v11.0.0rc0

[github-actions[bot]]

📝 Release notes

📦 PyPI page: https://pypi.org/project/cheroot/11.0.0rc0

🚧 v11.0.0rc0 is marked as a pre-release.

🔗 This release has been produced by the following workflow run: https://github.com/cherrypy/cheroot/actions/runs/8713203309

v11.0.0rc0

(2024-04-16)

Bug fixes

• Fixed a flaw where internally unhandled exceptions could crash the
  worker threads and eventually starve the server of its processing
  resources. It is no longer and issue and the unhandled errors are
  now logged and suppressed except for a few expected exceptions that
  are used for normal interruption requests.

  -- by @cameronbrunner and @webknjaz

  Related issues and pull requests on GitHub: Uncaught socket exception during timeout handling #310, cherrypy SSL stops responding "ssl.SSLZeroReturnError: TLS/SSL connection has been closed (EOF) (_ssl.c:2471)" (after 5 intermediate tracebacks TLSV1_ALERT_UNKNOWN_CA or SSLV3_ALERT_CERTIFICATE_UNKNOWN) #346, Cherrypy ssl error #354,
  Threadpool worker threads exit on socket errors #358, Qualys security scanner kills all cheroot worker threads, hangs server, eats all available file descriptors #365, Windows error 10022 kills threads #375, Certain SSL failures can result in worker thread termination #599, SSL error during _conditional_error will crash worker thread #641, 🐛 Handle stray exceptions in worker threads #649.

• Fixed compatibility with Python 3.8 in the built-in TLS adapter that
  relies on :pypython:ssl.

  Modern Python versions communicate specialized exceptions
  :pyssl.SSLEOFError and :pyssl.SSLZeroReturnError where the older
  versions errored out in a very generic way.

  -- by @toppk and @webknjaz

  Related issues and pull requests on GitHub: ssl.SSLZeroReturnError exception on startup with builtin ssl backend python 3.8 or above #517, Handle SSLZeroReturnError exceptions in stdlib TLS adapter #518.

Removals and backward incompatible breaking changes

• Cheroot dropped support for Python 3.6 and 3.7. It now requires
  Python 3.8 or later.

  -- by @jaraco

  Related issues and pull requests on GitHub: Drop support for Python 3.7 #565, Drop support for Python 3.7 and earlier #633.

Packaging updates and notes for downstreams

• Started signing the package distribution artifacts in CI/CD with
  Sigstore and uploading them to GitHub Releases -- by @webknjaz.

  Related commits on GitHub:
  27a3c944,
  c45f184e.

• The minimum version of the setuptools-scm build dependency has
  been set to 7. The Git archives are now produced by it natively,
  instead of relying on a third party plugin which is no longer being
  used.

  -- by @serhii73

  Related issues and pull requests on GitHub: Use setuptools-scm v7+ for building the dists #628.

• The changelog management is now implemented through the
  :stdTowncrier <towncrier:index> tool -- by @webknjaz.

  The contributors are now expected to :stdinclude change log fragment files in their pull requests <adding change notes with your prs>.

  These news snippets can link one or more issues or pull requests,
  and be of one or more of the following categories:

  • bugfix: A bug fix for something we deemed an improper
    undesired behavior that got corrected in the release to match
    pre-agreed expectations.
  • feature: A new behavior, public APIs. That sort of stuff.
  • deprecation: A declaration of future API removals and breaking
    changes in behavior.
  • breaking: When something public gets removed in a breaking
    way. Could be deprecated in an earlier release.
  • doc: Notable updates to the documentation structure or build
    process.
  • packaging: Notes for downstreams about unobvious side effects
    and tooling. Changes in the test invocation considerations and
    runtime assumptions.
  • contrib: Stuff that affects the contributor experience. e.g.
    Running tests, building the docs, setting up the development
    environment.
  • misc: Changes that are hard to assign to any of the above
    categories.

  Related issues and pull requests on GitHub: 📝 Integrate Towncrier #654.

Contributor-facing changes

• Started type-checking the project with MyPy against a range of
  versions instead of just one — Python 3.8–3.12 -- by @webknjaz.

  Related commits on GitHub:
  4fa1e663,
  676edc4e,
  be9dbc41.

• The project how has a .git-blame-ignore-revs letting GitHub know
  which auto-formatting revisions to ignore. It is also possible to
  integrate it locally, if one wants to do so.

  -- by @webknjaz

  Related commits on GitHub:
  5980a3fb,
  f8a1cc4d.

• The project adopted the autopep8 tool to assist with automatic
  code formatting. It is chosen over black because it is less
  intrusive which is important to the maintainer as it promotes
  inclusivity. autopep8 is integrated into the pre-commit check
  runner and is configured to only correct 8 violations, avoiding
  changes to compliant snippets.

  -- by @webknjaz

  Related commits on GitHub:
  65ba7e69.

• The continuous integration and pull request merges have been set up
  to only merge pull requests through merge queues -- by @webknjaz.

  Related commits on GitHub:
  a7149e0c.

• Documented the upgraded :stdrelease process <contributing/release_guide> -- by @webknjaz.

  Related commits on GitHub:
  df0d1a08.

• The changelog management is now implemented through the
  :stdTowncrier <towncrier:index> tool -- by @webknjaz.

  The contributors are now expected to :stdinclude change log fragment files in their pull requests <adding change notes with your prs>.

  These news snippets can link one or more issues or pull requests,
  and be of one or more of the following categories:

  • bugfix: A bug fix for something we deemed an improper
    undesired behavior that got corrected in the release to match
    pre-agreed expectations.
  • feature: A new behavior, public APIs. That sort of stuff.
  • deprecation: A declaration of future API removals and breaking
    changes in behavior.
  • breaking: When something public gets removed in a breaking
    way. Could be deprecated in an earlier release.
  • doc: Notable updates to the documentation structure or build
    process.
  • packaging: Notes for downstreams about unobvious side effects
    and tooling. Changes in the test invocation considerations and
    runtime assumptions.
  • contrib: Stuff that affects the contributor experience. e.g.
    Running tests, building the docs, setting up the development
    environment.
  • misc: Changes that are hard to assign to any of the above
    categories.

  Related issues and pull requests on GitHub: 📝 Integrate Towncrier #654.

---

---

This discussion was created from the release v11.0.0rc0.

[webknjaz]

(context: #365 (comment))

[webknjaz]

UPD: Most of the changes listed above ended up in v10.0.1 and the rest will be released as a part of the 11.x.x series later on.