Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-django-oauth-toolkit for
openSUSE:Factory checked in at 2026-08-27 18:55:42
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-django-oauth-toolkit (Old)
and /work/SRC/openSUSE:Factory/.python-django-oauth-toolkit.new.1265 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-django-oauth-toolkit"
Thu Aug 27 18:55:42 2026 rev:10 rq:1374085 version:3.4.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/python-django-oauth-toolkit/python-django-oauth-toolkit.changes
2026-06-30 15:13:05.451345778 +0200
+++
/work/SRC/openSUSE:Factory/.python-django-oauth-toolkit.new.1265/python-django-oauth-toolkit.changes
2026-08-27 18:57:23.643290689 +0200
@@ -1,0 +2,19 @@
+Thu Aug 27 11:35:22 UTC 2026 - Markéta Machová <[email protected]>
+
+- update to 3.4.1 (CVE-2026-16206, bsc#1271699)
+ * Integration and docs for Django Ninja authentication
+ * Support for RP-Initiated Registration
+ * Add RFC 8414 OAuth 2.0 Authorization Server Metadata endpoint
+ * Add RFC 9728 OAuth 2.0 Protected Resource Metadata endpoint
+ * Dynamic help text on the application client_secret field, warning
+ users to copy the secret on creation and explaining it is hashed
+ and unrecoverable when editing
+ * Dynamic Client Registration Protocol (RFC 7591 / RFC 7592)
+ * ALLOW_LOCALHOST_LOOPBACK setting to extend the RFC 8252 §7.3
+ any-port loopback exemption to http://localhost redirect URIs
+ * Support for OAuth Client ID Metadata Documents
+ * New docs/security.rst page mapping each RFC 9700 recommendation
+ to the corresponding setting
+ * Deprecate the AUTHENTICATION_SERVER_EXP_TIME_ZONE setting
+
+-------------------------------------------------------------------
Old:
----
django-oauth-toolkit-3.3.0.tar.gz
New:
----
django-oauth-toolkit-3.4.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-django-oauth-toolkit.spec ++++++
--- /var/tmp/diff_new_pack.qHofAj/_old 2026-08-27 18:57:24.816331984 +0200
+++ /var/tmp/diff_new_pack.qHofAj/_new 2026-08-27 18:57:24.817332020 +0200
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-django-oauth-toolkit
-Version: 3.3.0
+Version: 3.4.1
Release: 0
Summary: OAuth2 Provider for Django
License: BSD-2-Clause
@@ -26,6 +26,7 @@
Source:
https://github.com/jazzband/django-oauth-toolkit/archive/%{version}.tar.gz#/django-oauth-toolkit-%{version}.tar.gz
BuildRequires: %{python_module Django >= 4.2}
BuildRequires: %{python_module base >= 3.8}
+BuildRequires: %{python_module django-ninja}
BuildRequires: %{python_module djangorestframework}
BuildRequires: %{python_module jwcrypto >= 1.5.0}
BuildRequires: %{python_module oauthlib >= 3.2.2}
@@ -33,6 +34,7 @@
BuildRequires: %{python_module pytest-cov}
BuildRequires: %{python_module pytest-django}
BuildRequires: %{python_module pytest-mock}
+BuildRequires: %{python_module pytest-xdist}
BuildRequires: %{python_module requests >= 2.13.0}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module wheel}
++++++ django-oauth-toolkit-3.3.0.tar.gz -> django-oauth-toolkit-3.4.1.tar.gz
++++++
++++ 35738 lines of diff (skipped)
