Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-uv for openSUSE:Factory checked in at 2026-09-21 12:23:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-uv (Old) and /work/SRC/openSUSE:Factory/.python-uv.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-uv" Mon Sep 21 12:23:02 2026 rev:125 rq:1379356 version:0.12.17 Changes: -------- --- /work/SRC/openSUSE:Factory/python-uv/python-uv.changes 2026-09-17 15:25:48.331050132 +0200 +++ /work/SRC/openSUSE:Factory/.python-uv.new.383539/python-uv.changes 2026-09-21 12:23:22.044663166 +0200 @@ -1,0 +2,27 @@ +Sun Sep 20 19:46:41 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 0.12.17: + * Stop required-environments from selecting wheels that need a + newer macOS than the configured Darwin baseline + * Set the minimum glibc and musl versions a universal + resolution must support with minimum-libc-version (preview) + * Reject unsupported Git archive paths in a lockfile with a + clear error instead of panicking during a frozen export +- Update to 0.12.16: + * Verify downloaded wheels and source distributions against + hashes supplied by the package index + * Redact Azure shared access signatures from displayed and + logged URLs + * Stop panicking on unsupported Git URL schemes, malformed + index URLs and proxy URLs with no host + * Add Pyodide 314.0.7, 0.29.5 and 0.27.8 to managed Python + * Many more fixes and improvements; see upstream's release + notes for the full list +- Refresh the vendored crates (the ICU segmenter, rand 0.9 and + several image codec backends drop out); the linked licence set + is unchanged +- Not affected by CVE-2026-92987 (boo#1281170): roxmltree enters + the vendor tree only through uv-dev's resvg and is absent from + the linked crate graph + +------------------------------------------------------------------- Old: ---- python-uv-0.12.15.tar.gz New: ---- python-uv-0.12.17.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-uv.spec ++++++ --- /var/tmp/diff_new_pack.XNSj2x/_old 2026-09-21 12:23:28.981953103 +0200 +++ /var/tmp/diff_new_pack.XNSj2x/_new 2026-09-21 12:23:28.983953187 +0200 @@ -36,13 +36,13 @@ %global build_rustflags -C linker=clang -C link-arg=-fuse-ld=%{_bindir}/mold -C link-arg=-Wl,-z,relro,-z,now -C debuginfo=2 -C incremental=false -C strip=none %endif Name: %{origname}%{psuffix} -Version: 0.12.15 +Version: 0.12.17 Release: 0 Summary: A Python package installer and resolver, written in Rust # Legal-Review-Notice: uv itself is "Apache-2.0 OR MIT", but the binary # statically links the vendored Rust dependencies. Re-derived on this # re-vendor with "cargo tree --offline -p uv -e normal" over the vendored -# tree (514 unique name-version nodes); the copyleft licences in the linked graph are: +# tree (507 unique name-version nodes); the copyleft licences in the linked graph are: # - MPL-2.0 from astral-pubgrub, astral-version-ranges and option-ext # (the last via shellexpand -> dirs -> dirs-sys), # - priority-queue, which is "LGPL-3.0-or-later OR MPL-2.0" - we elect @@ -171,10 +171,10 @@ %if %{with test} %check -# The test flavour runs the Rust workspace suite: 67 of the 70 workspace +# The test flavour runs the Rust workspace suite: 70 of the 73 workspace # members. Three crates are excluded, each for a reason that no amount of # packaging can fix: -# - uv, the CLI integration suite (78 test files under crates/uv/tests). +# - uv, the CLI integration suite (81 test files under crates/uv/tests). # It resolves against the real package index and downloads managed # CPython interpreters; an OBS build chroot has no network. # - uv-dev, whose generate_sysconfig_mappings test fetches ++++++ python-uv-0.12.15.tar.gz -> python-uv-0.12.17.tar.gz ++++++ /work/SRC/openSUSE:Factory/python-uv/python-uv-0.12.15.tar.gz /work/SRC/openSUSE:Factory/.python-uv.new.383539/python-uv-0.12.17.tar.gz differ: char 14, line 1 ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/python-uv/vendor.tar.zst /work/SRC/openSUSE:Factory/.python-uv.new.383539/vendor.tar.zst differ: char 7, line 1
