[Buildroot] [PATCH] package/python-web2py: bump to version 3.3.3

[Buildroot] [PATCH] package/python-web2py: bump to version 3.3.3

[Angelo Compagnucci]

Release notes:
https://github.com/web2py/web2py/releases/tag/v3.3.3

Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
---
 package/python-web2py/python-web2py.hash | 2 +-
 package/python-web2py/python-web2py.mk   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/package/python-web2py/python-web2py.hash b/package/python-web2py/python-web2py.hash
index b100a1fec8..fd16d50cc9 100644
--- a/package/python-web2py/python-web2py.hash
+++ b/package/python-web2py/python-web2py.hash
@@ -1,3 +1,3 @@
 # sha256 locally computed
-sha256  b22b5c2db862cdef9e0feace1c8841741a14eb5e735b674d6ce2bd5c7f4cac64  python-web2py-v3.1.1-git4.tar.gz
+sha256  68efbfdc26a1b5a2d20bbfec9de522e7fb88d36b73ab7dac24011ae3d51b3380  python-web2py-v3.3.3-git4.tar.gz
 sha256  2aae96826184a492bc799add49aed7b29036e7aba2d2294fb65053bd30fe55fe  LICENSE.web2py.txt
diff --git a/package/python-web2py/python-web2py.mk b/package/python-web2py/python-web2py.mk
index 68847a2385..27777e3430 100644
--- a/package/python-web2py/python-web2py.mk
+++ b/package/python-web2py/python-web2py.mk
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-PYTHON_WEB2PY_VERSION_UPSTREAM = 3.1.1
+PYTHON_WEB2PY_VERSION_UPSTREAM = 3.3.3
 PYTHON_WEB2PY_VERSION = v$(PYTHON_WEB2PY_VERSION_UPSTREAM)
 PYTHON_WEB2PY_SITE = https://github.com/web2py/web2py.git
 PYTHON_WEB2PY_SITE_METHOD = git
-- 
2.34.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

Re: [Buildroot] [PATCH] package/python-web2py: bump to version 3.3.3

[Julien Olivain via buildroot]

Hi Angelo,

Thanks for the patch.

On 30/10/2026 12:53, Angelo Compagnucci wrote:
> Release notes:
> https://github.com/web2py/web2py/releases/tag/v3.3.3

This release note link does not provide much useful information.
Could you change it to an actual change description, please?

If there is no change summary, you can put for example:
https://github.com/web2py/web2py/compare/v3.1.1...v3.3.3

> 
> Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
> ---
>  package/python-web2py/python-web2py.hash | 2 +-
>  package/python-web2py/python-web2py.mk   | 2 +-
>  2 files changed, 2 insertions(+), 2 deletions(-)
> 
> diff --git a/package/python-web2py/python-web2py.hash 
> b/package/python-web2py/python-web2py.hash
> index b100a1fec8..fd16d50cc9 100644
> --- a/package/python-web2py/python-web2py.hash
> +++ b/package/python-web2py/python-web2py.hash
> @@ -1,3 +1,3 @@
>  # sha256 locally computed
> -sha256  
> b22b5c2db862cdef9e0feace1c8841741a14eb5e735b674d6ce2bd5c7f4cac64  
> python-web2py-v3.1.1-git4.tar.gz
> +sha256  
> 68efbfdc26a1b5a2d20bbfec9de522e7fb88d36b73ab7dac24011ae3d51b3380  
> python-web2py-v3.3.3-git4.tar.gz

When I tried to download the archive, it failed with the error:

ERROR: while checking hashes from 
package/python-web2py/python-web2py.hash
ERROR: python-web2py-v3.3.3-git4.tar.gz has wrong sha256 hash:
ERROR: expected: 
68efbfdc26a1b5a2d20bbfec9de522e7fb88d36b73ab7dac24011ae3d51b3380
ERROR: got     : 
ecd2e9a0728cd469a2e24a6e5896a0b610318c22c2d28f82bb9d68de551ff856
ERROR: Incomplete download, or man-in-the-middle (MITM) attack

Could you check where this difference is coming from?
Then, fix the hash, please?

Even when fixing the source hash, the build is then
failing with the error:

AttributeError: module 'hashlib' has no attribute 'pbkdf2_hmac'

Could you have a look, please?

