Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-azure-storage-blob for
openSUSE:Factory checked in at 2026-11-02 16:40:20
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-azure-storage-blob (Old)
and /work/SRC/openSUSE:Factory/.python-azure-storage-blob.new.1255 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-azure-storage-blob"
Mon Nov 2 16:40:20 2026 rev:52 rq:1394446 version:12.31.1
Changes:
--------
---
/work/SRC/openSUSE:Factory/python-azure-storage-blob/python-azure-storage-blob.changes
2026-10-01 16:49:58.964423991 +0200
+++
/work/SRC/openSUSE:Factory/.python-azure-storage-blob.new.1255/python-azure-storage-blob.changes
2026-11-02 16:41:16.820529338 +0100
@@ -1,0 +2,8 @@
+Mon Nov 2 09:11:28 UTC 2026 - John Paul Adrian Glaubitz
<[email protected]>
+
+- New upstream release
+ + Version 12.31.1
+ + For detailed information about changes see the
+ CHANGELOG.md file provided with this package
+
+-------------------------------------------------------------------
Old:
----
azure_storage_blob-12.31.0.tar.gz
New:
----
azure_storage_blob-12.31.1.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-azure-storage-blob.spec ++++++
--- /var/tmp/diff_new_pack.yIsMqe/_old 2026-11-02 16:41:17.700566209 +0100
+++ /var/tmp/diff_new_pack.yIsMqe/_new 2026-11-02 16:41:17.702566293 +0100
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-azure-storage-blob
-Version: 12.31.0
+Version: 12.31.1
Release: 0
Summary: Microsoft Azure Storage Blob Client Library for Python
License: MIT
++++++ azure_storage_blob-12.31.0.tar.gz -> azure_storage_blob-12.31.1.tar.gz
++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/azure_storage_blob-12.31.0/CHANGELOG.md
new/azure_storage_blob-12.31.1/CHANGELOG.md
--- old/azure_storage_blob-12.31.0/CHANGELOG.md 2026-09-30 20:46:34.000000000
+0200
+++ new/azure_storage_blob-12.31.1/CHANGELOG.md 2026-10-29 21:11:09.166746000
+0100
@@ -1,5 +1,11 @@
# Release History
+## 12.31.1 (2026-10-20)
+
+### Bugs Fixed
+- Fixed UTC conversion of timezone-aware datetimes in `generate_account_sas`,
`generate_container_sas`, `generate_blob_sas`, and
`BlobServiceClient.get_user_delegation_key` (sync and async). Datetimes without
timezone information continue to be treated as UTC.
+- Fixed an issue where certain headers were not being properly redacted when
DEBUG logging was enabled.
+
## 12.31.0 (2026-09-30)
This version and all future versions will require Python 3.10+. Python 3.9 is
no longer supported.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/azure_storage_blob-12.31.0/PKG-INFO
new/azure_storage_blob-12.31.1/PKG-INFO
--- old/azure_storage_blob-12.31.0/PKG-INFO 2026-09-30 20:48:01.417993500
+0200
+++ new/azure_storage_blob-12.31.1/PKG-INFO 2026-10-29 21:12:32.780775000
+0100
@@ -1,6 +1,6 @@
Metadata-Version: 2.4
Name: azure-storage-blob
-Version: 12.31.0
+Version: 12.31.1
Summary: Microsoft Azure Blob Storage Client Library for Python
Home-page:
https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/storage/azure-storage-blob
Author: Microsoft Corporation
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/azure_storage_blob-12.31.0/azure/storage/blob/_shared/parser.py
