- Update to 3.0.3:
* Only allow ``localhost``, ``.localhost``, ``127.0.0.1``, or the specified hostname when running the dev server, to make debugger requests. Additional hosts can be added by using the debugger middleware directly. The debugger UI makes requests using the full URL rather than only the path. :ghsa:`2g68-c3qc-8985` (CVE-2024-34069, bsc#1223979) * Make reloader more robust when ``""`` is in ``sys.path``. :pr:`2823` * Better TLS cert format with ``adhoc`` dev certs. :pr:`2891` * Inform Python < 3.12 how to handle ``itms-services`` URIs correctly, rather than using an overly-broad workaround in Werkzeug that caused some redirect URIs to be passed on without encoding. :issue:`2828` * Type annotation for ``Rule.endpoint`` and other uses of ``endpoint`` is ``Any``. :issue:`2836` - Update to 3.0.2: * Ensure setting ``merge_slashes`` to ``False`` results in ``NotFound`` for repeated-slash requests against single slash routes. :issue:`2834` * Fix handling of ``TypeError`` in ``TypeConversionDict.get()`` to match ``ValueError``. :issue:`2843` * Fix ``response_wrapper`` type check in test client. :issue:`2831` * Make the return type of ``MultiPartParser.parse`` more precise. :issue:`2840` * Raise an error if converter arguments cannot be parsed. :issue:`2822` OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-Werkzeug?expand=0&rev=92
This commit is contained in:
parent
1b4d2b0ee2
commit
4f7a26705c
@ -1,3 +1,34 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue May 7 06:01:38 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
|
||||||
|
|
||||||
|
- Update to 3.0.3:
|
||||||
|
* Only allow ``localhost``, ``.localhost``, ``127.0.0.1``, or the
|
||||||
|
specified hostname when running the dev server, to make debugger
|
||||||
|
requests. Additional hosts can be added by using the debugger
|
||||||
|
middleware directly. The debugger UI makes requests using the
|
||||||
|
full URL rather than only the path. :ghsa:`2g68-c3qc-8985`
|
||||||
|
(CVE-2024-34069, bsc#1223979)
|
||||||
|
* Make reloader more robust when ``""`` is in ``sys.path``.
|
||||||
|
:pr:`2823`
|
||||||
|
* Better TLS cert format with ``adhoc`` dev certs. :pr:`2891`
|
||||||
|
* Inform Python < 3.12 how to handle ``itms-services`` URIs
|
||||||
|
correctly, rather than using an overly-broad workaround in
|
||||||
|
Werkzeug that caused some redirect URIs to be passed on without
|
||||||
|
encoding. :issue:`2828`
|
||||||
|
* Type annotation for ``Rule.endpoint`` and other uses of
|
||||||
|
``endpoint`` is ``Any``. :issue:`2836`
|
||||||
|
- Update to 3.0.2:
|
||||||
|
* Ensure setting ``merge_slashes`` to ``False`` results in
|
||||||
|
``NotFound`` for repeated-slash requests against single slash
|
||||||
|
routes. :issue:`2834`
|
||||||
|
* Fix handling of ``TypeError`` in ``TypeConversionDict.get()`` to
|
||||||
|
match ``ValueError``. :issue:`2843`
|
||||||
|
* Fix ``response_wrapper`` type check in test client. :issue:`2831`
|
||||||
|
* Make the return type of ``MultiPartParser.parse`` more precise.
|
||||||
|
:issue:`2840`
|
||||||
|
* Raise an error if converter arguments cannot be parsed.
|
||||||
|
:issue:`2822`
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Fri Oct 27 03:06:50 UTC 2023 - Steve Kowalik <steven.kowalik@suse.com>
|
Fri Oct 27 03:06:50 UTC 2023 - Steve Kowalik <steven.kowalik@suse.com>
|
||||||
|
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
#
|
#
|
||||||
# spec file
|
# spec file for package python-Werkzeug
|
||||||
#
|
#
|
||||||
# Copyright (c) 2023 SUSE LLC
|
# Copyright (c) 2024 SUSE LLC
|
||||||
#
|
#
|
||||||
# All modifications and additions to the file contributed by third parties
|
# All modifications and additions to the file contributed by third parties
|
||||||
# remain the property of their copyright owners, unless otherwise agreed
|
# remain the property of their copyright owners, unless otherwise agreed
|
||||||
@ -27,7 +27,7 @@
|
|||||||
|
|
||||||
%{?sle15_python_module_pythons}
|
%{?sle15_python_module_pythons}
|
||||||
Name: python-Werkzeug%{psuffix}
|
Name: python-Werkzeug%{psuffix}
|
||||||
Version: 3.0.1
|
Version: 3.0.3
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: The Swiss Army knife of Python web development
|
Summary: The Swiss Army knife of Python web development
|
||||||
License: BSD-3-Clause
|
License: BSD-3-Clause
|
||||||
@ -91,14 +91,31 @@ sed -i "1d" examples/manage-{i18nurls,simplewiki,shorty,couchy,cupoftee,webpylik
|
|||||||
%check
|
%check
|
||||||
%if %{with test}
|
%if %{with test}
|
||||||
export LANG=en_US.UTF-8
|
export LANG=en_US.UTF-8
|
||||||
# workaround pytest 6.2 (like https://github.com/pallets/werkzeug/commit/16718f461d016b88b6457d3ef63816b7df1f0d1f, but shorter)
|
# Tests that requires connection
|
||||||
%pytest -k 'not (dev_server or test_reloader_sys_path or test_chunked_encoding or test_basic or test_server or test_ssl or test_http_proxy or test_500_error or test_untrusted_host or test_double_slash_path or test_wrong_protocol or test_content_type_and_length or test_multiple_headers_concatenated or test_multiline_header_folding or test_exclude_patterns)'
|
donttest="test_basic"
|
||||||
|
donttest+=" or test_http_proxy"
|
||||||
|
donttest+=" or test_server"
|
||||||
|
donttest+=" or test_ssl_dev_cert"
|
||||||
|
donttest+=" or test_ssl_object"
|
||||||
|
donttest+=" or test_reloader_sys_path"
|
||||||
|
donttest+=" or test_chunked_request"
|
||||||
|
donttest+=" or test_streaming_close_response"
|
||||||
|
donttest+=" or test_streaming_chunked_response"
|
||||||
|
donttest+=" or test_streaming_chunked_truncation"
|
||||||
|
donttest+=" or test_untrusted_host"
|
||||||
|
donttest+=" or test_double_slash_path"
|
||||||
|
donttest+=" or test_500_error"
|
||||||
|
donttest+=" or test_wrong_protocol"
|
||||||
|
donttest+=" or test_content_type_and_length"
|
||||||
|
donttest+=" or test_multiple_headers_concatenated"
|
||||||
|
donttest+=" or test_multiline_header_folding"
|
||||||
|
%pytest -k "not ($donttest)"
|
||||||
%endif
|
%endif
|
||||||
|
|
||||||
%if ! %{with test}
|
%if ! %{with test}
|
||||||
%files %{python_files}
|
%files %{python_files}
|
||||||
%license LICENSE.rst
|
%license LICENSE.txt
|
||||||
%doc CHANGES.rst README.rst
|
%doc CHANGES.rst README.md
|
||||||
%{python_sitelib}/werkzeug
|
%{python_sitelib}/werkzeug
|
||||||
%{python_sitelib}/werkzeug-%{version}.dist-info
|
%{python_sitelib}/werkzeug-%{version}.dist-info
|
||||||
%endif
|
%endif
|
||||||
|
BIN
werkzeug-3.0.1.tar.gz
(Stored with Git LFS)
BIN
werkzeug-3.0.1.tar.gz
(Stored with Git LFS)
Binary file not shown.
3
werkzeug-3.0.3.tar.gz
Normal file
3
werkzeug-3.0.3.tar.gz
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
version https://git-lfs.github.com/spec/v1
|
||||||
|
oid sha256:097e5bfda9f0aba8da6b8545146def481d06aa7d3266e7448e2cccf67dd8bd18
|
||||||
|
size 803342
|
Loading…
Reference in New Issue
Block a user