Mirror of packages feed https://git.openwrt.org/feed/packages/atom?h=master 2023-05-26T14:06:08Z 2023-05-26T14:06:08Z Jeffery To 2023-05-18T05:36:24Z urn:sha1:eee273507b868ad5f6f7e744d513c85330967906 Packaging pip from a separate source package allows it to stay updated with upstream. Host pip will remain installed as part of python3. Host pip is used in a much more controlled way and so is less critical for it to track upstream. This also removes the python-pip-conf package and installs the pip.conf file as part of python3-pip. The patch 003-disable-pip-version-check.patch is originally from Debian: https://salsa.debian.org/python-team/packages/python-pip/-/blob/bb079efb8c6dd2c284eee94cf90e61bce19a6f73/debian/patches/disable-pip-version-check.patch pip was in a separate source package that was removed in a53d0c5a403d1669e2cf6c59c2be6a9d3ed633a0; this work is not based on that earlier package. Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2023-05-24T03:04:33Z Jeffery To 2023-05-05T09:23:49Z urn:sha1:2445fe9fb25e6d9eed28aa9ad237bd250d1600d1 * Removed patches: * 001-enable-zlib.patch: zlib module should be enabled automatically * 007-distutils-do-not-adjust-path.patch: Not necessary since we process shebang lines for all scripts (in python3-package.mk) * 030-bpo-43112-detect-musl-as-a-separate-SOABI-GH-24502.patch: Already merged * Move configure vars from config.site back into Makefile Centralizing all build information into one file makes it easier to maintain * No longer set ac_cv_header_uuid_h=yes as configure should detect libuuid * Order configure args by enable-/disable-/with-/without-, then alphabetically * Set ac_cv_working_openssl_hashlib=yes for host configure to bypass the OpenSSL API tests with LibreSSL * Use the default Host/Compile recipe instead of picking out specific targets to make Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2021-05-11T08:50:35Z Alexandru Ardelean 2021-05-10T07:10:17Z urn:sha1:e312275dd9c25c4032b4d2d3623b042905c8bf16 Refreshed Python patches. Updated pip & setuptools version. For pip, patch '001-pep517-pyc-fix.patch' was reworked. Also, the current version of the bundled pip (21.1.1) no longer supports Python2, so the 'py2.py3' suffix gets replaced with just py3. For setuptools, there is no longer a script/module: https://github.com/pypa/setuptools/pull/2544 Signed-off-by: Alexandru Ardelean <ardeleanalex@gmail.com> 2020-07-20T09:30:14Z Jeffery To 2020-07-19T21:48:57Z urn:sha1:1a3cef77d465ea1a53e5c80f869908f359e98c5e This version includes fixes for: * CVE-2020-14422: Hash collisions in IPv4Interface and IPv6Interface * CVE-2020-15523: Python uses invalid DLL path after calling Py_SetPath on Windows This version also includes support for OpenSSL 1.1.x builds that use 'no-deprecated' and '--api=1.1.0'[1], and so this removes the previous OpenSSL-related patches. This also backports fixes for security issues, including: * CVE-2019-20907: Infinite loop in the tarfile module This also updates the setuptools and pip packages to 47.1.0 and 20.1.1, respectively. [1]: https://github.com/python/cpython/pull/20566 Signed-off-by: Jeffery To <jeffery.to@gmail.com> 2020-04-24T13:09:37Z Jeffery To 2020-04-24T13:09:37Z urn:sha1:11bc05763d6cb351842a7bd55e736b601656a41a This addresses one of the issues raised in #11912. Signed-off-by: Jeffery To <jeffery.to@gmail.com>