public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/python-pendulum] f43: Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)
@ 2026-06-30 21:41 Benjamin A. Beasley
  0 siblings, 0 replies; only message in thread
From: Benjamin A. Beasley @ 2026-06-30 21:41 UTC (permalink / raw)
  To: git-commits

A new commit has been pushed.

Repo   : rpms/python-pendulum
Branch : f43
Commit : 5d149bbed5a5d353b5affe977af59dae30905491
Author : Benjamin A. Beasley <code@musicinmybrain.net>
Date   : 2026-06-30T21:29:49+01:00
Stats  : +31/-30 in 3 file(s)
URL    : https://src.fedoraproject.org/rpms/python-pendulum/c/5d149bbed5a5d353b5affe977af59dae30905491?branch=f43

Log:
Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)

---
diff --git a/0001-Allow-PyO3-0.26-until-we-have-0.27-RHBZ-2404994.patch b/0001-Allow-PyO3-0.26-until-we-have-0.27-RHBZ-2404994.patch
deleted file mode 100644
index 579cee1..0000000
--- a/0001-Allow-PyO3-0.26-until-we-have-0.27-RHBZ-2404994.patch
+++ /dev/null
@@ -1,25 +0,0 @@
-From 473ceafc25806f1dfd703d79c0417a2601a068cb Mon Sep 17 00:00:00 2001
-From: "Benjamin A. Beasley" <code@musicinmybrain.net>
-Date: Tue, 28 Oct 2025 11:45:27 +0000
-Subject: [PATCH] Allow PyO3 0.26 until we have 0.27, RHBZ#2404994
-
----
- rust/Cargo.toml | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/rust/Cargo.toml b/rust/Cargo.toml
-index 0922472..b6d88b9 100644
---- a/rust/Cargo.toml
-+++ b/rust/Cargo.toml
-@@ -14,7 +14,7 @@ strip = true
- overflow-checks = false
- 
- [dependencies]
--pyo3 = { version = "0.27", features = ["extension-module", "generate-import-lib"] }
-+pyo3 = { version = ">=0.26, <0.28", features = ["extension-module", "generate-import-lib"] }
- 
- [features]
- extension-module = ["pyo3/extension-module"]
--- 
-2.51.0
-

diff --git a/pendulum-3.2.0-pyo3-0.29.patch b/pendulum-3.2.0-pyo3-0.29.patch
new file mode 100644
index 0000000..59ae9c6
--- /dev/null
+++ b/pendulum-3.2.0-pyo3-0.29.patch
@@ -0,0 +1,26 @@
+diff --git a/rust/Cargo.toml b/rust/Cargo.toml
+index 097321fe..b4c3a43e 100644
+--- a/rust/Cargo.toml
++++ b/rust/Cargo.toml
+@@ -14,7 +14,7 @@ strip = true
+ overflow-checks = false
+ 
+ [dependencies]
+-pyo3 = { version = "0.27", features = ["extension-module", "generate-import-lib"] }
++pyo3 = { version = "0.29", features = ["extension-module"] }
+ 
+ [features]
+ extension-module = ["pyo3/extension-module"]
+diff --git a/rust/src/python/types/timezone.rs b/rust/src/python/types/timezone.rs
+index 64dce026..f6f74747 100644
+--- a/rust/src/python/types/timezone.rs
++++ b/rust/src/python/types/timezone.rs
+@@ -2,7 +2,7 @@
+ use pyo3::prelude::*;
+ use pyo3::types::{PyDelta, PyDict, PyTzInfo};
+ 
+-#[pyclass(module = "_pendulum", extends = PyTzInfo)]
++#[pyclass(module = "_pendulum", extends = PyTzInfo, from_py_object)]
+ #[derive(Clone)]
+ pub struct FixedTimezone {
+     offset: i32,

diff --git a/python-pendulum.spec b/python-pendulum.spec
index cd73c6b..cf0eecc 100644
--- a/python-pendulum.spec
+++ b/python-pendulum.spec
@@ -10,8 +10,10 @@ URL:            https://pendulum.eustace.io
 %global forgeurl https://github.com/sdispater/pendulum
 Source:         %{forgeurl}/archive/%{version}/pendulum-%{version}.tar.gz
 
-# Downstream-only: allow PyO3 0.26 until we have 0.27, RHBZ#2404994
-Patch:          0001-Allow-PyO3-0.26-until-we-have-0.27-RHBZ-2404994.patch
+# Update PyO3 to 0.29
+# https://github.com/python-pendulum/pendulum/pull/978
+# (Without changes to Cargo.lock)
+Patch:          pendulum-3.2.0-pyo3-0.29.patch
 
 BuildRequires:  python3-devel
 BuildRequires:  cargo-rpm-macros
@@ -57,9 +59,6 @@ sed -i '/@pytest.mark.benchmark/d' $(find tests -type f -name '*.py')
 %cargo_prep
 cd rust
 rm Cargo.lock
-# Remove unpackaged feature. This is only needed for Windows.
-tomcli-set Cargo.toml lists delitem dependencies.pyo3.features \
-    'generate-import-lib'
 
 %generate_buildrequires
 # For unclear reasons, maturin checks for all crate dependencies when it is
@@ -99,6 +98,7 @@ popd
 %changelog
 * Tue Jun 30 2026 Benjamin A. Beasley <code@musicinmybrain.net> - 3.2.0-1
 - Update to 3.2.0 (final); Fixes RHBZ#2435482
+- Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177)
 
 * Thu Jun 04 2026 Python Maint <python-maint@redhat.com> - 3.2.0~dev0^20251024git628fd85-3
 - Rebuilt for Python 3.15

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-06-30 21:41 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-06-30 21:41 [rpms/python-pendulum] f43: Update PyO3 to 0.29 (fixes RUSTSEC-2026-0176, RUSTSEC-2026-0177) Benjamin A. Beasley

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox