Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package python-bleach for openSUSE:Factory checked in at 2022-10-01 17:42:38 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/python-bleach (Old) and /work/SRC/openSUSE:Factory/.python-bleach.new.2275 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-bleach" Sat Oct 1 17:42:38 2022 rev:14 rq:1006839 version:5.0.1 Changes: -------- --- /work/SRC/openSUSE:Factory/python-bleach/python-bleach.changes 2021-04-14 13:05:12.965457447 +0200 +++ /work/SRC/openSUSE:Factory/.python-bleach.new.2275/python-bleach.changes 2022-10-01 17:42:48.393631945 +0200 @@ -1,0 +2,17 @@ +Thu Sep 29 06:58:58 UTC 2022 - Steve Kowalik <[email protected]> + +- Update to 5.0.1: + * Add missing comma to tinycss2 require. Thank you, @shadchin! + * Add url parse tests based on wpt url tests. (#688) + * Support scheme-less urls if "https" is in allow list. (#662) + * Handle escaping ``<`` in edge cases where it doesn't start a tag. (#544) + * Correctly urlencode email address parts. Thank you, @larseggert! (#659) + * ``clean`` and ``linkify`` now preserve the order of HTML attributes. + * Drop support for Python 3.6. Thank you, @hugovk! (#629) + * CSS sanitization in style tags is completely different now. + * Python 3.9 support + * Drop support for unsupported Python versions <3.6. (#520) + * add more tests for CVE-2021-23980 / GHSA-vv2x-vrpj-qqpq +- Refresh de-vendor.patch, and convert to patch level 1 + +------------------------------------------------------------------- Old: ---- bleach-3.3.0.tar.gz New: ---- bleach-5.0.1.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ python-bleach.spec ++++++ --- /var/tmp/diff_new_pack.Xpd8Mp/_old 2022-10-01 17:42:48.829632741 +0200 +++ /var/tmp/diff_new_pack.Xpd8Mp/_new 2022-10-01 17:42:48.833632748 +0200 @@ -1,7 +1,7 @@ # # spec file for package python-bleach # -# Copyright (c) 2021 SUSE LLC +# Copyright (c) 2022 SUSE LLC # Copyright (c) 2015 LISA GmbH, Bingen, Germany. # # All modifications and additions to the file contributed by third parties @@ -19,7 +19,7 @@ %{?!python_module:%define python_module() python-%{**} python3-%{**}} Name: python-bleach -Version: 3.3.0 +Version: 5.0.1 Release: 0 Summary: A whitelist-based HTML-sanitizing tool License: Apache-2.0 @@ -54,8 +54,7 @@ Documentation is at http://bleach.readthedocs.org/ . %prep -%setup -q -n bleach-%{version} -%patch0 +%autosetup -p1 -n bleach-%{version} rm -rf bleach/_vendor %build ++++++ bleach-3.3.0.tar.gz -> bleach-5.0.1.tar.gz ++++++ ++++ 9093 lines of diff (skipped) ++++++ de-vendor.patch ++++++ --- /var/tmp/diff_new_pack.Xpd8Mp/_old 2022-10-01 17:42:48.981633018 +0200 +++ /var/tmp/diff_new_pack.Xpd8Mp/_new 2022-10-01 17:42:48.985633025 +0200 @@ -1,8 +1,6 @@ -Index: bleach/html5lib_shim.py -=================================================================== ---- bleach/html5lib_shim.py.orig -+++ bleach/html5lib_shim.py -@@ -18,44 +18,44 @@ warnings.filterwarnings( +--- a/bleach/html5lib_shim.py.orig ++++ b/bleach/html5lib_shim.py +@@ -14,46 +14,46 @@ warnings.filterwarnings( "ignore", message="html5lib's sanitizer is deprecated", category=DeprecationWarning, @@ -35,6 +33,8 @@ -from bleach._vendor.html5lib.filters.sanitizer import ( +from html5lib.filters.sanitizer import ( allowed_protocols, + allowed_css_properties, + allowed_svg_properties, ) # noqa: E402 module level import not at top of file -from bleach._vendor.html5lib.filters.sanitizer import ( +from html5lib.filters.sanitizer import ( @@ -59,30 +59,31 @@ Trie, ) # noqa: E402 module level import not at top of file -Index: tests/test_clean.py -=================================================================== ---- tests/test_clean.py.orig -+++ tests/test_clean.py -@@ -7,7 +7,7 @@ import pytest +--- a/tests/test_clean.py.orig ++++ b/tests/test_clean.py +@@ -5,7 +5,7 @@ import pytest from bleach import clean from bleach.html5lib_shim import Filter - from bleach.sanitizer import Cleaner + from bleach.sanitizer import ALLOWED_PROTOCOLS, Cleaner -from bleach._vendor.html5lib.constants import rcdataElements +from html5lib.constants import rcdataElements - def test_clean_idempotent(): -Index: bleach/sanitizer.py -=================================================================== ---- bleach/sanitizer.py.orig -+++ bleach/sanitizer.py -@@ -283,7 +283,7 @@ class BleachSanitizerFilter(html5lib_shi + @pytest.mark.parametrize( +--- a/bleach/sanitizer.py.orig ++++ b/bleach/sanitizer.py +@@ -277,7 +277,7 @@ class BleachSanitizerFilter(html5lib_shi "ignore", message="html5lib's sanitizer is deprecated", category=DeprecationWarning, - module="bleach._vendor.html5lib", + module="html5lib", ) - return super(BleachSanitizerFilter, self).__init__(source, **kwargs) - + return super().__init__( + source, +--- a/bleach/parse_shim.py.orig ++++ b/bleach/parse_shim.py +@@ -1 +1 @@ +-from bleach._vendor.parse import urlparse # noqa ++from urllib.parse import urlparse # noqa
