Accepting request 320145 from home:frispete:python

rephrased changelog

OBS-URL: https://build.opensuse.org/request/show/320145
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pyramid?expand=0&rev=20

fix_mimetype_tests.patch

@@ -1,35 +0,0 @@
-commit 7a76cd0b183d5080ec863a7d494008e65469f683
-Author: Domen Kožar <domen@dev.si>
-Date:   Tue Nov 11 08:02:09 2014 +0100
-
-    fixes #1405
-
-diff --git a/pyramid/tests/test_response.py b/pyramid/tests/test_response.py
-index a16eb8d..84ec577 100644
---- a/pyramid/tests/test_response.py
-+++ b/pyramid/tests/test_response.py
-@@ -1,4 +1,5 @@
- import io
-+import mimetypes
- import os
- import unittest
- from pyramid import testing
-@@ -51,15 +52,11 @@ class TestFileResponse(unittest.TestCase):
-         r.app_iter.close()
- 
-     def test_without_content_type(self):
--        for suffix, content_type in (
--            ('txt', 'text/plain; charset=UTF-8'),
--            ('xml', 'application/xml; charset=UTF-8'),
--            ('pdf', 'application/pdf')
--        ):
-+        for suffix in ('txt', 'xml', 'pdf'):
-             path = self._getPath(suffix)
-             r = self._makeOne(path)
--            self.assertEqual(r.content_type, content_type.split(';')[0])
--            self.assertEqual(r.headers['content-type'], content_type)
-+            self.assertEqual(r.headers['content-type'].split(';')[0],
-+                             mimetypes.guess_type(path, strict=False)[0])
-             r.app_iter.close()
- 
-     def test_python_277_bug_15207(self):

pyramid-1.5.2.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:12057e63c9c99f88bc71af12f00a5e2c934221122baf582c7365361cba45bdcc
-size 2422156

pyramid-1.5.7.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:c1302d5ccb6833e8794ddb649aa9bb64d86c05adb127c93e329f8863907449b4
+size 2678474

python-pyramid.changes

@@ -1,3 +1,47 @@
+-------------------------------------------------------------------
+Thu Jul 30 14:16:47 UTC 2015 - hpj@urpla.net
+
+- 1.5.7 (2015-04-28)
+  * Further fix the JSONP renderer by prefixing the returned content with a comment.
+    This should mitigate attacks from Flash (See CVE-2014-4671). 
+    See https://github.com/Pylons/pyramid/pull/1648
+  * Allow periods and brackets ([]) in the JSONP callback. The original fix was
+    overly-restrictive and broke Angular. See https://github.com/Pylons/pyramid/pull/1648
+
+- 1.5.6 (2015-04-14)
+  * 1.5.5 was a brown-bag release which was missing files.
+
+- 1.5.5 (2015-04-14)
+  * The JSONP renderer created JavaScript code in such a way that a callback variable
+    could be used to arbitrarily inject javascript into the response object.
+    https://github.com/Pylons/pyramid/pull/1626
+
+- 1.5.4 (2015-02-24)
+  * Fix regression where pserve --reload would not work when running as a daemon. 
+    Backported from https://github.com/Pylons/pyramid/pull/1592
+
+- 1.5.3 (2015-02-22)
+  * Work around an issue where pserve --reload would leave terminal echo disabled if it
+    reloaded during a pdb session. Backported from https://github.com/Pylons/pyramid/pull/1577
+  * Fixed a failing unittest caused by differing mimetypes on various OS platforms.
+    See https://github.com/Pylons/pyramid/issues/1405
+  * Overall improvments for the proutes command. Added --format and --glob arguments to the
+    command, introduced the method column for displaying available request methods, and 
+    improved the view output by showing the module instead of just __repr__. 
+    See: https://github.com/Pylons/pyramid/pull/1542
+  * The pyramid.renderers.JSONP renderer would raise an exception if used without a request
+    object. It will now fallback to behave like the pyramid.renderers.JSON renderer if
+    there is no request object to derive a callback from.
+    See https://github.com/Pylons/pyramid/pull/1562
+  * Prevent “parameters to load are deprecated” DeprecationWarning from setuptools>=11.3.
+    See https://github.com/Pylons/pyramid/pull/1541
+  * Avoiding timing attacks against CSRF tokens. Backported from
+    https://github.com/Pylons/pyramid/pull/1574
+  * pserve can now take a -b or --browser option to open the server URL in a web browser.
+    See https://github.com/Pylons/pyramid/pull/1533
+
+- remove mimetype test patch, applied upstream
+
 -------------------------------------------------------------------
 Fri Feb  6 16:31:11 UTC 2015 - hpj@urpla.net
 

python-pyramid.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package python-pyramid
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 # Copyright (c) 2015 LISA GmbH, Bingen, Germany.
 #
 # All modifications and additions to the file contributed by third parties
@@ -18,14 +18,13 @@
 
 
 Name:           python-pyramid
-Version:        1.5.2
+Version:        1.5.7
 Release:        0
 Url:            http://pylonsproject.org
-Summary:        The Pyramid web application development framework, a Pylons project
+Summary:        The Pyramid web application development framework
 License:        BSD-4-Clause and ZPL-2.1 and MIT
 Group:          Development/Languages/Python
 Source:         http://pypi.python.org/packages/source/p/pyramid/pyramid-%{version}.tar.gz
-Patch1:         fix_mimetype_tests.patch
 Requires:       python-PasteDeploy >= 1.5.0
 Requires:       python-WebOb >= 1.3.1
 Requires:       python-repoze.lru >= 0.4
@@ -74,7 +73,7 @@ Pyramid is the newest web framework produced by the Pylons Project
 Pyramid was previously known as repoze.bfg (http://bfg.repoze.org).
 
 %package doc
-Summary:        The Pyramid web application development framework, a Pylons project
+Summary:        The Pyramid web application development framework
 Group:          Development/Languages/Python
 Requires:       %{name} = %{version}
 
@@ -83,7 +82,6 @@ This package contains documentation files for %{name}.
 
 %prep
 %setup -q -n pyramid-%{version}
-%patch1 -p1
 
 %build
 python setup.py build