Ah, because pypi.bbclass sets SRC_URI += instead of =. I'll queue a patch
to fix the class.

Alex

On Tue, 22 Jun 2021 at 20:44, Alexander Kanavin via lists.openembedded.org
<[email protected]> wrote:

> Can you please check why 'devtool check-upgrade-status' wasn't able to
> report that all these new versions have been available?
>
> Alex
>
> On Tue, 22 Jun 2021 at 19:37, Trevor Gamblin <[email protected]>
> wrote:
>
>> 21.1.2 contains a fix for CVE-2021-3572
>> (
>> https://github.com/pypa/pip/commit/e46bdda9711392fec0c45c1175bae6db847cb30b
>> )
>>
>> The LICENSE.txt signature changed due to an update to the copyright
>> dates, but the terms are the same.
>>
>> Also update 0001-change-shebang-to-python3.patch to cover all files in
>> pip's src directory, since we need to ensure compatibility.
>>
>> Signed-off-by: Trevor Gamblin <[email protected]>
>> ---
>>  .../0001-change-shebang-to-python3.patch      | 128 ++++++++++++++----
>>  ...n3-pip_20.0.2.bb => python3-pip_21.1.2.bb} |   6 +-
>>  2 files changed, 101 insertions(+), 33 deletions(-)
>>  rename meta/recipes-devtools/python/{python3-pip_20.0.2.bb =>
>> python3-pip_21.1.2.bb} (73%)
>>
>> diff --git
>> a/meta/recipes-devtools/python/python3-pip/0001-change-shebang-to-python3.patch
>> b/meta/recipes-devtools/python/python3-pip/0001-change-shebang-to-python3.patch
>> index 00cffe169b..0187001168 100644
>> ---
>> a/meta/recipes-devtools/python/python3-pip/0001-change-shebang-to-python3.patch
>> +++
>> b/meta/recipes-devtools/python/python3-pip/0001-change-shebang-to-python3.patch
>> @@ -1,32 +1,30 @@
>> -From e7a00e9b5104ae2fbcea32a35c85760b77fae7e5 Mon Sep 17 00:00:00 2001
>> -From: Changqing Li <[email protected]>
>> -Date: Thu, 23 Apr 2020 09:42:10 +0000
>> +From baa85a4dab2e8d64eb25d1181b6420db25ce919a Mon Sep 17 00:00:00 2001
>> +From: Trevor Gamblin <[email protected]>
>> +Date: Tue, 22 Jun 2021 12:31:46 -0400
>>  Subject: [PATCH] change shebang to python3
>>
>> -Upstream-Status: Pending
>> +Upstream-Status: Inappropriate (OE-specific)
>>
>> -pip will drop support of python2 from 21.0
>> +Despite no longer supporting python2, some files in the pip source refer
>> +to "python" instead of "python3", so patch them as needed to ensure that
>> +they correctly reference the python3 binary.
>>
>> -Signed-off-by: Changqing Li <[email protected]>
>> +Signed-off-by: Trevor Gamblin <[email protected]>
>>  ---
>> - src/pip/_internal/__init__.py             | 2 +-
>> - src/pip/_vendor/appdirs.py                | 2 +-
>> - src/pip/_vendor/chardet/cli/chardetect.py | 2 +-
>> - src/pip/_vendor/requests/certs.py         | 2 +-
>> - 4 files changed, 4 insertions(+), 4 deletions(-)
>> + src/pip/_vendor/appdirs.py                    | 2 +-
>> + src/pip/_vendor/chardet/langbulgarianmodel.py | 2 +-
>> + src/pip/_vendor/chardet/langgreekmodel.py     | 2 +-
>> + src/pip/_vendor/chardet/langhebrewmodel.py    | 2 +-
>> + src/pip/_vendor/chardet/langhungarianmodel.py | 2 +-
>> + src/pip/_vendor/chardet/langrussianmodel.py   | 2 +-
>> + src/pip/_vendor/chardet/langthaimodel.py      | 2 +-
>> + src/pip/_vendor/chardet/langturkishmodel.py   | 2 +-
>> + src/pip/_vendor/chardet/metadata/languages.py | 2 +-
>> + src/pip/_vendor/requests/certs.py             | 2 +-
>> + 10 files changed, 10 insertions(+), 10 deletions(-)
>>
>> -diff --git a/src/pip/_internal/__init__.py
>> b/src/pip/_internal/__init__.py
>> -index 3aa8a46..e1ad179 100755
>> ---- a/src/pip/_internal/__init__.py
>> -+++ b/src/pip/_internal/__init__.py
>> -@@ -1,4 +1,4 @@
>> --#!/usr/bin/env python
>> -+#!/usr/bin/env python3
>> - import pip._internal.utils.inject_securetransport  # noqa
>> - from pip._internal.utils.typing import MYPY_CHECK_RUNNING
>> -
>>  diff --git a/src/pip/_vendor/appdirs.py b/src/pip/_vendor/appdirs.py
>> -index 3a52b75..ad3f81d 100644
>> +index 33a3b7741..60b9ef5f7 100644
>>  --- a/src/pip/_vendor/appdirs.py
>>  +++ b/src/pip/_vendor/appdirs.py
>>  @@ -1,4 +1,4 @@
>> @@ -35,18 +33,88 @@ index 3a52b75..ad3f81d 100644
>>   # -*- coding: utf-8 -*-
>>   # Copyright (c) 2005-2010 ActiveState Software Inc.
