| Message ID | 20260722103621.1810876-1-leon.anavi@konsulko.com |
|---|---|
| State | Rejected |
| Headers | show |
| Series | [1/2] python3-chardet: Upgrade 6.0.0.post1 -> 7.4.3.bb | expand |
On Wed Jul 22, 2026 at 12:36 PM CEST, Leon Anavi via lists.openembedded.org wrote: > Upgrade to relase 7.4.3: > > - Fixed ValueError: embedded null character crash when input > contained a <meta charset> declaration with a null byte in the > encoding name (e.g. b'<meta charset="\x00utf-8">'). > codecs.lookup() raises ValueError on embedded nulls, and > lookup_encoding() was only catching LookupError. Also added > defensive ValueError catches in _validate_bytes() and _to_utf8() > for completeness. > > License-Update: Change 7.x license from MIT to 0BSD > > Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> > --- > ...n3-chardet_6.0.0.post1.bb => python3-chardet_7.4.3.bb} | 8 ++++---- > 1 file changed, 4 insertions(+), 4 deletions(-) > rename meta/recipes-devtools/python/{python3-chardet_6.0.0.post1.bb => python3-chardet_7.4.3.bb} (61%) Hello, This is the upgrade of the full LLM rewrite with the controversial licence change: The relicensing of chardet [LWN.net] https://lwn.net/Articles/1061534/ Last time we rejected the upgrade, I'm not sure the situation has changed: See previous discussion: https://lore.kernel.org/all/20260421095559.1856-24-wangmy@fujitsu.com/ and: |commit 4e85dedfcf31f8b4c3d248531c958a635eea0379 |Author: Alexander Kanavin <alex@linutronix.de> |Date: Wed May 27 19:35:47 2026 +0200 | | python3-chardet: lock version check to 6.x versions | | There's a well-publicised controversy around AI-assisted rewrite | for the purpose of relicensing from GPL to BSD: | https://lwn.net/Articles/1061534/ | | Both Debian and Fedora are steering clear of 7.x: | | https://src.fedoraproject.org/rpms/python-chardet/pull-request/15 | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1129923 If the situation has changed, I think it should be addressed in the commit message. Regards,
On Wed, 22 Jul 2026 at 12:36, Leon Anavi via lists.openembedded.org
<leon.anavi=konsulko.com@lists.openembedded.org> wrote:
> License-Update: Change 7.x license from MIT to 0BSD
In addition to what Yoann said, why did you write MIT? The previous
license was clearly LGPL.
What prompted you to work on this update and add ptests for it?
Alex
Hi Yoann, Alex, On 7/22/26 14:16, Yoann Congal wrote: > If the situation has changed, I think it should be addressed in the commit > message. Sorry, I didn't realize the changed license controversies are so big. The referenced LWN article from March 5, 2026 discusses the change from LGPL to the permissive MIT license. After that on March 22, 2026 the license was changed again from MIT to 0BSD. Probably that doesn't change the situation much considering that 0BSD is also very permissive. On 7/22/26 15:15, Alexander Kanavin wrote: > On Wed, 22 Jul 2026 at 12:36, Leon Anavi via lists.openembedded.org > <leon.anavi=konsulko.com@lists.openembedded.org> wrote: >> License-Update: Change 7.x license from MIT to 0BSD > In addition to what Yoann said, why did you write MIT? The previous > license was clearly LGPL. I took it from the latest git commit message related to the LICENSE file of chardet: https://github.com/chardet/chardet/commit/64eac3b1824913a001ce255f766a54d423fed5c6 > > What prompted you to work on this update and add ptests for it? The existences of tests that import pytest in the newer versions. Best regards, Leon > > Alex
diff --git a/meta/recipes-devtools/python/python3-chardet_6.0.0.post1.bb b/meta/recipes-devtools/python/python3-chardet_7.4.3.bb similarity index 61% rename from meta/recipes-devtools/python/python3-chardet_6.0.0.post1.bb rename to meta/recipes-devtools/python/python3-chardet_7.4.3.bb index 0ca0aef3ac..30c44c6d7c 100644 --- a/meta/recipes-devtools/python/python3-chardet_6.0.0.post1.bb +++ b/meta/recipes-devtools/python/python3-chardet_7.4.3.bb @@ -1,9 +1,9 @@ -SUMMARY = "Universal encoding detector for Python 2 and 3" +SUMMARY = "Universal character encoding detector" HOMEPAGE = "https://pypi.org/project/chardet/" -LICENSE = "LGPL-2.1-only" -LIC_FILES_CHKSUM = "file://LICENSE;md5=4bf661c1e3793e55c8d1051bc5e0ae21" +LICENSE = "0BSD" +LIC_FILES_CHKSUM = "file://LICENSE;md5=bd0753b9dc12e5e3da3047778fcf1dca" -SRC_URI[sha256sum] = "6b78048c3c97c7b2ed1fbad7a18f76f5a6547f7d34dbab536cc13887c9a92fa4" +SRC_URI[sha256sum] = "cc1d4eb92a4ec1c2df3b490836ffa46922e599d34ce0bb75cf41fd2bf6303d56" UPSTREAM_CHECK_REGEX = "chardet-(?P<pver>6\..*)\.tar" inherit pypi python_hatchling
Upgrade to relase 7.4.3: - Fixed ValueError: embedded null character crash when input contained a <meta charset> declaration with a null byte in the encoding name (e.g. b'<meta charset="\x00utf-8">'). codecs.lookup() raises ValueError on embedded nulls, and lookup_encoding() was only catching LookupError. Also added defensive ValueError catches in _validate_bytes() and _to_utf8() for completeness. License-Update: Change 7.x license from MIT to 0BSD Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> --- ...n3-chardet_6.0.0.post1.bb => python3-chardet_7.4.3.bb} | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) rename meta/recipes-devtools/python/{python3-chardet_6.0.0.post1.bb => python3-chardet_7.4.3.bb} (61%)