Security fixes:
- Remove import-time loading of timezone offset data from pickle to prevent
unsafe deserialization from packaged data - Replace
eval()use when parsingno_word_spacingwith strict boolean
parsing to prevent code execution from locale metadata (#1056)
New features:
- Add support for expressions like "N {interval} from now" in English (#1271)
- Add support for the
en-USlocale (#1222)
Fixes:
- Honor
REQUIRE_PARTSfor ambiguous month-number inputs by retrying with a
year-biasedDATE_ORDER(#1298) - Fix parsing word-number relative phrases such as "two days later" (#1316)
- Allow md5hash to work in FIPS environments (#1267)
Improvements: