Mailman 3 January 2023 - Python-list

>>> %matplotlib inline results in SyntaxError: invalid syntax
by Mike S Dec. 25, 2023

Dec. 25, 2023

I have installed Python 3.4.4 on XPSP3 and am trying to work my way through this tutorial. A Complete Tutorial on Ridge and Lasso Regression in Python http://www.analyticsvidhya.com/blog/2016/01/complete-tutorial-ridge-lasso-r… In Step 2 "Why Penalize the Magnitude of Coefficients?" we are shown this code: #Importing libraries. The same will be used throughout the article. import numpy as np import pandas as pd import random import matplotlib.pyplot as plt %matplotlib inline I get an error on the last line. I am running this code in Idle Python 3.4.4 Shell... Python 3.4.4 (v3.4.4:737efcadf5a6, Dec 20 2015, 19:28:18) [MSC v.1600 32 bit (Intel)] on win32 Type "copyright", "credits" or "license()" for more information. >>> import numpy as np >>> import pandas as pd >>> import random >>> import matplotlib.pyplot as plt >>> %matplotlib inline SyntaxError: invalid syntax What am I doing wrong? Suggested reading? TIA, Mike

7 8

Re: How to add CC and BCC while sending mails using python
by akegb3＠gmail.com June 20, 2023

June 20, 2023

On Tuesday, September 30, 2008 8:00:16 AM UTC-8, Bernhard Walle wrote: > Hi, > > * cindy jones [2008-09-30 19:57]: > > > > Can someone tel me how to add cc's and bcc's while sending mails using > > python > > Following (tested) snippet should help: > > ------------------ 8< ------------------------------ > from smtplib import SMTP > from email.mime.image import MIMEImage > from email.mime.text import MIMEText > from email.mime.multipart import MIMEMultipart > > to = 'to_address(a)example.invalid' > cc = 'cc_address(a)example.invalid' > bcc = 'bcc_address(a)example.invalid' > > msg = MIMEMultipart() > msg['To'] = to > msg['Cc'] = cc > msg['From'] = 'bernhard(a)bwalle.de' > msg['Subject'] = 'Test' > text = MIMEText('Das ist ein Test') > text.add_header("Content-Disposition", "inline") > msg.attach(text) > > s = SMTP('test.smtp.relay') > s.sendmail(msg['From'], [to, cc, bcc], msg.as_string()) > s.quit() > ------------------ >8 ------------------------------ > > > Regards, > Bernhard Hello Bernhard, I've tried the above code and the bcc address does not receive the message, on the To & CC addresses receive it. Here are snippets from my code, perhaps something will stand out to you? to = 'ed(a)domain.gov' cc = 'ed(a)gmailmail.com' bcc = 'ed(a)home.net' msg = MIMEMultipart() msg['To'] = to msg['Cc'] = cc msg['Subject'] = 'My Subject text here' msg['From'] = 'edsboss(a)domain.gov' smtp = SMTP("smtpserver") smtp.ehlo() smtp.sendmail(msg['From'], [to, cc, bcc], msg.as_string()) Thanks in advance..hope you're still out there!! ~Ed

3 2

[RELEASE] Python 3.11.1, 3.10.9, 3.9.16, 3.8.16, 3.7.16, and 3.12.0 alpha 3 are now available
by Łukasz Langa Feb. 18, 2023

