[GitHub] [qpid-broker-j] dakirily opened a new pull request, #173: QPID-8620 - [Broker-J] HTTP management plugin can reveal system data or debug information
dakirily opened a new pull request, #173: URL: https://github.com/apache/qpid-broker-j/pull/173 This PR addresses [QPID-8620](https://issues.apache.org/jira/browse/QPID-8620), reduces the risk of disclosing system data or debug information -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Commented] (QPID-8620) [Broker-J] HTTP management plugin can reveal system data or debug information
[ https://issues.apache.org/jira/browse/QPID-8620?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17682872#comment-17682872 ] ASF GitHub Bot commented on QPID-8620: -- dakirily opened a new pull request, #173: URL: https://github.com/apache/qpid-broker-j/pull/173 This PR addresses [QPID-8620](https://issues.apache.org/jira/browse/QPID-8620), reduces the risk of disclosing system data or debug information > [Broker-J] HTTP management plugin can reveal system data or debug information > - > > Key: QPID-8620 > URL: https://issues.apache.org/jira/browse/QPID-8620 > Project: Qpid > Issue Type: Improvement > Components: Broker-J >Affects Versions: qpid-java-broker-9.0.0 >Reporter: Daniil Kirilyuk >Priority: Minor > Fix For: qpid-java-broker-9.0.1 > > > The function writeObjectToResponse() in AbstractServlet.java reveals system > data or debug information by calling writeValue(). AbstractServlet, > RestServlet and QueryServlet return error details on exceptions. The error > details should be logged instead and a generic error message should be return > in the HttpServletResponse. -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Created] (QPID-8620) [Broker-J] HTTP management plugin can reveal system data or debug information
Daniil Kirilyuk created QPID-8620: - Summary: [Broker-J] HTTP management plugin can reveal system data or debug information Key: QPID-8620 URL: https://issues.apache.org/jira/browse/QPID-8620 Project: Qpid Issue Type: Improvement Components: Broker-J Affects Versions: qpid-java-broker-9.0.0 Reporter: Daniil Kirilyuk Fix For: qpid-java-broker-9.0.1 The function writeObjectToResponse() in AbstractServlet.java reveals system data or debug information by calling writeValue(). AbstractServlet, RestServlet and QueryServlet return error details on exceptions. The error details should be logged instead and a generic error message should be return in the HttpServletResponse. -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Commented] (PROTON-2095) Move away from SWIG to CFFI
[ https://issues.apache.org/jira/browse/PROTON-2095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17682765#comment-17682765 ] ASF subversion and git services commented on PROTON-2095: - Commit fec172cfdaa888f4cabace21f2ad435adb5fe9e9 in qpid-proton's branch refs/heads/main from Andrew Stitcher [ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=fec172cfd ] PROTON-2095: Fix some harmless (but distracting and unnecessary) warnings > Move away from SWIG to CFFI > --- > > Key: PROTON-2095 > URL: https://issues.apache.org/jira/browse/PROTON-2095 > Project: Qpid Proton > Issue Type: Wish > Components: python-binding >Affects Versions: proton-c-0.29.0, proton-c-future >Reporter: Omer Katz >Assignee: Andrew Stitcher >Priority: Major > Fix For: proton-c-0.39.0 > > > SWIG is fine but we're not using it for anything other than exporting all of > proton-c's API as is. > Unfortunately SWIG only generates CPython extension bindings. This may be a > problem on PyPy where CPython extensions are either slow or simply won't > compile. > Unlike SWIG, CFFI is portable both on CPython and PyPy. > It also satisfies the same requirements as SWIG currently does. > In addition, calls to CFFI simply release the