[qt/pyside/pyside-setup]: Summary of bulk changes made
KDE Git Services - Bulk Change <[email protected]>
| Newsgroups | gmane.comp.kde.cvs |
|---|---|
| Message-ID | <[email protected]> |
Git repository change summary for qt/pyside/pyside-setup Pushed by mirror-service into branch 'dev'. Changed from 9e071c99e65b52889437ef07400c854aa45477d6 to cb4a152ab23d5c9cff90560aa9934e2d0fe3a66f Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository. This change contains the following new commits: Git commit 385566de26547bfc58d4ca4d2a60348a68507094 by Friedemann Kleint on 20/07/2026 at 07:12.. shiboken6_generator/Documentation: Prevent XML External Entity (XXE) attacks In the libxml parse helper function, pass libxml option XML_PARSE_NO_XXE along with XML_PARSE_NOENT for libxml >= 2.13, else disable entity resolution. [ChangeLog][shiboken6] When generating doxygen documentation, XML is now parsed with option XML_PARSE_NO_XXE for libxml >= 2.13. Expanding entities is disabled for older libxml versions. Fixes: PYSIDE-3396 Change-Id: I50e49e568090c24ba7a4a5e76a2593730aacfe0b Reviewed-by: Cristian Maureira-Fredes <[email protected]> https://invent.kde.org/qt/pyside/pyside-setup/-/commit/385566de26547bfc58d4ca4d2a60348a68507094 Git commit 8b4ebdd4eb99bb874c6547edc8b5f6c1280ee3dc by Friedemann Kleint on 20/07/2026 at 07:13.. example_gallery: Fix license removal code The code was not adapted to the 2 line SPDX format; it removed all C-style comments, causing sphinx lexer syntax warnings in QML files with C-style comments such as: examples/stylekit/stylekitcontrols/StyleKitControlsExample/styles/Plain.qml. Rewrite the code to remove a predefined set of markers from the beginning. Pick-to: 6.11 6.8 Change-Id: I309d1d65aa905efe7b02e8a2fcfa458f3f9493f7 Reviewed-by: Cristian Maureira-Fredes <[email protected]> https://invent.kde.org/qt/pyside/pyside-setup/-/commit/8b4ebdd4eb99bb874c6547edc8b5f6c1280ee3dc Git commit cb4a152ab23d5c9cff90560aa9934e2d0fe3a66f by Friedemann Kleint on 20/07/2026 at 07:13.. shiboken6_generator: Mark as security-significant A few risks were identified, but none of them justifies a higher level. Use default. QUIP: 23 Task-number: PYSIDE-3381 Fixes: PYSIDE-3394 Pick-to: 6.11 6.8 Change-Id: I0f1297e93b49eeb1bfc23b3aec7b2d1c06f07f63 Reviewed-by: Cristian Maureira-Fredes <[email protected]> https://invent.kde.org/qt/pyside/pyside-setup/-/commit/cb4a152ab23d5c9cff90560aa9934e2d0fe3a66f