Upgrade to release 2.9.1:
- The internal locale-data loading functions now validate the name
of the locale file to be loaded and only allow files within
Babel's data directory. Thanks to Chris Lyne of Tenable, Inc. for
discovering the issue!
License-Update: Update years
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 9.0.1:
- Fixed issues with the packaging of the 9.0 release.
- :class:`~datastructures.Headers` and
:exc:`~datastructures.MultipleValuesError` were moved from
websockets.http to :mod:`websockets.datastructures`.
If you're using them, you should adjust the import path.
- The client, server, protocol, and auth modules were moved from
the websockets package to websockets.legacy sub-package, as part
of an upcoming refactoring. Despite the name, they're still
fully supported. The refactoring should be a transparent upgrade
for most uses when it's available. The legacy implementation
will be preserved according to the backwards-compatibility
policy.
- The framing, handshake, headers, http, and uri modules in the
websockets package are deprecated. These modules provided
low-level APIs for reuse by other WebSocket implementations, but
that never happened. Keeping these APIs public makes it more
difficult to improve websockets for no actual benefit.
- Added compatibility with Python 3.9.
- Added support for IRIs in addition to URIs.
- Added close codes 1012, 1013, and 1014.
- Raised an error when passing a :class:`dict` to
:meth:`~legacy.protocol.WebSocketCommonProtocol.send`.
- Fixed sending fragmented, compressed messages.
- Fixed Host header sent when connecting to an IPv6 address.
- Fixed creating a client or a server with an existing Unix socket.
- Aligned maximum cookie size with popular web browsers.
- Ensured cancellation always propagates, even on Python versions
where :exc:`~asyncio.CancelledError` inherits :exc:`Exception`.
- Improved error reporting.
License-Update: Update years
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.1.0:
- add `.find()` method
- `.find()`, `.index()`, `.search()` and `.itersearch()` now all
except both (sub-) bitarray as well as bool items to be searched
for
- improve encode/decode error messages
- add lexicographical permutations example
- add tests
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.1.0:
- Add support for Python 3.10. Pre-built binary wheels for 3.10 are
not currently available for all platforms. The greenlet ABI is
different on Python 3.10 from all previous versions, but as 3.10
was never supported before, and the ABI has not changed on other
Python versions, this is not considered a reason to change
greenlet's major version.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.1.0:
- [inotify] Simplify libc loading
- [mac] Add support for non-recursive watches in FSEventsEmitter
- [watchmedo] Add support for --debug-force-* arguments to tricks
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
This ensures that WORDSIZE is as per the target, currently this does not
get it right for cross-compilation env, and OE uses multilib headers by
default ( even when you do not use multilib ) which means if WORDSIZE
is wrong it will go on to include wrong headers due to these artificial stubs
Fixes
swig -python -py3 -ITOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/recipe-sysroot-native/usr/bin/aarch64-oe-linux/../../lib/aarch64-oe-linux/gcc/aarch64-oe-linux/11.1.0/include -ITOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/recipe-sysroot-native/usr/bin/aarch64-oe-linux/../../lib/aarch64-oe-linux/gcc/aarch64-oe-linux/11.1.0/include-fixed -ITOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/recipe-sysroot/usr/lib/aarch64-oe-linux/11.1.0/include -ITOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/recipe-sysroot/usr/include -ITOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/recipe-sysroot/usr/include -ITOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/recipe-sysroot/usr/include/python3.9 -I/usr/include/openssl -includeall -modern -builtin -outdir TOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/M2Crypto-0.37.1/M2Crypto -o SWIG/_m2crypto_wrap.c SWIG/_m2crypto.i
TOPDIR/tmp-glibc/work/cortexa57-oe-linux/python3-m2crypto/0.37.1-r0/recipe-sysroot/usr/include/openssl/opensslconf.h:23: Error: Unable to find 'openssl/opensslconf-32.h'
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Cc: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.4.142:
- Support for correlation exclusion list
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.10.2:
- Added EditorConfig configuration
- Fixed parsing of version from setup.py when global encoding
isn't UTF-8
- Fix repetition termination on a successful empty separator match
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.5.6:
- Fix retro-compatibility issues with old version of pylint
License-Update: Remove outdated COPYING and use LICENSE
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
It was enabling ptests which is now on by default in OE-core for this
version
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.4.0:
- Add fix for issue for where a y_axis font rotation of 0 was
ignored.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 0.15.1:
- Hotfix for errors while closing event loops while replacing
them.
- Add support for Python 3.9
- Abandon support for Python 3.5. If you still require support for
Python 3.5, please use pytest-asyncio v0.14 or earlier.
- Set unused_tcp_port_factory fixture scope to 'session'.
- Properly close event loops when replacing them.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.4.11:
orm:
- Fixed regression where recent changes to support Python
dataclasses had the inadvertent effect that an ORM mapped class
could not successfully override the __new__() method.
engine:
- Fixed critical regression where the connection pool "init" phase
no longer occurred within mutexed isolation, allowing other
threads to proceed with the dialect uninitialized, which could
then impact the compilation of SQL statements.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.12.3:
- Help string support for fish
- Add option to use tempfiles for IPC
- Fix multiple command registration for non-bash shells
- Register auto completion for an arbitrary name using a given
external script
- Skip completions from active subprocess completer
- Fix warnings regarding invalid escape sequences
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.3.2:
- Add hook (Huey.build_error_result) for customizing the error
result metadata.
- Avoid crashing if another module already modified/set the
multiprocessing start method.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
2.2.x is LTS, so upgrade to latest release 2.2.20.
This upgrade fixes several CVEs such as CVE-2021-3281.
Also, CVE-2021-28658.patch is dropped as it's already in 2.2.20.
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Fix a security issue CVE-2020-36242 where certain sequences of
``update()`` calls when symmetrically encrypting very large
payloads (>2GB) could result in an integer overflow, leading to
buffer overflows.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.1.6:
- from_stringraises a ValueError if given string cannot be parsed
to an interval
- Drop official support for Python 3.5
- Use black as official code formatting
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
License-Update: Use info in setup.py for license as dedicated LICENSE
file has disappeared. License still is MIT
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8,
MultiPartParser allowed directory traversal via uploaded files with
suitably crafted file names. Built-in upload handlers were not affected
by this vulnerability.
References:
https://nvd.nist.gov/vuln/detail/CVE-2021-28658
Upstream patches:
4036d62bda
Signed-off-by: Stefan Ghinea <stefan.ghinea@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.3.9:
- Added option to set row heights and column widths in pixels via
the :func:`set_row_pixels` and :func:`set_column_pixels` methods
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.0.0:
- require more specific objects, int (0 or 1) or bool
- items are always returned as int 0 or 1
- remove `.length()` method (deprecated since 1.5.1 - use `len()`)
- in `.unpack()` the `one` argument now defaults to 0x01
(was 0xff)
- `.tolist()` now always returns a list of integers (0 or 1)
- fix frozenbitarray hash function, see #121
- fix frozenbitarray being mutable by `<<=` and `>>=`
- support sequence protocol in `.extend()` (and bitarray creation)
- improve OverflowError messages from `util.int2ba()`
- add examples/hexadecimal.py
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 1.0.12:
- Add support for hashed/random/keyword expressions
- Review support support for hashed/random/keyword expression and
add expanders reactor
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 2.2.0:
- Adds support for errors.py to also use 'errors' for error_details
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Upgrade to release 5.0.7:
- The decorator module was not passing correctly the defaults
inside the *args tuple
- Fixed some mispellings in the documentation
- Integrated codespell in the CI
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
