Commit Graph

3337 Commits

Author SHA1 Message Date
Trevor Gamblin
65ebf1fe85 PATCH] python3-lxml: upgrade 4.6.3 -> 4.6.5
Release notes (https://github.com/lxml/lxml/blob/master/CHANGES.txt):

4.6.5 (2021-12-12)
==================

Bugs fixed
----------

* A vulnerability (GHSL-2021-1038) in the HTML cleaner allowed sneaking script
  content through SVG images (CVE-2021-43818).

* A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed sneaking script
  content through CSS imports and other crafted constructs (CVE-2021-43818).

4.6.4 (2021-11-01)
==================

Features added
--------------

* GH#317: A new property ``system_url`` was added to DTD entities.
  Patch by Thirdegree.

* GH#314: The ``STATIC_*`` variables in ``setup.py`` can now be passed via env vars.
  Patch by Isaac Jurado.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-16 09:52:00 -07:00
Trevor Gamblin
d6a8a24a1a python3-django: upgrade 3.2.5 -> 3.2.12
The delta between 3.2.5 and 3.2.12 contain numerous CVE and other
bugfixes. git log --oneline 3.2.5..3.2.12 shows:

fdf209eab8 (tag: 3.2.12) [3.2.x] Bumped version for 3.2.12 release.
d16133568e [3.2.x] Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads.
1a1e8278c4 [3.2.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag.
a7e89fe776 [3.2.x] Added stub release notes for 3.2.12 and 2.2.27.
027f4c4ceb [3.2.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
0a9a46a1d7 [3.2.x] Post-release version bump.
6e499a28ac (tag: 3.2.11) [3.2.x] Bumped version for 3.2.11 release.
8d2f7cff76 [3.2.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.
c7fe895bca [3.2.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
a8b32fe13b [3.2.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator.
b0aa0709a5 [3.2.x] Added stub release notes for 3.2.11, and 2.2.26 releases.
ae242235db [3.2.x] Refs #33365, Refs #30530 -- Doc'd re_path() behavior change in Django 2.2.25, 3.1.14, and 3.2.10.
ecd2793897 [3.2.x] Added CVE-2021-44420 to security archive.
1cea03ab00 [3.2.x] Post-release version bump.
0153a63a67 (tag: 3.2.10) [3.2.x] Bumped version for 3.2.10 release.
333c656030 [3.2.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.
6014b812e2 [3.2.x] Refs #33333 -- Fixed PickleabilityTestCase.test_annotation_with_callable_default() crash on Oracle.
cb724ef6c0 [3.2.x] Fixed #33333 -- Fixed setUpTestData() crash with models.BinaryField on PostgreSQL.
0cf2d48ba8 [3.2.x] Added requirements.txt to files ignored by Sphinx builds.
487a2da02e [3.2.x] Added stub release notes and release date for 3.2.10, 3.1.14 and 2.2.25.
742d6bc8db [3.2.x] Corrected signatures of QuerySet's methods.
99532fdadf [3.2.x] Corrected isort example in coding style docs.
31539a63f2 [3.2.x] Corrected "pip install" call in coding style docs.
76a0a8a917 [3.2.x] Configured Read The Docs to build all formats.
04e66e245d [3.2.x] Fixed crash building HTML docs since Sphinx 4.3.
dfa1145a22 [3.2.x] Corrected multiply defined labels in docs.
9d171643d4 [3.2.x] Refs #33247 -- Corrected configuration for Read The Docs.
327dac6e7c [3.2.x] Fixed #33247 -- Added configuration for Read The Docs.
bc691d555e [3.2.x] Corrected module reference in contributing tutorial.
3357ad2de2 [3.2.x] Fixed typo in docs/topics/logging.txt.
34e5e61479 [3.2.x] Added stub release notes for Django 3.2.10.
21a56d596a [3.2.x] Post-release version bump.
1b3c0d3b54 (tag: 3.2.9) [3.2.x] Bumped version for 3.2.9 release.
e299cc2d2c [3.2.x] Added release date for 3.2.9.
947d2707c6 [3.2.x] Added Google Cloud Spanner to list of third-party DB backends.
128179c0f8 [3.2.x] Refs #33182 -- Adjusted custom admin theming example to use correct template block.
f5802a21c4 [3.2.x] Fixed #33194 -- Fixed migrations when altering a field with functional indexes on SQLite.
fdc1c6435c [3.2.x] Fixed #33198 -- Corrected BinaryField.max_length docs.
dbcd81841f [3.2.x] Refs #32074 -- Removed usage of deprecated asyncore and smtpd modules.
137a9899d7 [3.2.x] Refs #27131 -- Removed SMTPBackendTests.test_server_login().
1128291650 [3.2.x] Added 'formatter' to spelling wordlist.
82fee0446d [3.2.x] Refs #32074 -- Doc'd Python 3.10 compatibility in Django 3.2.x.
1aed4663c3 [3.2.x] Refs #32074 -- Added Python 3.10 to classifiers and tox.ini.
53fad80ffe [3.2.x] Refs #32074 -- Used asyncio.get_running_loop() instead of get_event_loop() on Python 3.7+.
f6726fdc3e [3.2.x] Refs #32074 -- Fixed find_module()/find_loader() warnings on Python 3.10+.
d0dc446444 [3.2.x] Refs #32074 -- Removed usage of deprecated Thread.setDaemon().
8bebb1c04a [3.2.x] Refs #32074 -- Removed usage of Python's deprecated distutils.version package.
faeae84dad [3.2.x] Skipped test_archive tests when bz2/lzma module is not installed.
