RestrictedPython 8.1__tar.gz → 8.2__tar.gz

{restrictedpython-8.1 → restrictedpython-8.2}/.pre-commit-config.yaml

@@ -1,9 +1,9 @@
-# Generated from:
-# https://github.com/zopefoundation/meta/tree/master/config/pure-python
+# Generated with zope.meta (https://zopemeta.readthedocs.io/) from:
+# https://github.com/zopefoundation/meta/tree/master/src/zope/meta/pure-python
 minimum_pre_commit_version: '3.6'
 repos:
   - repo: https://github.com/pycqa/isort
-    rev: "7.0.0"
+    rev: "8.0.1"
     hooks:
     - id: isort
   - repo: https://github.com/hhatto/autopep8
@@ -12,14 +12,15 @@ repos:
     - id: autopep8
       args: [--in-place, --aggressive, --aggressive]
   - repo: https://github.com/asottile/pyupgrade
-    rev: v3.21.0
+    rev: v3.21.2
     hooks:
     - id: pyupgrade
-      args: [--py39-plus]
+      args: [--py310-plus]
   - repo: https://github.com/isidentical/teyit
     rev: 0.4.3
     hooks:
     - id: teyit
+      language_version: python3.13
   - repo: https://github.com/PyCQA/flake8
     rev: "7.3.0"
     hooks:

{restrictedpython-8.1 → restrictedpython-8.2}/.readthedocs.yaml

@@ -1,5 +1,5 @@
-# Generated from:
-# https://github.com/zopefoundation/meta/tree/master/config/pure-python
+# Generated with zope.meta (https://zopemeta.readthedocs.io/) from:
+# https://github.com/zopefoundation/meta/tree/master/src/zope/meta/pure-python
 # Read the Docs configuration file
 # See https://docs.readthedocs.io/en/stable/config-file/v2.html for details
 

{restrictedpython-8.1 → restrictedpython-8.2}/CHANGES.rst

@@ -1,17 +1,22 @@
 Changes
 =======
 
-8.1 (2025-10-19)
+8.2 (2026-05-29)
 ----------------
 
-- Allow to use the package with Python 3.14 including t-string support.
+- Remove documentation that appears to promote unsupported direct guards usage.
+
+- Move package metadata from setup.py to pyproject.toml.
+
+- Drop support for Python 3.9.
 
+- Allow the ``...`` (Ellipsis) statement.
 
-8.1a1.dev0 (2025-03-20)
------------------------
 
-- Allow to use the package with Python 3.14 -- Caution: No security
-  audit has been done so far.
+8.1 (2025-10-19)
+----------------
+
+- Allow to use the package with Python 3.14 including t-string support.
 
 
 8.0 (2025-01-23)

{restrictedpython-8.1 → restrictedpython-8.2}/CONTRIBUTING.md

@@ -1,6 +1,6 @@
 <!--
-Generated from:
-https://github.com/zopefoundation/meta/tree/master/config/pure-python
+Generated with zope.meta (https://zopemeta.readthedocs.io/) from:
+https://github.com/zopefoundation/meta/tree/master/src/zope/meta/pure-python
 -->
 # Contributing to zopefoundation projects
 

{restrictedpython-8.1 → restrictedpython-8.2}/MANIFEST.in

@@ -1,5 +1,5 @@
-# Generated from:
-# https://github.com/zopefoundation/meta/tree/master/config/pure-python
+# Generated with zope.meta (https://zopemeta.readthedocs.io/) from:
+# https://github.com/zopefoundation/meta/tree/master/src/zope/meta/pure-python
 include *.md
 include *.rst
 include *.txt

