From 421c31515307f67e921059ff59d9b1ed5cebca6d Mon Sep 17 00:00:00 2001 From: alperak Date: Fri, 9 Feb 2024 12:00:17 +0300 Subject: python3-werkzeug: upgrade 2.3.6 -> 3.0.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Upstream provides a pyproject.toml which declares a flit_core.buildapi build backend for PEP-517 packaging instead of setuptools. Also, RDEPENDS updated according to it. Removed CLEANBROKEN because it is not necessary. Changelog: Version 3.0.1 Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407 Version 3.0.0 Remove previously deprecated code. Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("werkzeug"), instead. generate_password_hash uses scrypt by default. Add the "werkzeug.profiler" item to the WSGI environ dictionary passed to ProfilerMiddleware’s filename_format function. It contains the elapsed and time values for the profiled request. Explicitly marked the PathConverter as non path isolating. Version 2.3.8 Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407 Version 2.3.7 Use flit_core instead of setuptools as build backend. Fix parsing of multipart bodies. Adjust index of last newline in data start. Parsing ints from header values strips spacing first. Fix empty file streaming when testing. Clearer error message when URL rule does not start with slash. Accept q value can be a float without a decimal part. Signed-off-by: alperak Signed-off-by: Khem Raj --- .../recipes-devtools/python/python3-werkzeug_3.0.1.bb | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-werkzeug_3.0.1.bb (limited to 'meta-python/recipes-devtools/python/python3-werkzeug_3.0.1.bb') diff --git a/meta-python/recipes-devtools/python/python3-werkzeug_3.0.1.bb b/meta-python/recipes-devtools/python/python3-werkzeug_3.0.1.bb new file mode 100644 index 000000000..6e500dde8 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-werkzeug_3.0.1.bb @@ -0,0 +1,19 @@ +SUMMARY = "The comprehensive WSGI web application library" +DESCRIPTION = "\ +Werkzeug started as simple collection of various utilities for WSGI \ +applications and has become one of the most advanced WSGI utility modules. \ +It includes a powerful debugger, full featured request and response objects, \ +HTTP utilities to handle entity tags, cache control headers, HTTP dates, \ +cookie handling, file uploads, a powerful URL routing system and a bunch \ +of community contributed addon modules." +HOMEPAGE = "https://werkzeug.palletsprojects.com" +LICENSE = "BSD-3-Clause" +LIC_FILES_CHKSUM = "file://LICENSE.rst;md5=5dc88300786f1c214c1e9827a5229462" + +SRC_URI[sha256sum] = "507e811ecea72b18a404947aded4b3390e1db8f826b494d76550ef45bb3b1dcc" + +inherit pypi python_flit_core + +RDEPENDS:${PN} += " \ + ${PYTHON_PN}-markupsafe \ +" -- cgit v1.2.3-54-g00ecf