329311ecbd [3.2.x] Added stub release notes for Django 3.2.9.
85e4af6a22 [3.2.x] Post-release version bump.
4540e976d4 (tag: 3.2.8) [3.2.x] Bumped version for 3.2.8 release.
65367b0500 [3.2.x] Added release date for 3.2.7.
51e4dbfeb2 [3.2.x] Refs #27694 -- Doc'd lookups that can be chained with HStoreField key transforms.
031ffc5c84 [3.2.x] Corrected field and model check messages in docs.
7607fe922f [3.2.x] Removed obsolete GEOS 3.5 requirement note.
6760f4fa25 [3.2.x] Fixed #33083 -- Fixed selecting all items in the admin changelist when actions are both top and bottom.
e235c7815a [3.2.x] Fixed broken links and redirects in docs.
51e76c922f [3.2.x] Used :rfc: role in docs/topics/conditional-view-processing.txt.
d4a587a5fa [3.2.x] Fixed #33077 -- Fixed links to related models for admin's readonly fields in custom admin site.
561a1c0905 [3.2.x] Fixed typo in docs/intro/reusable-apps.txt.
454ee4d3b8 [3.2.x] Corrected outputs and made cosmetic edits in GeoDjango tutorial.
b51e0a37cf [3.2.x] Doc'd Jinja2 form renderer.
a7be74d017 [3.2.x] Clarified type of Window()'s partition_by and order_by arguments.
54684a3ec0 [3.2.x] Refs #31055 -- Doc'd 'databases' argument of check functions.
1f86ff31b1 [3.2.x] Fixed typo in docs/topics/i18n/formatting.txt.
b61f44c339 [3.2.x] Fixed #33082 -- Fixed CommandTests.test_subparser_invalid_option on Python 3.9.7+.
707239eabf [3.2.x] Added stub release notes for Django 3.2.8.
d5710f405a [3.2.x] Post-release version bump.
45a0c54b67 (tag: 3.2.7) [3.2.x] Bumped version for 3.2.7 release.
4b80a40272 [3.2.x] Added release date for 3.2.7.
4e55806720 [3.2.x] Refs #25264 -- Doc's that not all default options are supported by every management command.
fe3a854e1d [3.2.x] Fixed #32992 -- Restored offset extraction for fixed offset timezones.
382374a360 [3.2.x] Corrected BaseDatabaseSchemaEditor.execute() signature in docs.
11b2cbb65f [3.2.x] Made sentence about Model consistent in docs.
69009f4952 [3.2.x] Fixed #33046 -- Added note about using length of cached result by QuerySet.count().
d95a0144e5 [3.2.x] Used backend vendors in custom model fields docs.
358e65a5cd [3.2.x] Fixed #33030 -- Fixed broken links to GDAL docs.
d29a9ed504 [3.2.x] The geodjango mailing list moved to the Django Forum.
eb26b8a0fe [3.2.x] The django-i18n mailing list moved to the Django Forum.
6bb74f3de8 [3.2.x] Fixed some broken links and redirects in docs.
f18da11b8a [3.2.x] Updated BaseDatabaseFeatures link in testing tools docs.
2c46e55314 [3.2.x] Clarified URL patterns in tutorial 3.
87e7399760 [3.2.x] Added stub release notes for Django 3.2.7.
e1cad66dca [3.2.x] Post-release version bump.
eb0f298e76 (tag: 3.2.6) [3.2.x] Bumped version for 3.2.6 release.
70840232f9 [3.2.x] Confirmed release date for Django 3.2.6.
d9e05ea17a [3.2.x] Refs #31676 -- Updated technical board description in organization docs.
99d9a3ef7c [3.2.x] Refs #31676 -- Added Mergers and Releasers to organization docs.
ed29959812 [3.2.x] Refs #31676 -- Removed Core team from organization docs.
55daaa0c79 [3.2.x] Made minor edits to QuerySet.update_or_create() docs.
5fa70c91b4 [3.2.x] Fixed typo in docs/ref/contrib/admin/index.txt.
aace6c531d [3.2.x] Fixed #32933 -- Documented BoundField.initial as preferred over Form.get_initial_for_field().
bdd4cbe84a [3.2.x] Fixed #32957 -- Improved visibility of arguments sections in Model.save() docs.
b2f7b53fac [3.2.x] Fixed #32947 -- Fixed hash() crash on reverse M2M relation when through_fields is a list.
de5a044cf4 [3.2.x] Fixed #32950 -- Removed myproject from imports in admin docs where appropriate.
f4cf86f870 [3.2.x] Refs #32949 -- Adjusted release note wording.
1346381760 [3.2.x] Fixed #32949 -- Restored invalid number handling in DecimalField.validate().
05e997c404 [3.2.x] Fixed typo in docs/ref/databases.txt.
9a65e62c93 [3.2.x] Fixed typo in docs/releases/3.1.13.txt.
0ee092c8dd [3.2.x] Fixed typo in docs/topics/signals.txt.
b7d25d025e [3.2.x] Fixed typo in docs/internals/deprecation.txt.
6931963886 [3.2.x] Fixed typo in docs/internals/contributing/committing-code.txt.
f36edbc378 [3.2.x] Refs #31676 -- Removed Django Core-Mentorship mailing list references in docs.
527482c513 [3.2.x] Fixed typo in docs/ref/contrib/gis/tutorial.txt.
1d53d2502d [3.2.x] Documented in_bulk behavior with nonexistent id_list items.
9fadb97583 [3.2.x] Added CVE-2021-35042 to security archive.
92efd69107 [3.2.x] Added stub release notes for Django 3.2.6.
3ab942f10a [3.2.x] Post-release version bump.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-02 10:37:03 -07:00
Trevor Gamblin
58d2cb969c python3-django: upgrade 2.2.24 -> 2.2.27
The delta between 2.2.24 and 2.2.27 contain numerous CVE and other
bugfixes. git log --oneline 2.2.24..2.2.27 shows:

