Issue #14455: plistlib now supports binary plists and has an updated API.

This patch adds support for binary plists on OSX to plistlib (based
on a patch by 'dpounces').

The patch also cleans up the API for the plistlib module.
Issue #19682: Fix compatibility issue with old version of OpenSSL that
was introduced by Issue #18379.
merge
Print Tk patchlevel in Tk and Ttk tests in verbose mode (issue19654).
Print Tk patchlevel in Tk and Ttk tests in verbose mode (issue19654).
asyncio: Make Semaphore(0) work properly.
Better behavior when stepping over yield[from]. Fixes issue 16596. By Xavier de Gaye.
Close #18294: Fix the zlib module to make it 64-bit safe
Issue #8813: Add SSLContext.verify_flags to change the verification flags
of the context in order to enable certification revocation list (CRL)
checks or strict X509 rules.
lst might be NULL here
CID 1130752:  Dereference after null check  (FORWARD_NULL)
downcast len to int. The code has already checked that len < INT_MAX
one CERT_REQUIRED is enough
silence an overflow warning. slen is smaller than 1MB
- Issue #19555: Restore sysconfig.get_config_var('SO'), with a
  DeprecationWarning pointing people at $EXT_SUFFIX.
trunk merge
Issue #19664: test_userdict's repr test no longer depends on the order
of dict elements.
Original patch by Serhiy Storchaka
merge
Issue #19681: Apply a quick and minimal band-aid.
The flaky buildbots make it hard to detect real issue. This is just a temporary fix until we agree
on a permanent solution.
Issue #17134: Finalize interface to Windows' certificate store. Cert and
CRL enumeration are now two functions. enum_certificates() also returns
purpose flags as set of OIDs.
Issue #18147: Add missing documentation for SSLContext.get_ca_certs().
Also change the argument name to the same name as getpeercert()