From a5181f879c698bb17465f171ab23c08ccea08350 Mon Sep 17 00:00:00 2001 From: Trevor Gamblin Date: Fri, 7 Jan 2022 13:52:14 -0500 Subject: [PATCH 1/9] python3-django: upgrade 2.2.25 -> 2.2.26 2.2.26 provides fixes for three CVEs: CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 https://docs.djangoproject.com/en/4.0/releases/2.2.26/ Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- .../{python3-django_2.2.25.bb => python3-django_2.2.26.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-django_2.2.25.bb => python3-django_2.2.26.bb} (71%) diff --git a/meta-python/recipes-devtools/python/python3-django_2.2.25.bb b/meta-python/recipes-devtools/python/python3-django_2.2.26.bb similarity index 71% rename from meta-python/recipes-devtools/python/python3-django_2.2.25.bb rename to meta-python/recipes-devtools/python/python3-django_2.2.26.bb index 86d21fed061..523f0e0912f 100644 --- a/meta-python/recipes-devtools/python/python3-django_2.2.25.bb +++ b/meta-python/recipes-devtools/python/python3-django_2.2.26.bb @@ -5,7 +5,7 @@ UPSTREAM_CHECK_REGEX = "/${PYPI_PACKAGE}/(?P(2\.2\.\d*)+)/" inherit setuptools3 -SRC_URI[sha256sum] = "b1e65eaf371347d4b13eb7e061b09786c973061de95390c327c85c1e2aa2349c" +SRC_URI[sha256sum] = "dfa537267d52c6243a62b32855a744ca83c37c70600aacffbfd98bc5d6d8518f" RDEPENDS:${PN} += "\ ${PYTHON_PN}-sqlparse \ From 0f0f891228899db3f1c15a4a2d49f61e35e903b0 Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Fri, 7 Jan 2022 19:47:26 +0200 Subject: [PATCH 2/9] python3-psutil: Upgrade 5.8.0 -> 5.9.0 Upgrade to release 5.9.0: - [Linux]: cpu_freq() is slow on systems with many CPUs. Read current frequency values for all CPUs from /proc/cpuinfo instead of opening many files in /sys fs. (patch by marxin) - NoSuchProcess message now specifies if the PID has been reused. - error classes (NoSuchProcess, AccessDenied, etc.) now have a better formatted and separated __repr__ and __str__ implementations. - [BSD]: add support for MidnightBSD. - [Linux]: disk_partitions(): convert /dev/root device (an alias used on some Linux distros) to real root device path. - PSUTIL_DEBUG mode now prints file name and line number of the debug messages coming from C extension modules. - rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc. Signed-off-by: Leon Anavi Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- .../{python3-psutil_5.8.0.bb => python3-psutil_5.9.0.bb} | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-psutil_5.8.0.bb => python3-psutil_5.9.0.bb} (78%) diff --git a/meta-python/recipes-devtools/python/python3-psutil_5.8.0.bb b/meta-python/recipes-devtools/python/python3-psutil_5.9.0.bb similarity index 78% rename from meta-python/recipes-devtools/python/python3-psutil_5.8.0.bb rename to meta-python/recipes-devtools/python/python3-psutil_5.9.0.bb index 7186d3c9752..cf3e0b39c87 100644 --- a/meta-python/recipes-devtools/python/python3-psutil_5.8.0.bb +++ b/meta-python/recipes-devtools/python/python3-psutil_5.9.0.bb @@ -2,7 +2,7 @@ SUMMARY = "A cross-platform process and system utilities module for Python" LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://LICENSE;md5=e35fd9f271d19d5f742f20a9d1f8bb8b" -SRC_URI[sha256sum] = "0c9ccb99ab76025f2f0bbecf341d4656e9c1351db8cc8a03ccd62e318ab4b5c6" +SRC_URI[sha256sum] = "869842dbd66bb80c3217158e629d6fceaecc3a3166d3d1faee515b05dd26ca25" inherit pypi setuptools3 @@ -19,6 +19,8 @@ RDEPENDS:${PN} += " \ ${PYTHON_PN}-threading \ ${PYTHON_PN}-xml \ ${PYTHON_PN}-netclient \ + ${PYTHON_PN}-ctypes \ + ${PYTHON_PN}-resource \ " BBCLASSEXTEND = "native nativesdk" From f922a16317d636f20b49cefaed298f6166a92dee Mon Sep 17 00:00:00 2001 From: Trevor Gamblin Date: Fri, 7 Jan 2022 13:52:15 -0500 Subject: [PATCH 3/9] python3-django: upgrade 3.2.10 -> 3.2.11 3.2.11 provides fixes for three CVEs: CVE-2021-45115 CVE-2021-45116 CVE-2021-45452 https://docs.djangoproject.com/en/4.0/releases/3.2.11/ Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- .../{python3-django_3.2.10.bb => python3-django_3.2.11.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-django_3.2.10.bb => python3-django_3.2.11.bb} (77%) diff --git a/meta-python/recipes-devtools/python/python3-django_3.2.10.bb b/meta-python/recipes-devtools/python/python3-django_3.2.11.bb similarity index 77% rename from meta-python/recipes-devtools/python/python3-django_3.2.10.bb rename to meta-python/recipes-devtools/python/python3-django_3.2.11.bb index 0c5fbb8c837..6b97ef49c03 100644 --- a/meta-python/recipes-devtools/python/python3-django_3.2.10.bb +++ b/meta-python/recipes-devtools/python/python3-django_3.2.11.bb @@ -1,7 +1,7 @@ require python-django.inc inherit setuptools3 -SRC_URI[sha256sum] = "074e8818b4b40acdc2369e67dcd6555d558329785408dcd25340ee98f1f1d5c4" +SRC_URI[sha256sum] = "69c94abe5d6b1b088bf475e09b7b74403f943e34da107e798465d2045da27e75" RDEPENDS:${PN} += "\ ${PYTHON_PN}-sqlparse \ From c9d34865275bfaf2c0c9be52dea1a8202d75972e Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Fri, 7 Jan 2022 19:47:27 +0200 Subject: [PATCH 4/9] python3-ujson: Upgrade 5.0.0 -> 5.1.0 Upgrade to release 5.1.0: - Strip debugging symbols from Linux binaries Add INSANE_SKIP for already-stripped to avoid build errors due to the stripped debugging symbols from Linux binaries in this release. Signed-off-by: Leon Anavi Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- .../{python3-ujson_5.0.0.bb => python3-ujson_5.1.0.bb} | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-ujson_5.0.0.bb => python3-ujson_5.1.0.bb} (78%) diff --git a/meta-python/recipes-devtools/python/python3-ujson_5.0.0.bb b/meta-python/recipes-devtools/python/python3-ujson_5.1.0.bb similarity index 78% rename from meta-python/recipes-devtools/python/python3-ujson_5.0.0.bb rename to meta-python/recipes-devtools/python/python3-ujson_5.1.0.bb index fb1bcd76187..821eba58c4d 100644 --- a/meta-python/recipes-devtools/python/python3-ujson_5.0.0.bb +++ b/meta-python/recipes-devtools/python/python3-ujson_5.1.0.bb @@ -4,7 +4,7 @@ DESCRIPTION = "UltraJSON is an ultra fast JSON encoder and decoder written in pu LICENSE = "BSD-3-Clause" LIC_FILES_CHKSUM = "file://PKG-INFO;beginline=8;endline=8;md5=10fa10456417c0252bcb8a498e498ffe" -SRC_URI[sha256sum] = "3ff7242816b1d22c08c04c4c6db0f6ba7c16cd624ce38534c1025defa011e50e" +SRC_URI[sha256sum] = "a88944d2f99db71a3ca0c63d81f37e55b660edde0b07216fb65a3e46403ef004" inherit pypi ptest setuptools3 @@ -31,3 +31,6 @@ do_install_ptest() { } BBCLASSEXTEND = "native nativesdk" + +# Debugging symbols have been stripped from Linux binaries since release 5.1.0 +INSANE_SKIP:${PN} += "already-stripped" From 419d201e50bddcf77f9fed1be72b15f91218746f Mon Sep 17 00:00:00 2001 From: Trevor Gamblin Date: Fri, 7 Jan 2022 13:52:16 -0500 Subject: [PATCH 5/9] python3-django: Add recipe for 4.0.1 Signed-off-by: Trevor