Commit Graph

8903 Commits

Author SHA1 Message Date
Wang Mingyu
9ced05b9d9 python3-virtualenv: upgrade 20.35.4 -> 20.36.1
Changelog:
==============
- fix: resolve TOCTOU vulnerabilities in app_data and lock directory creation
- fix: Prevent NameError when accessing _DISTUTILS_PATCH during file overwrite
- Upgrade pip and fix 3.15 picking old wheel
- fix: wrong path on migrated venv
- test_too_many_open_files: assert on errno.EMFILE instead of strerror
- fix: update filelock dependency version to 3.20.1 to fix CVE CVE-2025-68146
- fix: resolve EncodingWarning in tox upgrade environment
- Fix Interpreter discovery bug wrt. Microsoft Store shortcut using Latin-1
- Add support for PEP 440 version specifiers in the --python flag.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:02 -08:00
Wang Mingyu
a724174ae8 python3-tomli: upgrade 2.3.0 -> 2.4.0
Changelog:
===========
- Add TOML v1.1.0 compatibility
- Add binary wheels for Windows arm64

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:02 -08:00
Wang Mingyu
67972a72ec python3-starlette: upgrade 0.50.0 -> 0.51.0
Changelog:
==============
- Add allow_private_network in CORSMiddleware
- Increase warning stacklevel on DeprecationWarning for wsgi module

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:02 -08:00
Wang Mingyu
b51cdb7f01 python3-pystemd: upgrade 0.14.0 -> 0.15.1
Changelog:
==========
- Add wait_for_activation parameter to pystemd.run to wait only for service activation without blocking until completion
- Document cwd and wait_for_activation parameters in pystemd.run
- Drop support for Python 3.6-3.10, now requires Python 3.11+
- Add unit property and unit_name to TransientUnitProcess for easy access to the running unit
- Change development tooling to use uv for package management
- Change lint/format stack from black/mypy to ruff/pyrefly
- Add a lot of typing

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:02 -08:00
Wang Mingyu
719fba40ee python3-pymongo: upgrade 4.15.5 -> 4.16.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:01 -08:00
Wang Mingyu
950e4abfc9 python3-pyasyncore: upgrade 1.0.4 -> 1.0.5
Changelog:
===========
- Make sure tests/__init__.py is included in sdist
- Fix compatibility with pytest
- Explicitly tag Python 3.14 compatibility

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:01 -08:00
Wang Mingyu
355668de1d python3-pyais: upgrade 2.14.0 -> 2.15.0
Changelog:
 AISTracker.update now accepts raw sentences as well as decoded messages

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:01 -08:00
Wang Mingyu
ceb26ff276 python3-pikepdf: upgrade 10.1.0 -> 10.2.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:01 -08:00
Wang Mingyu
f6a4aee942 python3-ipython: upgrade 9.8.0 -> 9.9.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:01 -08:00
Wang Mingyu
23be3d56d1 python3-alembic: upgrade 1.17.2 -> 1.18.0
License-Update: copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:29:01 -08:00
Leon Anavi
88ae17fd8f python3-libevdev: Upgrade 0.12 -> 0.13.1
Add ptest and upgrade to release 0.13.1:

- pyproject.toml: add pytest as dev dependency
- Import Self from type_checking if needed to be compat with 3.9
- CI: run pytest via uv
- CI: test against multiple python versions

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:59 -08:00
Leon Anavi
0c94f27fda python3-huey: Upgrade 2.5.5 -> 2.6.0
Upgrade to release 2.6.0:

- "Modernize" build system to use pyproject.toml and github actions.

