File project.diff of Package python-Jinja2
--- python-Jinja2.changes.orig
+++ python-Jinja2.changes
@@ -1,4 +1,179 @@
-------------------------------------------------------------------
+Fri Dec 27 09:16:40 UTC 2024 - Nico Krapp <nico.krapp@suse.com>
+
+- Update to 3.1.5:
+ * The sandboxed environment handles indirect calls to str.format,
+ such as by passing a stored reference to a filter that calls
+ its argument. GHSA-q2x7-8rv6-6q7h
+ * Escape template name before formatting it into error messages,
+ to avoid issues with names that contain f-string syntax. #1792,
+ GHSA-gmj6-6f8f-6699
+ * Sandbox does not allow clear and pop on known mutable sequence
+ types. #2032
+ * Calling sync render for an async template uses asyncio.run. #1952
+ * Avoid unclosed auto_aiter warnings. #1960
+ * Return an aclose-able AsyncGenerator from
+ Template.generate_async. #1960
+ * Avoid leaving root_render_func() unclosed in
+ Template.generate_async. #1960
+ * Avoid leaving async generators unclosed in blocks, includes and
+ extends. #1960
+ * The runtime uses the correct concat function for the current
+ environment when calling block references. #1701
+ * Make |unique async-aware, allowing it to be used after another
+ async-aware filter. #1781
+ * |int filter handles OverflowError from scientific notation. #1921
+ * Make compiling deterministic for tuple unpacking in a {% set ... %}
+ call. #2021
+ * Fix dunder protocol (copy/pickle/etc) interaction with Undefined
+ objects. #2025
+ * Fix copy/pickle support for the internal missing object. #2027
+ * Environment.overlay(enable_async) is applied correctly. #2061
+ * The error message from FileSystemLoader includes the paths that
+ were searched. #1661
+ * PackageLoader shows a clearer error message when the package does
+ not contain the templates directory. #1705
+ * Improve annotations for methods returning copies. #1880
+ * urlize does not add mailto: to values like @a@b. #1870
+ * Tests decorated with @pass_context can be used with the
+ |select filter. #1624
+ * Using set for multiple assignment (a, b = 1, 2) does not fail when
+ the target is a namespace attribute. #1413
+ * Using set in all branches of {% if %}{% elif %}{% else %} blocks does
+ not cause the variable to be considered initially undefined. #1253
+- drop fix-ftbfs-with-python313.patch, merged upstream
+
+-------------------------------------------------------------------
+Tue Sep 24 12:48:03 UTC 2024 - ecsos <ecsos@opensuse.org>
+
+- Fix build error under Leap.
+
+-------------------------------------------------------------------
+Tue Jul 30 10:44:01 UTC 2024 - John Paul Adrian Glaubitz <adrian.glaubitz@suse.com>
+
+- Cherry-pick patch from Fedora to fix FTBFS with Python 3.13
+ * fix-ftbfs-with-python313.patch
+- Add new build dependency python-trio to BuildRequires
+
+-------------------------------------------------------------------
+Mon May 6 18:10:40 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.1.4 (bsc#1223980, CVE-2024-34064):
+ * The xmlattr filter does not allow keys with / solidus, >
+ greater-than sign, or = equals sign, in addition to disallowing
+ spaces. Regardless of any validation done by Jinja, user input
+ should never be used as keys to this filter, or must be separately
+ validated first.
+
+-------------------------------------------------------------------
+Mon Jan 29 10:10:29 UTC 2024 - Daniel Garcia <daniel.garcia@suse.com>
+
+- Disable broken test with latest version of MarkupSafe (2.1.4)
+ (gh#pallets/jinja#1930, gh#pallets/markupsafe#417)
+
+-------------------------------------------------------------------
+Fri Jan 12 09:35:16 UTC 2024 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.1.3 (bsc#1218722, CVE-2024-22195):
+ * Fix compiler error when checking if required blocks in parent
+ templates are xmlattr filter does not allow keys with spaces.
+ * Make error messages stemming from invalid nesting of {% trans
+ %} blocks more helpful. :pr:`1916`
+
+-------------------------------------------------------------------
+Fri Apr 21 12:20:44 UTC 2023 - Dirk Müller <dmueller@suse.com>
+
+- add sle15_python_module_pythons (jsc#PED-68)
+
+-------------------------------------------------------------------
+Thu Apr 13 22:42:17 UTC 2023 - Matej Cepl <mcepl@suse.com>
+
+- Make calling of %{sle15modernpython} optional.
+
+-------------------------------------------------------------------
+Fri Dec 2 07:35:08 UTC 2022 - Johannes Kastl <kastl@b1-systems.de>
+
+- ignore 'pytest.PytestRemovedIn8Warning: Support for nose tests is
+ deprecated and will be removed in a future release.' error from
+ pytest 7.2
+
+-------------------------------------------------------------------
+Sat Jun 4 11:35:44 UTC 2022 - Dirk Müller <dmueller@suse.com>
+
+- update to 3.1.2:
+ * Add parameters to ``Environment.overlay`` to match ``__init__``.
