linux/poky.git/meta/recipes-devtools/python, branch nanbield

python3-jinja2: upgrade 3.1.2 -> 3.1.3

2024-03-16T18:33:21+00:00

Changelog: ========== -Fix compiler error when checking if required blocks in parent templates are empty. -xmlattr filter does not allow keys with spaces. -Make error messages stemming from invalid nesting of {% trans %} blocks more helpful upgrade include fix for CVE-2024-22195. (cherry-pick from Oe-Core rev 8a0524464583d69df7746253f5020c2c125a8e1f) (From OE-Core rev: f8f89b901e3f8db3a9e61ab49976beeb9531d1c2) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-license-expression: Fix the ptest failure

2024-01-31T14:10:24+00:00

Fix the below ptest failure: self = def test_skeleton_codestyle(self): """ This test shouldn't run in proliferated repositories. """ setup_cfg = configparser.ConfigParser() setup_cfg.read("setup.cfg") > if setup_cfg["metadata"]["name"] != "skeleton": tests/test_skeleton_codestyle.py:22: self = , key = 'metadata' def _getitem_(self, key): if key != self.default_section and not self.has_section(key): > raise KeyError(key) E KeyError: 'metadata' After the patch: # ./run-ptest [snip] PASS: tests/test_license_expression.py::LicensingValidateTest::test_validation_bad_syntax PASS: tests/test_license_expression.py::LicensingValidateTest::test_validation_exception_as_regular_key PASS: tests/test_license_expression.py::LicensingValidateTest::test_validation_exception_with_choice PASS: tests/test_license_expression.py::LicensingValidateTest::test_validation_invalid_license_exception PASS: tests/test_license_expression.py::LicensingValidateTest::test_validation_invalid_license_exception_strict_false PASS: tests/test_license_expression.py::LicensingValidateTest::test_validation_invalid_license_key PASS: tests/test_license_expression.py::UtilTest::test_build_licensing PASS: tests/test_license_expression.py::UtilTest::test_build_spdx_licensing PASS: tests/test_license_expression.py::UtilTest::test_get_license_key_info PASS: tests/test_license_expression.py::UtilTest::test_get_license_key_info_vendored PASS: tests/test_license_expression.py::CombineExpressionTest::test_combine_expressions_with_duplicated_elements PASS: tests/test_license_expression.py::CombineExpressionTest::test_combine_expressions_with_empty_input PASS: tests/test_license_expression.py::CombineExpressionTest::test_combine_expressions_with_or_relationship PASS: tests/test_license_expression.py::CombineExpressionTest::test_combine_expressions_with_regular PASS: tests/test_skeleton_codestyle.py::BaseTests::test_skeleton_codestyle ============================================================================ Testsuite summary # TOTAL: 175 # PASS: 175 # SKIP: 0 # XFAIL: 0 # FAIL: 0 # XPASS: 0 (From OE-Core rev: f69530a3b86b512c5c60da4da34fc287ff0d1366) Signed-off-by: Mingli Yu Changed in v4: Add python3-license-expression to PTESTS_FAST Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 6b06ad7a9f1dd5900483102f5723a6821f961dab) Signed-off-by: Steve Sakoman

python3-ptest: skip test_storlines

2024-01-04T14:09:44+00:00

[YOCTO #14933] test_storlines is yet another Python ptest that fails intermittently on the Yocto AB, so disable it during ptests for now. (From OE-Core rev: 11eab2b5d14efa75fcb0686a9f835f9675883113) Signed-off-by: Trevor Gamblin Signed-off-by: Alexandre Belloni (cherry picked from commit d7b9f8157e6214a83b5495e8a32e11540ae65ff8) Signed-off-by: Steve Sakoman

python3-urllib3: Upgrade to 2.0.7

2023-12-05T21:51:37+00:00

Addresses CVE-2023-45803 [1] [1] https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9 ( cherry-pick from commit befec4d3591bb0dce0e256cf338eb541b2a56b98 ) (From OE-Core rev: 99885e0914365f9c4bbb5584e9ab3d244dc58499) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: Update to 2.0.6

2023-10-19T12:06:53+00:00

Only changes in this release [1] fixes CVE-2023-43804 [2] on top of 2.0.5 [1] https://github.com/urllib3/urllib3/commit/644124ecd0b6e417c527191f866daa05a5a2056d [2] https://github.com/advisories/GHSA-v845-jxx5-vc9f (From OE-Core rev: 2a9ae3ca372075868c046d3a3ba2ba9b483e986d) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

python3-numpy: remove obsolete reproducible workaround

2023-10-04T22:55:12+00:00

We currently delete some pycache files because frozenset wasn't able to be reproducible, but this has been fixed in Python 3.11: https://github.com/python/cpython/commit/33d95c6facdfda3c8c0feffa7a99184e4abc2f63 (From OE-Core rev: 5c287a896fa9f5cd05b6a2411528fdc8fb2579d6) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3-docutils: Rename utilities to their canonical names

2023-10-04T22:55:12+00:00

Packages which use the utilities usually call/search for these tools without .py extension e.g. kernel-selftest and fails to find the tools if they are having .py extension. (From OE-Core rev: 47b221d6bc91139cd84ddcf9c57a12288eafd8be) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3-numpy: Fix reproducibility issue

2023-10-01T07:12:59+00:00

Add a patch to fix the reproducibility issue being seen during testing. The issue is from a poor choice of regex against the compiler flags, being triggered by different path names. Drop the previous attempt at fixing this as it wasn't that. (From OE-Core rev: c4d1dc5e33734b94835e7f5e0e1746d4a6542b55) Signed-off-by: Richard Purdie

python3-cryptography{-vectors}: upgrade to 41.0.4

2023-09-29T22:11:59+00:00

https://cryptography.io/en/latest/changelog/#v41-0-4 41.0.4 - 2023-09-19 Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3. (From OE-Core rev: b9ebf704ebedbb099b8efd81b736884864b72e20) Signed-off-by: Tim Orling Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3: add cpython to CVE_PRODUCT

2023-09-28T11:37:47+00:00

https://nvd.nist.gov/vuln/detail/CVE-2023-33595 uses 'cpython'. Although it's currently the only one that uses cpython, let's add cpython to CVE_PRODUCT, just in case. (From OE-Core rev: 62598e1138f21a16d8b1cdd1cfe902aeed854c5c) Signed-off-by: Chen Qi Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie