Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package python-mkdocs-material for 
openSUSE:Factory checked in at 2026-03-05 17:29:47
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-mkdocs-material (Old)
 and      /work/SRC/openSUSE:Factory/.python-mkdocs-material.new.561 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "python-mkdocs-material"

Thu Mar  5 17:29:47 2026 rev:101 rq:1336664 version:9.7.4

Changes:
--------
--- 
/work/SRC/openSUSE:Factory/python-mkdocs-material/python-mkdocs-material.changes
    2026-02-26 19:02:06.911224553 +0100
+++ 
/work/SRC/openSUSE:Factory/.python-mkdocs-material.new.561/python-mkdocs-material.changes
   2026-03-05 17:31:40.783766044 +0100
@@ -1,0 +2,8 @@
+Wed Mar  4 06:33:27 UTC 2026 - Johannes Kastl 
<[email protected]>
+
+- update to 9.7.4:
+  * Hardened social cards plugin by switching to sandboxed environment
+    (recommended by @caveeroo)
+  * Updated MkDocs 2.0 incompatibility warning
+
+-------------------------------------------------------------------

Old:
----
  mkdocs_material-9.7.3.tar.gz

New:
----
  mkdocs_material-9.7.4.tar.gz

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ python-mkdocs-material.spec ++++++
--- /var/tmp/diff_new_pack.42rAbw/_old  2026-03-05 17:31:41.651802146 +0100
+++ /var/tmp/diff_new_pack.42rAbw/_new  2026-03-05 17:31:41.651802146 +0100
@@ -18,7 +18,7 @@
 
 %{?sle15_python_module_pythons}
 Name:           python-mkdocs-material
-Version:        9.7.3
+Version:        9.7.4
 Release:        0
 Summary:        Material theme for mkdocs
 License:        MIT

++++++ mkdocs_material-9.7.3.tar.gz -> mkdocs_material-9.7.4.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/mkdocs_material-9.7.3/PKG-INFO 
new/mkdocs_material-9.7.4/PKG-INFO
--- old/mkdocs_material-9.7.3/PKG-INFO  2020-02-02 01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/PKG-INFO  2020-02-02 01:00:00.000000000 +0100
@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: mkdocs-material
-Version: 9.7.3
+Version: 9.7.4
 Summary: Documentation that simply works
 Project-URL: Homepage, https://squidfunk.github.io/mkdocs-material/
 Project-URL: Bug Tracker, https://github.com/squidfunk/mkdocs-material/issues
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/mkdocs_material-9.7.3/material/__init__.py 
new/mkdocs_material-9.7.4/material/__init__.py
--- old/mkdocs_material-9.7.3/material/__init__.py      2020-02-02 
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/__init__.py      2020-02-02 
01:00:00.000000000 +0100
@@ -18,4 +18,4 @@
 # FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS
 # IN THE SOFTWARE.
 
-__version__ = "9.7.3"
+__version__ = "9.7.4"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/mkdocs_material-9.7.3/material/plugins/__init__.py 
new/mkdocs_material-9.7.4/material/plugins/__init__.py
--- old/mkdocs_material-9.7.3/material/plugins/__init__.py      2020-02-02 
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/plugins/__init__.py      2020-02-02 
01:00:00.000000000 +0100
@@ -26,13 +26,19 @@
 if not getenv("NO_MKDOCS_2_WARNING"):
     print(
         "\n"
-        f"{Fore.RED} │ ⚠ WARNING – MkDocs 2.0 is incompatible with Material 
for MkDocs{Style.RESET_ALL}\n"
-        f"{Fore.RED} │ {Style.RESET_ALL}\n"
-        f"{Fore.RED} │ {Style.RESET_ALL}  MkDocs 1.x is unmaintained. We 
recommend switching to Zensical, our\n"
-        f"{Fore.RED} │ {Style.RESET_ALL}  new static site generator, as soon 
as possible. We're providing an\n"
-        f"{Fore.RED} │ {Style.RESET_ALL}  analysis of the situation in this 
article:\n"
-        f"{Fore.RED} │ {Style.RESET_ALL}  \n"
-        f"{Fore.RED} │ {Style.RESET_ALL}  
\033[4mhttps://squidfunk.github.io/mkdocs-material/blog/2026/02/18/mkdocs-2.0/{Style.RESET_ALL}\n";
+        f"{Fore.RED} │  ⚠  WARNING – MkDocs 2.0 is incompatible with Material 
for MkDocs{Style.RESET_ALL}\n"
+        f"{Fore.RED} │{Style.RESET_ALL}\n"
+        f"{Fore.RED} │{Style.RESET_ALL}  MkDocs 2.0 introduces 
backward-incompatible changes:\n"
+        f"{Fore.RED} │{Style.RESET_ALL}\n"
+        f"{Fore.RED} │  × {Style.RESET_ALL}All plugins will stop working – the 
plugin system has been removed\n"
+        f"{Fore.RED} │  × {Style.RESET_ALL}All theme overrides will break – 
the theming system has been rewritten\n"
+        f"{Fore.RED} │  × {Style.RESET_ALL}No migration path exists – existing 
projects cannot be upgraded\n"
+        f"{Fore.RED} │  × {Style.RESET_ALL}Closed contribution model – 
community members can't report bugs\n"
+        f"{Fore.RED} │  × {Style.RESET_ALL}Currently unlicensed – unsuitable 
for production use\n"
+        f"{Fore.RED} │{Style.RESET_ALL}\n"
+        f"{Fore.RED} │{Style.RESET_ALL}  Our full analysis:\n"
+        f"{Fore.RED} │{Style.RESET_ALL}\n"
+        f"{Fore.RED} │{Style.RESET_ALL}  
\033[4mhttps://squidfunk.github.io/mkdocs-material/blog/2026/02/18/mkdocs-2.0/{Style.RESET_ALL}\n";
         f"{Style.RESET_ALL}",
         file=stderr
     )
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' 
old/mkdocs_material-9.7.3/material/plugins/social/plugin.py 
new/mkdocs_material-9.7.4/material/plugins/social/plugin.py
--- old/mkdocs_material-9.7.3/material/plugins/social/plugin.py 2020-02-02 
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/plugins/social/plugin.py 2020-02-02 
01:00:00.000000000 +0100
@@ -39,7 +39,7 @@
 from hashlib import sha1
 from html import unescape
 from io import BytesIO
-from jinja2 import Environment
+from jinja2.sandbox import SandboxedEnvironment
 from jinja2.meta import find_undeclared_variables
 from mkdocs.config.base import Config
 from mkdocs.config.defaults import MkDocsConfig
@@ -151,7 +151,7 @@
         self.card_variables: dict[str, list[list[str]]] = {}
 
