[rpms/python-PyGithub] rawhide: Backport upstream patch for compatibility with the latest python-jwt -

public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed

To: git-commits@fedoraproject.org
Subject: [rpms/python-PyGithub] rawhide: Backport upstream patch for compatibility with the latest python-jwt
Date: Wed, 03 Jun 2026 01:58:24 GMT	[thread overview]
Message-ID: <178045190411.1.13997294101170800964.rpms-python-PyGithub-961dfb42b701@fedoraproject.org> (raw)

A new commit has been pushed.

Repo   : rpms/python-PyGithub
Branch : rawhide
Commit : 961dfb42b701d916ba3696fef2d14d3dbea4dd99
Author : Tomáš Hrnčiar <thrnciar@redhat.com>
Date   : 2026-06-01T16:28:41+02:00
Stats  : +119/-0 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/python-PyGithub/c/961dfb42b701d916ba3696fef2d14d3dbea4dd99?branch=rawhide

Log:
Backport upstream patch for compatibility with the latest python-jwt

---
diff --git a/24305f6d6.patch b/24305f6d6.patch
new file mode 100644
index 0000000..5c25063
--- /dev/null
+++ b/24305f6d6.patch
@@ -0,0 +1,117 @@
+From 24305f6d60869a849dadd0d271b4753ceac3658d Mon Sep 17 00:00:00 2001
+From: Enrico Minack <github@enrico.minack.dev>
+Date: Mon, 23 Feb 2026 09:38:25 +0100
+Subject: [PATCH] Update test key pair (#3453)
+
+Latest version of JWT package complains about our test key:
+
+The RSA key is 1024 bits long, which is below the minimum recommended
+size of 2048 bits. See NIST SP 800-131A.
+
+The newly created key is 4096 bits long.
+---
+ tests/GithubIntegration.py | 87 +++++++++++++++++++++++++++++---------
+ 1 file changed, 68 insertions(+), 19 deletions(-)
+
+diff --git a/tests/GithubIntegration.py b/tests/GithubIntegration.py
+index e515f2b7c9..5f72567571 100644
+--- a/tests/GithubIntegration.py
++++ b/tests/GithubIntegration.py
+@@ -46,29 +46,78 @@
+ from . import Framework
+ 
+ APP_ID = 243473
++
++# openssl genrsa -out jwt-key 4096
+ PRIVATE_KEY = """
+------BEGIN RSA PRIVATE KEY-----
+-MIICXAIBAAKBgQC+5ePolLv6VcWLp2f17g6r6vHl+eoLuodOOfUl8JK+MVmvXbPa
+-xDy0SS0pQhwTOMtB0VdSt++elklDCadeokhEoGDQp411o+kiOhzLxfakp/kewf4U
