- Add CVE-2023-5752-r-param-hg.patch to fix bsc#1217353
  (CVE-2023-5752) avoiding injection of arbitrary configuration
  through Mercurial parameter.

• Files Changed
• Browse Source

• Files Changed
• Browse Source

osc copypac from project:systemsmanagement:saltstack:bundle:next package:saltbundlepy-pip revision:6

• Files Changed
• Browse Source

osc copypac from project:systemsmanagement:saltstack:bundle:next package:saltbundlepy-pip revision:5

• Files Changed
• Browse Source

• Files Changed
• Browse Source

- Add openEuler CA bundle path definition

• Files Changed
• Browse Source

osc copypac from project:systemsmanagement:saltstack:bundle:testing package:saltbundlepy-pip revision:4

• Files Changed
• Browse Source

- Strictly require Python 3.10 with saltbundlepy requrement

• Files Changed
• Browse Source

- Use unified method of returning CA bundle path for the distros
- Added:
  * return-CA-bundle-for-distro.patch
- Removed:
  * pip-shipped-requests-cabundle.patch

• Files Changed
• Browse Source

- Don't Require python- packages, it must be python310- ones.

- Adjust SPEC file to generate python310 module only
  (jsc#SLE-18038).

- Use libalternatives instead of update-alternatives. 

- Update to 20.2.4:
  Deprecations and Removals
    * Document that certain removals can be fast tracked. 
    * Document that Python versions are generally supported until
      PyPI usage falls below 5%
  Features
    * New resolver: Avoid accessing indexes when the installed
      candidate is preferred and considered good enough
    * Improve error message friendliness when an environment
      has packages with corrupted metadata
    * Cache package listings on index packages so they are guarenteed
      to stay stable during a pip command session. This also improves
      performance when a index page is accessed multiple times during
      the command session
    * New resolver: Tweak resolution logic to improve user experience
      when user-supplied requirements conflict
  Bug Fixes
    * New resolver: Correctly respect ``Requires-Python`` metadata
      to reject incompatible packages in ``--no-deps`` mode
    * New resolver: Pick up hash declarations in constraints files
      and use them to filter available distributions
    * New resolver: If a package appears multiple times in user
      specification with different ``--hash`` options, only hashes

• Browse Source