Openembedded Devel Discussions
 help / color / mirror / Atom feed
From: Wang Mingyu < wangmy@fujitsu.com>
To: openembedded-devel@lists.openembedded.org
Cc: Wang Mingyu <wangmy@fujitsu.com>
Subject: [oe] [meta-python] [PATCH 17/37] python3-cbor2: upgrade 6.1.2 -> 6.1.3
Date: Wed,  8 Jul 2026 17:44:27 +0800	[thread overview]
Message-ID: <20260708094508.2060-17-wangmy@fujitsu.com> (raw)
In-Reply-To: <20260708094508.2060-1-wangmy@fujitsu.com>

From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
============
- Fixed the decoder registering 6-byte strings in the string reference
  namespace at indices 65536–4294967295 where the encoder does not,
  desynchronising the namespace and resolving later string references to the
  wrong value
- Fixed the IPv4/IPv6 network decoders (tags 52 and 54) silently truncating an
  address byte string that is longer than the address size instead of rejecting
  it as malformed
- Fixed quadratic decoding time for indefinite-length and large definite-length
  byte and text strings, caused by concatenating each chunk onto the
  accumulated result with + instead of building the result once
- Fixed datetime_as_timestamp encoding whole-second datetimes before 1970 or
  after 2106 as floats instead of integers, because the timestamp was narrowed
  through an unsigned 32-bit integer
- Fixed the encoder measuring text strings by code point count instead of UTF-8
  byte length when deciding whether to add them to the string reference
  namespace, desynchronising it from the decoder (which counts bytes) and
  corrupting later string references for non-ASCII strings
- Fixed the decoder rejecting scoped IPv6 addresses (tag 54) with a
  CBORDecodeError reading invalid types in input array; the encoder emits them
  as [address, null, zone id] but the decoder only handled the network and
  interface array forms, so a scoped ~ipaddress.IPv6Address could not be decoded
  back

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../python/python3-cbor2-crates.inc            | 18 ++++++++++--------
 ...3-cbor2_6.1.2.bb => python3-cbor2_6.1.3.bb} |  2 +-
 2 files changed, 11 insertions(+), 9 deletions(-)
 rename meta-python/recipes-devtools/python/{python3-cbor2_6.1.2.bb => python3-cbor2_6.1.3.bb} (86%)

diff --git a/meta-python/recipes-devtools/python/python3-cbor2-crates.inc b/meta-python/recipes-devtools/python/python3-cbor2-crates.inc
index b7b94b8da1..759cf1a928 100644
--- a/meta-python/recipes-devtools/python/python3-cbor2-crates.inc
+++ b/meta-python/recipes-devtools/python/python3-cbor2-crates.inc
@@ -16,11 +16,12 @@ SRC_URI += " \
     crate://crates.io/once_cell/1.21.3 \
     crate://crates.io/portable-atomic/1.13.1 \
     crate://crates.io/proc-macro2/1.0.106 \
-    crate://crates.io/pyo3/0.28.2 \
+    crate://crates.io/pyo3/0.29.0 \
     crate://crates.io/pyo3-build-config/0.28.2 \
-    crate://crates.io/pyo3-ffi/0.28.2 \
-    crate://crates.io/pyo3-macros/0.28.2 \
-    crate://crates.io/pyo3-macros-backend/0.28.2 \
+    crate://crates.io/pyo3-build-config/0.29.0 \
+    crate://crates.io/pyo3-ffi/0.29.0 \
+    crate://crates.io/pyo3-macros/0.29.0 \
+    crate://crates.io/pyo3-macros-backend/0.29.0 \
     crate://crates.io/quote/1.0.44 \
     crate://crates.io/syn/2.0.117 \
     crate://crates.io/target-lexicon/0.13.5 \
@@ -43,11 +44,12 @@ SRC_URI[num-traits-0.2.19.sha256sum] = "071dfc062690e90b734c0b2273ce72ad0ffa95f0
 SRC_URI[once_cell-1.21.3.sha256sum] = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
 SRC_URI[portable-atomic-1.13.1.sha256sum] = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
 SRC_URI[proc-macro2-1.0.106.sha256sum] = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
-SRC_URI[pyo3-0.28.2.sha256sum] = "cf85e27e86080aafd5a22eae58a162e133a589551542b3e5cee4beb27e54f8e1"
+SRC_URI[pyo3-0.29.0.sha256sum] = "cd274650b21d4bfc26a0a47587962c1edb425f69287324355cd040c3ea66071c"
 SRC_URI[pyo3-build-config-0.28.2.sha256sum] = "8bf94ee265674bf76c09fa430b0e99c26e319c945d96ca0d5a8215f31bf81cf7"
-SRC_URI[pyo3-ffi-0.28.2.sha256sum] = "491aa5fc66d8059dd44a75f4580a2962c1862a1c2945359db36f6c2818b748dc"
-SRC_URI[pyo3-macros-0.28.2.sha256sum] = "f5d671734e9d7a43449f8480f8b38115df67bef8d21f76837fa75ee7aaa5e52e"
-SRC_URI[pyo3-macros-backend-0.28.2.sha256sum] = "22faaa1ce6c430a1f71658760497291065e6450d7b5dc2bcf254d49f66ee700a"
+SRC_URI[pyo3-build-config-0.29.0.sha256sum] = "c5e2a7d2f0d013342f295c048ad19237add5154a55b1c5a254c0ec93d4109078"
+SRC_URI[pyo3-ffi-0.29.0.sha256sum] = "ca85c467da1bbc8d866eea5deff9cf29ea5f7785054a17da36e65bda9c05845b"
+SRC_URI[pyo3-macros-0.29.0.sha256sum] = "9ac53762fd065daa3194dd09337a38bd793a188100fd1a9304c4ab312d901771"
+SRC_URI[pyo3-macros-backend-0.29.0.sha256sum] = "4ca3a1557399783172dc5bf39cfca835157732532cba56b71d2292161e53b362"
 SRC_URI[quote-1.0.44.sha256sum] = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4"
 SRC_URI[syn-2.0.117.sha256sum] = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
 SRC_URI[target-lexicon-0.13.5.sha256sum] = "adb6935a6f5c20170eeceb1a3835a49e12e19d792f6dd344ccc76a985ca5a6ca"
diff --git a/meta-python/recipes-devtools/python/python3-cbor2_6.1.2.bb b/meta-python/recipes-devtools/python/python3-cbor2_6.1.3.bb
similarity index 86%
rename from meta-python/recipes-devtools/python/python3-cbor2_6.1.2.bb
rename to meta-python/recipes-devtools/python/python3-cbor2_6.1.3.bb
index b8e92ca361..9e6d7630f8 100644
--- a/meta-python/recipes-devtools/python/python3-cbor2_6.1.2.bb
+++ b/meta-python/recipes-devtools/python/python3-cbor2_6.1.3.bb
@@ -3,7 +3,7 @@ LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=a79e64179819c7ce293372c059f1dbd8"
 DEPENDS += "python3-setuptools-scm-native"
 
