Hiroshi Miura
5ae21ea160
Remove metadata from setup.py
...
- Remove metadata from setup.py
- Split flake8 section into .flake8 from setup.cfg
- tox: set isolated_build=true
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-06-05 13:31:18 +09:00
Hiroshi Miura
d6aa879d7f
Merge pull request #527 from mugiseyebrows/master
...
readme list-qt fix
2022-06-02 18:32:31 +09:00
Doronin Stanislav
cb6b0a0f11
readme list-qt fix
2022-06-02 11:07:34 +03:00
Hiroshi Miura
068302bca5
Merge pull request #525 from miurahr/topic/miurahr/docs/changelog-prelease-in-docs
...
Refactoring docs
2022-06-02 08:38:42 +09:00
Hiroshi Miura
3e86767cd4
Refactoring docs
...
- Move prerelease changelogs under docs
- Move CONTRIBUTE.rst and SECURITY.rst under docs
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-06-02 08:10:40 +09:00
Hiroshi Miura
2fd3b9938a
Merge pull request #524 from miurahr/topic/miurahr/docs/sphix-conf-language
...
Bump Sphinx@5.0 and fix related issues
2022-06-02 08:09:27 +09:00
Hiroshi Miura
ce1c15bffb
Bump sphinx@5.0
...
Update conf.py for the fix.
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-06-01 16:14:40 +09:00
Hiroshi Miura
cea2c06240
docs: Explicitly specify language as english
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-06-01 13:06:57 +09:00
Hiroshi Miura
c95c3cd04d
Merge pull request #523 from miurahr/update-combinations
...
Update `aqt/combinations.json`
2022-06-01 11:39:41 +09:00
Qt Repo Watchbot
f652f0fa9c
Update aqt/combinations.json
2022-06-01 00:25:29 +00:00
Hiroshi Miura
6aa6103558
Merge pull request #518 from ddalcino/resilient-metadata-factory
...
Allow MetadataFactory to recover from bad HTML files
2022-04-20 11:44:08 +09:00
Dave Dalcino
06c84ec199
Simplify AqtException.suggested_action
...
This clarifies that suggested_action is always a List, so that it can
be appended to, rather than totally reassigned.
2022-04-19 19:16:13 -07:00
Dave Dalcino
e8672f3fbe
Allow MetadataFactory to recover from bad HTML files
...
This change allows MetadataFactory.iterate_folders to recognize when
MetadataFactory has retrieved a malformed HTML file, or an HTML file
that does not contain the table and rows that it expects to see.
If the URL is correct, it should retrieve the right page, but this is
not guaranteed, and MetadataFactory should be able to recover and
generate an appropriate error message.
One possible situation where this kind of error might occur could be
when the user is connected to a public WIFI network, but not logged in.
The router would redirect aqt to the network login page, and aqt would
have no way of knowing that it did not receive the correct page.
Aqt should be resilient to this kind of error.
2022-04-19 18:26:21 -07:00
Hiroshi Miura
320df539c0
Merge pull request #516 from miurahr/topic/miurahr/pyproject/mypy-pytest-config
...
pyproject.toml: add mypy and pytest config
2022-04-19 17:07:26 +09:00
Hiroshi Miura
bf428dcd28
pyproject.toml: add mypy and pytest config
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-04-18 16:23:56 +09:00
Hiroshi Miura
04412d7ddf
Merge pull request #515 from miurahr/topic/miurahr/pyproject/fix-license
...
pyproject.toml: change license table to text
2022-04-18 14:05:05 +09:00
Hiroshi Miura
21bfff15ca
pyproject.toml: change license table to text
...
- set license SPDX compliant name
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-04-18 07:36:40 +09:00
Hiroshi Miura
cc6ec53761
README: update document links
...
- Change v1.2.5 as obsolete
- Add link to document for v2.0.6
2022-04-14 12:45:10 +09:00
Hiroshi Miura
90f8a274a1
Release v2.1.0
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
v2.1.0
2022-04-14 08:34:36 +09:00
Hiroshi Miura
331d6da51e
Support pyproject.toml:project section ( #507 )
...
* Support pyproject.toml:project section
- Bump py7zr@0.18 .3 that fixes pyproject.toml:project section
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-04-14 08:05:37 +09:00
Hiroshi Miura
c26cb871ae
Release v2.1.0rc4
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
v2.1.0rc4
2022-04-04 14:56:57 +09:00
David Dalcino
ad20856738
Fix patching of Qt6.2.2-ios ( #510 )
...
* Add tests for proper patching of Qt6.2.2-ios
* Add a build target for ios installations
* Add test coverage for mobile patching on linux
This change folds in some refactoring as well, in an attempt to reduce
repetitive logic, and make sure that this logic is used everywhere appropriate.
2022-04-04 14:22:13 +09:00
Hiroshi Miura
a27fa31566
Merge pull request #509 from miurahr/topic-bump-py7zr-0.18.3
...