{restrictedpython-8.1 → restrictedpython-8.2}/PKG-INFO

@@ -1,21 +1,19 @@
 Metadata-Version: 2.4
 Name: RestrictedPython
-Version: 8.1
+Version: 8.2
 Summary: RestrictedPython is a defined subset of the Python language which allows to provide a program input into a trusted environment.
-Home-page: https://github.com/zopefoundation/RestrictedPython
-Author: Zope Foundation and Contributors
-Author-email: zope-dev@zope.dev
-License: ZPL-2.1
+Author-email: Zope Foundation and contributors <zope-dev@zope.dev>
+Maintainer-email: Plone Foundation and contributors <zope-dev@zope.dev>
+License-Expression: ZPL-2.1
 Project-URL: Documentation, https://restrictedpython.readthedocs.io/
+Project-URL: Issues, https://github.com/zopefoundation/RestrictedPython/issues
 Project-URL: Source, https://github.com/zopefoundation/RestrictedPython
-Project-URL: Tracker, https://github.com/zopefoundation/RestrictedPython/issues
-Keywords: restricted execution security untrusted code
+Project-URL: Changelog, https://github.com/zopefoundation/RestrictedPython/blob/master/CHANGES.rst
+Keywords: restricted,execution,security,untrusted,code
 Classifier: Development Status :: 6 - Mature
-Classifier: License :: OSI Approved :: Zope Public License
 Classifier: Programming Language :: Python
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -23,7 +21,7 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Topic :: Security
-Requires-Python: >=3.9, <3.15
+Requires-Python: <3.15,>=3.10
 Description-Content-Type: text/x-rst
 License-File: LICENSE.txt
 Provides-Extra: test
@@ -32,19 +30,7 @@ Requires-Dist: pytest-mock; extra == "test"
 Provides-Extra: docs
 Requires-Dist: Sphinx; extra == "docs"
 Requires-Dist: furo; extra == "docs"
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: home-page
-Dynamic: keywords
-Dynamic: license
 Dynamic: license-file
-Dynamic: project-url
-Dynamic: provides-extra
-Dynamic: requires-python
-Dynamic: summary
 
 .. image:: https://github.com/zopefoundation/RestrictedPython/actions/workflows/tests.yml/badge.svg
     :target: https://github.com/zopefoundation/RestrictedPython/actions/workflows/tests.yml
@@ -137,17 +123,22 @@ the documentation `Contributing page
 Changes
 =======
 
-8.1 (2025-10-19)
+8.2 (2026-05-29)
 ----------------
 
-- Allow to use the package with Python 3.14 including t-string support.
+- Remove documentation that appears to promote unsupported direct guards usage.
+
+- Move package metadata from setup.py to pyproject.toml.
+
+- Drop support for Python 3.9.
 
+- Allow the ``...`` (Ellipsis) statement.
 
-8.1a1.dev0 (2025-03-20)
------------------------
 
-- Allow to use the package with Python 3.14 -- Caution: No security
-  audit has been done so far.
+8.1 (2025-10-19)
+----------------
+
+- Allow to use the package with Python 3.14 including t-string support.
 
 
 8.0 (2025-01-23)

{restrictedpython-8.1 → restrictedpython-8.2}/buildout.cfg

@@ -3,7 +3,6 @@ develop = .
 parts =
     sphinx
 
-
 [sphinx]
 recipe = zc.recipe.egg
 eggs =

{restrictedpython-8.1 → restrictedpython-8.2}/docs/conf.py

@@ -60,9 +60,9 @@ author = 'The Zope & Plone developer community'
 # built documents.
 #
 # The short X.Y version.
-version = '8.1'
+version = '8.2'
 # The full version, including alpha/beta/rc tags.
-release = '8.1'
+release = '8.2'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.
@@ -112,7 +112,6 @@ todo_include_todos = True
 # Intersphinx Mapping for Links between different Documentations
 intersphinx_mapping = {
     'python3': ('https://docs.python.org/3', None),
-    'python39': ('https://docs.python.org/3.9', None),
     'python310': ('https://docs.python.org/3.10', None),
     'python311': ('https://docs.python.org/3.11', None),
     'python312': ('https://docs.python.org/3.12', None),

