- Update to 4.5.4:

* Security
    + Cancelling an async future does not, properly trigger, leading to a
      potential data leak in specific cases. (CVE-2023-28858, bsc#1209811) 
    + Cancelling an async future does not, properly trigger, leading to a
      potential data leak in specific cases. (CVE-2023-28859, bsc#1209812)
  * New Features
    + Introduce AbstractConnection so that UnixDomainSocketConnection can
      call super().init (#2588)
    + Added queue_class to REDIS_ALLOWED_KEYS (#2577)
    + Made search document subscriptable (#2615)
    + Sped up the protocol parsing (#2596)
    + Use hiredis::pack_command to serialized the commands. (#2570)
    + Add support for unlink in cluster pipeline (#2562)
  * Bug Fixes
    + Fixing cancelled async futures (#2666)
    + Fix: do not use asyncio's timeout lib before 3.11.2 (#2659)
    + Fix UDS in v4.5.2: UnixDomainSocketConnection missing constructor
      argument (#2630)
    + CWE-404 AsyncIO Race Condition Fix (#2624, #2579)
    + Fix behaviour of async PythonParser to match RedisParser as for
      issue #2349 (#2582)
    + Replace async_timeout by asyncio.timeout (#2602)
    + Update json().arrindex() default values (#2611)
    + Fix #2581 UnixDomainSocketConnection object has no attribute
      _command_packer (#2583)
    + Fix issue with pack_commands returning an empty byte sequence (#2416)
    + Async HiredisParser should finish parsing after a
      Connection.disconnect() (#2557)
    + Check for none, prior to raising exception (#2569)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-redis?expand=0&rev=67

python-redis.spec

@@ -16,40 +16,27 @@
 #
 
 
-%define skip_python2 1
 Name:           python-redis
-Version:        4.3.5
+Version:        4.5.4
 Release:        0
 Summary:        Python client for Redis key-value store
 License:        MIT
-Group:          Development/Languages/Python
 URL:            https://github.com/redis/redis-py
 Source0:        https://files.pythonhosted.org/packages/source/r/redis/redis-%{version}.tar.gz
 Source1:        https://github.com/redis/redis-py/raw/v%{version}/tox.ini
-BuildRequires:  %{python_module Deprecated >= 1.2.3}
 BuildRequires:  %{python_module async-timeout >= 4.0.2}
-BuildRequires:  %{python_module base >= 3.6}
-BuildRequires:  %{python_module importlib-metadata >= 1.0 if %python-base < 3.8}
-# requires mock.AsyncMock
-BuildRequires:  %{python_module mock if %python-base < 3.8}
-BuildRequires:  %{python_module packaging >= 20.4}
+BuildRequires:  %{python_module base >= 3.7}
+BuildRequires:  %{python_module packaging}
 BuildRequires:  %{python_module pytest-asyncio}
 BuildRequires:  %{python_module pytest-timeout}
 BuildRequires:  %{python_module pytest}
 BuildRequires:  %{python_module setuptools}
-BuildRequires:  %{python_module typing-extensions if %python-base < 3.8}
 BuildRequires:  fdupes
 BuildRequires:  psmisc
 BuildRequires:  python-rpm-macros
 BuildRequires:  redis
-Requires:       python-Deprecated >= 1.2.3
 Requires:       python-async-timeout >= 4.0.2
-Requires:       python-packaging >= 20.4
 Requires:       redis
-%if 0%{?python_version_nodots} < 38
-Requires:       python-importlib-metadata >= 1.0
-Requires:       python-typing-extensions
-%endif
 Recommends:     python-hiredis >= 1.0.0
 BuildArch:      noarch
 %python_subpackages
@@ -92,9 +79,9 @@ if [ $(getconf LONG_BIT) -ne 64 ]; then
   # reference precision issues on 32-bit
   donttest=" or test_geopos"
 fi
-# gh#redis/redis-py#2554
-donttest=" or test_xautoclaim"
-%pytest -m 'not (onlycluster or redismod)' -k "not (dummyprefix $donttest)" --ignore tests/test_ssl.py
+# gh#redis/redis-py#2554 and gh#redis/redis-py#2679
+donttest=" or test_xautoclaim or test_acl_list"
+%pytest -m 'not (onlycluster or redismod)' -k "not (dummyprefix $donttest)" --ignore tests/test_ssl.py --ignore tests/test_asyncio/test_cluster.py --redis-url=redis://localhost:6379/
 
 %files %{python_files}
 %license LICENSE