From 9ced05b9d9984303751996a43f4213bc12bc3fb1 Mon Sep 17 00:00:00 2001 From: Wang Mingyu Date: Tue, 13 Jan 2026 18:23:33 +0800 Subject: python3-virtualenv: upgrade 20.35.4 -> 20.36.1 Changelog: ============== - fix: resolve TOCTOU vulnerabilities in app_data and lock directory creation - fix: Prevent NameError when accessing _DISTUTILS_PATCH during file overwrite - Upgrade pip and fix 3.15 picking old wheel - fix: wrong path on migrated venv - test_too_many_open_files: assert on errno.EMFILE instead of strerror - fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146 - fix: resolve EncodingWarning in tox upgrade environment - Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1 - Add support for PEP 440 version specifiers in the --python flag. Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj --- .../python/python3-virtualenv_20.35.4.bb | 28 ---------------------- .../python/python3-virtualenv_20.36.1.bb | 28 ++++++++++++++++++++++ 2 files changed, 28 insertions(+), 28 deletions(-) delete mode 100644 meta-python/recipes-devtools/python/python3-virtualenv_20.35.4.bb create mode 100644 meta-python/recipes-devtools/python/python3-virtualenv_20.36.1.bb (limited to 'meta-python/recipes-devtools/python') diff --git a/meta-python/recipes-devtools/python/python3-virtualenv_20.35.4.bb b/meta-python/recipes-devtools/python/python3-virtualenv_20.35.4.bb deleted file mode 100644 index 0c50a35be9..0000000000 --- a/meta-python/recipes-devtools/python/python3-virtualenv_20.35.4.bb +++ /dev/null @@ -1,28 +0,0 @@ -# SPDX-License-Identifier: MIT -# Copyright (C) 2023 iris-GmbH infrared & intelligent sensors - -SUMMARY = "A tool for creating isolated virtual python environments." -HOMEPAGE = "https://github.com/pypa/virtualenv" -LICENSE = "MIT" -LIC_FILES_CHKSUM = "file://LICENSE;md5=0ce089158cf60a8ab6abb452b6405538" - -SRC_URI[sha256sum] = "643d3914d73d3eeb0c552cbb12d7e82adf0e504dbf86a3182f8771a153a1971c" - -BBCLASSEXTEND = "native nativesdk" -inherit pypi python_hatchling - -DEPENDS += "\ - python3-hatch-vcs-native \ -" - -RDEPENDS:${PN} += " \ - python3-compression \ - python3-distlib \ - python3-filelock \ - python3-json \ - python3-misc \ - python3-modules \ - python3-platformdirs \ -" - -CVE_PRODUCT = "virtualenv" diff --git a/meta-python/recipes-devtools/python/python3-virtualenv_20.36.1.bb b/meta-python/recipes-devtools/python/python3-virtualenv_20.36.1.bb new file mode 100644 index 0000000000..d5fad314fd --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-virtualenv_20.36.1.bb @@ -0,0 +1,28 @@ +# SPDX-License-Identifier: MIT +# Copyright (C) 2023 iris-GmbH infrared & intelligent sensors + +SUMMARY = "A tool for creating isolated virtual python environments." +HOMEPAGE = "https://github.com/pypa/virtualenv" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://LICENSE;md5=0ce089158cf60a8ab6abb452b6405538" + +SRC_URI[sha256sum] = "8befb5c81842c641f8ee658481e42641c68b5eab3521d8e092d18320902466ba" + +BBCLASSEXTEND = "native nativesdk" +inherit pypi python_hatchling + +DEPENDS += "\ + python3-hatch-vcs-native \ +" + +RDEPENDS:${PN} += " \ + python3-compression \ + python3-distlib \ + python3-filelock \ + python3-json \ + python3-misc \ + python3-modules \ + python3-platformdirs \ +" + +CVE_PRODUCT = "virtualenv" -- cgit v1.2.3-54-g00ecf