e541f2d05b (tag: 2.2.27) [2.2.x] Bumped version for 2.2.27 release.
c477b76180 [2.2.x] Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads.
c27a7eb9f4 [2.2.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag.
4cafd3aacb [2.2.x] Added stub release notes 2.2.27.
77d0fe5868 [2.2.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive.
e085d46e4b [2.2.x] Post-release version bump.
44e7cca623 (tag: 2.2.26) 2.2.x] Bumped version for 2.2.26 release.
4cb35b384c [2.2.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem.
c9f648ccfa [2.2.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter.
2135637fdd [2.2.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator.
03b733d8a8 [2.2.x] Added stub release notes for 2.2.26 release.
b87820668e [2.2.x] Refs #33365, Refs #30530 -- Doc'd re_path() behavior change in Django 2.2.25, 3.1.14, and 3.2.10.
573e70ea48 [2.2.x] Added CVE-2021-44420 to security archive.
8439938602 [2.2.x] Post-release version bump.
79d8dcefb2 (tag: 2.2.25) [2.2.x] Bumped version for 2.2.25 release.
7cf7d74e8a [2.2.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.
0007a5f9fa [2.2.x] Added requirements.txt to files ignored by Sphinx builds.
fac0fdd95d [2.2.x] Added stub release notes for 2.2.25.
4bc10b7955 [2.2.x] Fixed crash building HTML docs since Sphinx 4.3.
5289fcfffe [2.2.x] Configured Read The Docs to build all formats.
9a4a2b2089 [2.2.x] Refs #33247 -- Corrected configuration for Read The Docs.
029c830b71 [2.2.x] Fixed #33247 -- Added configuration for Read The Docs.
12141e3116 [2.2.x] Refs #32856 -- Clarified that psycopg2 < 2.9 is required.
cf63dd5c1b [2.2.x] Added 'formatter' to spelling wordlist.
05bc1c81aa [2.2.x] Fixed #33082 -- Fixed CommandTests.test_subparser_invalid_option on Python 3.9.7+.
a9c0aa11e7 [2.2.x] Refs #31676 -- Updated technical board description in organization docs.
66008c2af0 [2.2.x] Refs #31676 -- Added Mergers and Releasers to organization docs.
d4d1c2b3db [2.2.x] Refs #31676 -- Removed Core team from organization docs.
8f59f72a20 [2.2.x] Refs #31676 -- Removed Django Core-Mentorship mailing list references in docs.
837ffcfa68 [2.2.x] Refs #32856 -- Doc'd that psycopg2 < 2.9 is required.
dc43667eab [2.2.x] Fixed docs header underlines in security archive.
3e7bb564be [2.2.x] Added CVE-2021-33203 and CVE-2021-33571 to security archive.
48bde7cab4 [2.2.x] Post-release version bump.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-04-02 10:37:03 -07:00
Trevor Gamblin
23598caeaf python3-pillow: fix CVE-2022-22815, 22816, 22817
Backport three patches from 9.0.0 upstream to fix CVES.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2022-01-30 15:13:01 -08:00
Armin Kuster
7fbb276718 recipes: Update SRC_URI branch and protocols
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-11-13 07:45:48 -08:00
Trevor Gamblin
82cc965742 python3-pyinotify: Add fcntl, logging to RDEPENDS
"import pyinotify" throws an error for these modules if they are not
included.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-19 08:07:13 -07:00
Trevor Gamblin
406a405af2 python3-pillow: Fix CVE-2021-23437
Backport an upstream fix since an uprev would include
potentially-breaking functionality changes.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-08 12:40:15 -07:00
Trevor Gamblin
965b85b678 python3-sqlparse: Fix CVE-2021-32839
Backport a patch from version 0.4.2 upstream since the uprev would add
functionality changes.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-10-08 12:40:08 -07:00
Leon Anavi
5a4b2ab29d python3-urllib3: Upgrade 1.26.4 -> 1.26.5
Upgrade to release 1.26.5:

