Accepting request 1153104 from devel:languages:python

- Update to 3.9.15 (bsc#1220489, CVE-2024-27454):
  * Implement recursion limit of 1024 on orjson.loads().
  * Use byte-exact read on str formatting SIMD path to avoid crash.
- 3.9.14:
  * Fix crash serializing str introduced in 3.9.11.
  * Build now depends on Rust 1.72 or later.
- 3.9.13:
  * Serialization str escape uses only 128-bit SIMD.
  * Fix compatibility with CPython 3.13 alpha 3.
  * Publish musllinux_1_2 instead of musllinux_1_1 wheels.
  * Serialization uses small integer optimization in CPython 3.12 or later.
- 3.9.12:
  * Minimal musllinux_1_1 build due to sporadic CI failure.
- 3.9.11:
  * Improve performance of serializing. str is significantly faster. Documents
    using dict, list, and tuple are somewhat faster.
- Update to 3.9.10
  * Fix debug assert failure on 3.12 --profile=dev build.
- Release 3.9.9
  * orjson module metadata explicitly marks subinterpreters as not
    supported.
- Release 3.9.8
  * Improve performance.
  * Drop support for Python 3.7.
- Release 3.9.7
  * Fix crash in orjson.loads() due to non-reentrant handling of
    persistent buffer. This was introduced in 3.9.3.
  * Handle some FFI removals in CPython 3.13.
- Release 3.9.6
  * Fix numpy reference leak on unsupported array dtype.
  * Fix numpy.datetime64 reference handling.
  * Minor performance improvements.
- Release 3.9.5
  * Remove futex from module import and initialization path.
- Release 3.9.4
  * Fix hash builder using default values.
  * Fix non-release builds of orjson copying large deserialization
    buffer from stack to heap. This was introduced in 3.9.3.
- Release 3.9.3
  * Fix compatibility with CPython 3.12.
  * Support i686/x86 32-bit Python installs on Windows.
- Release 3.9.2
  * Fix the __cause__ exception on orjson.JSONEncodeError possibly
    being denormalized, i.e., of type str instead of Exception.
- Release 3.9.1
  * Fix memory leak on chained tracebacks of exceptions raised in
    default. This was introduced in 3.8.12.
- Release 3.9.0
  * orjson.Fragment includes already-serialized JSON in a document.
- Release 3.8.13
  * Source distribution contains all source code required for an
    offline build.
  * Build uses maturin v1.
- Release 3.8.12
    * Exceptions raised in default are now chained as the __cause__
      attribute on orjson.JSONEncodeError.
- Release 3.8.11
  * orjson.loads() on an empty document has a specific error
    message.
- Avoid cargo_audit error because of shipped old vulnerable
  zerocopy: Devendor the shipped cargo and update the cargo_vendor
  service
- Add %{?sle15_python_module_pythons}
- Update to 3.8.10:
  - Fix compatibility with CPython 3.12.0a7.
  - Fix compatibility with big-endian architectures.
  - Fix crash in serialization.
  - Fix parallel initialization of orjson.
- update to 3.8.3:
  * `orjson.dumps()` accepts `option=None` per `Optional[int]` type.
  * Fix tests on 32-bit for `numpy.intp` and `numpy.uintp`.
  * Build now depends on rustc 1.60 or later.
  * Support building with maturin 0.13 or 0.14.
- Update to 3.8.1 
  - Build maintenance for Python 3.11.
- Update to 3.8.0:
  - Support serializing numpy.int16 and numpy.uint16.
  - Fix datetime regression tests with tzinfo 2022b.
- Activate test suite
- Tidy spec
- initial package of version 3.7.7

OBS-URL: https://build.opensuse.org/request/show/1153104
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-orjson?expand=0&rev=7

_service

@@ -1,8 +1,8 @@
 <services>
-  <service name="cargo_vendor" mode="disabled">
+  <service name="cargo_vendor" mode="manual">
     <param name="srctar">orjson-*-devendored.tar.xz</param>
     <param name="compression">xz</param>
     <param name="update">true</param>
   </service>
-  <service name="cargo_audit" mode="disabled"></service>
+  <service name="cargo_audit" mode="manual"></service>
 </services>

orjson-3.9.10-devendored.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:c6c32df8331d4d6aa83a86a7eacc42c4ab74d7007dd85b999ca643a98c512fe8
-size 618568

orjson-3.9.10.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9ebbdbd6a046c304b1845e96fbcc5559cd296b4dfd3ad2509e33c4d9ce07d6a1
-size 5361203

python-orjson.changes

@@ -1,7 +1,27 @@
+-------------------------------------------------------------------
+Thu Feb 29 06:46:24 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
+
+- Update to 3.9.15 (bsc#1220489, CVE-2024-27454):
+  * Implement recursion limit of 1024 on orjson.loads().
+  * Use byte-exact read on str formatting SIMD path to avoid crash.
+- 3.9.14:
+  * Fix crash serializing str introduced in 3.9.11.
+  * Build now depends on Rust 1.72 or later.
+- 3.9.13:
+  * Serialization str escape uses only 128-bit SIMD.
+  * Fix compatibility with CPython 3.13 alpha 3.
+  * Publish musllinux_1_2 instead of musllinux_1_1 wheels.
+  * Serialization uses small integer optimization in CPython 3.12 or later.
+- 3.9.12:
+  * Minimal musllinux_1_1 build due to sporadic CI failure.
+- 3.9.11:
+  * Improve performance of serializing. str is significantly faster. Documents
+    using dict, list, and tuple are somewhat faster.
+
 -------------------------------------------------------------------
 Sun Jan 14 14:46:13 UTC 2024 - Ben Greiner <code@bnavigator.de>
 
-- Update to 3.8.10
+- Update to 3.9.10
   * Fix debug assert failure on 3.12 --profile=dev build.
 - Release 3.9.9
   * orjson module metadata explicitly marks subinterpreters as not

python-orjson.spec

@@ -18,7 +18,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-orjson
-Version:        3.9.10
+Version:        3.9.15
 Release:        0
 Summary:        Fast, correct Python JSON library supporting dataclasses, datetimes, and numpy
 License:        Apache-2.0 OR MIT