GIL which will help > parallelizing Python applications using threads. > By using CFFI we can also get rid of all of our setup.py code and simply use > it to build the extension. We will also no longer have problems building > wheels. > The newest version of CFFI supports pkg-config so we can use that to find > proton-c easily. > I'm willing to help with the refactor but I'll need a mentor since I'm not > familiar with the code base. > -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Comment Edited] (PROTON-2679) Parallel build of python bindings occasionally fails
[ https://issues.apache.org/jira/browse/PROTON-2679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17682746#comment-17682746 ] Andrew Stitcher edited comment on PROTON-2679 at 1/31/23 8:37 PM: -- A possible fix for this issue has been committed to PROTON-2095. was (Author: astitcher): A possible fix for this issua has been committed to PROTON-2095. > Parallel build of python bindings occasionally fails > > > Key: PROTON-2679 > URL: https://issues.apache.org/jira/browse/PROTON-2679 > Project: Qpid Proton > Issue Type: Bug > Components: python-binding >Affects Versions: proton-c-0.39.0 >Reporter: Ken Giusti >Assignee: Andrew Stitcher >Priority: Major > > See skupper CI failure: > [https://github.com/skupperproject/skupper-router/actions/runs/4056555498/jobs/6981190135#step:17:234] > Appears to be trying to build the same file twice: > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py > proton/_condition.py > > [ 38%] Generating proton/_condition.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py > proton/_condition.py > > [ 39%] Generating proton/_data.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py > proton/_data.py > > [ 40%] Generating proton/_data.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py > proton/_data.py > > Error copying file > "/home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py" > to "proton/_condition.py". > > gmake[2]: *** [python/CMakeFiles/pydist.dir/build.make:280: > python/proton/_condition.py] Error 1 > > gmake[2]: *** Deleting file 'python/proton/_condition.py' > > gmake[2]: *** Waiting for unfinished jobs > > gmake[1]: *** [CMakeFiles/Makefile2:572: python/CMakeFiles/pydist.dir/all] > Error 2 > > gmake[2]: Leaving directory > '/__w/skupper-router/skupper-router/qpid-proton/build' > > gmake[1]: *** Waiting for unfinished jobs -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Commented] (PROTON-2679) Parallel build of python bindings occasionally fails
[ https://issues.apache.org/jira/browse/PROTON-2679?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17682746#comment-17682746 ] Andrew Stitcher commented on PROTON-2679: - A possible fix for this issua has been committed to PROTON-2095. > Parallel build of python bindings occasionally fails > > > Key: PROTON-2679 > URL: https://issues.apache.org/jira/browse/PROTON-2679 > Project: Qpid Proton > Issue Type: Bug > Components: python-binding >Affects Versions: proton-c-0.39.0 >Reporter: Ken Giusti >Assignee: Andrew Stitcher >Priority: Major > > See skupper CI failure: > [https://github.com/skupperproject/skupper-router/actions/runs/4056555498/jobs/6981190135#step:17:234] > Appears to be trying to build the same file twice: > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py > proton/_condition.py > > [ 38%] Generating proton/_condition.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py > proton/_condition.py > > [ 39%] Generating proton/_data.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py > proton/_data.py > > [ 40%] Generating proton/_data.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py > proton/_data.py > > Error copying file > "/home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py" > to "proton/_condition.py". > > gmake[2]: *** [python/CMakeFiles/pydist.dir/build.make:280: > python/proton/_condition.py] Error 1 > > gmake[2]: *** Deleting file 'python/proton/_condition.py' > > gmake[2]: *** Waiting for unfinished jobs > > gmake[1]: *** [CMakeFiles/Makefile2:572: python/CMakeFiles/pydist.dir/all] > Error 2 > > gmake[2]: Leaving directory > '/__w/skupper-router/skupper-router/qpid-proton/build' > > gmake[1]: *** Waiting for unfinished jobs -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Commented] (PROTON-2095) Move away from SWIG to CFFI
