Commit graph

56 commits

Author SHA1 Message Date
Vladimír Čunát 9c497bb8d6
Merge branch 'staging-next' into staging 2022-12-09 10:27:46 +01:00
Theodore Ni 73dea7fb56
python27Packages.unittest: remove completely 2022-12-07 14:25:04 -08:00
Theodore Ni de0f03b56d
python{27,310}Packages.unittest2: move to python2-modules 2022-12-07 14:25:01 -08:00
Robert Schütz 0fa639e2aa python2Packages.numpy: remove 2022-12-03 22:50:20 -08:00
Robert Schütz e5f735efd3 python2Packages.construct: remove 2022-12-03 22:50:20 -08:00
Robert Schütz 76320a7d94 python2Packages.pillow: remove 2022-12-03 22:50:20 -08:00
Robert Schütz b64c0b1a12 python2Packages.pyyaml: remove 2022-12-03 22:50:20 -08:00
Robert Schütz 47cd6b0a4e python2Packages.markdown: remove 2022-12-03 21:54:50 -08:00
Robert Schütz ccd71595e9 python2Packages.cheetah: remove 2022-12-03 19:00:03 -08:00
Robert Schütz d3b70b47e3 python2Packages.TurboCheetah: remove 2022-12-03 18:58:11 -08:00
Robert Schütz 1d3f70b5fb python2Packages.httpretty: remove 2022-12-03 18:57:20 -08:00
Robert Schütz 53013ae601 python2Packages.prettytable: remove 2022-12-03 18:57:20 -08:00
Robert Schütz c99c95f795 python2Packages.mutagen: remove 2022-12-03 18:57:20 -08:00
Robert Schütz 2eb15da448 python2Packages.qpid-python: remove 2022-12-03 18:57:19 -08:00
Theodore Ni 4fc97dce3c
python310Packages.cffi: patch closures to work on M1 machines
Trusts the libffi library inside of nixpkgs on Apple devices.

When Apple's fork of libffi is not detected, cffi assumes that libffi
uses a strategy for creating closures (i.e. callbacks) that is in
certain cases susceptible to a security exploit.

Based on some analysis I did:

  https://groups.google.com/g/python-cffi/c/xU0Usa8dvhk

I believe that libffi already contains the code from Apple's fork that
is deemed safe to trust in cffi.

It uses a more sophisticated strategy for creating trampolines to
support closures that works on Apple Silicon, while the simple approach
that cffi falls back on does not, so this patch enables code that uses
closures on M1 Macs again.

Notably, pyOpenSSL is impacted and will be fixed by this, reported in

  https://github.com/pyca/pyopenssl/issues/873

Note that libffi closures still will not work on signed apps without the
com.apple.security.cs.allow-unsigned-executable-memory entitlement while

  https://github.com/libffi/libffi/pull/621

is still open (which I haven't tested but is my best guess from reading).

