Accepting request 1190360 from devel:languages:python

- Update to 72.1.0:
  * Restore the tests command and deprecate access to the module.
  * Added return types to typed public functions.
  * Removed lingering unused code around Distribution._patched_dist.
  * Reset the backports module when enabling vendored packages.
  * Include all vendored files in the sdist.
  * Restored package data that went missing in 71.0. This change also
    incidentally causes tests to be installed once again.
  * Now setuptools declares its own dependencies in the core extra.
    Dependencies are still vendored for bootstrapping purposes, but
    setuptools will prefer installed dependencies if present. The core
    extra is used for informational purposes and should *not* be declared
    in package metadata (e.g. build-requires).
  * Support for loading distutils from the standard library is now
    deprecated, including use of SETUPTOOLS_USE_DISTUTILS=stdlib and
    importing distutils before importing setuptools.
  * Fix distribution name normalisation for valid versions that are not
    canonical (e.g. 1.0-2).

    + Modernized and refactored VCS handling in package_index.
      (bsc#1228105, CVE-2024-6345)

OBS-URL: https://build.opensuse.org/request/show/1190360
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-setuptools?expand=0&rev=84

python-setuptools.changes

@@ -1,3 +1,25 @@
+-------------------------------------------------------------------
+Tue Jul 30 02:22:34 UTC 2024 - Steve Kowalik <steven.kowalik@suse.com>
+
+- Update to 72.1.0:
+  * Restore the tests command and deprecate access to the module.
+  * Added return types to typed public functions.
+  * Removed lingering unused code around Distribution._patched_dist.
+  * Reset the backports module when enabling vendored packages.
+  * Include all vendored files in the sdist.
+  * Restored package data that went missing in 71.0. This change also
+    incidentally causes tests to be installed once again.
+  * Now setuptools declares its own dependencies in the core extra.
+    Dependencies are still vendored for bootstrapping purposes, but
+    setuptools will prefer installed dependencies if present. The core
+    extra is used for informational purposes and should *not* be declared
+    in package metadata (e.g. build-requires).
+  * Support for loading distutils from the standard library is now
+    deprecated, including use of SETUPTOOLS_USE_DISTUTILS=stdlib and
+    importing distutils before importing setuptools.
+  * Fix distribution name normalisation for valid versions that are not
+    canonical (e.g. 1.0-2).
+
 -------------------------------------------------------------------
 Sat Jun 29 05:45:24 UTC 2024 - Dirk Müller <dmueller@suse.com>
 
@@ -40,6 +62,8 @@ Tue May 28 05:20:31 UTC 2024 - Steve Kowalik <steven.kowalik@suse.com>
     + Updated and removed obsolete Python < 3.8 code and comments.
     + Updated pkg_resources to use stdlib importlib.machinery instead of
       importlib_machinery.
+    + Modernized and refactored VCS handling in package_index.
+      (bsc#1228105, CVE-2024-6345)
   * Bugfixes
     + In install command, use super to call the superclass methods. Avoids
       race conditions when monkeypatching from _distutils_system_mod occurs

python-setuptools.spec

@@ -16,7 +16,6 @@
 #
 
 
-%define skip_python2 1
 %global flavor @BUILD_FLAVOR@%{nil}
 %if "%{flavor}" == "test"
 %define psuffix -test
@@ -31,7 +30,7 @@
 %define mypython python
 %{?sle15_python_module_pythons}
 Name:           python-setuptools%{psuffix}
-Version:        70.1.1
+Version:        72.1.0
 Release:        0
 Summary:        Download, build, install, upgrade, and uninstall Python packages
 License:        Apache-2.0 AND MIT AND BSD-2-Clause AND Python-2.0
@@ -54,6 +53,7 @@ BuildRequires:  %{python_module filelock >= 3.4.0}
 BuildRequires:  %{python_module ini2toml-lite >= 0.9}
 BuildRequires:  %{python_module jaraco.develop >= 7.21}
 BuildRequires:  %{python_module jaraco.envs >= 2.2}
+BuildRequires:  %{python_module jaraco.packaging >= 10.0}
 BuildRequires:  %{python_module jaraco.path >= 3.2.0}
 BuildRequires:  %{python_module jaraco.test}
 BuildRequires:  %{python_module pip >= 19.1}
@@ -128,6 +128,8 @@ donttest="(test_apply_pyproject_equivalent_to_setupcfg and https)"
 donttest+=" or test_pbr_integration"
 # test_example_file_in_sdist wants wheel.whl
 donttest+=" or test_example_file_in_sdist"
+# looks for .exe files that we do not ship
+donttest+=" or test_wheel_includes_cli_scripts"
 %pytest -rfE -n auto -k "not ($donttest)"
 %endif
 

setuptools-70.1.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:937a48c7cdb7a21eb53cd7f9b59e525503aa8abaf3584c730dc5f7a5bec3a650
-size 2292324