Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-GitPython for
openSUSE:Factory checked in at 2026-08-06 16:19:48
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-GitPython (Old)
and /work/SRC/openSUSE:Factory/.python-GitPython.new.16738 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-GitPython"
Thu Aug 6 16:19:48 2026 rev:38 rq:1370040 version:3.1.58
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-GitPython/python-GitPython.changes
2026-08-01 18:28:04.801238657 +0200
+++
/work/SRC/openSUSE:Factory/.python-GitPython.new.16738/python-GitPython.changes
2026-08-06 16:20:09.780177220 +0200
@@ -1,0 +2,34 @@
+Wed Aug 5 08:19:15 UTC 2026 - Nico Krapp <[email protected]>
+
+- Update to 3.1.58 (fixes VUL-0: bsc#1273775, bsc#1273779,
+ bsc#1273781, bsc#1273783, bsc#1273785, bsc#1278787):
+ * test: allow Python startup before timeout
+ * Resolve Windows hook Bash through PATH
+ * Revert "Resolve Windows hook Bash through PATH"
+ * test: focus pytest summary on unexpected failures
+ * Validate submodule names before filesystem operations
+ * Handle invalid submodule names during recursive updates
+ * Fix Windows path handling on Python 3.13+
+ * fixup 2202
+ * Correct Windows hook Bash precedence
+ * Harden config and Git option validation
+ * Skip tests that need symlink privileges instead of erroring
+- Add testsuite.patch to skip tests that fail in our environment
+
+-------------------------------------------------------------------
+Tue Aug 04 12:22:13 UTC 2026 - Nico Krapp <[email protected]>
+
+- Update to version 3.1.57 (fixes VUL-0: bsc#1273547, bsc#1273546):
+ * Merge gitdb and smmap into the GitPython repository
+ * build(deps): bump actions/setup-python from 6 to 7
+ * build(deps): bump the pre-commit group with 2 updates
+ * Bump Vampire/setup-wsl from 6.0.0 to 7.0.0
+ * Render protected Traversable methods in the reference
+ * Use standard prefixes for parsed patch diffs
+ * Honor kill_after_timeout with output streams
+ * Redact Authorization extra headers from command errors
+ * Improve RemoteProgress parse return typing
+ * Adopt basedpyright with a legacy baseline
+ * Block unsafe Git file and URL options
+
+-------------------------------------------------------------------
@@ -4 +38 @@
-- Update to version 3.1.56:
+- Update to version 3.1.56 (fixes VUL-0: bsc#1273545):
@@ -76 +110 @@
-- Update to version 3.1.55:
+- Update to version 3.1.55 (fixes VUL-0: bsc#1273087):
@@ -78 +112,2 @@
-- Update to version 3.1.54:
+- Update to version 3.1.54 (fixes VUL-0: bsc#1273086, bsc#1273088,
+ bsc#1273085):
@@ -80 +115 @@
-- Update to version 3.1.53:
+- Update to version 3.1.53 (fixes VUL-0: CVE-2026-69097 (bsc#1273414)):
@@ -86 +121 @@
-- Update to version 3.1.52:
+- Update to version 3.1.52 (fixes VUL-0: CVE-2026-67322 (bsc#1273357)):
@@ -89 +124,2 @@
-- Update to version 3.1.51:
+- Update to version 3.1.51 (fixes VUL-0: bsc#1273498,
+ CVE-2026-67325 (bsc#1273359), CVE-2026-67323 (bsc#1273358)):
@@ -113 +149 @@
-- Update to version 3.1.50:
+- Update to version 3.1.50 (fixes VUL-0: CVE-2026-67326 (bsc#1273364)):
Old:
----
GitPython-3.1.56.tar.gz
New:
----
GitPython-3.1.58.tar.gz
testsuite.patch
----------(New B)----------
New: * Skip tests that need symlink privileges instead of erroring
- Add testsuite.patch to skip tests that fail in our environment
----------(New E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-GitPython.spec ++++++
--- /var/tmp/diff_new_pack.eLQonN/_old 2026-08-06 16:20:11.560239324 +0200
+++ /var/tmp/diff_new_pack.eLQonN/_new 2026-08-06 16:20:11.560239324 +0200
@@ -18,15 +18,20 @@
%{?sle15_python_module_pythons}
Name: python-GitPython
-Version: 3.1.56
+Version: 3.1.58
Release: 0
Summary: Python Git Library
License: BSD-3-Clause
URL: https://github.com/gitpython-developers/GitPython
Source: GitPython-%{version}.tar.gz
+# PATCH-FIX-OPENSUSE testsuite.patch
+# disable tests that throw "HEAD is a detatched reference" that occurs because
+# of the way we run the tests in OBS
+Patch0: testsuite.patch
BuildRequires: %{python_module ddt >= 1.1.1}
BuildRequires: %{python_module gitdb >= 4.0.1}
BuildRequires: %{python_module pip}
+BuildRequires: %{python_module pytest-mock}
BuildRequires: %{python_module pytest}
BuildRequires: %{python_module setuptools}
BuildRequires: %{python_module smmap >= 3.0.1}
@@ -69,13 +74,14 @@
export LANG=en_US.UTF-8
export GIT_PYTHON_TEST_GIT_REPO_BASE=${PWD}
+export PYTEST_XFAIL_MSG="HEAD is a detached symbolic reference"
git config --global protocol.file.allow "always"
git config --global user.email "[email protected]"
git config --global user.name "Your Name"
+cat test/fixtures/.gitconfig >> ~/.gitconfig
-# And it completely unraveled again gh#gitpython-developers/GitPython#914
-%pytest -k 'not (test_installation or test_rev_parse)' || /bin/true
+%pytest -k 'not (test_cloned_repo_object or test_fetch_error or
test_it_honors_kill_after_timeout_with_output_stream or test_installation or
test_rev_parse)'
%files %{python_files}
%license LICENSE
++++++ GitPython-3.1.56.tar.gz -> GitPython-3.1.58.tar.gz ++++++
/work/SRC/openSUSE:Factory/python-GitPython/GitPython-3.1.56.tar.gz
/work/SRC/openSUSE:Factory/.python-GitPython.new.16738/GitPython-3.1.58.tar.gz
differ: char 12, line 1
++++++ _service ++++++
--- /var/tmp/diff_new_pack.eLQonN/_old 2026-08-06 16:20:11.624241556 +0200
+++ /var/tmp/diff_new_pack.eLQonN/_new 2026-08-06 16:20:11.640242114 +0200
@@ -2,7 +2,7 @@
<service name="tar_scm" mode="manual">
<param name="url">https://github.com/gitpython-developers/GitPython</param>
<param name="scm">git</param>
- <param name="revision">3.1.56</param>
+ <param name="revision">3.1.58</param>
<param name="versionformat">@PARENT_TAG@</param>
<param name="package-meta">yes</param>
<param name="changesgenerate">enable</param>
++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.eLQonN/_old 2026-08-06 16:20:11.660242812 +0200
+++ /var/tmp/diff_new_pack.eLQonN/_new 2026-08-06 16:20:11.664242952 +0200
@@ -1,8 +1,6 @@
<servicedata>
<service name="tar_scm">
- <param
name="url">git://github.com/gitpython-developers/GitPython</param>
- <param
name="changesrevision">f653af66e4c9461579ec44db50e113facf61e2d3</param></service><service
name="tar_scm">
<param
name="url">https://github.com/gitpython-developers/GitPython</param>
- <param
name="changesrevision">e3221f1252346259513e14afeed32f0a203512a7</param></service></servicedata>
+ <param
name="changesrevision">30be45d786e95023e23c616fec5cbabca861b44c</param></service></servicedata>
(No newline at EOF)
++++++ testsuite.patch ++++++
Index: GitPython-3.1.58/conftest.py
===================================================================
--- /dev/null
+++ GitPython-3.1.58/conftest.py
@@ -0,0 +1,25 @@
+import os
+import pytest
+
[email protected](tryfirst=True, hookwrapper=True)
+def pytest_runtest_makereport(item, call):
+ # Execute all other hooks to obtain the report object
+ outcome = yield
+ report = outcome.get_result()
+
+ # We only care if the test actually failed
+ if report.failed:
+ # Check environment variable (bypasses any command-line parsing issues)
+ xfail_msg = os.environ.get("PYTEST_XFAIL_MSG")
+
+ if xfail_msg and call.excinfo is not None:
+ # Extract the exact error message
+ error_message = str(call.excinfo.value)
+
+ # For debugging: Uncomment this to see what pytest is actually
catching
+ # print(f"\n[DEBUG] Caught error: {error_message}")
+
+ if xfail_msg in error_message:
+ # Forcibly change the test result to an XFAIL
+ report.outcome = "skipped"
+ report.wasxfail = f"Dynamically xfailed due to matching error:
'{xfail_msg}'"
