Commit Graph

36 Commits

Author SHA1 Message Date
Lumir Balhar
26ebeb19b2 Rebase patch for CVE-2007-4559 2024-03-20 13:44:36 +01:00
Miro Hrončok
579c990d37 Update to 21.3.1 2024-03-20 13:44:36 +01:00
Miro Hrončok
6efa09b315 Update to 21.3
Resolves: RHEL-29310
2024-03-20 13:44:36 +01:00
Miro Hrončok
2a64b8d1a3 rpminspect: Disable the unicode inspection
rpminspect reported:

    A forbidden code point, 0x202E, was found in the pip-21.2.3/AUTHORS.txt source file on line 635 at column 0.

This issue was already found and fixed upstream
when pip was added to CentOS Stream for Python 3.11.

https://github.com/pypa/pip/pull/12046

However, the fix got overridden by upstream automation (which creates the file from git log).

The regression was reported upstream in https://github.com/pypa/pip/issues/12467

The patch still applies, so we could reuse it again.
However, rpminspect then not only does not stop reporting this,
but it starts reporting the same problem for the patch (from python3.12-pip):

    A forbidden code point, 0x202E, was found in the 12046.patch source file on line 19 at column 11. This source file is used by (null).
    A forbidden code point, 0x202E, was found in the 12046.patch source file on line 28 at column 1. This source file is used by (null).
    A forbidden code point, 0x202E, was found in the pip-23.2.1/AUTHORS.txt source file on line 482 at column 10. This source file is used by python3.12-pip.spec.
    A forbidden code point, 0x202E, was found in the pip-23.2.1/AUTHORS.txt source file on line 738 at column 0. This source file is used by python3.12-pip.spec.

The file is fine. It's not code.

Note that ideally, we would only exclude AUTHORS.txt, somehow like this:

    unicode:
        exclude: ^AUTHORS\.txt$

However, it does not work (at least on CentOS Zuul CI).

Cherry-picked from fd85d3c16a
2024-02-15 05:42:27 +01:00
Miro Hrončok
5766dabfcf Make STI CI work: Drop other Pythons and pipenv, add EPEL, etc.
Not only are the removed Pythons not available in c9s,
testing with other Pythons is redundant
because only Python 3.9 uses the wheel built from this component.

pipenv was retired in Fedora and it was never branched for EPEL 9.

python3-tox was renamed to tox before it was added to EPEL 9.

EPEL is required to:
 - use mock
 - test integration with virtualenv and tox

Additionally, use c9s tests of pyproject-rpm-macros,
rawhide tests might use features not yet synced to c9s.
Don't run pyproject/clikit test, not enough dependencies in EPEL 9.
2024-02-15 05:42:27 +01:00
Lumir Balhar
f3400cce6a Require Python with tarfile filters
Resolves: RHEL-25451
2024-02-14 15:52:57 +01:00
Petr Viktorin
d2b89c8944 Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)
Resolves: RHBZ#2207997
2023-08-10 13:18:31 +02:00
Tomas Orsava
24cdd07499 Rebuild to add the automatically generated Obsoletes tag with the python39- prefix
.. for smoother upgrade from RHEL8

Related: rhbz#1990421
2022-02-04 12:12:41 +01:00
Tomas Orsava
c537e2645f Fix changelog date
Related: rhbz#1990421
2022-02-03 11:27:23 +01:00
Tomas Orsava
5c69162753 Conflict with old Python versions that use the old unversioned wheel location
Resolves: rhbz#1982668
2021-11-24 13:34:41 +01:00
Tomas Orsava
268d5805e2 Make the python-pip-wheel subpackage versioned (python3-pip-wheel)
.. and move its contents to a versioned directory /usr/share/python3-wheels

Resolves: rhbz#1982668
2021-11-05 13:47:44 +01:00
Charalampos Stratakis
d58b0e240f Remove bundled windows executables
Resolves: rhbz#2006795
2021-10-12 17:06:38 +02:00
Miro Hrončok
75ed7533ad CI: Add pip-upgrade tests
Related: rhbz#1932713
2021-09-17 19:22:15 +02:00
Miro Hrončok
e9e8996aeb Fix broken uninstallation by a bogus downstream patch
In pip 21.2, the Distribution here is a wrapper around the regular Distribution.
It has a limited set of API defined by the BaseDistribution protocol.
dist_location() uses the project_name attribute under the hood --
and that is not part of the API.