Bump py7zr@0.18 .3
2022-03-26 23:01:27 -07:00
Hiroshi Miura
705266c584
Merge pull request #508 from miurahr/topic-setuptools-scm-pyproject
...
setuptools_scm configuration on pyproject.toml
2022-03-26 23:01:14 -07:00
Hiroshi Miura
00fe19bfda
Bump py7zr@0.18.3
...
- Fix install error for dependency with pip version 61 and later
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-03-27 14:04:05 +09:00
Hiroshi Miura
2ff9486810
setuptools_scm configuration on pyproject.toml
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-03-27 14:01:47 +09:00
Hiroshi Miura
2d900e38d8
Merge pull request #506 from miurahr/topic-security-policy-versions
...
Update security policy: bump versions
2022-03-26 21:17:45 -07:00
Hiroshi Miura
78756c1ab6
Update security policy: bump versions
...
- 1.2.x as unsupported
- 2.0.x as security fix only
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-03-27 12:30:03 +09:00
Hiroshi Miura
2ef76ff269
Release v2.1.0rc3
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
v2.1.0rc3
2022-03-21 14:14:37 +09:00
Hiroshi Miura
b04617550f
Merge pull request #504 from ddalcino/improve-get_hash
...
[Security] Improve `get_hash`
2022-03-20 18:33:25 -07:00
David Dalcino
dc45839df4
Fix implementation of helper.get_hash
...
Causes `get_hash` to verify the hash length, and check that the hash can
be unhexlified properly.
Fixes the interface for `get_hash` so that the caller does not have to
run `binascii.unhexlify` or verify its output.
2022-03-20 14:16:24 -07:00
David Dalcino
4bb375d9c1
Improve tests for helper.get_hash()
...
This requires that `get_hash` does a better job of checking what data is
sent to it. To pass these tests, `get_hash` must check that the hash
is the right length, that the hash can be unhexlified properly, and
that it does not compose an unusable url when it tries to run `getUrl`.
2022-03-20 14:16:24 -07:00
Hiroshi Miura
1a82a92e4c
Merge pull request #502 from miurahr/update-combinations
...
Update `aqt/combinations.json`
2022-03-19 21:20:34 -07:00
Qt Repo Watchbot
d3fb01f0b9
Update aqt/combinations.json
2022-03-20 03:45:15 +00:00
Hiroshi Miura
91d20e28db
Release v2.1.0rc2
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
v2.1.0rc2
2022-03-20 12:34:50 +09:00
Hiroshi Miura
cd70975f20
README: add note about MSYS2/Mingw64 environment
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
2022-03-12 20:24:20 +09:00
Hiroshi Miura
745e6a25e4
Merge pull request #498 from ddalcino/fix-sonatype-issues
...
Fix sonatype issues
2022-03-11 02:29:55 -08:00
David Dalcino
ec073a6272
Fix incompatible type annotations
2022-03-10 18:29:18 -08:00
David Dalcino
49a6cf97b6
Remove unnecessary usage of eval function
2022-03-10 18:29:18 -08:00
David Dalcino
6bd438bcb1
Use secrets for secure random numbers
2022-03-10 17:35:30 -08:00
David Dalcino
5ad7c1a058
Use defusedxml to parse Updates.xml files
...
I don't think we can really call the `Updates.xml` files that we are
parsing 'untrusted xml', because we are checking that they match the
sha256 checksum. However, I don't think there's any good reason not to
use a more secure parsing algorithm.
2022-03-10 17:23:58 -08:00
Hiroshi Miura
ce9f75409f
Release v2.1.0rc1
...
Signed-off-by: Hiroshi Miura <miurahr@linux.com >
v2.1.0rc1
2022-03-09 20:31:48 +09:00
Hiroshi Miura
9010df22d5
Merge pull request #493 from ddalcino/retry_checksums
...
[Security] Use SHA-256 checksums from trusted mirrors only
2022-03-07 19:39:45 +09:00
David Dalcino
b62db9ee2a
Allow MetadataFactory.fetch_http to skip sha256
...
`MetadataFactory.fetch_http` must often download HTML pages, not
Updates.xml files. download.qt.io does not store checksums for these
files, so this particular function must be allowed to download these
pages without using a checksum.
2022-03-06 18:16:37 -08:00
David Dalcino
12d20a3d06
Fix failure to use fallback for getlist
...
aqt.helper.MyConfigParser.getlist fails to retrieve a fallback list when
the `section` parameter does not exist in the `settings.ini` file.
This ensures that the fallback is used when that key is missing.
2022-03-06 17:56:26 -08:00
David Dalcino
5a7adb60cf
Check hashes for xml files
2022-03-06 17:56:26 -08:00
David Dalcino
be23b62549
Update tests to require proper checksums
2022-03-06 17:56:25 -08:00
David Dalcino
f979d80899
WIP use checksums for updates.xml files
2022-03-06 17:56:25 -08:00
David Dalcino
2c5c261592
It's no secret that we need a random number!
2022-03-06 17:36:33 -08:00
David Dalcino
96af3eb393
Refactor: split QtArchive.archive_url into parts
...
This splits QtArchive.archive_url into two new datamembers: archive_path
and base_url. Ultimately, base_url should be removed from QtPackage
entirely.
2022-03-06 17:36:32 -08:00