[qt/pyside/pyside-setup]: Summary of bulk changes made

KDE Git Services - Bulk Change <[email protected]>
Newsgroups gmane.comp.kde.cvs
Message-ID <[email protected]>
Git repository change summary for qt/pyside/pyside-setup
Pushed by mirror-service into branch 'dev'.
Changed from 9e071c99e65b52889437ef07400c854aa45477d6 to cb4a152ab23d5c9cff90560aa9934e2d0fe3a66f
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 385566de26547bfc58d4ca4d2a60348a68507094 by Friedemann Kleint on 20/07/2026 at 07:12..
shiboken6_generator/Documentation: Prevent XML External Entity (XXE) attacks

In the libxml parse helper function, pass libxml option
XML_PARSE_NO_XXE along with XML_PARSE_NOENT for libxml >= 2.13,
else disable entity resolution.

[ChangeLog][shiboken6] When generating doxygen documentation,
XML is now parsed with option XML_PARSE_NO_XXE for libxml >= 2.13.
Expanding entities is disabled for older libxml versions.

Fixes: PYSIDE-3396
Change-Id: I50e49e568090c24ba7a4a5e76a2593730aacfe0b
Reviewed-by: Cristian Maureira-Fredes <[email protected]>
https://invent.kde.org/qt/pyside/pyside-setup/-/commit/385566de26547bfc58d4ca4d2a60348a68507094

Git commit 8b4ebdd4eb99bb874c6547edc8b5f6c1280ee3dc by Friedemann Kleint on 20/07/2026 at 07:13..
example_gallery: Fix license removal code

The code was not adapted to the 2 line SPDX format; it removed all
C-style comments, causing sphinx lexer syntax warnings in QML files
with C-style comments such as:
examples/stylekit/stylekitcontrols/StyleKitControlsExample/styles/Plain.qml.

Rewrite the code to remove a predefined set of markers from the beginning.

Pick-to: 6.11 6.8
Change-Id: I309d1d65aa905efe7b02e8a2fcfa458f3f9493f7
Reviewed-by: Cristian Maureira-Fredes <[email protected]>
https://invent.kde.org/qt/pyside/pyside-setup/-/commit/8b4ebdd4eb99bb874c6547edc8b5f6c1280ee3dc

Git commit cb4a152ab23d5c9cff90560aa9934e2d0fe3a66f by Friedemann Kleint on 20/07/2026 at 07:13..
shiboken6_generator: Mark as security-significant

A few risks were identified, but none of them justifies
a higher level. Use default.

QUIP: 23
Task-number: PYSIDE-3381
Fixes: PYSIDE-3394
Pick-to: 6.11 6.8
Change-Id: I0f1297e93b49eeb1bfc23b3aec7b2d1c06f07f63
Reviewed-by: Cristian Maureira-Fredes <[email protected]>
https://invent.kde.org/qt/pyside/pyside-setup/-/commit/cb4a152ab23d5c9cff90560aa9934e2d0fe3a66f
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.