Dear all,
While churning through the dependencies for branching `python-b4` for
EPEL 10, I eventually came across python-dkimpy that... turns out to
have been auto-rebuilt since it was first imported. Turns out release
monitoring was never properly configured and we are missing a lot of
intervening updates ever since.
I'm modernizing the spec as well, to follow the newest Python packaging
guidelines, and am also enabling Packit (for Rawhide only).
Upstream considered 1.0.6 (we're on 1.0.5) as an important bugfix
release, so I plan to get these into all releases:
https://launchpad.net/dkimpy/+announcement/53935
Changelog for 1.0.6:
2023-04-30 Version 1.0.6
- Provide more specific error message when ed25519 private key is invalid
(See LP 1901569 for background)
- Correct base64 validation regexp so that valid signature with == split
between two lines are not incorrectly evaluated as invalid (LP:
#2002295) - Thanks to <https://launchpad.net/~obadz> for the report and
the proposed fix
- Fix traceback when attempting to verify an unsigned message using
async verify (Thanks to Nikita Sychev for the report and a suggested
fix) (LP: #2008723)
- Verify correct AMS header is used for ARC seal verification
- Catch nacl.exceptions.ValueError and raise KeyFormatError, similar to how
RSA key errors are treated (LP: #2018021)
- Create ed25519 key files with secure permissions to avoid risk of
insecure chmode call/race condition (Thanks to Hanno Böck for the report
and the suggested fix) (LP: #2017430)
and then we can use Packit to update Rawhide to 1.1.8 and branch that
for EPEL 10 ... and we can consider on a case by case basis whether it's
worth bringing it into some stable releases.
Potentially affected packages:
❯ fedrq-pydeps-verbose.sh dkimpy
python-authheaders : python3dist(dkimpy) >= 0.7.1
python-b4 : (python3dist(dkimpy) < 2~~ with python3dist(dkimpy) >= 1)
Given that the current packaging does not really pull in runtime
dependencies for the extras at all, dependent packages are probably fine
(they can't be transitively depending on extras without declaring them
since right now no extras subpackages are provided)
❯ fedrq pkgs python3-dkimpy -F requires
/usr/bin/python3
python(abi) = 3.13
python3.13dist(dnspython) >= 1.16
❯ fedrq pkgs python3-dkimpy -F provides
python-dkimpy = 1.0.5-14.fc41
python3-dkimpy = 1.0.5-14.fc41
python3.13-dkimpy = 1.0.5-14.fc41
python3.13dist(dkimpy) = 1.0.5
python3dist(dkimpy) = 1.0.5
repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+ARC-1.0.6-1.fc42.noarch.rpm
PROVIDES
python-dkimpy+ARC = 1.0.6-1.fc42
python3-dkimpy+ARC = 1.0.6-1.fc42
python3.13-dkimpy+ARC = 1.0.6-1.fc42
python3.13dist(dkimpy[arc]) = 1.0.6
python3dist(dkimpy[arc]) = 1.0.6
REQUIRES
python(abi) = 3.13
python3-dkimpy = 1.0.6-1.fc42
python3.13dist(authres)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1
repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+asyncio-1.0.6-1.fc42.noarch.rpm
PROVIDES
python-dkimpy+asyncio = 1.0.6-1.fc42
python3-dkimpy+asyncio = 1.0.6-1.fc42
python3.13-dkimpy+asyncio = 1.0.6-1.fc42
python3.13dist(dkimpy[asyncio]) = 1.0.6
python3dist(dkimpy[asyncio]) = 1.0.6
REQUIRES
python(abi) = 3.13
python3-dkimpy = 1.0.6-1.fc42
python3.13dist(aiodns)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1
repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+ed25519-1.0.6-1.fc42.noarch.rpm
PROVIDES
python-dkimpy+ed25519 = 1.0.6-1.fc42
python3-dkimpy+ed25519 = 1.0.6-1.fc42
python3.13-dkimpy+ed25519 = 1.0.6-1.fc42
python3.13dist(dkimpy[ed25519]) = 1.0.6
python3dist(dkimpy[ed25519]) = 1.0.6
REQUIRES
python(abi) = 3.13
python3-dkimpy = 1.0.6-1.fc42
python3.13dist(pynacl)
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1
repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy-1.0.6-1.fc42.noarch.rpm
PROVIDES
python-dkimpy = 1.0.6-1.fc42
python3-dkimpy = 1.0.6-1.fc42
python3.13-dkimpy = 1.0.6-1.fc42
python3.13dist(dkimpy) = 1.0.6
python3dist(dkimpy) = 1.0.6
REQUIRES
/usr/bin/python3
python(abi) = 3.13
python3.13dist(dnspython) >= 1.16
rpmlib(CompressedFileNames) <= 3.0.4-1
rpmlib(FileDigests) <= 4.6.0-1
rpmlib(PartialHardlinkSets) <= 4.0.4-1
rpmlib(PayloadFilesHavePrefix) <= 4.0-1
rpmlib(PayloadIsZstd) <= 5.4.18-1
Best regards,
--
_o) Michel Lind
_( ) identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2