[rpms/python-bcrypt] f43: Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177

[rpms/python-bcrypt] f43: Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177

[Benjamin A. Beasley]

A new commit has been pushed.

Repo   : rpms/python-bcrypt
Branch : f43
Commit : efdd1c2b9052583ff69b8d660078cdf3428b3183
Author : Benjamin A. Beasley <code@musicinmybrain.net>
Date   : 2026-07-07T05:41:44+01:00
Stats  : +34/-4 in 2 file(s)
URL    : https://src.fedoraproject.org/rpms/python-bcrypt/c/efdd1c2b9052583ff69b8d660078cdf3428b3183?branch=f43

Log:
Update PyO3 to 0.29; addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177

---
diff --git a/python-bcrypt-4.3.0-pyo3.patch b/python-bcrypt-4.3.0-pyo3.patch
index 41999cd..b615cd3 100644
--- a/python-bcrypt-4.3.0-pyo3.patch
+++ b/python-bcrypt-4.3.0-pyo3.patch
@@ -1,12 +1,33 @@
 diff -Naur bcrypt-4.3.0-original/src/_bcrypt/Cargo.toml bcrypt-4.3.0/src/_bcrypt/Cargo.toml
---- bcrypt-4.3.0-original/src/_bcrypt/Cargo.toml	2025-02-27 20:17:02.000000000 -0500
-+++ bcrypt-4.3.0/src/_bcrypt/Cargo.toml	2025-06-21 11:39:31.510615224 -0400
+--- bcrypt-4.3.0-original/src/_bcrypt/Cargo.toml	2025-02-28 01:17:02.000000000 +0000
++++ bcrypt-4.3.0/src/_bcrypt/Cargo.toml	2026-07-07 05:40:25.336461224 +0100
 @@ -6,7 +6,7 @@
  publish = false
  
  [dependencies]
 -pyo3 = { version = "0.23.5", features = ["abi3"] }
-+pyo3 = { version = "0.25.1", features = ["abi3"] }
++pyo3 = { version = "0.29", features = ["abi3"] }
  bcrypt = "0.17"
  bcrypt-pbkdf = "0.10.0"
  base64 = "0.22.1"
+diff -Naur bcrypt-4.3.0-original/src/_bcrypt/src/lib.rs bcrypt-4.3.0/src/_bcrypt/src/lib.rs
+--- bcrypt-4.3.0-original/src/_bcrypt/src/lib.rs	2025-02-28 01:17:02.000000000 +0000
++++ bcrypt-4.3.0/src/_bcrypt/src/lib.rs	2026-07-07 05:33:44.389553292 +0100
+@@ -118,7 +118,7 @@
+         .map_err(|_| pyo3::exceptions::PyValueError::new_err("Invalid salt"))?;
+ 
+     let hashed = py
+-        .allow_threads(|| bcrypt::hash_with_salt(password, cost, raw_salt))
++        .detach(|| bcrypt::hash_with_salt(password, cost, raw_salt))
+         .map_err(|_| pyo3::exceptions::PyValueError::new_err("Invalid salt"))?;
+     Ok(pyo3::types::PyBytes::new(
+         py,
+@@ -175,7 +175,7 @@
+     }
+ 
+     pyo3::types::PyBytes::new_with(py, desired_key_bytes, |output| {
+-        py.allow_threads(|| {
++        py.detach(|| {
+             bcrypt_pbkdf::bcrypt_pbkdf(password, salt, rounds, output).unwrap();
+         });
+         Ok(())

diff --git a/python-bcrypt.spec b/python-bcrypt.spec
index fb211e8..cd44aac 100644
--- a/python-bcrypt.spec
+++ b/python-bcrypt.spec
@@ -11,7 +11,8 @@ License:            Apache-2.0 AND LicenseRef-Fedora-Public-Domain
 URL:                https://pypi.python.org/pypi/bcrypt
 Source0:            %pypi_source bcrypt
 
-# Update pyo3 dependency from 0.23 to 0.25
+# Update pyo3 dependency from 0.23 to 0.29
+# Addresses RUSTSEC-2026-0176 and RUSTSEC-2026-0177.
 #
 # Bump pyo3 from 0.23.5 to 0.24.0 in /src/_bcrypt
 # https://github.com/pyca/bcrypt/pull/998
@@ -23,6 +24,14 @@ Source0:            %pypi_source bcrypt
 # https://github.com/pyca/bcrypt/pull/1025
 # Bump pyo3 from 0.25.0 to 0.25.1 in /src/_bcrypt
 # https://github.com/pyca/bcrypt/pull/1035
+# Bump pyo3 version [to 0.26]
+# https://github.com/pyca/bcrypt/pull/1062
+# Bump pyo3 from 0.26.0 to 0.27.0 in /src/_bcrypt
+# https://github.com/pyca/bcrypt/pull/1095
+# Bump pyo3 from 0.27.2 to 0.28.0 in /src/_bcrypt
+# https://github.com/pyca/bcrypt/pull/1148
+# Bump pyo3 from 0.28.3 to 0.29.0 in /src/_bcrypt
+# https://github.com/pyca/bcrypt/pull/1215
 Patch:          python-bcrypt-4.3.0-pyo3.patch
 
 %description