Accepting request 1314563 from devel:languages:python

OBS-URL: https://build.opensuse.org/request/show/1314563
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-cbor2?expand=0&rev=18

cbor2-5.7.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:7a405a1d7c8230ee9acf240aad48ae947ef584e8af05f169f3c1bde8f01f8b71
+size 102467

python-cbor2.changes

@@ -1,3 +1,30 @@
+-------------------------------------------------------------------
+Thu Oct 30 13:11:54 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
+
+- Update to 5.7.1
+  * Improved performance on decoding large definite bytestrings
+  * Fixed a read(-1) vulnerability caused by boundary handling error
+
+-------------------------------------------------------------------
+Mon Sep 29 10:21:41 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 5.7.0:
+  * Added support for Python 3.14 (no free-threading support yet,
+    sorry)
+  * Dropped support for Python 3.8
+  * Added support for encoding indefinite containers
+  * Added complex number support (tag 43000)
+
+-------------------------------------------------------------------
+Tue Aug 12 08:01:01 UTC 2025 - Markéta Machová <mmachova@suse.com>
+
+- Make the libalternatives transition conditional
+
+-------------------------------------------------------------------
+Wed Jun 25 11:44:28 UTC 2025 - Markéta Machová <mmachova@suse.com>
+
+- Convert to libalternatives
+
 -------------------------------------------------------------------
 Tue Oct 22 13:48:00 UTC 2024 - Dirk Müller <dmueller@suse.com>
 
@@ -16,7 +43,7 @@ Thu Jun  6 10:36:17 UTC 2024 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.c
 -------------------------------------------------------------------
 Wed Jun  5 15:47:30 UTC 2024 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
 
-- Update to 5.6.3
+- Update to 5.6.3 (bsc#1220096, CVE-2024-26134):
   * Fixed decoding of epoch-based dates being affected by the local
     time zone in the C extension
 - from version 5.6.2

python-cbor2.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-cbor2
 #
-# Copyright (c) 2024 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,9 +16,14 @@
 #
 
 
+%if 0%{?suse_version} > 1500
+%bcond_without libalternatives
+%else
+%bcond_with libalternatives
+%endif
 %{?sle15_python_module_pythons}
 Name:           python-cbor2
-Version:        5.6.5
+Version:        5.7.1
 Release:        0
 Summary:        Pure Python CBOR (de)serializer with extensive tag support
 License:        MIT
@@ -33,8 +38,13 @@ BuildRequires:  %{python_module setuptools_scm >= 6.4}
 BuildRequires:  %{python_module wheel}
 BuildRequires:  fdupes
 BuildRequires:  python-rpm-macros
+%if %{with libalternatives}
+BuildRequires:  alts
+Requires:       alts
+%else
 Requires(post): update-alternatives
 Requires(postun): update-alternatives
+%endif
 %python_subpackages
 
 %description
@@ -60,6 +70,9 @@ export LANG=en_US.UTF8
 export LANG=en_US.UTF8
 %pytest_arch
 
+%pre
+%python_libalternatives_reset_alternative cbor2
+
 %post
 %python_install_alternative cbor2