[rpms/python-pillow-jxl-plugin] rawhide: Update PyO3 to 0.29

[Benjamin A. Beasley <code@musicinmybrain.net>]

A new commit has been pushed.

Repo   : rpms/python-pillow-jxl-plugin
Branch : rawhide
Commit : 2318fe1c1af3c8017e1b00a7b56ca3f8cd5f6211
Author : Benjamin A. Beasley <code@musicinmybrain.net>
Date   : 2026-06-20T23:04:22+01:00
Stats  : +44/-39 in 5 file(s)
URL    : https://src.fedoraproject.org/rpms/python-pillow-jxl-plugin/c/2318fe1c1af3c8017e1b00a7b56ca3f8cd5f6211?branch=rawhide

Log:
Update PyO3 to 0.29

---
diff --git a/0001-Update-jpegxl-rs-dependency-from-0.11.2-to-0.12.0.patch b/0001-Update-jpegxl-rs-dependency-from-0.11.2-to-0.12.0.patch
index 09d3839..b61025e 100644
--- a/0001-Update-jpegxl-rs-dependency-from-0.11.2-to-0.12.0.patch
+++ b/0001-Update-jpegxl-rs-dependency-from-0.11.2-to-0.12.0.patch
@@ -1,4 +1,4 @@
-From 5c8a953b036793a0c665b10a9491d3a4cbbef7c7 Mon Sep 17 00:00:00 2001
+From a4fcb521f1577883ee83269558f3e01e77fb43af Mon Sep 17 00:00:00 2001
 From: Fabio Valentini <decathorpe@gmail.com>
 Date: Tue, 17 Mar 2026 23:23:07 +0100
 Subject: [PATCH 1/3] Update jpegxl-rs dependency from 0.11.2 to 0.12.0

diff --git a/0002-Unconditionally-dynamically-link-libjxl.patch b/0002-Unconditionally-dynamically-link-libjxl.patch
index f3bfb1f..bcadfdd 100644
--- a/0002-Unconditionally-dynamically-link-libjxl.patch
+++ b/0002-Unconditionally-dynamically-link-libjxl.patch
@@ -1,4 +1,4 @@
-From cebbe07b0a6110c85bcfae82114b8e26e748d897 Mon Sep 17 00:00:00 2001
+From f5d1a1946b6a2d7a85b7df79236611d8819917d0 Mon Sep 17 00:00:00 2001
 From: Fabio Valentini <decathorpe@gmail.com>
 Date: Sat, 22 Mar 2025 13:30:36 +0100
 Subject: [PATCH 2/3] Unconditionally dynamically link libjxl

diff --git a/0003-Downstream-only-patch-out-the-generate-import-lib-fe.patch b/0003-Downstream-only-patch-out-the-generate-import-lib-fe.patch
deleted file mode 100644
index a60902c..0000000
--- a/0003-Downstream-only-patch-out-the-generate-import-lib-fe.patch
+++ /dev/null
@@ -1,31 +0,0 @@
-From 9c84197b46f92aab78832c3e0f52190e06d22933 Mon Sep 17 00:00:00 2001
-From: "Benjamin A. Beasley" <code@musicinmybrain.net>
-Date: Sat, 20 Jun 2026 22:02:36 +0100
-Subject: [PATCH 3/3] Downstream-only: patch out the generate-import-lib
- feature
-MIME-Version: 1.0
-Content-Type: text/plain; charset=UTF-8
-Content-Transfer-Encoding: 8bit
-
-It is only relevant on Windows, and depends on the corresponding pyo3
-feature – which is not packaged for that reason.
----
- Cargo.toml | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/Cargo.toml b/Cargo.toml
-index de9ba7c..d131f2c 100644
---- a/Cargo.toml
-+++ b/Cargo.toml
-@@ -9,7 +9,7 @@ name = "pillow_jxl"
- crate-type = ["cdylib"]
- 
- [dependencies]
--pyo3 = { version="0.27.1", features = ["extension-module", "generate-import-lib"] }
-+pyo3 = { version="0.27.1", features = ["extension-module"] }
- jpegxl-rs = { version="0.12.0", default-features = false }
- half = "2.7.1"
- 
--- 
-2.54.0
-

diff --git a/0003-Update-PyO3-to-0.29.patch b/0003-Update-PyO3-to-0.29.patch
new file mode 100644
index 0000000..a303ba6
--- /dev/null
+++ b/0003-Update-PyO3-to-0.29.patch
@@ -0,0 +1,31 @@
+From 71a56739812964ea697acf215f44dc793f7dfccd Mon Sep 17 00:00:00 2001
+From: "Benjamin A. Beasley" <code@musicinmybrain.net>
+Date: Sat, 20 Jun 2026 22:42:15 +0100
+Subject: [PATCH 3/3] Update PyO3 to 0.29
+
+https://pyo3.rs/main/changelog.html#0290---2026-06-11
+
+Fixes:
+
+    https://rustsec.org/advisories/RUSTSEC-2026-0176.html
+    https://rustsec.org/advisories/RUSTSEC-2026-0177.html
+---
+ Cargo.toml | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/Cargo.toml b/Cargo.toml
+index de9ba7c..91ca991 100644
+--- a/Cargo.toml
++++ b/Cargo.toml
+@@ -9,7 +9,7 @@ name = "pillow_jxl"
+ crate-type = ["cdylib"]
+ 
+ [dependencies]
+-pyo3 = { version="0.27.1", features = ["extension-module", "generate-import-lib"] }
++pyo3 = { version="0.29.0", features = ["extension-module"] }
+ jpegxl-rs = { version="0.12.0", default-features = false }
+ half = "2.7.1"
+ 
+-- 
+2.54.0
+

diff --git a/python-pillow-jxl-plugin.spec b/python-pillow-jxl-plugin.spec
index 3083c0d..aa904b9 100644
--- a/python-pillow-jxl-plugin.spec
+++ b/python-pillow-jxl-plugin.spec
@@ -8,10 +8,9 @@ SourceLicense:  GPL-3.0-or-later AND CC-BY-4.0 AND CC-BY-SA-4.0
 
 # BSD-2-Clause OR Apache-2.0 OR MIT
 # GPL-3.0-or-later
-# MIT
 # MIT OR Apache-2.0
 # Unlicense OR MIT
-License:        GPL-3.0-or-later AND MIT AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (Unlicense OR MIT)
+License:        GPL-3.0-or-later AND (Apache-2.0 OR MIT) AND (BSD-2-Clause OR Apache-2.0 OR MIT) AND (Unlicense OR MIT)
 # LICENSE.dependencies contains a full license breakdown
 
 URL:            https://github.com/Isotr0py/pillow-jpegxl-plugin
@@ -24,11 +23,17 @@ Patch:          0001-Update-jpegxl-rs-dependency-from-0.11.2-to-0.12.0.patch
 # drop custom build system that is unnecessary and only breaks stuff
 Patch:          0002-Unconditionally-dynamically-link-libjxl.patch
 
-# Downstream-only: patch out the generate-import-lib feature
+# Update PyO3 to 0.29
 #
-# It is only relevant on Windows, and depends on the corresponding pyo3
-# feature – which is not packaged for that reason.
-Patch:          0003-Downstream-only-patch-out-the-generate-import-lib-fe.patch
+# https://pyo3.rs/main/changelog.html#0290---2026-06-11
+#
+# Fixes:
+#
+#     https://rustsec.org/advisories/RUSTSEC-2026-0176.html
+#     https://rustsec.org/advisories/RUSTSEC-2026-0177.html
+#
+# https://github.com/Isotr0py/pillow-jpegxl-plugin/pull/156
+Patch:          0003-Update-PyO3-to-0.29.patch
 
 BuildRequires:  cargo-rpm-macros >= 24
 BuildRequires:  python3-devel