Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2021-05-24T14:36:49+00:00 2021-05-24T14:36:49+00:00 zangrc zangrc.fnst@fujitsu.com 2021-05-20T09:09:51+00:00 urn:sha1:75b9e9149396e61571afc0ca346599b4fadf2a82 Signed-off-by: Zang Ruochen <zangrc.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> 2021-05-14T14:25:05+00:00 Leon Anavi leon.anavi@konsulko.com 2021-05-13T13:23:25+00:00 urn:sha1:ad8a4ff11c1e830126524758cac74d00f10caf4a Upgrade to release 2.0.0: - Drop support for Python 2 and 3.5. - JWS support (JSONWebSignatureSerializer, TimedJSONWebSignatureSerializer) is deprecated. Use a dedicated JWS/JWT library such as authlib instead. - Importing itsdangerous.json is deprecated. Import Python’s json module instead. - Simplejson is no longer used if it is installed. To use a different library, pass it as Serializer(serializer=...). - datetime values are timezone-aware with timezone.utc. Code using TimestampSigner.unsign(return_timestamp=True) or BadTimeSignature.date_signed may need to change. - If a signature has an age less than 0, it will raise SignatureExpired rather than appearing valid. This can happen if the timestamp offset is changed. - BadTimeSignature.date_signed is always a datetime object rather than an int in some cases. - Added support for key rotation. A list of keys can be passed as secret_key, oldest to newest. The newest key is used for signing, all keys are tried for unsigning. - Removed the default SHA-512 fallback signer from default_fallback_signers. - Add type information for static typing tools. License-Update: standardize license Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>