[ https://issues.apache.org/jira/browse/PROTON-2095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17682741#comment-17682741 ] ASF subversion and git services commented on PROTON-2095: - Commit 833bf2ffa8796a313e5c43c4276229eddeb0affd in qpid-proton's branch refs/heads/main from Andrew Stitcher [ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=833bf2ffa ] PROTON-2095: Change the Python build dependencies This should hopefully avoid mutliple custom target trying to build the same custom commands in parallel and failing. We chieve this by making the custom targets serialised. > Move away from SWIG to CFFI > --- > > Key: PROTON-2095 > URL: https://issues.apache.org/jira/browse/PROTON-2095 > Project: Qpid Proton > Issue Type: Wish > Components: python-binding >Affects Versions: proton-c-0.29.0, proton-c-future >Reporter: Omer Katz >Assignee: Andrew Stitcher >Priority: Major > Fix For: proton-c-0.39.0 > > > SWIG is fine but we're not using it for anything other than exporting all of > proton-c's API as is. > Unfortunately SWIG only generates CPython extension bindings. This may be a > problem on PyPy where CPython extensions are either slow or simply won't > compile. > Unlike SWIG, CFFI is portable both on CPython and PyPy. > It also satisfies the same requirements as SWIG currently does. > In addition, calls to CFFI simply release the GIL which will help > parallelizing Python applications using threads. > By using CFFI we can also get rid of all of our setup.py code and simply use > it to build the extension. We will also no longer have problems building > wheels. > The newest version of CFFI supports pkg-config so we can use that to find > proton-c easily. > I'm willing to help with the refactor but I'll need a mentor since I'm not > familiar with the code base. > -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Commented] (PROTON-2678) Use Python Limited API and create universal wheel when building Qpid Proton Python client
[
https://issues.apache.org/jira/browse/PROTON-2678?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17682740#comment-17682740
]
ASF subversion and git services commented on PROTON-2678:
-
Commit b1dc4d8746ac95dde2f69a81566082ee30f606bd in qpid-proton's branch
refs/heads/main from Andrew Stitcher
[ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=b1dc4d874 ]
PROTON-2678: Mark the created CFFI package as multiversion
We were already building a multiversion package as that is what cffi
does by default. We just needed to tell bdist_wheel to create the
correct file name.
> Use Python Limited API and create universal wheel when building Qpid Proton
> Python client
> -
>
> Key: PROTON-2678
> URL: https://issues.apache.org/jira/browse/PROTON-2678
> Project: Qpid Proton
> Issue Type: New Feature
>Affects Versions: proton-c-0.39.0
>Reporter: Jiri Daněk
>Priority: Major
>
> Currently, the build produces Python-version-specific wheels
> {noformat}
> creating 'dist/python_qpid_proton-0.39.0.dev0-cp311-cp311-linux_x86_64
> {noformat}
> Python is able to create universal wheels that can be installed on any
> (reasonably new) Python version. See
> #. https://peps.python.org/pep-0425/#overview
> {quote}The CPython stable ABI is abi3 as in the shared library suffix.{quote}
> #.
