unofficial mirror of guix-patches@gnu.org 
 help / color / mirror / code / Atom feed
* [bug#40742] [PATCH] Update python-tortoise-orm and deps (security fix)
@ 2020-04-21  8:58 Lars-Dominik Braun
  2020-04-21 16:32 ` Leo Famulari
  0 siblings, 1 reply; 4+ messages in thread
From: Lars-Dominik Braun @ 2020-04-21  8:58 UTC (permalink / raw)
  To: 40742


[-- Attachment #1.1: Type: text/plain, Size: 150 bytes --]

Hi,

the attached patch series updates python-tortoise-orm and its dependencies.
tortoise-orm has received a security fix with version 0.16.6.

Lars


[-- Attachment #1.2: 0001-gnu-python-aiosqlite-Update-to-0.12.0.patch --]
[-- Type: text/x-diff, Size: 1179 bytes --]

From 0ecef561fc88e52682c67d5112b43ac3d5c495f1 Mon Sep 17 00:00:00 2001
From: Lars-Dominik Braun <ldb@leibniz-psychology.org>
Date: Tue, 21 Apr 2020 10:34:30 +0200
Subject: [PATCH 1/4] gnu: python-aiosqlite: Update to 0.12.0

* gnu/packages/databases.scm (python-aiosqlite): Update to 0.12.0
---
 gnu/packages/databases.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
index 606594e005..bf5398d87b 100644
--- a/gnu/packages/databases.scm
+++ b/gnu/packages/databases.scm
@@ -2743,14 +2743,14 @@ translate the complete SQLite API into Python.")
 (define-public python-aiosqlite
   (package
     (name "python-aiosqlite")
-    (version "0.11.0")
+    (version "0.12.0")
     (source
      (origin
        (method url-fetch)
        (uri (pypi-uri "aiosqlite" version))
        (sha256
         (base32
-         "1f3zdldp9zgrw6qz5fsp3wa5zw73cjf139pj4vf24ryv895320jg"))))
+         "1w8248yz85xyzvvh4jaxnc59fqil45aka6h82kn1rcih4rjxbnn1"))))
     (build-system python-build-system)
     (native-inputs
      `(("python-aiounittest" ,python-aiounittest)))
-- 
2.20.1


[-- Attachment #1.3: 0002-gnu-python-pypika-Update-to-0.37.1.patch --]
[-- Type: text/x-diff, Size: 1580 bytes --]

From 1a50c8c5c0768f387b4f822d53e48858bf5aa403 Mon Sep 17 00:00:00 2001
From: Lars-Dominik Braun <ldb@leibniz-psychology.org>
Date: Tue, 21 Apr 2020 10:35:33 +0200
Subject: [PATCH 2/4] gnu: python-pypika: Update to 0.37.1

* gnu/packages/databases.scm (python-pypika): Update to 0.37.1
---
 gnu/packages/databases.scm | 17 ++++++++++-------
 1 file changed, 10 insertions(+), 7 deletions(-)

diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
index bf5398d87b..b629fc098b 100644
--- a/gnu/packages/databases.scm
+++ b/gnu/packages/databases.scm
@@ -3074,14 +3074,17 @@ transforms idiomatic python function calls to well-formed SQL queries.")
 (define-public python-pypika
   (package
     (name "python-pypika")
-    (version "0.36.0")
+    (version "0.37.1")
     (source
-     (origin
-       (method url-fetch)
-       (uri (pypi-uri "PyPika" version))
-       (sha256
-        (base32
-         "0qzn5vygirg52dlizm6ayzdc5llq8p2krrx0kymr236lrz89wqp8"))))
+     (origin (method git-fetch)
+             (uri (git-reference
+                   (url "https://github.com/kayak/pypika.git")
+                   ;; releases are not tagged in git
+                   (commit "ff97e3605448bf0ef67f2348ebdb1021f26c7416")))
+             (file-name (git-file-name name version))
+             (sha256
+              (base32
+               "08s6limzgjm4k2pw7gzbhx8914phr673dpi66q5s0zniwq6v72rh"))))
     (build-system python-build-system)
     (native-inputs
      `(("python-parameterized" ,python-parameterized)))
-- 
2.20.1


[-- Attachment #1.4: 0003-gnu-python-tortoise-orm-Update-to-0.16.7.patch --]
[-- Type: text/x-diff, Size: 1838 bytes --]

From 0f0fd13d570b35ef2eecb925eeb3285e03926322 Mon Sep 17 00:00:00 2001
From: Lars-Dominik Braun <ldb@leibniz-psychology.org>
Date: Tue, 21 Apr 2020 10:36:29 +0200
Subject: [PATCH 3/4] gnu: python-tortoise-orm: Update to 0.16.7

0.16.6, which we skipped, includes a security fix.

