Commit Graph

267 Commits

Author SHA1 Message Date
Nick Hainke
fcc8d639c9 python3-flent: add flent package
As described on GitHub page [0]:
  Flent is a Python wrapper to run multiple simultaneous
  netperf/iperf/ping instances and aggregate the results.

[0] - https://github.com/tohojo/flent

Signed-off-by: Nick Hainke <vincent@systemli.org>
2022-11-08 13:36:20 +08:00
Jeffery To
fb007138c1 python3: Add Py3Build/InstallBuildDepends recipe
This adds a recipe, Py3Build/InstallBuildDepends, that installs the
requirements listed in HOST_PYTHON3_PACKAGE_BUILD_DEPENDS. This allows
other (non-Python) packages to install host Python packages by calling
this recipe, without having to know the internals of python3-package.mk.

This also updates apparmor to call this recipe.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:20 +08:00
Michal Vasilek
0d71ffe1a9 python3-package.mk: fix syntax error in FindStdlibDepends
When running FindStdlib and running DependsCheckHostPipVersionMatch at
the same time, both commands were joined together resulting in a syntax
error.

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-11-08 13:36:19 +08:00
Alexandru Ardelean
d5a5cb0023 python3-package.mk: add check for dependencies in host-pip-requirements
It often happens that we update a package to a new version (e.g. cffi) to a
newer version, but we forget to update the version for cffi in the
`lang/python/host-pip-requirements/cffi.txt` file.

This check adds a minimal check, so that when a build occurs for a Python
package, if there is a mention/listing of this package in
`lang/python/host-pip-requirements/` it will check that the versions match.

This way, when we update a package, we get a build failure and update the
host version as well.

This will omit packages (like Cython) that are not packaged for OpenWrt,
but are host-side dependencies only.
But until we find some mechanism to check for those, we will probably only
notice to update them when another build occurs (at the very least).

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:19 +08:00
Michal Vasilek
49417788f1 python3: update to 3.10.7
* fixes CVE-2021-28861
* adjust pip and setuptools versions
* refresh patches

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-11-08 13:36:19 +08:00
Rosen Penev
e7d926cdae python3: use tools/expat for host build
Oversight from when the expat host build was removed.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-08 13:36:19 +08:00
Šimon Bořek
51b0fbd78d python3: backport and fix target musl libc detection
Patch 030:
Backported from Python main branch[^1] for Python to distinguish between glibc and musl libc SOABI.

Patch 131:
Changes PLATFORM_TRIPLET -gnu/-musl suffix detection (performed by the backported patch)
to be based on the target OS instead of the building OS.

See included patches for more detailed descriptions.

Specifically this fixes cross-compilation for mpc8548 CPUs with SPE instructions[^2] enabled.

[^1]: merged to python:main as https://github.com/python/cpython/pull/24502 'bpo-43112: detect musl as a separate SOABI'
[^2]: https://www.nxp.com/docs/en/reference-manual/SPEPEM.pdf

Co-authored-by: Pali Rohár <pali@kernel.org>
Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-11-08 13:36:19 +08:00
Andre Heider
c08a8b5b13 python3: update patches for libressl v3.5
Based upon patches from OpenBSD[0] and Gentoo[1].

Switched to the LibreSSL provided LIBRESSL_VERSION_NUMBER macro, which
makes OPENWRT_HOST_BUILD redundant.

[0] https://github.com/openbsd/ports/tree/master/lang/python/3.10/patches
[1] https://github.com/gentoo/libressl/tree/master/dev-lang/python/files

Signed-off-by: Andre Heider <a.heider@gmail.com>
2022-11-08 13:36:19 +08:00
Jeffery To
b463f3ab07 python3: Update to 3.10.5, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:19 +08:00
Jeffery To
868a73571b python3: Update to 3.10.4
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:19 +08:00
Jeffery To
15589e200f python3: Update to 3.10.3, refresh patches
Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:18 +08:00
Jeffery To
1dd1926505 python3: Update to 3.10.2, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:18 +08:00
Jeffery To
a42ba715f7 python3: Update to 3.10.1, refresh/remove patches
Removed patches:
* 027-bpo-43158-Use-configure-values-for-building-_uuid-ex.patch
  Already merged.
* 029-disable-deprecation-warning.patch
  Packages should be patched/fixed to remove the use of distutils
  instead of disabling this warning.

