Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-ruff for openSUSE:Factory checked in at 2026-10-03 20:12:29 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-ruff (Old) and /work/SRC/openSUSE:Factory/.python-ruff.new.1631729 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-ruff" Sat Oct 3 20:12:29 2026 rev:130 rq:1382069 version:0.16.10 Changes: -------- --- /work/SRC/openSUSE:Factory/python-ruff/python-ruff.changes 2026-09-29 17:46:16.667432690 +0200 +++ /work/SRC/openSUSE:Factory/.python-ruff.new.1631729/python-ruff.changes 2026-10-03 20:12:31.284060374 +0200 @@ -1,0 +2,25 @@ +Fri Oct 2 09:16:17 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to version 0.16.10: + * Preview: pyupgrade UP052 flags context manager iterator + annotations + * Rule categories gained a migration guide + * Diagnostics use less memory + * The language server no longer runs uv format in an untrusted + workspace + * Python 3.15 is listed as a supported version + * MSRV raised to Rust 1.97, now required at build time +- Re-vendor the Rust dependencies and re-derive the licence set of the + statically linked crates: unchanged at MIT AND MPL-2.0, same three + MPL-2.0 crates (colored, option-ext, version-ranges); the linked-crate + count in the Legal-Review-Notice is corrected from 297 to 237, which is + what "cargo tree --offline -p ruff -e normal" yields at 0.16.9 and + 0.16.10 alike + * CVE-2025-4574 (boo#1243177): crossbeam-channel is 0.5.17, above the + 0.5.15 fix + * GHSA-7gcf-g7xr-8hxj (boo#1271857): serde_with is not among ruff's + dependencies, so this package is not affected + * Many more fixes and improvements; see upstream's release notes for + the full list + +------------------------------------------------------------------- Old: ---- ruff-0.16.9.tar.gz New: ---- ruff-0.16.10.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-ruff.spec ++++++ --- /var/tmp/diff_new_pack.U9t4Zh/_old 2026-10-03 20:12:33.897169684 +0200 +++ /var/tmp/diff_new_pack.U9t4Zh/_new 2026-10-03 20:12:33.899169767 +0200 @@ -28,13 +28,14 @@ %define origname python-ruff %bcond_without libalternatives Name: %{origname}%{psuffix} -Version: 0.16.9 +Version: 0.16.10 Release: 0 Summary: An extremely fast Python linter, written in Rust # Legal-Review-Notice: ruff itself is MIT, but the binary statically links # the vendored Rust dependencies. Re-derived on this re-vendor with -# "cargo tree --offline -p ruff -e normal" over the vendored tree (297 -# unique crates): the only copyleft licence in the linked graph is +# "cargo tree --offline -p ruff -e normal" over the vendored tree (237 +# unique crates; the count in earlier notices did not reproduce and is +# corrected): the only copyleft licence in the linked graph is # MPL-2.0, from three crates - # - colored, a direct dependency of ruff and ruff_linter, # - option-ext, pulled in through shellexpand -> dirs -> dirs-sys, @@ -50,6 +51,10 @@ Source: https://files.pythonhosted.org/packages/source/r/ruff/ruff-%{version}.tar.gz Source1: vendor.tar.zst BuildRequires: cargo-packaging +# upstream raised its MSRV to 1.97 in 0.16.10 (crates/ruff's workspace +# rust-version); both flavours compile Rust, so the floor sits outside the +# test bcond +BuildRequires: rust >= 1.97 # The test flavour only builds and runs the Rust test suite. It needs no # Python at all, so it skips the singlespec machinery entirely - running # cargo test once per Python flavour would double the cost for no gain. ++++++ ruff-0.16.9.tar.gz -> ruff-0.16.10.tar.gz ++++++ ++++ 6426 lines of diff (skipped) ++++++ vendor.tar.zst ++++++ /work/SRC/openSUSE:Factory/python-ruff/vendor.tar.zst /work/SRC/openSUSE:Factory/.python-ruff.new.1631729/vendor.tar.zst differ: char 7, line 1