- Fixed deprecation warnings emitted in Python 3.10.
- Updated vendored six library to 1.16.0.
- Improved performance of URL parser when splitting the authority
  component.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>

Fixes CVE 2021-33503.

(cherry picked from commit bb39c29a46)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-30 16:20:20 -07:00
Joe Slater
88813d34dd python3-pillow: fix CVE-2021-34552
Pull fix from version 8.3.1 back to 8.2.0.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
2021-07-27 22:36:24 -07:00
Trevor Gamblin
98e00710b7 python3-django: upgrade 3.2.4 -> 3.2.5 (fix CVE-2021-35042)
3.2.5 fixes CVE-2021-35042: Potential SQL injection via unsanitized
QuerySet.order_by() input.

Additional release notes:

- Fixed a regression in Django 3.2 that caused a crash of
  QuerySet.values_list(…, named=True) after prefetch_related() (#32812).
- Fixed a bug in Django 3.2 that caused a migration crash on MySQL 8.0.13+
  when altering BinaryField, JSONField, or TextField to non-nullable
  (#32503).
- Fixed a regression in Django 3.2 that caused a migration crash on MySQL
  8.0.13+ when adding nullable BinaryField, JSONField, or TextField with a
  default value (#32832).
- Fixed a bug in Django 3.2 where a system check would crash on a model
  with an invalid app_label (#32863).

There is no corresponding uprev for the 2.x LTS branch since it is
already at the latest version (2.2.24).

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>

(cherry picked from commit fe50bd1005)

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-07-17 06:52:51 -07:00
Trevor Gamblin
c51e79dd85 python3-django: upgrade 2.2.23 -> 2.2.24
Version 2.2.24 contains a fix for CVE-2021-33571 and is the latest LTS
release.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
(cherry picked from commit fa2d3338fb)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27 07:50:20 -07:00
Leon Anavi
f0812a84c9 python3-django: Upgrade 3.2.3 -> 3.2.4
Upgrade to release 3.2.4:

- CVE-2021-33203: Potential directory traversal via admindocs
- CVE-2021-33571: Possible indeterminate SSRF, RFI, and LFI attacks
  since validators accepted leading zeros in IPv4 addresses
- Fixed a bug in Django 3.2 where a final catch-all view in the
  admin didn't respect the server-provided value of SCRIPT_NAME
  when redirecting unauthenticated users to the login page.
- Fixed a bug in Django 3.2 where a system check would crash on an
  abstract model
- Prevented unnecessary initialization of unused caches following
  a regression in Django 3.2
- Fixed a crash in Django 3.2 that could occur when running
  mod_wsgi with the recommended settings while the Windows
  colorama library was installed
- Fixed a bug in Django 3.2 that would trigger the auto-reloader
  for template changes when directory paths were specified with
  strings
- Fixed a regression in Django 3.2 that caused a crash of
  auto-reloader with AttributeError, e.g. inside a Conda
  environment
- Fixed a regression in Django 3.2 that caused a loss of precision
  for operations with DecimalField on MySQL

