From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:470:142:3::10]:58352) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jQokB-0006bT-Rc for guix-patches@gnu.org; Tue, 21 Apr 2020 04:59:04 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.90_1) (envelope-from ) id 1jQokB-0002LK-7u for guix-patches@gnu.org; Tue, 21 Apr 2020 04:59:03 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:37488) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jQokA-0002KO-Hs for guix-patches@gnu.org; Tue, 21 Apr 2020 04:59:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1jQokA-0007PS-Hz for guix-patches@gnu.org; Tue, 21 Apr 2020 04:59:02 -0400 Subject: [bug#40742] [PATCH] Update python-tortoise-orm and deps (security fix) Resent-Message-ID: Received: from eggs.gnu.org ([2001:470:142:3::10]:58222) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1jQojY-0005ct-IB for guix-patches@gnu.org; Tue, 21 Apr 2020 04:58:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.90_1) (envelope-from ) id 1jQojS-00010v-99 for guix-patches@gnu.org; Tue, 21 Apr 2020 04:58:24 -0400 Received: from mail-wm1-x342.google.com ([2a00:1450:4864:20::342]:40789) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1jQojR-0000wL-If for guix-patches@gnu.org; Tue, 21 Apr 2020 04:58:17 -0400 Received: by mail-wm1-x342.google.com with SMTP id u16so2726804wmc.5 for ; Tue, 21 Apr 2020 01:58:16 -0700 (PDT) Received: from localhost (dynamic-2a01-0c22-c813-0900-7494-ad80-8848-1078.c22.pool.telefonica.de. [2a01:c22:c813:900:7494:ad80:8848:1078]) by smtp.gmail.com with ESMTPSA id 68sm2834533wrm.65.2020.04.21.01.58.13 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 21 Apr 2020 01:58:14 -0700 (PDT) Date: Tue, 21 Apr 2020 10:58:13 +0200 From: Lars-Dominik Braun Message-ID: <20200421085813.GB3527@zpidnp36> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="+xNpyl7Qekk2NvDX" Content-Disposition: inline List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-patches-bounces+kyle=kyleam.com@gnu.org Sender: "Guix-patches" To: 40742@debbugs.gnu.org --+xNpyl7Qekk2NvDX Content-Type: multipart/mixed; boundary="mxv5cy4qt+RJ9ypb" Content-Disposition: inline --mxv5cy4qt+RJ9ypb Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hi, the attached patch series updates python-tortoise-orm and its dependencies. tortoise-orm has received a security fix with version 0.16.6. Lars --mxv5cy4qt+RJ9ypb Content-Type: text/x-diff; charset=us-ascii Content-Disposition: attachment; filename="0001-gnu-python-aiosqlite-Update-to-0.12.0.patch" Content-Transfer-Encoding: quoted-printable =46rom 0ecef561fc88e52682c67d5112b43ac3d5c495f1 Mon Sep 17 00:00:00 2001 =46rom: Lars-Dominik Braun Date: Tue, 21 Apr 2020 10:34:30 +0200 Subject: [PATCH 1/4] gnu: python-aiosqlite: Update to 0.12.0 * gnu/packages/databases.scm (python-aiosqlite): Update to 0.12.0 --- gnu/packages/databases.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index 606594e005..bf5398d87b 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -2743,14 +2743,14 @@ translate the complete SQLite API into Python.") (define-public python-aiosqlite (package (name "python-aiosqlite") - (version "0.11.0") + (version "0.12.0") (source (origin (method url-fetch) (uri (pypi-uri "aiosqlite" version)) (sha256 (base32 - "1f3zdldp9zgrw6qz5fsp3wa5zw73cjf139pj4vf24ryv895320jg")))) + "1w8248yz85xyzvvh4jaxnc59fqil45aka6h82kn1rcih4rjxbnn1")))) (build-system python-build-system) (native-inputs `(("python-aiounittest" ,python-aiounittest))) --=20 2.20.1 --mxv5cy4qt+RJ9ypb Content-Type: text/x-diff; charset=us-ascii Content-Disposition: attachment; filename="0002-gnu-python-pypika-Update-to-0.37.1.patch" Content-Transfer-Encoding: quoted-printable =46rom 1a50c8c5c0768f387b4f822d53e48858bf5aa403 Mon Sep 17 00:00:00 2001 =46rom: Lars-Dominik Braun Date: Tue, 21 Apr 2020 10:35:33 +0200 Subject: [PATCH 2/4] gnu: python-pypika: Update to 0.37.1 * gnu/packages/databases.scm (python-pypika): Update to 0.37.1 --- gnu/packages/databases.scm | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index bf5398d87b..b629fc098b 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -3074,14 +3074,17 @@ transforms idiomatic python function calls to well-= formed SQL queries.") (define-public python-pypika (package (name "python-pypika") - (version "0.36.0") + (version "0.37.1") (source - (origin - (method url-fetch) - (uri (pypi-uri "PyPika" version)) - (sha256 - (base32 - "0qzn5vygirg52dlizm6ayzdc5llq8p2krrx0kymr236lrz89wqp8")))) + (origin (method git-fetch) + (uri (git-reference + (url "https://github.com/kayak/pypika.git") + ;; releases are not tagged in git + (commit "ff97e3605448bf0ef67f2348ebdb1021f26c7416"))) + (file-name (git-file-name name version)) + (sha256 + (base32 + "08s6limzgjm4k2pw7gzbhx8914phr673dpi66q5s0zniwq6v72rh")))) (build-system python-build-system) (native-inputs `(("python-parameterized" ,python-parameterized))) --=20 2.20.1 --mxv5cy4qt+RJ9ypb Content-Type: text/x-diff; charset=us-ascii Content-Disposition: attachment; filename="0003-gnu-python-tortoise-orm-Update-to-0.16.7.patch" Content-Transfer-Encoding: quoted-printable =46rom 0f0fd13d570b35ef2eecb925eeb3285e03926322 Mon Sep 17 00:00:00 2001 =46rom: Lars-Dominik Braun Date: Tue, 21 Apr 2020 10:36:29 +0200 Subject: [PATCH 3/4] gnu: python-tortoise-orm: Update to 0.16.7 0.16.6, which we skipped, includes a security fix. * gnu/packages/databases.scm (python-tortoise-orm)[source]: Update to 0.16.7 [propagated-inputs] Propagate ciso8601, which is required in setup.py --- gnu/packages/databases.scm | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index b629fc098b..503b11e6fe 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -2197,24 +2197,24 @@ can autogenerate peewee models using @code{pwiz}, a= model generator.") (define-public python-tortoise-orm (package (name "python-tortoise-orm") - (version "0.16.3") + (version "0.16.7") (source (origin (method url-fetch) (uri (pypi-uri "tortoise-orm" version)) (sha256 (base32 - "01hbvfyxs2qd1mjc96aipwsdxxhydw8ww686r4gsf87bl6f98dvz")))) + "0wr7p4v0b16ypm9fcpwpl99kf491m6w3jkd13xcsgq13fy73fbqc")))) (build-system python-build-system) ;; Disable tests for now. They pull in a lot of dependencies. (arguments `(#:tests? #f)) (native-inputs - `(("python-ciso8601" ,python-ciso8601) - ("python-asynctest" ,python-asynctest) + `(("python-asynctest" ,python-asynctest) ("python-nose2" ,python-nose2))) (propagated-inputs `(("python-aiosqlite" ,python-aiosqlite) ("python-pypika" ,python-pypika) + ("python-ciso8601" ,python-ciso8601) ("python-typing-extensions" ,python-typing-extensions))) (home-page --=20 2.20.1 --mxv5cy4qt+RJ9ypb Content-Type: text/x-diff; charset=us-ascii Content-Disposition: attachment; filename="0004-gnu-python-pypika-Update-to-0.37.2.patch" Content-Transfer-Encoding: quoted-printable =46rom e625bb6dba074871af6f311fceb2322f9b8084f3 Mon Sep 17 00:00:00 2001 =46rom: Lars-Dominik Braun Date: Tue, 21 Apr 2020 10:48:56 +0200 Subject: [PATCH 4/4] gnu: python-pypika: Update to 0.37.2 * gnu/packages/databases.scm (python-pypika): Update to 0.37.2 --- gnu/packages/databases.scm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/gnu/packages/databases.scm b/gnu/packages/databases.scm index 503b11e6fe..08a1e1b4ad 100644 --- a/gnu/packages/databases.scm +++ b/gnu/packages/databases.scm @@ -3074,17 +3074,17 @@ transforms idiomatic python function calls to well-= formed SQL queries.") (define-public python-pypika (package (name "python-pypika") - (version "0.37.1") + (version "0.37.2") (source (origin (method git-fetch) (uri (git-reference (url "https://github.com/kayak/pypika.git") ;; releases are not tagged in git - (commit "ff97e3605448bf0ef67f2348ebdb1021f26c7416"))) + (commit "baef001dd2362661311b6e2f949d2be4de5c23c8"))) (file-name (git-file-name name version)) (sha256 (base32 - "08s6limzgjm4k2pw7gzbhx8914phr673dpi66q5s0zniwq6v72rh")))) + "089z1c778q1fwhzsc88ws8j5gm2hgxknibabn4wpax8rz2bfs3ck")))) (build-system python-build-system) (native-inputs `(("python-parameterized" ,python-parameterized))) --=20 2.20.1 --mxv5cy4qt+RJ9ypb-- --+xNpyl7Qekk2NvDX Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQGzBAABCgAdFiEEyk+M9DfXR4/aBV/UQhN3ARo3hEYFAl6etaEACgkQQhN3ARo3 hEZAIgv+K27BUVP+E3B/Mh4GXWLlk6wgUJMR1UqlJm5QC2tpZdJiQ6kSMaWUEIyC s+1cWTSfeH0blIG8ZavrRnsh9DmJEth41V9zpZPqCV37ic9YOU5aPMpbDxj2jQxn JXQs++9pw3tHl4rbByR603q2tGRbqGQdw60u5qHF8cVhzJ6lNjkFedwDfHxHcPrR oeXP9pouv4/Yvl4v8bk/WLsTQObRg8Hnf5c33o+91kt1oBPZq9AGFS8jB0EcraXn Ec8oIfzhyG3zLhAdyxbfFHN0ab3g4KYZ69g7a1uXV1nOrUM7x/JrKrowsJPPat6K 5D/eHVqeeFiIF6js4ZXscbDBIFCXCJkRqGpJCzpaw2TocBNjYotielIP+DYe8LAj Gm+fLXPVT/IAfLWKxAzoqz0Bpx/g8zOZpP24wdSzwGqSK+sWU2OLfGX/eq98KUNe NQQhSZZRYAZgXm9JLHn2HIg8aA9pnrPgFat1xOBVkuBNvCnsCNzGmReHK61OKSlJ Tl8k6dQJ =AOIX -----END PGP SIGNATURE----- --+xNpyl7Qekk2NvDX--