{restrictedpython-8.1 → restrictedpython-8.2}/docs/contributing/index.rst

@@ -98,7 +98,6 @@ A (modified style) Copy of all Abstract Grammar Definitions for the Python versi
 .. toctree::
    :maxdepth: 2
 
-   changes_from38to39
    changes_from39to310
    changes_from310to311
    changes_from311to312
@@ -241,7 +240,6 @@ Technical Backgrounds - Links to External Documentation
     * `Python 3.12 AST`_ (EOL 2028-10)
     * `Python 3.11 AST`_ (EOL 2027-10)
     * `Python 3.10 AST`_ (EOL 2026-10)
-    * `Python 3.9 AST`_ (EOL 2025-10)
 
   * `AST NodeVistiors Class`_
   * `AST NodeTransformer Class`_
@@ -269,8 +267,6 @@ Todos
 
 .. _`What's new in Python 3.10`: https://docs.python.org/3.10/whatsnew/3.10.html
 
-.. _`What's new in Python 3.9`: https://docs.python.org/3.9/whatsnew/3.9.html
-
 .. _`Status of Python Versions`: https://devguide.python.org/versions/
 
 .. _`Concept of Immutable Types and Python Example`: https://en.wikipedia.org/wiki/Immutable_object#Python
@@ -295,8 +291,6 @@ Todos
 
 .. _`Python 3.10 AST`: https://docs.python.org/3.10/library/ast.html#abstract-grammar
 
-.. _`Python 3.9 AST`: https://docs.python.org/3.9/library/ast.html#abstract-grammar
-
 .. _`AST NodeVistiors Class`: https://docs.python.org/3/library/ast.html#ast.NodeVisitor
 
 .. _`AST NodeTransformer Class`: https://docs.python.org/3/library/ast.html#ast.NodeTransformer

{restrictedpython-8.1 → restrictedpython-8.2}/docs/index.rst

@@ -15,7 +15,7 @@ RestrictedPython is not a sandbox system or a secured environment, but it helps
 Supported Python versions
 =========================
 
-RestrictedPython supports CPython 3.9 up to 3.13.
+RestrictedPython supports CPython 3.10 up to 3.14.
 It does _not_ support PyPy or other alternative Python implementations.
 
 Contents

{restrictedpython-8.1 → restrictedpython-8.2}/docs/usage/policy.rst

@@ -167,71 +167,3 @@ unsafe operations, such as opening files:
     Traceback (most recent call last):
       ...
     NameError: name 'open' is not defined
-
-Guards
-......
-
-Here's an example of a write guard that never lets restricted code
-modify (assign, delete an attribute or item) except dictionaries and
-lists:
-
-.. code-block:: pycon
-
-    >>> from RestrictedPython.Guards import full_write_guard
-    >>> _write_ = full_write_guard
-    >>> _getattr_ = getattr
-
-    >>> class BikeShed(object):
-    ...     colour = 'green'
-    ...
-    >>> shed = BikeShed()
-
-Normally accessing attributes works as expected, because we're using
-the standard ``getattr`` function for the ``_getattr_`` guard:
-
-.. code-block:: pycon
-
-    >>> src = '''
-    ... print(shed.colour)
-    ... result = printed
-    ... '''
-    >>> code = compile_restricted(src, '<string>', 'exec')
-    >>> exec(code)
-
-    >>> result
-    'green\n'
-
-However, changing an attribute doesn't work:
-
-.. code-block:: pycon
-
-    >>> src = '''
-    ... shed.colour = 'red'
-    ... '''
-    >>> code = compile_restricted(src, '<string>', 'exec')
-    >>> exec(code)
-    Traceback (most recent call last):
-      ...
-    TypeError: attribute-less object (assign or del)
-
-As said, this particular write guard (``full_write_guard``) will allow
-restricted code to modify lists and dictionaries:
-
-.. code-block:: pycon
-
-    >>> fibonacci = [1, 1, 2, 3, 4]
-    >>> transl = dict(one=1, two=2, tres=3)
-    >>> src = '''
-    ... # correct mistake in list
-    ... fibonacci[-1] = 5
-    ... # one item doesn't belong
-    ... del transl['tres']
-    ... '''
-    >>> code = compile_restricted(src, '<string>', 'exec')
-    >>> exec(code)
-
-    >>> fibonacci
-    [1, 1, 2, 3, 5]
-
-    >>> sorted(transl.keys())
-    ['one', 'two']