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 624e3e1898)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27 07:50:07 -07:00
Trevor Gamblin
adf023f192 python3-django: upgrade 3.2.2 -> 3.2.3
3.2.3 is a bugfix release:

- Prepared for mysqlclient > 2.0.3 support (#32732).
- Fixed a regression in Django 3.2 that caused the incorrect
  filtering of querysets combined with the | operator (#32717).
- Fixed a regression in Django 3.2.1 where saving FileField
  would raise a SuspiciousFileOperation even when a custom
  upload_to returns a valid file path (#32718).

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit bdf1be7c55)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27 07:50:03 -07:00
Trevor Gamblin
b2716ef06a python3-django: upgrade 2.2.22 -> 2.2.23
2.2.23 is a bugfix release:

- Fixed a regression in Django 2.2.21 where saving FileField would raise a
  SuspiciousFileOperation even when a custom upload_to returns a valid
  file path (#32718).

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit f07a8c1376)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-06-27 07:49:47 -07:00
Leon Anavi
9e5c4181ec python3-pymongo: Upgrade 3.11.3 -> 3.11.4
Upgrade to release 3.11.4:

- Bug fix where a MongoClient would mistakenly attempt to create
  minPoolSize connections to arbiter nodes
- Bug fix that prevented PyMongo from retrying writes after a
  writeConcernError on MongoDB 4.4+

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit dcb9ecc1e5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22 15:22:21 -07:00
Leon Anavi
cc118b56ad python3-rfc3339-validator: Upgrade 0.1.3 -> 0.1.4
Upgrade to release 0.1.4:

- Fix test failure on darwin

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit b5fb8390df)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22 15:21:34 -07:00
Trevor Gamblin
b318670297 python3-django: upgrade 3.2 -> 3.2.2
Version 3.2.2 includes a fix for CVE-2021-32052.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit d97e1b7cfd)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22 15:03:13 -07:00
Trevor Gamblin
f3758cb444 python3-django: upgrade 2.2.20 -> 2.2.22
Version 2.2.22 includes a fix for CVE-2021-32052.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit b26099fc15)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22 15:01:52 -07:00
Leon Anavi
d555451d10 python3-robotframework: Upgrade 4.0.1 -> 4.0.2
Upgrade to release 4.0.2:

- Using Union containing generics as type hint causes an error
- Libdoc does not anymore work with resource files in PYTHONPATH
- Rebot removes sourcename attribute from <kw> in output.xml
- Run Keyword If Test Failed does not work correctly if it is not
  first keyword in teardown and test is skipped
- Argument conversion problems when type hint is ABC

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 73d63dd3fe)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22 14:54:36 -07:00
Leon Anavi
3863aba2ac python3-cerberus: Upgrade 1.3.3 -> 1.3.4
Upgrade to release 1.3.4:

- Reverts the unsatisfying fix for KeyError during import when
  running with python optimisation level of 2
- instead a RuntimeError is thrown when Python is running with
  optimization level 2

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 87e6a45374)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-22 14:49:30 -07:00
Khem Raj
e1cd1eb153 python3-jinja2_2.%.bbappend: Delete
These changes are moved to OE-Core

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit d131aed9e1)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-05-17 07:18:41 -07:00
Leon Anavi
ba22785a42 python3-asttokens: Upgrade 2.0.4 -> 2.0.5
Upgrade to release 2.0.5:

- setup.cfg: remove wheel dependency
- Handle starred expressions in tests
- Make 3.9 support official
- pypy2 instead of pypy2.7
- pypy3 instead of pypy3.5

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 3bef475e76)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-25 14:56:47 -07:00
Leon Anavi
2eb29a3805 python3-pysonos: Upgrade 0.0.42 -> 0.0.43
Upgrade to release 0.0.43:

- Downgrade asyncio log severity

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 2d9aca131f)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-25 14:56:47 -07:00
Mingli Yu
71b546ed85 python3-cryptography: Upgrade to 3.3.2
Fix a security issue CVE-2020-36242 where certain sequences of
``update()`` calls when symmetrically encrypting very large
payloads (>2GB) could result in an integer overflow, leading to
buffer overflows.

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-23 19:09:56 -07:00
Chen Qi
e705d4932a python3-django: upgrade to 2.2.20
2.2.x is LTS, so upgrade to latest release 2.2.20.
This upgrade fixes several CVEs such as CVE-2021-3281.

Also, CVE-2021-28658.patch is dropped as it's already in 2.2.20.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-23 19:09:46 -07:00
Stefan Ghinea
aef354a0c2 python3-django: fix CVE-2021-28658
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8,
MultiPartParser allowed directory traversal via uploaded files with
suitably crafted file names. Built-in upload handlers were not affected
by this vulnerability.

References:
https://nvd.nist.gov/vuln/detail/CVE-2021-28658

Upstream patches:
4036d62bda

Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-23 19:09:37 -07:00
Leon Anavi
e814109e1c python3-croniter: Upgrade 1.0.11 -> 1.0.12
Upgrade to release 1.0.12:

- Add support for hashed/random/keyword expressions
- Review support support for hashed/random/keyword expression and
  add expanders reactor

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 4c0e6d3365)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
9320bdf095 python3-google-api-python-client: Upgrade 2.1.0 -> 2.2.0
Upgrade to release 2.2.0:

- Adds support for errors.py to also use 'errors' for error_details

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 88892586c9)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
7050ad06ac python3-colorlog: Upgrade 4.8.0 -> 5.0.1
Upgrade to release 5.0.1:

- Fix colorlog.basicConfig does not accept '{' style
- Fix linter errors

License-Update: Update year

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 3793fa1ca6)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
eaada9a695 python3-decorator: Upgrade 5.0.6 -> 5.0.7
Upgrade to release 5.0.7:

- The decorator module was not passing correctly the defaults
  inside the *args tuple
- Fixed some mispellings in the documentation
- Integrated codespell in the CI

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit d07aa9a0a7)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
c655523933 python3-humanize: Upgrade 3.4.0 -> 3.4.1
Upgrade to release 3.4.1:

- Add Catalan binary translation

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit eb79ca6f11)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
dc60b1e715 python3-pandas: Upgrade 1.2.3 -> 1.2.4
Upgrade to release 1.2.4:

- Fixed regression in DataFrame.sum() when min_count greater than
  the DataFrame shape was passed resulted in a ValueError
- Fixed regression in DataFrame.to_json() raising AttributeError
  when run on PyPy
- Fixed regression in (in)equality comparison of pd.NaT with a
  non-datetimelike numpy array returning a scalar instead of an
  array
- Fixed regression in DataFrame.where() not returning a copy in
  the case of an all True condition
- Fixed regression in DataFrame.replace() raising IndexError when
  regex was a multi-key dictionary
- Fixed regression in repr of floats in an object column not
  respecting float_format when printed in the console or outputted
  through DataFrame.to_string(), DataFrame.to_html(), and
  DataFrame.to_latex()
- Fixed regression in NumPy ufuncs such as np.add not passing
  through all arguments for DataFrame

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 443e435ce4)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
e922c012cf python3-sympy: Upgrade 1.7.1 -> 1.8
Upgrade to release 1.8:

assumptions:

- Q.infinite now correctly evaluates to True for oo, -oo, and zoo
- Assumption predicates now correctly evaluates to None for S.NaN
- Relational objects do not need to be wrapped by Q.is_true to be
  asked or refined anymore
- Q.is_true wrapping over AppliedPredicate now just return the
  argument
- refine arg(x) when x is real and nonzero
- assumptions/relation module is introduced. This module
  implements binary relation as predicate
- AskHandler(), register_handler() and remove_handler() are
  deprecated. Handler now must be multipledispatch instance
- Predicate now uses a single handler which is multipledispatch
  instance
- Predicate can now take multiple arguments
- Predicate("...") now returns UndefinedPredicate instance. To
  define a predicate, you must make a subclass of Predicate

calculus:

- Using maximum with a piecewise expression over a domain no
  longer fails due to a bug fix in Piecewise.as_expr_set_pairs

codegen:

- allowing for multi-dimensional arrays as arguments/locals in c
  code generation
- create_expand_pow_optimization is now customizable with respect
  to requirement on base
- Support flattening of elementwise additions of array expressions
- Fixes to array-expressions in order to properly work with
  ZeroArray and ZeroMatrix
- Fixing matrix expression recognition from array-expressions
- Minor fixes to the way the AST of array expressions is built
- Add normalization of CodegenArrayDiagonal when it's nested with
  CodegenArrayPermuteDims and CodegenArrayContraction
- Increased support for the normalization of array expressions and
  permutations of indices
- parse_matrix_expression( ) is now able to parse traces of
  matrices

combinatorics:

- Added a section to the permutation docs about containment in
  permutation groups

geometry:

