15
0

Accepting request 1303319 from devel:languages:python

- Update to 8.6.1 (bsc#1249347, CVE-2025-58367):
  * Patched security vulnerability in the Delta class which was vulnerable
    to class pollution via its constructor, and when combined with a gadget
    available in DeltaDiff itself, it could lead to Denial of Service and
    Remote Code Execution (via insecure Pickle deserialization).
    (bsc#1249347, CVE-2025-58367)
- from version 8.6.0
  * Added Colored View thanks to @mauvilsa
  * Added support for applying deltas to NamedTuple thanks to @paulsc
  * Fixed test_delta.py with Python 3.14 thanks to @Romain-Geissler-1A
  * Added python property serialization to json
  * Added ip address serialization
  * Switched to UV from pip
  * Added Claude.md
  * Added uuid hashing thanks to @akshat62
  * Added ignore_uuid_types flag to DeepDiff to avoid type reports when comparing UUID and string.
  * Added comprehensive type hints across the codebase (multiple commits for better type safety)
  * Added support for memoryview serialization
  * Added support for bytes serialization (non-UTF8 compatible)
  * Fixed bug where group_by with numbers would leak type info into group path reports
  * Fixed bug in _get_clean_to_keys_mapping without explicit significant digits
  * Added support for python dict key serialization
  * Enhanced support for IP address serialization with safe module imports
  * Added development tooling improvements (pyright config, .envrc example)
  * Updated documentation and development instructions
- Update BuildRequires from pyproject.toml

OBS-URL: https://build.opensuse.org/request/show/1303319
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-deepdiff?expand=0&rev=18
This commit is contained in:
2025-09-09 18:30:37 +00:00
committed by Git OBS Bridge
4 changed files with 36 additions and 5 deletions

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:9df31fbe2d3318c54b849fad1244af9367eabbb33d01a514de1290f1b9c4f8c9
size 537215

3
deepdiff-8.6.1-gh.tar.gz Normal file
View File

@@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3c538a4966b18c5c006498363403d6e0626fdb5a9ab5825e38bdc715be00c74f
size 633489

View File

@@ -1,3 +1,33 @@
-------------------------------------------------------------------
Tue Sep 9 07:26:58 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
- Update to 8.6.1 (bsc#1249347, CVE-2025-58367):
* Patched security vulnerability in the Delta class which was vulnerable
to class pollution via its constructor, and when combined with a gadget
available in DeltaDiff itself, it could lead to Denial of Service and
Remote Code Execution (via insecure Pickle deserialization).
(bsc#1249347, CVE-2025-58367)
- from version 8.6.0
* Added Colored View thanks to @mauvilsa
* Added support for applying deltas to NamedTuple thanks to @paulsc
* Fixed test_delta.py with Python 3.14 thanks to @Romain-Geissler-1A
* Added python property serialization to json
* Added ip address serialization
* Switched to UV from pip
* Added Claude.md
* Added uuid hashing thanks to @akshat62
* Added ignore_uuid_types flag to DeepDiff to avoid type reports when comparing UUID and string.
* Added comprehensive type hints across the codebase (multiple commits for better type safety)
* Added support for memoryview serialization
* Added support for bytes serialization (non-UTF8 compatible)
* Fixed bug where group_by with numbers would leak type info into group path reports
* Fixed bug in _get_clean_to_keys_mapping without explicit significant digits
* Added support for python dict key serialization
* Enhanced support for IP address serialization with safe module imports
* Added development tooling improvements (pyright config, .envrc example)
* Updated documentation and development instructions
- Update BuildRequires from pyproject.toml
-------------------------------------------------------------------
Mon Jun 2 11:57:35 UTC 2025 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>

View File

@@ -1,7 +1,7 @@
#
# spec file for package python-deepdiff
#
# Copyright (c) 2025 SUSE LLC
# Copyright (c) 2025 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-deepdiff
Version: 8.5.0
Version: 8.6.1
Release: 0
Summary: Deep Difference and Search of any Python object/data
License: MIT
@@ -40,6 +40,7 @@ BuildRequires: %{python_module python-dateutil}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module tomli-w}
BuildRequires: %{python_module toml}
BuildRequires: %{python_module uuid6}
BuildRequires: %{python_module wheel}
BuildRequires: fdupes
BuildRequires: python-rpm-macros