Feb. 18, 2023

Greetings! We bring you a slew of releases this fine Saint Nicholas / Sinterklaas day. Six simultaneous releases has got to be some record. There’s one more record we broke this time, you’ll see below. In any case, updating is recommended due to security content: 3.7 - 3.12: gh-98739 <https://github.com/python/cpython/issues/98739>: Updated bundled libexpat to 2.5.0 to fix CVE-2022-43680 <https://nvd.nist.gov/vuln/detail/CVE-2022-43680> (heap use-after-free). 3.7 - 3.12: gh-98433 <https://github.com/python/cpython/issues/98433>: The IDNA codec decoder used on DNS hostnames by socket or asyncio related name resolution functions no longer involves a quadratic algorithm to fix CVE-2022-45061 <https://nvd.nist.gov/vuln/detail/CVE-2022-45061>. This prevents a potential CPU denial of service if an out-of-spec excessive length hostname involving bidirectional characters were decoded. Some protocols such as urllib http 3xx redirects potentially allow for an attacker to supply such a name. 3.7 - 3.12: gh-100001 <https://github.com/python/cpython/issues/100001>: python -m http.server no longer allows terminal control characters sent within a garbage request to be printed to the stderr server log. 3.8 - 3.12: gh-87604 <https://github.com/python/cpython/issues/87604>: Avoid publishing list of active per-interpreter audit hooks via the gc module. 3.9 - 3.10 (already released in 3.11+ before): gh-97514 <https://github.com/python/cpython/issues/97514>: On Linux the multiprocessing module returns to using filesystem backed unix domain sockets for communication with the forkserver process instead of the Linux abstract socket namespace. Only code that chooses to use the “forkserver” start method is affected. This prevents Linux CVE-2022-42919 <https://nvd.nist.gov/vuln/detail/CVE-2022-42919> (potential privilege escalation) as abstract sockets have no permissions and could allow any user on the system in the same network namespace (often the whole system) to inject code into the multiprocessing forkserver process. This was a potential privilege escalation. Filesystem based socket permissions restrict this to the forkserver process user as was the default in Python 3.8 and earlier. 3.7 - 3.10: gh-98517 <https://github.com/python/cpython/issues/98517>: Port XKCP’s fix for the buffer overflows in SHA-3 to fix CVE-2022-37454 <https://nvd.nist.gov/vuln/detail/CVE-2022-37454>. 3.7 - 3.9 (already released in 3.10+ before): gh-68966 <https://github.com/python/cpython/issues/68966>: The deprecated mailcap module now refuses to inject unsafe text (filenames, MIME types, parameters) into shell commands to address CVE-2015-20107 <https://nvd.nist.gov/vuln/detail/CVE-2015-20107>. Instead of using such text, it will warn and act as if a match was not found (or for test commands, as if the test failed). <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.12.0 alpha 3 Get it here, read the change log, sing a GPT-3-generated Sinterklaas song: https://www.python.org/downloads/release/python-3120a3/ <https://www.python.org/downloads/release/python-3120a3/> 216 new commits since 3.12.0 alpha 2 last month. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.11.1 Get it here, see the change log, read the recipe for quark soup: https://www.python.org/downloads/release/python-3111/ <https://www.python.org/downloads/release/python-3111/> A whopping 495 new commits since 3.11.0. This is a massive increase of changes comparing to 3.10 at the same stage in the release cycle: there were “only” 339 commits between 3.10.0 and 3.10.1. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.10.9 Get it here, read the change log, see circular patterns: https://www.python.org/downloads/release/python-3109/ <https://www.python.org/downloads/release/python-3109/> 165 new commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.9.16 Get it here, read the change log, consider upgrading to a newer version: https://www.python.org/downloads/release/python-3916/ <https://www.python.org/downloads/release/python-3916/> Security-only release with no binaries. 10 commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.8.16 Get it here, see the change log, definitely upgrade to a newer version: https://www.python.org/downloads/release/python-3816/ <https://www.python.org/downloads/release/python-3816/> Security-only release with no binaries. 9 commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>Python 3.7.16 Get it here, read the change log, check PEP 537 <https://peps.python.org/pep-0537/>to confirm EOL is coming to this version in June 2023: https://www.python.org/downloads/release/python-3716/ <https://www.python.org/downloads/release/python-3716/> Security-only release with no binaries. 8 commits. <https://discuss.python.org/t/python-3-11-1-3-10-9-3-9-16-3-8-16-3-7-16-and-…>We hope you enjoy the new releases! Thanks to all of the many volunteers who help make Python Development and these releases possible! Please consider supporting our efforts by volunteering yourself or through organization contributions to the Python Software Foundation. https://www.python.org/psf/ <https://www.python.org/psf/> Your friendly release team, Ned Deily @nad <https://discuss.python.org/u/nad> Steve Dower @steve.dower <https://discuss.python.org/u/steve.dower> Pablo Galindo Salgado @pablogsal <https://discuss.python.org/u/pablogsal> Łukasz Langa @ambv <https://discuss.python.org/u/ambv> Thomas Wouters @thomas <https://discuss.python.org/u/thomas>