> https://docs.python.org/3/c-api/stable.html#stable-application-binary-interface
> #. https://docs.python.org/3/c-api/stable.html#c.Py_LIMITED_API
> {quote}Define Py_LIMITED_API to the value of PY_VERSION_HEX corresponding to
> the lowest Python version your extension supports. The extension will work
> without recompilation with all Python 3 releases from the specified one
> onward, and can use Limited API introduced up to that version.{quote}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
-
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Commented] (PROTON-2095) Move away from SWIG to CFFI
[ https://issues.apache.org/jira/browse/PROTON-2095?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17682739#comment-17682739 ] ASF subversion and git services commented on PROTON-2095: - Commit e0f919365459c69f9a783b790e359b6835a54198 in qpid-proton's branch refs/heads/main from Andrew Stitcher [ https://gitbox.apache.org/repos/asf?p=qpid-proton.git;h=e0f919365 ] PROTON-2095: Fix language binding documentation The Proton Python binding now only builds package files. This is now reflected in the docs. The Ruby binding changed long ago but the docs were unchanged at that time, this has no been fixed. Also updated the instructions for newer versions of Visual Studio. > Move away from SWIG to CFFI > --- > > Key: PROTON-2095 > URL: https://issues.apache.org/jira/browse/PROTON-2095 > Project: Qpid Proton > Issue Type: Wish > Components: python-binding >Affects Versions: proton-c-0.29.0, proton-c-future >Reporter: Omer Katz >Assignee: Andrew Stitcher >Priority: Major > Fix For: proton-c-0.39.0 > > > SWIG is fine but we're not using it for anything other than exporting all of > proton-c's API as is. > Unfortunately SWIG only generates CPython extension bindings. This may be a > problem on PyPy where CPython extensions are either slow or simply won't > compile. > Unlike SWIG, CFFI is portable both on CPython and PyPy. > It also satisfies the same requirements as SWIG currently does. > In addition, calls to CFFI simply release the GIL which will help > parallelizing Python applications using threads. > By using CFFI we can also get rid of all of our setup.py code and simply use > it to build the extension. We will also no longer have problems building > wheels. > The newest version of CFFI supports pkg-config so we can use that to find > proton-c easily. > I'm willing to help with the refactor but I'll need a mentor since I'm not > familiar with the code base. > -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Assigned] (PROTON-2679) Parallel build of python bindings occasionally fails
[ https://issues.apache.org/jira/browse/PROTON-2679?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ] Ken Giusti reassigned PROTON-2679: -- Assignee: Andrew Stitcher > Parallel build of python bindings occasionally fails > > > Key: PROTON-2679 > URL: https://issues.apache.org/jira/browse/PROTON-2679 > Project: Qpid Proton > Issue Type: Bug > Components: python-binding >Affects Versions: proton-c-0.39.0 >Reporter: Ken Giusti >Assignee: Andrew Stitcher >Priority: Major > > See skupper CI failure: > [https://github.com/skupperproject/skupper-router/actions/runs/4056555498/jobs/6981190135#step:17:234] > Appears to be trying to build the same file twice: > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py > proton/_condition.py > > [ 38%] Generating proton/_condition.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py > proton/_condition.py > > [ 39%] Generating proton/_data.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py > proton/_data.py > > [ 40%] Generating proton/_data.py > > cd /__w/skupper-router/skupper-router/qpid-proton/build/python && > /usr/bin/cmake -E copy > /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py > proton/_data.py > > Error copying file > "/home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py" > to "proton/_condition.py". > > gmake[2]: *** [python/CMakeFiles/pydist.dir/build.make:280: > python/proton/_condition.py] Error 1 > > gmake[2]: *** Deleting file 'python/proton/_condition.py' > > gmake[2]: *** Waiting for unfinished jobs > > gmake[1]: *** [CMakeFiles/Makefile2:572: python/CMakeFiles/pydist.dir/all] > Error 2 > > gmake[2]: Leaving directory > '/__w/skupper-router/skupper-router/qpid-proton/build' > > gmake[1]: *** Waiting for unfinished jobs -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[jira] [Created] (PROTON-2679) Parallel build of python bindings occasionally fails
