From 0fead6869a80bd9355a0bc339817eb772f57f8eb Mon Sep 17 00:00:00 2001 From: Leon Anavi Date: Tue, 20 Oct 2026 15:32:19 +0300 Subject: [PATCH] python3-zeep: Add recipe Add a recipe for zeep, a Python SOAP client. The changelog for release 4.3.3 includes: - Wire up the forbid_external setting (previously defined but unused since the move off defusedxml in 4.0). When enabled it refuses to transitively fetch http/https resources via xsd:import, xsd:include, wsdl:import or lxml entity resolution, raising zeep.exceptions.ExternalReferenceForbidden. The user-supplied entry-point WSDL/schema URL is still loaded. The default remains False to preserve existing behaviour; enable when loading WSDLs from untrusted sources to mitigate SSRF via attacker-controlled import targets. - Internal tooling only: migrate dependency/build management to uv and replace isort/flake8/black with ruff. No runtime changes. Signed-off-by: Leon Anavi Signed-off-by: Khem Raj --- .../python/python3-zeep_4.3.3.bb | 21 +++++++++++++++++++ 1 file changed, 21 insertions(+) create mode 100644 meta-python/recipes-devtools/python/python3-zeep_4.3.3.bb diff --git a/meta-python/recipes-devtools/python/python3-zeep_4.3.3.bb b/meta-python/recipes-devtools/python/python3-zeep_4.3.3.bb new file mode 100644 index 0000000000..771c98a154 --- /dev/null +++ b/meta-python/recipes-devtools/python/python3-zeep_4.3.3.bb @@ -0,0 +1,21 @@ +SUMMARY = "A Python SOAP client" +DESCRIPTION = "A Python SOAP client" +HOMEPAGE = "https://github.com/mvantellingen/python-zeep" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://LICENSE;md5=23356a26b06086844496d9e634f58ae5" + +SRC_URI[sha256sum] = "99d5059f92f721020998695fd9c85289ccb03ec5a2398ad49c6dbe43f19cfb94" + +inherit pypi python_setuptools_build_meta + +DEPENDS += "python3-wheel-native" + +RDEPENDS:${PN} += "\ + python3-attrs \ + python3-lxml \ + python3-platformdirs \ + python3-requests \ + python3-requests-file \ + python3-requests-toolbelt \ + python3-isodate \ +"