python-devel December 2024

python-devel@lists.fedoraproject.org

11 participants
11 discussions

Heads-up: updating python-dkimpy to 1.0.6 (all releases) then 1.1.8 (Rawhide, EPEL10)
by Michel Lind 04 Dec '24

04 Dec '24

Dear all, While churning through the dependencies for branching `python-b4` for EPEL 10, I eventually came across python-dkimpy that... turns out to have been auto-rebuilt since it was first imported. Turns out release monitoring was never properly configured and we are missing a lot of intervening updates ever since. I'm modernizing the spec as well, to follow the newest Python packaging guidelines, and am also enabling Packit (for Rawhide only). Upstream considered 1.0.6 (we're on 1.0.5) as an important bugfix release, so I plan to get these into all releases: https://launchpad.net/dkimpy/+announcement/53935 Changelog for 1.0.6: 2023-04-30 Version 1.0.6 - Provide more specific error message when ed25519 private key is invalid (See LP 1901569 for background) - Correct base64 validation regexp so that valid signature with == split between two lines are not incorrectly evaluated as invalid (LP: #2002295) - Thanks to <https://launchpad.net/~obadz> for the report and the proposed fix - Fix traceback when attempting to verify an unsigned message using async verify (Thanks to Nikita Sychev for the report and a suggested fix) (LP: #2008723) - Verify correct AMS header is used for ARC seal verification - Catch nacl.exceptions.ValueError and raise KeyFormatError, similar to how RSA key errors are treated (LP: #2018021) - Create ed25519 key files with secure permissions to avoid risk of insecure chmode call/race condition (Thanks to Hanno Böck for the report and the suggested fix) (LP: #2017430) and then we can use Packit to update Rawhide to 1.1.8 and branch that for EPEL 10 ... and we can consider on a case by case basis whether it's worth bringing it into some stable releases. Potentially affected packages: ❯ fedrq-pydeps-verbose.sh dkimpy python-authheaders : python3dist(dkimpy) >= 0.7.1 python-b4 : (python3dist(dkimpy) < 2~~ with python3dist(dkimpy) >= 1) Given that the current packaging does not really pull in runtime dependencies for the extras at all, dependent packages are probably fine (they can't be transitively depending on extras without declaring them since right now no extras subpackages are provided) ❯ fedrq pkgs python3-dkimpy -F requires /usr/bin/python3 python(abi) = 3.13 python3.13dist(dnspython) >= 1.16 ❯ fedrq pkgs python3-dkimpy -F provides python-dkimpy = 1.0.5-14.fc41 python3-dkimpy = 1.0.5-14.fc41 python3.13-dkimpy = 1.0.5-14.fc41 python3.13dist(dkimpy) = 1.0.5 python3dist(dkimpy) = 1.0.5 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+ARC-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy+ARC = 1.0.6-1.fc42 python3-dkimpy+ARC = 1.0.6-1.fc42 python3.13-dkimpy+ARC = 1.0.6-1.fc42 python3.13dist(dkimpy[arc]) = 1.0.6 python3dist(dkimpy[arc]) = 1.0.6 REQUIRES python(abi) = 3.13 python3-dkimpy = 1.0.6-1.fc42 python3.13dist(authres) rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+asyncio-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy+asyncio = 1.0.6-1.fc42 python3-dkimpy+asyncio = 1.0.6-1.fc42 python3.13-dkimpy+asyncio = 1.0.6-1.fc42 python3.13dist(dkimpy[asyncio]) = 1.0.6 python3dist(dkimpy[asyncio]) = 1.0.6 REQUIRES python(abi) = 3.13 python3-dkimpy = 1.0.6-1.fc42 python3.13dist(aiodns) rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+ed25519-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy+ed25519 = 1.0.6-1.fc42 python3-dkimpy+ed25519 = 1.0.6-1.fc42 python3.13-dkimpy+ed25519 = 1.0.6-1.fc42 python3.13dist(dkimpy[ed25519]) = 1.0.6 python3dist(dkimpy[ed25519]) = 1.0.6 REQUIRES python(abi) = 3.13 python3-dkimpy = 1.0.6-1.fc42 python3.13dist(pynacl) rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy = 1.0.6-1.fc42 python3-dkimpy = 1.0.6-1.fc42 python3.13-dkimpy = 1.0.6-1.fc42 python3.13dist(dkimpy) = 1.0.6 python3dist(dkimpy) = 1.0.6 REQUIRES /usr/bin/python3 python(abi) = 3.13 python3.13dist(dnspython) >= 1.16 rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PartialHardlinkSets) <= 4.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 Best regards, -- _o) Michel Lind _( ) identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

python-devel December 2024