>  sha256  
> 2aae96826184a492bc799add49aed7b29036e7aba2d2294fb65053bd30fe55fe  
> LICENSE.web2py.txt
> diff --git a/package/python-web2py/python-web2py.mk 
> b/package/python-web2py/python-web2py.mk
> index 68847a2385..27777e3430 100644
> --- a/package/python-web2py/python-web2py.mk
> +++ b/package/python-web2py/python-web2py.mk
> @@ -4,7 +4,7 @@
>  #
>  
> ################################################################################
> 
> -PYTHON_WEB2PY_VERSION_UPSTREAM = 3.1.1
> +PYTHON_WEB2PY_VERSION_UPSTREAM = 3.3.3
>  PYTHON_WEB2PY_VERSION = v$(PYTHON_WEB2PY_VERSION_UPSTREAM)
>  PYTHON_WEB2PY_SITE = https://github.com/web2py/web2py.git
>  PYTHON_WEB2PY_SITE_METHOD = git
> --
> 2.34.1

Could you send an updated patch addressing those comments, please?

Best regards,

Julien.
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] [PATCH v2 0/2] package/python-web2py: bump to version 3.3.3

[Angelo Compagnucci]

web2py 3.3.3 stores binaries/*.zip with Git LFS, so the archive
generated by the git download method depends on git-lfs being installed
on the build host. This is why the hash didn't match for Julien: without
git-lfs the archive contains the LFS pointers (68efbfdc...), with it the
actual zip files.

v2 downloads the release tag archive with the github helper, which is
the same on every host, and uses the python-pydal, python-yatl and new
python-rocket3 packages instead of the git submodules, which are not
part of that archive.

About the "module 'hashlib' has no attribute 'pbkdf2_hmac'" failure: I
couldn't reproduce it with a clean build, with the admin panel enabled
(the default), which selects BR2_PACKAGE_HOST_PYTHON3_SSL. It may come
from a host-python3 built before python-web2py was enabled, as changing
that option doesn't rebuild host-python3.

Changes v1 -> v2:
  - use the comparison between the tags as changelog [Julien]
  - download the release tag archive and add the python-rocket3
    package, as the git archive hash depended on git-lfs [Julien]
  - update the list of files not installed on the target

Angelo Compagnucci (2):
  package/python-rocket3: new package
  package/python-web2py: bump to version 3.3.3

 DEVELOPERS                                 |  1 +
 package/Config.in                          |  1 +
 package/python-rocket3/Config.in           |  8 +++++
 package/python-rocket3/python-rocket3.hash |  5 +++
 package/python-rocket3/python-rocket3.mk   | 15 ++++++++
 package/python-web2py/Config.in            |  1 +
 package/python-web2py/python-web2py.hash   |  2 +-
 package/python-web2py/python-web2py.mk     | 40 ++++++++++++++++------
 8 files changed, 61 insertions(+), 12 deletions(-)
 create mode 100644 package/python-rocket3/Config.in
 create mode 100644 package/python-rocket3/python-rocket3.hash
 create mode 100644 package/python-rocket3/python-rocket3.mk

-- 
2.34.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] [PATCH v2 1/2] package/python-rocket3: new package

[Angelo Compagnucci]

rocket3 is a multi-threaded WSGI web server, used by web2py, which
bundles it as a git submodule.

Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
---
Changes v1 -> v2:
  - new patch
---
 DEVELOPERS                                 |  1 +
 package/Config.in                          |  1 +
 package/python-rocket3/Config.in           |  8 ++++++++
 package/python-rocket3/python-rocket3.hash |  5 +++++
 package/python-rocket3/python-rocket3.mk   | 15 +++++++++++++++
 5 files changed, 30 insertions(+)
 create mode 100644 package/python-rocket3/Config.in
 create mode 100644 package/python-rocket3/python-rocket3.hash
 create mode 100644 package/python-rocket3/python-rocket3.mk