         # Initialize card environment
-        self.card_env = Environment()
+        self.card_env = SandboxedEnvironment()
         self.card_env.filters["x"] = x_filter
 
         # Always print a warning when debug mode is active
@@ -955,7 +955,7 @@
 # -----------------------------------------------------------------------------
 
 # Extract all variables recursively
-def _extract(data: any, env: Environment, config: MkDocsConfig):
+def _extract(data: any, env: SandboxedEnvironment, config: MkDocsConfig):
 
     # Traverse configuration or dictionary
     if isinstance(data, (Config, dict)):
@@ -980,7 +980,9 @@
     return []
 
 # Replace all variables recursively and return a copy of the given data
-def _replace(data: any, env: Environment, config: MkDocsConfig, **kwargs):
+def _replace(
+    data: any, env: SandboxedEnvironment, config: MkDocsConfig, **kwargs
+):
 
     # Traverse configuration or dictionary
     if isinstance(data, (Config, dict)):
@@ -1006,7 +1008,7 @@
 
 # Compile template and cache it indefinitely
 @functools.lru_cache(maxsize = None)
-def _compile(data: str, env: Environment):
+def _compile(data: str, env: SandboxedEnvironment):
     return env.from_string(html.unescape(data))
 
 # Compute absolute path to internal templates directory,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/mkdocs_material-9.7.3/material/templates/base.html 
new/mkdocs_material-9.7.4/material/templates/base.html
--- old/mkdocs_material-9.7.3/material/templates/base.html      2020-02-02 
01:00:00.000000000 +0100
+++ new/mkdocs_material-9.7.4/material/templates/base.html      2020-02-02 
01:00:00.000000000 +0100
@@ -37,7 +37,7 @@
         <link rel="alternate" type="application/rss+xml" title="{{ 
lang.t('rss.updated') }}" href="{{ 'feed_rss_updated.xml' | url }}">
       {% endif %}
       <link rel="icon" href="{{ config.theme.favicon | url }}">
-      <meta name="generator" content="mkdocs-{{ mkdocs_version }}, 
mkdocs-material-9.7.3">
+      <meta name="generator" content="mkdocs-{{ mkdocs_version }}, 
mkdocs-material-9.7.4">
     {% endblock %}
     {% block htmltitle %}
       {% if page.meta and page.meta.title %}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/mkdocs_material-9.7.3/package.json 
new/mkdocs_material-9.7.4/package.json
--- old/mkdocs_material-9.7.3/package.json      2020-02-02 01:00:00.000000000 
+0100
+++ new/mkdocs_material-9.7.4/package.json      2020-02-02 01:00:00.000000000 
+0100
@@ -1,6 +1,6 @@
 {
   "name": "mkdocs-material",
-  "version": "9.7.3",
+  "version": "9.7.4",
   "description": "Documentation that simply works",
   "keywords": [
     "mkdocs",

Reply via email to