I am hopeful that all of these changes will be upstreamed back into cffi
and libffi, and that this comment provides enough breadcrumbs for future
maintainers to track and clean this up.
2022-11-20 16:16:07 -08:00
Sandro 5ecf65eb6f
Merge pull request #193680 from wegank/gimp-aarch64-darwin 2022-10-04 15:12:33 +02:00
Weijia Wang 7994937ed2 pygtk: fix build on aarch64-darwin 2022-10-04 13:42:41 +02:00
Weijia Wang 4ef739adf1 scandir: fix build on aarch64-darwin 2022-10-04 13:41:56 +02:00
Frederik Rietdijk 1d20d67783 python2Packages.pygtk: format should be other
because it doesn't use any of the hooks for building.
2022-09-16 19:36:05 +02:00
Frederik Rietdijk 161f8174b0 python2Packages.numpy: don't use setuptools hook
because we use the pip build phase already with pyproject.
2022-09-16 09:55:11 +02:00
Frederik Rietdijk 3eed54349f python2Packages.numpy: fix format and folder ests are run in 2022-09-15 16:38:31 +02:00
Winter 19adc3341c treewide: migrate to pythonPackages.unittestCheckHook 2022-08-13 14:09:43 -04:00
Sandro Jäckel 67dece3b2c
python310Packages.attrs: 21.4.0 -> 22.1.0 2022-08-05 23:22:35 +02:00
ajs124 3f5b809a5f maintainers: remove sjourdois
no github account linked
2022-06-29 00:54:59 +02:00
Martin Weinelt 6451e9d4a5 Merge remote-tracking branch 'origin/staging-next' into staging 2022-06-08 22:22:26 +02:00
Robert Schütz e5dcb4efd2 python2Packages.lpod: remove 2022-06-07 16:39:08 +00:00
Robert Schütz f9c76fbaec python2Packages.libcloud: remove 2022-06-07 16:39:07 +00:00
Robert Schütz c769a56661 python2Packages.ipaddr: remove 2022-06-07 16:39:07 +00:00
Robert Schütz 3367f6e4e6 python2Packages.wsproto: remove 2022-06-07 16:39:07 +00:00
Robert Schütz a9aba22cdc python2Packages.freezegun: remove 2022-06-07 16:39:07 +00:00
Robert Schütz 2a54a83573 python2Packages.decorator: remove 2022-06-07 16:39:07 +00:00
Robert Schütz c1c1104596 python2Packages.cryptography: remove 2022-06-07 16:39:07 +00:00
Robert Schütz 2f3c0f9a41 python2Packages.click: remove 2022-06-07 16:39:07 +00:00
Robert Schütz 8ceaa66b5a python2Packages.itsdangerous: remove 2022-06-07 16:39:06 +00:00
Robert Schütz 162b4c1006 python2Packages.werkzeug: remove 2022-06-07 16:39:06 +00:00
Robert Schütz b566290cdb python2Packages.flask: remove 2022-06-07 16:39:06 +00:00
Robert Schütz 608ec38f08 python2Packages.pyjwt: remove 2022-06-07 16:39:03 +00:00
Robert Schütz ed806bb627 python2Packages.urllib3: remove 2022-06-07 16:38:46 +00:00
Robert Schütz 93f430c156 python2Packages.vcrpy: remove 2022-06-07 16:38:21 +00:00
Robert Schütz 137d55460a python2Packages.wxPython: remove 2022-06-07 16:38:21 +00:00
Robert Schütz d23be02c22
Merge pull request #176431 from dotlambda/urllib3-insecure
python2Packages.urllib3: mark insecure
2022-06-06 19:20:12 -07:00
Sandro Jäckel d6252cb72c
python27Packages.botocore: drop ordereddict 2022-06-06 11:46:14 -07:00
Robert Schütz ac4fc73abc python2Packages.urllib3: mark insecure 2022-06-05 17:10:32 +00:00
Robert Schütz 007ffa6069 python2Packages.pyjwt: mark insecure 2022-06-05 17:07:25 +00:00
Sandro 537729541f
Merge pull request #171640 from ilya-fedin/reduce-closure 2022-06-02 18:52:46 +02:00
Ilya Fedin 4165ae5392 pygtk: set outputs to reduce runtime closure 2022-05-13 21:01:08 +04:00
Sandro 7169abf52f
python310Packages.babel: 2.9.1 -> 2.10.1 (#171867) 2022-05-09 01:53:28 +02:00
Martin Weinelt bf1914e12a Merge remote-tracking branch 'origin/staging-next' into staging 2022-04-05 04:05:02 +02:00
Frederik Rietdijk 4f30fc6b4d python2.pkgs.pycairo: workaround to fix build 2022-04-04 20:39:08 +02:00
Sandro Jäckel 8df7949791
pythonPackages.cryptography-vectors: make internal to cryptography 2022-03-27 16:08:55 +02:00