Also:
* Updates PKG_LICENSE to use the correct SPDX license identifier
* Fixes build for mipsel_24kc_24kf

Fixes https://github.com/openwrt/packages/issues/17217.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:18 +08:00
Alexandru Ardelean
7e63f08563 python3: bump to version 3.10.0
Manually re-applied:
  008-distutils-use-python-sysroot.patch
  016-adjust-config-paths.patch

Drop patch: 003-do-not-run-distutils-tests.patch
There is now a configure option '--disable-test-modules'
And seems we left the '_ctypes_test' around for quite some time.
Dropped now.
Refs:
  https://bugs.python.org/issue27640
  https://bugs.python.org/issue43282

Drop patch: 013-getbuildinfo-date-time-source-date-epoch.patch
Python build honors SOURCE_DATE_EPOCH pretty well now.

Drop setuptools patches. Setuptools should be reproducible with Python
3.6+
according to a mention here:
  pypa/setuptools#1690 (comment)
It's time to let upstream fix Setuptools reproduce-ability.

Drop patch: 010-do-not-add-rt-lib-dirs-when-cross-compiling.patch
I can't seem to fully remember why it's there.
And it seem to build fine without it.

Drop patch: 015-abort-on-failed-modules.patch
Python build supports a similar PYTHONSTRICTEXTENSIONBUILD=1 env-var
option.

Add patch: 026-openssl-feature-flags.patch
We need to keep this in our tree for a while.
See:
  https://bugs.python.org/issue45627

Backport patch:
027-bpo-43158-Use-configure-values-for-building-_uuid-ex.patch
Link: python/cpython#29353
Fixes the build for uuid C module.

Add patch: 028-host-python-support-ssl-with-libressl.patch
We need the _ssl module working on the host-side with LibreSSL for pip
to
work to download from https://pypi.org
Refs: openwrt/openwrt#4749

Add patch: 029-disable-deprecation-warning.patch
Fixes apparmor build. The warning causes a configure error.

Refreshed the rest of patches.

Some old build-flags were removed. They don't seem to be necessary
anymore.

Split python3-uuid from python3-light. To better manage the libuuid
library
(if needed). Also, fixing the uuid C module build. Seems this was
failing,
and was falling back to using hashlib.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:18 +08:00
Rosen Penev
fff5c91bf7 expat: don't build host libs
tools/expat is actually what's used by the various packages that
supposedly depend on expat/host.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2022-11-08 13:36:18 +08:00
Alexandru Ardelean
93b05e6f70 python3: enable bluetooth support by default
Bluetooth support requires bluez-libs present, but they are only required
for the build, and don't seem to be needed to be present on the target.

There isn't any linking required to libbluetooth. It's only the bluetooth.h
header that is required for building BT support into Python.

For testing, this snippet was used from `Lib/test/test_socket.py` (inside
cpython):
```
def _have_socket_bluetooth():
    """Check whether AF_BLUETOOTH sockets are supported on this host."""
    try:
        # RFCOMM is supported by all platforms with bluetooth support. Windows
        # does not support omitting the protocol.
        s = socket.socket(socket.AF_BLUETOOTH, socket.SOCK_STREAM, socket.BTPROTO_RFCOMM)
    except (AttributeError, OSError):
        return False
    else:
        s.close()
    return True
```

Fixes: https://github.com/openwrt/packages/issues/16544

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:18 +08:00
Alexandru Ardelean
850e5019c1 python3: use gdbm for Berkley dbm
Python works with GNU DBM and with Berkley DBM.
Berkley DBM has been under Oracle for some time.

And it's not clear how many Python users actually use DBM.