diff --git a/DEVELOPERS b/DEVELOPERS
index 02834f1438..a4f7df7d6e 100644
--- a/DEVELOPERS
+++ b/DEVELOPERS
@@ -249,6 +249,7 @@ F:	package/python-can/
 F:	package/python-minimalmodbus/
 F:	package/python-pillow/
 F:	package/python-pydal/
+F:	package/python-rocket3/
 F:	package/python-spidev/
 F:	package/python-web2py/
 F:	package/qpdf/
diff --git a/package/Config.in b/package/Config.in
index 933b072ae0..e4b92fe5a4 100644
--- a/package/Config.in
+++ b/package/Config.in
@@ -1406,6 +1406,7 @@ menu "External python modules"
 	source "package/python-rfc3987/Config.in"
 	source "package/python-rgbmatrix/Config.in"
 	source "package/python-rich/Config.in"
+	source "package/python-rocket3/Config.in"
 	source "package/python-rpds-py/Config.in"
 	source "package/python-rpi-gpio/Config.in"
 	source "package/python-rpi-ws281x/Config.in"
diff --git a/package/python-rocket3/Config.in b/package/python-rocket3/Config.in
new file mode 100644
index 0000000000..5e7a636613
--- /dev/null
+++ b/package/python-rocket3/Config.in
@@ -0,0 +1,8 @@
+config BR2_PACKAGE_PYTHON_ROCKET3
+	bool "python-rocket3"
+	select BR2_PACKAGE_PYTHON3_SSL # runtime
+	help
+	  A multi-threaded WSGI compliant and secure web server, used
+	  by web2py.
+
+	  https://github.com/web2py/rocket3
diff --git a/package/python-rocket3/python-rocket3.hash b/package/python-rocket3/python-rocket3.hash
new file mode 100644
index 0000000000..b00553fcdb
--- /dev/null
+++ b/package/python-rocket3/python-rocket3.hash
@@ -0,0 +1,5 @@
+# md5, sha256 from https://pypi.org/pypi/rocket3/json
+md5  4bd413cb4a6ca32fc4d27046fda804da  rocket3-20260526.0.tar.gz
+sha256  5828422badec10e45bf18f837f14d3022c98b19ac66dbb8fbaafdb17f8d4cdb3  rocket3-20260526.0.tar.gz
+# Locally computed sha256 checksums
+sha256  1f711e93f1e0c2eec576e2e60597dc2ed6f0a661e4749c6b8a39f0d4a72be468  LICENSE.txt
diff --git a/package/python-rocket3/python-rocket3.mk b/package/python-rocket3/python-rocket3.mk
new file mode 100644
index 0000000000..00e1f07ed6
--- /dev/null
+++ b/package/python-rocket3/python-rocket3.mk
@@ -0,0 +1,15 @@
+################################################################################
+#
+# python-rocket3
+#
+################################################################################
+
+PYTHON_ROCKET3_VERSION = 20260526.0
+PYTHON_ROCKET3_SOURCE = rocket3-$(PYTHON_ROCKET3_VERSION).tar.gz
+PYTHON_ROCKET3_SITE = https://files.pythonhosted.org/packages/ca/f7/fed13d11a5c93e19daddf1fa73ce09fcdb58b43ce2ae95a653150dd3bcca
+PYTHON_ROCKET3_SETUP_TYPE = setuptools
+PYTHON_ROCKET3_LICENSE = BSD-3-Clause
+PYTHON_ROCKET3_LICENSE_FILES = LICENSE.txt
+
+$(eval $(python-package))
+$(eval $(host-python-package))
-- 
2.34.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

[Buildroot] [PATCH v2 2/2] package/python-web2py: bump to version 3.3.3

[Angelo Compagnucci]

web2py 3.3.3 stores binaries/*.zip with Git LFS, so the archive
generated from the git repository depends on git-lfs being installed on
the build host: it contains either the zip files or their LFS pointers,
with different hashes.

So download the release tag archive with the github helper instead,
which doesn't include the git submodules (pydal, yatl and rocket3): in
that case, gluon imports the installed modules, provided by
python-pydal, python-yatl and the new python-rocket3 package.
host-python-rocket3 is needed to generate the admin panel password.

Update the list of files not installed on the target, as some of them
were renamed, removed or added in the new version, and also exclude the
Buildroot stamp and file list files.

Changes:
https://github.com/web2py/web2py/compare/v3.1.1...v3.3.3

Signed-off-by: Angelo Compagnucci <angelo.compagnucci@gmail.com>
---
Changes v1 -> v2:
  - use the comparison between the tags as changelog [Julien]
  - download the release tag archive with the github helper and use the
    python-pydal, python-yatl and new python-rocket3 packages instead of
    the git submodules, as the git archive hash depended on git-lfs
    being installed [Julien]
  - update the list of files not installed on the target
---
 package/python-web2py/Config.in          |  1 +
 package/python-web2py/python-web2py.hash |  2 +-
 package/python-web2py/python-web2py.mk   | 40 +++++++++++++++++-------
 3 files changed, 31 insertions(+), 12 deletions(-)

