Accepting request 1311087 from devel:languages:python

- update to 46.0.2:
  * Updated Windows, macOS, and Linux wheels to be compiled with
    OpenSSL 3.5.4.
  * Fixed an issue where users installing via pip on Python 3.14
    development versions would not properly install a dependency.
  * Fixed an issue building the free-threaded macOS 3.14 wheels.
  * BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been
    removed.
  * Support for OpenSSL < 3.0 is deprecated and will be removed
    in the next release.
  * Support for x86_64 macOS (including publishing wheels) is
    deprecated and will be removed in two releases. We will
    switch to publishing an arm64 only wheel for macOS.
  * Support for 32-bit Windows (including publishing wheels) is
    deprecated and will be removed in two releases. Users should
    move to a 64-bit Python installation.
  * Updated Windows, macOS, and Linux wheels to be compiled with
    OpenSSL 3.5.3.
  * We now build ppc64le manylinux wheels and publish them to
    PyPI.
  * We now build win_arm64 (Windows on Arm) wheels and publish
    them to PyPI.
  * Added support for free-threaded Python 3.14.
  * Removed the deprecated get_attribute_for_oid method on
    :class:`~cryptography.x509.CertificateSigningRequest`. Users
    should use
    :meth:`~cryptography.x509.Attributes.get_attribute_for_oid`
    instead.
  * Removed the deprecated CAST5, SEED, IDEA, and Blowfish
    classes from the cipher module. These are still available in

OBS-URL: https://build.opensuse.org/request/show/1311087
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-cryptography?expand=0&rev=105

Make-unsafe-subinterpreter-support-available-via-cfg.patch

@@ -7,10 +7,10 @@ Subject: [PATCH] Make unsafe subinterpreter support available via cfg flag
  src/impl_/pymodule.rs | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-Index: cryptography-45.0.7/vendor/pyo3-0.25.1/src/impl_/pymodule.rs
+Index: cryptography-46.0.2/vendor/pyo3-0.26.0/src/impl_/pymodule.rs
 ===================================================================
---- cryptography-45.0.7.orig/vendor/pyo3-0.25.1/src/impl_/pymodule.rs
-+++ cryptography-45.0.7/vendor/pyo3-0.25.1/src/impl_/pymodule.rs
+--- cryptography-46.0.2.orig/vendor/pyo3-0.26.0/src/impl_/pymodule.rs
++++ cryptography-46.0.2/vendor/pyo3-0.26.0/src/impl_/pymodule.rs
 @@ -100,7 +100,7 @@ impl ModuleDef {
          // that static data is not reused across interpreters.
          //
@@ -20,27 +20,27 @@ Index: cryptography-45.0.7/vendor/pyo3-0.25.1/src/impl_/pymodule.rs
          {
              // PyInterpreterState_Get is only available on 3.9 and later, but is missing
              // from python3.dll for Windows stable API on 3.9
-Index: cryptography-45.0.7/Cargo.toml
+Index: cryptography-46.0.2/Cargo.toml
 ===================================================================
---- cryptography-45.0.7.orig/Cargo.toml
-+++ cryptography-45.0.7/Cargo.toml
+--- cryptography-46.0.2.orig/Cargo.toml
++++ cryptography-46.0.2/Cargo.toml
 @@ -29,3 +29,6 @@ openssl-sys = "0.9.108"
  
  [profile.release]
  overflow-checks = true
 +
 +[patch.crates-io]
-+pyo3 = { path="vendor/pyo3-0.25.1" }
-Index: cryptography-45.0.7/Cargo.lock
++pyo3 = { path="vendor/pyo3-0.26.0" }
+Index: cryptography-46.0.2/Cargo.lock
 ===================================================================
---- cryptography-45.0.7.orig/Cargo.lock
-+++ cryptography-45.0.7/Cargo.lock
+--- cryptography-46.0.2.orig/Cargo.lock
++++ cryptography-46.0.2/Cargo.lock
 @@ -276,8 +276,6 @@ dependencies = [
  [[package]]
  name = "pyo3"
- version = "0.25.1"
+ version = "0.26.0"
 -source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "8970a78afe0628a3e3430376fc5fd76b6b45c4d43360ffd6cdd40bdde72b682a"
+-checksum = "7ba0117f4212101ee6544044dae45abe1083d30ce7b29c4b5cbdfa2354e07383"
  dependencies = [
   "indoc",
   "libc",

