Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-mkdocs-material for
openSUSE:Factory checked in at 2026-03-05 17:29:47
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-mkdocs-material (Old)
and /work/SRC/openSUSE:Factory/.python-mkdocs-material.new.561 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-mkdocs-material"
Thu Mar 5 17:29:47 2026 rev:101 rq:1336664 version:9.7.4
Changes:
--------
---
/work/SRC/openSUSE:Factory/python-mkdocs-material/python-mkdocs-material.changes
2026-02-26 19:02:06.911224553 +0100
+++
/work/SRC/openSUSE:Factory/.python-mkdocs-material.new.561/python-mkdocs-material.changes
2026-03-05 17:31:40.783766044 +0100
@@ -1,0 +2,8 @@
+Wed Mar 4 06:33:27 UTC 2026 - Johannes Kastl
<[email protected]>
+
+- update to 9.7.4:
+ * Hardened social cards plugin by switching to sandboxed environment
+ (recommended by @caveeroo)
+ * Updated MkDocs 2.0 incompatibility warning
+
+-------------------------------------------------------------------
Old:
----
mkdocs_material-9.7.3.tar.gz
New:
----
mkdocs_material-9.7.4.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-mkdocs-material.spec ++++++
--- /var/tmp/diff_new_pack.42rAbw/_old 2026-03-05 17:31:41.651802146 +0100
+++ /var/tmp/diff_new_pack.42rAbw/_new 2026-03-05 17:31:41.651802146 +0100
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-mkdocs-material
-Version: 9.7.3
+Version: 9.7.4
Release: 0
Summary: Material theme for mkdocs
License: MIT
++++++ mkdocs_material-9.7.3.tar.gz -> mkdocs_material-9.7.4.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/mkdocs_material-9.7.3/PKG-INFO
new/mkdocs_material-9.7.4/PKG-INFO
--- old/mkdocs_material-9.7.3/PKG-INFO 2020-02-02 01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/PKG-INFO 2020-02-02 01:00:00.000000000 +0100
@@ -1,6 +1,6 @@
Metadata-Version: 2.4
Name: mkdocs-material
-Version: 9.7.3
+Version: 9.7.4
Summary: Documentation that simply works
Project-URL: Homepage, https://squidfunk.github.io/mkdocs-material/
Project-URL: Bug Tracker, https://github.com/squidfunk/mkdocs-material/issues
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/mkdocs_material-9.7.3/material/__init__.py
new/mkdocs_material-9.7.4/material/__init__.py
--- old/mkdocs_material-9.7.3/material/__init__.py 2020-02-02
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/__init__.py 2020-02-02
01:00:00.000000000 +0100
@@ -18,4 +18,4 @@
# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
# IN THE SOFTWARE.
-__version__ = "9.7.3"
+__version__ = "9.7.4"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/mkdocs_material-9.7.3/material/plugins/__init__.py
new/mkdocs_material-9.7.4/material/plugins/__init__.py
--- old/mkdocs_material-9.7.3/material/plugins/__init__.py 2020-02-02
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/plugins/__init__.py 2020-02-02
01:00:00.000000000 +0100
@@ -26,13 +26,19 @@
if not getenv("NO_MKDOCS_2_WARNING"):
print(
"\n"
- f"{Fore.RED} │ ⚠ WARNING – MkDocs 2.0 is incompatible with Material
for MkDocs{Style.RESET_ALL}\n"
- f"{Fore.RED} │ {Style.RESET_ALL}\n"
- f"{Fore.RED} │ {Style.RESET_ALL} MkDocs 1.x is unmaintained. We
recommend switching to Zensical, our\n"
- f"{Fore.RED} │ {Style.RESET_ALL} new static site generator, as soon
as possible. We're providing an\n"
- f"{Fore.RED} │ {Style.RESET_ALL} analysis of the situation in this
article:\n"
- f"{Fore.RED} │ {Style.RESET_ALL} \n"
- f"{Fore.RED} │ {Style.RESET_ALL}
\033[4mhttps://squidfunk.github.io/mkdocs-material/blog/2026/02/18/mkdocs-2.0/{Style.RESET_ALL}\n"
+ f"{Fore.RED} │ ⚠ WARNING – MkDocs 2.0 is incompatible with Material
for MkDocs{Style.RESET_ALL}\n"
+ f"{Fore.RED} │{Style.RESET_ALL}\n"
+ f"{Fore.RED} │{Style.RESET_ALL} MkDocs 2.0 introduces
backward-incompatible changes:\n"
+ f"{Fore.RED} │{Style.RESET_ALL}\n"
+ f"{Fore.RED} │ × {Style.RESET_ALL}All plugins will stop working – the
plugin system has been removed\n"
+ f"{Fore.RED} │ × {Style.RESET_ALL}All theme overrides will break –
the theming system has been rewritten\n"
+ f"{Fore.RED} │ × {Style.RESET_ALL}No migration path exists – existing
projects cannot be upgraded\n"
+ f"{Fore.RED} │ × {Style.RESET_ALL}Closed contribution model –
community members can't report bugs\n"
+ f"{Fore.RED} │ × {Style.RESET_ALL}Currently unlicensed – unsuitable
for production use\n"
+ f"{Fore.RED} │{Style.RESET_ALL}\n"
+ f"{Fore.RED} │{Style.RESET_ALL} Our full analysis:\n"
+ f"{Fore.RED} │{Style.RESET_ALL}\n"
+ f"{Fore.RED} │{Style.RESET_ALL}
\033[4mhttps://squidfunk.github.io/mkdocs-material/blog/2026/02/18/mkdocs-2.0/{Style.RESET_ALL}\n"
f"{Style.RESET_ALL}",
file=stderr
)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/mkdocs_material-9.7.3/material/plugins/social/plugin.py
new/mkdocs_material-9.7.4/material/plugins/social/plugin.py
--- old/mkdocs_material-9.7.3/material/plugins/social/plugin.py 2020-02-02
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/plugins/social/plugin.py 2020-02-02
01:00:00.000000000 +0100
@@ -39,7 +39,7 @@
from hashlib import sha1
from html import unescape
from io import BytesIO
-from jinja2 import Environment
+from jinja2.sandbox import SandboxedEnvironment
from jinja2.meta import find_undeclared_variables
from mkdocs.config.base import Config
from mkdocs.config.defaults import MkDocsConfig
@@ -151,7 +151,7 @@
self.card_variables: dict[str, list[list[str]]] = {}
# Initialize card environment
- self.card_env = Environment()
+ self.card_env = SandboxedEnvironment()
self.card_env.filters["x"] = x_filter
# Always print a warning when debug mode is active
@@ -955,7 +955,7 @@
# -----------------------------------------------------------------------------
# Extract all variables recursively
-def _extract(data: any, env: Environment, config: MkDocsConfig):
+def _extract(data: any, env: SandboxedEnvironment, config: MkDocsConfig):
# Traverse configuration or dictionary
if isinstance(data, (Config, dict)):
@@ -980,7 +980,9 @@
return []
# Replace all variables recursively and return a copy of the given data
-def _replace(data: any, env: Environment, config: MkDocsConfig, **kwargs):
+def _replace(
+ data: any, env: SandboxedEnvironment, config: MkDocsConfig, **kwargs
+):
# Traverse configuration or dictionary
if isinstance(data, (Config, dict)):
@@ -1006,7 +1008,7 @@
# Compile template and cache it indefinitely
@functools.lru_cache(maxsize = None)
-def _compile(data: str, env: Environment):
+def _compile(data: str, env: SandboxedEnvironment):
return env.from_string(html.unescape(data))
# Compute absolute path to internal templates directory,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/mkdocs_material-9.7.3/material/templates/base.html
new/mkdocs_material-9.7.4/material/templates/base.html
--- old/mkdocs_material-9.7.3/material/templates/base.html 2020-02-02
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/templates/base.html 2020-02-02
01:00:00.000000000 +0100
@@ -37,7 +37,7 @@
<link rel="alternate" type="application/rss+xml" title="{{
lang.t('rss.updated') }}" href="{{ 'feed_rss_updated.xml' | url }}">
{% endif %}
<link rel="icon" href="{{ config.theme.favicon | url }}">
- <meta name="generator" content="mkdocs-{{ mkdocs_version }},
mkdocs-material-9.7.3">
+ <meta name="generator" content="mkdocs-{{ mkdocs_version }},
mkdocs-material-9.7.4">
{% endblock %}
{% block htmltitle %}
{% if page.meta and page.meta.title %}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/mkdocs_material-9.7.3/package.json
new/mkdocs_material-9.7.4/package.json
--- old/mkdocs_material-9.7.3/package.json 2020-02-02 01:00:00.000000000
+0100
+++ new/mkdocs_material-9.7.4/package.json 2020-02-02 01:00:00.000000000
+0100
@@ -1,6 +1,6 @@
{
"name": "mkdocs-material",
- "version": "9.7.3",
+ "version": "9.7.4",
"description": "Documentation that simply works",
"keywords": [
"mkdocs",