On Tue, Aug 1, 2023 at 5:43 PM Fabio Valentini <decathorpe(a)gmail.com> wrote:
There are applications in Fedora that still rely on *ancient* versions
of PyO3, potentially affected by this:
- cpython: mercurial
- pyo3 v0.15: fapolicy-analyzer, python-bcrypt, python-cryptography
- pyo3 v0.16: python-y-py
- pyo3 v0.17: unused compat packages, will be retired
- pyo3 v0.18: matrix-synapse
Hello again.
It is now three months later, and three packages have moved to the
latest available version of pyo3:
- python-cryptography
- python-y-py
- matrix-synapse
That leaves two packages that are stuck on pyo3 v0.15:
- fapolicy-analyzer
- python-bcrypt
I have now filed bugs against both packages that they need to move to
pyo3 v0.19.2+ ASAP on both Fedora 39 and Rawhide.
Due to ABI changes in Python 3.12, they are not guaranteed to even
work correctly on Python 3.12.
-
https://bugzilla.redhat.com/show_bug.cgi?id=2249378
-
https://bugzilla.redhat.com/show_bug.cgi?id=2249381
================================================================================
The packages for v0.16 and v0.18 of pyo3 are now unused in Fedora
Rawhide - I will retire them later today.
The packages for pyo3 v0.15 will be retired in about *ONE WEEK*, but
no earlier than Monday, Nov 20.
They are known to be problematic and broken with Python 3.12, so no
packages should use them.
================================================================================
That leaves the cpython crate and its only dependent package - mercurial.
The upstream project for the cpython crate has been marked as no
longer actively maintained, and recommends users to switch to pyo3
instead:
https://github.com/dgrunwald/rust-cpython/commit/e815555
I've now also filed a bug against mercurial:
https://bugzilla.redhat.com/show_bug.cgi?id=2249383
Fabio