linux/poky.git/meta/recipes-devtools/python, branch langdale

python3-setuptools: fix for CVE-2022-40897

2023-04-04T16:46:24+00:00

Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page. There is a Regular Expression Denial of Service (ReDoS) in package_index.py. CVE: CVE-2022-40897 Upstream-Status: Backport [https://github.com/pypa/setuptools/commit/43a9c9bfa6aa626ec2a22540bea28d2ca77964be] cherry-pick and modify from OE-Core rev: f574d8d57ff3fbc38e350e7a90913993081c4fdf (From OE-Core rev: f2230ead6c145efc902336b2b9d5a4f0ecb749de) Signed-off-by: Narpat Mali Signed-off-by: Steve Sakoman Signed-off-by: Chee Yang Lee Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3-pytest: depend on python3-tomli instead of python3-toml

2023-02-15T21:47:00+00:00

Since version 7.0.0 [1], pytest switched from the toml package to the tomli package for parsing pyproject.toml configuration files [2]. This change is not immediately noticable during tests, because the toml/tomli module is only important if a pyproject.toml is actually present in a project. [1] https://docs.pytest.org/en/latest/changelog.html#pytest-7-0-0rc1-2021-12-06 [2] https://github.com/pytest-dev/pytest/issues/8789 (From OE-Core rev: 04e31f0035ad29afc3cdcf9730cd76cd725b8a20) Signed-off-by: Arnout Vandecappelle Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

get_module_deps3.py: Check attribute 'file'

2022-11-24T15:30:06+00:00

Check if the module object has attribute '__file__' to fix and avoid errors like: AttributeError: module '_abc' has no attribute '__file__'. Did you mean: '__name__'? (From OE-Core rev: ede7452e6dcb202952b85b76eecbd2e1760b11e9) Signed-off-by: Leon Anavi Signed-off-by: Alexandre Belloni (cherry picked from commit 8acce12c1a4cf37ac312c92d62a6ae93a349dddf) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

python3-mako: upgrade 1.2.2 -> 1.2.3

2022-11-24T15:30:06+00:00

Released: Thu Sep 22 2022 * bug - [bug] [lexer] * Fixed issue in lexer in the same category as that of #366 where the regexp used to match an end tag didn’t correctly organize for matching characters surrounded by whitespace, leading to high memory / interpreter hang if a closing tag incorrectly had a large amount of unterminated space in it. Credit to Sebastian Chnelik for locating the issue. As Mako templates inherently render and directly invoke arbitrary Python code from the template source, it is never appropriate to create templates that contain untrusted input. References: #367 [1] https://docs.makotemplates.org/en/latest/changelog.html#change-1.2.3 [2] https://github.com/sqlalchemy/mako/issues/366 [3] https://github.com/sqlalchemy/mako/issues/367 (From OE-Core rev: ce8d8fb1052eb45c0a4a860cb59c53c93430d6bf) Signed-off-by: Tim Orling Signed-off-by: Richard Purdie (cherry picked from commit 49ad6f031458e1f48f24547dc88e41abc4ec41a6) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

meta: fix version checks in all github recipes using the github-releases class

2022-09-28T07:01:10+00:00

(From OE-Core rev: b04316bdd28b7945c2c91b4e43c007b650eedc14) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3-manifest.json: Add zoneinfo

2022-09-21T19:19:53+00:00

The zoneinfo module provides a concrete time zone implementation to support the IANA time zone database as originally specified in PEP 615. (From OE-Core rev: 668bb1c3828bb66fcd3ed8d0fc16fb11eef3a45f) Signed-off-by: Leon Anavi Signed-off-by: Richard Purdie

python3-idna: migrate to flit-core

2022-09-20T22:17:53+00:00

setup.py in latest release is broken after move to flit-core was released by the project. This broke the version detection in consuming libs like requests. Remove the not needed egg.info removal as well (From OE-Core rev: 399c324e9a30ab63e0c5d653dba5bf9354ec70f7) Signed-off-by: Konrad Weihmann Signed-off-by: Richard Purdie

python3-certifi: upgrade 2022.6.15 -> 2022.9.14

2022-09-20T22:17:53+00:00

License checksum change due to a url change, license itself unchanged. (From OE-Core rev: 6112c30c49da478cd2b3496a7df0211acda1944e) Signed-off-by: Richard Purdie

python3-psutil: upgrade 5.9.1 -> 5.9.2

2022-09-17T06:47:08+00:00

(From OE-Core rev: 9109fd6ae40c23820c66c8f388138bc3da633335) Signed-off-by: Richard Purdie

python3-numpy: upgrade 1.23.2 -> 1.23.3