In the packages feed, we have both libdb47 (which is now under Oracle) and
GNU DBM. The GNU DBM has a compatibility layer for Berkley DBM.
There are newer versions than libdb47, but it's probably not worth having
them yet. The libbd47 tarball is ~40+ MB. Odds are newer versions will be
bigger and more bloated.

This change merges the old `python3-gdbm` package into the `python3-dbm`
package, since they are effectively using the same underlying library now,
i.e. gdbm.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:17 +08:00
Alexandru Ardelean
8e7e0de040 python-six: remove host-build
There are no more users left in this tree.
So, remove it.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:17 +08:00
Alexandru Ardelean
80cc38aa2d python-lxml: bump to version 4.9.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:16 +08:00
Alexandru Ardelean
3a8f3a3dc5 lxml: bump to version 4.9.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:16 +08:00
Alexandru Ardelean
306d7a7b01 python-lxml: bump to version 4.8.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:16 +08:00
Alexandru Ardelean
40e5eb4ad4 python-lxml: update to version 4.7.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:16 +08:00
Alexandru Ardelean
af3cf6817b numpy: bump to version 1.23.3
Also bump Cython version to 0.29.32

And yeeeey: zip -> tar.gz

And they fixed the Intel AVX extension stuff/detection.
Which is why I deferred updating it until now.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:16 +08:00
Josef Schlehofer
7aa90d8fb7 host-pip-requirements: update Cython to version 0.29.28
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-08 13:36:16 +08:00
Alexandru Ardelean
702dd6d155 numpy: bump to version 1.21.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:16 +08:00
Alexandru Ardelean
a31ea63a7b numpy: bump to version 1.21.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:16 +08:00
Alexandru Ardelean
3eaf3bb745 numpy: bump to version 1.21.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:15 +08:00
Alexandru Ardelean
da543ef635 numpy: bump to version 1.21.2
Switch to AUTORELEASE for PKG_RELEASE.
And update Cython as well.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:15 +08:00
Alexandru Ardelean
de1f766e9a numpy: fix circular dependency
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:15 +08:00
Alexandru Ardelean
54784574f2 numpy: bump to version 1.21.1
Also bump Cython version to 0.29.23.
And add support for OpenBLAS.
Currently optional, but will be enabled by default on some architectures
later.

Depends on PR https://github.com/openwrt/packages/pull/15685

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-08 13:36:15 +08:00
Jeffery To
bbaf28d844 micropython: Update to 1.18, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:15 +08:00
Jeffery To
1345a91eb8 micropython: Update to 1.17, reorganize package
Previous versions used a bundled version of the axTLS library. The
MicroPython project maintains their own fork[1], as development of the
library appears to have stopped (the last release was version 2.1.5 in
2019[2]).

This replaces the use of axTLS with two variants, one using mbedTLS and
one with no TLS support (and no upip, as it uses the ussl module). The
external mbedTLS patch (040-extmod-use-external-mbedtls.patch) comes
from Debian[3].

This also sets myself as the maintainer.

[1]: https://github.com/micropython/axtls
[2]: https://sourceforge.net/projects/axtls/files/
[3]: https://salsa.debian.org/yangfl-guest/micropython/-/blob/master/debian/patches/0006-extmod-Use-system-mbedtls.patch

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-08 13:36:15 +08:00
1582130940
70dfa8aab3 Revert "python-paho-mqtt: remove dependency already included in python3-light"
This reverts commit 1367aa3b93.
2022-11-08 13:35:30 +08:00
coolsnowwolf
1367aa3b93 python-paho-mqtt: remove dependency already included in python3-light 2022-11-08 01:39:24 +08:00
Alexandru Ardelean
e95dc2495a ruamel-yaml: bump to version 0.17.17
The older one won't build with Python 3.10.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:44 +08:00
Josef Schlehofer
ed5df502f3 python-zeroconf: update to version 0.38.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:44 +08:00
Josef Schlehofer
2cbe20c495 python-yarl: update to version 1.6.3
Update Makefile copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:43 +08:00
Alexandru Ardelean
db6bf0cdb9 python-yaml: bump to version 6.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:43 +08:00
Josef Schlehofer
8ef74089d9 python-websockets: update to version 10.3
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:43 +08:00
Javier Marcet
5bde81f50f python-websocket-client: update to 1.4.1
- Fix stack growth bug when `run_forever` reconnects
  - Add doctest CI for sphinx docs code examples (d150099)
  - General docs improvements
  - Fix automatic reconnect with `run_forever`
  - Allow a timeout to be set when using a proxy

