>

[3.8] bpo-43439: Add audit hooks for gc functions (GH-24794). (GH-24810)

(cherry picked from commit b4f9089d4aa787c5b74134c98e5f0f11d9e63095)

Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

bpo-43446: Fix markup in sqlite3 footnote (GH-24806)

(cherry picked from commit 62a03cd490f81c0fb01eaceb31aa8a4c7800ed0e)

Co-authored-by: Kamil Turek <kamil.turek@hotmail.com>

bpo-3329: Fix typo in PyObjectArenaAllocator doc (GH-24795)

(cherry picked from commit 0d6bd1ca7c683137d52041194f3a2b02219f225a)

Co-authored-by: Victor Stinner <vstinner@python.org>

bpo-43415: Fix typo on dataclasses.rst (GH-24789) (GH-24791)

(cherry picked from commit 0554044ddccdb7bf1fa4a8bc880e7a7b59f6479c)

Co-authored-by: Guilherme Martins Crocetti <gmcrocetti@gmail.com>
Co-authored-by: Guilherme Martins Crocetti <gmcrocetti@gmail.com>

Put contextvars docs into the concurrency category (GH-24760)

(cherry picked from commit 5eb7796b7f3aae91b145ccea51b528662f3b5ce1)

Co-authored-by: Brett Cannon <brett@python.org>

[3.8] bpo-43406: Fix possible race condition where ``PyErr_CheckSignals`` tries to execute a non-Python signal handler (GH-24756) (GH-24762)

We can receive signals (at the C level, in `trip_signal()` in signalmodule.c) while `signal.signal` is being called to modify the corresponding handler.  Later when `PyErr_CheckSignals()` is called to handle the given signal, the handler may be a non-callable object and would raise a cryptic asynchronous exception..
(cherry picked from commit 68245b7a1030287294c65c298975ab9026543fd2)

Co-authored-by: Antoine Pitrou <antoine@python.org>

bpo-43407: Clarify comparisons of time.monotonic() et al results (GH-24757)

Previous wording implied that only the result of call N and N+1 could be
meaningfully compared, whereas comparing call N and N+M is fine.
(cherry picked from commit ff5f05934db241dfafc604989b2de3487b09ca82)

Co-authored-by: Alex Willmer <alex@moreati.org.uk>

bpo-43396: Normalise naming in sqlite3 doc examples (GH-24746)

(cherry picked from commit 40d1b831ecd1b5b6a4fce9a908a6e61b50b360a0)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>

[3.8] bpo-37193: Remove thread objects which finished process its request (GH-23127) (GH-24749)

This reverts commit aca67da4fe68d5420401ac1782203d302875eb27.
(cherry picked from commit b5711c940f70af89f2b4cf081a3fcd83924f3ae7)

Co-authored-by: Jason R. Coombs <jaraco@jaraco.com>
Automerge-Triggered-By: GH:jaraco

bpo-42782: Fail fast for permission errors in shutil.move() (GH-24001)

* Fail fast in shutil.move() to avoid creating destination directories on failure.

Co-authored-by: Zackery Spytz <zspytz@gmail.com>
(cherry picked from commit 132131b404e06ee1a19b040a1f96cd1118abed0c)

Co-authored-by: Winson Luk <winson.luk@gmail.com>

[3.8] Pin test runner to Ubuntu 18 to un-break CI (GH-24715) (GH-24717)

(cherry picked from commit 94894dd45e4bad6efb27eac4497b24cdc18b3e2d)

Co-authored-by: Brandt Bucher <brandt@python.org>
Automerge-Triggered-By: GH:tiran

bpo-42840: Document providing kwargs to type. (GH-24173)

Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
(cherry picked from commit 72fcd14a82369ed32a5846d76f50e3026cf4eec2)

Co-authored-by: Erik Soma <stillusingirc@gmail.com>

[3.8] [doc] Document VIRTUAL_ENV environment variable (GH-21970) (GH-24363)

(cherry picked from commit 3584d4b64a5373440f78237eac734831cfd83f79)

closes bpo-43349: Fix tuning(7) manpage hyperlink. (GH-24680)

(cherry picked from commit f4d7d46cb48aa3a1bf3c2c7e2d7d71cbf49dea69)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>

bpo-41837: Update macOS installer build to use OpenSSL 1.1.1j. (GH-24677)

