diff --git a/doc/release-notes/rl-2511.section.md b/doc/release-notes/rl-2511.section.md index f4b6cd2d766b..d707fd1eb6c0 100644 --- a/doc/release-notes/rl-2511.section.md +++ b/doc/release-notes/rl-2511.section.md @@ -26,6 +26,8 @@ - `base16-builder` node package has been removed due to lack of upstream maintenance. +- `python3Packages.bjoern` has been removed, as the upstream is unmaintained and it depends on a 14-year-old version of http-parser with numerous vulnerabilities. + - `buildGoModule` now warns if `.passthru.overrideModAttrs` is lost during the overriding of its result packages. - `gentium` package now provides `Gentium-*.ttf` files, and not `GentiumPlus-*.ttf` files like before. The font identifiers `Gentium Plus*` are available in the `gentium-plus` package, and if you want to use the more recently updated package `gentium` [by sil](https://software.sil.org/gentium/), you should update your configuration files to use the `Gentium` font identifier. diff --git a/pkgs/development/python-modules/bjoern/default.nix b/pkgs/development/python-modules/bjoern/default.nix deleted file mode 100644 index f6fb503578e9..000000000000 --- a/pkgs/development/python-modules/bjoern/default.nix +++ /dev/null @@ -1,39 +0,0 @@ -{ - lib, - buildPythonPackage, - fetchFromGitHub, - libev, - python, - setuptools, -}: - -buildPythonPackage rec { - pname = "bjoern"; - version = "3.2.2"; - pyproject = true; - - src = fetchFromGitHub { - owner = "jonashaag"; - repo = "bjoern"; - tag = version; - hash = "sha256-drFLM6GsgrM8atQDxmb3/1bpj+C1WetQLjNbZqCTzog="; - fetchSubmodules = true; # fetch http-parser and statsd-c-client submodules - }; - - build-system = [ setuptools ]; - - buildInputs = [ libev ]; - - checkPhase = '' - ${python.interpreter} tests/keep-alive-behaviour.py 2>/dev/null - ${python.interpreter} tests/test_wsgi_compliance.py - ''; - - meta = with lib; { - homepage = "https://github.com/jonashaag/bjoern"; - description = "Screamingly fast Python 2/3 WSGI server written in C"; - changelog = "https://github.com/jonashaag/bjoern/blob/${src.tag}/CHANGELOG"; - license = licenses.bsd2; - maintainers = with maintainers; [ cmcdragonkai ]; - }; -} diff --git a/pkgs/top-level/python-aliases.nix b/pkgs/top-level/python-aliases.nix index c99c14e31519..e50caf0a211c 100644 --- a/pkgs/top-level/python-aliases.nix +++ b/pkgs/top-level/python-aliases.nix @@ -109,6 +109,7 @@ mapAliases ({ bedup = throw "bedup was removed because it was broken and abandoned upstream"; # added 2023-02-04 bip_utils = bip-utils; # 2023-10-08 bitcoin-price-api = throw "bitcoin-price-api has been removed, it was using setuptools 2to3 translation feautre, which has been removed in setuptools 58"; # added 2022-02-15 + bjoern = throw "'bjoern' has been removed, as the upstream repository was unmaintained and it was using libraries with severe security issues."; # Added 2025-09-01 bkcharts = throw "'bkcharts' has been removed as the upstream repository was archived in 2018"; # added 2025-08-26 blessings = throw "blessings has been removed in favor of blessed, as it was unmaintained"; # added 2024-08-20 BlinkStick = blinkstick; # added 2023-02-19 diff --git a/pkgs/top-level/python-packages.nix b/pkgs/top-level/python-packages.nix index c8eed1c249d8..ee78ffe7ac19 100644 --- a/pkgs/top-level/python-packages.nix +++ b/pkgs/top-level/python-packages.nix @@ -1955,8 +1955,6 @@ self: super: with self; { bizkaibus = callPackage ../development/python-modules/bizkaibus { }; - bjoern = callPackage ../development/python-modules/bjoern { }; - bk7231tools = callPackage ../development/python-modules/bk7231tools { }; black = callPackage ../development/python-modules/black { };