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:43 +08:00
Javier Marcet
7f8e84b24d python-websocket-client: update to 1.3.3
- Fix unclosed socket error
 - Update header dict access
 - Add utf8 workaround to docs

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:42 +08:00
Josef Schlehofer
ec6ef122c7 python-voluptuous-serialize: update to version 2.5.0
- Release notes:
https://github.com/home-assistant-libs/voluptuous-serialize/releases/tag/2.5.0

- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:42 +08:00
Josef Schlehofer
efbd3de944 python-uci: update to version 0.9.0
- Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.9.0
- Update copyright while at it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:42 +08:00
Javier Marcet
5ab0fb5cce python3-texttable: update to version 1.6.4
- Fix alignment bug when deco is modified

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:42 +08:00
Javier Marcet
f1d7455e89 python-stem: update to v1.8.1
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:41 +08:00
Josef Schlehofer
5ca49fa1ec python-stem: backport patch to fix Python 3.10
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:41 +08:00
Josef Schlehofer
ff632a3bef python-sqlalchemy: update to version 1.4.22
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:41 +08:00
Šimon Bořek
162dbb8f67 python-sentry-sdk: update to 1.5.4
changelog: f6d3adcb3d/CHANGELOG.md (154)

Signed-off-by: Šimon Bořek <borek@autobakterie.cz>
2022-11-03 11:39:41 +08:00
Alexandru Ardelean
5fd510512f python-requests: bump to version 2.28.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:40 +08:00
Alexandru Ardelean
fdf6b25aab python-requests: bump to version 2.26.0
This version prefers charset_normalizer instead of chardet.
chardet is still usable if available.

Dropping patches for idna. Not required anymore.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:40 +08:00
Alexandru Ardelean
819e32f650 python3-pytz: bump to version 2022.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:40 +08:00
Alexandru Ardelean
9d756bbb13 python3-pytz: bump to version 2022.4
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:40 +08:00
Alexandru Ardelean
b344c6256c python-pytz: bump to version 2022.2.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:39 +08:00
Jeffery To
26e8433564 python-pyopenssl: Update to 21.0.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-03 11:39:39 +08:00
Javier Marcet
d0bd05edf4 python-pynacl: update to v1.5.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:39 +08:00
Daniel Golle
8f759dfafc pynacl: fix build with updated sodium-minimal patch
Commit 3da874371 ("libsodium: include ed25519_core in minimal build")
broke the build of PyNaCl. Add patch to always include all ed25519
functions which are now always covered even if libsodium is built with
the MINIMAL option.

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-11-03 11:39:39 +08:00
Jeffery To
3150e9e80d python-pycparser: Update to 2.21, update patch
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-03 11:39:38 +08:00
Sergey V. Lobanov
113297c1e8 python-psutil: update to version 5.9.0, fix build on macos
1. updated to 5.9.0

2. psutil can not be built on macos due to build script detects Darwin
using sys.platform and changes build logic to build for Darwin, but
OpenWrt is Linux.
This commit add patch to allow redefining sys.platform and uses
env var TARGET_SYS_PLATFORM to specify linux as sys platfrom.

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-11-03 11:39:38 +08:00
Javier Marcet
ce4eb7c82b python3-paramiko: update to version 2.11.0
2.11.0:

 - [Feature] Add SSH config token expansion (eg %h, %p) when parsing
 ProxyJump directives. Patch courtesy of Bruno Inec.

