Skip to content

[25.05] python313Packages.deepdiff: 8.4.1 -> 8.6.1#440477

Merged
vcunat merged 2 commits intoNixOS:release-25.05from
diogotcorreia:backport-deepdiff-cve
Sep 12, 2025
Merged

[25.05] python313Packages.deepdiff: 8.4.1 -> 8.6.1#440477
vcunat merged 2 commits intoNixOS:release-25.05from
diogotcorreia:backport-deepdiff-cve

Conversation

@diogotcorreia
Copy link
Member

@diogotcorreia diogotcorreia commented Sep 5, 2025

Backport of:

Things done

  • Built on platform:
    • x86_64-linux
    • aarch64-linux
    • x86_64-darwin
    • aarch64-darwin
  • Tested, as applicable:
  • Ran nixpkgs-review on this PR. See nixpkgs-review usage.
  • Tested basic functionality of all binary files, usually in ./result/bin/.
  • Nixpkgs Release Notes
    • Package update: when the change is major or breaking.
  • NixOS Release Notes
    • Module addition: when adding a new NixOS module.
    • Module update: when the change is significant.
  • Fits CONTRIBUTING.md, pkgs/README.md, maintainers/README.md and other READMEs.

Add a 👍 reaction to pull requests you find important.

@diogotcorreia diogotcorreia added the 1.severity: security Issues which raise a security issue, or PRs that fix one label Sep 5, 2025
@nixpkgs-ci nixpkgs-ci bot added 10.rebuild-linux: 11-100 This PR causes between 11 and 100 packages to rebuild on Linux. 10.rebuild-darwin: 11-100 This PR causes between 11 and 100 packages to rebuild on Darwin. 6.topic: python Python is a high-level, general-purpose programming language. 4.workflow: backport This targets a stable branch labels Sep 5, 2025
Copy link
Member Author

@diogotcorreia diogotcorreia left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nixpkgs-review result

Generated using nixpkgs-review.

Command: nixpkgs-review pr 440477
Commit: 2e735c8243a4f737911d86e35c0f2b1fe7c4aaec


