diff mbox series

python3-wheel: upgrade 0.47.0 -> 0.48.0

Message ID 20260816181905.1791912-2-tim.orling@konsulko.com
State New
Headers show
Series python3-wheel: upgrade 0.47.0 -> 0.48.0 | expand

Commit Message

Tim Orling Aug. 16, 2026, 6:19 p.m. UTC 
From: Tim Orling <tim.orling@konsulko.com>

For a full comparison of changes (9 commits, 12 files changed) see:
https://github.com/pypa/wheel/compare/0.47.0...0.48.0

Release notes:
https://wheel.readthedocs.io/en/stable/news.html

Source: docs/news.rst

**0.48.0** (2026-08-12)

- Added a ``--local-version`` option to ``wheel pack`` to add, replace, or remove a
  PEP 440 local version identifier from a wheel
  (`#570 <https://github.com/pypa/wheel/issues/570>`_)
- Fixed ``wheel convert`` unnecessarily upgrading compatible core metadata versions
  (`#643 <https://github.com/pypa/wheel/issues/643>`_)
- Fixed ``wheel tags`` producing invalid archives when retagging wheels whose
  entries use ZIP64, by dropping the central-directory ZIP64 extra field that is
  not valid in a local file header
  (`#692 <https://github.com/pypa/wheel/issues/692>`_)
- Fixed ``wheel convert`` writing the converted wheel outside the destination
  directory when the input archive contained a maliciously crafted project name
  or version with path separators (arbitrary file write / path traversal)
  (`GHSA-vgq5-9859-3mmw <https://github.com/pypa/wheel/security/advisories/GHSA-vgq5-9859-3mmw>`_)

Signed-off-by: Tim Orling <tim.orling@konsulko.com>
---
All ptests pass on qemux86-64 with core-image-ptest-python3-wheel

The AUH run failed for an unrelated transient fetching of libarchive
reason:
ERROR: libarchive-native-3.8.9-r0 do_fetch: Bitbake Fetcher Error: FetchError('Unable to fetch URL from any source.', 'https://libarchive.org/downloads/libarchive-3.8.9.tar.gz')

 .../python/{python3-wheel_0.47.0.bb => python3-wheel_0.48.0.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-wheel_0.47.0.bb => python3-wheel_0.48.0.bb} (89%)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-wheel_0.47.0.bb b/meta/recipes-devtools/python/python3-wheel_0.48.0.bb
similarity index 89%
rename from meta/recipes-devtools/python/python3-wheel_0.47.0.bb
rename to meta/recipes-devtools/python/python3-wheel_0.48.0.bb
index 4320442729..21c9c7464c 100644
--- a/meta/recipes-devtools/python/python3-wheel_0.47.0.bb
+++ b/meta/recipes-devtools/python/python3-wheel_0.48.0.bb
@@ -4,7 +4,7 @@  SECTION = "devel/python"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=7ffb0db04527cfe380e4f2726bd05ebf"
 
-SRC_URI[sha256sum] = "cc72bd1009ba0cf63922e28f94d9d83b920aa2bb28f798a31d0691b02fa3c9b3"
+SRC_URI[sha256sum] = "94800765601e9171bf5d58d066e640662842bcedcbab982b2c90787a2c987322"
 
 inherit python_flit_core pypi ptest-python-pytest