Merge pull request #2141 from getsentry/chore/xmlsec-1.3.17

chore: xmlsec==1.3.17

Author: oioki

packages.ini

@@ -4011,6 +4011,11 @@ apt_requires = pkg-config
 brew_requires = pkg-config
 custom_prebuild = prebuild/xmlsec-1-3-14-deps
 python_versions = <3.14
+[xmlsec==1.3.17]
+apt_requires = pkg-config
+brew_requires = pkg-config
+custom_prebuild = prebuild/xmlsec-1-3-17-deps
+python_versions = <3.14
 
 [yamlfix==1.3.0]
 

prebuild/xmlsec-1-3-14-deps

@@ -45,12 +45,12 @@ def main() -> int:
     )
     os.environ["CPPFLAGS"] = _join_env(
         name="CPPFLAGS",
-        value=f'-I{os.path.join(args.prefix, "include")}',
+        value=f"-I{os.path.join(args.prefix, 'include')}",
         sep=" ",
     )
     os.environ["LDFLAGS"] = _join_env(
         name="LDFLAGS",
-        value=f'-L{os.path.join(args.prefix, "lib")}',
+        value=f"-L{os.path.join(args.prefix, 'lib')}",
         sep=" ",
     )
     os.environ["LD_LIBRARY_PATH"] = _join_env(
@@ -73,7 +73,6 @@ def main() -> int:
 
         with tarfile.open(fileobj=io.BytesIO(bts)) as tarf:
             tarf.extractall(tmpdir)
-        h = hashlib.sha256(bts).hexdigest()
 
         srcroot = os.path.join(tmpdir, "libxml2-2.12.9")
         subprocess.check_call(

prebuild/xmlsec-1-3-17-deps

@@ -0,0 +1,123 @@
+#!/usr/bin/env python3
+from __future__ import annotations
+
+import argparse
+import hashlib
+import io
+import os.path
+import secrets
+import subprocess
+import tarfile
+import tempfile
+import urllib.request
+
+# matches libxml2 from lxml==6.1.0
+XML2_URL = "https://download.gnome.org/sources/libxml2/2.14/libxml2-2.14.6.tar.xz"
+XML2_SHA256 = "7ce458a0affeb83f0b55f1f4f9e0e55735dbfc1a9de124ee86fb4a66b597203a"
+# matches xmlsec from xmlsec==1.3.17
+XMLSEC_URL = (
+    "https://github.com/lsh123/xmlsec/releases/download/1.3.9/xmlsec1-1.3.9.tar.gz"
+)
+XMLSEC_SHA256 = "a631c8cd7a6b86e6adb9f5b935d45a9cf9768b3cb090d461e8eb9d043cf9b62f"
+
+
+def _join_env(
+    *,
+    name: str,
+    value: str,
+    sep: str,
+) -> str:
+    if name in os.environ:
+        return f"{value}{sep}{os.environ[name]}"
+    else:
+        return value
+
+
+def main() -> int:
+    parser = argparse.ArgumentParser()
+    parser.add_argument("prefix")
+    args = parser.parse_args()
+
+    os.environ["PATH"] = _join_env(
+        name="PATH",
+        value=os.path.join(args.prefix, "bin"),
+        sep=os.pathsep,
+    )
+    os.environ["CPPFLAGS"] = _join_env(
+        name="CPPFLAGS",
+        value=f"-I{os.path.join(args.prefix, 'include')}",
+        sep=" ",
+    )
+    os.environ["LDFLAGS"] = _join_env(
+        name="LDFLAGS",
+        value=f"-L{os.path.join(args.prefix, 'lib')}",
+        sep=" ",
+    )
+    os.environ["LD_LIBRARY_PATH"] = _join_env(
+        name="LD_LIBRARY_PATH",
+        value=os.path.join(args.prefix, "lib"),
+        sep=os.pathsep,
+    )
+    os.environ["PKG_CONFIG_PATH"] = _join_env(
+        name="PKG_CONFIG_PATH",
+        value=os.path.join(args.prefix, "lib", "pkgconfig"),
+        sep=os.pathsep,
+    )
+
+    with tempfile.TemporaryDirectory() as tmpdir:
+        resp = urllib.request.urlopen(XML2_URL)
+        bts = resp.read()
+        h = hashlib.sha256(bts).hexdigest()
+        if not secrets.compare_digest(h, XML2_SHA256):
+            raise SystemExit(f"checksum mismatch: {(XML2_SHA256, h)=}")
+
+        with tarfile.open(fileobj=io.BytesIO(bts)) as tarf:
+            tarf.extractall(tmpdir)
+
+        srcroot = os.path.join(tmpdir, "libxml2-2.14.6")
+        subprocess.check_call(
+            (
+                "./configure",
+                f"--prefix={args.prefix}",
+                "--disable-silent-rules",
+                "--with-history",
+                "--with-icu",
+                "--without-python",
+                "--without-lzma",
+            ),
+            cwd=srcroot,
+        )
+        subprocess.check_call(("make", "install"), cwd=srcroot)
+
+    with tempfile.TemporaryDirectory() as tmpdir:
+        resp = urllib.request.urlopen(XMLSEC_URL)
+        bts = resp.read()
+        h = hashlib.sha256(bts).hexdigest()
+        if not secrets.compare_digest(h, XMLSEC_SHA256):
+            raise SystemExit(f"checksum mismatch: {(XMLSEC_SHA256, h)=}")
+
+        with tarfile.open(fileobj=io.BytesIO(bts)) as tarf:
+            tarf.extractall(tmpdir)
+
+        srcroot = os.path.join(tmpdir, "xmlsec1-1.3.9")
+        subprocess.check_call(
+            (
+                "./configure",
+                "--disable-dependency-tracking",
+                f"--prefix={args.prefix}",
+                "--disable-crypto-dl",
+                "--disable-apps-crypto-dl",
+                "--with-nss=no",
+                "--with-nspr=no",
+                "--enable-mscrypto=no",
+                "--enable-mscng=no",
+            ),
+            cwd=srcroot,
+        )
+        subprocess.check_call(("make", "install"), cwd=srcroot)
+
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

pyproject.toml

@@ -38,6 +38,7 @@ disallow_any_generics = true
 disallow_incomplete_defs = true
 disallow_untyped_defs = true
 no_implicit_optional = true
+scripts_are_modules = true
 warn_redundant_casts = true
 warn_unused_ignores = true