x86_64-linux

⏩ 2 packages marked as broken and skipped:
  • azure-cli-extensions.confcom
  • azure-cli-extensions.confcom.dist
❌ 6 packages failed to build:
  • poetry
  • poetry.dist
  • python312Packages.tianshou
  • python312Packages.tianshou.dist
  • python313Packages.napalm-hp-procurve
  • python313Packages.napalm-hp-procurve.dist
✅ 144 packages built:
  • ansible (ansible_2_18, python312Packages.ansible-core)
  • ansible-later
  • ansible-later.dist
  • ansible-lint
  • ansible-lint.dist
  • ansible-navigator
  • ansible-navigator.dist
  • ansible.dist (ansible_2_18.dist, python312Packages.ansible-core.dist)
  • ansible_2_16
  • ansible_2_16.dist
  • ansible_2_17
  • ansible_2_17.dist
  • appdaemon
  • appdaemon.dist
  • dbt (python312Packages.dbt-core)
  • dbt.dist (python312Packages.dbt-core.dist)
  • deepdiff (python312Packages.deepdiff)
  • deepdiff.dist (python312Packages.deepdiff.dist)
  • home-assistant-component-tests.apple_tv
  • home-assistant-component-tests.litterrobot
  • immich-machine-learning
  • immich-machine-learning.dist
  • molecule (python312Packages.molecule)
  • molecule.dist (python312Packages.molecule.dist)
  • napalm
  • napalm.dist
  • open-webui
  • open-webui.dist
  • peering-manager
  • poetryPlugins.poetry-audit-plugin
  • poetryPlugins.poetry-audit-plugin.dist
  • poetryPlugins.poetry-plugin-export
  • poetryPlugins.poetry-plugin-export.dist
  • poetryPlugins.poetry-plugin-shell
  • poetryPlugins.poetry-plugin-shell.dist
  • poetryPlugins.poetry-plugin-up
  • poetryPlugins.poetry-plugin-up.dist
  • python312Packages.albumentations
  • python312Packages.albumentations.dist
  • python312Packages.ansible
  • python312Packages.ansible-compat
  • python312Packages.ansible-compat.dist
  • python312Packages.ansible-kernel
  • python312Packages.ansible-kernel.dist
  • python312Packages.ansible-runner
  • python312Packages.ansible-runner.dist
  • python312Packages.ansible-vault-rw
  • python312Packages.ansible-vault-rw.dist
  • python312Packages.ansible.dist
  • python312Packages.atopile
  • python312Packages.atopile.dist
  • python312Packages.atsim-potentials
  • python312Packages.atsim-potentials.dist
  • python312Packages.dbt-adapters
  • python312Packages.dbt-adapters.dist
  • python312Packages.dbt-bigquery
  • python312Packages.dbt-bigquery.dist
  • python312Packages.dbt-common
  • python312Packages.dbt-common.dist
  • python312Packages.dbt-postgres
  • python312Packages.dbt-postgres.dist
  • python312Packages.dbt-redshift
  • python312Packages.dbt-redshift.dist
  • python312Packages.dbt-snowflake
  • python312Packages.dbt-snowflake.dist
  • python312Packages.dipy
  • python312Packages.dipy.dist
  • python312Packages.insightface
  • python312Packages.insightface.dist
  • python312Packages.napalm
  • python312Packages.napalm-hp-procurve
  • python312Packages.napalm-hp-procurve.dist
  • python312Packages.napalm-ros
  • python312Packages.napalm-ros.dist
  • python312Packages.napalm.dist
  • python312Packages.netbox-napalm-plugin
  • python312Packages.netbox-napalm-plugin.dist
  • python312Packages.pyatv
  • python312Packages.pyatv.dist
  • python312Packages.pylitterbot
  • python312Packages.pylitterbot.dist
  • python312Packages.pytest-ansible
  • python312Packages.pytest-ansible.dist
  • python312Packages.pytest-testinfra
  • python312Packages.pytest-testinfra.dist
  • python312Packages.qcodes
  • python312Packages.qcodes-contrib-drivers
  • python312Packages.qcodes-contrib-drivers.dist
  • python312Packages.qcodes.dist
  • python312Packages.trx-python
  • python312Packages.trx-python.dist
  • ttp (python312Packages.ttp)
  • ttp.dist (python312Packages.ttp.dist)
  • python312Packages.unstructured
  • python312Packages.unstructured-client
  • python312Packages.unstructured-client.dist
  • python312Packages.unstructured.dist
  • python313Packages.albumentations
  • python313Packages.albumentations.dist
  • python313Packages.ansible
  • python313Packages.ansible-compat
  • python313Packages.ansible-compat.dist
  • python313Packages.ansible-core
  • python313Packages.ansible-core.dist
  • python313Packages.ansible-kernel
  • python313Packages.ansible-kernel.dist
  • python313Packages.ansible-runner
  • python313Packages.ansible-runner.dist
  • python313Packages.ansible-vault-rw
  • python313Packages.ansible-vault-rw.dist
  • python313Packages.ansible.dist
  • python313Packages.deepdiff
  • python313Packages.deepdiff.dist
  • python313Packages.dipy
  • python313Packages.dipy.dist
  • python313Packages.insightface
  • python313Packages.insightface.dist
  • python313Packages.molecule
  • python313Packages.molecule.dist
  • python313Packages.napalm
  • python313Packages.napalm.dist
  • python313Packages.pyatv
  • python313Packages.pyatv.dist
  • python313Packages.pylitterbot
  • python313Packages.pylitterbot.dist
  • python313Packages.pytest-ansible
  • python313Packages.pytest-ansible.dist
  • python313Packages.pytest-testinfra
  • python313Packages.pytest-testinfra.dist
  • python313Packages.qcodes
  • python313Packages.qcodes-contrib-drivers
  • python313Packages.qcodes-contrib-drivers.dist
  • python313Packages.qcodes.dist
  • python313Packages.trx-python
  • python313Packages.trx-python.dist
  • python313Packages.ttp
  • python313Packages.ttp.dist
  • python313Packages.unstructured
  • python313Packages.unstructured-client
  • python313Packages.unstructured-client.dist
  • python313Packages.unstructured.dist
  • sublime-music
  • sublime-music.dist
  • unstructured-api

Error logs: `x86_64-linux`
poetry
tests/utils/test_helpers.py: 10 warnings
tests/utils/test_isolated_build.py: 20 warnings
  /nix/store/dpv6szl969v59aacm6kai4ys4pj1p3ar-python3.12-httpretty-1.1.4/lib/python3.12/site-packages/httpretty/core.py:1080: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC).
    now = datetime.utcnow()

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=========================== short test summary info ============================
SKIPPED [3] tests/console/commands/env/test_activate.py:54: Only Windows shells
SKIPPED [1] tests/console/commands/test_sync.py:26: Only relevant for poetry install
SKIPPED [1] tests/console/commands/test_run.py:159: Poetry only installs CMD script files for console scripts of editable dependencies on Windows
SKIPPED [1] tests/installation/test_executor.py:414: python-poetry/poetry#7983
SKIPPED [1] tests/console/commands/self/test_sync.py:26: Only relevant for poetry self install
SKIPPED [1] tests/utils/env/test_env_manager.py:1265: requires darwin
SKIPPED [1] tests/utils/test_python_manager.py:99: Windows only
SKIPPED [1] tests/vcs/git/test_system.py:37: These tests requires git cli
SKIPPED [1] tests/vcs/git/test_system.py:43: These tests requires git cli
SKIPPED [1] tests/vcs/git/test_system.py:48: These tests requires git cli
SKIPPED [1] tests/vcs/git/test_system.py:32: These tests requires git cli
FAILED tests/utils/env/test_env.py::test_call_does_not_block_on_full_pipe[sys.stderr] - assert ([])
==== 1 failed, 2588 passed, 13 skipped, 1059 warnings in 283.66s (0:04:43) =====

