11 Mar
2020
11 Mar
'20
14:01
Please note that this mail was generated by a script. The described changes are computed based on the x86_64 DVD. The full online repo contains too many changes to be listed here. Please check the known defects of this snapshot before upgrading: https://openqa.opensuse.org/tests/overview?distri=opensuse&groupid=1&version=Tumbleweed&build=20200309 Please do not reply to this email to report issues, rather file a bug on bugzilla.opensuse.org. For more information on filing bugs please see https://en.opensuse.org/openSUSE:Submitting_bug_reports Packages changed: argyllcms (2.1.1 -> 2.1.2) capi4hylafax cpupower cups-filters (1.27.1 -> 1.27.2) firewalld icewm icewm-theme-branding kbd (2.0.4 -> 2.2.0) libappindicator3 libcapi20 (2011.8.29 -> 3.27) mxml (2.11 -> 3.1) osc python-M2Crypto python-alembic (1.4.0 -> 1.4.1) python-dulwich (0.19.13 -> 0.19.15) python-gevent (1.4.0 -> 1.5.0~a3) python-geventhttpclient python-gssapi (1.6.1 -> 1.6.2) python-idna (2.8 -> 2.9) python-imagesize (1.1.0 -> 1.2.0) python-jedi python-lxml (4.4.2 -> 4.5.0) python-mysqlclient python-parso (0.6.1 -> 0.6.2) python-pbr (5.4.3 -> 5.4.4) python-pycurl (7.43.0.3 -> 7.43.0.5) python-pyudev (0.21.0 -> 0.22.0) python-setproctitle python-sphinxcontrib-applehelp (1.0.1 -> 1.0.2) python-sphinxcontrib-devhelp (1.0.1 -> 1.0.2) python-sphinxcontrib-htmlhelp (1.0.2 -> 1.0.3) python-sphinxcontrib-qthelp (1.0.2 -> 1.0.3) python-sphinxcontrib-serializinghtml (1.1.3 -> 1.1.4) python-tornado4 python3 (3.7.3 -> 3.8.2) python3-base (3.7.3 -> 3.8.2) salt (2019.2.2 -> 2019.2.3) shared-python-startup xfce4-statusnotifier-plugin (0.2.1 -> 0.2.2) === Details === ==== argyllcms ==== Version update (2.1.1 -> 2.1.2) - Update to version 2.1.2: * Added -d option to spotread to print out Density values. * Many i1Pro2 fixes. * Changed targen round down/up to 0%/100% to have a tighter tollerance of 0.5% rather than 2%, so that -n values of L* 1 and 99 are not rounded. * Fix bug in xicclu -v2 option when operating on a .cal file. * Added -M option to ccxxmake. * Added -Yk flag to spectro/dispread. * Fixed bug in xicc/xmatrix.c when creating input profile from XYZ input data. * Modified txt2ti3 to cope with files that don't have SampleName/SampleID fields. * Added instrument ambient mode (-a flag) to dispcal, dispread and ccxxmake. * Fixed latent data sensitivity problem with i1Pro and Munki Spectro high res-mode. * Added spotread -rw option. * Added check in dispwin for sanity of calibration curves. * Added spectral support to namedc/cxf parser. * Fixed profile/txt2ti3.c to properly handle i1profiler SPECTRAL_NMXXX format. * Changed dispcal ADJ_THRESH mode MIN_THRESH value to 0.25 from 0.05. - Fix build with with -fno-common, which is the default in gcc-10 (bsc#1160256, argyllcms--gcc--fno-common.patch). ==== capi4hylafax ==== - switch to BuildReqires: pkgconfig(capi20) to allow building against standalone libcapi-devel instead of i4l-base ==== cpupower ==== Subpackages: libcpupower0 - Do not show 0 boost states if boost states are supported, but could not be read from PCI registers. bsc#1165712, bsc#1164983 A amd_do_not_show_amount_of_boost_states_if_zero.patch ==== cups-filters ==== Version update (1.27.1 -> 1.27.2) - Update to 1.27.2 * foomatic-rip: In some PostScript input files it was possible that option settings did not get inserted or lines inserted on the wron place (Issue #208, Pull request #210). * foomatic-rip: For the PDF page count call Ghostscript in sandbox mode and fix pointer arithmetics (Pull request [#212]). * foomatic-rip: Zero-page-job handling changes made the last page of PostScript files not printed, also turning one-page jobs into zero-page jobs (Issue #200, Issue #206, Issue [#208], Pull request #209, Pull request #210, Pull request [#211]). * cups-browsed: check_printer_with_option() function: Initialize the value, add further checks, freeing memory and stop allocating magic numbers (Pull request #204). * cups-browsed: Additional checks against crashes in the is_local_hostname() function (Ubuntu bug #1863716) ==== firewalld ==== Subpackages: firewalld-lang python3-firewall - No longer recommend -lang: supplements are in use. ==== icewm ==== Subpackages: icewm-config-upstream icewm-default icewm-lang icewm-lite - icewm-preferences.patch: Add the adwaita legacy path to the IconPath. adwaita-icon-theme has its main icon updated to symbolic style, while icewm's style is more suitable for legacy-style icons (eg. web-browser). Without the update, current icewm can not find default web-browser toolbar icon (bsc#1157930). ==== icewm-theme-branding ==== - Add the adwaita legacy path to the IconPath in preferences. adwaita-icon-theme has its main icon updated to symbolic style, while icewm's style is more suitable for legacy-style icons (eg. web-browser). Without the update, current icewm can not find default web-browser toolbar icon (bsc#1157930). * add-adwaita-legacy-iconpath-to-preference.patch ==== kbd ==== Version update (2.0.4 -> 2.2.0) Subpackages: kbd-legacy - Update to version 2.2.0: * setfont: Add option -d to double size of font. * kbd_mode: Add -f option and deny dangerous mode switches without it. * Data files updates. * Fix gcc warnings and error with gcc-10 (boo#1160273). * Other fixes. * For a full list of changes see: https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/ - Update home page. - Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch, kbd-1.15.2-setfont-no-cruft.patch, kbd-1.15.5-loadkeys-search-path.patch. ==== libappindicator3 ==== - Use the vanilla nunit for compatibility with newer Mono ==== libcapi20 ==== Version update (2011.8.29 -> 3.27) - provide/obsolete capi4linux in the correct version - Update descriptions - Modernize build procedure - move *.so files to -devel package - drop static libs - standalone build to satisfy dependencies of capi4hylafax sources used are the same as debian uses ==== mxml ==== Version update (2.11 -> 3.1) - Add keyring - Fix source URLs to point to actual releases - Update to version 3.1 - The mxmlLoad* functions now print an error when the XML does not start with < and no parent node is supplied (Issue #256, Issue #259) - Fixed an issue with ?make install? trying to install old files (Issue #257) - Fixed some DSO installation issues on Linux. - Changes from 3.0 - Changed the license to Apache 2.0 with exceptions (Issue #239) - All of the internal node structures are now moved out of the public header (Issue #240) - Fixed a potential buffer overflow when writing floating point data (Issue #233) - Moved mxmldoc to a new codedoc project whose focus is on generating code documentation (Issue #235, Issue #236, Issue [#237]) - Error messages now include the line number of the error (Issue [#230]) - The mxmlSetCDATA, mxmlSetElement, mxmlSetOpaque, mxmlSetOpaquef, mxmlSetText, and mxmlSetTextf functions caused a use-after-free bug if the value came from the same node (Issue #241) - The mxmlSetOpaquef and mxmlSetTextf functions did not work (Issue #244) - The _mxml_strdupf function did not work on Windows (Issue #245) - Changes from 2.12 - Added yet more documentation about using MXML_OPAQUE_CALLBACK when you want to get full strings for inline text instead of separated words (Issue #190) - No longer build documentation sets on macOS since Xcode no longer supports them (Issue #198) - Updated the va_copy macro for use with BCC (Issue #211) - The mxmlNewCDATA and mxmlSetCDATA functions incorrectly added the XML trailer ?]]? to the string (Issue #216) - Cross-compiling failed on install (Issue #218) - Fixed a crash bug in the mxmlWrite functions (Issue #228) - The mxmlWrite functions no longer write the siblings of the passed node (Issue #228) - Updated the markdown and ZIP container libraries used for mxmldoc. - remove mxmldoc binaries and man pages - enable threading support ==== osc ==== - Spec: temporary disable tests as they explode under python 3.8 * Needs to compare xml using testtools.matchers.MatchesStructure ==== python-M2Crypto ==== - in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile returns a socketIO which is no buffer. Added: 001-fix-buffering-for-python38.patch ==== python-alembic ==== Version update (1.4.0 -> 1.4.1) - update to version 1.4.1: * Fixed regression caused by the new ?type comparison? logic introduced in 1.4 as part of #605 where comparisons of MySQL ?unsigned integer? datatypes would produce false positives, as the regular expression logic was not correctly parsing the ?unsigned? token when MySQL?s default display width would be returned by the database. Pull request courtesy Paul Becotte. References: #661 * Error message for ?path doesn?t exist? when loading up script environment now displays the absolute path. Pull request courtesy Rowan Hart. References: #663 * Fixed regression in 1.4.0 due to #647 where unique constraint comparison with mixed case constraint names while not using a naming convention would produce false positives during autogenerate.References: #654 * The check for matched rowcount when the alembic_version table is updated or deleted from is now conditional based on whether or not the dialect supports the concept of ?rowcount? for UPDATE or DELETE rows matched. Some third party dialects do not support this concept. Pull request courtesy Ke Zhu. * Fixed long-standing bug where an inline column CHECK constraint would not be rendered within an ?ADD COLUMN? operation. The DDL compiler is now consulted for inline constraints within the Operations.add_column() method as is done for regular CREATE TABLE operations. References: #655 ==== python-dulwich ==== Version update (0.19.13 -> 0.19.15) - update to 0.19.15: * Properly handle files that are just executable for the current user. (Jelmer Vernoo?, #734) * Fix handling of stored encoding in ``dulwich.porcelain.get_object_by_path`` on Python 3. (Jelmer Vernoo?) * Support the include_trees and rename_detector arguments at the same time when diffing trees. (Jelmer Vernoo?) * Strip superfluous <> around email. (monnerat) * Stop checking for ref validity client-side. Users can still call check_wants manually. (Jelmer Vernoo?) * Switch over to Google-style docstrings. * Add a ``dulwich.porcelain.active_branch`` function. * Cleanup new directory if clone fails. (Jelmer Vernoo?, #733) * Expand "~" in global exclude path. (Jelmer Vernoo?) ==== python-gevent ==== Version update (1.4.0 -> 1.5.0~a3) - Use bundled libev library to overcome the current incompatibility with libev > 4.25. gh#gevent/gevent#1501 - Upgrade to 1.5a3: - The file objects (FileObjectPosix, FileObjectThread) now consistently text and binary modes. If neither 'b' nor 't' is given in the mode, they will read and write native strings. If 't' is given, they will always work with unicode strings, and 'b' will always work with byte strings. (FileObjectPosix already worked this way.) See :issue:`1441`. - The file objects accept encoding, errors and newline arguments. On Python 2, these are only used if 't' is in the mode. - The default mode for FileObjectPosix changed from rb to simply r, for consistency with the other file objects and the standard open and io.open functions. - Fix FileObjectPosix improperly being used from multiple greenlets. Previously this was hidden by forcing buffering, which raised RuntimeError. - Fix using monkey-patched threading.Lock and threading.RLock objects as spin locks by making them call sleep(0) if they failed to acquire the lock in a non-blocking call. This lets other callbacks run to release the lock, simulating preemptive threading. Using spin locks is not recommended, but may have been done in code written for threads, especially on Python 3. See :issue:`1464`. - Fix Semaphore (and monkey-patched threading locks) to be fair. This eliminates the rare potential for starvation of greenlets. As part of this change, the low-level method rawlink of Semaphore, Event, and AsyncResult now always remove the link object when calling it, so unlink can sometimes be optimized out. See :issue:`1487`. - Make gevent.pywsgi support Connection: keep-alive in HTTP/1.0. Based on :pr:`1331` by tanchuhan. - Fix a potential crash using gevent.idle() when using libuv. See :issue:`1489`. - Fix some potential crashes using libuv async watchers. - Make ThreadPool consistently raise InvalidThreadUseError when spawn is called from a thread different than the thread that created the threadpool. This has never been allowed, but was inconsistently enforced. On gevent 1.3 and before, this would always raise "greenlet error: invalid thread switch," or LoopExit. On gevent 1.4, it could raise LoopExit, depending on the number of tasks, but still, calling it from a different thread was likely to corrupt libev or libuv internals. - Remove some undocumented, deprecated functions from the threadpool module. - libuv: Fix a perceived slowness spawning many greenlets at the same time without yielding to the event loop while having no active IO watchers or timers. If the time spent launching greenlets exceeded the switch interval and there were no other active watchers, then the default IO poll time of about .3s would elapse between spawning batches. This could theoretically apply for any non-switching callbacks. This can be produced in synthetic benchmarks and other special circumstances, but real applications are unlikely to be affected. See :issue:`1493`. - Fix using the threadpool inside a script or module run with python -m gevent.monkey. Previously it would use greenlets instead of native threads. See :issue:`1484`. - Fix potential crashes in the FFI backends if a watcher was closed and stopped in the middle of a callback from the event loop and then raised an exception. This could happen if the hub's handle_error function was poorly customized, for example. See :issue:`1482` - Make gevent.killall stop greenlets from running that hadn't been run yet. This make it consistent with Greenlet.kill(). See :issue:`1473` reported by kochelmonster. - Make gevent.spawn_raw set the loop attribute on returned greenlets. This lets them work with more gevent APIs, notably gevent.killall(). They already had dictionaries, but this may make them slightly larger, depending on platform (on CPython 2.7 through 3.6 there is no apparent difference for one attribute but on CPython 3.7 and 3.8 dictionaries are initially empty and only allocate space once an attribute is added; they're still smaller than on earlier versions though). - Add support for CPython 3.8.0. (Windows wheels are not yet available.) - Add an --module option to gevent.monkey allowing to run a Python module rather than a script. See :pr:`1440`. - Improve the way joining the main thread works on Python 3. - Implement SSLSocket.verify_client_post_handshake() when available. - Fix tests when TLS1.3 is supported. - Disable Nagle's algorithm in the backdoor server. This can improve interactive response time. - Test on Python 3.7.4. There are important SSL test fixes. - Python version updates: gevent is now tested with CPython 2.7.16, 3.5.6, 3.6.8, and 3.7.2. It is also tested with PyPy2 7.1 and PyPy 3.6 7.1 (PyPy 7.0 and 7.1 were not capable of running SSL tests on Travis CI). - Support for Python 3.4 has been removed, as that version is no longer supported uptstream. - gevent binary wheels are now manylinux2010 and include libuv support. pip 19 is needed to install them. See :issue:`1346`. - gevent is now compiled with Cython 0.29.6 and cffi 1.12.2. - gevent sources include a pyproject.toml file, specifying the build requirements and enabling build isolation. pip 18 or above is needed to take advantage of this. See :issue:`1180`. - libev-cffi: Let the compiler fill in the definition of nlink_t for st_nlink in struct stat, instead of trying to guess it ourself. Reported in :issue:`1372` by Andreas Schwab. - Remove the Makefile. Its most useful commands, make clean and make distclean, can now be accomplished in a cross-platform way using python setup.py clean and python setup.py clean -a, respectively. The remainder of the Makefile contained Travis CI commands that have been moved to .travis.yml. - Deprecate the EMBED and LIBEV_EMBED, etc, build-time environment variables. Instead, use GEVENTSETUP_EMBED and GEVENTSETUP_EMBED_LIBEV. See :issue:`1402`. - The CFFI backends now respect the embed build-time setting. This allows building the libuv backend without embedding libuv (except on Windows). - Support test resources. This allows disabling tests that use the network. See :ref:`limiting-test-resource-usage` for more. - Python 3.7 subprocess: Copy a STARTUPINFO passed as a parameter. Contributed by AndCycle in :pr:`1352`. - subprocess: WIFSTOPPED and SIGCHLD are now handled for determining Popen.returncode. See https://bugs.python.org/issue29335 - subprocess: No longer close redirected FDs if they are in pass_fds. This is a bugfix from Python 3.7 applied to all versions gevent runs on. - Fix certain operations on a Greenlet in an invalid state (with an invalid parent) to raise a TypeError sooner rather than an AttributeError later. This is also slightly faster on CPython with Cython. Inspired by :issue:`1363` as reported by Carson Ip. This means that some extreme corner cases that might have passed by replacing a Greenlet's parent with something that's not a gevent hub now no longer will. - Fix: The spawning_stack for Greenlets on CPython should now have correct line numbers in more cases. See :pr:`1379`. - The result of gevent.ssl.SSLSocket.makefile() can be used as a context manager on Python 2. - Python 2: If the backport of the _thread_ module from futures has already been imported at monkey-patch time, also patch this module to be consistent. The pkg_resources package imports this, and pkg_resources is often imported early on Python 2 for namespace packages, so if futures is installed this will likely be the case. - Python 2: Avoid a memory leak when an io.BufferedWriter is wrapped around a socket. Reported by Damien Tournoud in :issue:`1318`. - Avoid unbounded memory usage when creating very deep spawn trees. Reported in :issue:`1371` by dmrlawson. - Win: Make examples/process.py do something useful. See :pr:`1378` by Robert Iannucci. - Spawning greenlets can be up to 10% faster. See :pr:`1379`. - Removed remove-testCongestion.patch which was subsumed in the upstream tarball. ==== python-geventhttpclient ==== - skip test test_cookielib_compatibility as it is borked upstream ==== python-gssapi ==== Version update (1.6.1 -> 1.6.2) - update to 1.6.2 * docu update ==== python-idna ==== Version update (2.8 -> 2.9) - update to 2.9: - Update to Unicode 12.1.0. - Prohibit A-labels ending with a hyphen (Thanks, Julien Bernard!) - Future-proofing: Test on Python 3.7 and 3.8, don't immediately fail should Python 4 come along. - Made BSD 3-clause license clearer ==== python-imagesize ==== Version update (1.1.0 -> 1.2.0) - update to 1.2.0: * add SVG testsuite * Python 3.8 compat ==== python-jedi ==== - add typing.patch - fix test_sys_getwindowsversion with new parso ==== python-lxml ==== Version update (4.4.2 -> 4.5.0) - update to 4.5.0 * A new function indent() was added to insert tail whitespace for pretty-printing an XML tree. * LP#1857794 Tail text of nodes that get removed from a document using item deletion disappeared silently instead of sticking with the node that was removed. * LP#1840234: The package version number is now available as lxml.__version__ ==== python-mysqlclient ==== - fix test package by adding BuildRequires: %{python_module mysqlclient >= %{version}} - switch to multibuild to run tests and avoid a buildcycle with mariadb ==== python-parso ==== Version update (0.6.1 -> 0.6.2) - update to 0.6.2 * Add Grammar.refactor (might still be subject to change until 0.7.0) * add py_38.patch - fix tests with py-3.8.2 ==== python-pbr ==== Version update (5.4.3 -> 5.4.4) - update to 5.4.4: * trivial: Use 'open' context manager * Update to latest hacking * Mark strings as raw ==== python-pycurl ==== Version update (7.43.0.3 -> 7.43.0.5) - update to 7.43.0.5 - refresh python-pycurl-7.43.0-tls-backend.patch * added python 3.8 support * officialy ended support for python 2 ==== python-pyudev ==== Version update (0.21.0 -> 0.22.0) - update to 0.22.0: - Add a six-enabled move for collections move imports: https://github.com/pyudev/pyudev/pull/386 - Fix any newly introduced pylint errors - Numerous improvements or updates to the test infrastructure - A number of test updates - Require yapf 0.21.0 for Python formatting - Various documentation fixes and updates ==== python-setproctitle ==== - Remove patch use-pkg-config.patch as we don't need to tweak this stuff at all - Update use-pkg-config.patch to use the embedded profile, to build against Python 3.8. ==== python-sphinxcontrib-applehelp ==== Version update (1.0.1 -> 1.0.2) - version update to 1.0.2 * Fix package metadata ==== python-sphinxcontrib-devhelp ==== Version update (1.0.1 -> 1.0.2) - version update to 1.0.2 * Fix package metadata ==== python-sphinxcontrib-htmlhelp ==== Version update (1.0.2 -> 1.0.3) - update to 1.0.3: * #6685: htmlhelp builder should generate HTML4 docs instead of HTML5 ==== python-sphinxcontrib-qthelp ==== Version update (1.0.2 -> 1.0.3) - version update to 1.0.3 * Fix package metadata ==== python-sphinxcontrib-serializinghtml ==== Version update (1.1.3 -> 1.1.4) - version update to 1.1.4 * Fix package metadata ==== python-tornado4 ==== - Add patches to work with python3.8 (kinda): * py38-0001-test-silence-deprecation-warning.patch * py38-0002-dont-log-CancelledError.patch ==== python3 ==== Version update (3.7.3 -> 3.8.2) Subpackages: python3-curses python3-dbm - Update to 3.8.2: - Complete list of changes is available at https://docs.python.org/release/3.8.2/whatsnew/changelog.html#python-3-8-2-final, but most of them are just bugfixes. - Updated patches: - F00102-lib64.patch - OBS_dev-shm.patch - SUSE-FEDORA-multilib.patch - subprocess-raise-timeout.patch - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug "Python urrlib allowed an HTTP server to conduct Regular Expression Denial of Service (ReDoS)" (bsc#1162367) - Add Requires: libpython%{so_version} == %{version}-%{release} to python3-base to keep both packages always synchronized (bsc#1162224). - Do not pull in bluez in base again, explain the cycle, it needs to be solved by bluez maintainer for us by providing just the headers separately - Reame idle icons to idle3 in order to not conflict with python2 variant of the package * renamed the icons * renamed icon load in desktop file - Add importlib_resources provide/obsolete as it is integral part of the lang since 3.7 release - Add -fno-semantic-interposition as it brings speed up: https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup - Update to 3.8.1: - This is mainly bugfix release and no significant changes to API are expected. The full changelog is available on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-1 - Remove bpo-38688_shutil.copytree_prevent-infinite-recursion.patch, which is included in the upstream tarball. - Add bpo-31046_ensurepip_honours_prefix.patch which makes ensurepip to honour the value of $(prefix). Proposed fix for bpo#31046.. - Move bluez-devel dependency to base as it is needed for socket.AF_BLUETOOTH and otherwise does not work - Reintroduce QtHelp with the help of the new BR python-sphinxcontrib-qthelp. - Fix SUSE-FEDORA-multilib.patch, the platform agnostic infix for library installation is "lib", not "dir". - Move idle subpackage build from python3-base to python3. appstream-glib required for packaging introduces considerable extra dependencies and a build loop via rust/librsvg. - Correct installation of idle IDE icons: + idle.png is not the target directory + non-GNOME-specific icons belong into icons/hicolor - Add required Name key to idle3 desktop file - Update to the final release 3.8.0. . - New Features: - Assignment expressions - Positional-only parameters - Parallel filesystem cache for compiled bytecode files - Debug build uses the same ABI as release build - f-strings support = for self-documenting expressions and debugging - PEP 578: Python Runtime Audit Hooks - PEP 587: Python Initialization Configuration - Vectorcall: a fast calling protocol for CPython - Pickle protocol 5 with out-of-band data buffers - New modules: - importlib.metadata - Improved modules: - ast asyncio, builtins, collections, curses, ctypes, datetime, functools, gc, gettext, gzip, idelib and IDLE, inspect, io, json.tool, math, mmap, multiprocessing, os, os.path, pathlib, pickle, plistlib, py_compile, shlex, shutil, socket, ssl, statistics, sys, tarfile, threading, tokenize, tkinter, time, typing, unicodedata, unittest, venv, weakref, xml - C API improvements - bdist_winnst command has been deprecated (use bdist_wheel) - https://docs.python.org/3.8/whatsnew/3.8.html remains rest of changes including documentation on how to port your programs to the current version of Python. - Add idle3.appdata.xml and idle3.desktop (originally from Fedora) to make Idle3 full GUI desktop application. (bsc#1153830) - Drop intltool from BuildRequires. Doesn't appear to be used. - Add folder version to allow tarball downloads even for beta/rc releases - Revert patches from Fedora (F00102-lib64.patch and F00251-change-user-install-location.patch) into their original prisitine Fedora versions, SUSE-FEDORA-multilib.patch refreshed accordingly. - Correct quotation of platsubdir in Lib/distutils/command/install.py - Replace python-3.6.0-multilib.patch with two patches from Fedora (F00102-lib64.patch and F00251-change-user-install-location.patch), and our own SUSE-FEDORA-multilib.patch to allow better cooperation with Fedora and better upstreaming. - Add OBS_dev-shm.patch fixing bpo#38377 - Pull in just gettext and let solver to sort out between: gettext-runtime-mini and gettext-runtime - Update to 3.8.0rc1. Overall changes from 3.7: - PEP 572, Assignment expressions - PEP 570, Positional-only arguments - PEP 587, Python Initialization Configuration (improved embedding) - PEP 590, Vectorcall: a fast calling protocol for CPython - PEP 578, Runtime audit hooks - PEP 574, Pickle protocol 5 with out-of-band data - Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal types), and PEP 589 (TypedDict) - Parallel filesystem cache for compiled bytecode - Debug builds share ABI as release builds, also the 'm' ABI tag was removed (irrelevant since 3.4), bpo#36707 - f-strings support a handy = specifier for debugging - continue is now legal in finally: blocks - on Windows, the default asyncio event loop is now ProactorEventLoop - on macOS, the spawn start method is now used by default in multiprocessing - multiprocessing can now use shared memory segments to avoid pickling costs between processes - typed_ast is merged back to CPython - LOAD_GLOBAL is now 40% faster - pickle now uses Protocol 4 by default, improving performance - Refreshed patches: - CVE-2019-5010-null-defer-x509-cert-DOS.patch - python-3.3.0b1-fix_date_time_compiler.patch - python-3.6.0-multilib.patch - subprocess-raise-timeout.patch - Add bpo36302-sort-module-sources.patch (boo#1041090) - Try harder obsoleting importlib-metadata - Update to 3.8.0b4: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-4 - Re-enable test_threading on aarch64 - Remove xrpm from subpackage tk description - Update to 3.8.0b3: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-3 - Patches reapplied: - python-3.3.0b1-fix_date_time_compiler.patch - python-3.3.0b1-test-posix_fadvise.patch - python-3.6.0-multilib.patch - subprocess-raise-timeout.patch - Add Provides: python3-importlib-metadata - Update to 3.8.0b2: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-2 - Patches included in upstream: - bpo-37169_PyObject_IsFreed.patch - Patches reapplied: - 00251-change-user-install-location.patch - distutils-reproducible-compile.patch - python-3.3.0b1-localpath.patch - python-3.6.0-multilib.patch - Update list of skipped tests for qemu linux-user build - Don't do profiling in qemu linux-user build - Update to 3.8.0b1 (changes since 3.7.*): - PEP 572, Assignment expressions - PEP 570, Positional-only arguments - PEP 587, Python Initialization Configuration (improved embedding) - PEP 590, Vectorcall: a fast calling protocol for CPython - PEP 578, Runtime audit hooks - PEP 574, Pickle protocol 5 with out-of-band data - Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal types), and PEP 589 (TypedDict) - Parallel filesystem cache for compiled bytecode - Debug builds share ABI as release builds - f-strings support a handy = specifier for debugging - continue is now legal in finally: blocks - multiprocessing can now use shared memory segments to avoid pickling costs between processes - typed_ast is merged back to CPython - LOAD_GLOBAL is now 40% faster - pickle now uses Protocol 4 by default, improving performance - Remove patches which were included in the upstream: - 00251-change-user-install-location.patch - 00316-mark-bdist_wininst-unsupported.patch - CVE-2019-9947-no-ctrl-char-http.patch - raise_SIGING_not_handled.patch ==== python3-base ==== Version update (3.7.3 -> 3.8.2) - Update to 3.8.2: - Complete list of changes is available at https://docs.python.org/release/3.8.2/whatsnew/changelog.html#python-3-8-2-final, but most of them are just bugfixes. - Updated patches: - F00102-lib64.patch - OBS_dev-shm.patch - SUSE-FEDORA-multilib.patch - subprocess-raise-timeout.patch - Add CVE-2020-8492-urllib-ReDoS.patch fixing the security bug "Python urrlib allowed an HTTP server to conduct Regular Expression Denial of Service (ReDoS)" (bsc#1162367) - Add Requires: libpython%{so_version} == %{version}-%{release} to python3-base to keep both packages always synchronized (bsc#1162224). - Do not pull in bluez in base again, explain the cycle, it needs to be solved by bluez maintainer for us by providing just the headers separately - Reame idle icons to idle3 in order to not conflict with python2 variant of the package * renamed the icons * renamed icon load in desktop file - Add importlib_resources provide/obsolete as it is integral part of the lang since 3.7 release - Add -fno-semantic-interposition as it brings speed up: https://fedoraproject.org/wiki/Changes/PythonNoSemanticInterpositionSpeedup - Update to 3.8.1: - This is mainly bugfix release and no significant changes to API are expected. The full changelog is available on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-1 - Remove bpo-38688_shutil.copytree_prevent-infinite-recursion.patch, which is included in the upstream tarball. - Add bpo-31046_ensurepip_honours_prefix.patch which makes ensurepip to honour the value of $(prefix). Proposed fix for bpo#31046.. - Move bluez-devel dependency to base as it is needed for socket.AF_BLUETOOTH and otherwise does not work - Reintroduce QtHelp with the help of the new BR python-sphinxcontrib-qthelp. - Fix SUSE-FEDORA-multilib.patch, the platform agnostic infix for library installation is "lib", not "dir". - Move idle subpackage build from python3-base to python3. appstream-glib required for packaging introduces considerable extra dependencies and a build loop via rust/librsvg. - Correct installation of idle IDE icons: + idle.png is not the target directory + non-GNOME-specific icons belong into icons/hicolor - Add required Name key to idle3 desktop file - Update to the final release 3.8.0. . - New Features: - Assignment expressions - Positional-only parameters - Parallel filesystem cache for compiled bytecode files - Debug build uses the same ABI as release build - f-strings support = for self-documenting expressions and debugging - PEP 578: Python Runtime Audit Hooks - PEP 587: Python Initialization Configuration - Vectorcall: a fast calling protocol for CPython - Pickle protocol 5 with out-of-band data buffers - New modules: - importlib.metadata - Improved modules: - ast asyncio, builtins, collections, curses, ctypes, datetime, functools, gc, gettext, gzip, idelib and IDLE, inspect, io, json.tool, math, mmap, multiprocessing, os, os.path, pathlib, pickle, plistlib, py_compile, shlex, shutil, socket, ssl, statistics, sys, tarfile, threading, tokenize, tkinter, time, typing, unicodedata, unittest, venv, weakref, xml - C API improvements - bdist_winnst command has been deprecated (use bdist_wheel) - https://docs.python.org/3.8/whatsnew/3.8.html remains rest of changes including documentation on how to port your programs to the current version of Python. - Add idle3.appdata.xml and idle3.desktop (originally from Fedora) to make Idle3 full GUI desktop application. (bsc#1153830) - Drop intltool from BuildRequires. Doesn't appear to be used. - Add folder version to allow tarball downloads even for beta/rc releases - Revert patches from Fedora (F00102-lib64.patch and F00251-change-user-install-location.patch) into their original prisitine Fedora versions, SUSE-FEDORA-multilib.patch refreshed accordingly. - Correct quotation of platsubdir in Lib/distutils/command/install.py - Replace python-3.6.0-multilib.patch with two patches from Fedora (F00102-lib64.patch and F00251-change-user-install-location.patch), and our own SUSE-FEDORA-multilib.patch to allow better cooperation with Fedora and better upstreaming. - Add OBS_dev-shm.patch fixing bpo#38377 - Pull in just gettext and let solver to sort out between: gettext-runtime-mini and gettext-runtime - Update to 3.8.0rc1. Overall changes from 3.7: - PEP 572, Assignment expressions - PEP 570, Positional-only arguments - PEP 587, Python Initialization Configuration (improved embedding) - PEP 590, Vectorcall: a fast calling protocol for CPython - PEP 578, Runtime audit hooks - PEP 574, Pickle protocol 5 with out-of-band data - Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal types), and PEP 589 (TypedDict) - Parallel filesystem cache for compiled bytecode - Debug builds share ABI as release builds, also the 'm' ABI tag was removed (irrelevant since 3.4), bpo#36707 - f-strings support a handy = specifier for debugging - continue is now legal in finally: blocks - on Windows, the default asyncio event loop is now ProactorEventLoop - on macOS, the spawn start method is now used by default in multiprocessing - multiprocessing can now use shared memory segments to avoid pickling costs between processes - typed_ast is merged back to CPython - LOAD_GLOBAL is now 40% faster - pickle now uses Protocol 4 by default, improving performance - Refreshed patches: - CVE-2019-5010-null-defer-x509-cert-DOS.patch - python-3.3.0b1-fix_date_time_compiler.patch - python-3.6.0-multilib.patch - subprocess-raise-timeout.patch - Add bpo36302-sort-module-sources.patch (boo#1041090) - Try harder obsoleting importlib-metadata - Update to 3.8.0b4: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-4 - Re-enable test_threading on aarch64 - Remove xrpm from subpackage tk description - Update to 3.8.0b3: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-3 - Patches reapplied: - python-3.3.0b1-fix_date_time_compiler.patch - python-3.3.0b1-test-posix_fadvise.patch - python-3.6.0-multilib.patch - subprocess-raise-timeout.patch - Add Provides: python3-importlib-metadata - Update to 3.8.0b2: Many bugfixes, full list on https://docs.python.org/3.8/whatsnew/changelog.html#python-3-8-0-beta-2 - Patches included in upstream: - bpo-37169_PyObject_IsFreed.patch - Patches reapplied: - 00251-change-user-install-location.patch - distutils-reproducible-compile.patch - python-3.3.0b1-localpath.patch - python-3.6.0-multilib.patch - Update list of skipped tests for qemu linux-user build - Don't do profiling in qemu linux-user build - Update to 3.8.0b1 (changes since 3.7.*): - PEP 572, Assignment expressions - PEP 570, Positional-only arguments - PEP 587, Python Initialization Configuration (improved embedding) - PEP 590, Vectorcall: a fast calling protocol for CPython - PEP 578, Runtime audit hooks - PEP 574, Pickle protocol 5 with out-of-band data - Typing-related: PEP 591 (Final qualifier), PEP 586 (Literal types), and PEP 589 (TypedDict) - Parallel filesystem cache for compiled bytecode - Debug builds share ABI as release builds - f-strings support a handy = specifier for debugging - continue is now legal in finally: blocks - multiprocessing can now use shared memory segments to avoid pickling costs between processes - typed_ast is merged back to CPython - LOAD_GLOBAL is now 40% faster - pickle now uses Protocol 4 by default, improving performance - Remove patches which were included in the upstream: - 00251-change-user-install-location.patch - 00316-mark-bdist_wininst-unsupported.patch - CVE-2019-9947-no-ctrl-char-http.patch - raise_SIGING_not_handled.patch ==== salt ==== Version update (2019.2.2 -> 2019.2.3) Subpackages: python3-salt salt-master salt-minion - Use full option name instead of undocumented abbreviation for zypper - Requiring python3-distro only for openSUSE/SLE >= 15 - Added: * use-full-option-name-instead-of-undocumented-abbrevi.patch - python-distro is only needed for > Python 3.7. Removing it for Python 2 - Avoid possible user escalation upgrading salt-master (bsc#1157465) (CVE-2019-18897) - Fix unit tests failures in test_batch_async tests - Added: * fix-unit-tests-for-batch-async-after-refactor.patch - Batch Async: Handle exceptions, properly unregister and close instances after running async batching to avoid CPU starvation of the MWorkers (bsc#1162327) - RHEL/CentOS 8 uses platform-python instead of python3 - Enable build for Python 3.8 - Added: * batch_async-avoid-using-fnmatch-to-match-event-217.patch * apply-patch-from-upstream-to-support-python-3.8.patch * batch-async-catch-exceptions-and-safety-unregister-a.patch - Fix 'os_family' grain for Astra Linux Common Edition - Added: * add-astra-linux-common-edition-to-the-os-family-list.patch - Update to Salt version 2019.2.3 (CVE-2019-17361) (bsc#1163981) (bsc#1162504) See release notes: https://docs.saltstack.com/en/latest/topics/releases/2019.2.3.html - Modified: * use-adler32-algorithm-to-compute-string-checksums.patch - Enable passing grains to start event based on 'start_event_grains' configuration parameter - Added: * restrict-the-start_event_grains-only-to-the-start-ev.patch * enable-passing-grains-to-start-event-based-on-start_.patch ==== shared-python-startup ==== - Setup Conflicts: so that older version of Python don?t collide with this package. ==== xfce4-statusnotifier-plugin ==== Version update (0.2.1 -> 0.2.2) Subpackages: xfce4-statusnotifier-plugin-lang - Update to version 0.2.2 * Check tooltip type before deconstructing (bxo#15110) * Preferences: Improved layout (bxo#14676) * Fix building against xfce4-panel>=4.15 * Translation Updates -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org