Dear all, While churning through the dependencies for branching `python-b4` for EPEL 10, I eventually came across python-dkimpy that... turns out to have been auto-rebuilt since it was first imported. Turns out release monitoring was never properly configured and we are missing a lot of intervening updates ever since. I'm modernizing the spec as well, to follow the newest Python packaging guidelines, and am also enabling Packit (for Rawhide only). Upstream considered 1.0.6 (we're on 1.0.5) as an important bugfix release, so I plan to get these into all releases: https://launchpad.net/dkimpy/+announcement/53935 Changelog for 1.0.6: 2023-04-30 Version 1.0.6 - Provide more specific error message when ed25519 private key is invalid (See LP 1901569 for background) - Correct base64 validation regexp so that valid signature with == split between two lines are not incorrectly evaluated as invalid (LP: #2002295) - Thanks to <https://launchpad.net/~obadz> for the report and the proposed fix - Fix traceback when attempting to verify an unsigned message using async verify (Thanks to Nikita Sychev for the report and a suggested fix) (LP: #2008723) - Verify correct AMS header is used for ARC seal verification - Catch nacl.exceptions.ValueError and raise KeyFormatError, similar to how RSA key errors are treated (LP: #2018021) - Create ed25519 key files with secure permissions to avoid risk of insecure chmode call/race condition (Thanks to Hanno Böck for the report and the suggested fix) (LP: #2017430) and then we can use Packit to update Rawhide to 1.1.8 and branch that for EPEL 10 ... and we can consider on a case by case basis whether it's worth bringing it into some stable releases. Potentially affected packages: ❯ fedrq-pydeps-verbose.sh dkimpy python-authheaders : python3dist(dkimpy) >= 0.7.1 python-b4 : (python3dist(dkimpy) < 2~~ with python3dist(dkimpy) >= 1) Given that the current packaging does not really pull in runtime dependencies for the extras at all, dependent packages are probably fine (they can't be transitively depending on extras without declaring them since right now no extras subpackages are provided) ❯ fedrq pkgs python3-dkimpy -F requires /usr/bin/python3 python(abi) = 3.13 python3.13dist(dnspython) >= 1.16 ❯ fedrq pkgs python3-dkimpy -F provides python-dkimpy = 1.0.5-14.fc41 python3-dkimpy = 1.0.5-14.fc41 python3.13-dkimpy = 1.0.5-14.fc41 python3.13dist(dkimpy) = 1.0.5 python3dist(dkimpy) = 1.0.5 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+ARC-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy+ARC = 1.0.6-1.fc42 python3-dkimpy+ARC = 1.0.6-1.fc42 python3.13-dkimpy+ARC = 1.0.6-1.fc42 python3.13dist(dkimpy[arc]) = 1.0.6 python3dist(dkimpy[arc]) = 1.0.6 REQUIRES python(abi) = 3.13 python3-dkimpy = 1.0.6-1.fc42 python3.13dist(authres) rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+asyncio-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy+asyncio = 1.0.6-1.fc42 python3-dkimpy+asyncio = 1.0.6-1.fc42 python3.13-dkimpy+asyncio = 1.0.6-1.fc42 python3.13dist(dkimpy[asyncio]) = 1.0.6 python3dist(dkimpy[asyncio]) = 1.0.6 REQUIRES python(abi) = 3.13 python3-dkimpy = 1.0.6-1.fc42 python3.13dist(aiodns) rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy+ed25519-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy+ed25519 = 1.0.6-1.fc42 python3-dkimpy+ed25519 = 1.0.6-1.fc42 python3.13-dkimpy+ed25519 = 1.0.6-1.fc42 python3.13dist(dkimpy[ed25519]) = 1.0.6 python3dist(dkimpy[ed25519]) = 1.0.6 REQUIRES python(abi) = 3.13 python3-dkimpy = 1.0.6-1.fc42 python3.13dist(pynacl) rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 repo/results/fedora-rawhide-aarch64/python-dkimpy-1.0.6-1.fc41/python3-dkimpy-1.0.6-1.fc42.noarch.rpm PROVIDES python-dkimpy = 1.0.6-1.fc42 python3-dkimpy = 1.0.6-1.fc42 python3.13-dkimpy = 1.0.6-1.fc42 python3.13dist(dkimpy) = 1.0.6 python3dist(dkimpy) = 1.0.6 REQUIRES /usr/bin/python3 python(abi) = 3.13 python3.13dist(dnspython) >= 1.16 rpmlib(CompressedFileNames) <= 3.0.4-1 rpmlib(FileDigests) <= 4.6.0-1 rpmlib(PartialHardlinkSets) <= 4.0.4-1 rpmlib(PayloadFilesHavePrefix) <= 4.0-1 rpmlib(PayloadIsZstd) <= 5.4.18-1 Best regards, -- _o) Michel Lind _( ) identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2
Attachment:
signature.asc
Description: PGP signature
-- _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
