* Also replace ${PYTHON_PN} with python3
* Sort RDEPENDS for ptest alphabetically
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Also replace ${PYTHON_PN} with python3
* Sort RDEPENDS for ptest alphabetically
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
This old run-ptest file was skipped when the recipe was dropped in:
620689d4ef python3-backports-functional-lru-cache: remove, not needed for Python 3
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
* Also replace ${PYTHON_PN} with python3
* Sort RDEPENDS for ptest alphabetically
Signed-off-by: Tim Orling <tim.orling@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Verified successful test run using bitbake meta-python-image-ptest-python3-ujson on qemu86-64
291 passed in 9.08s.
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Django 4.0.x is no longer supported since April 2023.
Upgrade to the latest 4.x LTS release.
Fixes CVEs:
CVE-2024-24680: Potential denial-of-service in intcomma template filter
CVE-2023-43665: Denial-of-service possibility in django.utils.text.Truncator
CVE-2023-41164: Potential denial of service vulnerability in django.utils.encoding.uri_to_iri()
CVE-2023-36053: Potential regular expression denial of service vulnerability in EmailValidator/URLValidator
CVE-2023-31047: Potential bypass of validation when uploading multiple files using one form field
Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Add a recipe for the pyyaml-include package that extends PyYAML to include
YAML files within YAML files. Add a ptest to run the unit tests and include
the tests as part of the package lists in meta-python
Signed-off-by: Derek Straka <derek@asterius.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Introduce cosmetic fixes to recipe file content based on oe-stylize.py
suggestions.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
The repositorys LICENSE file contains BSD-3-Clause license text, so
update the relevant recipe information field to match.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Inheriting setuptools3 implies the inherit of python3native, so drop
the latter inherit as redundant.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Update the HOMEPAGE value so that the URL points to the original
repository instead of a fork. By doing this we fix the mismatch
between HOMEPAGE and SRC_URI.
Signed-off-by: Niko Mauno <niko.mauno@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
ModuleNotFoundError: No module named 'json'
ModuleNotFoundError: No module named 'logging'
ModuleNotFoundError: No module named 'dataclasses'
ModuleNotFoundError: No module named 'zipfile'
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Radically simplified static file serving for Python web apps
With a couple of lines of config WhiteNoise allows your web app
to serve its own static files, making it a self-contained unit
that can be deployed anywhere without relying on nginx, Amazon S3
or any other external service.
https://whitenoise.readthedocs.io/en/latest/
Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
A minimal low-level HTTP client.
This recipe is currently provided without trio support, as the author
has no use for it and it would require to add a new python3-trio recipe.
This recipe uses pypi as source:
https://pypi.org/project/httpcore
Signed-off-by: Richard Leitner <dev@g0hl1n.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
High level compatibility layer for multiple asynchronous event loop
implementations.
This recipe is currently provided without trio support, as the author
has no use for it and it would require to add a new python3-trio recipe.
This recipe uses pypi as source:
https://pypi.org/project/anyio
Signed-off-by: Richard Leitner <dev@g0hl1n.net>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Upstream provides a pyproject.toml which declares a flit_core.buildapi build backend for PEP-517 packaging instead of setuptools. Also, RDEPENDS updated according to it.
Removed CLEANBROKEN because it is not necessary.
Changelog:
Version 3.0.1
Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407
Version 3.0.0
Remove previously deprecated code.
Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("werkzeug"), instead.
generate_password_hash uses scrypt by default.
Add the "werkzeug.profiler" item to the WSGI environ dictionary passed to ProfilerMiddleware’s filename_format function. It contains the elapsed and time values for the profiled request.
Explicitly marked the PathConverter as non path isolating.
Version 2.3.8
Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407
Version 2.3.7
Use flit_core instead of setuptools as build backend.
Fix parsing of multipart bodies.
Adjust index of last newline in data start.
Parsing ints from header values strips spacing first.
Fix empty file streaming when testing.
Clearer error message when URL rule does not start with slash.
Accept q value can be a float without a decimal part.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Tim Orling
Pratik Manvar
Derek Straka
Fathi Boudra
Niko Mauno
alperak
Richard Leitner
Pavel Zhukov