pool/python-asteval
SHA256
17
0
Fork 2
Code Issues Pull Requests Activity

- Update to 1.0.7

Browse Source 
* return in while, for, and with blocks in functions properly signal
    an immediate exit of the function. (fixes #141)
  * fix augassign to retain line numbers for exceptions properly. (#140)
  * make sure that "unsafe_modules" should not be accessed even if imported
    and exposed by other modules
  * cleanup unused nodes
  * tweaks and fixes to docs
  * drop testing with Python 3.9
  * add testing for Python 3.14
  * update pyproject.toml from the endless churn from PyPA, to move the
    location and formatting for the LICENSE, to continue compliance with
    the endless churn from PyPA.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-asteval?expand=0&rev=45
This commit is contained in:
Nico Krapp
2025-11-13 16:40:19 +00:00
committed by Git OBS Bridge
commit acd9a332de
6 changed files with 323 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

221
python-asteval.changes Normal file
View File

@@ -0,0 +1,221 @@
-------------------------------------------------------------------
Thu Nov 13 14:25:13 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 1.0.7
* return in while, for, and with blocks in functions properly signal
an immediate exit of the function. (fixes #141)
* fix augassign to retain line numbers for exceptions properly. (#140)
* make sure that "unsafe_modules" should not be accessed even if imported
and exposed by other modules
* cleanup unused nodes
* tweaks and fixes to docs
* drop testing with Python 3.9
* add testing for Python 3.14
* update pyproject.toml from the endless churn from PyPA, to move the
location and formatting for the LICENSE, to continue compliance with
the endless churn from PyPA.
-------------------------------------------------------------------
Mon Jan 27 12:42:41 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 1.0.6
* drop testing and support for Python3.8, add Python 3.13,
change document to reflect this.
* implement safe_getattr and safe_format functions; fix bugs
in UNSAFE_ATTRS and UNSAFE_ATTRS_DTYPES usage (bsc#1236405,
CVE-2025-24359)
* make all procedure attributes private to curb access to AST
nodes, which can be exploited
* improvements to error messages, including use ast functions
to construct better error messages
* remove import of numpy.linalg, as documented
* update doc description for security advisory
-------------------------------------------------------------------
Thu Oct 10 15:41:37 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 1.0.5:
* more work on handling errors, including fixing #133 and
adding more comprehensive tests for #129 and #132
- update to 1.0.4:
* fix error handling that might result in null exception
- update to 1.0.3:
* functions ("Procedures") defined within asteval have a `
_signature()` method, now use in repr
* add support for deleting subscript
* nested symbol tables now have a Group() function
* update coverage config
* cleanups of exception handling : errors must now have an
exception
* several related fixes to suppress repeated exceptions: see GH
#132 and #129
* make non-boolean return values from comparison operators
behave like Python - not immediately testing as bool
-------------------------------------------------------------------
Fri Aug 9 06:56:27 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 1.0.2:
* fix NameError handling in expression code
* make exception messages more Python-like
- update to 1.0.1:
* security fixes, based on audit by Andrew Effenhauser, Ayman
Hammad, and Daniel Crowley, IBM X-Force Security Research
division
* remove numpy modules polynomial, fft, linalg by default for
security concerns
* disallow string.format(), improve security of f-string
evaluation
-------------------------------------------------------------------
Tue Jul 2 20:14:13 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 1.0.0:
* fix (again) nested list comprehension (Issues #127 and #126).
* add more testing of multiple list comprehensions.
* more complete support for Numpy 2, and removal of many Numpy
symbols that have been long deprecated.
* remove AST nodes deprecated in Python 3.8.
* clean up build files and outdated tests.
* fixes to codecov configuration.
* update docs.
-------------------------------------------------------------------
Wed Jun 12 09:58:28 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 0.9.33:
* fixes for multiple list comprehensions (addressing #126)
* add testing with optionally installed numpy_financial to CI
* test existence of all numpy imports to better safeguard
against missing functions (for safer numpy 2 transition)
* update rendered doc to include PDF and zipped HTML
-------------------------------------------------------------------
Fri Mar 22 19:39:07 UTC 2024 - Dirk Müller <dmueller@suse.com>
- update to 0.9.32:
* add deprecations message for numpy functions to be removed in
numpy 2.0
* comparison operations use try/except for short-circuiting
instead of checking for numpy arrays (addressing #123)
* add Python 3.12 to testing
* move repository from "newville" to "lmfit" organization
* update doc theme, GitHub locations pointed to by docs, other
doc tweaks.
-------------------------------------------------------------------
Tue Jul 18 18:09:28 UTC 2023 - Antonio Teixeira <antonio.teixeira@suse.com>
- Update to 0.9.31:
* cleanup numpy imports to avoid deprecated functions, add financial
functions from numpy_financial module, if installed.
* prefer 'user_symbols' when initializing Interpreter, but still support
'usersyms' argument. Will deprecate and remove eventually.
* add support of optional (off-by default) "nested symbol table".
* update tests to run most tests with symbol tables of dict and nested
group type.
* general code and testing cleanup.
* add config argument to Interpreter to more fully control which nodes are supported
* add support for import and importfrom -- off by default
* add support for with blocks
* add support for f-strings
* add support of set and dict comprehension
* fix bug with 'int**int' not returning a float.
-------------------------------------------------------------------
Thu Feb 16 21:08:13 UTC 2023 - Dirk Müller <dmueller@suse.com>
- update to 0.9.29:
* bug fixes
-------------------------------------------------------------------
Thu Dec 1 22:16:19 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
- Update to 0.9.28
* add support for Python 3.11
* add support for multiple list comprehensions
* improve performance of making the initial symbol table,
and Interpreter creation, including better checking for index_tricks attributes
-------------------------------------------------------------------
Tue Sep 6 20:15:58 UTC 2022 - Yogalakshmi Arunachalam <yarunachalam@suse.com>
- update to 0.9.27:
* more cleanups
-------------------------------------------------------------------
Sun Jan 23 16:38:46 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.9.26:
* fix setup.py again
-------------------------------------------------------------------
Sat Jan 15 16:47:20 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.9.25:
* fixes import errors for Py3.6 and 3.7, setting version with
importlib_metadata.version if available.
* use setuptools_scm and importlib for version
* treat all __dunder__ attributes of all objects as inherently unsafe.
-------------------------------------------------------------------
Wed Feb 17 11:57:46 UTC 2021 - Ben Greiner <code@bnavigator.de>
- Update to 0.9.22
* another important but small fix for Python 3.9
* Merge branch 'nested_interrupts_returns'
- Drop hard numpy requirement, don't test on python36
-------------------------------------------------------------------
Fri Jan 17 12:49:59 UTC 2020 - Marketa Calabkova <mcalabkova@suse.com>
- update to 0.9.18
* drop python2
* few fixes
-------------------------------------------------------------------
Mon Dec 9 17:26:14 UTC 2019 - Todd R <toddrme2178@gmail.com>
- Update to 0.9.17
* add 3.8 to travis config
-------------------------------------------------------------------
Tue Oct 29 05:01:27 UTC 2019 - Todd R <toddrme2178@gmail.com>
- Update to 0.9.16
* auto-run codecov only if numpy is installed
-------------------------------------------------------------------
Fri Sep 13 12:09:15 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update to 0.9.15:
* some doc improvements
-------------------------------------------------------------------
Thu Jul 25 13:36:37 UTC 2019 - pgajdos@suse.com
- version update to 0.9.14
* no upstream changelog
-------------------------------------------------------------------
Wed Mar 6 12:17:43 UTC 2019 - Tomáš Chvátal <tchvatal@suse.com>
- Update 0.9.13:
* Various spelling fixes
* Error reporting tweaks
-------------------------------------------------------------------
Wed Aug 29 10:27:20 UTC 2018 - tchvatal@suse.com
- Fix the test call to work on 42.3
-------------------------------------------------------------------
Sat Jun 2 19:10:58 UTC 2018 - toddrme2178@gmail.com
- Use license tag
-------------------------------------------------------------------
Thu Mar 22 04:49:27 UTC 2018 - toddrme2178@gmail.com
- Initial version