Ken Giusti created PROTON-2679: -- Summary: Parallel build of python bindings occasionally fails Key: PROTON-2679 URL: https://issues.apache.org/jira/browse/PROTON-2679 Project: Qpid Proton Issue Type: Bug Components: python-binding Affects Versions: proton-c-0.39.0 Reporter: Ken Giusti See skupper CI failure: [https://github.com/skupperproject/skupper-router/actions/runs/4056555498/jobs/6981190135#step:17:234] Appears to be trying to build the same file twice: cd /__w/skupper-router/skupper-router/qpid-proton/build/python && /usr/bin/cmake -E copy /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py proton/_condition.py [ 38%] Generating proton/_condition.py cd /__w/skupper-router/skupper-router/qpid-proton/build/python && /usr/bin/cmake -E copy /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py proton/_condition.py [ 39%] Generating proton/_data.py cd /__w/skupper-router/skupper-router/qpid-proton/build/python && /usr/bin/cmake -E copy /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py proton/_data.py [ 40%] Generating proton/_data.py cd /__w/skupper-router/skupper-router/qpid-proton/build/python && /usr/bin/cmake -E copy /home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_data.py proton/_data.py Error copying file "/home/runner/work/skupper-router/skupper-router/qpid-proton/python/proton/_condition.py" to "proton/_condition.py". gmake[2]: *** [python/CMakeFiles/pydist.dir/build.make:280: python/proton/_condition.py] Error 1 gmake[2]: *** Deleting file 'python/proton/_condition.py' gmake[2]: *** Waiting for unfinished jobs gmake[1]: *** [CMakeFiles/Makefile2:572: python/CMakeFiles/pydist.dir/all] Error 2 gmake[2]: Leaving directory '/__w/skupper-router/skupper-router/qpid-proton/build' gmake[1]: *** Waiting for unfinished jobs -- This message was sent by Atlassian Jira (v8.20.10#820010) - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[GitHub] [qpid-dispatch] dependabot[bot] commented on pull request #1612: Bump typescript from 4.6.2 to 4.9.4 in /console/react
dependabot[bot] commented on PR #1612: URL: https://github.com/apache/qpid-dispatch/pull/1612#issuecomment-1410745246 Superseded by #1622. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[GitHub] [qpid-dispatch] dependabot[bot] closed pull request #1612: Bump typescript from 4.6.2 to 4.9.4 in /console/react
dependabot[bot] closed pull request #1612: Bump typescript from 4.6.2 to 4.9.4 in /console/react URL: https://github.com/apache/qpid-dispatch/pull/1612 -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org - To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org For additional commands, e-mail: dev-h...@qpid.apache.org
[GitHub] [qpid-dispatch] dependabot[bot] opened a new pull request, #1621: Bump docker/build-push-action from 3 to 4
dependabot[bot] opened a new pull request, #1621: URL: https://github.com/apache/qpid-dispatch/pull/1621 Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 3 to 4. Release notes Sourced from https://github.com/docker/build-push-action/releases;>docker/build-push-action's releases. v4.0.0 Warning Buildx v0.10 enables support for a minimal https://slsa.dev/provenance/;>SLSA Provenance attestation, which requires support for https://github.com/opencontainers/image-spec;>OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. https://github-redirect.dependabot.com/docker/buildx/issues/1533;>Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false. Revert disable provenance by default if not set by https://github.com/crazy-max;>@crazy-max in https://github-redirect.dependabot.com/docker/build-push-action/pull/784;>docker/build-push-action#784 Full Changelog: https://github.com/docker/build-push-action/compare/v3.3.1...v4.0.0;>https://github.com/docker/build-push-action/compare/v3.3.1...v4.0.0 v3.3.1 Disable provenance by default if not set by https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/781;>#781) Full Changelog: https://github.com/docker/build-push-action/compare/v3.3.0...v3.3.1;>https://github.com/docker/build-push-action/compare/v3.3.0...v3.3.1 v3.3.0 Warning Buildx v0.10 enables support for a minimal https://slsa.dev/provenance/;>SLSA Provenance attestation, which requires support for