+-HJnu4M/A2nHmxXVe2lzYnZvZHX5BM4SJo5PGdr0Ue2JtSXoAtYr6qE9maQIDAQAB
+-AoGAFhOJ7sy8jG+837Clcihso+8QuHLVYTPaD+7d7dxLbBlS8NfaQ9Nr3cGUqm/N
+-xV9NCjiGa7d/y4w/vrPwGh6UUsA+CvndwDgBd0S3WgIdWvAvHM8wKgNh/GBLLzhT
+-Bg9BouRUzcT1MjAnkGkWqqCAgN7WrCSUMLt57TNleNWfX90CQQDjvVKTT3pOiavD
+-3YcLxwkyeGd0VMvKiS4nV0XXJ97cGXs2GpOGXldstDTnF5AnB6PbukdFLHpsx4sW
+-Hft3LRWnAkEA1pY15ke08wX6DZVXy7zuQ2izTrWSGySn7B41pn55dlKpttjHeutA
+-3BEQKTFvMhBCphr8qST7Wf1SR9FgO0tFbwJAEhHji2yy96hUyKW7IWQZhrem/cP8
+-p4Va9CQolnnDZRNgg1p4eiDiLu3dhLiJ547joXuWTBbLX/Y1Qvv+B+a74QJBAMCW
+-O3WbMZlS6eK6//rIa4ZwN00SxDg8I8FUM45jwBsjgVGrKQz2ilV3sutlhIiH82kk
+-m1Iq8LMJGYl/LkDJA10CQBV1C+Xu3ukknr7C4A/4lDCa6Xb27cr1HanY7i89A+Ab
+-eatdM6f/XVqWp8uPT9RggUV9TjppJobYGT2WrWJMkYw=
+------END RSA PRIVATE KEY-----
++-----BEGIN PRIVATE KEY-----
++MIIJQQIBADANBgkqhkiG9w0BAQEFAASCCSswggknAgEAAoICAQDAqFP8rSi4Wszj
++5/Z28mNDqRhG4a8Iikn7hdekA9gENRhxztd6opUe1R4s7ji4HXDpgpgfv8i0QN6Y
++ZmaDoFQpFSWc8ks8J93YeTW+LN2qCfPqXcpkyBeJ+bsOb0knXFac46fzDzqVS8WZ
++JEpjiCLTsH8frskxKWiTsCmmcZPTIh+saeXdJ5THnwD1KssfiCSf8C5PdT7pCCfb
++mjNerHKRA+9/dkohjE9DL1W32EnoqIod9RLUJFUq4R5FTRxHWTmdhgn2izjUlbLC
++LuzbI4xepxndRj/VzNgICRMtMN98v5oF2caD0nc6f2QWPJEXSItdfXpDnhAuylpe
++hyZT0CbbBLATsr9bRpayrZ6W1jHrk/vSJvEBs9nSqi3cAFw6fNZH71zto53/2tGD
++Doo8a29WKmttE0dDhk9ZzDsuNLy7jGmyXa+buybDGh0qy34d4mAZjBoybp37uy0W
++ALYIslUzynYLEZR2PX412a5UUGTcBTrncUWcah9rXQPKsRoi9MR3bwjlqYKkb2Z3
++CYCvLLGM6XaWKSILN0yQZxCk+Ix7FTiHF3gVnxNV3DBOyO20S+1r6/hCs36ewEYo
++eqy1oUrMFxvB/Zzdfnn9Oc/qQNx2mpBKmmoLHAbpQe2vE5lukzSsiF7KOCw4bSwm
++TOEmixE9PvX4N4vtXXwSlGjE1T6/iwIDAQABAoICACoTWSxhAPiqU/8eRPSbYVSA
++lJ2+YkTCNwAorfzTHhVlJy6L1wGgimLOdqWnbVnAjE1jSSf98a50UGkGTDNJC7hh
++NvK88/NyXYAOkM8060Bcphm0XCSAkqt+j/zKDzb6cqwXCDIMTGYYw1H73Ac6zyhe
++bpUTzjrfaUh/+8ivG3LMDBDSm/Id1990+XeR3gTH7f/EK8kMuS2Zq2LJnZh6nxbO
++vjqfMfd7tj/dEaJyKUoXrPp38KHGQZd4zOyjt55ZfTzK7lga9dFv1DeWmgIOFHUD
++l6F82yotb6zplneTKewLyG6orjNR/toWwlwc5C8ql81WPyKPXcdqSCxG5fb+Cc3/
++tzpfsX3i3YnaM3+FJurgh7PX7W6emwOoGFoGvcf50q8XQZgy23SKD3JunS/xwqxR
++LFNM+MwJ98y6Vw27jjK8yjUckT3UPrfCTU61DCK6Pw6nWchl4hdTM3LFdOsguu0g
++tSA9Ft6bwQJ3Ao8UeWpXv62eAy25wavjKymyJEqGBdXnG0LnQcJqCdEsFKRxk6Ag