python312Packages.tianshou
    warnings.warn(

test/base/test_collector.py::TestAsyncCollector::test_enough_episodes_and_correct_obs_indices_and_obs_next_iterative_collection_cycles_n_step
test/base/test_collector.py::TestAsyncCollector::test_enough_episodes_and_correct_obs_indices_and_obs_next_iterative_collection_cycles_first_n_episode_then_n_step
/build/source/tianshou/data/collector.py:323: UserWarning: n_step=13 is not a multiple of (self.env_num=4), which may cause extra transitions being collected into the buffer.
warnings.warn(

test/base/test_collector.py::TestAsyncCollector::test_enough_episodes_and_correct_obs_indices_and_obs_next_iterative_collection_cycles_n_step
test/base/test_collector.py::TestAsyncCollector::test_enough_episodes_and_correct_obs_indices_and_obs_next_iterative_collection_cycles_first_n_episode_then_n_step
/build/source/tianshou/data/collector.py:323: UserWarning: n_step=14 is not a multiple of (self.env_num=4), which may cause extra transitions being collected into the buffer.
warnings.warn(

test/base/test_policy.py: 40 warnings
/build/source/tianshou/policy/base.py:304: DeprecationWarning: array implementation doesn't accept a copy keyword, so passing copy=False failed. array must implement 'dtype' and 'copy' keyword arguments. To learn more, see the migration guide https://numpy.org/devdocs/numpy_2_0_migration_guide.html#adapting-to-changes-in-the-copy-keyword
obs = np.array(obs) # convert array-like to array (e.g. LazyFrames)

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=========================== short test summary info ============================
FAILED test/base/test_env.py::test_async_env - assert 0.5835311412811279 < (((6.0 * 0.1) * 8) / (8 + 1))
= 1 failed, 61 passed, 5 skipped, 53 deselected, 146 warnings in 346.39s (0:05:46) =

python313Packages.napalm-hp-procurve
  File "", line 1, in 
    import sys; import importlib; list(map(lambda mod: importlib.import_module(mod), sys.argv[1:]))
                                  ~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "", line 1, in 
    import sys; import importlib; list(map(lambda mod: importlib.import_module(mod), sys.argv[1:]))
                                                       ~~~~~~~~~~~~~~~~~~~~~~~^^^^^
  File "/nix/store/1ki8jq5sax0hm1sqbw0jk6qnqpy417zx-python3-3.13.5/lib/python3.13/importlib/__init__.py", line 88, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
           ~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "", line 1387, in _gcd_import
  File "", line 1360, in _find_and_load
  File "", line 1331, in _find_and_load_unlocked
  File "", line 935, in _load_unlocked
  File "", line 1026, in exec_module
  File "", line 488, in _call_with_frames_removed
  File "/nix/store/1gh98g9jgbw5skfmbzv1d16w6z55hh6k-python3.13-napalm-hp-procurve-0.7.0/lib/python3.13/site-packages/napalm_procurve/__init__.py", line 16, in 
    from napalm_procurve.procurve import ProcurveDriver
  File "/nix/store/1gh98g9jgbw5skfmbzv1d16w6z55hh6k-python3.13-napalm-hp-procurve-0.7.0/lib/python3.13/site-packages/napalm_procurve/procurve.py", line 26, in 
    import telnetlib
ModuleNotFoundError: No module named 'telnetlib'

@diogotcorreia diogotcorreia marked this pull request as ready for review September 5, 2025 18:14
@nix-owners nix-owners bot requested review from Mic92 and doronbehar September 5, 2025 18:15
@vcunat
Copy link
Member

vcunat commented Sep 12, 2025

python313Packages.napalm-hp-procurve was already broken. The rest builds for me. I've seen no complains around the origin deepdiff update for nixpkgs master.

@vcunat vcunat merged commit d0270f8 into NixOS:release-25.05 Sep 12, 2025
37 of 38 checks passed
@diogotcorreia diogotcorreia deleted the backport-deepdiff-cve branch September 12, 2025 10:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

1.severity: security Issues which raise a security issue, or PRs that fix one 4.workflow: backport This targets a stable branch 6.topic: python Python is a high-level, general-purpose programming language. 10.rebuild-darwin: 11-100 This PR causes between 11 and 100 packages to rebuild on Darwin. 10.rebuild-linux: 11-100 This PR causes between 11 and 100 packages to rebuild on Linux.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants