Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-cramjam for openSUSE:Factory checked in at 2023-01-16 17:59:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-cramjam (Old) and /work/SRC/openSUSE:Factory/.python-cramjam.new.32243 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-cramjam" Mon Jan 16 17:59:14 2023 rev:5 rq:1058591 version:2.6.2 Changes: -------- --- /work/SRC/openSUSE:Factory/python-cramjam/python-cramjam.changes 2022-10-29 20:18:39.218705170 +0200 +++ /work/SRC/openSUSE:Factory/.python-cramjam.new.32243/python-cramjam.changes 2023-01-16 18:01:51.255809817 +0100 @@ -1,0 +2,9 @@ +Fri Jan 13 11:04:41 UTC 2023 - Ben Greiner <[email protected]> + +- Update to v2.6.2 + * Bump pyo3, numpy and expand pyproject.toml by @milesgranger in + #90 +- Updated crate fixes bzip2 < 0.4.4 vulnerability + * boo#1207039, CVE-2023-22895 + +------------------------------------------------------------------- Old: ---- pyrus-cramjam-2.6.1.tar.xz New: ---- pyrus-cramjam-2.6.2.tar.xz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-cramjam.spec ++++++ --- /var/tmp/diff_new_pack.0jwLat/_old 2023-01-16 18:01:53.267821106 +0100 +++ /var/tmp/diff_new_pack.0jwLat/_new 2023-01-16 18:01:53.271821129 +0100 @@ -1,7 +1,7 @@ # # spec file for package python-cramjam # -# Copyright (c) 2022 SUSE LLC +# Copyright (c) 2023 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -16,16 +16,17 @@ # +# Adjust the version in _service and use `rm -rf pyrus-cramjam; osc service runall` in order to update Name: python-cramjam -Version: 2.6.1 +Version: 2.6.2 Release: 0 Summary: Thin Python bindings to de/compression algorithms in Rust License: MIT URL: https://github.com/milesgranger/pyrus-cramjam -# use `rm -rf pyrus-cramjam; osc service runall` in order to update Source: pyrus-cramjam-%{version}.tar.xz Source1: vendor.tar.xz Source2: cargo_config +BuildRequires: %{python_module base >= 3.7} BuildRequires: %{python_module maturin >= 0.13} BuildRequires: %{python_module pip} BuildRequires: cargo-packaging @@ -59,6 +60,6 @@ %files %{python_files} %license LICENSE %{python_sitearch}/cramjam -%{python_sitearch}/cramjam-%{version}*-info +%{python_sitearch}/cramjam-%{version}.dist-info %changelog ++++++ _service ++++++ --- /var/tmp/diff_new_pack.0jwLat/_old 2023-01-16 18:01:53.307821331 +0100 +++ /var/tmp/diff_new_pack.0jwLat/_new 2023-01-16 18:01:53.307821331 +0100 @@ -3,7 +3,8 @@ <param name="url">https://github.com/milesgranger/pyrus-cramjam.git</param> <param name="scm">git</param> <param name="versionformat">@PARENT_TAG@</param> - <param name="revision">master</param> + <!-- can change back to master when there are no .post tags on top of the branch --> + <param name="revision">v2.6.2</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="versionrewrite-replacement">\1</param> </service> ++++++ pyrus-cramjam-2.6.1.tar.xz -> pyrus-cramjam-2.6.2.tar.xz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pyrus-cramjam-2.6.1/.github/workflows/CI.yml new/pyrus-cramjam-2.6.2/.github/workflows/CI.yml --- old/pyrus-cramjam-2.6.1/.github/workflows/CI.yml 2022-10-29 06:31:06.000000000 +0200 +++ new/pyrus-cramjam-2.6.2/.github/workflows/CI.yml 2022-11-09 14:52:11.000000000 +0100 @@ -14,23 +14,20 @@ matrix: python-version: ['3.7', '3.8', '3.9', '3.10', '3.11'] steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v2 + - uses: actions/checkout@v3 + - uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} - name: Install Rust toolchain - uses: actions-rs/toolchain@v1 + uses: dtolnay/rust-toolchain@stable with: - toolchain: stable - target: aarch64-apple-darwin - profile: minimal - default: true + targets: aarch64-apple-darwin - name: Build run: cargo build --release - name: Tests run: cargo test --no-default-features --release - name: Build wheels - x86_64 - uses: messense/maturin-action@v1 + uses: PyO3/maturin-action@v1 with: target: x86_64 args: -i python --release --out dist --sdist @@ -39,7 +36,7 @@ pip install cramjam --no-index --find-links dist --force-reinstall - name: Build wheels - universal2 if: ${{ matrix.python-version >= '3.8' || matrix.python-version == '3.10' }} - uses: messense/maturin-action@v1 + uses: PyO3/maturin-action@v1 with: args: -i python --release --universal2 --out dist - name: Install built wheel - universal2 @@ -51,7 +48,7 @@ pip install -r dev-requirements.txt make test - name: Upload wheels - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: wheels path: dist @@ -63,19 +60,13 @@ python-version: ['3.7', '3.8', '3.9', '3.10', '3.11'] target: [x64, x86] steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v2 + - uses: actions/checkout@v3 + - uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} architecture: ${{ matrix.target }} - - name: Update rustup - run: rustup self update - name: Install Rust toolchain - uses: actions-rs/toolchain@v1 - with: - toolchain: stable - profile: minimal - default: true + uses: dtolnay/rust-toolchain@stable - name: Build if: matrix.target == 'x64' run: cargo build --release @@ -83,7 +74,7 @@ if: matrix.target == 'x64' run: cargo test --no-default-features --release - name: Build wheels - uses: messense/maturin-action@v1 + uses: PyO3/maturin-action@v1 with: target: ${{ matrix.target }} args: -i python --release --out dist @@ -95,7 +86,7 @@ pip install -r dev-requirements.txt make test - name: Upload wheels - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: wheels path: dist @@ -107,24 +98,20 @@ python-version: ['3.7', '3.8', '3.9', '3.10', '3.11'] target: [x86_64, i686] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Install Rust toolchain - uses: actions-rs/toolchain@v1 - with: - toolchain: stable - profile: minimal - default: true + uses: dtolnay/rust-toolchain@stable - name: Build run: cargo build --release - name: Tests run: cargo test --no-default-features --release - - uses: actions/setup-python@v2 + - uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} - name: Audit run: cargo install cargo-audit && cargo audit - name: Build Wheels - uses: messense/maturin-action@v1 + uses: PyO3/maturin-action@v1 with: target: ${{ matrix.target }} manylinux: auto @@ -141,7 +128,7 @@ pip uninstall numpy -y python -m pytest tests/test_no_numpy.py - name: Upload wheels - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: wheels path: dist @@ -165,14 +152,14 @@ - python: pypy3.9 target: aarch64 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Build Wheels - uses: messense/maturin-action@v1 + uses: PyO3/maturin-action@v1 with: target: ${{ matrix.target }} manylinux: auto args: -i ${{ matrix.python }} --release --out dist --no-default-features --features=extension-module # disable mimallocator - - uses: uraimo/[email protected] + - uses: uraimo/[email protected] # skipped cross compiled pypy wheel tests for now if: ${{ !startsWith(matrix.python, 'pypy') }} name: Install built wheel @@ -197,7 +184,7 @@ venv/bin/pip install cramjam --no-index --find-links /artifacts --force-reinstall venv/bin/python -c 'import cramjam' - name: Upload wheels - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: wheels path: dist @@ -211,12 +198,12 @@ - pypy-3.8 - pypy-3.9 steps: - - uses: actions/checkout@v2 - - uses: actions/setup-python@v2 + - uses: actions/checkout@v3 + - uses: actions/setup-python@v4 with: python-version: ${{ matrix.python }} - name: Build Wheels - uses: messense/maturin-action@v1 + uses: PyO3/maturin-action@v1 with: target: ${{ matrix.target }} manylinux: auto @@ -226,7 +213,7 @@ pip install cramjam --no-index --find-links dist pypy -c "import cramjam" - name: Upload wheels - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: wheels path: dist @@ -237,14 +224,10 @@ matrix: python-version: [ pypy-3.7, pypy-3.8, pypy-3.9 ] steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v3 - name: Install Rust toolchain - uses: actions-rs/toolchain@v1 - with: - toolchain: stable - profile: minimal - default: true - - uses: actions/setup-python@v2 + uses: dtolnay/rust-toolchain@stable + - uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} - name: Install maturin @@ -258,7 +241,7 @@ pip install cramjam --no-index --find-links dist pypy -c "import cramjam" - name: Upload wheels - uses: actions/upload-artifact@v2 + uses: actions/upload-artifact@v3 with: name: wheels path: dist @@ -269,16 +252,16 @@ if: "startsWith(github.ref, 'refs/tags/')" needs: [ macos, windows, linux, linux-cross, pypy-linux, pypy-macos ] steps: - - uses: actions/download-artifact@v2 + - uses: actions/download-artifact@v3 with: name: wheels - - uses: actions/setup-python@v2 + - uses: actions/setup-python@v4 with: - python-version: 3.9 - - name: Publish to PyPi + python-version: '3.10' + - name: Publish to PyPI env: TWINE_USERNAME: __token__ TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }} run: | - pip install --upgrade wheel pip setuptools twine + pip install --upgrade twine twine upload --skip-existing * diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pyrus-cramjam-2.6.1/Cargo.lock new/pyrus-cramjam-2.6.2/Cargo.lock --- old/pyrus-cramjam-2.6.1/Cargo.lock 2022-10-29 06:31:06.000000000 +0200 +++ new/pyrus-cramjam-2.6.2/Cargo.lock 2022-11-09 14:52:11.000000000 +0100 @@ -9,6 +9,17 @@ checksum = "f26201604c87b1e01bd3d98f8d5d9a8fcbb815e8cedb41ffccbeb4bf593a35fe" [[package]] +name = "ahash" +version = "0.7.6" +source = "registry+https://github.com/rust-lang/crates.io-index"; +checksum = "fcb51a0695d8f838b1ee009b3fbf66bda078cd64590202a864a8f3e8c4315c47" +dependencies = [ + "getrandom", + "once_cell", + "version_check", +] + +[[package]] name = "alloc-no-stdlib" version = "2.0.4" source = "registry+https://github.com/rust-lang/crates.io-index"; @@ -94,7 +105,7 @@ [[package]] name = "cramjam" -version = "2.6.1" +version = "2.6.2" dependencies = [ "brotli", "bzip2", @@ -129,6 +140,17 @@ ] [[package]] +name = "getrandom" +version = "0.2.8" +source = "registry+https://github.com/rust-lang/crates.io-index"; +checksum = "c05aeb6a22b8f62540c194aac980f2115af067bfe15a0734d7277a768d396b31" +dependencies = [ + "cfg-if", + "libc", + "wasi", +] + +[[package]] name = "indoc" version = "1.0.6" source = "registry+https://github.com/rust-lang/crates.io-index"; @@ -198,6 +220,15 @@ ] [[package]] +name = "memoffset" +version = "0.6.5" +source = "registry+https://github.com/rust-lang/crates.io-index"; +checksum = "5aa361d4faea93603064a027415f07bd8e1d5c88c9fbf68bf56a285428fd79ce" +dependencies = [ + "autocfg", +] + +[[package]] name = "mimalloc" version = "0.1.29" source = "registry+https://github.com/rust-lang/crates.io-index"; @@ -258,13 +289,15 @@ [[package]] name = "numpy" -version = "0.16.2" +version = "0.17.2" source = "registry+https://github.com/rust-lang/crates.io-index"; -checksum = "383ae168529a39fc97cbc1d9d4fa865377731a519bc27553ed96f50594de7c45" +checksum = "a462c1af5ba1fddec1488c4646993a23ae7931f9e170ccba23e9c7c834277797" dependencies = [ + "ahash", "libc", "ndarray", "num-complex", + "num-integer", "num-traits", "pyo3", ] @@ -315,13 +348,14 @@ [[package]] name = "pyo3" -version = "0.16.5" +version = "0.17.3" source = "registry+https://github.com/rust-lang/crates.io-index"; -checksum = "1e6302e85060011447471887705bb7838f14aba43fcb06957d823739a496b3dc" +checksum = "268be0c73583c183f2b14052337465768c07726936a260f480f0857cb95ba543" dependencies = [ "cfg-if", "indoc", "libc", + "memoffset", "parking_lot", "pyo3-build-config", "pyo3-ffi", @@ -331,9 +365,9 @@ [[package]] name = "pyo3-build-config" -version = "0.16.5" +version = "0.17.3" source = "registry+https://github.com/rust-lang/crates.io-index"; -checksum = "b5b65b546c35d8a3b1b2f0ddbac7c6a569d759f357f2b9df884f5d6b719152c8" +checksum = "28fcd1e73f06ec85bf3280c48c67e731d8290ad3d730f8be9dc07946923005c8" dependencies = [ "once_cell", "target-lexicon", @@ -341,9 +375,9 @@ [[package]] name = "pyo3-ffi" -version = "0.16.5" +version = "0.17.3" source = "registry+https://github.com/rust-lang/crates.io-index"; -checksum = "c275a07127c1aca33031a563e384ffdd485aee34ef131116fcd58e3430d1742b" +checksum = "0f6cb136e222e49115b3c51c32792886defbfb0adead26a688142b346a0b9ffc" dependencies = [ "libc", "pyo3-build-config", @@ -351,9 +385,9 @@ [[package]] name = "pyo3-macros" -version = "0.16.5" +version = "0.17.3" source = "registry+https://github.com/rust-lang/crates.io-index"; -checksum = "284fc4485bfbcc9850a6d661d627783f18d19c2ab55880b021671c4ba83e90f7" +checksum = "94144a1266e236b1c932682136dc35a9dee8d3589728f68130c7c3861ef96b28" dependencies = [ "proc-macro2", "pyo3-macros-backend", @@ -363,9 +397,9 @@ [[package]] name = "pyo3-macros-backend" -version = "0.16.5" +version = "0.17.3" source = "registry+https://github.com/rust-lang/crates.io-index"; -checksum = "53bda0f58f73f5c5429693c96ed57f7abdb38fdfc28ae06da4101a257adb7faf" +checksum = "c8df9be978a2d2f0cdebabb03206ed73b11314701a5bfe71b0d753b81997777f" dependencies = [ "proc-macro2", "quote", @@ -444,6 +478,18 @@ checksum = "52fee519a3e570f7df377a06a1a7775cdbfb7aa460be7e08de2b1f0e69973a44" [[package]] +name = "version_check" +version = "0.9.4" +source = "registry+https://github.com/rust-lang/crates.io-index"; +checksum = "49874b5167b65d7193b8aba1567f5c7d93d001cafc34600cee003eda787e483f" + +[[package]] +name = "wasi" +version = "0.11.0+wasi-snapshot-preview1" +source = "registry+https://github.com/rust-lang/crates.io-index"; +checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423" + +[[package]] name = "windows-sys" version = "0.36.1" source = "registry+https://github.com/rust-lang/crates.io-index"; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pyrus-cramjam-2.6.1/Cargo.toml new/pyrus-cramjam-2.6.2/Cargo.toml --- old/pyrus-cramjam-2.6.1/Cargo.toml 2022-10-29 06:31:06.000000000 +0200 +++ new/pyrus-cramjam-2.6.2/Cargo.toml 2022-11-09 14:52:11.000000000 +0100 @@ -1,9 +1,9 @@ [package] name = "cramjam" -version = "2.6.1" +version = "2.6.2" authors = ["Miles Granger <[email protected]>"] edition = "2018" -license-file = "LICENSE" +license = "MIT" description = "Thin Python bindings to de/compression algorithms in Rust" readme = "README.md" @@ -22,14 +22,14 @@ opt-level = 3 [dependencies] -pyo3 = { version = "0.16", default-features = false, features = ["macros"] } +pyo3 = { version = "^0.17", default-features = false, features = ["macros"] } snap = "^1" brotli = { version = "^3", default-features = false, features = ["std"] } bzip2 = "^0.4" lz4 = "^1" flate2 = "^1" zstd = "0.11.1+zstd.1.5.2" -numpy = "0.16" +numpy = "^0.17" [dependencies.mimalloc] version = "0.1.24" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pyrus-cramjam-2.6.1/README.md new/pyrus-cramjam-2.6.2/README.md --- old/pyrus-cramjam-2.6.1/README.md 2022-10-29 06:31:06.000000000 +0200 +++ new/pyrus-cramjam-2.6.2/README.md 2022-11-09 14:52:11.000000000 +0100 @@ -3,7 +3,7 @@ [](https://github.com/python/black) [](https://github.com/milesgranger/pyrus-cramjam/actions?query=branch=master) [](https://pypi.org/project/cramjam) -[](https://conda.anaconda.org/conda-forge) +[](https://anaconda.org/conda-forge/cramjam) [](https://pepy.tech/project/cramjam) [API Documentation](https://docs.rs/cramjam) diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pyrus-cramjam-2.6.1/pyproject.toml new/pyrus-cramjam-2.6.2/pyproject.toml --- old/pyrus-cramjam-2.6.1/pyproject.toml 2022-10-29 06:31:06.000000000 +0200 +++ new/pyrus-cramjam-2.6.2/pyproject.toml 2022-11-09 14:52:11.000000000 +0100 @@ -1,3 +1,13 @@ +[project] +name = "cramjam" +keywords = ["compression", "decompression", "snappy", "zstd", "bz2", "gzip", "lz4", "brotli", "deflate"] +requires-python = ">=3.7" + +[project.urls] +homepage = "https://github.com/milesgranger/pyrus-cramjam"; +documentation = "https://docs.rs/cramjam/latest/cramjam"; +repository = "https://github.com/milesgranger/pyrus-cramjam"; + [build-system] requires = ["maturin>=0.13,<0.14"] build-backend = "maturin" ++++++ vendor.tar.xz ++++++ /work/SRC/openSUSE:Factory/python-cramjam/vendor.tar.xz /work/SRC/openSUSE:Factory/.python-cramjam.new.32243/vendor.tar.xz differ: char 25, line 1
