Commit Graph

97 Commits

Author SHA1 Message Date
Alexandru Ardelean
88e4d94e7d django: bump to version 4.0.5
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-11-03 11:38:37 +08:00
coolsnowwolf
44cfe70b5a
Merge pull request #568 from breakings/python-certifi_2022.9.24
python-certifi: bump to 2022.9.24
2022-11-01 21:23:58 +08:00
breakings
7e6baa7218
python3: update to 3.9.15 (#560) 2022-10-24 10:00:48 +00:00
Eneas U de Queiroz
599b404589 python-certifi: bump to 2022.9.24
This version updates the CA bundle, and needs urllib as dependency.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-10-22 14:26:06 +08:00
Eneas U de Queiroz
027d811fa8 python-certifi: bump to 2021.11.8
Latest bundle form mozilla.org.

Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2022-10-22 14:26:06 +08:00
Jeffery To
c783c13e9c python-cryptography: Fix failing build
Fixes https://github.com/openwrt/packages/issues/18876.
Fixes https://github.com/openwrt/packages/issues/18879.

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-07-17 11:39:03 +00:00
Alexandru Ardelean
a2317dc4c0 django: bump to version 4.0.4
Fixes
https://nvd.nist.gov/vuln/detail/CVE-2022-28347
https://nvd.nist.gov/vuln/detail/CVE-2022-28346

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-28 11:46:43 +00:00
Šimon Bořek
b172228c6b Jinja2: change maintainer to Šimon Bořek
As we are using this package in Turris OS
and Daniel Golle decided to no longer maintain this
and some other Python packages I'd like to take
this package maintainership as was originally
suggested in https://github.com/openwrt/packages/pull/17911
by Josef Schlehofer (@BKPepe).

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-04-28 11:46:28 +00:00
Šimon Bořek
299a5975c0 Flask: change maintainer to Šimon Bořek
As we are using this package in Turris OS
and Daniel Golle decided to no longer maintain this
and some other Python packages I'd like to take
this package maintainership as was originally
suggested in https://github.com/openwrt/packages/pull/17911
by Josef Schlehofer (@BKPepe).

Signed-off-by: Šimon Bořek <simon.borek@nic.cz>
2022-04-28 11:46:18 +00:00
Alexandru Ardelean
23d5b2d1f9 pillow: bump to version 9.1.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-22 10:30:00 +00:00
Jeffery To
cd6b97fc57 python-twisted: Update to 22.4.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-22 10:30:00 +00:00
Jeffery To
b5c1a4fc88 python-twisted: Update to 22.2.0
Includes fix for CVE-2022-21716 (The Twisted SSH client and server
implementation naively accepted an infinite amount of data for the
peer's SSH version identifier.)

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-22 10:30:00 +00:00
Jeffery To
f502e42646 python-twisted: Update to 22.1.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-04-22 10:30:00 +00:00
Jan Pavlinec
7e4752fefe treewide: change email
Change from jan.pavlinec@nic.cz to jan.pavlinec1@gmail.com

Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2022-04-15 18:06:47 +00:00
breakings
ae4ac3c2c7
python3: Update to 3.9.12 (#407)
* python3: Update to 3.9.11, refresh patches

Includes fixes for:
* Windows builds updated to bzip2 1.0.8 to mitigate CVE-2016-3189 and
  CVE-2019-12900
* CVE-2022-26488: Escalation of privilege via Windows Installer

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

* python3: Update to 3.9.12

Signed-off-by: Jeffery To <jeffery.to@gmail.com>

Co-authored-by: Jeffery To <jeffery.to@gmail.com>
2022-04-13 13:38:07 +08:00
Alexandru Ardelean
137bf71779 django: bump to version 4.0.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-04-08 18:35:31 +00:00
Javier Marcet
6efaaebf5b python-websocket-client: update to 1.3.2
- Add support for pre-initialized stream socket in new WebSocketApp
 - Remove rel.saferead() in examples (f0bf03d)
 - Increase scope of linting checks (dca4022)
 - Start adding type hints (a8a4099)

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-04-05 18:23:15 +00:00
Javier Marcet
6608a6a555 python-websocket-client: update to 1.3.1
- 1.3.1:
  - Fix 10 year old bug and improve dispatcher handling for
  run_forever
  - Fix run_forever to never return None, only return True or False,
  and add two tests
  - Remove Python 3.6 support, EOL in Dec 2021

- 1.3.0:
  - BREAKING: Set Origin header to use https:// scheme when wss://
  WebSocket URL is passed
  - Replace deprecated/broken WebSocket URLs with working ones
  (6ad5197)
  - Add documentation referencing rel for automatic reconnection with
  run_forever()
  - Add missing opcodes 1012, 1013
  - Add errno.ENETUNREACH to improve error handling (da1b050)
  - Minor documentation improvements and typo fixes