https://github.com/opencontainers/image-spec;>OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. https://github-redirect.dependabot.com/docker/buildx/issues/1533;>Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false. Add attests, provenance and sbom inputs by https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/746;>#746 https://github-redirect.dependabot.com/docker/build-push-action/issues/759;>#759) Log GitHub Actions runtime token access controls by https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/707;>#707) Examples moved to https://docs.docker.com/build/ci/github-actions/examples/;>docs website by https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/718;>#718) Bump minimatch from 3.0.4 to 3.1.2 (https://github-redirect.dependabot.com/docker/build-push-action/issues/732;>#732) Bump csv-parse from 5.3.0 to 5.3.3 (https://github-redirect.dependabot.com/docker/build-push-action/issues/729;>#729) Bump json5 from 2.2.0 to 2.2.3 (https://github-redirect.dependabot.com/docker/build-push-action/issues/749;>#749) Full Changelog: https://github.com/docker/build-push-action/compare/v3.2.0...v3.3.0;>https://github.com/docker/build-push-action/compare/v3.2.0...v3.3.0 v3.2.0 Remove workaround for setOutput by https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/704;>#704) Docs: fix Git context link and add more details about subdir support by https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/685;>#685) Docs: named context by https://github.com/baibaratsky;>@baibaratsky and https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/665;>#665) Bump @actions/core from 1.9.0 to 1.10.0 (https://github-redirect.dependabot.com/docker/build-push-action/issues/667;>#667 https://github-redirect.dependabot.com/docker/build-push-action/issues/695;>#695) Bump @actions/github from 5.0.3 to 5.1.1 (https://github-redirect.dependabot.com/docker/build-push-action/issues/696;>#696) Full Changelog: https://github.com/docker/build-push-action/compare/v3.1.1...v3.2.0;>https://github.com/docker/build-push-action/compare/v3.1.1...v3.2.0 v3.1.1 Fix GitHub token not passed with Git context if subdir defined by https://github.com/crazy-max;>@crazy-max (https://github-redirect.dependabot.com/docker/build-push-action/issues/663;>#663) Replace deprecated fs.rmdir with fs.rm by https://github.com/bendrucker;>@bendrucker (https://github-redirect.dependabot.com/docker/build-push-action/issues/657;>#657) Full Changelog: https://github.com/docker/build-push-action/compare/v3.1.0...v3.1.1;>https://github.com/docker/build-push-action/compare/v3.1.0...v3.1.1 v3.1.0 no-cache-filters input by https://github.com/crazy-max;>@crazy-max
[GitHub] [qpid-dispatch] dependabot[bot] opened a new pull request, #1622: Bump typescript from 4.6.2 to 4.9.5 in /console/react
dependabot[bot] opened a new pull request, #1622: URL: https://github.com/apache/qpid-dispatch/pull/1622 Bumps [typescript](https://github.com/Microsoft/TypeScript) from 4.6.2 to 4.9.5. Release notes Sourced from https://github.com/Microsoft/TypeScript/releases;>typescript's releases. TypeScript 4.9.4 For release notes, check out the https://devblogs.microsoft.com/typescript/announcing-typescript-4-9;>release announcement. For the complete list of fixed issues, check out the https://github.com/Microsoft/TypeScript/issues?utf8=%E2%9C%93q=is%3Aissue+milestone%3A%22TypeScript+4.9.4%22+is%3Aclosed+;>fixed issues query for Typescript v4.9.4. Downloads are available on: https://www.npmjs.com/package/typescript;>npm https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild;>NuGet package Changes: e2868216f637e875a74c675845625eb15dcfe9a2 Bump version to 4.9.4 and LKG. eb5419fc8d980859b98553586dfb5f40d811a745 Cherry-pick https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51704;>#51704 to release 4.9 (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51712;>#51712) b4d382b9b12460adf2da4cc0d1429cf19f8dc8be Cherry-pick changes for narrowing to tagged literal types. e7a02f43fce47e1a39259ada5460bcc33c8e98b5 Port of https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51626;>#51626 and https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51689;>#51689 to release-4.9 (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51627;>#51627) 1727912f0437a7f367d90040fc4b0b4f3efd017a Cherry-pick fix around visitEachChild to