Prepare a new release

droideck · droideck · commit bf666e918615 · 2025-10-10T12:55:03.000-07:00
Disable Python 3.6, 3.7 CI workflow
as it's supported on Ubuntu 22.04
Update GH Workflows.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -20,7 +20,6 @@ jobs:
       fail-fast: false
       matrix:
         python-version:
-          - "3.7"
           - "3.8"
           - "3.9"
           - "3.10"
@@ -31,9 +30,6 @@ jobs:
           - "pypy3.10"
         image: 
           - "ubuntu-22.04"
-        include:
-          - python-version: "3.6"
-            image: "ubuntu-20.04"
     steps:
       - name: Checkout
         uses: "actions/checkout@v4"
diff --git a/.github/workflows/tox-fedora.yml b/.github/workflows/tox-fedora.yml
@@ -21,20 +21,16 @@ jobs:
     strategy:
       matrix:
         tox_env:
-        - py36
-        - py37
         - py38
         - py39
         - py310
         - py311
         - py312
         - py313
-        - c90-py36
-        - c90-py37
         - py3-nosasltls
         - py3-trace
         - pypy3
         - doc
 
     # Use GitHub's Linux Docker host
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
diff --git a/CHANGES b/CHANGES
@@ -1,3 +1,32 @@
+Released 3.4.5 2025-10-10
+
+Security fixes:
+* CVE-2025-61911 (GHSA-r7r6-cc7p-4v5m): Enforce ``str`` input in
+  ``ldap.filter.escape_filter_chars`` with ``escape_mode=1``; ensure proper
+  escaping. (thanks to lukas-eu)
+* CVE-2025-61912 (GHSA-p34h-wq7j-h5v6): Correct NUL escaping in
+  ``ldap.dn.escape_dn_chars`` to ``\00`` per RFC 4514. (thanks to aradona91)
+
+Fixes:
+* ReconnectLDAPObject now properly reconnects on UNAVAILABLE, CONNECT_ERROR
+  and TIMEOUT exceptions (previously only SERVER_DOWN), fixing reconnection
+  issues especially during server restarts
+* Fixed syncrepl.py to use named constants instead of raw decimal values
+  for result types
+* Fixed error handling in SearchNoOpMixIn to prevent a undefined variable error
+
+Tests:
+* Added comprehensive reconnection test cases including concurrent operation
+  handling and server restart scenarios
+
+Doc/
+* Updated installation docs and fixed various documentation typos
+* Added ReadTheDocs configuration file
+
+Infrastructure:
+* Add testing and document support for Python 3.13
+
+----------------------------------------------------------------
 Released 3.4.4 2022-11-17
 
 Fixes:
diff --git a/Lib/ldap/cidict.py b/Lib/ldap/cidict.py
@@ -85,7 +85,7 @@ def strlist_minus(a,b):
   a,b are supposed to be lists of case-insensitive strings.
   """
   warnings.warn(
-    "strlist functions are deprecated and will be removed in 3.5",
+    "strlist functions are deprecated and will be removed in 4.0",
     category=DeprecationWarning,
     stacklevel=2,
   )
@@ -105,7 +105,7 @@ def strlist_intersection(a,b):
   Return intersection of two lists of case-insensitive strings a,b.
   """
   warnings.warn(
-    "strlist functions are deprecated and will be removed in 3.5",
+    "strlist functions are deprecated and will be removed in 4.0",
     category=DeprecationWarning,
     stacklevel=2,
   )
@@ -125,7 +125,7 @@ def strlist_union(a,b):
   Return union of two lists of case-insensitive strings a,b.
   """
   warnings.warn(
-    "strlist functions are deprecated and will be removed in 3.5",
+    "strlist functions are deprecated and will be removed in 4.0",
     category=DeprecationWarning,
     stacklevel=2,
   )
diff --git a/Lib/ldap/ldapobject.py b/Lib/ldap/ldapobject.py
@@ -833,7 +833,7 @@ class ReconnectLDAPObject(SimpleLDAPObject):
 
   This class also implements the pickle protocol.
 
-  .. versionadded:: 3.5
+  .. versionadded:: 3.4.5
     The exceptions :py:exc:`ldap.SERVER_DOWN`, :py:exc:`ldap.UNAVAILABLE`, :py:exc:`ldap.CONNECT_ERROR` and
     :py:exc:`ldap.TIMEOUT` (configurable via :py:attr:`_reconnect_exceptions`) now trigger a reconnect.
   """
diff --git a/Lib/ldap/pkginfo.py b/Lib/ldap/pkginfo.py
@@ -1,6 +1,6 @@
 """
 meta attributes for packaging which does not import any dependencies
 """
-__version__ = '3.4.4'
+__version__ = '3.4.5'
 __author__ = 'python-ldap project'
 __license__ = 'Python style'
diff --git a/Lib/ldapurl.py b/Lib/ldapurl.py
@@ -4,7 +4,7 @@
 See https://www.python-ldap.org/ for details.
 """
 
-__version__ = '3.4.4'
+__version__ = '3.4.5'
 
 __all__ = [
   # constants
diff --git a/Lib/ldif.py b/Lib/ldif.py
@@ -3,7 +3,7 @@
 
 See https://www.python-ldap.org/ for details.
 """
-__version__ = '3.4.4'
+__version__ = '3.4.5'
 
 __all__ = [
   # constants
diff --git a/Lib/slapdtest/__init__.py b/Lib/slapdtest/__init__.py
@@ -4,7 +4,7 @@
 See https://www.python-ldap.org/ for details.
 """
 
-__version__ = '3.4.4'
+__version__ = '3.4.5'
 
 from slapdtest._slapdtest import SlapdObject, SlapdTestCase, SysLogHandler
 from slapdtest._slapdtest import requires_ldapi, requires_sasl, requires_tls
diff --git a/tox.ini b/tox.ini
@@ -5,13 +5,11 @@
 
 [tox]
 # Note: when updating Python versions, also change setup.py and .github/worlflows/*
-envlist = py{36,37,38,39,310,311,312},c90-py{36,37},py3-nosasltls,doc,py3-trace,pypy3.9
+envlist = py{38,39,310,311,312,313},py3-nosasltls,doc,py3-trace,pypy3.9
 minver = 1.8
 
 [gh-actions]
 python =
-    3.6: py36
-    3.7: py37
     3.8: py38, doc, py3-nosasltls
     3.9: py39, py3-trace
     3.10: py310