 - [Support] (via #2011) Apply unittest skipIf to tests currently
 using SHA1 in their critical path, to avoid failures on systems
 starting to disable SHA1 outright in their crypto backends (eg RHEL
 9). Report & patch via Paul Howarth.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch,
 and to Thomas Grainger and Jun Omae for patch workshopping.

 - [Support] Recent versions of Cryptography have deprecated Blowfish
 algorithm support; in lieu of an easy method for users to remove it
 from the list of algorithms Paramiko tries to import and use, we’ve
 decided to remove it from our “preferred algorithms” list. This will
 both discourage use of a weak algorithm, and avoid warnings. Credit
 for report/patch goes to Mike Roest.

2.10.5:

 - [Bug] Windows-native SSH agent support as merged in 2.10 could
 encounter Errno 22 OSError exceptions in some scenarios (eg server
 not cleanly closing a relevant named pipe). This has been worked
 around and should be less problematic. Reported by Danilo Campana
 Fuchs and patched by Jun Omae.

 - [Bug] OpenSSH 7.7 and older has a bug preventing it from
 understanding how to perform SHA2 signature verification for RSA
 certificates (specifically certs - not keys), so when we added SHA2
 support it broke all clients using RSA certificates with these
 servers. This has been fixed in a manner similar to what OpenSSH’s
 own client does: a version check is performed and the algorithm used
 is downgraded if needed. Reported by Adarsh Chauhan, with fix
 suggested by Jun Omae.

 - [Bug] Align signature verification algorithm with OpenSSH re:
 zero-padding signatures which don’t match their nominal size/length.
 This shouldn’t affect most users, but will help Paramiko-implemented
 SSH servers handle poorly behaved clients such as PuTTY. Thanks to
 Jun Omae for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:38 +08:00
Javier Marcet
c447a6e948 python3-paramiko: update to version 2.10.4
- [Bug] Servers offering certificate variants of hostkey algorithms
 (eg ssh-rsa-cert-v01@openssh.com) could not have their host keys
 verified by Paramiko clients, as it only ever considered non-cert key
 types for that part of connection handshaking. This has been fixed.

 - [Bug] PKey instances’ __eq__ did not have the usual safety guard in
 place to ensure they were being compared to another PKey object,
 causing occasional spurious BadHostKeyException (among other things).
 This has been fixed. Thanks to Shengdun Hua for the original report
 /patch and to Christopher Papke for the final version of the fix.

 - [Support] Update camelCase method calls against the threading
 module to be snake_case; this and related tweaks should fix some
 deprecation warnings under Python 3.10. Thanks to Karthikeyan
 Singaravelan for the report, @Narendra-Neerukonda for the patch, and
 to Thomas Grainger and Jun Omae for patch workshopping.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:38 +08:00
Javier Marcet
0db5708c45 python3-paramiko: update to version 2.10.3
2.10.2:

 - [Bug] Fix Python 2 compatibility breakage introduced in 2.10.1.
 Spotted by Christian Hammond.

2.10.3:

 - [Bug] Switch from module-global to thread-local storage when
 recording thread IDs for a logging helper; this should avoid one
 flavor of memory leak for long-running processes. Catch & patch via
 Richard Kojedzinszky.

 - [Bug] Certificate-based pubkey auth was inadvertently broken when
 adding SHA2 support; this has been fixed. Reported by Erik Forsberg
 and fixed by Jun Omae.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:37 +08:00
Javier Marcet
d59f87442f python3-paramiko: update to version 2.10.1
2.10.1:

 - [Bug]: (CVE-2022-24302) Creation of new private key files using
 PKey subclasses was subject to a race condition between file creation
 & mode modification, which could be exploited by an attacker with
 knowledge of where the Paramiko-using code would write out such
 files.

 - This has been patched by using os.open and os.fdopen to ensure new
 files are opened with the correct mode immediately. We’ve left the
 subsequent explicit chmod in place to minimize any possible
 disruption, though it may get removed in future backwards-
 incompatible updates.

 - Thanks to Jan Schejbal for the report & feedback on the solution,
 and to Jeremy Katz at Tidelift for coordinating the disclosure.

2.10.0:

 - [Feature] Add support for OpenSSH’s Windows agent as a fallback
 when Putty/WinPageant isn’t available or functional. Reported by
 @benj56 with patches/PRs from @lewgordon and Patrick Spendrin.

 - [Feature] Add support for the %C token when parsing SSH config
 files. Foundational PR submitted by @jbrand42.

 - [Bug] Significantly speed up low-level read/write actions on
 SFTPFile objects by using bytearray/memoryview. This is unlikely to
 change anything for users of the higher level methods like
 SFTPClient.get or SFTPClient.getfo, but users of SFTPClient.open will
 likely see orders of magnitude improvements for files larger than a
 few megabytes in size.

 - Thanks to @jkji for the original report and to Sevastian Tchernov
 for the patch.

 - [Support] Add six explicitly to install-requires; it snuck into
 active use at some point but has only been indicated by transitive
 dependency on bcrypt until they somewhat-recently dropped it. This
 will be short-lived until we drop Python 2 support. Thanks to
 Sondre Lillebø Gundersen for catch & patch.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:37 +08:00
Javier Marcet
48391f6e3a python3-paramiko: update to version 2.9.2
- [Bug]: Enhanced log output when connecting to servers that do not
 support server-sig-algs extensions, making the new-as-of-2.9
 defaulting to SHA2 pubkey algorithms more obvious when it kicks in.

 - [Bug]: Connecting to servers which support server-sig-algs but
 which have no overlap between that list and what a Paramiko client
 supports, now raise an exception instead of defaulting to
 rsa-sha2-512 (since the use of server-sig-algs allows us to know
 what the server supports).

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:37 +08:00
Javier Marcet
5e51b79fd3 python3-paramiko: update to version 2.9.1
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:37 +08:00
Javier Marcet
4b6c9dcb5c python3-paramiko: update to version 2.8.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:37 +08:00
Jan Hoffmann
a54b8ebf60 python-paho-mqtt: add missing dependency
The uuid module has been split out into a separate package with the
update to Python 3.10.

Signed-off-by: Jan Hoffmann <jan@3e8.eu>
2022-11-03 11:39:36 +08:00
Alexandru Ardelean
e27af3a0f1 python-paho-mqtt: bump to version 1.6.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:36 +08:00
Josef Schlehofer
368277cbf5 python-markdown: update to version 3.3.6
- Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:36 +08:00
Javier Marcet
1f4d32e270 python-jsonschema: Update to 4.16.0
- Improve the base URI behavior when resolving a $ref to a resolution
 URI which is different from the resolved schema's declared $id.
 - Accessing jsonschema.draftN_format_checker is deprecated. Instead,
 if you want access to the format checker itself, it is exposed as
 jsonschema.validators.DraftNValidator.FORMAT_CHECKER on any
 jsonschema.protocols.Validator.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:36 +08:00
Javier Marcet
06b71bbc55 python-jsonschema: Update to 4.15.0, broken since 4.6.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:35 +08:00
Javier Marcet
ec449cd51f python-jsonschema: Update to 4.9.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:35 +08:00
Javier Marcet
0a50cc32f2 python-jsonschema: Update to 4.6.1
What's Changed:

 - Type annotate format checker methods by @sirosen
 - Fix fuzzer to include instrumentation by @DavidKorczynski
 - [pre-commit.ci] pre-commit autoupdate by @pre-commit-ci

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:35 +08:00
Javier Marcet
d4793ade77 python-jsonschema: Update to 4.6.0
What's Changed:

 - Add package_url for changelog by @fhightower
 - Only validate unevaluated properties/items on applicable types by
 @EpicWink
 - Mark library as typed (PEP-561) by @ssbarnea
 - Add v4.5.1 to changelog by @sirosen
 - Modernize the packaging setup via PEP 621 and Hatch. by @Julian

New Contributors:

 - @fhightower made their first contribution
 - @EpicWink made their first contribution

