Fix/security pyo3 update 0.29#120
Merged
Merged
Conversation
Out-of-bounds read in nth/nth_back for PyList/PyTuple iterators; the fix is only available in pyo3 >=0.29.0 (not backported to 0.27.x/0.28.x). Also bumps pyo3-stub-gen to 0.22.3 and pyo3-log to >=0.13.4. Our own code compiles cleanly against pyo3 0.29; the default (non-python) build passes. NOTE: pyo3-stub-gen 0.22.3 does not yet compile against pyo3 0.29 (downcast->cast rename + OSError alias dedup), so the `python` feature build is blocked until a 0.29-compatible release lands. Tracking: Jij-Inc/pyo3-stub-gen#475. Assisted-by: Claude:claude-opus-4-8
The earlier commit bumped pyo3 to 0.29.0 (RUSTSEC-2026-0176) but left the `python` feature build blocked on pyo3-stub-gen, which had no 0.29-compatible release. pyo3-stub-gen 0.23.0 is now published with pyo3 0.29 support, so this finishes the migration: - Bump pyo3-stub-gen =0.22.3 -> =0.23.0 (first release supporting pyo3 0.29). - Replace removed PyObject alias with Py<PyAny> in servo_macro.rs (pyo3 0.28 removed the deprecated alias). - Opt the Pid pyclasses into the FromPyObject derive via pyclass(from_py_object); it became opt-in in pyo3 0.28 and MotorValue<Pid> still needs it for the writable PID registers. Both default and `python` builds compile warning-free; all tests pass and stub generation succeeds. Assisted-by: Claude:claude-opus-4-8
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.