Merge branch 'hotfix-1.3.4'

.github/workflows/basemap-for-manylinux.yml

@@ -264,8 +264,8 @@ jobs:
  run: |
  apt-get update
  apt-get install -y gcc g++ make
- pip install "numpy < 1.21.5"
- if: matrix.arch == 'x86' && matrix.python-version == '3.10'
+ pip install "numpy < 1.24"
+ if: matrix.arch == 'x86' && (matrix.python-version >= '3.8' || matrix.python-version >= '3.10')
  -
  name: Install package
  run: |

CHANGELOG.md

@@ -10,6 +10,28 @@ https://keepachangelog.com/en/1.0.0/
 https://semver.org/spec/v2.0.0.html
 
 
+## [1.3.4] - 2022-08-10
+
+### Changed
+- Upgrade `numpy` upper pin to 1.24.
+- Upgrade `pyshp` upper pin to 2.4.
+- Upgrade `sphinx` upper pin to 5.0 and require at least Python 3.6 to
+ build the docs.
+
+### Fixed
+- Update `numpy` build dependency to ensure that builds also work on
+ MacOS (fixes issue [#547], thanks to @SongJaeIn for testing).
+- Fix broken implementation of `Basemap.arcgisimage` (PR [#548], solves
+ issue [#546]).
+- Enforce up-to-date `numpy` dependency when possible:
+ - Set `numpy >= 1.19` for Python == 3.6 due to `numpy` vulnerabilities
+ [CVE-2021-41495] and [CVE-2021-41496].
+ - Set `numpy >= 1.22` for Python >= 3.8 due to `numpy` vulnerability
+ [CVE-2021-34141].
+- Enforce up-to-date `pillow` dependency when possible:
+ - Set `pillow >= 9.0.1` for Python >= 3.7 due to `pillow`
+ vulnerability [CVE-2022-24303].
+
 ## [1.3.3] - 2022-05-11
 
 ### Changed
@@ -902,6 +924,12 @@ https://semver.org/spec/v2.0.0.html
 - Fix glitches in drawing of parallels and meridians.
 
 
+[#548]:
+https://github.com/matplotlib/basemap/pull/548
+[#547]:
+https://github.com/matplotlib/basemap/issues/547
+[#546]:
+https://github.com/matplotlib/basemap/issues/546
 [#541]:
 https://github.com/matplotlib/basemap/pull/541
 [#539]:
@@ -974,7 +1002,9 @@ https://github.com/matplotlib/basemap/issues/228
 https://github.com/matplotlib/basemap/issues/179
 
 [Unreleased]:
-https://github.com/matplotlib/basemap/compare/v1.3.3...develop
+https://github.com/matplotlib/basemap/compare/v1.3.4...develop
+[1.3.4]:
+https://github.com/matplotlib/basemap/compare/v1.3.3...v1.3.4
 [1.3.3]:
 https://github.com/matplotlib/basemap/compare/v1.3.2...v1.3.3
 [1.3.2]:
@@ -1002,14 +1032,22 @@ https://github.com/matplotlib/basemap/compare/v1.0.3rel...v1.0.4rel
 [1.0.3]:
 https://github.com/matplotlib/basemap/tree/v1.0.3rel
 
+[CVE-2022-24303]:
+https://nvd.nist.gov/vuln/detail/CVE-2022-24303
 [CVE-2022-22817]:
 https://nvd.nist.gov/vuln/detail/CVE-2022-22817
 [CVE-2022-22816]:
 https://nvd.nist.gov/vuln/detail/CVE-2022-22816
 [CVE-2022-22815]:
 https://nvd.nist.gov/vuln/detail/CVE-2022-22815
+[CVE-2021-41496]:
+https://nvd.nist.gov/vuln/detail/CVE-2021-41496
+[CVE-2021-41495]:
+https://nvd.nist.gov/vuln/detail/CVE-2021-41495
 [CVE-2021-34552]:
 https://nvd.nist.gov/vuln/detail/CVE-2021-34552
+[CVE-2021-34141]:
+https://nvd.nist.gov/vuln/detail/CVE-2021-34141
 [CVE-2021-33430]:
 https://nvd.nist.gov/vuln/detail/CVE-2021-33430
 [CVE-2021-28678]:

packages/basemap/pyproject.toml

@@ -3,7 +3,9 @@ requires = [
  'setuptools',
  'wheel',
  'numpy == 1.21.4; python_version >= "3.10"',
- 'numpy == 1.16.6; python_version == "2.7" or (python_version >= "3.4" and python_version <= "3.9")',
+ 'numpy == 1.21.4; sys_platform == "darwin" and (python_version >= "3.7" and python_version <= "3.9")',
+ 'numpy == 1.16.6; sys_platform != "darwin" and (python_version >= "3.7" and python_version <= "3.9")',
+ 'numpy == 1.16.6; python_version == "2.7" or (python_version >= "3.4" and python_version <= "3.6")',
  'numpy == 1.11.3; python_version == "2.6" or (python_version >= "3.2" and python_version <= "3.3")',
  'cython >= 0.29, < 3.1; python_version >= "3.3" or python_version < "3.0"',
  'cython >= 0.26, < 0.27; python_version == "3.2"'