3 2

Re: evaluation question
by Muttley＠dastardlyhq.com Feb. 13, 2023

Feb. 13, 2023

On Sun, 29 Jan 2023 23:57:51 -0500 Thomas Passin <list1(a)tompassin.net> wrote: >On 1/29/2023 4:15 PM, elvis-85792(a)notatla.org.uk wrote: >> On 2023-01-28, Louis Krupp <lkrupp(a)invalid.pssw.com.invalid> wrote: >>> On 1/27/2023 9:37 AM, Muttley(a)dastardlyhq.com wrote: >> >> >>>>>>> eval("print(123)") >>>> 123 >> >> >> Does OP expect the text to come from the eval or from the print? >> >>>>> x = print( [i for i in range(1, 10)] ) >> [1, 2, 3, 4, 5, 6, 7, 8, 9] >> >>>>> x >> (nothing printed) > >Because print() returns nothing (i.e., the statement x is None is True). I don't understand this. What was the point of the upheaval of converting the print command in python 2 into a function in python 3 if as a function print() doesn't return anything useful? Surely even the length of the formatted string as per C's sprintf() function would be helpful?

13 25

tree representation of Python data
by Dino Feb. 8, 2023

Feb. 8, 2023

I have a question that is a bit of a shot in the dark. I have this nice bash utility installed: $ tree -d unit/ unit/ ├── mocks ├── plugins │ ├── ast │ ├── editor │ ├── editor-autosuggest │ ├── editor-metadata │ ├── json-schema-validator │ │ └── test-documents │ └── validate-semantic │ ├── 2and3 │ ├── bugs │ └── oas3 └── standalone └── topbar-insert I just thought that it would be great if there was a Python utility that visualized a similar graph for nested data structures. Of course I am aware of indent (json.dumps()) and pprint, and they are OK options for my need. It's just that the compact, improved visualization would be nice to have. Not so nice that I would go out of my way to build, but nice enough to use an exising package. Thanks Dino

4 4

Evaluation of variable as f-string
by Johannes Bauer Feb. 7, 2023

Feb. 7, 2023

Hi there, is there an easy way to evaluate a string stored in a variable as if it were an f-string at runtime? I.e., what I want is to be able to do this: x = { "y": "z" } print(f"-> {x['y']}") This prints "-> z", as expected. But consider: x = { "y": "z" } s = "-> {x['y']}" print(s.format(x = x)) Traceback (most recent call last): File "<stdin>", line 1, in <module> KeyError: "'y'" Even though s = "-> {x}" print(s.format(x = x)) Prints the expected "-> {'y': 'z'}". This is supposedly for security reasons. However, when trying to emulate this behavior that I wanted (and know the security implications of), my solutions will tend to be less secure. Here is what I have been thinking about: 1. Somehow wrap "s" into an f-string, then eval. E.g.: eval("f'" + s + "'") This is a pain in the ass because you have to know what kind of quotation signs are used inside the expression. In the given case, this wouldn't work (but 'f"' prefix and '"' suffix would). 2. Parse the expression (regex?), then eval() the individual arguments, then run through format(). Pain in the ass to get the exact same behavior as f-strings. Probably by regex alone not even guaranteed to be parsable (especially corner cases with escaped '{' signs or ':' or '{' included inside the expression as a literal). 3. Somehow compile the bytecode representing an actual f-string expression, then execute it. Sounds like a royal pain in the butt, have not tried it. All solutions are extremely undesirable and come with heavy drawbacks. Is there any standard solution (Py3.10+) that does what I would? Anything I'm missing? Thanks, Johannes