Gamblin Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- .../recipes-devtools/python/python3-django_4.0.1.bb | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-django_4.0.1.bb diff --git a/meta-python/recipes-devtools/python/python3-django_4.0.1.bb b/meta-python/recipes-devtools/python/python3-django_4.0.1.bb new file mode 100644 index 00000000000..6cf8cad8a9e --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-django_4.0.1.bb @@ -0,0 +1,13 @@ +require python-django.inc +inherit setuptools3 + +SRC_URI[sha256sum] = "2485eea3cc4c3bae13080dee866ebf90ba9f98d1afe8fda89bfb0eb2e218ef86" + +RDEPENDS:${PN} += "\ + ${PYTHON_PN}-sqlparse \ +" + +# Set DEFAULT_PREFERENCE so that the LTS version of django is built by +# default. To build the 4.x branch, +# PREFERRED_VERSION_python3-django = "4.0.2" can be added to local.conf +DEFAULT_PREFERENCE = "-1" From 1f5d9201388e1e07683dfa327404269df48746ff Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Fri, 7 Jan 2022 19:47:28 +0200 Subject: [PATCH 6/9] python3-astroid: Upgrade 2.9.0 -> 2.9.2 Upgrade to release 2.9.2: - Fixed regression in ``astroid.scoped_nodes`` where ``_is_metaclass`` was not accessible anymore. Signed-off-by: Leon Anavi Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- .../{python3-astroid_2.9.0.bb => python3-astroid_2.9.2.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-astroid_2.9.0.bb => python3-astroid_2.9.2.bb} (89%) diff --git a/meta-python/recipes-devtools/python/python3-astroid_2.9.0.bb b/meta-python/recipes-devtools/python/python3-astroid_2.9.2.bb similarity index 89% rename from meta-python/recipes-devtools/python/python3-astroid_2.9.0.bb rename to meta-python/recipes-devtools/python/python3-astroid_2.9.2.bb index fee8acb1f46..c504d4db3ce 100644 --- a/meta-python/recipes-devtools/python/python3-astroid_2.9.0.bb +++ b/meta-python/recipes-devtools/python/python3-astroid_2.9.2.bb @@ -4,7 +4,7 @@ SECTION = "devel/python" LICENSE = "LGPL-2.1" LIC_FILES_CHKSUM = "file://LICENSE;md5=a70cf540abf41acb644ac3b621b2fad1" -SRC_URI[sha256sum] = "5939cf55de24b92bda00345d4d0659d01b3c7dafb5055165c330bc7c568ba273" +SRC_URI[sha256sum] = "72ace9c3333e274e9248168fc4f3e300da8545af1c303bd69197027f49e2bfff" inherit pypi setuptools3 From 30f120e183786b7c1ea58c295c3f952646440f70 Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Fri, 7 Jan 2022 19:47:29 +0200 Subject: [PATCH 7/9] python3-robotframework: Upgrade 4.1.2 -> 4.1.3 Upgrade to release 4.1.3: - Fix to a regression related to parsing reStructuredText files that was introduced in Robot Framework 4.1.2 Signed-off-by: Leon Anavi Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- ...-robotframework_4.1.2.bb => python3-robotframework_4.1.3.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-robotframework_4.1.2.bb => python3-robotframework_4.1.3.bb} (92%) diff --git a/meta-python/recipes-devtools/python/python3-robotframework_4.1.2.bb b/meta-python/recipes-devtools/python/python3-robotframework_4.1.3.bb similarity index 92% rename from meta-python/recipes-devtools/python/python3-robotframework_4.1.2.bb rename to meta-python/recipes-devtools/python/python3-robotframework_4.1.3.bb index 0c3de5da795..a40d047d728 100644 --- a/meta-python/recipes-devtools/python/python3-robotframework_4.1.2.bb +++ b/meta-python/recipes-devtools/python/python3-robotframework_4.1.3.bb @@ -13,7 +13,7 @@ inherit pypi setuptools3 PYPI_PACKAGE_EXT = "zip" -SRC_URI[sha256sum] = "7ea2454b847cfcb211e2906743c5c4a868ab096ab4ce1547ab102d91fb224443" +SRC_URI[sha256sum] = "d2675cbe3e5a4c90be3ddb61be3b88cc0d6ff503c298ad8f8a78aad14e71e886" RDEPENDS:${PN} += " \ ${PYTHON_PN}-shell \ From 8a20e4769e1bcbbbb11e8fd844e2cedd11b4022e Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Fri, 7 Jan 2022 19:47:30 +0200 Subject: [PATCH 8/9] python3-cantools: Upgrade 37.0.0 -> 37.0.1 Upgrade to release 37.0.1: - Fix issue Wrong compare type in _check_signals_ranges_scaling() Signed-off-by: Leon Anavi Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- ...on3-cantools_37.0.0.bb => python3-cantools_37.0.1.bb} | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-cantools_37.0.0.bb => python3-cantools_37.0.1.bb} (55%) diff --git a/meta-python/recipes-devtools/python/python3-cantools_37.0.0.bb b/meta-python/recipes-devtools/python/python3-cantools_37.0.1.bb similarity index 55% rename from meta-python/recipes-devtools/python/python3-cantools_37.0.0.bb rename to meta-python/recipes-devtools/python/python3-cantools_37.0.1.bb index c8c2b259246..9642bc52874 100644 --- a/meta-python/recipes-devtools/python/python3-cantools_37.0.0.bb +++ b/meta-python/recipes-devtools/python/python3-cantools_37.0.1.bb @@ -3,10 +3,17 @@ HOMEPAGE = "https://github.com/eerimoq/cantools" LICENSE = "MIT" LIC_FILES_CHKSUM = "file://LICENSE;md5=d9aa4ec07de78abae21c490c9ffe61bd" -SRC_URI[sha256sum] = "ac5f8901940693ce4b798e7ae07ed69a60856ae8a1ca47079088530813b57287" +SRC_URI[sha256sum] = "5852ad9fd17ddd7b1a1ce87b21b000e7f5716b358cdac4fdaca13b3e292f4c99" PYPI_PACKAGE = "cantools" inherit pypi setuptools3 +RDEPENDS:${PN} += "\ + ${PYTHON_PN}-can \ + ${PYTHON_PN}-bitstruct \ + ${PYTHON_PN}-core \ + ${PYTHON_PN}-textparser \ +" + CLEANBROKEN = "1" From 73b2b8be0a2d23ed7e992b9f2fbe6f0d5b6a5e69 Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Fri, 7 Jan 2022 14:58:20 +0200 Subject: [PATCH 9/9] python3-diskcache: Upgrade 5.3.0 -> 5.4.0 Upgrade to release 5.4.0: - Run isort - Remove unused imports - Update tests for Django 3.2 Signed-off-by: Leon Anavi Signed-off-by: Khem Raj Signed-off-by: Trevor Gamblin --- ...diskcache_5.3.0.bb => python3-diskcache_5.4.0.bb} | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) rename meta-python/recipes-devtools/python/{python3-diskcache_5.3.0.bb => python3-diskcache_5.4.0.bb} (50%) diff --git a/meta-python/recipes-devtools/python/python3-diskcache_5.3.0.bb b/meta-python/recipes-devtools/python/python3-diskcache_5.4.0.bb similarity index 50% rename from meta-python/recipes-devtools/python/python3-diskcache_5.3.0.bb rename to meta-python/recipes-devtools/python/python3-diskcache_5.4.0.bb index 55829bd1e68..84d42e57227 100644 --- a/meta-python/recipes-devtools/python/python3-diskcache_5.3.0.bb +++ b/meta-python/recipes-devtools/python/python3-diskcache_5.4.0.bb @@ -3,10 +3,20 @@ HOMEPAGE = "http://www.grantjenks.com/docs/diskcache/" LICENSE = "Apache-2.0" LIC_FILES_CHKSUM = "file://LICENSE;md5=c60ef82f0f40155453f6d5f2c94b6e8e" -SRC_URI[sha256sum] = "3f1fa30b29fdff26cfddcb3ee7d61376903f82c769ea2907a2b82a5bfb8abbe2" +SRC_URI[sha256sum] = "8879eb8c9b4a2509a5e633d2008634fb2b0b35c2b36192d89655dbde02419644" PYPI_PACKAGE = "diskcache" inherit pypi setuptools3 +RDEPENDS:${PN} = "\ + ${PYTHON_PN}-json \ + ${PYTHON_PN}-pickle \ + ${PYTHON_PN}-sqlite3 \ + ${PYTHON_PN}-core \ + ${PYTHON_PN}-io \ + ${PYTHON_PN}-compression \ + ${PYTHON_PN}-threading \ +" + CLEANBROKEN = "1"