From d57000bafb02453b3d0e74112396cdf26fb2e60eff2e8b5d0f8d0f3dcae87ad9 Mon Sep 17 00:00:00 2001 From: Daniel Garcia Date: Tue, 25 Apr 2023 11:40:43 +0000 Subject: [PATCH 1/3] Accepting request 1082498 from system:homeautomation:home-assistant:unstable - update to version 1.9.1 * Marked tests that fail on older Python patch releases (< 3.7.10, < 3.8.8 and < 3.9.2) as expected to fail due to missing a security fix for CVE-2021-23336. ((#850)_) OBS-URL: https://build.opensuse.org/request/show/1082498 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-yarl?expand=0&rev=48 --- python-yarl.changes | 8 ++++++++ python-yarl.spec | 4 +--- support-python-311.patch | 18 ------------------ yarl-1.8.2.tar.gz | 3 --- yarl-1.9.1.tar.gz | 3 +++ 5 files changed, 12 insertions(+), 24 deletions(-) delete mode 100644 support-python-311.patch delete mode 100644 yarl-1.8.2.tar.gz create mode 100644 yarl-1.9.1.tar.gz diff --git a/python-yarl.changes b/python-yarl.changes index 2242aa8..93cbcb5 100644 --- a/python-yarl.changes +++ b/python-yarl.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Mon Apr 24 09:13:21 UTC 2023 - Adrian Schröter + +- update to version 1.9.1 + * Marked tests that fail on older Python patch releases + (< 3.7.10, < 3.8.8 and < 3.9.2) as expected to fail due to missing + a security fix for CVE-2021-23336. ((#850)_) + ------------------------------------------------------------------- Fri Apr 21 12:39:08 UTC 2023 - Dirk Müller diff --git a/python-yarl.spec b/python-yarl.spec index 1313402..56a2097 100644 --- a/python-yarl.spec +++ b/python-yarl.spec @@ -18,14 +18,12 @@ %{?sle15_python_module_pythons} Name: python-yarl -Version: 1.8.2 +Version: 1.9.1 Release: 0 Summary: Yet another URL library License: Apache-2.0 URL: https://github.com/aio-libs/yarl/ Source: https://files.pythonhosted.org/packages/source/y/yarl/yarl-%{version}.tar.gz -# PATCH-FIX-OPENSUSE Workaround until gh#aio-libs/yarl#803 is fixed -Patch0: support-python-311.patch BuildRequires: %{python_module Cython} BuildRequires: %{python_module devel >= 3.7} BuildRequires: %{python_module idna >= 2.0} diff --git a/support-python-311.patch b/support-python-311.patch deleted file mode 100644 index 99e605c..0000000 --- a/support-python-311.patch +++ /dev/null @@ -1,18 +0,0 @@ ---- - tests/test_url_parsing.py | 3 +++ - 1 file changed, 3 insertions(+) - -Index: yarl-1.8.2/tests/test_url_parsing.py -=================================================================== ---- yarl-1.8.2.orig/tests/test_url_parsing.py -+++ yarl-1.8.2/tests/test_url_parsing.py -@@ -72,6 +72,9 @@ class TestScheme: - assert u.query_string == "" - assert u.fragment == "" - -+ @pytest.mark.skip( -+ reason="Fails on Pythons with fixed CVE-2023-24329" -+ ) - def test_not_a_scheme2(self): - u = URL("37signals:book") - assert u.scheme == "37signals" diff --git a/yarl-1.8.2.tar.gz b/yarl-1.8.2.tar.gz deleted file mode 100644 index c5d7340..0000000 --- a/yarl-1.8.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:49d43402c6e3013ad0978602bf6bf5328535c48d192304b91b97a3c6790b1562 -size 172341 diff --git a/yarl-1.9.1.tar.gz b/yarl-1.9.1.tar.gz new file mode 100644 index 0000000..bc2cf0b --- /dev/null +++ b/yarl-1.9.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:5ce0bcab7ec759062c818d73837644cde567ab8aa1e0d6c45db38dfb7c284441 +size 184455 From 967e0364fbc40acb9d7bbae6078c9a55a538bfbe44b55e1a8224e4d8bb40e2de Mon Sep 17 00:00:00 2001 From: Daniel Garcia Date: Tue, 25 Apr 2023 11:42:05 +0000 Subject: [PATCH 2/3] - Delete support-python-311.patch, not needed anymore OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-yarl?expand=0&rev=49 --- python-yarl.changes | 1 + 1 file changed, 1 insertion(+) diff --git a/python-yarl.changes b/python-yarl.changes index 93cbcb5..11c1b74 100644 --- a/python-yarl.changes +++ b/python-yarl.changes @@ -5,6 +5,7 @@ Mon Apr 24 09:13:21 UTC 2023 - Adrian Schröter * Marked tests that fail on older Python patch releases (< 3.7.10, < 3.8.8 and < 3.9.2) as expected to fail due to missing a security fix for CVE-2021-23336. ((#850)_) +- Delete support-python-311.patch, not needed anymore ------------------------------------------------------------------- Fri Apr 21 12:39:08 UTC 2023 - Dirk Müller From bd2683a29f88f7a0702bc8176473ab9f661ee8201fe1a60d918adb17d12e555e Mon Sep 17 00:00:00 2001 From: Daniel Garcia Date: Wed, 26 Apr 2023 07:35:30 +0000 Subject: [PATCH 3/3] - Update to version 1.9.2 Fix regression with truediv and absolute URLs with empty paths causing the raw path to lack the leading /. ((#854)_) OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-yarl?expand=0&rev=50 --- python-yarl.changes | 7 +++++++ python-yarl.spec | 2 +- yarl-1.9.1.tar.gz | 3 --- yarl-1.9.2.tar.gz | 3 +++ 4 files changed, 11 insertions(+), 4 deletions(-) delete mode 100644 yarl-1.9.1.tar.gz create mode 100644 yarl-1.9.2.tar.gz diff --git a/python-yarl.changes b/python-yarl.changes index 11c1b74..b9f3d79 100644 --- a/python-yarl.changes +++ b/python-yarl.changes @@ -1,3 +1,10 @@ +------------------------------------------------------------------- +Wed Apr 26 07:02:00 UTC 2023 - Daniel Garcia + +- Update to version 1.9.2 + Fix regression with truediv and absolute URLs with empty paths + causing the raw path to lack the leading /. ((#854)_) + ------------------------------------------------------------------- Mon Apr 24 09:13:21 UTC 2023 - Adrian Schröter diff --git a/python-yarl.spec b/python-yarl.spec index 56a2097..87211f7 100644 --- a/python-yarl.spec +++ b/python-yarl.spec @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-yarl -Version: 1.9.1 +Version: 1.9.2 Release: 0 Summary: Yet another URL library License: Apache-2.0 diff --git a/yarl-1.9.1.tar.gz b/yarl-1.9.1.tar.gz deleted file mode 100644 index bc2cf0b..0000000 --- a/yarl-1.9.1.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:5ce0bcab7ec759062c818d73837644cde567ab8aa1e0d6c45db38dfb7c284441 -size 184455 diff --git a/yarl-1.9.2.tar.gz b/yarl-1.9.2.tar.gz new file mode 100644 index 0000000..e4e03f1 --- /dev/null +++ b/yarl-1.9.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:04ab9d4b9f587c06d801c2abfe9317b77cdf996c65a90d5e84ecc45010823571 +size 184673