restrictedpython-8.2/pyproject.toml

@@ -0,0 +1,85 @@
+# Generated with zope.meta (https://zopemeta.readthedocs.io/) from:
+# https://github.com/zopefoundation/meta/tree/master/src/zope/meta/pure-python
+[build-system]
+requires = [
+    "setuptools >= 78.1.1,< 82",
+    "wheel",
+]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "RestrictedPython"
+version = "8.2"
+description = "RestrictedPython is a defined subset of the Python language which allows to provide a program input into a trusted environment."
+license = "ZPL-2.1"
+classifiers = [
+    "Development Status :: 6 - Mature",
+    "Programming Language :: Python",
+    "Operating System :: OS Independent",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+    "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: Implementation :: CPython",
+    "Topic :: Security",
+]
+dynamic = ["readme"]
+requires-python = ">=3.10, <3.15"
+authors = [
+    {name = "Zope Foundation and contributors",email = "zope-dev@zope.dev"},
+]
+maintainers = [
+    {name = "Plone Foundation and contributors",email = "zope-dev@zope.dev"},
+]
+keywords = [
+    "restricted",
+    "execution",
+    "security",
+    "untrusted",
+    "code",
+]
+
+[project.optional-dependencies]
+test = [
+    "pytest",
+    "pytest-mock",
+]
+docs = [
+    "Sphinx",
+    "furo",
+]
+
+[project.urls]
+Documentation = "https://restrictedpython.readthedocs.io/"
+Issues = "https://github.com/zopefoundation/RestrictedPython/issues"
+Source = "https://github.com/zopefoundation/RestrictedPython"
+Changelog = "https://github.com/zopefoundation/RestrictedPython/blob/master/CHANGES.rst"
+
+[tool.coverage.run]
+branch = true
+source = ["RestrictedPython"]
+
+[tool.coverage.report]
+fail_under = 97.1
+precision = 2
+ignore_errors = true
+show_missing = true
+exclude_lines = [
+    "pragma: no cover",
+    "pragma: nocover",
+    "except ImportError:",
+    "raise NotImplementedError",
+    "if __name__ == '__main__':",
+    "self.fail",
+    "raise AssertionError",
+    "raise unittest.Skip",
+]
+
+[tool.coverage.html]
+directory = "parts/htmlcov"
+
+[tool.setuptools.dynamic]
+readme = {file = ["README.rst", "CHANGES.rst"]}
+

restrictedpython-8.2/setup.py

@@ -0,0 +1,20 @@
+##############################################################################
+#
+# Copyright (c) 2006 Zope Foundation and Contributors.
+# All Rights Reserved.
+#
+# This software is subject to the provisions of the Zope Public License,
+# Version 2.1 (ZPL).  A copy of the ZPL should accompany this distribution.
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
+# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
+# FOR A PARTICULAR PURPOSE.
+#
+##############################################################################
+"""Setup for RestrictedPython package"""
+
+from setuptools import setup
+
+
+# See pyproject.toml for package metadata
+setup()

{restrictedpython-8.1 → restrictedpython-8.2}/src/RestrictedPython/Guards.py

@@ -27,6 +27,7 @@ _safe_names = [
     'None',
     'False',
     'True',
+    'Ellipsis',
     'abs',
     'bool',
     'bytes',

{restrictedpython-8.1 → restrictedpython-8.2}/src/RestrictedPython/_compat.py

@@ -3,7 +3,6 @@ import sys
 
 
 _version = sys.version_info
-IS_PY310_OR_GREATER = _version.major == 3 and _version.minor >= 10
 IS_PY311_OR_GREATER = _version.major == 3 and _version.minor >= 11
 IS_PY312_OR_GREATER = _version.major == 3 and _version.minor >= 12
 IS_PY313_OR_GREATER = _version.major == 3 and _version.minor >= 13

{restrictedpython-8.1 → restrictedpython-8.2}/src/RestrictedPython/transformer.py

@@ -356,60 +356,11 @@ class RestrictingNodeTransformer(ast.NodeTransformer):
         return (tmp_target, cleanup)
 
     def gen_none_node(self):
-        return ast.NameConstant(value=None)
+        return ast.Constant(None)
 
     def gen_del_stmt(self, name_to_del):
         return ast.Delete(targets=[ast.Name(name_to_del, ast.Del())])
 
-    def transform_slice(self, slice_):
-        """Transform slices into function parameters.
-
-        ast.Slice nodes are only allowed within a ast.Subscript node.
-        To use a slice as an argument of ast.Call it has to be converted.
-        Conversion is done by calling the 'slice' function from builtins
-        """
-
-        if isinstance(slice_, ast.expr):
-            # Python 3.9+
-            return slice_
-
-        elif isinstance(slice_, ast.Index):
-            return slice_.value
-
-        elif isinstance(slice_, ast.Slice):
-            # Create a python slice object.
-            args = []
-
-            if slice_.lower:
-                args.append(slice_.lower)
-            else:
-                args.append(self.gen_none_node())
-
-            if slice_.upper:
-                args.append(slice_.upper)
-            else:
-                args.append(self.gen_none_node())
-
-            if slice_.step:
-                args.append(slice_.step)
-            else:
-                args.append(self.gen_none_node())
-
-            return ast.Call(
-                func=ast.Name('slice', ast.Load()),
-                args=args,
-                keywords=[])
-
-        elif isinstance(slice_, ast.ExtSlice):
-            dims = ast.Tuple([], ast.Load())
-            for item in slice_.dims:
-                dims.elts.append(self.transform_slice(item))
-            return dims
-
-        else:  # pragma: no cover
-            # Index, Slice and ExtSlice are only defined Slice types.
-            raise NotImplementedError(f"Unknown slice type: {slice_}")
-
     def check_name(self, node, name, allow_magic_methods=False):
         """Check names if they are allowed.
 
@@ -525,20 +476,12 @@ class RestrictingNodeTransformer(ast.NodeTransformer):
     # ast for Literals
 
     def visit_Constant(self, node):
-        """Allow constant literals with restriction for Ellipsis.
+        """Allow constant literals.
 
         Constant replaces Num, Str, Bytes, NameConstant and Ellipsis in
         Python 3.8+.
         :see: https://docs.python.org/dev/whatsnew/3.8.html#deprecated
         """
-        if node.value is Ellipsis:
-            # Deny using `...`.
-            # Special handling necessary as ``self.not_allowed(node)``
-            # would return the Error Message:
-            # 'Constant statements are not allowed.'
-            # which is only partial true.
-            self.error(node, 'Ellipsis statements are not allowed.')
-            return
         return self.node_contents_visit(node)
 
     def visit_Interactive(self, node):
@@ -932,7 +875,7 @@ class RestrictingNodeTransformer(ast.NodeTransformer):
         if isinstance(node.ctx, ast.Load):
             new_node = ast.Call(
                 func=ast.Name('_getitem_', ast.Load()),
-                args=[node.value, self.transform_slice(node.slice)],
+                args=[node.value, node.slice],
                 keywords=[])
 
             copy_locations(new_node, node)
@@ -953,24 +896,12 @@ class RestrictingNodeTransformer(ast.NodeTransformer):
             raise NotImplementedError(
                 f"Unknown ctx type: {type(node.ctx)}")
 
