Library
-------
+- Issue #19689: Add ssl.create_default_context() factory function. It creates
+ a new SSLContext object with secure default settings.
+
+ - Issue #19727: os.utime(..., None) is now potentially more precise
+ under Windows.
+
+ - Issue #17201: ZIP64 extensions now are enabled by default. Patch by
+ William Mallard.
+
- Issue #19292: Add SSLContext.load_default_certs() to load default root CA
certificates from default stores or system stores. By default the method
loads CA certs for authentication of server certs.