python-3.13/3.13.4 package update

python-3.13.yaml

@@ -1,7 +1,7 @@
 package:
   name: python-3.13
-  version: "3.13.3"
-  epoch: 2
+  version: "3.13.4"
+  epoch: 0
   description: "the Python programming language"
   copyright:
     - license: PSF-2.0
@@ -52,7 +52,7 @@ var-transforms:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 6280bb547840b609feedb78887c6491af75548e8
+      expected-commit: 8a526ec7cbea8fafc9dae4b3dd6371906b9be342
       repository: https://github.com/python/cpython.git
       tag: v${{package.version}}
 
@@ -64,7 +64,7 @@ pipeline:
 
   - uses: patch
     with:
-      patches: gh-118224.patch gh-127301.patch CVE-2025-4516.patch
+      patches: gh-118224.patch gh-127301.patch
 
   - name: Configure
     runs: |

python-3.13/gh-127301.patch

@@ -75,18 +75,6 @@ index 1b2c30cc32f..b71fe5eb90e 100644
      except ImportError:
          pass  # no extension module, this hash is unsupported.
 
-@@ -161,9 +178,8 @@ def __hash_new(name, data=b'', **kwargs):
-     except ValueError:
-         # If the _hashlib module (OpenSSL) doesn't support the named
-         # hash, try using our builtin implementations.
--        # This allows for SHA224/256 and SHA384/512 support even though
--        # the OpenSSL library prior to 0.9.8 doesn't provide them.
--        return __get_builtin_constructor(name)(data)
-+        # OpenSSL may not have been compiled to support everything.
-+        return __get_builtin_constructor(name)(data, **kwargs)
-
-
- try:
 @@ -172,10 +188,15 @@ def __hash_new(name, data=b'', **kwargs):
      __get_hash = __get_openssl_constructor
      algorithms_available = algorithms_available.union(