-    def visit_Index(self, node):
-        """
-
-        """
-        return self.node_contents_visit(node)
-
     def visit_Slice(self, node):
         """
 
         """
         return self.node_contents_visit(node)
 
-    def visit_ExtSlice(self, node):
-        """
-
-        """
-        return self.node_contents_visit(node)
-
     # Comprehensions
 
     def visit_ListComp(self, node):

{restrictedpython-8.1 → restrictedpython-8.2}/src/RestrictedPython.egg-info/PKG-INFO

@@ -1,21 +1,19 @@
 Metadata-Version: 2.4
 Name: RestrictedPython
-Version: 8.1
+Version: 8.2
 Summary: RestrictedPython is a defined subset of the Python language which allows to provide a program input into a trusted environment.
-Home-page: https://github.com/zopefoundation/RestrictedPython
-Author: Zope Foundation and Contributors
-Author-email: zope-dev@zope.dev
-License: ZPL-2.1
+Author-email: Zope Foundation and contributors <zope-dev@zope.dev>
+Maintainer-email: Plone Foundation and contributors <zope-dev@zope.dev>
+License-Expression: ZPL-2.1
 Project-URL: Documentation, https://restrictedpython.readthedocs.io/
+Project-URL: Issues, https://github.com/zopefoundation/RestrictedPython/issues
 Project-URL: Source, https://github.com/zopefoundation/RestrictedPython
-Project-URL: Tracker, https://github.com/zopefoundation/RestrictedPython/issues
-Keywords: restricted execution security untrusted code
+Project-URL: Changelog, https://github.com/zopefoundation/RestrictedPython/blob/master/CHANGES.rst
+Keywords: restricted,execution,security,untrusted,code
 Classifier: Development Status :: 6 - Mature
-Classifier: License :: OSI Approved :: Zope Public License
 Classifier: Programming Language :: Python
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -23,7 +21,7 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Topic :: Security
-Requires-Python: >=3.9, <3.15
+Requires-Python: <3.15,>=3.10
 Description-Content-Type: text/x-rst
 License-File: LICENSE.txt
 Provides-Extra: test
@@ -32,19 +30,7 @@ Requires-Dist: pytest-mock; extra == "test"
 Provides-Extra: docs
 Requires-Dist: Sphinx; extra == "docs"
 Requires-Dist: furo; extra == "docs"
-Dynamic: author
-Dynamic: author-email
-Dynamic: classifier
-Dynamic: description
-Dynamic: description-content-type
-Dynamic: home-page
-Dynamic: keywords
-Dynamic: license
 Dynamic: license-file
-Dynamic: project-url
-Dynamic: provides-extra
-Dynamic: requires-python
-Dynamic: summary
 
 .. image:: https://github.com/zopefoundation/RestrictedPython/actions/workflows/tests.yml/badge.svg
     :target: https://github.com/zopefoundation/RestrictedPython/actions/workflows/tests.yml
@@ -137,17 +123,22 @@ the documentation `Contributing page
 Changes
 =======
 
-8.1 (2025-10-19)
+8.2 (2026-05-29)
 ----------------
 
-- Allow to use the package with Python 3.14 including t-string support.
+- Remove documentation that appears to promote unsupported direct guards usage.
+
+- Move package metadata from setup.py to pyproject.toml.
+
+- Drop support for Python 3.9.
 
+- Allow the ``...`` (Ellipsis) statement.
 
-8.1a1.dev0 (2025-03-20)
------------------------
 
-- Allow to use the package with Python 3.14 -- Caution: No security
-  audit has been done so far.
+8.1 (2025-10-19)
+----------------
+
+- Allow to use the package with Python 3.14 including t-string support.
 
 
 8.0 (2025-01-23)