Commit Graph

1464 Commits

Author SHA1 Message Date
Jeffery To a8bf6a8bd6 python-ipaddress: Update to 1.0.23
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 21:10:55 +08:00
Jeffery To 46c43b29f7 python-automat: Update to 0.8.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 21:10:35 +08:00
Jeffery To f2d744d31a python-attrs: Update to 19.3.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 21:10:04 +08:00
Alexandru Ardelean 48277ec915 python3: bump to version 3.8
This required a bit work to get working, compared to other versions. So,
some things have changed a bit more significantly.

Some highlights:
* there is no longer a pgen executable, seems this is now part of
  libpython; let's see what this means for us in the future
* blake2 hash (from OpenSSL) detection needs some fixing; will upstream
  added patch 002-fix-blake2-detection.patch
* removed all bpo patches; those should be fixed in upstream
* some needed to be manually re-applied as stuff changed:
  - 001-enable-zlib.patch  - file changed
  - 004-do-not-write-bytes-codes.patch  - file changed
  - 015-abort-on-failed-modules.patch - variable was renamed
    cross_compiling -> CROSS_COMPILING
* 017_lib2to3_fix_pyc_search.patch - the code changed, it does not seem to
     have the original problem with respect to file-extension, as there
     does not seem to be any special extension logic anymore there
* 006-remove-multi-arch-and-local-paths.patch - dropped patch; I can't
     remember the full-details of this issue; it was something with
     Debian/Ubuntu's multi-arch stuff; it was probably added maybe due to
     some overzealous (on my part) thingy caused by some weird reports,
     that I could never solve; let's have this patch dropped and see
* make package/python3/refresh to reduce fuzz for the rest

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-21 15:24:51 +03:00
Jeffery To 9d892e3cf8 python-cryptography: Update to 2.8
With this update, the package no longer depends on python-asn1crypto[1].

[1]: https://github.com/pyca/cryptography/blob/master/CHANGELOG.rst#28---2019-10-16

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 13:41:33 +02:00
Jeffery To 141ead6bd7 python-cffi: Update to 1.13.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-21 05:19:23 +08:00
Rosen Penev 758865fa16 Merge pull request #10242 from jefferyto/pypi-mk
python,python3: Add pypi makefile
2019-10-18 13:26:37 -07:00
Jeffery To add4c42191 python,python3: Add pypi makefile
This adds pypi.mk, which can be included in Python packages that
download their sources from PyPI, to auto-fill various PKG_* variables
based on the value of PYPI_NAME.

This makefile should be included after $(TOPDIR)/rules.mk but before
$(INCLUDE_DIR)/package.mk (and $(INCLUDE_DIR)/host-build.mk).

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-19 00:16:26 +08:00
Jeffery To 5848f67e41 python-pyasn1-modules: Update to 0.2.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-16 02:12:51 +08:00
Rosen Penev 2dc860e24b Merge pull request #10181 from commodo/python-simple-json-drop-tests
python[3]-simplejson: drop tests from simplejson package
2019-10-14 01:03:18 -07:00
Josef Schlehofer fd9ebe3d70 python-sentry-sdk: Update to version 0.12.3
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-12 23:55:36 +02:00
Rosen Penev 96f44c5c33 Merge pull request #10182 from jefferyto/python-attrs-19.2.0
python-attrs: Update to 19.2.0
2019-10-09 12:50:07 -07:00
Rosen Penev 25d0c17dfb Merge pull request #10187 from commodo/python-asn1crypto-update
python-asn1crypto: bump to version 1.0.1
2019-10-09 12:43:20 -07:00
Alexandru Ardelean 03f625047d python-asn1crypto: bump to version 1.0.1
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-09 13:23:28 +03:00
Alexandru Ardelean 929df778cc python-pillow: bump to version 6.2.0
Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-09 11:53:46 +03:00
Jeffery To d62dc51634 python-attrs: Update to 19.2.0
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-09 05:18:44 +08:00
Alexandru Ardelean 2f19a94d65 python[3]-simplejson: drop tests from simplejson package
These tests take-up a bit of space. And they aren't typically needed.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-10-08 16:53:36 +03:00
Jeffery To a3be5cfa92 python,python3: Fix CVE-2019-16056, CVE-2019-16935
These patches address issues:
CVE-2019-16056: email.utils.parseaddr mistakenly parse an email
CVE-2019-16935: A reflected XSS in python/Lib/DocXMLRPCServer.py (for
Python 2.7)

CVE-2019-16935 was fixed for python3 in #10109

Links to Python issues:
https://bugs.python.org/issue34155
https://bugs.python.org/issue38243

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 23:54:46 +08:00
Jeffery To 47d6d8e514 python-simplejson: Fix python[3]-decimal dependency
simplejson depends on the decimal module[1][2]. This adds
python[3]-decimal to the package's DEPENDS.