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:35 +08:00
Javier Marcet
8d954094d5 python-jsonschema: Update to 4.5.1
What's Changed:

 - Extend dynamicRef keyword by @nezhar
 - Add FORMAT_CHECKER attribute for Validator by @TiborVoelcker
 - Remove stray double-quote by @lurch
 - Ensure proper sorting of list in error message by @ssbarnea

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:34 +08:00
Jeffery To
75af4f3867 python-jsonschema: Update to 4.4.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-11-03 11:39:34 +08:00
Alexandru Ardelean
492869a0d1 python-idna: bump to version 3.3
And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:34 +08:00
Alexandru Ardelean
890fc88cc3 python-greenlet: bump to version 1.1.2
The older version won't build with Python 3.10.0

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:33 +08:00
Michal Vasilek
37e26f7854 python-flask-socketio: update to 5.3.1
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-11-03 11:39:33 +08:00
Alexandru Ardelean
6a991d59ec python-evdev: bump to 1.6.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:33 +08:00
Javier Marcet
f12d8cd875 python-dotenv: update to v0.21.0
Added:

 - CLI: add support for invocations via 'python -m'.
 - load_dotenv function now returns False.
 - CLI: add --format= option to list command.

Fixed:

 - Drop Python 3.5 and 3.6 and upgrade GA
 - Use open instead of io.open.
 - Improve documentation for variables without a value
 - Add parse_it to Related Projects
 - Update README.md
 - Improve documentation with direct use of MkDocs

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:33 +08:00
Javier Marcet
e26fcc7844 python-dotenv: update to v0.20.0
Added:

 - Add encoding (Optional[str]) parameter to get_key, set_key and
 unset_key. (by @bbc2)

Fixed:

 - Use dict to specify the entry_points parameter of setuptools.setup
 (by @mgorny).
 - Don't build universal wheels (by @bbc2).

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:33 +08:00
Javier Marcet
bab9ca452d python-dotenv: update to v0.19.2
What's Changed:

Fixed:

 - Add missing trailing newline before adding new entry with set_key
 by @bbc2 in #361

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:32 +08:00
Javier Marcet
5ffa989b17 python-dotenv: update to v0.19.1
What's Changed

 - CHANGELOG.md: Fix typos discovered by codespell by @cclauss in #350
 - Add Python 3.10 support by @theskumar in #359

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:32 +08:00
Javier Marcet
de19eee7ee python-dotenv: update to v0.19.0
Changed:

 - Require Python 3.5 or a later version. Python 2 and 3.4 are no
 longer supported

 - Raise ValueError if quote_mode isn't one of always, auto or never
 in set_key

 - When writing a value to a .env file with set_key or dotenv set
 <key> <value>

Added:

 - The dotenv_path argument of set_key and unset_key now has a type of
 Union[str, os.PathLike] instead of just os.PathLike

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:32 +08:00
Eneas U de Queiroz
8d47601d92 python-docutils: bump to version 0.19
Package does not currently build because of distutil dependency.  Fix
this by updating to the latest version.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-11-03 11:39:32 +08:00
Javier Marcet
1be181b5d4 python-docker: Update to 6.0.0
Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:31 +08:00
Javier Marcet
9a1c3d6b7b python-docker: Update to 5.0.3
Features:
 - Add cap_add and cap_drop parameters to service create and
 ContainerSpec
 - Add templating parameter to config create

Bugfixes:
 - Fix getting a read timeout for logs/attach with a tty and slow
 output

Miscellaneous:
 - Fix documentation examples

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:31 +08:00
Javier Marcet
59168ae4b3 python-docker: Update to 5.0.2
Bugfixes:

 - Fix disable_buffering regression

 - Bring back support for ssh identity file

 - Cleanup remaining python-2 dependencies

 - Fix image save example in docs

Miscellaneous:

 - Bump urllib3 to 1.26.5

 - Bump requests to 2.26.0

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:31 +08:00
Josef Schlehofer
ed536407c3 python-dns: update to version 2.2.0
- Removed PYPI_SOURCE_EXT as this release provides tarball with .tar.gz
extension, which is default.