- 1.2.3:
  - Fix broken run_forever() functionality

- 1.2.2:
  - Migrate wsdump script in setup.py from scripts to newer
  entry_points
  - Add support for ssl.SSLContext for arbitrary SSL parameters
  - Remove keep_running variable
  - Remove HAVE_CONTEXT_CHECK_HOSTNAME variable (dac1692)
  - Replace deprecated ssl.PROTOCOL_TLS with ssl.PROTOCOL_TLS_CLIENT
  - Simplify code and improve Python 3 support
  - Fill default license template fields
  - Update CI tests
  - Improve documentation

Signed-off-by: Javier Marcet <javier@marcet.info>
2022-04-05 18:23:08 +00:00
Michal Vasilek
3cf66c3b8c python-websocket-client: update to 1.2.1
* update license (changed in 1.2.0)
* removed python3-six dependency (removed in 1.0.0)
* do not install tests

Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
2022-04-05 18:23:01 +00:00
Alexandru Ardelean
d8ae005fc5 python-evdev: bump to version 1.5.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-31 06:46:03 +00:00
Alexandru Ardelean
31689c055c python-pytz: bump to version 2022.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-31 06:44:33 +00:00
Daniel Golle
43df97d5fd Jinja2: add Josef as the maintainer of this package
It seems that Turris guys is using this package in the Turris OS, where
it is used for reForis (simple, basic UI for users)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[replace Daniel as maintainer, add commit message]
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
2022-03-25 03:51:48 +00:00
Josef Schlehofer
97c3ad68a6 Flask: use AUTORELEASE
This helps in cases, when someone forgets to bump PKG_RELEASE

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-25 03:51:04 +00:00
Daniel Golle
f15bacf693 Flask: add Josef as the maintainer of this package
It seems that Turris guys is using this package in the Turris OS, where
it is used for reForis (simple, basic UI for users)

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
[replace Daniel as maintainer, add commit message]
Signed-off-by: Josef Schlehofer <josef.schlehofer@nic.cz>
2022-03-25 03:50:57 +00:00
Daniel Golle
060f2debae Flask: update to version 2.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2022-03-25 03:50:50 +00:00
Alexandru Ardelean
3498cf8449 python-asn1crypto: drop package
I can't seem to see any package that needs it.
This was added for cryptography, since it was needed up to version 2.7
asn1-crypto doesn't have a user since commit 9d892e3cf88bd7c5f2c61117df2f3c2fd6c0e960
So, remove it.

Abandoned packaged PR: https://github.com/openwrt/packages-abandoned/pull/23

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-17 12:52:46 +00:00
Jeffery To
ad4f5e2988 python-packages: Remove unused library packages
With the removal of Seafile, these library packages no longer have any
in-repo users. They will be imported into the abandoned packages
repo[1].

[1]: https://github.com/openwrt/packages-abandoned/pull/24

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-17 12:50:53 +00:00
Jeffery To
0c2effae56 python3: Update to 3.9.10, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-06 03:22:20 +08:00
Alexandru Ardelean
87d0542338 python-lxml: update to version 4.6.5
Fixes: CVE-2021-43818
  https://nvd.nist.gov/vuln/detail/CVE-2021-43818

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-06 03:22:20 +08:00
Alexandru Ardelean
f416131b07 python-packages: remove myself as maintainer
There's been a bit of overlapping opinions on some of these packages.
The best thing to do here is to reduce ownership and relinquish my
control.

This patch does that.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 48ce6e48b617ee72e40220e6ab6b7ceaa079a192)
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2022-03-06 03:22:20 +08:00
Josef Schlehofer
433bd7e48a python3: update to version 3.9.9
- Updated setuptools and pip
- Refreshed patches

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2022-03-06 03:22:20 +08:00
Daniel Golle
1d53105fcc Werkzeug: update to version 2.0.2
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit e9717188920014e01858b94cbfcc00c2ba692a0e)
2022-03-06 03:22:20 +08:00
Daniel Golle
a67d450e36 Jinja2: update to version 3.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7c3d48497f05d94dc15a06687ed178d59228cc4c)
2022-03-06 03:22:20 +08:00
Daniel Golle
8320539366 click: update to version 8.0.3
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ea6c94a48ae43d12322b04022292ff561cdecda)
2022-03-06 03:22:20 +08:00
Michal Vasilek
1966ad5b5f python-websockets: new package
Signed-off-by: Michal Vasilek <michal.vasilek@nic.cz>
(cherry picked from commit bc10fbaebffb036731b4e9a1fdc40c9d1f535ba0)
2022-03-06 03:22:20 +08:00
Josef Schlehofer
3e84824cc1 python-astral: update to version 2.2
Update copyright

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 1deaf6dbbeb1247ff34c1b569ccd922a0e656511)
2022-03-06 03:22:20 +08:00
Alexandru Ardelean
e69790f8a4 python3: bump version to 3.9.7
Refreshed patches.
And apply hack for line-endings in pep517 (from pip).

Hack comment:
  # FIXME: [1] get rid of this asap; 'patch' doesn't like Windows endings, and this file is full of them...
  #        I actually tried this in a number of ways and the only way to fix this is to implement
  #        a poor-man's dos2unix using sed.
  #        The issue is with the pip package; it seems that it throws in some Windows line-endings
  #        and 'patch' won't handle them. So, we do a "dos2unix" and then patch.
  #        We can get rid of this once this is solved upstream and in pip:
  #            https://github.com/pypa/pep517/pull/130

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 26988f905f1f78ee0fd67dc90c3c7b112ac1817d)
2022-03-06 03:22:20 +08:00
Josef Schlehofer
b0f97fc791 python-certifi: update to version 2021.5.30
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 571326bd48273a8a845cad4cd97730fa0011958f)
2022-03-06 03:22:20 +08:00
Jeffery To
b364289ca5 python-cryptography: Update to 3.4.8
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 69ae9c29a206856af5e737737fcb691c8bce7f08)
2022-03-06 03:22:20 +08:00
Josef Schlehofer
edb67906fa python3-setuptools: add _distutils_hack
I tried to install matplotlib by using pip and it failed with the following output:

2021-08-18T11:52:26,171 Collecting matplotlib
2021-08-18T11:52:26,173   Created temporary directory: /tmp/pip-unpack-wuth2u0e
2021-08-18T11:52:26,565   Using cached matplotlib-3.4.3.tar.gz (37.9 MB)
2021-08-18T11:52:38,659   Added matplotlib from https://files.pythonhosted.org/packages/21/37/           197e68df384ff694f78d687a49ad39f96c67b8d75718bc61503e1676b617/matplotlib-3.4.3.tar.                       gz#sha256=fc4f526dfdb31c9bd6b8ca06bf9fab663ca12f3ec9cdf4496fb44bc680140318 to build tracker '/tmp/pip-   req-tracker-u30x8pht'
2021-08-18T11:52:38,660     Running setup.py (path:/tmp/pip-install-afiyiers/                            matplotlib_8e717e38862f4976a3d6cb1832ba3261/setup.py) egg_info for package matplotlib
2021-08-18T11:52:38,661     Created temporary directory: /tmp/pip-pip-egg-info-kbtiezxq
2021-08-18T11:52:38,662     Running command python setup.py egg_info
2021-08-18T11:52:38,831     Traceback (most recent call last):
2021-08-18T11:52:38,832       File "<string>", line 1, in <module>
2021-08-18T11:52:38,832       File "/usr/lib/python3.9/site-packages/setuptools/__init__.py", line 8, in <module>
2021-08-18T11:52:38,833     ModuleNotFoundError: No module named '_distutils_hack'

More details about it:
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=968410

Once I applied the patch from the bug tracker, I got further to install
it.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit feaaacc10fff283505ff261ed6886a4936fbe7f5)
2022-03-06 03:22:20 +08:00
Daniel Golle
96429d106f Flash: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 2abbf288ed5cabd024706ec8dad2dfb74ca4e620)
2022-03-06 03:22:20 +08:00
Daniel Golle
fbb520808d Jinja2: update to version 3.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 7b5b9b9d11ff222d45b11de3db92b91314cdacf2)
2022-03-06 03:22:20 +08:00
Daniel Golle
fcc35b026c Werkzeug: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 65c12b3c2f40b1e2eb555d7e2d835912097a67c4)
2022-03-06 03:22:20 +08:00
Daniel Golle
331c436728 click: update to version 8.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 01620b9cfb4a86c959c826edc22bf6626af9c684)
2022-03-06 03:22:20 +08:00
Daniel Golle
710f21fa4b itsdangerous: update to version 2.0.1
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
(cherry picked from commit 6ab3b605cf91387cb69075f2c39cfd9e91ce28d3)
2022-03-06 03:22:20 +08:00
Jeffery To
60bafa0774 python-twisted: Update to 21.7.0, refresh patches
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
(cherry picked from commit 4fa4cd832208e59ada0cb8cba9c99afe9467231a)
2022-03-06 03:22:20 +08:00
Alexandru Ardelean
36f5f6011e python-cffi: bump to version 1.14.6
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit e08b94b7538474812c18fc109f0372bbb2710d1f)
2022-03-06 03:22:20 +08:00
Alexandru Ardelean
316e07d651 python-simplejson: bump to version 3.17.3
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 3f2d7052743500e993a5f4a39cef0dc0eaac4d60)
2022-03-06 03:22:20 +08:00
Alexandru Ardelean
39bd7a44fe python3: do a simple ls on pip & setuptools if not selected for build
I seem to forget to check/select setuptools and pip (that come bundled with
Python).
This change will do a simple 'ls' on the 2 wheel files, so that the build
fails even if just building Python.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2022-03-06 03:22:20 +08:00
Alexandru Ardelean
97fbc62da0 python3: update to version 3.9.6
Refreshed patches.
Bumped pip to 21.1.3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
(cherry picked from commit 44e009364f5a115172f5825fbfd8c0b3730021a5)
2022-03-06 03:22:20 +08:00