release-4.9. (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51544;>#51544) This list of changes was https://typescript.visualstudio.com/cf7ac146-d525-443c-b23c-0d58337efebc/_release?releaseId=117_a=release-summary;>auto generated. TypeScript 4.9 For release notes, check out the https://devblogs.microsoft.com/typescript/announcing-typescript-4-9/;>release announcement. Downloads are available on: https://www.npmjs.com/package/typescript;>npm https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild;>NuGet package Changes: 93bd577458d55cd720b2677705feab5c91eb12ce Bump version to 4.9.3 and LKG. 107f832b80df2dc97748021cb00af2b6813db75b Update LKG. 31bee5682df130a14ffdd5742f994dbe7313dd0e Cherry-pick PR https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/50977;>#50977 into release-4.9 (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51363;>#51363) [ https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/50872;>#50872 ] 1e2fa7ae15f8530910fef8b916ec8a4ed0b59c45 Update version to 4.9.2-rc and LKG. 7ab89e5c6e401d161f31f28a6c555a3ba530910e Merge remote-tracking branch 'origin/main' into release-4.9 e5cd686defb1a4cbdb36bd012357ba5bed28f371 Update package-lock.json 8d40dc15d1b9945837e7860320fdccfe27c40cad Update package-lock.json 5cfb3a2fe344a5350734305193e6cc99516285ca Only call return() for an abrupt completion in user code (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51297;>#51297) a7a9d158e817fcb0e94dc1c24e0a401b21be0cc9 Fix for broken baseline in yieldInForInInDownlevelGenerator (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51345;>#51345) 7f8426f4df0d0a7dd8b72079dafc3e60164a23b1 fix for-in enumeration containing yield in generator (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51295;>#51295) 3d2b4017eb6b9a2b94bc673291e56ae95e8beddd Fix assertion functions accessed via wildcard imports (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51324;>#51324) 64d0d5ae140b7b26a09e75114517b418d6bcaa9f fix(51301): Fixing an unused import at the end of a line removes the newline (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51320;>#51320) 754eeb2986bde30d5926e0fa99c87dda9266d01b Update CodeQL workflow and configuration, fix found bugs (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51263;>#51263) d8aad262006ad2d2c91aa7a0e4449b4b83c57f7b Update package-lock.json d4f26c840b1db76c0b25a405c8e73830a2b45cbc fix(51245): Class with parameter decorator in arrow function causes convert to default export refactoring failure (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51256;>#51256) 16faf45682173ea437a50330feb4785578923d7f Update package-lock.json 8b1ecdb701e2a2e19e9f8bcdd6b2beac087eabee fix(50654): Move to a new file breaks the declaration of referenced variable (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/50681;>#50681) 170a17fad57eae619c5ef2b7bdb3ac00d6c32c47 Dom update 2022-10-25 (https://github-redirect.dependabot.com/Microsoft/TypeScript/issues/51300;>#51300) ... (truncated) Commits
[jira] [Created] (PROTON-2678) Use Python Limited API and create universal wheel when building Qpid Proton Python client
Jiri Daněk created PROTON-2678:
--
Summary: Use Python Limited API and create universal wheel when
building Qpid Proton Python client
Key: PROTON-2678
URL: https://issues.apache.org/jira/browse/PROTON-2678
Project: Qpid Proton
Issue Type: New Feature
Affects Versions: proton-c-0.39.0
Reporter: Jiri Daněk
Currently, the build produces Python-version-specific wheels
{noformat}
creating 'dist/python_qpid_proton-0.39.0.dev0-cp311-cp311-linux_x86_64
{noformat}
Python is able to create universal wheels that can be installed on any
(reasonably new) Python version. See
#. https://peps.python.org/pep-0425/#overview
{quote}The CPython stable ABI is abi3 as in the shared library suffix.{quote}
#.
https://docs.python.org/3/c-api/stable.html#stable-application-binary-interface
#. https://docs.python.org/3/c-api/stable.html#c.Py_LIMITED_API
{quote}Define Py_LIMITED_API to the value of PY_VERSION_HEX corresponding to
the lowest Python version your extension supports. The extension will work
without recompilation with all Python 3 releases from the specified one onward,
and can use Limited API introduced up to that version.{quote}
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
-
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org