* gnu/packages/databases.scm (python-tortoise-orm)[source]: Update to 0.16.7
[propagated-inputs] Propagate ciso8601, which is required in setup.py
---
 gnu/packages/databases.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
index b629fc098b..503b11e6fe 100644
--- a/gnu/packages/databases.scm
+++ b/gnu/packages/databases.scm
@@ -2197,24 +2197,24 @@ can autogenerate peewee models using @code{pwiz}, a model generator.")
 (define-public python-tortoise-orm
   (package
     (name "python-tortoise-orm")
-    (version "0.16.3")
+    (version "0.16.7")
     (source
      (origin
        (method url-fetch)
        (uri (pypi-uri "tortoise-orm" version))
        (sha256
         (base32
-         "01hbvfyxs2qd1mjc96aipwsdxxhydw8ww686r4gsf87bl6f98dvz"))))
+         "0wr7p4v0b16ypm9fcpwpl99kf491m6w3jkd13xcsgq13fy73fbqc"))))
     (build-system python-build-system)
     ;; Disable tests for now. They pull in a lot of dependencies.
     (arguments `(#:tests? #f))
     (native-inputs
-     `(("python-ciso8601" ,python-ciso8601)
-       ("python-asynctest" ,python-asynctest)
+     `(("python-asynctest" ,python-asynctest)
        ("python-nose2" ,python-nose2)))
     (propagated-inputs
      `(("python-aiosqlite" ,python-aiosqlite)
        ("python-pypika" ,python-pypika)
+       ("python-ciso8601" ,python-ciso8601)
        ("python-typing-extensions"
         ,python-typing-extensions)))
     (home-page
-- 
2.20.1


[-- Attachment #1.5: 0004-gnu-python-pypika-Update-to-0.37.2.patch --]
[-- Type: text/x-diff, Size: 1527 bytes --]

From e625bb6dba074871af6f311fceb2322f9b8084f3 Mon Sep 17 00:00:00 2001
From: Lars-Dominik Braun <ldb@leibniz-psychology.org>
Date: Tue, 21 Apr 2020 10:48:56 +0200
Subject: [PATCH 4/4] gnu: python-pypika: Update to 0.37.2

* gnu/packages/databases.scm (python-pypika): Update to 0.37.2
---
 gnu/packages/databases.scm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
index 503b11e6fe..08a1e1b4ad 100644
--- a/gnu/packages/databases.scm
+++ b/gnu/packages/databases.scm
@@ -3074,17 +3074,17 @@ transforms idiomatic python function calls to well-formed SQL queries.")
 (define-public python-pypika
   (package
     (name "python-pypika")
-    (version "0.37.1")
+    (version "0.37.2")
     (source
      (origin (method git-fetch)
              (uri (git-reference
                    (url "https://github.com/kayak/pypika.git")
                    ;; releases are not tagged in git
-                   (commit "ff97e3605448bf0ef67f2348ebdb1021f26c7416")))
+                   (commit "baef001dd2362661311b6e2f949d2be4de5c23c8")))
              (file-name (git-file-name name version))
              (sha256
               (base32
-               "08s6limzgjm4k2pw7gzbhx8914phr673dpi66q5s0zniwq6v72rh"))))
+               "089z1c778q1fwhzsc88ws8j5gm2hgxknibabn4wpax8rz2bfs3ck"))))
     (build-system python-build-system)
     (native-inputs
      `(("python-parameterized" ,python-parameterized)))
-- 
2.20.1


[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 659 bytes --]

^ permalink raw reply related	[flat|nested] 4+ messages in thread

* [bug#40742] [PATCH] Update python-tortoise-orm and deps (security fix)
  2020-04-21  8:58 [bug#40742] [PATCH] Update python-tortoise-orm and deps (security fix) Lars-Dominik Braun
@ 2020-04-21 16:32 ` Leo Famulari
  2020-04-24  6:50   ` Lars-Dominik Braun
  0 siblings, 1 reply; 4+ messages in thread
From: Leo Famulari @ 2020-04-21 16:32 UTC (permalink / raw)
  To: Lars-Dominik Braun; +Cc: 40742

On Tue, Apr 21, 2020 at 10:58:13AM +0200, Lars-Dominik Braun wrote:
> Hi,
> 
> the attached patch series updates python-tortoise-orm and its dependencies.
> tortoise-orm has received a security fix with version 0.16.6.