>>   # Copyright (c) 2013 Eddy Petrișor
>> -diff --git a/src/pip/_vendor/chardet/cli/chardetect.py
>> b/src/pip/_vendor/chardet/cli/chardetect.py
>> -index c61136b..a497e98 100644
>> ---- a/src/pip/_vendor/chardet/cli/chardetect.py
>> -+++ b/src/pip/_vendor/chardet/cli/chardetect.py
>> +diff --git a/src/pip/_vendor/chardet/langbulgarianmodel.py
>> b/src/pip/_vendor/chardet/langbulgarianmodel.py
>> +index e963a5097..97ea6cea8 100644
>> +--- a/src/pip/_vendor/chardet/langbulgarianmodel.py
>> ++++ b/src/pip/_vendor/chardet/langbulgarianmodel.py
>> +@@ -1,4 +1,4 @@
>> +-#!/usr/bin/env python
>> ++#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>> +
>> + from pip._vendor.chardet.sbcharsetprober import SingleByteCharSetModel
>> +diff --git a/src/pip/_vendor/chardet/langgreekmodel.py
>> b/src/pip/_vendor/chardet/langgreekmodel.py
>> +index d99528ede..4a127ea83 100644
>> +--- a/src/pip/_vendor/chardet/langgreekmodel.py
>> ++++ b/src/pip/_vendor/chardet/langgreekmodel.py
>> +@@ -1,4 +1,4 @@
>> +-#!/usr/bin/env python
>> ++#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>> +
>> + from pip._vendor.chardet.sbcharsetprober import SingleByteCharSetModel
>> +diff --git a/src/pip/_vendor/chardet/langhebrewmodel.py
>> b/src/pip/_vendor/chardet/langhebrewmodel.py
>> +index 484c652a4..676c1a711 100644
>> +--- a/src/pip/_vendor/chardet/langhebrewmodel.py
>> ++++ b/src/pip/_vendor/chardet/langhebrewmodel.py
>> +@@ -1,4 +1,4 @@
>> +-#!/usr/bin/env python
>> ++#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>> +
>> + from pip._vendor.chardet.sbcharsetprober import SingleByteCharSetModel
>> +diff --git a/src/pip/_vendor/chardet/langhungarianmodel.py
>> b/src/pip/_vendor/chardet/langhungarianmodel.py
>> +index bbc5cda64..042eae70a 100644
>> +--- a/src/pip/_vendor/chardet/langhungarianmodel.py
>> ++++ b/src/pip/_vendor/chardet/langhungarianmodel.py
>> +@@ -1,4 +1,4 @@
>> +-#!/usr/bin/env python
>> ++#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>> +
>> + from pip._vendor.chardet.sbcharsetprober import SingleByteCharSetModel
>> +diff --git a/src/pip/_vendor/chardet/langrussianmodel.py
>> b/src/pip/_vendor/chardet/langrussianmodel.py
>> +index 5594452b5..564b02e58 100644
>> +--- a/src/pip/_vendor/chardet/langrussianmodel.py
>> ++++ b/src/pip/_vendor/chardet/langrussianmodel.py
>> +@@ -1,4 +1,4 @@
>> +-#!/usr/bin/env python
>> ++#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>> +
>> + from pip._vendor.chardet.sbcharsetprober import SingleByteCharSetModel
>> +diff --git a/src/pip/_vendor/chardet/langthaimodel.py
>> b/src/pip/_vendor/chardet/langthaimodel.py
>> +index 9a37db573..c97487959 100644
>> +--- a/src/pip/_vendor/chardet/langthaimodel.py
>> ++++ b/src/pip/_vendor/chardet/langthaimodel.py
>> +@@ -1,4 +1,4 @@
>> +-#!/usr/bin/env python
>> ++#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>> +
>> + from pip._vendor.chardet.sbcharsetprober import SingleByteCharSetModel
>> +diff --git a/src/pip/_vendor/chardet/langturkishmodel.py
>> b/src/pip/_vendor/chardet/langturkishmodel.py
>> +index 43f4230ae..7e710c371 100644
>> +--- a/src/pip/_vendor/chardet/langturkishmodel.py
>> ++++ b/src/pip/_vendor/chardet/langturkishmodel.py
>> +@@ -1,4 +1,4 @@
>> +-#!/usr/bin/env python
>> ++#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>> +
>> + from pip._vendor.chardet.sbcharsetprober import SingleByteCharSetModel
>> +diff --git a/src/pip/_vendor/chardet/metadata/languages.py
>> b/src/pip/_vendor/chardet/metadata/languages.py
>> +index 3237d5abf..aa2ec7c35 100644
>> +--- a/src/pip/_vendor/chardet/metadata/languages.py
>> ++++ b/src/pip/_vendor/chardet/metadata/languages.py
>>  @@ -1,4 +1,4 @@
>>  -#!/usr/bin/env python
>>  +#!/usr/bin/env python3
>> + # -*- coding: utf-8 -*-
>>   """
>> - Script which takes one or more file paths and reports on their detected
>> - encodings
>> + Metadata about languages used by our model training code for our
>>  diff --git a/src/pip/_vendor/requests/certs.py
>> b/src/pip/_vendor/requests/certs.py
>> -index 06a594e..bfa7839 100644
>> +index 06a594e58..bfa7839a4 100644
>>  --- a/src/pip/_vendor/requests/certs.py
>>  +++ b/src/pip/_vendor/requests/certs.py
>>  @@ -1,4 +1,4 @@
>> @@ -56,5 +124,5 @@ index 06a594e..bfa7839 100644
>>
>>   """
>>  --
>> -2.24.1
>> +2.31.1
>>
>> diff --git a/meta/recipes-devtools/python/python3-pip_20.0.2.bb
>> b/meta/recipes-devtools/python/python3-pip_21.1.2.bb
>> similarity index 73%
>> rename from meta/recipes-devtools/python/python3-pip_20.0.2.bb
>> rename to meta/recipes-devtools/python/python3-pip_21.1.2.bb
>> index 99eeea2edf..fd7a145205 100644
>> --- a/meta/recipes-devtools/python/python3-pip_20.0.2.bb
>> +++ b/meta/recipes-devtools/python/python3-pip_21.1.2.bb
>> @@ -2,14 +2,14 @@ SUMMARY = "The PyPA recommended tool for installing
>> Python packages"
>>  HOMEPAGE = "https://pypi.org/project/pip";
>>  SECTION = "devel/python"
>>  LICENSE = "MIT"
>> -LIC_FILES_CHKSUM =
>> "file://LICENSE.txt;md5=8ba06d529c955048e5ddd7c45459eb2e"
>> +LIC_FILES_CHKSUM =
>> "file://LICENSE.txt;md5=c4fa2b50f55649f43060fa04b0919b9b"
>>
>>  DEPENDS += "python3 python3-setuptools-native"
>>
>>  SRC_URI += "file://0001-change-shebang-to-python3.patch"
>>
>> -SRC_URI[md5sum] = "7d42ba49b809604f0df3d55df1c3fd86"
>> -SRC_URI[sha256sum] =
>> "7db0c8ea4c7ea51c8049640e8e6e7fde949de672bfa4949920675563a5a6967f"
>> +SRC_URI[md5sum] = "a867fd51eacfd5293f5b7e0c2e7867a7"
>> +SRC_URI[sha256sum] =
>> "eb5df6b9ab0af50fe1098a52fd439b04730b6e066887ff7497357b9ebd19f79b"
>>
>>  inherit pypi distutils3
>>
>> --
>> 2.31.1
>>
>>
>>
>>
>>
> 
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#153215): 
https://lists.openembedded.org/g/openembedded-core/message/153215
Mute This Topic: https://lists.openembedded.org/mt/83719361/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to