diff --git a/package/python-web2py/Config.in b/package/python-web2py/Config.in
index 0c141d9fc5..83ce4b3e74 100644
--- a/package/python-web2py/Config.in
+++ b/package/python-web2py/Config.in
@@ -1,6 +1,7 @@
 config BR2_PACKAGE_PYTHON_WEB2PY
 	bool "python-web2py"
 	select BR2_PACKAGE_PYTHON_PYDAL # runtime
+	select BR2_PACKAGE_PYTHON_ROCKET3 # runtime
 	select BR2_PACKAGE_PYTHON3_ZLIB # runtime
 	select BR2_PACKAGE_PYTHON3_PYEXPAT # runtime
 	select BR2_PACKAGE_PYTHON3_SQLITE # runtime
diff --git a/package/python-web2py/python-web2py.hash b/package/python-web2py/python-web2py.hash
index b100a1fec8..5e7fd0d9b4 100644
--- a/package/python-web2py/python-web2py.hash
+++ b/package/python-web2py/python-web2py.hash
@@ -1,3 +1,3 @@
 # sha256 locally computed
-sha256  b22b5c2db862cdef9e0feace1c8841741a14eb5e735b674d6ce2bd5c7f4cac64  python-web2py-v3.1.1-git4.tar.gz
+sha256  38655b8f1c9737348b61669ccb2beaecdba1f6bf1e9a5cfa697a14b660b31a78  python-web2py-v3.3.3.tar.gz
 sha256  2aae96826184a492bc799add49aed7b29036e7aba2d2294fb65053bd30fe55fe  LICENSE.web2py.txt
diff --git a/package/python-web2py/python-web2py.mk b/package/python-web2py/python-web2py.mk
index 68847a2385..168c1d3445 100644
--- a/package/python-web2py/python-web2py.mk
+++ b/package/python-web2py/python-web2py.mk
@@ -4,11 +4,9 @@
 #
 ################################################################################
 
-PYTHON_WEB2PY_VERSION_UPSTREAM = 3.1.1
+PYTHON_WEB2PY_VERSION_UPSTREAM = 3.3.3
 PYTHON_WEB2PY_VERSION = v$(PYTHON_WEB2PY_VERSION_UPSTREAM)
-PYTHON_WEB2PY_SITE = https://github.com/web2py/web2py.git
-PYTHON_WEB2PY_SITE_METHOD = git
-PYTHON_WEB2PY_GIT_SUBMODULES = YES
+PYTHON_WEB2PY_SITE = $(call github,web2py,web2py,$(PYTHON_WEB2PY_VERSION))
 PYTHON_WEB2PY_LICENSE = LGPL-3.0
 PYTHON_WEB2PY_LICENSE_FILES = LICENSE.web2py.txt
 PYTHON_WEB2PY_CPE_ID_VENDOR = web2py
@@ -21,20 +19,33 @@ PYTHON_WEB2PY_EXCLUSIONS = \
 	welcome.w2p \
 	applications/examples \
 	applications/welcome \
+	binaries \
 	deposit \
+	docker \
 	docs \
 	examples \
 	extras \
 	handlers \
 	scripts \
-	ABOUT \
+	.codecov.yml \
+	.gitattributes \
+	.github \
+	.gitignore \
+	.gitmodules \
+	.travis.yml \
+	ABOUT.web2py.txt \
 	anyserver.py \
-	CHANGELOG \
+	app.yaml \
+	appveyor.yml \
+	CHANGELOG.md \
+	gae.nix \
 	Makefile \
-	MANIFEST.in \
-	README.markdown \
-	setup.py \
-	tox.ini
+	README.md \
+	requirements.gae.txt \
+	requirements.txt \
+	SECURITY.md \
+	tox.ini \
+	versioning-and-support-policy.md
 
 define PYTHON_WEB2PY_GENERATE_PASSWORD
 	$(HOST_DIR)/bin/python -c 'import os; \
@@ -44,15 +55,22 @@ define PYTHON_WEB2PY_GENERATE_PASSWORD
 endef
 
 ifeq ($(BR2_PACKAGE_PYTHON_WEB2PY_INSTALL_ADMIN),y)
+# gluon imports rocket3 to generate the password
+PYTHON_WEB2PY_DEPENDENCIES += host-python-rocket3
 PYTHON_WEB2PY_POST_BUILD_HOOKS += PYTHON_WEB2PY_GENERATE_PASSWORD
 else
 PYTHON_WEB2PY_EXCLUSIONS += applications/admin
 endif
 
+# The build directory also contains the Buildroot stamp and file list
+# files, which must not be installed.
 define PYTHON_WEB2PY_INSTALL_TARGET_CMDS
 	mkdir -p $(TARGET_DIR)/var/www/web2py
 	rsync -a $(@D)/ $(TARGET_DIR)/var/www/web2py/ \
-		$(addprefix --exclude=,$(PYTHON_WEB2PY_EXCLUSIONS))
+		$(addprefix --exclude=,$(PYTHON_WEB2PY_EXCLUSIONS)) \
+		--exclude='.stamp_*' \
+		--exclude='.files-list*' \
+		--exclude=.applied_patches_list
 endef
 
 define PYTHON_WEB2PY_INSTALL_INIT_SYSV
-- 
2.34.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot