Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-pikepdf for openSUSE:Factory checked in at 2026-03-24 18:48:46 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-pikepdf (Old) and /work/SRC/openSUSE:Factory/.python-pikepdf.new.8177 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-pikepdf" Tue Mar 24 18:48:46 2026 rev:34 rq:1342102 version:10.5.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python-pikepdf/python-pikepdf.changes 2026-03-17 19:06:05.700643805 +0100 +++ /work/SRC/openSUSE:Factory/.python-pikepdf.new.8177/python-pikepdf.changes 2026-03-24 18:49:34.176190754 +0100 @@ -1,0 +2,11 @@ +Mon Mar 23 20:57:34 UTC 2026 - Dirk Müller <[email protected]> + +- update to 10.5.1: + * Updated lockfile to avoid a PyJWT CVE. We only depend use + PyJWT via pygithub for developer release tooling not in pikepdf + itself, so this is inconsequential for pikepdf users but does + silence automated security advisories. + * Suppressed GCC ``-Wpsabi`` note about C++17 ABI change for + ``std::pair`` in pybind11 headers. + +------------------------------------------------------------------- Old: ---- pikepdf-10.5.0.tar.gz New: ---- pikepdf-10.5.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-pikepdf.spec ++++++ --- /var/tmp/diff_new_pack.BmOim7/_old 2026-03-24 18:49:34.708212706 +0100 +++ /var/tmp/diff_new_pack.BmOim7/_new 2026-03-24 18:49:34.712212871 +0100 @@ -19,7 +19,7 @@ %{?sle15_python_module_pythons} Name: python-pikepdf -Version: 10.5.0 +Version: 10.5.1 Release: 0 Summary: Read and write PDFs with Python, powered by qpdf License: MPL-2.0 ++++++ pikepdf-10.5.0.tar.gz -> pikepdf-10.5.1.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pikepdf-10.5.0/PKG-INFO new/pikepdf-10.5.1/PKG-INFO --- old/pikepdf-10.5.0/PKG-INFO 2026-03-10 09:17:16.557574000 +0100 +++ new/pikepdf-10.5.1/PKG-INFO 2026-03-14 21:43:10.867506500 +0100 @@ -1,6 +1,6 @@ Metadata-Version: 2.4 Name: pikepdf -Version: 10.5.0 +Version: 10.5.1 Summary: Read, write, repair, and transform PDFs in Python, powered by qpdf Author-email: "James R. Barlow" <[email protected]> License-Expression: MPL-2.0 diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pikepdf-10.5.0/docs/conf.py new/pikepdf-10.5.1/docs/conf.py --- old/pikepdf-10.5.0/docs/conf.py 2026-03-10 09:15:38.000000000 +0100 +++ new/pikepdf-10.5.1/docs/conf.py 2026-03-14 21:41:42.000000000 +0100 @@ -105,7 +105,7 @@ # |version| and |release|, also used in various other places throughout the # built documents. -release = "10.5.0" +release = "10.5.1" version = '.'.join(release.split('.')[:2]) # The language for content autogenerated by Sphinx. Refer to documentation diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pikepdf-10.5.0/docs/releasenotes/version10.md new/pikepdf-10.5.1/docs/releasenotes/version10.md --- old/pikepdf-10.5.0/docs/releasenotes/version10.md 2026-03-10 09:15:38.000000000 +0100 +++ new/pikepdf-10.5.1/docs/releasenotes/version10.md 2026-03-14 21:41:42.000000000 +0100 @@ -12,6 +12,15 @@ freethreading wheels. All tests seem to pass, but that's because the existing tests don't try to create race conditions. Must be compiled manually. +## v10.5.1 + +- Updated lockfile to avoid a PyJWT CVE. We only depend use PyJWT via pygithub + for developer release tooling not in pikepdf itself, so this is + inconsequential for pikepdf users but does silence automated security + advisories. +- Suppressed GCC ``-Wpsabi`` note about C++17 ABI change for ``std::pair`` in + pybind11 headers. + ## v10.5.0 - Fixed logger in ``ctm`` module using ``__file__`` instead of ``__name__``, diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pikepdf-10.5.0/pyproject.toml new/pikepdf-10.5.1/pyproject.toml --- old/pikepdf-10.5.0/pyproject.toml 2026-03-10 09:15:38.000000000 +0100 +++ new/pikepdf-10.5.1/pyproject.toml 2026-03-14 21:41:42.000000000 +0100 @@ -7,7 +7,7 @@ [project] name = "pikepdf" -version = "10.5.0" +version = "10.5.1" description = "Read, write, repair, and transform PDFs in Python, powered by qpdf" readme = "README.md" requires-python = ">=3.10" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pikepdf-10.5.0/setup.py new/pikepdf-10.5.1/setup.py --- old/pikepdf-10.5.0/setup.py 2026-03-10 09:15:38.000000000 +0100 +++ new/pikepdf-10.5.1/setup.py 2026-03-14 21:41:42.000000000 +0100 @@ -102,6 +102,9 @@ if sys.platform == 'cygwin': # On cygwin, use gnu++20 instead of c++20 eca[eca.index('-std=c++20')] = '-std=gnu++20' + # Suppress GCC note about C++17 ABI change for std::pair in pybind11 headers + if sys.platform != 'win32': + eca.append('-Wno-psabi') # Debug build # eca.append('-g3') diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pikepdf-10.5.0/src/pikepdf/_version.py new/pikepdf-10.5.1/src/pikepdf/_version.py --- old/pikepdf-10.5.0/src/pikepdf/_version.py 2026-03-10 09:15:38.000000000 +0100 +++ new/pikepdf-10.5.1/src/pikepdf/_version.py 2026-03-14 21:41:42.000000000 +0100 @@ -3,4 +3,4 @@ from __future__ import annotations -__version__ = "10.5.0" +__version__ = "10.5.1" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/pikepdf-10.5.0/src/pikepdf.egg-info/PKG-INFO new/pikepdf-10.5.1/src/pikepdf.egg-info/PKG-INFO --- old/pikepdf-10.5.0/src/pikepdf.egg-info/PKG-INFO 2026-03-10 09:17:16.000000000 +0100 +++ new/pikepdf-10.5.1/src/pikepdf.egg-info/PKG-INFO 2026-03-14 21:43:10.000000000 +0100 @@ -1,6 +1,6 @@ Metadata-Version: 2.4 Name: pikepdf -Version: 10.5.0 +Version: 10.5.1 Summary: Read, write, repair, and transform PDFs in Python, powered by qpdf Author-email: "James R. Barlow" <[email protected]> License-Expression: MPL-2.0