[1]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/__init__.py#L110
[2]: https://github.com/simplejson/simplejson/blob/v3.16.0/simplejson/encoder.py#L7

Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-10-04 22:40:25 +08:00
Rosen Penev 15dfcc3611 Merge pull request #10121 from BKPepe/werkzeug
Werkzeug: Update to version 0.16.0
2019-10-02 12:37:06 -07:00
Rosen Penev 0d3d4ca894 Merge pull request #10122 from BKPepe/flask
Flask: Update to version 1.1.1
2019-10-02 12:36:11 -07:00
Josef Schlehofer 1ccf2377fc python3-maxminddb: Update to version 1.5.1
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-01 00:38:47 +02:00
Josef Schlehofer 19e12971b8 Flask: Update to version 1.1.1
- Change TITLE and URL to better one
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-01 00:21:42 +02:00
Josef Schlehofer 267796c316 Werkzeug: Update to version 0.16.0
- Remove PKG_BUILD_DEPENDS as it is no longer necessary.
- The Python3 is already included in DEPENDS.
- Remove PKG_BUILD_DIR and PKG_UNPACK was for dual Python version.
- Change TITLE and description
- Add source package

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-10-01 00:15:35 +02:00
Josef Schlehofer 144c8da84a python-pyrsistent: Update to version 0.15.4
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-30 21:22:35 +02:00
Josef Schlehofer 80def9e653 python3: backport three security patches
Fixes: CVE-2019-16935

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-29 23:18:29 +02:00
Rosen Penev 014ebb2f16 Merge pull request #10083 from BKPepe/sentrysdk
python-sentry-sdk: Update to version 0.12.2
2019-09-27 12:09:09 -07:00
Richard Yu ad9fe1b60b python-cryptodome: update to 3.9.0
Signed-off-by: Richard Yu <yurichard3839@gmail.com>
2019-09-27 17:05:44 +08:00
Josef Schlehofer ff106ae376 python-sentry-sdk: Update to version 0.12.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 18:21:43 +02:00
Josef Schlehofer da51877e7f python-urllib3: Update to version 1.25.6
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-26 11:45:40 +02:00
Jan Pavlinec ceadbcbb64 treewide: add PKG_CPE_ID for cvescanner
Signed-off-by: Jan Pavlinec <jan.pavlinec@nic.cz>
2019-09-24 13:51:22 +02:00
Alexandru Ardelean 5f9ea76e7a gunicorn: convert to Python packaging format + add Python3 variant
And splitting the gunicorn[3] binary/executable away from the
python[3]-gunicorn libraries. This was inspired from Debian packaging.

The gunicorn[3] binaries require the new `python[3]-pkg-resources`
libraries to run, which add ~1.1 MB on the [ram]disk when uncompressed.

For the Python2 variant, the `_gaiohttp.py` is dropped as it fails to
compile, so it would likely be unusable anyway:
```
  File "/usr/lib/python2.7/site-packages/gunicorn/workers/_gaiohttp.py", line 84
    yield from self.wsgi.close()
             ^
  SyntaxError: invalid syntax

```

People around the web recommend this as well:
 https://stackoverflow.com/questions/25611140/syntax-error-installing-gunicorn
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803170
 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=803202

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 14:11:08 +03:00
Alexandru Ardelean 721642908c python,python3: add Py[3]Shebang functions & move outside of script
Some packages just install some Python binaries, that may need their
shebang fixed.
This change adds some utilities to help with that and try to centralize the
sed rules a bit.