5 13

Re: evaluation question
by Greg Ewing Feb. 1, 2023

Feb. 1, 2023

On 1/02/23 7:33 am, Stefan Ram wrote: > Thomas Passin <list1(a)tompassin.net> writes: > Some people say it is a function now so that you can redefine it. Well, that's one benefit, but I wouldn't say it's the main one. The point is really that you can do *anything* with it now that you can do with a regular function -- pass it as an argument, wrap it with another function, define your own function with a similar signature for duck-typing purposes, etc. > It would still be possible to have a special syntax for the outermost > expression of an expression statement that would allow one to omit > the parentheses, That's only one of the syntactic oddities of the old print statement, thogh. There was also the >> thing, special treatment of trailing commas, etc. Also, introducing a paren-less call syntax would be a very big and controversial change that would be way out of proportion to the problem. -- Greg

4 3

Re: Usenet vs. Mailing-list (was: evaluation question)
by Dennis Lee Bieber Jan. 31, 2023

Jan. 31, 2023

On Sat, 28 Jan 2023 15:30:59 +0100, "Peter J. Holzer" <hjp-python(a)hjp.at> declaimed the following: >On 2023-01-27 21:04:58 +0000, Ben Bacarisse wrote: >> Muttley(a)dastardlyhq.com writes: >> >> > Hi >> >> It looks like you posted this question via Usenet. comp.lang.python is >> essentially dead as a Usenet group. It exists, and gets NNTP versions >> of mail sent to the mailing list, but nothing posted to the group via >> NNTP get send on the mailing list. > >This is wrong. I did get Muttley's any your postings via the >mailing-list. > I had been tempted to ask when the list<>newsgroup link had changed, since it hadn't been announced... Now -- last time I checked the gmane server says posting is prohibited. I used to use gmane as it retrieved directly from the mailing list (which has been filtered from much spam) and not Usenet (and its open spam problem). -- Wulfraed Dennis Lee Bieber AF6VN wlfraed(a)ix.netcom.com http://wlfraed.microdiversity.freeddns.org/

3 2

Re: Usenet vs. Mailing-list (was: evaluation question)
by Jon Ribbens Jan. 31, 2023

Jan. 31, 2023

On 2023-01-28, Peter J. Holzer <hjp-python(a)hjp.at> wrote: > On 2023-01-27 21:04:58 +0000, Ben Bacarisse wrote: >> It looks like you posted this question via Usenet. comp.lang.python is >> essentially dead as a Usenet group. It exists, and gets NNTP versions >> of mail sent to the mailing list, but nothing posted to the group via >> NNTP get send on the mailing list. > > This is wrong. I did get Muttley's any your postings via the > mailing-list. Yes, it's certainly false. I only ever post via the newsgroup, and I can see my postings reach the list because they appear in the list archive on the web. https://mail.python.org/pipermail/python-list/

6 8

Custom help format for a choice argparse argument
by Ivan "Rambius" Ivanov Jan. 30, 2023

Jan. 30, 2023

Hello, I am developing a script that accepts a time zone as an option. The time zone can be any from pytz.all_timezones. I have def main(): parser = argparse.ArgumentParser() parser.add_argument("-z", "--zone", choices=pytz.all_timezones) args = parser.parse_args() print(args) print(f"Specified timezone: {args.zone}") It works, but when I run it with the -h option it dumps all entries in pytz.all_timezones. I would like to modify the help format for just -z|--zone option. I read the docs about HelpFormatter and argparse.py and I ended up with class CustomHelpFormatter(argparse.HelpFormatter): def _metavar_formatter(self, action, default_metavar): if action.dest == 'zone': result = 'zone from pytz.all_timezones' def format(tuple_size): if isinstance(result, tuple): return result else: return (result, ) * tuple_size return format else: return super(CustomHelpFormatter, self)._metavar_formatter(action, default_metavar) def main(): parser = argparse.ArgumentParser(formatter_class=CustomHelpFormatter) parser.add_argument("-z", "--zone", choices=pytz.all_timezones) args = parser.parse_args() print(args) print(f"Specified timezone: {args.zone}") This works, but is there a more elegant way to achieve it? Regards rambius -- Tangra Mega Rock: http://www.radiotangra.com

5 6