diff --git a/deepdiff-8.5.0-gh.tar.gz b/deepdiff-8.5.0-gh.tar.gz deleted file mode 100644 index 34d279b..0000000 --- a/deepdiff-8.5.0-gh.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:9df31fbe2d3318c54b849fad1244af9367eabbb33d01a514de1290f1b9c4f8c9 -size 537215 diff --git a/deepdiff-8.6.1-gh.tar.gz b/deepdiff-8.6.1-gh.tar.gz new file mode 100644 index 0000000..e333076 --- /dev/null +++ b/deepdiff-8.6.1-gh.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:3c538a4966b18c5c006498363403d6e0626fdb5a9ab5825e38bdc715be00c74f +size 633489 diff --git a/python-deepdiff.changes b/python-deepdiff.changes index 5af7e33..f13b9d6 100644 --- a/python-deepdiff.changes +++ b/python-deepdiff.changes @@ -1,3 +1,33 @@ +------------------------------------------------------------------- +Tue Sep 9 07:26:58 UTC 2025 - John Paul Adrian Glaubitz + +- Update to 8.6.1 (bsc#1249347, CVE-2025-58367): + * Patched security vulnerability in the Delta class which was vulnerable + to class pollution via its constructor, and when combined with a gadget + available in DeltaDiff itself, it could lead to Denial of Service and + Remote Code Execution (via insecure Pickle deserialization). + (bsc#1249347, CVE-2025-58367) +- from version 8.6.0 + * Added Colored View thanks to @mauvilsa + * Added support for applying deltas to NamedTuple thanks to @paulsc + * Fixed test_delta.py with Python 3.14 thanks to @Romain-Geissler-1A + * Added python property serialization to json + * Added ip address serialization + * Switched to UV from pip + * Added Claude.md + * Added uuid hashing thanks to @akshat62 + * Added ignore_uuid_types flag to DeepDiff to avoid type reports when comparing UUID and string. + * Added comprehensive type hints across the codebase (multiple commits for better type safety) + * Added support for memoryview serialization + * Added support for bytes serialization (non-UTF8 compatible) + * Fixed bug where group_by with numbers would leak type info into group path reports + * Fixed bug in _get_clean_to_keys_mapping without explicit significant digits + * Added support for python dict key serialization + * Enhanced support for IP address serialization with safe module imports + * Added development tooling improvements (pyright config, .envrc example) + * Updated documentation and development instructions +- Update BuildRequires from pyproject.toml + ------------------------------------------------------------------- Mon Jun 2 11:57:35 UTC 2025 - John Paul Adrian Glaubitz diff --git a/python-deepdiff.spec b/python-deepdiff.spec index ff3cbb0..a27f290 100644 --- a/python-deepdiff.spec +++ b/python-deepdiff.spec @@ -1,7 +1,7 @@ # # spec file for package python-deepdiff # -# Copyright (c) 2025 SUSE LLC +# Copyright (c) 2025 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -18,7 +18,7 @@ %{?sle15_python_module_pythons} Name: python-deepdiff -Version: 8.5.0 +Version: 8.6.1 Release: 0 Summary: Deep Difference and Search of any Python object/data License: MIT @@ -40,6 +40,7 @@ BuildRequires: %{python_module python-dateutil} BuildRequires: %{python_module setuptools} BuildRequires: %{python_module tomli-w} BuildRequires: %{python_module toml} +BuildRequires: %{python_module uuid6} BuildRequires: %{python_module wheel} BuildRequires: fdupes BuildRequires: python-rpm-macros