cryptography-45.0.7.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:4b1654dfc64ea479c242508eb8c724044f1e964a47d1d1cacc5132292d851971
-size 744980

cryptography-46.0.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:21b6fc8c71a3f9a604f028a329e5560009cc4a3a828bfea5fcba8eb7647d88fe
+size 749293

no-pytest_benchmark.patch

@@ -1,17 +1,17 @@
-Index: cryptography-45.0.7/pyproject.toml
+Index: cryptography-46.0.2/pyproject.toml
 ===================================================================
---- cryptography-45.0.7.orig/pyproject.toml
-+++ cryptography-45.0.7/pyproject.toml
-@@ -67,8 +67,6 @@ nox = ["nox >=2024.04.15", "nox[uv] >=20
+--- cryptography-46.0.2.orig/pyproject.toml
++++ cryptography-46.0.2/pyproject.toml
+@@ -72,8 +72,6 @@ nox = ["nox[uv] >=2024.04.15"]
  test = [
-     "cryptography_vectors==45.0.7",
+     "cryptography_vectors==46.0.2",
      "pytest >=7.4.0",
 -    "pytest-benchmark >=4.0",
 -    "pytest-cov >=2.10.1",
      "pytest-xdist >=3.5.0",
      "pretend >=0.7",
      "certifi >=2024",
-@@ -129,7 +127,7 @@ exclude = [
+@@ -134,7 +132,7 @@ exclude = [
  ]
  
  [tool.pytest.ini_options]
@@ -20,7 +20,7 @@ Index: cryptography-45.0.7/pyproject.toml
  console_output_style = "progress-even-when-capture-no"
  markers = [
      "skip_fips: this test is not executed in FIPS mode",
-@@ -150,30 +148,6 @@ strict_bytes = true
+@@ -155,30 +153,6 @@ strict_bytes = true
  module = ["pretend"]
  ignore_missing_imports = true
  
@@ -51,10 +51,10 @@ Index: cryptography-45.0.7/pyproject.toml
  [tool.ruff]
  line-length = 79
  
-Index: cryptography-45.0.7/tests/bench/test_aead.py
+Index: cryptography-46.0.2/tests/bench/test_aead.py
 ===================================================================
---- cryptography-45.0.7.orig/tests/bench/test_aead.py
-+++ cryptography-45.0.7/tests/bench/test_aead.py
+--- cryptography-46.0.2.orig/tests/bench/test_aead.py
++++ cryptography-46.0.2/tests/bench/test_aead.py
 @@ -26,84 +26,84 @@ def _aead_supported(cls):
      not _aead_supported(ChaCha20Poly1305),
      reason="Requires OpenSSL with ChaCha20Poly1305 support",
@@ -160,10 +160,10 @@ Index: cryptography-45.0.7/tests/bench/test_aead.py
      ct = aes.encrypt(b"\x00" * 12, b"hello world plaintext", None)
 -    benchmark(aes.decrypt, b"\x00" * 12, ct, None)
 +    aes.decrypt(b"\x00" * 12, ct, None)
-Index: cryptography-45.0.7/tests/bench/test_ec_load.py
+Index: cryptography-46.0.2/tests/bench/test_ec_load.py
 ===================================================================
---- cryptography-45.0.7.orig/tests/bench/test_ec_load.py
-+++ cryptography-45.0.7/tests/bench/test_ec_load.py
+--- cryptography-46.0.2.orig/tests/bench/test_ec_load.py
++++ cryptography-46.0.2/tests/bench/test_ec_load.py
 @@ -5,9 +5,9 @@
  from ..hazmat.primitives.fixtures_ec import EC_KEY_SECP256R1
  
@@ -178,10 +178,10 @@ Index: cryptography-45.0.7/tests/bench/test_ec_load.py
 -    benchmark(EC_KEY_SECP256R1.private_key)
 +def test_load_ec_private_numbers():
 +    EC_KEY_SECP256R1.private_key()
-Index: cryptography-45.0.7/tests/bench/test_hashes.py
+Index: cryptography-46.0.2/tests/bench/test_hashes.py
 ===================================================================
---- cryptography-45.0.7.orig/tests/bench/test_hashes.py
-+++ cryptography-45.0.7/tests/bench/test_hashes.py
+--- cryptography-46.0.2.orig/tests/bench/test_hashes.py
++++ cryptography-46.0.2/tests/bench/test_hashes.py
 @@ -5,10 +5,10 @@
  from cryptography.hazmat.primitives import hashes
  
@@ -195,10 +195,10 @@ Index: cryptography-45.0.7/tests/bench/test_hashes.py
  
 -    benchmark(bench)
 +    bench()
-Index: cryptography-45.0.7/tests/bench/test_hmac.py
+Index: cryptography-46.0.2/tests/bench/test_hmac.py
 ===================================================================
---- cryptography-45.0.7.orig/tests/bench/test_hmac.py
-+++ cryptography-45.0.7/tests/bench/test_hmac.py
+--- cryptography-46.0.2.orig/tests/bench/test_hmac.py
++++ cryptography-46.0.2/tests/bench/test_hmac.py
 @@ -5,10 +5,10 @@
  from cryptography.hazmat.primitives import hashes, hmac
  
@@ -212,10 +212,10 @@ Index: cryptography-45.0.7/tests/bench/test_hmac.py
  
 -    benchmark(bench)
 +    bench()
-Index: cryptography-45.0.7/tests/bench/test_x509.py
+Index: cryptography-46.0.2/tests/bench/test_x509.py
 ===================================================================
---- cryptography-45.0.7.orig/tests/bench/test_x509.py
-+++ cryptography-45.0.7/tests/bench/test_x509.py
+--- cryptography-46.0.2.orig/tests/bench/test_x509.py
++++ cryptography-46.0.2/tests/bench/test_x509.py
 @@ -13,40 +13,40 @@ from cryptography import x509
  from ..utils import load_vectors_from_file
  

python-cryptography.changes

@@ -1,3 +1,40 @@
+-------------------------------------------------------------------
+Mon Oct 13 09:32:39 UTC 2025 - Dirk Müller <dmueller@suse.com>
+
+- update to 46.0.2:
+  * Updated Windows, macOS, and Linux wheels to be compiled with
+    OpenSSL 3.5.4.
+  * Fixed an issue where users installing via pip on Python 3.14
+    development versions would not properly install a dependency.
+  * Fixed an issue building the free-threaded macOS 3.14 wheels.
+  * BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been
+    removed.
+  * Support for OpenSSL < 3.0 is deprecated and will be removed
+    in the next release.
+  * Support for x86_64 macOS (including publishing wheels) is
+    deprecated and will be removed in two releases. We will
+    switch to publishing an arm64 only wheel for macOS.
+  * Support for 32-bit Windows (including publishing wheels) is
+    deprecated and will be removed in two releases. Users should
+    move to a 64-bit Python installation.
+  * Updated Windows, macOS, and Linux wheels to be compiled with
+    OpenSSL 3.5.3.
+  * We now build ppc64le manylinux wheels and publish them to
+    PyPI.
+  * We now build win_arm64 (Windows on Arm) wheels and publish
+    them to PyPI.
+  * Added support for free-threaded Python 3.14.
+  * Removed the deprecated get_attribute_for_oid method on
+    :class:`~cryptography.x509.CertificateSigningRequest`. Users
+    should use
+    :meth:`~cryptography.x509.Attributes.get_attribute_for_oid`
+    instead.
+  * Removed the deprecated CAST5, SEED, IDEA, and Blowfish
+    classes from the cipher module. These are still available in
+    :doc:`/hazmat/decrepit/index`.
+  * In X.509, when performing a PSS signature with a SHA-3 hash,
+    it is now encoded with the official NIST SHA3 OID.
+
 -------------------------------------------------------------------
 Sun Sep 14 20:45:39 UTC 2025 - Dirk Müller <dmueller@suse.com>
 

python-cryptography.spec

@@ -28,7 +28,7 @@
 %{?sle15_python_module_pythons}
 Name:           python-cryptography%{psuffix}
 # ALWAYS KEEP IN SYNC WITH python-cryptography-vectors!
-Version:        45.0.7
+Version:        46.0.2
 Release:        0
 Summary:        Python library which exposes cryptographic recipes and primitives
 License:        Apache-2.0 OR BSD-3-Clause

vendor.tar.zst

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:bf99c9e48b00d21870a3579e7c84eb32889dee6c82848be97e0b2408091194a7
-size 2652902
+oid sha256:ea523052eeeb087bbce1ae07a0202f4ec17c525855d21d34e9162b51bc30f50d
+size 2684695