diff --git a/CHANGES.rst b/CHANGES.rst index 0e2ff68cbe3..d14740c407f 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -10,6 +10,32 @@ .. towncrier release notes start +3.12.12 (2025-06-09) +==================== + +Bug fixes +--------- + +- Fixed cookie unquoting to properly handle octal escape sequences in cookie values (e.g., ``\012`` for newline) by vendoring the correct ``_unquote`` implementation from Python's ``http.cookies`` module -- by :user:`bdraco`. + + + *Related issues and pull requests on GitHub:* + :issue:`11173`. + + + +- Fixed ``Cookie`` header parsing to treat attribute names as regular cookies per :rfc:`6265#section-5.4` -- by :user:`bdraco`. + + + *Related issues and pull requests on GitHub:* + :issue:`11178`. + + + + +---- + + 3.12.11 (2025-06-07) ==================== diff --git a/CHANGES/11173.bugfix.rst b/CHANGES/11173.bugfix.rst deleted file mode 100644 index 9214080d267..00000000000 --- a/CHANGES/11173.bugfix.rst +++ /dev/null @@ -1 +0,0 @@ -Fixed cookie unquoting to properly handle octal escape sequences in cookie values (e.g., ``\012`` for newline) by vendoring the correct ``_unquote`` implementation from Python's ``http.cookies`` module -- by :user:`bdraco`. diff --git a/CHANGES/11178.bugfix.rst b/CHANGES/11178.bugfix.rst deleted file mode 100644 index dc74cddde06..00000000000 --- a/CHANGES/11178.bugfix.rst +++ /dev/null @@ -1 +0,0 @@ -Fixed ``Cookie`` header parsing to treat attribute names as regular cookies per :rfc:`6265#section-5.4` -- by :user:`bdraco`.