Most of the work is by Alexandre.

#13633: Added a new convert_charrefs keyword arg to HTMLParser that, when True, automatically converts all character references.

a new SSLContext object with secure default settings.

Issue #19715: try the utime(..., None) approach again, now that it should be more precise under Windows

a year before 1900.

Patch by William Mallard.

Patch by Kushal Das.

certificates from default stores or system stores. By default the method
loads CA certs for authentication of server certs.

tracemalloc.start() now has an option nframe parameter

The patch removes the verify_flags feature on Mac OS X 10.4 with OpenSSL 0.9.7l 28 Sep 2006.

    XZ 5.0.3 -> 5.0.5
    SQLite 3.7.13 -> 3.8.1