Commit Graph

1383 Commits

Author SHA1 Message Date
Hiroshi Miura
5ae21ea160 Remove metadata from setup.py
- Remove metadata from setup.py
- Split flake8 section into .flake8 from setup.cfg
- tox: set isolated_build=true

Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-06-05 13:31:18 +09:00
Hiroshi Miura
d6aa879d7f Merge pull request #527 from mugiseyebrows/master
readme list-qt fix
2022-06-02 18:32:31 +09:00
Doronin Stanislav
cb6b0a0f11 readme list-qt fix 2022-06-02 11:07:34 +03:00
Hiroshi Miura
068302bca5 Merge pull request #525 from miurahr/topic/miurahr/docs/changelog-prelease-in-docs
Refactoring docs
2022-06-02 08:38:42 +09:00
Hiroshi Miura
3e86767cd4 Refactoring docs
- Move prerelease changelogs under docs
- Move CONTRIBUTE.rst and SECURITY.rst under docs

Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-06-02 08:10:40 +09:00
Hiroshi Miura
2fd3b9938a Merge pull request #524 from miurahr/topic/miurahr/docs/sphix-conf-language
Bump Sphinx@5.0 and fix related issues
2022-06-02 08:09:27 +09:00
Hiroshi Miura
ce1c15bffb Bump sphinx@5.0
Update conf.py for the fix.

Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-06-01 16:14:40 +09:00
Hiroshi Miura
cea2c06240 docs: Explicitly specify language as english
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-06-01 13:06:57 +09:00
Hiroshi Miura
c95c3cd04d Merge pull request #523 from miurahr/update-combinations
Update `aqt/combinations.json`
2022-06-01 11:39:41 +09:00
Qt Repo Watchbot
f652f0fa9c Update aqt/combinations.json 2022-06-01 00:25:29 +00:00
Hiroshi Miura
6aa6103558 Merge pull request #518 from ddalcino/resilient-metadata-factory
Allow MetadataFactory to recover from bad HTML files
2022-04-20 11:44:08 +09:00
Dave Dalcino
06c84ec199 Simplify AqtException.suggested_action
This clarifies that suggested_action is always a List, so that it can
be appended to, rather than totally reassigned.
2022-04-19 19:16:13 -07:00
Dave Dalcino
e8672f3fbe Allow MetadataFactory to recover from bad HTML files
This change allows MetadataFactory.iterate_folders to recognize when
MetadataFactory has retrieved a malformed HTML file, or an HTML file
that does not contain the table and rows that it expects to see.

If the URL is correct, it should retrieve the right page, but this is
not guaranteed, and MetadataFactory should be able to recover and
generate an appropriate error message.

One possible situation where this kind of error might occur could be
when the user is connected to a public WIFI network, but not logged in.
The router would redirect aqt to the network login page, and aqt would
have no way of knowing that it did not receive the correct page.
Aqt should be resilient to this kind of error.
2022-04-19 18:26:21 -07:00
Hiroshi Miura
320df539c0 Merge pull request #516 from miurahr/topic/miurahr/pyproject/mypy-pytest-config
pyproject.toml: add mypy and pytest config
2022-04-19 17:07:26 +09:00
Hiroshi Miura
bf428dcd28 pyproject.toml: add mypy and pytest config
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-04-18 16:23:56 +09:00
Hiroshi Miura
04412d7ddf Merge pull request #515 from miurahr/topic/miurahr/pyproject/fix-license
pyproject.toml: change license table to text
2022-04-18 14:05:05 +09:00
Hiroshi Miura
21bfff15ca pyproject.toml: change license table to text
- set license SPDX compliant name

Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-04-18 07:36:40 +09:00
Hiroshi Miura
cc6ec53761 README: update document links
- Change v1.2.5 as obsolete
- Add link to document for v2.0.6
2022-04-14 12:45:10 +09:00
Hiroshi Miura
90f8a274a1 Release v2.1.0
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
v2.1.0
2022-04-14 08:34:36 +09:00
Hiroshi Miura
331d6da51e Support pyproject.toml:project section (#507)
* Support pyproject.toml:project section

- Bump py7zr@0.18.3 that fixes pyproject.toml:project section

Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-04-14 08:05:37 +09:00
Hiroshi Miura
c26cb871ae Release v2.1.0rc4
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
v2.1.0rc4
2022-04-04 14:56:57 +09:00
David Dalcino
ad20856738 Fix patching of Qt6.2.2-ios (#510)
* Add tests for proper patching of Qt6.2.2-ios
* Add a build target for ios installations
* Add test coverage for mobile patching on linux

This change folds in some refactoring as well, in an attempt to reduce
repetitive logic, and make sure that this logic is used everywhere appropriate.
2022-04-04 14:22:13 +09:00
Hiroshi Miura
a27fa31566 Merge pull request #509 from miurahr/topic-bump-py7zr-0.18.3
Bump py7zr@0.18.3
2022-03-26 23:01:27 -07:00
Hiroshi Miura
705266c584 Merge pull request #508 from miurahr/topic-setuptools-scm-pyproject
setuptools_scm configuration on pyproject.toml
2022-03-26 23:01:14 -07:00
Hiroshi Miura
00fe19bfda Bump py7zr@0.18.3
- Fix install error for dependency with pip version 61 and later

Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-03-27 14:04:05 +09:00
Hiroshi Miura
2ff9486810 setuptools_scm configuration on pyproject.toml
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-03-27 14:01:47 +09:00
Hiroshi Miura
2d900e38d8 Merge pull request #506 from miurahr/topic-security-policy-versions
Update security policy: bump versions
2022-03-26 21:17:45 -07:00
Hiroshi Miura
78756c1ab6 Update security policy: bump versions
- 1.2.x as unsupported
- 2.0.x as security fix only

Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-03-27 12:30:03 +09:00
Hiroshi Miura
2ef76ff269 Release v2.1.0rc3
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
v2.1.0rc3
2022-03-21 14:14:37 +09:00
Hiroshi Miura
b04617550f Merge pull request #504 from ddalcino/improve-get_hash
[Security] Improve `get_hash`
2022-03-20 18:33:25 -07:00
David Dalcino
dc45839df4 Fix implementation of helper.get_hash
Causes `get_hash` to verify the hash length, and check that the hash can
be unhexlified properly.

Fixes the interface for `get_hash` so that the caller does not have to
run `binascii.unhexlify` or verify its output.
2022-03-20 14:16:24 -07:00
David Dalcino
4bb375d9c1 Improve tests for helper.get_hash()
This requires that `get_hash` does a better job of checking what data is
sent to it. To pass these tests, `get_hash` must check that the hash
is the right length, that the hash can be unhexlified properly, and
that it does not compose an unusable url when it tries to run `getUrl`.
2022-03-20 14:16:24 -07:00
Hiroshi Miura
1a82a92e4c Merge pull request #502 from miurahr/update-combinations
Update `aqt/combinations.json`
2022-03-19 21:20:34 -07:00
Qt Repo Watchbot
d3fb01f0b9 Update aqt/combinations.json 2022-03-20 03:45:15 +00:00
Hiroshi Miura
91d20e28db Release v2.1.0rc2
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
v2.1.0rc2
2022-03-20 12:34:50 +09:00
Hiroshi Miura
cd70975f20 README: add note about MSYS2/Mingw64 environment
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
2022-03-12 20:24:20 +09:00
Hiroshi Miura
745e6a25e4 Merge pull request #498 from ddalcino/fix-sonatype-issues
Fix sonatype issues
2022-03-11 02:29:55 -08:00
David Dalcino
ec073a6272 Fix incompatible type annotations 2022-03-10 18:29:18 -08:00
David Dalcino
49a6cf97b6 Remove unnecessary usage of eval function 2022-03-10 18:29:18 -08:00
David Dalcino
6bd438bcb1 Use secrets for secure random numbers 2022-03-10 17:35:30 -08:00
David Dalcino
5ad7c1a058 Use defusedxml to parse Updates.xml files
I don't think we can really call the `Updates.xml` files that we are
parsing 'untrusted xml', because we are checking that they match the
sha256 checksum. However, I don't think there's any good reason not to
use a more secure parsing algorithm.
2022-03-10 17:23:58 -08:00
Hiroshi Miura
ce9f75409f Release v2.1.0rc1
Signed-off-by: Hiroshi Miura <miurahr@linux.com>
v2.1.0rc1
2022-03-09 20:31:48 +09:00
Hiroshi Miura
9010df22d5 Merge pull request #493 from ddalcino/retry_checksums
[Security] Use SHA-256 checksums from trusted mirrors only
2022-03-07 19:39:45 +09:00
David Dalcino
b62db9ee2a Allow MetadataFactory.fetch_http to skip sha256
`MetadataFactory.fetch_http` must often download HTML pages, not
Updates.xml files. download.qt.io does not store checksums for these
files, so this particular function must be allowed to download these
pages without using a checksum.
2022-03-06 18:16:37 -08:00
David Dalcino
12d20a3d06 Fix failure to use fallback for getlist
aqt.helper.MyConfigParser.getlist fails to retrieve a fallback list when
the `section` parameter does not exist in the `settings.ini` file.
This ensures that the fallback is used when that key is missing.
2022-03-06 17:56:26 -08:00
David Dalcino
5a7adb60cf Check hashes for xml files 2022-03-06 17:56:26 -08:00
David Dalcino
be23b62549 Update tests to require proper checksums 2022-03-06 17:56:25 -08:00
David Dalcino
f979d80899 WIP use checksums for updates.xml files 2022-03-06 17:56:25 -08:00
David Dalcino
2c5c261592 It's no secret that we need a random number! 2022-03-06 17:36:33 -08:00
David Dalcino
96af3eb393 Refactor: split QtArchive.archive_url into parts
This splits QtArchive.archive_url into two new datamembers: archive_path
and base_url. Ultimately, base_url should be removed from QtPackage
entirely.
2022-03-06 17:36:32 -08:00