new/azure_storage_blob-12.31.1/azure/storage/blob/_shared/parser.py
--- old/azure_storage_blob-12.31.0/azure/storage/blob/_shared/parser.py
2026-09-30 20:46:34.000000000 +0200
+++ new/azure_storage_blob-12.31.1/azure/storage/blob/_shared/parser.py
2026-10-29 21:11:09.176892800 +0100
@@ -4,8 +4,8 @@
# license information.
# --------------------------------------------------------------------------
-from datetime import datetime, timezone
-from typing import Optional
+from datetime import date, datetime, timezone
+from typing import Optional, Union
EPOCH_AS_FILETIME = 116444736000000000 # January 1, 1970 as MS filetime
HUNDREDS_OF_NANOSECONDS = 10000000
@@ -19,7 +19,9 @@
DEVSTORE_ACCOUNT_KEY =
"Eby8vdM02xNOcqFlqUwJPLlmEtlCDXJ1OUzFT50uSRZ6IFsuFq2UVErCz4I6tq/K1SZFPTOtr/KBHBeksoGMGw=="
-def _to_utc_datetime(value: datetime) -> str:
+def _to_utc_datetime(value: Union[date, datetime]) -> str:
+ if isinstance(value, datetime) and value.utcoffset() is not None:
+ value = value.astimezone(timezone.utc)
return value.strftime("%Y-%m-%dT%H:%M:%SZ")
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/azure_storage_blob-12.31.0/azure/storage/blob/_shared/policies.py
new/azure_storage_blob-12.31.1/azure/storage/blob/_shared/policies.py
--- old/azure_storage_blob-12.31.0/azure/storage/blob/_shared/policies.py
2026-09-30 20:46:34.000000000 +0200
+++ new/azure_storage_blob-12.31.1/azure/storage/blob/_shared/policies.py
2026-10-29 21:11:09.176892800 +0100
@@ -16,7 +16,9 @@
parse_qsl,
urlencode,
urlparse,
+ urlsplit,
urlunparse,
+ urlunsplit,
)
from wsgiref.handlers import format_date_time
@@ -61,6 +63,38 @@
SM_HEADER = "x-ms-structured-body"
SM_HEADER_V1_CRC64 = "XSM/1.0; properties=crc64"
SM_LENGTH_HEADER = "x-ms-structured-content-length"
+_LOG_REDACTED = "*****"
+_LOG_REDACTED_HEADERS = frozenset(
+ {
+ "authorization",
+ "x-ms-authorization-auxiliary",
+ "x-ms-copy-source-authorization",
+ "x-ms-encryption-key",
+ "x-ms-source-encryption-key",
+ }
+)
+_LOG_SAS_URL_HEADERS = frozenset(
+ {
+ "x-ms-copy-source",
+ "x-ms-file-rename-source",
+ "x-ms-rename-source",
+ }
+)
+
+
+def _remove_sas_from_url(value: str) -> str:
+ scheme, netloc, path, query, fragment = urlsplit(value)
+ pairs = parse_qsl(query, keep_blank_values=True)
+ query = urlencode([(k, _LOG_REDACTED if k.lower() == "sig" else v) for k,
v in pairs])
+ return urlunsplit((scheme, netloc, path, query, fragment))
+
+
+def _redact_header_for_log(name: str, value: Any) -> Any:
+ if name.lower() in _LOG_REDACTED_HEADERS:
+ return _LOG_REDACTED
+ if name.lower() in _LOG_SAS_URL_HEADERS or "sig=" in str(value).lower():
+ return _remove_sas_from_url(str(value))
+ return value
def encode_base64(data: Union[bytes, str]) -> str:
@@ -254,27 +288,7 @@
_LOGGER.debug("Request method: %r", http_request.method)
_LOGGER.debug("Request headers:")
for header, value in http_request.headers.items():
- if header.lower() == "authorization":
- value = "*****"
- elif header.lower() == "x-ms-copy-source" and "sig" in
value:
- # take the url apart and scrub away the signed
signature
- scheme, netloc, path, params, query, fragment =
urlparse(value)
- parsed_qs = dict(parse_qsl(query))
- parsed_qs["sig"] = "*****"
-
- # the SAS needs to be put back together
- value = urlunparse(
- (
- scheme,
- netloc,
- path,
- params,
- urlencode(parsed_qs),
- fragment,
- )
- )
-
- _LOGGER.debug(" %r: %r", header, value)
+ _LOGGER.debug(" %r: %r", header,
_redact_header_for_log(header, value))
_LOGGER.debug("Request body:")
if logging_body:
@@ -297,7 +311,7 @@
_LOGGER.debug("Response status: %r",
response.http_response.status_code)
_LOGGER.debug("Response headers:")
for res_header, value in
response.http_response.headers.items():
- _LOGGER.debug(" %r: %r", res_header, value)
+ _LOGGER.debug(" %r: %r", res_header,
_redact_header_for_log(res_header, value))
# We don't want to log binary data if the response is a file.
_LOGGER.debug("Response content:")
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/azure_storage_blob-12.31.0/azure/storage/blob/_version.py
new/azure_storage_blob-12.31.1/azure/storage/blob/_version.py
--- old/azure_storage_blob-12.31.0/azure/storage/blob/_version.py
2026-09-30 20:46:34.000000000 +0200
+++ new/azure_storage_blob-12.31.1/azure/storage/blob/_version.py
2026-10-29 21:11:09.177892700 +0100
@@ -4,4 +4,4 @@
# license information.
# --------------------------------------------------------------------------
-VERSION = "12.31.0"
+VERSION = "12.31.1"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/azure_storage_blob-12.31.0/azure_storage_blob.egg-info/PKG-INFO
new/azure_storage_blob-12.31.1/azure_storage_blob.egg-info/PKG-INFO
--- old/azure_storage_blob-12.31.0/azure_storage_blob.egg-info/PKG-INFO
2026-09-30 20:48:01.000000000 +0200
+++ new/azure_storage_blob-12.31.1/azure_storage_blob.egg-info/PKG-INFO
2026-10-29 21:12:32.659708300 +0100
@@ -1,6 +1,6 @@
Metadata-Version: 2.4
Name: azure-storage-blob
-Version: 12.31.0
+Version: 12.31.1
Summary: Microsoft Azure Blob Storage Client Library for Python
Home-page:
https://github.com/Azure/azure-sdk-for-python/tree/main/sdk/storage/azure-storage-blob
Author: Microsoft Corporation
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/azure_storage_blob-12.31.0/azure_storage_blob.egg-info/SOURCES.txt
new/azure_storage_blob-12.31.1/azure_storage_blob.egg-info/SOURCES.txt
--- old/azure_storage_blob-12.31.0/azure_storage_blob.egg-info/SOURCES.txt
2026-09-30 20:48:01.000000000 +0200
+++ new/azure_storage_blob-12.31.1/azure_storage_blob.egg-info/SOURCES.txt
2026-10-29 21:12:32.690756300 +0100
@@ -191,6 +191,7 @@
tests/test_quick_query_async.py
tests/test_retry.py
tests/test_retry_async.py
+tests/test_sas.py
tests/test_sensitive_redirect.py
tests/test_streams.py
tests/test_streams_async.py
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/azure_storage_blob-12.31.0/tests/test_logging.py
new/azure_storage_blob-12.31.1/tests/test_logging.py
--- old/azure_storage_blob-12.31.0/tests/test_logging.py 2026-09-30
20:46:34.000000000 +0200
+++ new/azure_storage_blob-12.31.1/tests/test_logging.py 2026-10-29
21:11:09.196893000 +0100
@@ -25,6 +25,9 @@
generate_container_sas,
)
from azure.storage.blob._shared.shared_access_signature import
QueryStringConstants
+from azure.core.pipeline import PipelineContext, PipelineRequest
+from azure.core.pipeline.transport import HttpRequest # pylint:
disable=non-abstract-transport-import
+from azure.storage.blob._shared.policies import StorageLoggingPolicy
if sys.version_info >= (3,):
from urllib.parse import parse_qs, quote, urlparse
@@ -400,3 +403,37 @@
# Assert - logging_body=False should override constructor setting
on both attempts
assert request_body not in log_as_str
assert call_count == 2 # Verify retry happened
+
+ def _log_request(self, headers):
+ request = HttpRequest("PUT",
"https://account.blob.core.windows.net/c/b";, headers=headers)
+ with LogCaptured(self) as log_captured:
+
StorageLoggingPolicy(logging_enable=True).on_request(PipelineRequest(request,
PipelineContext(None)))
+ return log_captured.getvalue()
+
+ def test_secret_headers_are_redacted(self):
+ for header in (
+ "Authorization",
+ "x-ms-encryption-key",
+ "x-ms-source-encryption-key",
+ "x-ms-copy-source-authorization",
+ ):
+ log_as_str = self._log_request({header: "value"})
+ assert header in log_as_str
+ assert "value" not in log_as_str
+
+ def test_source_url_sas_is_scrubbed(self):
+ for header in ("x-ms-copy-source", "x-ms-file-rename-source",
"x-ms-rename-source"):
+ log_as_str = self._log_request({header:
"https://src.blob.core.windows.net/c/b?sv=2025-01-05&sig=value"})
+ assert "value" not in log_as_str
+ assert "src.blob.core.windows.net" in log_as_str
+
+ def test_diagnostic_headers_remain_visible(self):
+ log_as_str = self._log_request(
+ {
+ "x-ms-encryption-key-sha256": "value",
+ "x-ms-encryption-algorithm": "AES256",
+ "x-ms-client-request-id": "req-id-123",
+ }
+ )
+ for value in ("value", "AES256", "req-id-123"):
+ assert log_as_str.count(value) == 1
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/azure_storage_blob-12.31.0/tests/test_sas.py
new/azure_storage_blob-12.31.1/tests/test_sas.py
--- old/azure_storage_blob-12.31.0/tests/test_sas.py 1970-01-01
01:00:00.000000000 +0100
+++ new/azure_storage_blob-12.31.1/tests/test_sas.py 2026-10-29
21:11:09.197893100 +0100
@@ -0,0 +1,44 @@
+# -------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for
+# license information.
+# --------------------------------------------------------------------------
+
+from base64 import b64encode
+from datetime import date, datetime, timedelta, timezone
+from urllib.parse import parse_qs
+
+import pytest
+
+from azure.storage.blob import generate_blob_sas
+
+
[email protected](
+ "expiry, expected",
+ [
+ (datetime(2026, 10, 13, 12, 34, 56), "2026-10-13T12:34:56Z"),
+ (datetime(2026, 10, 13, 12, 34, 56, tzinfo=timezone.utc),
"2026-10-13T12:34:56Z"),
+ (
+ datetime(2026, 10, 13, 12, 34, 56,
tzinfo=timezone(timedelta(hours=5, minutes=30))),
+ "2026-10-13T07:04:56Z",
+ ),
+ (
+ datetime(2026, 10, 13, 12, 34, 56,
tzinfo=timezone(timedelta(hours=-7))),
+ "2026-10-13T19:34:56Z",
+ ),
+ (datetime(2026, 1, 1, 1, tzinfo=timezone(timedelta(hours=2))),
"2025-12-31T23:00:00Z"),
+ (datetime(2026, 12, 31, 23, tzinfo=timezone(timedelta(hours=-2))),
"2027-01-01T01:00:00Z"),
+ (datetime(2026, 10, 13, 12, 34, 56, 123456, tzinfo=timezone.utc),
"2026-10-13T12:34:56Z"),
+ (date(2026, 10, 13), "2026-10-13T00:00:00Z"),
+ ],
+)
+def test_generate_blob_sas_expiry(expiry, expected):
+ sas = generate_blob_sas(
+ account_name="account",
+ container_name="container",
+ blob_name="blob",
+ account_key=b64encode(b"fake-account-key").decode("ascii"),
+ permission="r",
+ expiry=expiry,
+ )
+ assert parse_qs(sas)["se"] == [expected]