packages/basemap/requirements-doc.txt

@@ -1 +1 @@
-sphinx >= 3.0, < 3.4; python_version >= "3.5"
+sphinx >= 3.0, < 5.0; python_version >= "3.6"

packages/basemap/requirements-test.txt

@@ -28,4 +28,4 @@ pillow >= 4.3.0, < 5.0.0; python_version == "3.3"
 pillow >= 5.4.0, < 6.0.0; python_version == "3.4"
 pillow >= 7.1.0, < 8.0.0; python_version == "3.5"
 pillow >= 8.3.2, < 9.0.0; python_version == "3.6"
-pillow >= 9.0.0, < 10.0.0; python_version >= "3.7"
+pillow >= 9.0.1, < 10.0.0; python_version >= "3.7"

packages/basemap/requirements.txt

@@ -6,8 +6,9 @@ numpy >= 1.11, < 1.12; python_version == "3.2"
 numpy >= 1.11, < 1.12; python_version == "3.3"
 numpy >= 1.15, < 1.17; python_version == "3.4"
 numpy >= 1.16, < 1.19; python_version == "3.5"
-numpy >= 1.16, < 1.20; python_version == "3.6"
-numpy >= 1.21, < 1.23; python_version >= "3.7"
+numpy >= 1.19, < 1.20; python_version == "3.6"
+numpy >= 1.21, < 1.22; python_version == "3.7"
+numpy >= 1.22, < 1.24; python_version >= "3.8"
 
 cycler < 0.11; python_version == "3.2"
 pyparsing >= 1.5, < 2.4.1; python_version == "2.6"
@@ -27,4 +28,4 @@ pyproj >= 1.9.3, < 2.1.0; python_version == "3.4"
 pyproj >= 1.9.3, < 3.4.0; python_version >= "3.5"
 
 pyshp >= 1.2, < 2.0; python_version == "2.6"
-pyshp >= 1.2, < 2.2; python_version >= "2.7"
+pyshp >= 1.2, < 2.4; python_version >= "2.7"

packages/basemap/setup.py

@@ -172,7 +172,7 @@ def run(self):
  "name":
  "basemap",
  "version":
- "1.3.3",
+ "1.3.4",
  "license":
  "MIT",
  "description":

packages/basemap/src/mpl_toolkits/basemap/__init__.py

@@ -64,7 +64,7 @@
  from mpl_toolkits import basemap_data
  basemap_datadir = os.path.abspath(list(basemap_data.__path__)[0])
 
-__version__ = "1.3.3"
+__version__ = "1.3.4"
 
 # module variable that sets the default value for the 'latlon' kwarg.
 # can be set to True by user so plotting functions can take lons,lats
@@ -4215,7 +4215,7 @@ def warpimage(self,image="bluemarble",scale=None,**kwargs):
  return im
 
  def arcgisimage(self,server='http://server.arcgisonline.com/ArcGIS',\
- service='ESRI_Imagery_World_2D',xpixels=400,ypixels=None,\
+ service='World_Imagery',xpixels=400,ypixels=None,\
  dpi=96,verbose=False,**kwargs):
  """
  Retrieve an image using the ArcGIS Server REST API and display it on
@@ -4232,7 +4232,7 @@ def arcgisimage(self,server='http://server.arcgisonline.com/ArcGIS',\
  server web map server URL (default
  http://server.arcgisonline.com/ArcGIS).
  service service (image type) hosted on server (default
- ESRI_Imagery_World_2D, which is NASA 'Blue Marble'
+ 'World_Imagery', which is NASA 'Blue Marble'
  image).
  xpixels requested number of image pixels in x-direction
  (default 400).
@@ -4284,9 +4284,6 @@ def arcgisimage(self,server='http://server.arcgisonline.com/ArcGIS',\
  arcgisimage cannot handle images that cross
  the dateline for cylindrical projections.""")
  raise ValueError(msg)
- if self.projection != 'cyl':
- xmin = (180./np.pi)*xmin; xmax = (180./np.pi)*xmax
- ymin = (180./np.pi)*ymin; ymax = (180./np.pi)*ymax
  # ypixels not given, find by scaling xpixels by the map aspect ratio.
  if ypixels is None:
  ypixels = int(self.aspect*xpixels)

packages/basemap/src/mpl_toolkits/basemap/proj.py

@@ -10,7 +10,7 @@
  # as textwrap.dedent.
  from matplotlib.cbook import dedent
 
-__version__ = "1.3.3"
+__version__ = "1.3.4"
 _dg2rad = math.radians(1.)
 _rad2dg = math.degrees(1.)