Add a recipe for zeep, a Python SOAP client. The changelog for
release 4.3.3 includes:
- Wire up the forbid_external setting (previously defined but unused
since the move off defusedxml in 4.0). When enabled it refuses to
transitively fetch http/https resources via xsd:import,
xsd:include, wsdl:import or lxml entity resolution, raising
zeep.exceptions.ExternalReferenceForbidden. The user-supplied
entry-point WSDL/schema URL is still loaded. The default remains
False to preserve existing behaviour; enable when loading WSDLs
from untrusted sources to mitigate SSRF via attacker-controlled
import targets.
- Internal tooling only: migrate dependency/build management to uv
and replace isort/flake8/black with ruff. No runtime changes.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