- Fix AssertError for vertical tangent
- Geometric entities with symbolic coordinates will not be printed
  in SVG

simplify:

- Fix simplify calls sympify without rational parameter
- TRmorrie now takes powers of cos terms into account

tensor:

- Introduced objects ArraySymbol and ArrayElement for array
  expressions equivalent to MatrixSymbol and MatrixElement in the
  matrix expression module
- Add class ZeroArray for array expressions of zero-valued
  elements
- Make Array differentiation(derive_by_array) work with non sympy
  expressions
- Added tensordiagonal( ) function to perform diagonalization of
  array expressions
- Adding an array with any other type now consistently gives
  NotImplemented

utilities:

- Added official support for using CuPy to GPU accelerate lambdify
  functions
- Added Replacer class to simplify the creation of replacement
  expressions with MatchPy
- Added tests for optional parameter in MatchPy patterns
- Added string printers for MatchPy-compatible wildcards in
  sympy.utilities.matchpy_connector
- minlex no longer accepts is_set or small arguments
- minlex and least_rotation now accept key= arguments similar to
  sorted

vector:

- Fixed a bug with integral over ImplicitRegion objects

other:

- Expanding documentation to include all class members with
  docstrings

License-Update: Update year

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 71acc03cbd)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
c46741c17a python3-pyroute2: Upgrade 0.5.17 -> 0.5.18
Upgrade to release 0.5.18:

- netlink: support zero length lladdr

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 2df3e3aa47)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
3198de3b4b python3-xmlschema: Upgrade 1.6.0 -> 1.6.1
Upgrade to release 1.6.1:

- Add multi-source initialization and add_schema() to schema class
- Add bytes strings to accepted XML sources

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 98cc478e5e)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
12d0ac7b6c python3-backports-functools-lru-cache: Upgrade 1.6.3 -> 1.6.4
Upgrade to release 1.6.4:

- For test dependencies, when indicating Python 3, use >=3 instead
  of >3

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 2627bb1a24)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
d06828fdd8 python3-typed-ast: Upgrade 1.4.2 -> 1.4.3
Upgrade to release 1.4.3:

- Fix compilation on python 3.10
- Add Python 3.10 classifier

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 8dce3fc546)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
f220c5a639 python3-sqlalchemy: Upgrade 1.4.6 -> 1.4.7
Upgrade to release 1.4.7:

orm:

- Fixed regression where the subqueryload() loader strategy would
  fail to correctly accommodate sub-options, such as a defer()
  option on a column, if the “path” of the subqueryload were more
  than one level deep.
- Fixed regression where the merge_frozen_result() function relied
  upon by the dogpile.caching example was not included in tests
  and began failing due to incorrect internal arguments.
- Fixed critical regression where the Session could fail to
  "autobegin" a new transaction when a flush occurred without an
  existing transaction in place, implicitly placing the Session
  into legacy autocommit mode which commit the transaction. The
  Session now has a check that will prevent this condition from
  occurring, in addition to repairing the flush issue.
- Fixed regression where the ORM compilation scheme would assume
  the function name of a hybrid property would be the same as the
  attribute name in such a way that an AttributeError would be
  raised, when it would attempt to determine the correct name for
  each element in a result tuple.
- Fixed critical regression caused by the new feature added as
  part of #1763, eager loaders are invoked on unexpire operations.
  The new feature makes use of the "immediateload" eager loader
  strategy as a substitute for a collection loading strategy,
  which unlike the other “post-load” strategies was not
  accommodating for recursive invocations between
  mutually-dependent relationships, leading to recursion overflow
  errors.

engine:

- Fixed up the behavior of the Row object when dictionary access
  is used upon it, meaning converting to a dict via dict(row) or
  accessing members using strings or other objects i.e.
  row["some_key"] works as it would with a dictionary, rather than
  raising TypeError as would be the case with a tuple, whether or
  not the C extensions are in place

sql:

- Enhanced the "expanding" feature used for ColumnOperators.in_()
  operations to infer the type of expression from the right hand
  list of elements, if the left hand side does not have any
  explicit type set up. This allows the expression to support
  stringification among other things. In 1.3, "expanding" was not
  automatically used for ColumnOperators.in_() expressions, so in
  that sense this change fixes a behavioral regression.
- Fixed the "stringify" compiler to support a basic
  stringification of a "multirow" INSERT statement, i.e. one with
  multiple tuples following the VALUES keyword.

schema:

- Fixed regression where usage of a token in the
  Connection.execution_options.schema_translate_map dictionary
  which contained special characters such as braces would fail to
  be substituted properly. Use of square bracket characters [] is
  now explicitly disallowed as these are used as a delimiter
  character in the current implementation.