-SRC_URI[sha256sum] = "6b43037a66947dee5af0abb1a4c3a13b3abac5a4a3f32f9771efbbcd030fd909"
+SRC_URI[sha256sum] = "8d70680acb55c04ea5b5ad86da094f9612b53d5a8a65d0f5b3aafc3ce917ecbb"
 
 inherit pypi python_setuptools3_rust cargo-update-recipe-crates ptest-python-pytest
 
-- 
2.43.0



  parent reply	other threads:[~2026-07-08  9:45 UTC|newest]

Thread overview: 37+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-07-08  9:44 [oe] [meta-oe] [PATCH 01/37] bcc: upgrade 0.36.1 -> 0.37.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 02/37] ctags: upgrade 6.2.20260628.0 -> 6.2.20260705.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 03/37] geoclue: upgrade 2.8.1 -> 2.8.2 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 04/37] graphviz: upgrade 15.0.0 -> 15.1.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 05/37] imagemagick: upgrade 7.1.2-26 -> 7.1.2-27 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-perl] [PATCH 06/37] libio-compress-perl: upgrade 2.221 -> 2.223 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 07/37] libsdl3: upgrade 3.4.10 -> 3.4.12 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 08/37] libxmp: upgrade 4.7.0 -> 4.7.1 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-networking] [PATCH 09/37] memcached: upgrade 1.6.42 -> 1.6.43 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 10/37] mm-common: upgrade 1.0.7 -> 1.0.8 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 11/37] ndctl: upgrade v84 -> v85 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-networking] [PATCH 12/37] openvpn: upgrade 2.7.4 -> 2.7.5 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 13/37] ostree: upgrade 2026.1 -> 2026.2 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 14/37] python3-aiohappyeyeballs: upgrade 2.6.2 -> 2.7.1 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 15/37] python3-argcomplete: upgrade 3.6.3 -> 3.7.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 16/37] python3-bumble: upgrade 0.0.230 -> 0.0.231 Wang Mingyu
2026-07-08  9:44 ` Wang Mingyu [this message]
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 18/37] python3-discovery: upgrade 1.4.2 -> 1.4.3 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 19/37] python3-faker: upgrade 40.23.0 -> 40.28.1 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 20/37] python3-huey: upgrade 3.0.3 -> 3.1.1 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 21/37] python3-humanize: upgrade 4.15.0 -> 4.16.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 22/37] python3-jsbeautifier: upgrade 2.0.1 -> 2.0.3 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 23/37] python3-lazy: upgrade 1.6 -> 2.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 24/37] python3-mlcommons-loadgen: upgrade 6.0.15 -> 6.0.16 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 25/37] python3-pillow: upgrade 12.2.0 -> 12.3.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 26/37] python3-responses: upgrade 0.26.1 -> 0.26.2 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 27/37] python3-sentry-sdk: upgrade 2.63.0 -> 2.64.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 28/37] python3-twitter: upgrade 4.16.0 -> 4.17.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 29/37] python3-tzlocal: upgrade 5.4.3 -> 5.4.4 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-python] [PATCH 30/37] python3-xmlschema: upgrade 4.3.1 -> 4.3.2 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 31/37] rabbitmq-c: upgrade 0.16.0 -> 0.17.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 32/37] smarty: upgrade 5.8.3 -> 5.8.4 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 33/37] ssh-audit: upgrade 3.3.0 -> 3.9.0 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-networking] [PATCH 34/37] stunnel: upgrade 5.78 -> 5.79 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-oe] [PATCH 35/37] upower: upgrade 1.91.2 -> 1.91.3 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-networking] [PATCH 36/37] weechat: upgrade 4.9.2 -> 4.9.3 Wang Mingyu
2026-07-08  9:44 ` [oe] [meta-xfce] [PATCH 37/37] xarchiver: upgrade 0.5.4.26 -> 0.5.4.27 Wang Mingyu

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20260708094508.2060-17-wangmy@fujitsu.com \
    --to=wangmy@fujitsu.com \
    --cc=openembedded-devel@lists.openembedded.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox