Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-oauthlib for openSUSE:Factory
checked in at 2026-10-02 23:01:57
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-oauthlib (Old)
and /work/SRC/openSUSE:Factory/.python-oauthlib.new.1631729 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-oauthlib"
Fri Oct 2 23:01:57 2026 rev:39 rq:1381890 version:4.0.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-oauthlib/python-oauthlib.changes
2026-03-06 18:16:59.828182337 +0100
+++
/work/SRC/openSUSE:Factory/.python-oauthlib.new.1631729/python-oauthlib.changes
2026-10-02 23:02:25.366979981 +0200
@@ -1,0 +2,19 @@
+Thu Oct 1 06:06:43 UTC 2026 - Markéta Machová <[email protected]>
+
+- Update to 4.0.0 (bsc#1283526, CVE-2026-49264, bsc#1283527, CVE-2026-49265)
+ OAuth2.0 Provider:
+ * Breaking: #951: Removed JSONP support from token revocation endpoint.
+ * Breaking: #919, #920: Fixed DeviceCodeGrant.validate_token_request
+ trying to authenticate public clients. Client authentication validation
+ has been reorganized and is now shared across AuthorizationCodeGrant,
+ DeviceCodeGrant, RefreshTokenGrant and
ResourceOwnerPasswordCredentialsGrant:
+ the grant_type parameter is validated before client authentication, so
+ requests missing grant_type now return 400 invalid_request instead of
+ 401 invalid_client.
+ * #963: Improved PKCE code comparison
+ Misc:
+ * #904: Stop installing examples into site-packages.
+ * #930: Add Python3.14, Python3.14t.
+ * #932: Dropped EOL Python 3.8 from CI.
+
+-------------------------------------------------------------------
Old:
----
oauthlib-3.3.1.tar.gz
New:
----
oauthlib-4.0.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-oauthlib.spec ++++++
--- /var/tmp/diff_new_pack.KdioeM/_old 2026-10-02 23:02:26.324020037 +0200
+++ /var/tmp/diff_new_pack.KdioeM/_new 2026-10-02 23:02:26.329020247 +0200
@@ -1,7 +1,7 @@
#
# spec file for package python-oauthlib
#
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2026 SUSE LLC and contributors
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-oauthlib
-Version: 3.3.1
+Version: 4.0.0
Release: 0
Summary: A Generic Implementation of the OAuth Request-Signing Logic
License: BSD-3-Clause
++++++ oauthlib-3.3.1.tar.gz -> oauthlib-4.0.0.tar.gz ++++++
++++ 2216 lines of diff (skipped)