mypy:

- Fixed issue in Mypy plugin where the plugin wasn't inferring the
  correct type for columns of subclasses that don’t directly
  descend from TypeEngine, in particular that of TypeDecorator and
  UserDefinedType.

misc:

- Added a new flag to DefaultDialect called supports_schema; third
  party dialects may set this flag to True to enable SQLAlchemy's
  schema-level tests when running the test suite for a third party
  dialect.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit bc55118cf6)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
70f8006b16 python3-monotonic: Upgrade 1.5 -> 1.6
Upgrade to release 1.6:

- Fix order for converting mach absolute time

Get the source code from the git repository because an archive
is not available in PyPI for this release.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 7076813079)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
488b3f82c9 python3-humanize: Upgrade 3.3.0 -> 3.4.0
Upgrade to release 3.4.0:

- Add Catalan translation
- Add documentation and release notes to project_urls
- Fix tests for Python 3.10

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit e8bcc60fb5)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
964eebf347 python3-cerberus: Upgrade 1.3.2 -> 1.3.3
Minor code refactoring of the recipe and upgrade to release 1.3.3:

- Classes can be used as constraint for the type rule
- The abstract base classes of the standard library's
  collections.abc module are available as named types for the
  type rule
- Generic type aliases from the :mod:`typing` module can be used
  as constraints for the type rule, including parametrized ones
  a.k.a. compound types
- Support for Python 3.5 is removed.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 4d94ced1ec)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
zhengruoqin
d8e0ab6171 python3-bitarray: upgrade 1.9.1 -> 1.9.2
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit d46d6e58c2)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
zhengruoqin
d7ca584345 python3-astroid: upgrade 2.5.2 -> 2.5.3
What's New in astroid 2.5.3?
============================
Release Date: 2021-04-10

* Takes into account the fact that subscript inferring for a ClassDef may involve __class_getitem__ method

* Reworks the `collections` and `typing` brain so that `pylint`s acceptance tests are fine.

  Closes PyCQA/pylint#4206

* Use ``inference_tip`` for ``typing.TypedDict`` brain.

* Fix mro for classes that inherit from typing.Generic

* Add inference tip for typing.Generic and typing.Annotated with ``__class_getitem__``

  Closes PyCQA/pylint#2822

Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit b06d10f7de)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
zhengruoqin
5d7968421a python3-absl: upgrade 0.10.0 -> 0.12.0
Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 44277ef50a)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
184db3060f python3-grpcio: Upgrade 1.36.1 -> 1.37.0
Upgrade to release 1.37.0:

- Use boringssl asm optimizations in aarch64 wheel source build.
- Clarify Guarantees about grpc.Future Interface.
- Use crosscompilation to build python armv7 wheels.
- [Aio] Add time_remaining method to ServicerContext.
- Standardize all environment variable boolean configuration in
  python's setup.py.
- Crosscompile python aarch64 wheels with dockcross.
- Fix Signal Safety Issue.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit d5e3c26160)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
f3b636c86a python3-robotframework: Upgrade 4.0 -> 4.0.1
Upgrade to release 4.0.1. It is the first bug fix release in the
Robot Framework 4.0.x series. It fixes several severe and not so
severe issues reported since Robot Framework 4.0 was released.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 801b087028)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
da3f76855b python3-python-vlc: Upgrade 3.0.11115 -> 3.0.12117
Upgrade to release 3.0.12117:

- adapt to new libvlc_media_list_new API
- re-introduce MediaThumbnailRequest definition
- implement generation for struct wrapping

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 53bcbe450b)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
a7ccd7bb9a python3-speedtest-cli: Upgrade 2.1.2 -> 2.1.3
Upgrade to release 2.1.3:

- Address issue where a test server may return an HTTP error
  during upload or download
- Address issue where ignore_ids may be empty or have empty values

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit becc8a0246)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00
Leon Anavi
9087778577 python3-grpcio-tools: Upgrade 1.36.1 -> 1.37.0
Upgrade to release 1.37.0:

- use boringssl asm optimizations in aarch64 wheel source build.
- Clarify Guarantees about grpc.Future Interface.
- Use crosscompilation to build python armv7 wheels.
- [Aio] Add time_remaining method to ServicerContext.
- Standardize all environment variable boolean configuration in
  python's setup.py.
- Crosscompile python aarch64 wheels with dockcross.
- Fix Signal Safety Issue.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
(cherry picked from commit 004644b2da)
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2021-04-17 06:46:24 -07:00