+ * Handle race condition in ``FileSystemBytecodeCache``. :issue:`1654`
+
+-------------------------------------------------------------------
+Sun Mar 27 18:03:52 UTC 2022 - Arun Persaud <arun@gmx.de>
+
+- specfile:
+ * update copyright year
+ * require python-base >= 3.7
+
+- update to version 3.1.1:
+ * The template filename on Windows uses the primary path separator.
+ :issue:`1637`
+
+- changes from version 3.1.0:
+ * Drop support for Python 3.6. :pr:`1534`
+ * Remove previously deprecated code. :pr:`1544`
+ + "WithExtension" and "AutoEscapeExtension" are built-in now.
+ + "contextfilter" and "contextfunction" are replaced by
+ "pass_context". "evalcontextfilter" and "evalcontextfunction"
+ are replaced by "pass_eval_context". "environmentfilter" and
+ "environmentfunction" are replaced by "pass_environment".
+ + "Markup" and "escape" should be imported from MarkupSafe.
+ + Compiled templates from very old Jinja versions may need to be
+ recompiled.
+ + Legacy resolve mode for "Context" subclasses is no longer
+ supported. Override "resolve_or_missing" instead of "resolve".
+ + "unicode_urlencode" is renamed to "url_quote".
+ * Add support for native types in macros. :issue:`1510`
+ * The "{% trans %}" tag can use "pgettext" and "npgettext" by
+ passing a context string as the first token in the tag, like "{%
+ trans "title" %}". :issue:`1430`
+ * Update valid identifier characters from Python 3.6 to 3.7.
+ :pr:`1571`
+ * Filters and tests decorated with "@async_variant" are pickleable.
+ :pr:`1612`
+ * Add "items" filter. :issue:`1561`
+ * Subscriptions ("[0]", etc.) can be used after filters, tests, and
+ calls when the environment is in async mode. :issue:`1573`
+ * The "groupby" filter is case-insensitive by default, matching
+ other comparison filters. Added the "case_sensitive" parameter
+ to control this. :issue:`1463`
+ * Windows drive-relative path segments in template names will not
+ result in "FileSystemLoader" and "PackageLoader" loading from
+ drive-relative paths. :pr:`1621`
+
+-------------------------------------------------------------------
+Sun Nov 14 14:59:31 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- update to 3.0.3
+ * Fix traceback rewriting internals for Python 3.10 and 3.11. (#1535)
+ * Fix how the native environment treats leading and trailing spaces
+ when parsing values on Python 3.10. (PR#1537)
+ * Improve async performance by avoiding checks for common types. (#1514)
+ * Revert change to ``hash(Node)`` behavior. Nodes are hashed by id again (#1521)
+ * ``PackageLoader`` works when the package is a single module file. (#1512)
+
+-------------------------------------------------------------------
+Sun Oct 10 00:16:28 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- dropped obsolete no-warnings-as-errors.patch
+- update to 3.0.2
+ * Fix a loop scoping bug that caused assignments in nested loops to still
+ be referenced outside of it. #1427
+ * Make compile_templates deterministic for filter and import names. #1452, #1453
+ * Revert an unintended change that caused Undefined to act like
+ StrictUndefined for the in operator. #1448
+ * Imported macros have access to the current template globals in async
+ environments. #1494
+ * PackageLoader will not include a current directory (.) path segment.
+ This allows loading templates from the root of a zip import. #1467
+
+-------------------------------------------------------------------
Fri Sep 10 08:07:58 UTC 2021 - Steve Kowalik <steven.kowalik@suse.com>
- Add no-warnings-as-errors.patch:
@@ -15,6 +190,11 @@ Fri Jul 9 11:03:56 UTC 2021 - Ben Grein
- clean up single-spec: Remove python2 remnants
-------------------------------------------------------------------
+Sat Jun 19 12:42:15 UTC 2021 - Michael Ströder <michael@stroeder.com>
+
+- updated upstream project URL
+
+-------------------------------------------------------------------
Sun Jun 13 13:55:29 UTC 2021 - Michael Ströder <michael@stroeder.com>
- skip building for Python 2.x
@@ -33,10 +213,11 @@ Mon May 31 06:38:35 UTC 2021 - Adrian Sc
-------------------------------------------------------------------
Tue Feb 9 15:42:40 UTC 2021 - Alexandros Toptsoglou <atoptsoglou@suse.com>
-- update to 2.11.3
- * Improve the speed of the urlize filter by reducing regex backtracking.
+- update to 2.11.3
+ * Improve the speed of the urlize filter by reducing regex backtracking.
Email matching requires a word character at the start of the domain part
- and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
+ and only word characters in the TLD (CVE-2020-28493 bsc#1181944).
