Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-multidict for openSUSE:Factory checked in at 2026-10-13 17:43:31 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-multidict (Old) and /work/SRC/openSUSE:Factory/.python-multidict.new.3698736 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-multidict" Tue Oct 13 17:43:31 2026 rev:24 rq:1384172 version:7.0.0 Changes: -------- --- /work/SRC/openSUSE:Factory/python-multidict/python-multidict.changes 2026-04-13 23:18:44.103748555 +0200 +++ /work/SRC/openSUSE:Factory/.python-multidict.new.3698736/python-multidict.changes 2026-10-13 17:44:09.492330311 +0200 @@ -1,0 +2,35 @@ +Tue Oct 6 08:46:13 UTC 2026 - Nico Krapp <[email protected]> + +- Update to 7.0.0 + * 7.0.0 is a major release. It makes istr final, adds a + public C API for third-party extensions, and makes the C extension + substantially faster across the board. + * Breaking change: istr can no longer be subclassed, + on either backend. Code that subclassed it has to wrap or convert instead. + The C extension also started rejecting an argument passed both + positionally and by name with TypeError, where it used to silently + misbehave. + * Public C and Cython API. Other C extensions and Cython modules can now + create, read and mutate multidicts through a capsule, without going through + the Python-level API. The capsule comes with multidict_capi.h, a + cimport-able multidict/__init__.pxd and + multidict.get_include(). The API includes MultiDict_ForEach() and + a watchers API modeled on CPython's dict watchers. See the C API and + Cython API references. + * Performance. On CodSpeed's GIL-build benchmarks against 6.9.1, 82 + C-extension benchmarks got faster and none got slower. + The pure-Python backend is unchanged in speed. + * Robustness. This release fixed several crashes and leaks in the C + extension, including use-after-free bugs when a key's lower() or a + value's __eq__ mutated a multidict, a crash at interpreter shutdown, + and table and reference leaks on the free-threaded build. + * full changelog: https://github.com/aio-libs/multidict/releases/tag/v7.0.0 +- Update to 6.9.1 (fixes CVE-2026-104874 (bsc#1284174)) + * Fixed a reference leak in the C extension where operand | md.items() + and md.items() - operand leaked one key and one value reference per + element of operand, letting a large operand grow memory without bound + (GHSA-54p9-h82j-f925) + * full changelog: https://github.com/aio-libs/multidict/releases/tag/v6.9.1 +- add coverage dependencies as they are needed for subprocess calls + +------------------------------------------------------------------- Old: ---- multidict-6.7.1.tar.gz New: ---- multidict-7.0.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-multidict.spec ++++++ --- /var/tmp/diff_new_pack.bNknTl/_old 2026-10-13 17:44:10.240361660 +0200 +++ /var/tmp/diff_new_pack.bNknTl/_new 2026-10-13 17:44:10.242361744 +0200 @@ -18,26 +18,27 @@ %{?sle15_python_module_pythons} Name: python-multidict -Version: 6.7.1 +Version: 7.0.0 Release: 0 Summary: Multidict implementation License: Apache-2.0 URL: https://github.com/aio-libs/multidict Source: https://files.pythonhosted.org/packages/source/m/multidict/multidict-%{version}.tar.gz BuildRequires: %{python_module Cython} +BuildRequires: %{python_module base >= 3.10} +BuildRequires: %{python_module coverage} BuildRequires: %{python_module devel} BuildRequires: %{python_module objgraph} BuildRequires: %{python_module pip} BuildRequires: %{python_module psutil} +BuildRequires: %{python_module pytest-cov} BuildRequires: %{python_module pytest} -BuildRequires: %{python_module setuptools >= 40} -BuildRequires: %{python_module typing-extensions >= 4.1.0 if %python-base < 3.10} +BuildRequires: %{python_module setuptools >= 77} +BuildRequires: %{python_module testsuite} +BuildRequires: %{python_module typing-extensions >= 4.1.0 if %python-base < 3.11} BuildRequires: %{python_module wheel} BuildRequires: fdupes BuildRequires: python-rpm-macros -%if 0%{?python_version_nodots} < 310 -Requires: python-typing-extensions >= 4.1.0 -%endif %python_subpackages %description @@ -58,8 +59,6 @@ %python_expand %fdupes %{buildroot}%{$python_sitearch} %check -# remove the extra pytest opts -rm pytest.ini # remove codespeed tests rm tests/test_*_benchmarks.py # test_circular_imports try to import from the system and the module ++++++ multidict-6.7.1.tar.gz -> multidict-7.0.0.tar.gz ++++++ ++++ 32564 lines of diff (skipped)