(cherry picked from commit 0242494a156970186cbc4121ccf03aefbddea716)

Co-authored-by: Ned Deily <nad@python.org>

closes bpo-43266: Improve array formatting. (GH-24573) (GH-24585)

(cherry picked from commit 2d3e463e4a5aa109d1c15c86f9631580f5ef7a7e)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>
Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>

bpo-36346: Document removal schedule of deprecate APIs (GH-20879) (#24626)

We will remove wstr cache in Python 3.12. See PEP 623.
(cherry picked from commit 2d6f2eed14ff5d89155b52771cc8ef957e8145b4)

Co-authored-by: Inada Naoki <songofacandy@gmail.com>
Co-authored-by: Inada Naoki <songofacandy@gmail.com>

bpo-43316: gzip: Fix sys.exit() usage. (GH-24652)

(cherry picked from commit 9525a18b5bb317d9fb206c992ab62aa41559b0c8)

Co-authored-by: Inada Naoki <songofacandy@gmail.com>

bpo-43316:  gzip: CLI uses non-zero return code on error. (GH-24647)

Exit code is now 1 instead of 0. A message is printed to stderr instead of stdout. This is
the proper behaviour for a tool that can be used in scripts.
(cherry picked from commit cc3df6368d4f3f6c9c9b716876c7e7b79c7abf3f)

Co-authored-by: Ruben Vorderman <r.h.p.vorderman@lumc.nl>

bpo-43293: Doc: move note about GIL to top of threading module (GH-24622)

The note about the GIL was buried pretty deep in the threading documentation,
and this made it hard for first time users to discover why their attempts
at using threading to parallelizing their application did not work.

In this commit, the note is moved to the top of the module documention for
visibility.
(cherry picked from commit 32181be6081f6c70a1e0bd0540050805c8e88e83)

Co-authored-by: Guanzhong Chen <quantum2048@gmail.com>

[3.8] bpo-41841: prepare for 3.8.9 (GH-24635)

bpo-43283: Add IDLE doc paragraph about print speed (GH-24615) (GH-24632)

Printing to IDLE's Shell is often slower than printing to a system
terminal, but it can be made faster by pre-formatting a single
string before printing.
(cherry picked from commit 2827e8a177c2a6584fada594bca6829c53a2872f)
Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

bpo-23882: Doc: Clarify unittest discovery document (GH-21560)

Unittest discovery support namespace package as start
directory. But it doesn't find namespace package in
the start directory automatically.

Otherwise, unittest discovery search into unexpected
directories like `vendor/` or `node_modules/`.
(cherry picked from commit 5a4aa4c03e27ca5007b86c9c1ee62c77ad08a120)

Co-authored-by: Inada Naoki <songofacandy@gmail.com>

bpo-43260: io: Prevent large data remains in textio buffer. (GH-24592)

When very large data remains in TextIOWrapper, flush() may fail forever.

So prevent that data larger than chunk_size is remained in TextIOWrapper internal
buffer.

Co-Authored-By: Eryk Sun.
(cherry picked from commit 01806d5beba3d208bb56adba6829097d803bf54f)

bpo-43283: Rearrange some IDLE doc paragraphs. (GH-24604)

In the Running User Code section, gather together paragraphs about two
processes and the sys.stdstream replacements, preparing to add another.
(cherry picked from commit 4cf7bb8e22bf37e6d65bf4cb5618d09c4a8ad612)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

bpo-27646: Say that 'yield from' expression can be any iterable (GH-24595)

Previously, the doc at least strongly implied that it had to be an iterator.
(cherry picked from commit 2f9ef514fb24b6a95bd3272885f197752810c107)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

Fix typo in dis module doc (GH-24509)

(cherry picked from commit 292f23186c6573bc1c3fa4f6e91116e8ee444cf4)

Co-authored-by: Irit Katriel <iritkatriel@yahoo.com>

bpo-43042: Augment tutorial sentence (GH-24514)

Calling same function also gets new local namespace.
(cherry picked from commit b30fcba3a8abaabd1087f2392ae8aec4c1b1f210)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

Post 3.8.8

Python 3.8.8

closes bpo-43254: Fix *snprintf() man page refs. (GH-24563)

(cherry picked from commit e92d67dfbb4790df37aa6a0961fb6dc7e8d2fbbf)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>

Remove all links to mingw.org (GH-24552)

This lease on this domain has lapsed. This not only makes these dead links, but a potential attack vector for readers of python.org as the domain can be obtained by an untrustworthy party.

I considered redirecting these links to http://mingw-w64.org/ which is a maintained fork of mingw, but beyond my unfamiliarity with the exact level of compatibility, at the time of this PR that site had an expired cert and so is not much of a vulnerability fix.

Automerge-Triggered-By: GH:Mariatta
(cherry picked from commit 743932d50815edbe4ffd530ae091c53ae47dd34b)

Co-authored-by: Jeremy Paige <ucodery@gmail.com>

Post 3.8.8rc1

Python 3.8.8rc1

bpo-42819, readline: Disable bracketed paste (GH-24108)

(cherry picked from commit 755f3c1521b422bc2177013d289f5439975fdc4f)

Co-authored-by: Dustin Rodrigues <dust.rod@gmail.com>

Add a warning block around the get_referrers() documentation (GH-24511)

(cherry picked from commit 813db24f7c2c536d587d1832c3c52b44fa9e242e)

Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

bpo-43108: Fix a reference leak in the curses module (GH-24420) (GH-24429)

(cherry picked from commit bb739ec922c6992a2be38f9fd3c544c2cc322dde)

Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>
Co-authored-by: Pablo Galindo <Pablogsal@gmail.com>

[3.8] bpo-42967: only use '&' as a query string separator (GH-24297)  (#24529)

* bpo-42967: only use '&' as a query string separator (#24297)

bpo-42967: [security] Address a web cache-poisoning issue reported in
urllib.parse.parse_qsl().

urllib.parse will only us "&" as query string separator by default
instead of both ";" and "&" as allowed in earlier versions. An optional
argument seperator with default value "&" is added to specify the
separator.

Co-authored-by: Éric Araujo <merwok@netwok.org>
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
Co-authored-by: Éric Araujo <merwok@netwok.org>
(cherry picked from commit fcbe0cb04d35189401c0c880ebfb4311e952d776)

* [3.8] bpo-42967: only use '&' as a query string separator (GH-24297)

bpo-42967: [security] Address a web cache-poisoning issue reported in urllib.parse.parse_qsl().

urllib.parse will only us "&" as query string separator by default instead of both ";" and "&" as allowed in earlier versions. An optional argument seperator with default value "&" is added to specify the separator.

Co-authored-by: Éric Araujo <merwok@netwok.org>
Co-authored-by: blurb-it[bot] <43283697+blurb-it[bot]@users.noreply.github.com>
Co-authored-by: Ken Jin <28750310+Fidget-Spinner@users.noreply.github.com>
Co-authored-by: Éric Araujo <merwok@netwok.org>.
(cherry picked from commit fcbe0cb04d35189401c0c880ebfb4311e952d776)

Co-authored-by: Adam Goldschmidt <adamgold7@gmail.com>
* Update correct version information.

* fix docs and make logic clearer

Co-authored-by: Adam Goldschmidt <adamgold7@gmail.com>
Co-authored-by: Fidget-Spinner <28750310+Fidget-Spinner@users.noreply.github.com>

bpo-43204: Fix LibTomCrypt URL in md5module.c and sha*module.c comments (GH-24507) (GH-24516)

Automerge-Triggered-By: GH:tiran
(cherry picked from commit 5ec7d535581bc99918e032891167a96abd224ed6)

Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>
Co-authored-by: Erlend Egeberg Aasland <erlend.aasland@innova.no>

bpo-43200: Fix link to shutil.copy() in the shutil doc (GH-24505)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>
(cherry picked from commit 762fe7deed34a1d5294bf82071d318c8427b4893)

Co-authored-by: Zackery Spytz <zspytz@gmail.com>

[3.8] bpo-41824: Fix indentation issue in ForwardRef docs (#24495)

[3.8] bpo-41824: Add versionadded for typing.ForwardRef docs (#24224) (#24494)

bpo-16781: In 'exec' doc, add 'nonlocal' to 'yield' and 'return' (GH-2446)

These 3 statements cannot be used at module scope -- nor in exec with one namespace.
(cherry picked from commit 0ec57e25c918b859b9f8d464e34e0ac859c2f8b3)

Co-authored-by: Terry Jan Reedy <tjreedy@udel.edu>

Simple typo fix (GH-24448)

(cherry picked from commit 5f18c223391eef8c7d01241b51a7b2429609dd84)

Co-authored-by: Andrew Tennikoff <atenni@users.noreply.github.com>

build(deps): bump actions/upload-artifact from v2.2.1 to v2.2.2 (GH-24411)

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from v2.2.1 to v2.2.2.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v2.2.1...e448a9b857ee2131e752b06002bf0e093c65e571)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit aa4caf9887944ab280a87712460e2dd49b55fe5e)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

bpo-42773: fix tests not being run on pushes (GH-24004)

There was a typo, we were checking if the "GITHUB_BASE_REF" string
literal was empty instead of the $GITHUB_BASE_REF value. When
$GITHUB_BASE_REF is empty, the action that triggered the run was not a
pull request, so we always run the full test suite.

Signed-off-by: Filipe Laíns <lains@riseup.net>
(cherry picked from commit 4ac923f2756f835f512339ee181348cc535ab07f)

Co-authored-by: Filipe Laíns <lains@riseup.net>

Fix typo (GH-23019)

Fixed possible typo in comment
(cherry picked from commit bfe544d2f2c2e7a7c03a764bed3276a1e27a0f5c)

Co-authored-by: Harry <harry.lees@gmail.com>

Add link to Microsoft docs for limitations in Windows Store package (GH-24422)

(cherry picked from commit 1ba08a121a25fcf7c947d8d37e72e46dae59168c)

Co-authored-by: Steve Dower <steve.dower@python.org>

bpo-41748: Handles unquoted attributes with commas (GH-24072)

* bpo-41748: Adds tests for unquoted attributes with comma

* bpo-41748: Handles unquoted attributes with comma

* bpo-41748: Addresses review comments

* bpo-41748: Addresses review comments

* Adds more test cases
* Simplifies the regex for handling spaces

* bpo-41748: Moves attributes tests under the right class

* bpo-41748: Addresses review about duplicate attributes

* bpo-41748: Adds NEWS.d entry for this patch
(cherry picked from commit 9eb11a139fac5514d8456626806a68b3e3b7eafb)

Co-authored-by: Karl Dubost <karl+github@la-grange.net>

bpo-43016: Fix test_curses on platform without cursesw (GH-24405) (GH-24408)

(cherry picked from commit a1e9a1e120a11c563e166c15721169184c802f8b)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

[3.9] bpo-41604: Don't decrement the reference count of the previous user_ptr when set_panel_usertpr fails (GH-21933). (GH-24403)

(cherry picked from commit 3243e8a4b4b4cf321f9b28335d565742a34b1976)

Co-authored-by: Anonymous Maarten <madebr@users.noreply.github.com>
(cherry picked from commit 3c8d6934436e20163be802f5239c5b4e4925eeec)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

[3.8] bpo-43016: Rewrite tests for curses (GH-24312). (GH-24399) (GH-24401)

(cherry picked from commit d64fd4bb5bb4fd2e3277f39d3ad99b5a8d193e1b).
(cherry picked from commit e9d4960d15c5282904cf26e469ce7cee39f634f7)

bpo-43030: Fixed a compiler warning in Py_UNICODE_ISSPACE with signed wchar_t (GH-24350) (GH-24397)

(cherry picked from commit 42b1806af90b86ec393ca7da14e99ce95ec6c53b)

Co-authored-by: Serhiy Storchaka <storchaka@gmail.com>

bpo-43059: Remove reference to legacy external sqlite3 repository (GH-24364)

(cherry picked from commit e60344364245a23a7a1b25d5ebce6833652a656c)

Co-authored-by: L <3177243+LukeLR@users.noreply.github.com>

Fixing typos in turtle.rst (GH-24376)

Automerge-Triggered-By: GH:JulienPalard
(cherry picked from commit 6baaae589d596ed3bb668448f2a22c5f62fc5fdf)

Co-authored-by: Jules Lasne <jules.lasne@gmail.com>