If we ever upstream this, we should make this check a property of BaseDistribution.
But, for now, we hotfix it by accessing the private wrapped Distribution object directly.
Yes, this is ugly.

Related: rhbz#1932713
2021-09-17 19:15:07 +02:00
Miro Hrončok
a062b7b16f Enable previously failing test
Related: rhbz#1932713
2021-09-17 19:14:58 +02:00
Miro Hrončok
c2ef944b25 Adapt wheel installation to be more like %pyproject_install, use %python3
Related: rhbz#1932713
2021-09-17 19:14:50 +02:00
Miro Hrončok
6c4d14d340 Mark the installed LICENSE.txt as %license instead of duplicating it
Related: rhbz#1932713
2021-09-17 19:14:40 +02:00
Miro Hrončok
a83e8d6604 Update to 21.2.3
The bundled toml was replaced by tomli, same license (MIT).

Related: rhbz#1932713
2021-09-17 19:14:32 +02:00
Lumir Balhar
9d1cc7a3a8 Update to 21.1.3
Related: rhbz#1932713
2021-09-17 19:14:22 +02:00
Karolina Surma
0ffd2bd3b4 Update to 21.1.2
Related: rhbz#1932713
2021-09-17 19:14:14 +02:00
Karolina Surma
000f490c2d Update to 21.1.1
Changes:
- dropped emit-a-warning-when-running-with-root-privileges.patch (fixed in upstream)
- rebased dummy-certifi.patch, remove-existing-dist-only-if-path-conflicts.patch, nowarn-pip._internal.main.patch

Related: rhbz#1932713
2021-09-17 19:13:51 +02:00
Karolina Surma
780bcf6042 Remove unused patches
Related: rhbz#1932713
2021-09-17 19:13:32 +02:00
Mohan Boddu
435c9f4174 Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-10 00:17:53 +00:00
Tomas Orsava
f02dcb4d5d Provide the platform-python-pip name for backwards compatibility with RHEL 8
Related: rhbz#1891487
2021-07-29 11:12:00 +02:00
Karolina Surma
73f5d1f9c1 Updates from Fedora 34:
- Backport security fixes from pip 21.1.1
 - Resolve rpmlint warnings & fix changelog typos

Mainly to fix CVE-2021-3572.

Resolves: rhbz#1962856
2021-06-09 17:43:02 +02:00
Lukas Zachar
9c5f9aa61e Add gating.yaml from RHEL 2021-06-02 12:51:48 +02:00
Mohan Boddu
572b656b94 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 04:36:30 +00:00
DistroBaker
4ce35cfdbc Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/python-pip.git#b476c0248567c7e79e56e48545a59f489c03a31e
2021-03-19 14:45:39 +00:00
DistroBaker
69eab90d36 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/python-pip.git#e8f355153384f41e2f5ff11081ab93b08625b825
2021-02-18 16:32:30 +00:00
DistroBaker
7df2664e6d Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/python-pip.git#093819ce2ef1ccaecd829ad2c445156db11b0774
2021-01-27 11:42:40 +00:00
DistroBaker
b7b3cef88c Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/python-pip.git#cef1efc8a038aa18f9a591e1f44671abd781b8db
2020-12-19 00:15:05 +00:00
DistroBaker
2ffab07c64 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/python-pip.git#f444f50981d3bc795d5ca0481a67e5ca41f56a67
2020-12-04 12:52:12 +00:00
DistroBaker
259c2f1710 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/python-pip.git#aab1da4a870cfb630d0b5e4c1db0e3ed4e7adf6e
2020-11-02 09:40:48 +00:00
Troy Dawson
d2e57d4275 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/python-pip#8825fe54dc6e32d8edcbecfe4b9f563a50e513b5
2020-10-22 11:13:35 -07:00
Troy Dawson
5819c19901 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/python-pip#8825fe54dc6e32d8edcbecfe4b9f563a50e513b5
2020-10-14 19:37:16 -07:00
Release Configuration Management
15642ccb6f New branch setup 2020-10-08 23:12:10 +00:00