It also removes the logic from the `python-package-install.sh` into the
`python-package[3].mk` files. This does 2 things:
1. It minimizes the need for the shell script to know the Python
   version 2/3
2. Makes the logic re-usable in packages; especially if the install rules
   differ a bit

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 14:10:00 +03:00
Alexandru Ardelean ed0e77f3c3 python,python3: split python[3]-pkg-resources from setuptools
This package is required by other packages to run some binaries via
`load_entry_point`.

So, this splits this package away from setuptools.
setuptools is pretty big, akd pkg-resources is also big, but not as big.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 13:42:40 +03:00
Alexandru Ardelean b104c56e2b python: change condition check for legacy opt for Python3
As I remember this worked.
But since `set -e` is set, I am a bit paranoid about it. In the sense that
it may fail if `ver` != 3.

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-20 13:42:21 +03:00
Eneas U de Queiroz acf7c540ca python-certifi: bump to 2019.9.11
Signed-off-by: Eneas U de Queiroz <cotequeiroz@gmail.com>
2019-09-19 14:30:35 -03:00
Rosen Penev 64a02079da django: Update to 1.11.24
Fixes a whole bunchs of CVEs:

CVE-2019-3498
CVE-2019-6975
CVE-2019-12308
CVE-2019-12781
CVE-2019-14232
CVE-2019-14233
CVE-2019-14234
CVE-2019-14235

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2019-09-18 14:40:47 -07:00
Karel Kočí 7bb6d72a47 python-schema: update to version 0.7.1
Signed-off-by: Karel Kočí <karel.koci@nic.cz>
2019-09-16 14:00:43 +02:00
Rosen Penev 61ccd29d37 Merge pull request #9705 from commodo/python-mysqlclient
python-mysql[client]: rename to python-mysqlclient & bump to version 1.4.4
2019-09-12 08:53:27 -07:00
Sven Eckelmann bbb1ea7345 treewide: Change .*GPL.*+ licenses to SPDX compatible identifier
The CONTRIBUTING.md requests an (or multiple) SPDX identifier for GPL
licenses. But a lot of packages did use a different, non-SPDX style with a
"+" at the end instead of "-or-later".

Signed-off-by: Sven Eckelmann <sven@narfation.org>
2019-09-10 07:45:15 +02:00
Rosen Penev 6637feefce Merge pull request #9885 from BKPepe/voluptuous
Voluptuous & Voluptuous Serialize: update to their latest versions
2019-09-03 12:24:24 -07:00
Rosen Penev c64cc596e5 Merge pull request #9887 from BKPepe/sqlalchemy
python-sqlalchemy: Update to version 1.3.7
2019-09-03 11:57:13 -07:00
Rosen Penev 077ff50192 Merge pull request #9895 from BKPepe/sentry
python-sentry-sdk: Update to version 0.11.2
2019-09-03 11:56:59 -07:00
Daniel Engberg d6e7293cb6 Merge pull request #9888 from BKPepe/slugify
python-slugify: Update to version 3.0.3
2019-09-03 08:44:30 +02:00
Jeffery To 34aa2843b7 python-pyasn1: Update to 0.4.7
Signed-off-by: Jeffery To <jeffery.to@gmail.com>
2019-09-03 02:50:10 +08:00
Alexandru Ardelean 817cdbd7c9 python-mysql: rename to python-mysqlclient & bump to version 1.4.4
The package on PyPi is named `mysqlclient`.
This should have been named `python-mysqlclient` from the start.
There is a `mysql` package on PyPi already but that's a different
code/package.

Doing this should avoid any future confusion.
There is no good time to do this rename; at least 19.07 has been branched
already and this can go into the next release [in a year or so].

Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com>
2019-09-02 15:06:28 +03:00
Josef Schlehofer 69a65de35b python-sentry-sdk: Update to version 0.11.2
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 18:18:32 +02:00
Josef Schlehofer 2ee4b09760 python-sqlalchemy: Update to version 1.3.7
Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 11:00:40 +02:00
Josef Schlehofer d3c2ff35b5 python-slugify: Update to version 3.0.3
Change indentation in dependencies and as well in description

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 10:56:28 +02:00
Josef Schlehofer 3cfbdbf25b python-yaml: Update to version 5.1.2
PKG_NAME should match the name of the folder

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2019-09-01 09:56:04 +02:00