Okay,

> Subject: [PATCH 1/4] gnu: python-aiosqlite: Update to 0.12.0
> Subject: [PATCH 2/4] gnu: python-pypika: Update to 0.37.1
> Subject: [PATCH 3/4] gnu: python-tortoise-orm: Update to 0.16.7
> Subject: [PATCH 4/4] gnu: python-pypika: Update to 0.37.2

Can we skip patch 2? Or combine it with patch 4?

^ permalink raw reply	[flat|nested] 4+ messages in thread

* [bug#40742] [PATCH] Update python-tortoise-orm and deps (security fix)
  2020-04-21 16:32 ` Leo Famulari
@ 2020-04-24  6:50   ` Lars-Dominik Braun
  2020-04-29 19:12     ` bug#40742: " Leo Famulari
  0 siblings, 1 reply; 4+ messages in thread
From: Lars-Dominik Braun @ 2020-04-24  6:50 UTC (permalink / raw)
  To: Leo Famulari; +Cc: 40742


[-- Attachment #1.1: Type: text/plain, Size: 181 bytes --]

Hi,

> Can we skip patch 2? Or combine it with patch 4?
sorry for the delay. I squashed them and got upstream to upload tags to git.
Updated patchset attached to this email.

Lars


[-- Attachment #1.2: 0001-gnu-python-aiosqlite-Update-to-0.12.0.patch --]
[-- Type: text/x-diff, Size: 1179 bytes --]

From 0ecef561fc88e52682c67d5112b43ac3d5c495f1 Mon Sep 17 00:00:00 2001
From: Lars-Dominik Braun <ldb@leibniz-psychology.org>
Date: Tue, 21 Apr 2020 10:34:30 +0200
Subject: [PATCH 1/3] gnu: python-aiosqlite: Update to 0.12.0

* gnu/packages/databases.scm (python-aiosqlite): Update to 0.12.0
---
 gnu/packages/databases.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
index 606594e005..bf5398d87b 100644
--- a/gnu/packages/databases.scm
+++ b/gnu/packages/databases.scm
@@ -2743,14 +2743,14 @@ translate the complete SQLite API into Python.")
 (define-public python-aiosqlite
   (package
     (name "python-aiosqlite")
-    (version "0.11.0")
+    (version "0.12.0")
     (source
      (origin
        (method url-fetch)
        (uri (pypi-uri "aiosqlite" version))
        (sha256
         (base32
-         "1f3zdldp9zgrw6qz5fsp3wa5zw73cjf139pj4vf24ryv895320jg"))))
+         "1w8248yz85xyzvvh4jaxnc59fqil45aka6h82kn1rcih4rjxbnn1"))))
     (build-system python-build-system)
     (native-inputs
      `(("python-aiounittest" ,python-aiounittest)))
-- 
2.20.1


[-- Attachment #1.3: 0002-gnu-python-pypika-Update-to-0.37.2.patch --]
[-- Type: text/x-diff, Size: 1508 bytes --]

From 1fb2c59a405cc9117753e86ae29be270a64f0cab Mon Sep 17 00:00:00 2001
From: Lars-Dominik Braun <ldb@leibniz-psychology.org>
Date: Tue, 21 Apr 2020 10:35:33 +0200
Subject: [PATCH 2/3] gnu: python-pypika: Update to 0.37.2

