linux/poky.git/meta/recipes-devtools/python, branch nanbield-4.3.2

python3-ptest: skip test_storlines

2024-01-04T14:09:44+00:00

[YOCTO #14933] test_storlines is yet another Python ptest that fails intermittently on the Yocto AB, so disable it during ptests for now. (From OE-Core rev: 11eab2b5d14efa75fcb0686a9f835f9675883113) Signed-off-by: Trevor Gamblin Signed-off-by: Alexandre Belloni (cherry picked from commit d7b9f8157e6214a83b5495e8a32e11540ae65ff8) Signed-off-by: Steve Sakoman

python3-urllib3: Upgrade to 2.0.7

2023-12-05T21:51:37+00:00

Addresses CVE-2023-45803 [1] [1] https://github.com/urllib3/urllib3/commit/4e98d57809dacab1cbe625fddeec1a290c478ea9 ( cherry-pick from commit befec4d3591bb0dce0e256cf338eb541b2a56b98 ) (From OE-Core rev: 99885e0914365f9c4bbb5584e9ab3d244dc58499) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie Signed-off-by: Lee Chee Yang Signed-off-by: Steve Sakoman

python3-urllib3: Update to 2.0.6

2023-10-19T12:06:53+00:00

Only changes in this release [1] fixes CVE-2023-43804 [2] on top of 2.0.5 [1] https://github.com/urllib3/urllib3/commit/644124ecd0b6e417c527191f866daa05a5a2056d [2] https://github.com/advisories/GHSA-v845-jxx5-vc9f (From OE-Core rev: 2a9ae3ca372075868c046d3a3ba2ba9b483e986d) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

python3-numpy: remove obsolete reproducible workaround

2023-10-04T22:55:12+00:00

We currently delete some pycache files because frozenset wasn't able to be reproducible, but this has been fixed in Python 3.11: https://github.com/python/cpython/commit/33d95c6facdfda3c8c0feffa7a99184e4abc2f63 (From OE-Core rev: 5c287a896fa9f5cd05b6a2411528fdc8fb2579d6) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3-docutils: Rename utilities to their canonical names

2023-10-04T22:55:12+00:00

Packages which use the utilities usually call/search for these tools without .py extension e.g. kernel-selftest and fails to find the tools if they are having .py extension. (From OE-Core rev: 47b221d6bc91139cd84ddcf9c57a12288eafd8be) Signed-off-by: Khem Raj Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3-numpy: Fix reproducibility issue

2023-10-01T07:12:59+00:00

Add a patch to fix the reproducibility issue being seen during testing. The issue is from a poor choice of regex against the compiler flags, being triggered by different path names. Drop the previous attempt at fixing this as it wasn't that. (From OE-Core rev: c4d1dc5e33734b94835e7f5e0e1746d4a6542b55) Signed-off-by: Richard Purdie

python3-cryptography{-vectors}: upgrade to 41.0.4

2023-09-29T22:11:59+00:00

https://cryptography.io/en/latest/changelog/#v41-0-4 41.0.4 - 2023-09-19 Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.1.3. (From OE-Core rev: b9ebf704ebedbb099b8efd81b736884864b72e20) Signed-off-by: Tim Orling Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3: add cpython to CVE_PRODUCT

2023-09-28T11:37:47+00:00

https://nvd.nist.gov/vuln/detail/CVE-2023-33595 uses 'cpython'. Although it's currently the only one that uses cpython, let's add cpython to CVE_PRODUCT, just in case. (From OE-Core rev: 62598e1138f21a16d8b1cdd1cfe902aeed854c5c) Signed-off-by: Chen Qi Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3: fix SoB on patch

2023-09-28T11:37:46+00:00

(From OE-Core rev: 03a90095f5c1977a78f1a4ce568b793ebabfb281) Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

python3-zipp: upgrade 3.16.2 -> 3.17.0

2023-09-28T11:37:46+00:00

Changelog: =========== -Added CompleteDirs.inject classmethod to make available for use elsewhere. -Avoid matching path separators for '?' in glob. (From OE-Core rev: fdd3f2ad01ac6ac33f788afc806ad3c25dfd8b53) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie