Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-geopy for openSUSE:Factory checked in at 2026-09-08 16:57:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-geopy (Old) and /work/SRC/openSUSE:Factory/.python-geopy.new.1265 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-geopy" Tue Sep 8 16:57:39 2026 rev:24 rq:1376224 version:2.5.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-geopy/python-geopy.changes 2026-02-02 14:58:10.314069637 +0100 +++ /work/SRC/openSUSE:Factory/.python-geopy.new.1265/python-geopy.changes 2026-09-08 17:00:53.825939914 +0200 @@ -1,0 +2,24 @@ +Thu Sep 3 17:42:39 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 2.5.0: + * Security: ReDoS (CWE-1333) in Point.from_string() - + CVE-2026-77387, GHSA-mhvh-fq92-pfmr. Strings over 256 chars are + now rejected outright, so previously valid input with a long + irrelevant prefix starts raising ValueError; reachable through + any geocoder reverse() call taking a string + * Geocodio: stop raising GeocoderQueryError on empty results + * GoogleV3: drop deprecated utcnow() use + * Drop Python 3.7, declare 3.13/3.14/3.15 support + * Build metadata moved setup.py -> setup.cfg, download_url gone; + tests use packaging instead of distutils + * Remove Python 2 relics, geopy/compat.py is gone +- Run %pytest --skip-tests-requiring-internet (upstream's own opt-out) + instead of %pyunittest over hand-deleted test files: 488 tests now + run offline where unittest discovery collected 181 +- Add python-pytest-asyncio (pytest.ini sets asyncio_mode=auto) and + python-packaging (upstream swapped distutils for it) to the test + BuildRequires; drop python-async_generator, unused since 2.4.x +- Package docs/changelog_2xx.rst +- Cleanup with spec-cleaner + +------------------------------------------------------------------- Old: ---- geopy-2.4.1.tar.gz New: ---- geopy-2.5.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-geopy.spec ++++++ --- /var/tmp/diff_new_pack.ob2EnJ/_old 2026-09-08 17:00:54.509968525 +0200 +++ /var/tmp/diff_new_pack.ob2EnJ/_new 2026-09-08 17:00:54.511968609 +0200 @@ -17,32 +17,32 @@ %{?sle15_python_module_pythons} Name: python-geopy -Version: 2.4.1 +Version: 2.5.0 Release: 0 -License: MIT Summary: Python Geocoding Toolbox -Url: https://github.com/geopy/geopy -Group: Development/Languages/Python +License: MIT +URL: https://github.com/geopy/geopy Source: https://github.com/geopy/geopy/archive/%{version}.tar.gz#/geopy-%{version}.tar.gz -BuildRequires: python-rpm-macros -BuildRequires: %{python_module setuptools} BuildRequires: %{python_module pip} +BuildRequires: %{python_module setuptools} BuildRequires: %{python_module wheel} +BuildRequires: fdupes +BuildRequires: python-rpm-macros +Requires: python-geographiclib < 3 +Requires: python-geographiclib >= 1.52 +Recommends: python-pytz +Recommends: python-xml +BuildArch: noarch # SECTION test requirements -BuildRequires: %{python_module async_generator} BuildRequires: %{python_module docutils} -BuildRequires: %{python_module geographiclib >= 1.52} BuildRequires: %{python_module geographiclib < 3} +BuildRequires: %{python_module geographiclib >= 1.52} +BuildRequires: %{python_module packaging} BuildRequires: %{python_module pytest >= 3.10} +BuildRequires: %{python_module pytest-asyncio >= 0.17} BuildRequires: %{python_module pytz} BuildRequires: %{python_module xml} # /SECTION -BuildRequires: fdupes -Requires: python-geographiclib >= 1.52 -Requires: python-geographiclib < 3 -Recommends: python-pytz -Recommends: python-xml -BuildArch: noarch %python_subpackages %description @@ -57,20 +57,6 @@ %prep %autosetup -n geopy-%{version} -# Online services are not available -rm \ - test/geocoders/arcgis.py \ - test/geocoders/banfrance.py \ - test/geocoders/databc.py \ - test/geocoders/geonames.py \ - test/geocoders/googlev3.py \ - test/geocoders/ignfrance.py \ - test/geocoders/nominatim.py \ - test/geocoders/openmapquest.py \ - test/geocoders/photon.py \ - test/geocoders/pickpoint.py \ - test/geocoders/yandex.py - %build export LANG=en_US.UTF-8 %pyproject_wheel @@ -82,10 +68,11 @@ %check export LANG=en_US.UTF-8 -%pyunittest discover -v +# upstream's downstream-facing opt-out: skips every test hitting a live geocoder +%pytest --skip-tests-requiring-internet %files %{python_files} -%doc AUTHORS README.rst docs/changelog_09x.rst docs/changelog_1xx.rst +%doc AUTHORS README.rst docs/changelog_09x.rst docs/changelog_1xx.rst docs/changelog_2xx.rst %license LICENSE %{python_sitelib}/geopy %{python_sitelib}/geopy-%{version}.dist-info ++++++ geopy-2.4.1.tar.gz -> geopy-2.5.0.tar.gz ++++++ ++++ 2172 lines of diff (skipped)