++E+CM8oGMAVhkj2cXP/27kvftpM4e20jPcrUbgJ6vV98A5wkwwq6mGw7eU/UvlZmC
++Dpv7+oFCofqZlgXPixswUBED6P/PtIT28U199uk5+7M8VHY5DyGBy9P5nnk9kPUM
++CZLkWV0L0HMf2m7OmcYRAoIBAQD88z5Dq13zixEnaHBPfYm/Mip+Z7hCYJq7xbzv
++13TeHUPhM5NF/cLZ+b5QCZ/AH6HXWPAq6R3qKqze/R87R5b7c9NakRepGZZPdIPi
++eB9uobjCDDkU6IhwXONEVRmh2zO/6KIT+YZT7gW/AJgT1FgvMXmegpZaDGRkoAOH
++hhn6yv0VZYGVZTQMKU7UFph7DbvwL307jjtWOY4CxvY7R+qWq+TOpEFUY3GYkrwa
++3Vs0usIG2g3d8TMOBDPBx60ZG7+YK7GqCa8I5ZbCvOd3KakU3tPqabWpcinutCrG
++5n4Zvpy8VjGrXaeMX5ibVxdgcN969F/sG36riBuAeFkM0r3zAoIBAQDC+vxD9S4F
++ac4QjV3oMUdH1kH75bF3dDSskZ1D7Q0roijGqNpd2MSxpQSBjeQkVXHBk8tHMly4
++bHTxCcJOCnv+EKXji1ytXL+9x6FOPf+gMZ5Kl6C//Tj2F5TAf3jvR4v3+3sEBjjJ
++Nu8EbaF/JQY9IWO0l5DXFTvKPk9AFDFtuamfms44xORhhIkiQxH8a1slq5rDtKQ/
++Gh7r3brasEX0NS5a/IGBFqttfrEr6dq1vvQ29n+Hcn7EM88HpixdkM+nhMQRkUNv
++2hjiV6ZO15S1lkDek2VoM4syj3NSN+9eD7cMBEH0kv73fXv6gWeuzJrYi8Omvegj
++BLUXc+NUzCYJAoIBAAMgVoKrmYurClk8VzcETDGKwy+wxHw9iWwMs5sbRJyCLBaa
++dpWE32WmSo3esJTFT1DEDqPZIb+FK4HOCxbGeb093zzdUjeK02rD++VOqsTJRulP
++EV2KyjTpUP3FN33ioa8bhvVMPjbHWFbWAQstsrFSoTguUQFn6c28lI6WP7fzzlD3
++YjSgfZYw5IKGjPfoYYxEaf3UcjNMns61+tEcwG+ATGGpcg1C9WJ3Xc/PMJNkQ4Wm
++KEm383OW5bTdbOxEhYex8o4xdHJdtBFQGGRGpYpWfrQE/nPLr2z92RGAQ8q5qmJB
++hnehvrJjdBVnbCiK/JgecRkP9e7UzdI2qpMX/7UCggEAJjirIOs8FUWTZn0/zldy
++oKtojeeN7VuzQ6zbxkf+z/HeymqpO8JVdHljs73L3i99uDOvoopF0MU5+1Ita7z0
++Z25+Bmf4R+epkptCjKLsrEttuzOUCG6sLtmaiE20uDsvPfJnP/e0RAVnv1d6VAE/
++Ata7w9f+RZtc+B1UzbvnoJnHnYjsKga2ukMP2s6JBRFKccz87qZHmDMXoqb5jQsG
+++4M9Tgq3nEWEX1d5haE3BW+kUe3qO/P+05lQWTCC++h6PF1zTfpK3O9E94G1ETmD
++ZkFJABimxVFtVQD320MpwieUe1+OSlJSdtN7bTTWzVZAeHiVZudNTSgME8fc5W+L
++eQKCAQBqhlauG4WJm47nh21ZbErukpNKRR4dwYU3iPM6TMZtc5N1AV4T23uOhjQN
++xQSLbpIorRZR33dOOBeroSj2oOFAx/UzgoaYUj5qqqcFfQh8QdIi98lb/25qXL49
++WQlihvh8yDFc+t/HOZPn6orl0p1tcBao+uS9CCWfURv2l0KyS+JeGySQC0amxyEl
++ZAQqOpkSzdk6j8MlHnebI3W9AcUkl0LY+OKU3u0iFENmLl/y/SnDWGEfJYAQuR74
++VJxIu9b4GbDLqSIlg2Wk4qgxDwU1GI9Bzk1UPAy0/Qwl495oLpZ5gM71uJXRS4tZ
++3i4Fanvj0vm8BvdFVxkxZoSNiMAX
++-----END PRIVATE KEY-----
+ """
++
++# openssl rsa -in jwt-key -pubout
+ PUBLIC_KEY = """
+ -----BEGIN PUBLIC KEY-----
+-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC+5ePolLv6VcWLp2f17g6r6vHl
+-+eoLuodOOfUl8JK+MVmvXbPaxDy0SS0pQhwTOMtB0VdSt++elklDCadeokhEoGDQ
+-p411o+kiOhzLxfakp/kewf4UHJnu4M/A2nHmxXVe2lzYnZvZHX5BM4SJo5PGdr0U
+-e2JtSXoAtYr6qE9maQIDAQAB
++MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAwKhT/K0ouFrM4+f2dvJj
++Q6kYRuGvCIpJ+4XXpAPYBDUYcc7XeqKVHtUeLO44uB1w6YKYH7/ItEDemGZmg6BU
++KRUlnPJLPCfd2Hk1vizdqgnz6l3KZMgXifm7Dm9JJ1xWnOOn8w86lUvFmSRKY4gi
++07B/H67JMSlok7AppnGT0yIfrGnl3SeUx58A9SrLH4gkn/AuT3U+6Qgn25ozXqxy
++kQPvf3ZKIYxPQy9Vt9hJ6KiKHfUS1CRVKuEeRU0cR1k5nYYJ9os41JWywi7s2yOM
++XqcZ3UY/1czYCAkTLTDffL+aBdnGg9J3On9kFjyRF0iLXX16Q54QLspaXocmU9Am
++2wSwE7K/W0aWsq2eltYx65P70ibxAbPZ0qot3ABcOnzWR+9c7aOd/9rRgw6KPGtv
++ViprbRNHQ4ZPWcw7LjS8u4xpsl2vm7smwxodKst+HeJgGYwaMm6d+7stFgC2CLJV
++M8p2CxGUdj1+NdmuVFBk3AU653FFnGofa10DyrEaIvTEd28I5amCpG9mdwmAryyx
++jOl2likiCzdMkGcQpPiMexU4hxd4FZ8TVdwwTsjttEvta+v4QrN+nsBGKHqstaFK
++zBcbwf2c3X55/TnP6kDcdpqQSppqCxwG6UHtrxOZbpM0rIheyjgsOG0sJkzhJosR
++PT71+DeL7V18EpRoxNU+v4sCAwEAAQ==
+ -----END PUBLIC KEY-----
+ """
+ 

diff --git a/python-PyGithub.spec b/python-PyGithub.spec
index f8d829f..82ceb31 100644
--- a/python-PyGithub.spec
+++ b/python-PyGithub.spec
@@ -6,6 +6,8 @@ License:        LGPL-3.0-or-later
 URL:            https://github.com/PyGithub/PyGithub
 # github tarball (unlike PyPI one) contains tests
 Source:         %{url}/archive/v%{version}/PyGithub-%{version}.tar.gz
+# Update test key pair from 1024-bit to 4096-bit RSA (InsecureKeyLengthWarning)
+Patch:          https://github.com/PyGithub/PyGithub/commit/24305f6d6.patch
 BuildArch:      noarch
 
 %global _description %{expand:

                 reply	other threads:[~2026-06-03  1:58 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178045190411.1.13997294101170800964.rpms-python-PyGithub-961dfb42b701@fedoraproject.org \
    --to=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

Be sure your reply has a Subject: header at the top and a blank line before the message body.

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox