(cherry picked from commit 233de021)
Co-authored-by: Mike DePalatis <mike@depalatis.net>

Backport idlelib duplications.
(cherry picked from commit bac2d5ba)

Python 3.6.5

(cherry picked from commit aa50bf08)
Co-authored-by: Antoine Pitrou <pitrou@free.fr>

(cherry picked from commit c0518cde)
Co-authored-by: Ned Deily <nad@python.org>

(cherry picked from commit c0518cde)
Co-authored-by: Ned Deily <nad@python.org>

Forcing the macOS IDLE.app gui process to launch in 32-mode was
a necessary hack for old versions of Tk (Aqua Carbon as in Tk 8.4
and early versions of 8.5); it is not needed for current versions
of Tk.  Since 32-bit launching will no longer be supported on
future releases of macOS, allow IDLE.app to launch in 64-bit mode.
(cherry picked from commit df532ab7)
Co-authored-by: Ned Deily <nad@python.org>

(cherry picked from commit e52ac045)
Co-authored-by: Ned Deily <nad@python.org>

(cherry picked from commit d93b5161)
Co-authored-by: Donald Stufft <donald@stufft.io>

(cherry picked from commit 7f81bb2a)
Co-authored-by: Donald Stufft <donald@stufft.io>

Fix backport a79591cf of bpo-30622 to 3.6 branch.
Signed-off-by: Christian Heimes <christian@python.org>

(cherry picked from commit e52ac045)
Co-authored-by: Ned Deily <nad@python.org>

(cherry picked from commit da1734c5)
Co-authored-by: Cheryl Sabella <cheryl.sabella@gmail.com>

bpo-32844: subprocess: Fix a potential misredirection of a low fd to stderr.

When redirecting, subprocess attempts to achieve the following state:
each fd to be redirected to is less than or equal to the fd
it is redirected from, which is necessary because redirection
occurs in the ascending order of destination descriptors.
It fails to do so in a couple of corner cases,
for example, if 1 is redirected to 2 and 0 is closed in the parent.
(cherry picked from commit 0e7144b0)
Co-authored-by: Alexey Izbyshev <izbyshev@users.noreply.github.com>

Passing True as the `bind_and_activate` *do* immediately opening and binding to their socket.
(cherry picked from commit e6223579)
Co-authored-by: cocoatomo <cocoatomo77@gmail.com>

gmon.out is generated when profiling turned on

Full Configuration:
./configure --prefix=$PWD/install --enable-profiling  --enable-big-digits=30
--with-pydebug --with-assertions  --with-valgrind
(cherry picked from commit 95ad3822)
Co-authored-by: Neeraj Badlani <neerajbadlani@gmail.com>

(cherry picked from commit 0301c9bd)
Co-authored-by: Stefano Taschini <taschini@users.noreply.github.com>

Allow ttk.Treeview.insert to insert iid that has a false boolean value.
Note iid=0 and iid=False would be same.
(cherry picked from commit 3ab44c07)
Co-authored-by: Garvit Khatri <garvitdelhi@gmail.com>

LibreSSL 2.7 introduced OpenSSL 1.1.0 API. The ssl module now detects
LibreSSL 2.7 and only provides API shims for OpenSSL < 1.1.0 and
LibreSSL < 2.7.

Documentation updates and fixes for failing tests will be provided in
another patch set.

Signed-off-by: Christian Heimes <christian@python.org>.
(cherry picked from commit 4ca0739c)
Co-authored-by: Christian Heimes <christian@python.org>

(cherry picked from commit 5cbb8410)
Co-authored-by: Himanshu Lakhara <himanshulakhara1947@gmail.com>

Reported by Maksym Nikulyak on docs.p.o.
(cherry picked from commit a0a42d22)
Co-authored-by: Berker Peksag <berker.peksag@gmail.com>

(cherry picked from commit b9744e92)

(cherry picked from commit d93b5161)
Co-authored-by: Donald Stufft <donald@stufft.io>

(cherry picked from commit 9308dea3)
Co-authored-by: Zackery Spytz <zspytz@gmail.com>

The result of host() was not empty when the network is constructed by a tuple containing an
integer mask and only 1 bit left for addresses.
(cherry picked from commit 10b134a0)
Co-authored-by: Xiang Zhang <angwerzx@126.com>

Original patch by Jon Foster and Berker Peksag.
(cherry picked from commit 5609b783)
Co-authored-by: Cheryl Sabella <cheryl.sabella@gmail.com>

(cherry picked from commit 4be79f29)
Co-authored-by: Cheryl Sabella <cheryl.sabella@gmail.com>

fstat may block for long time if the file descriptor is on a
non-responsive NFS server, hanging all threads. Most fstat() calls are
handled by _Py_fstat(), releasing the GIL internally, but but
_Py_fstat_noraise() does not release the GIL, and most calls release the
GIL explicitly around it.

This patch fixes last 2 calls to _Py_fstat_no_raise(), avoiding hangs
when calling:
- mmap.mmap()
- os.urandom()
- random.seed()
(cherry picked from commit 4484f9dc)
Co-authored-by: Nir Soffer <nirsof@gmail.com>

(cherry picked from commit 3fe33043)

(cherry picked from commit bc300ce2)

(cherry picked from commit 7f81bb2a)
Co-authored-by: Donald Stufft <donald@stufft.io>

Multi-phase initialized modules allow m_traverse to be called while the
module is still being initialized, so module authors may need to account
for that.
(cherry picked from commit c2b0b12d)
Co-authored-by: Marcel Plch <gmarcel.plch@gmail.com>

Creating backup files with ~ suffix can be undesirable in some environment,
such as when building RPM packages. Instead of requiring the user to remove
those files manually, option -n was added, that simply disables this feature.

-n was selected because 2to3 has the same option with this behavior.
(cherry picked from commit 5affd5c2)
Co-authored-by: Miro Hrončok <miro@hroncok.cz>

Fix backport a79591cf of bpo-30622 to 3.6 branch.
Signed-off-by: Christian Heimes <christian@python.org>

Backport the new 10.9+ installer variant from 3.7.  This variant features
more modern options; like 64-bit only (Apple is deprecating 32-bit support
in future macOS releases); a built-in version of Tcl/Tk 8.6.8; built with
clang rather than gcc-4.2.  For 3.6.5, the 10.9+ variant will be offered
as an additional alternative to the traditional 10.6+ variant in earlier
3.6.x releases.  Binary extension modules (including wheels) built for
earlier versions of 3.6.x with the 10.6 variant should continue to work
with either 3.6.5 variant without recompilation.

In addition, both installer variants have updated 3rd-party libraries:
OpenSSL 1.0.2m -> 1.0.2n
XZ 5.2.2 -> 5.2.3
SQLite 3.21.0 -> 3.22.0

Also the 10.6 variant now sets CC=gcc instead of CC=gcc-4.2 and does not
search for the outdated 10.6 SDK.  The variant is built with the same
compiler as before.  As before, for extension module builds, the CC can
be overridden with the CC env variable and an SDK can be specified
with the SDKROOT env variable (see man xcrun).  These minor changes
should be transparent to nearly all users.

(cherry picked from commit 74f56878)
Co-authored-by: Łukasz Langa <lukasz@langa.pl>