* gnu/packages/databases.scm (python-pypika): Update to 0.37.2
---
 gnu/packages/databases.scm | 16 +++++++++-------
 1 file changed, 9 insertions(+), 7 deletions(-)

diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
index bf5398d87b..57a5128e9e 100644
--- a/gnu/packages/databases.scm
+++ b/gnu/packages/databases.scm
@@ -3074,14 +3074,16 @@ transforms idiomatic python function calls to well-formed SQL queries.")
 (define-public python-pypika
   (package
     (name "python-pypika")
-    (version "0.36.0")
+    (version "0.37.2")
     (source
-     (origin
-       (method url-fetch)
-       (uri (pypi-uri "PyPika" version))
-       (sha256
-        (base32
-         "0qzn5vygirg52dlizm6ayzdc5llq8p2krrx0kymr236lrz89wqp8"))))
+     (origin (method git-fetch)
+             (uri (git-reference
+                   (url "https://github.com/kayak/pypika.git")
+                   (commit (string-append "v" version))))
+             (file-name (git-file-name name version))
+             (sha256
+              (base32
+               "089z1c778q1fwhzsc88ws8j5gm2hgxknibabn4wpax8rz2bfs3ck"))))
     (build-system python-build-system)
     (native-inputs
      `(("python-parameterized" ,python-parameterized)))
-- 
2.20.1


[-- Attachment #1.4: 0003-gnu-python-tortoise-orm-Update-to-0.16.7.patch --]
[-- Type: text/x-diff, Size: 1838 bytes --]

From 0cb47c30c36c5e49c666da32d0c234b3120bb0fe Mon Sep 17 00:00:00 2001
From: Lars-Dominik Braun <ldb@leibniz-psychology.org>
Date: Tue, 21 Apr 2020 10:36:29 +0200
Subject: [PATCH 3/3] gnu: python-tortoise-orm: Update to 0.16.7

0.16.6, which we skipped, includes a security fix.

* gnu/packages/databases.scm (python-tortoise-orm)[source]: Update to 0.16.7
[propagated-inputs] Propagate ciso8601, which is required in setup.py
---
 gnu/packages/databases.scm | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm
index 57a5128e9e..23b8f14c54 100644
--- a/gnu/packages/databases.scm
+++ b/gnu/packages/databases.scm
@@ -2197,24 +2197,24 @@ can autogenerate peewee models using @code{pwiz}, a model generator.")
 (define-public python-tortoise-orm
   (package
     (name "python-tortoise-orm")
-    (version "0.16.3")
+    (version "0.16.7")
     (source
      (origin
        (method url-fetch)
        (uri (pypi-uri "tortoise-orm" version))
        (sha256
         (base32
-         "01hbvfyxs2qd1mjc96aipwsdxxhydw8ww686r4gsf87bl6f98dvz"))))
+         "0wr7p4v0b16ypm9fcpwpl99kf491m6w3jkd13xcsgq13fy73fbqc"))))
     (build-system python-build-system)
     ;; Disable tests for now. They pull in a lot of dependencies.
     (arguments `(#:tests? #f))
     (native-inputs
-     `(("python-ciso8601" ,python-ciso8601)
-       ("python-asynctest" ,python-asynctest)
+     `(("python-asynctest" ,python-asynctest)
        ("python-nose2" ,python-nose2)))
     (propagated-inputs
      `(("python-aiosqlite" ,python-aiosqlite)
        ("python-pypika" ,python-pypika)
+       ("python-ciso8601" ,python-ciso8601)
        ("python-typing-extensions"
         ,python-typing-extensions)))
     (home-page
-- 
2.20.1


[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 659 bytes --]

^ permalink raw reply related	[flat|nested] 4+ messages in thread

* bug#40742: [PATCH] Update python-tortoise-orm and deps (security fix)
  2020-04-24  6:50   ` Lars-Dominik Braun
@ 2020-04-29 19:12     ` Leo Famulari
  0 siblings, 0 replies; 4+ messages in thread
From: Leo Famulari @ 2020-04-29 19:12 UTC (permalink / raw)
  To: Lars-Dominik Braun; +Cc: 40742-done

[-- Attachment #1: Type: text/plain, Size: 320 bytes --]

On Fri, Apr 24, 2020 at 08:50:56AM +0200, Lars-Dominik Braun wrote:
> Hi,
> 
> > Can we skip patch 2? Or combine it with patch 4?
> sorry for the delay. I squashed them and got upstream to upload tags to git.
> Updated patchset attached to this email.

Thanks! Pushed as b9d96ed77343e3f158f7ee1c758270bf4f059a74

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2020-04-29 19:14 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2020-04-21  8:58 [bug#40742] [PATCH] Update python-tortoise-orm and deps (security fix) Lars-Dominik Braun
2020-04-21 16:32 ` Leo Famulari
2020-04-24  6:50   ` Lars-Dominik Braun
2020-04-29 19:12     ` bug#40742: " Leo Famulari

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/guix.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).