- Changelog: https://dnspython.readthedocs.io/en/stable/whatsnew.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:31 +08:00
Josef Schlehofer
6a9ae91722 python-dns: update to version 2.1.0
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:30 +08:00
Javier Marcet
f2b39c5c4b python3-distro: update to version 1.7.0
- BACKWARD COMPATIBILITY:

  - Dropped support for EOL Pythons 2.7, 3.4 and 3.5
  - Dropped support for LSB and uname back-ends when --root-dir is
  specified
  - Moved distro.py to src/distro/distro.py

- ENHANCEMENTS:

  - Documented that distro.version() can return an empty string on
  - rolling releases
  - Documented support for Python 3.10
  - Added official support for Rocky Linux distribution
  - Added a shebang to distro.py to allow standalone execution
  - Added support for AIX platforms
  - Added compliance for PEP-561

- BUG FIXES:

  - Fixed include_uname parameter oversight
  - Fixed crash when uname -rs output is empty
  - Fixed Amazon Linux identifier in distro.id() documentation
  - Fixed OpenSuse >= 15 support
  - Fixed encoding issues when opening distro release files
  - Fixed linux_distribution regression

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:30 +08:00
Javier Marcet
571702b3e0 python3-distro: update to version 1.6.0
- BACKWARDS COMPATIBILITY:

  - Deprecated the distro.linux_distribution() function. Use
  distro.id(), distro.version() and distro.name() instead [#296]
  - Deprecated Python 2.7, 3.4 and 3.5 support. Further releases will
  only support Python 3.6+

- ENHANCEMENTS:

  - Added type hints to distro module [#269]
  - Added __version__ for checking distro version [#292]
  - Added support for arbitrary rootfs via the root_dir parameter
  [#247]
  - Added the --root-dir option to CLI [#161]
  - Added fallback to /usr/lib/os-release when /etc/os-release isn't
  available [#262]

- BUG FIXES:

  - Fixed subprocess.CalledProcessError when running lsb_release
  [#261]
  - Ignore /etc/iredmail-release file while parsing distribution
  [#268]
  - Use a binary file for /dev/null to avoid TextIOWrapper overhead
  [#271]

- RELEASE:

 - Moved repository from nir0s/distro to python-distro/distro on
 GitHub.

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-11-03 11:39:30 +08:00
Eneas U de Queiroz
3a901c17a9 defusedxml: bump to v. 0.7.0
This release adds support for Python 3.9.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-11-03 11:39:30 +08:00
Alexandru Ardelean
67e69beb05 python-dateutil: bump to version 2.8.2
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:29 +08:00
Sergey V. Lobanov
391521e994 python-curl: fix build on macos
setup.py detects macos (darwin) and adds -flat_namespace flag. This
flag is not compatible with GCC that is used to compile target.

This patch patch disables darwin detection

Signed-off-by: Sergey V. Lobanov <sergey@lobanov.in>
2022-11-03 11:39:29 +08:00
Josef Schlehofer
83d51817bd python-curl: update to version 7.44.0
Changelog:
PycURL 7.44.0 - 2021-08-08
--------------------------

This release reinstates best effort Python 2 support, adds Python 3.9 and
Python 3.10 alpha support and implements support for several libcurl options.

Official Windows builds are currently not being produced.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:39:29 +08:00
Alexandru Ardelean
4eaa7b745b python-chardet: bump to version 5.0.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:29 +08:00
Alexandru Ardelean
2482796fde python-cffi: bump to version 1.15.0
And use AUTORELEASE for PKG_RELEASE.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:39:29 +08:00
Stepan Henek
c2f4485a51 python-cachelib: update to version 0.3.0
Signed-off-by: Stepan Henek <stepan.henek@nic.cz>
2022-11-03 11:38:44 +08:00
Josef Schlehofer
57105efdf8 python-babel: update to version 2.9.1
Changelog:
https://github.com/python-babel/babel/releases/tag/v2.9.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-11-03 11:38:44 +08:00