python3-uvicorn: upgrade 0.41.0 -> 0.42.0

Changelog:
===========
- Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies
- Escape brackets and backslash in httptools HEADER_RE regex
- Fix multiple issues in websockets sans-io implementation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>

1 files changed, 32 insertions, 0 deletions

diff --git a/meta-python/recipes-devtools/python/python3-uvicorn_0.42.0.bb b/meta-python/recipes-devtools/python/python3-uvicorn_0.42.0.bb
new file mode 100644
index 0000000000..f14ba46dc6
--- /dev/null
+++ b/meta-python/recipes-devtools/python/python3-uvicorn_0.42.0.bb
@@ -0,0 +1,32 @@
+SUMMARY = "The lightning-fast ASGI server."
+HOMEPAGE = "https://github.com/encode/uvicorn"
+LICENSE = "BSD-3-Clause"
+LIC_FILES_CHKSUM = "file://LICENSE.md;md5=5c778842f66a649636561c423c0eec2e"
+RECIPE_MAINTAINER = "Tom Geelen <t.f.g.geelen@gmail.com>"
+
+SRC_URI[sha256sum] = "9b1f190ce15a2dd22e7758651d9b6d12df09a13d51ba5bf4fc33c383a48e1775"
+
+SRC_URI += "file://0001-ptest-disable-failing-tests.patch"
+
+inherit pypi python_hatchling ptest-python-pytest
+
+PYPI_PACKAGE = "uvicorn"
+CVE_PRODUCT = "encode:uvicorn"
+CVE_STATUS[CVE-2020-7694] = "fixed-version: The vulnerability has been fixed since 0.11.7"
+
+RDEPENDS:${PN} = "\
+    python3-click \
+    python3-h11 (>=0.8) \
+    python3-httptools \
+    python3-multiprocessing \
+    python3-python-dotenv \
+    python3-websockets \
+    python3-wsproto \
+"
+
+RDEPENDS:${PN}-ptest += "\
+    python3-a2wsgi \
+    python3-httpx \
+    python3-pytest-mock \
+    python3-pyyaml \
+"