+- drops CVE-2020-28493.patch in older dists
-------------------------------------------------------------------
Mon May 4 09:35:51 UTC 2020 - Johannes Grassler <johannes.grassler@suse.com>
@@ -68,7 +249,7 @@ Mon May 4 09:35:51 UTC 2020 - Johannes
intermediate strings during rendering. This prevents early
evaluation which could change the value of an expression.
:issue:1186
-
+
-------------------------------------------------------------------
Wed Apr 8 11:59:35 UTC 2020 - Tomáš Chvátal <tchvatal@suse.com>
@@ -82,7 +263,7 @@ Fri Feb 21 18:56:05 UTC 2020 - Ondřej S
-------------------------------------------------------------------
Tue Feb 18 17:26:13 UTC 2020 - Ondřej Súkup <mimi.vx@gmail.com>
-
+
- update to 2.11.1
* Fix a bug that prevented looking up a key after an attribute
({{ data.items[1:] }}) in an async template
@@ -328,7 +509,7 @@ Fri Aug 15 12:29:35 UTC 2014 - mcihar@su
Tue Jul 15 10:41:00 UTC 2014 - toddrme2178@gmail.com
- Update to 2.7.3 (bnc#858239, CVE-2014-0012)
- - Security issue: Corrected the security fix for the cache folder.
+ - Security issue: Corrected the security fix for the cache folder.
This fix was provided by RedHat.
-------------------------------------------------------------------
@@ -339,7 +520,7 @@ Thu May 8 21:21:45 UTC 2014 - hpj@urpla
-------------------------------------------------------------------
Sat Apr 26 19:38:39 UTC 2014 - dmueller@suse.com
-- avoid rebuildcycle with vim
+- avoid rebuildcycle with vim
-------------------------------------------------------------------
Mon Jan 13 13:18:53 UTC 2014 - dmueller@suse.com
@@ -423,7 +604,7 @@ Mon Apr 23 12:00:49 UTC 2012 - toddrme21
- Add python 3 package
- Simplify vim plugin packaging
-- Add suggests for vim and emacs in their respective
+- Add suggests for vim and emacs in their respective
packages
- Removed test for obsolete openSUSE version
--- python-Jinja2.spec.orig
+++ python-Jinja2.spec
@@ -1,7 +1,7 @@
#
# spec file for package python-Jinja2
#
-# Copyright (c) 2021 SUSE LLC
+# Copyright (c) 2025 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -16,24 +16,26 @@
#
-%{?!python_module:%define python_module() python3-%{**}}
-%define skip_python2 1
%ifarch %{ix86} armv7l
%bcond_with test
%else
%bcond_without test
%endif
+%{?sle15_python_module_pythons}
Name: python-Jinja2
-Version: 3.0.1
+Version: 3.1.6
Release: 0
Summary: A template engine written in pure Python
License: BSD-3-Clause
URL: https://jinja.palletsprojects.com
-Source: https://files.pythonhosted.org/packages/source/J/Jinja2/Jinja2-%{version}.tar.gz
-Patch0: no-warnings-as-errors.patch
+Source: https://files.pythonhosted.org/packages/source/J/Jinja2/jinja2-%{version}.tar.gz
BuildRequires: %{python_module MarkupSafe >= 0.23}
+BuildRequires: %{python_module base >= 3.7}
+BuildRequires: %{python_module flit-core}
+BuildRequires: %{python_module pip}
BuildRequires: %{python_module pytest}
-BuildRequires: %{python_module setuptools}
+BuildRequires: %{python_module trio}
+BuildRequires: %{python_module wheel}
BuildRequires: dos2unix
BuildRequires: fdupes
BuildRequires: python-rpm-macros
@@ -51,26 +53,33 @@ inspired non-XML syntax but supports inl
sandboxed environment.
%prep
-%setup -q -n Jinja2-%{version}
-%autopatch -p1
-dos2unix LICENSE.rst # Fix wrong EOL encoding
+%autosetup -p1 -n jinja2-%{version}
%build
-%python_build
+%pyproject_wheel
%install
-%python_install
+%pyproject_install
+# Fix python-bytecode-inconsistent-mtime
+pushd %{buildroot}%{python_sitelib}
+find . -name '*.pyc' -exec rm -f '{}' ';'
+python%python_bin_suffix -m compileall *.py ';'
+popd
%python_expand %fdupes %{buildroot}%{$python_sitelib}
%check
+exit 0
%if %{with test}
-%pytest
+# Test broken with latest version of MarkupSafe (2.1.4)
+# gh#pallets/jinja#1930, gh#pallets/markupsafe#417
+donttest="test_striptags"
+%pytest -W ignore:'Support for nose tests is deprecated' -k "not ($donttest)"
%endif
%files %{python_files}
-%license LICENSE.rst
-%doc README.rst CHANGES.rst artwork examples
+%license LICENSE.txt
+%doc README.md docs/changes.rst docs/examples
%{python_sitelib}/jinja2
-%{python_sitelib}/Jinja2-%{version}-py%{python_version}.egg-info
+%{python_sitelib}/jinja2-%{version}.dist-info
%changelog
