Packages changed: glib2-branding-openSUSE hwdata (0.326 -> 0.328) installation-images-MicroOS (14.442 -> 14.443) python-Jinja2 (2.10.1 -> 2.10.3) python-PyJWT python-attrs (19.1.0 -> 19.3.0) python-chardet python-ecdsa (0.13.2 -> 0.13.3) python-jsonschema python-pyparsing python-requests python-urllib3 === Details === ==== glib2-branding-openSUSE ==== - Add super+f1 key binding for help to match GNOME default. ==== hwdata ==== Version update (0.326 -> 0.328) - Update to version 0.328: * Updated pci, usb and vendor ids. ==== installation-images-MicroOS ==== Version update (14.442 -> 14.443) - merge gh#openSUSE/installation-images#340 - fix initial sshd key generation - setup /etc/sysconfig/ssh in rescue system - 14.443 ==== python-Jinja2 ==== Version update (2.10.1 -> 2.10.3) - Update to 2.10.3: * Fix Python 3.7 deprecation warnings. * Using range in the sandboxed environment uses xrange on Python 2 to avoid memory use. :issue:`933` * Use Python 3.7's better traceback support to avoid a core dump when using debug builds of Python 3.7. :issue:`1050` * Fix a typo in Babel entry point in setup.py that was preventing installation. - Remove merged python38.patch ==== python-PyJWT ==== - Fix build with ecdsa >= 0.13.3, #447 * 0001-Catch-BadSignatureError-raised-by-ecdsa-0.13.3.patch ==== python-attrs ==== Version update (19.1.0 -> 19.3.0) - update to 19.3.0 * Fixed auto_attribs usage when default values cannot be compared directly with ==, such as numpy arrays. - update to version 19.2.0: * Backward-incompatible Changes + Removed deprecated "Attribute" attribute "convert" per scheduled removal on 2019/1. This planned deprecation is tracked in issue `#307 `_. `#504 `_ + "__lt__", "__le__", "__gt__", and "__ge__" do not consider subclasses comparable anymore. This has been deprecated since 18.2.0 and was raising a "DeprecationWarning" for over a year. `#570 `_ * Deprecations + The "cmp" argument to "attr.s()" and "attr.ib()" is now deprecated. Please use "eq" to add equality methods ("__eq__" and "__ne__") and "order" to add ordering methods ("__lt__", "__le__", "__gt__", and "__ge__") instead ? just like with `dataclasses `_. Both are effectively "True" by default but it's enough to set "eq=False" to disable both at once. Passing "eq=False, order=True" explicitly will raise a "ValueError" though. Since this is arguably a deeper backward-compatibility break, it will have an extended deprecation period until 2021-06-01. After that day, the "cmp" argument will be removed. "attr.Attribute" also isn't orderable anymore. `#574 `_ * Changes + Updated "attr.validators.__all__" to include new validators added in `#425`_. `#517 `_ + Slotted classes now use a pure Python mechanism to rewrite the "__class__" cell when rebuilding the class, so "super()" works even on environments where "ctypes" is not installed. `#522 `_ + When collecting attributes using "@attr.s(auto_attribs=True)", attributes with a default of "None" are now deleted too. `#523 `_, `#556 `_ + Fixed "attr.validators.deep_iterable()" and "attr.validators.deep_mapping()" type stubs. `#533 `_ + "attr.validators.is_callable()" validator now raises an exception "attr.exceptions.NotCallableError", a subclass of "TypeError", informing the received value. `#536 `_ + "@attr.s(auto_exc=True)" now generates classes that are hashable by ID, as the documentation always claimed it would. `#543 `_, `#563 `_ + Added "attr.validators.matches_re()" that checks string attributes whether they match a regular expression. `#552 `_ + Keyword-only attributes ("kw_only=True") and attributes that are excluded from the "attrs"'s "__init__" ("init=False") now can appear before mandatory attributes. `#559 `_ + The fake filename for generated methods is now more stable. It won't change when you restart the process. `#560 `_ + The value passed to "@attr.ib(repr=?)" can now be either a boolean (as before) or a callable. That callable must return a string and is then used for formatting the attribute by the generated "__repr__()" method. `#568 `_ + Added "attr.__version_info__" that can be used to reliably check the version of "attrs" and write forward- and backward-compatible code. Please check out the `section on deprecated APIs `_ on how to use it. `#580 `_ ==== python-chardet ==== - Replace %fdupes -s with plain %fdupes; hardlinks are better. ==== python-ecdsa ==== Version update (0.13.2 -> 0.13.3) - updated to 0.13.3 (bsc#1153165) + CVE-2019-14853 DOS atack during signature decoding + CVE-2019-14859 signature malleability caused by insufficient checks of DER encoding ==== python-jsonschema ==== - Replace %fdupes -s with plain %fdupes; hardlinks are better. ==== python-pyparsing ==== - Do not pull in setuptools dependency at all to avoid cycles ==== python-requests ==== - Add two patches only updating test logic to remove pytest 3 pin - merged_pr_5049.patch - pr_5251-pytest5.patch ==== python-urllib3 ==== - Require a new enough release of python-six. 1.25.6 needs at least 1.12.0 for ensure_text() and friends.