Python 3.12.6 (64-bit)

What's new in this version:

Windows:
- Updated Windows build to use OpenSSL 3.0.15
- mimetypes no longer fails when it encounters an inaccessible registry key
-Makes ssl.create_default_context() ignore invalid certificates in the Windows certificate store

Tools/Demos:
- Update GitHub CI workflows to use OpenSSL 3.0.15 and multissltests to use 3.0.15, 3.1.7, and 3.2.3

Tests:
- Skip test_gdb if the binary is relocated by BOLT

Security:
- Upgrade libexpat to 2.6.3
- Remove backtracking from tarfile header parsing for hdrcharset, PAX, and GNU sparse headers.

Library:
- Applied a more surgical fix for malformed payloads in zipfile.Path causing infinite loops (gh-122905) without breaking contents using legitimate characters.
- xml.etree.ElementTree.Element.extend() and Element assignment no longer hide the internal exception if an erronous generator is passed
-Preserve relative path in URL without netloc in urllib.parse.urlunsplit() and urllib.parse.urlunparse()
- Fix quadratic complexity in parsing "-quoted cookie values with backslashes by http.cookies
- zipfile.Path.glob now correctly matches directories instead of silently omitting them
- zipfile.Path objects now sanitize names from the zipfile
- Fixed double-free when using gc.get_referents() with a freed asyncio.Future iterator
- logging.handlers.RotatingFileHandler no longer rolls over empty log files
- Fix the typing.TypeVar constructor when name is passed by keyword
- Remove internal frames from tracebacks shown in code.InteractiveInterpreter with non-default sys.excepthook(). Save correct tracebacks in sys.last_traceback and update __traceback__ attribute of sys.last_value and sys.last_exc.
- csv now correctly parses numeric fields (when used with csv.QUOTE_NONNUMERIC) which start with an escape character.
- asyncio.futures.Future.set_exception() now transforms StopIteration into RuntimeError instead of hanging or other misbehavior
- webbrowser honors OS preferred browser on Linux when its desktop entry name contains the text of a known browser name.
- email.utils.getaddresses() and email.utils.parseaddr() now return ('', '') 2-tuples in more situations where invalid email addresses are encountered instead of potentially inaccurate values. Add optional strict parameter to these two functions: use strict=False to get the old behavior, accept malformed inputs. getattr(email.utils, 'supports_strict_parsing', False) can be use to check if the strict paramater is available
-runpy.run_path() now decodes path-like objects, making sure __file__ and sys.argv[0] of the module being run are always strings.

IDLE:
- Add explicit black IDLE Hovertip foreground color needed for recent macOS. Fixes Sonoma showing unreadable white on pale yellow

Core and Builtins:
- Prevent Parser/myreadline race condition from segfaulting on multi-threaded use
- Extend the deprecation period for bool inversion (~) by two years.
- Fix valgrind warning by initializing the f-string buffers to 0 in the tokenizer
- Fix too-wide source location in exception tracebacks coming from broken iterables in comprehensions
- Fix a bug where pattern matching code could emit a JUMP_FORWARD with no source location
- Fix a potential use-after-free in STORE_ATTR_WITH_HINT
- Fix a crash that occurred when a PyStructSequence was deallocated after its type’s dictionary was cleared by the GC. The type’s tp_basicsize now accounts for non-sequence fields that aren’t included in the Py_SIZE of the sequence.
-Fix source locations of instructions generated for with statements

Build:
- Propagate the value of LDFLAGS to LDCXXSHARED in sysconfig