From: Tim Orling <[email protected]>

For a full comparison of changes (9 commits, 12 files changed) see:
https://github.com/pypa/wheel/compare/0.47.0...0.48.0

Release notes:
https://wheel.readthedocs.io/en/stable/news.html

Source: docs/news.rst

**0.48.0** (2026-08-12)

- Added a ``--local-version`` option to ``wheel pack`` to add, replace, or 
remove a
  PEP 440 local version identifier from a wheel
  (`#570 <https://github.com/pypa/wheel/issues/570>`_)
- Fixed ``wheel convert`` unnecessarily upgrading compatible core metadata 
versions
  (`#643 <https://github.com/pypa/wheel/issues/643>`_)
- Fixed ``wheel tags`` producing invalid archives when retagging wheels whose
  entries use ZIP64, by dropping the central-directory ZIP64 extra field that is
  not valid in a local file header
  (`#692 <https://github.com/pypa/wheel/issues/692>`_)
- Fixed ``wheel convert`` writing the converted wheel outside the destination
  directory when the input archive contained a maliciously crafted project name
  or version with path separators (arbitrary file write / path traversal)
  (`GHSA-vgq5-9859-3mmw 
<https://github.com/pypa/wheel/security/advisories/GHSA-vgq5-9859-3mmw>`_)

Signed-off-by: Tim Orling <[email protected]>
---
All ptests pass on qemux86-64 with core-image-ptest-python3-wheel

The AUH run failed for an unrelated transient fetching of libarchive
reason:
ERROR: libarchive-native-3.8.9-r0 do_fetch: Bitbake Fetcher Error: 
FetchError('Unable to fetch URL from any source.', 
'https://libarchive.org/downloads/libarchive-3.8.9.tar.gz')

 .../python/{python3-wheel_0.47.0.bb => python3-wheel_0.48.0.bb} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-wheel_0.47.0.bb => 
python3-wheel_0.48.0.bb} (89%)

diff --git a/meta/recipes-devtools/python/python3-wheel_0.47.0.bb 
b/meta/recipes-devtools/python/python3-wheel_0.48.0.bb
similarity index 89%
rename from meta/recipes-devtools/python/python3-wheel_0.47.0.bb
rename to meta/recipes-devtools/python/python3-wheel_0.48.0.bb
index 4320442729..21c9c7464c 100644
--- a/meta/recipes-devtools/python/python3-wheel_0.47.0.bb
+++ b/meta/recipes-devtools/python/python3-wheel_0.48.0.bb
@@ -4,7 +4,7 @@ SECTION = "devel/python"
 LICENSE = "MIT"
 LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=7ffb0db04527cfe380e4f2726bd05ebf"
 
-SRC_URI[sha256sum] = 
"cc72bd1009ba0cf63922e28f94d9d83b920aa2bb28f798a31d0691b02fa3c9b3"
+SRC_URI[sha256sum] = 
"94800765601e9171bf5d58d066e640662842bcedcbab982b2c90787a2c987322"
 
 inherit python_flit_core pypi ptest-python-pytest
 
-- 
2.47.3

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#243544): 
https://lists.openembedded.org/g/openembedded-core/message/243544
Mute This Topic: https://lists.openembedded.org/mt/120779710/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to