Fixes:
WARNING: python3-huey-2.6.0-r0 do_check_backend: QA Issue: inherits
setuptools3 but has pyproject.toml with setuptools.build_meta, use
the correct class [pep517-backend]

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:59 -08:00
Leon Anavi
ded508de23 python3-filelock: Upgrade 3.20.2 -> 3.20.3
Upgrade to release 3.20.3:

- Fix TOCTOU symlink vulnerability in SoftFileLock

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:59 -08:00
Leon Anavi
7a273013c7 python3-aenum: Upgrade 3.1.15 -> 3.1.16
Upgrade to release 3.1.16:

- standardized handling of negative numbers in flags
- support dictionary-like key access to NamedTuple
- remove newer setup.py option include_package_data

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:59 -08:00
Leon Anavi
50f0473ee1 python3-pylint: Upgrade 4.0.3 -> 4.0.4
Upgrade to release 4.0.4:

- Fixed false positive for ``invalid-name`` where module-level
  constants were incorrectly classified as variables when a
  class-level attribute with the same name exists.
- Fix a false positive for ``invalid-name`` on an UPPER_CASED
  name inside an ``if`` branch that assigns an object.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:58 -08:00
Liu Yiding
6ad8b50af8 python3-google-auth: upgrade 2.45.0 -> 2.47.0
1. Changelog
https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md

2. Drop 0001-make-the-TLS-tests-skip-when-pyopenssl-isn-t-availab.patch as it was merged upstream.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-13 08:28:58 -08:00
Leon Anavi
52c747c540 python3-aiodns: Upgrade 3.6.1 -> 4.0.0
Upgrade to release 4.0.0:

- Added new query_dns() method returning native pycares 5.x
  DNSResult types
- Deprecated query() method - still works with backward-compatible
  result types
- Deprecated gethostbyname() method - use getaddrinfo() instead
- Added compatibility layer for pycares 4.x result types to ease
  migration
- Updated dependencies

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Leon Anavi
c18c531c88 python3-pycares: Upgrade 4.11.0 -> 5.0.1
Upgrade to release 5.0.1:

- Use Literal for type
- Use CMake for compiling c-ares
- Move project metadata to pyproject.toml
- Remove gethostbyname
- Remove getsock
- Replace ares_{get,set}servers with ares_{get,set}_servers_csv
- Remove ares_init and ares_mkquery, they are unused
- Make c-ares thread-safety mandatory
- Migrate API to c-ares' dnsrec variants
- Build wheels in parallel
- Update bundled c-ares to v1.34.6
- Make callback a mandatory kwarg-only argument
- Return bytes data for TXT records
- Add support for TLSA, HTTP and URI queries
- Remove event_thread option, make it implicit
- Fix IDNA 2008 test

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Leon Anavi
4ca56224e6 python3-langtable: Upgrade 0.0.68 -> 0.0.69
Upgrade to release 0.0.69:

- Add Georgian console fonts
- Add Adlm script to SN
- Add dra, Tutg, ath, cmc, Cham, tai
- Remove License classifier (license tag with SPDX license
  expression is already there)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Leon Anavi
d58da103e1 python3-identify: Upgrade 2.6.13 -> 2.6.15
Upgrade to release 2.6.15:

- Add .piskel extension
- Fix: make PKGBUILD files a superset of .bash
- [pre-commit.ci] pre-commit autoupdate

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 10:25:57 -08:00
Gyorgy Sarvari
b891bc7cac python3-filelock: add ptest support
The tests take <15s to execute.

Sample output:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2026-01-09T18:00
BEGIN: /usr/lib/python3-filelock/ptest
PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncUnixFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncSoftFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncUnixFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncSoftFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncUnixFileLock]
PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncSoftFileLock]
[...many lines...]
PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[SoftFileLock-TimeoutError]
PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[UnixFileLock-PermissionError]
PASS: tests/test_virtualenv.py:test_virtualenv
============================================================================
Testsuite summary
DURATION: 10
END: /usr/lib/python3-filelock/ptest
2026-01-09T18:00
STOP: ptest-runner
TOTAL: 1 FAIL: 0

(There are 20 Windows-only tests, which are skipped)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:50 -08:00
Leon Anavi
56f4b30c99 python3-gcovr: Upgrade 8.3 -> 8.5
Upgrade to release 8.5:

Breaking changes:

- The option --lcov-test-name doesn't accept values with spaces
  anymore.
- The option --lcov-format-1.x is deprecated and mapped to
  --lcov-format-version=1.x.
- Changes to HTML templates.

New features and notable changes:

- Due to added support for LLVM source based code coverage format
  some configuration file keys got changed. The old gcov named
  options are still supported but they also affect the LLVM
  toolchain.

Bug fixes and small improvements:

- Fix coveralls report if there are several coverage elements per
  line.
- Fix not excluded conditions if branches are excluded by comments.
- Fix reported excluded branches in LCOV report.
- Fix exclusion filter --gcov-exclude.
- Add --json-trace-data-source to include the trace data source in
  the JSON report independent from --verbose.
- Remove generated gcov files on error and catch additional gcov
  error message.
- Change default HTML theme excluded line color.
- Move theme colors to a separate CSS file so they can be overridden
  with a simple --html-template-dir directory with only the
  style.colors.css file.
- Fix regular expression for detecting a version mismatch between
  gcc and gcov.
- Improve logging messages for GCOV execution errors to not print
  information twice and add trace messages for gcov execution.
- Fix handling of lines after function specialization.
- Improve performance by changing logging messages (level and lazy
  interpolation).
- Fix text report for covered decisions.
- Fix runtime problem introduced with 8.4.
- Fix wrong entries in data source attribute of JSON report.
- Fix nested HTML report without coverage data.
- Add warning if coverage data is empty.
- Add warning if function lines are missing in external generated
  GCOV files.
- Extend support for zipped reports. If last suffix is .xz then
  LZMA is used to compress the report.
- Fix function exclusion in report generation.
- Do not ignore lines without functions, e.g. from inlined code.
- Ignore all whitespaces instead of only spaces for detection of
  noncode lines.
- Add support for temporary merging line coverage objects without
  modifying the data model.
- Change internal behavior of --exclude-function-lines to exclude
  the line of function definition instead of removing it completely.
- Ensure that all functions have a line coverage element in LCOV
  report.

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Leon Anavi
988b5182c9 python3-xmlschema: Upgrade 4.2.0 -> 4.3.0
Upgrade to release 4.3.0:

- Add arguments validation for schemas and validation methods (by
  validation contexts)
- Add custom XPath parser for find/findall/iterfind APIs on schemas
  for match singleton sequence also if position is a number greater
  than 1 in predicate expression
- Improve build of XSD elements and groups, using a three-state
  built flag for components
- Extend and fix memory tests (Python 3.14+ seems to consume more
  memory)
- Drop support for Python 3.9 and add development support for
  Python 3.15

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Leon Anavi
26ef11eac6 python3-fsspec: Upgrade 2025.5.1 -> 2025.12.0
Upgrade to release 2025.12.0:

- fsspec.parquet to support filters and multiple files
- passing withdirs in aync _glob()
- fix _rm_file/_rm redirection in async
- allow arrowFile to be seekable
- add size attribute to arrowFile
- support py3.14 and drop 3.9
- avoid ruff warning

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Leon Anavi
bcfeba2a13 python3-typer: Upgrade 0.21.0 -> 0.21.1
Upgrade to release 0.21.1:

- Fix escaping in help text when rich is installed but not used.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:49 -08:00
Gyorgy Sarvari
3ee544e759 python3-twitter: mark CVE-2012-5825 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2012-5825

The Debian bugtracker[1] indicated that the issue is tracked by
upstream in github[2] (with a difference CVE ID, but same issue),
where the vulnerability was confirmed. Later in the same github issue
the solution is confirmed: the project switched to use the requests
library, which doesn't suffer from this vulnerability.

Due to this mark the CVE as patched.

[1]: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=692444
[2]: https://github.com/tweepy/tweepy/issues/279

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Gyorgy Sarvari
a5ee234b8c python3-uvicorn: mark CVE-2020-7694 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-7694

The vulnerability was reported to the project[1], and the commit[2] that
resolved the issue has been part of the project since version 0.11.7.

Mark the CVE as patched due to this.

[1]: https://github.com/Kludex/uvicorn/issues/723
[2]: 895807f94e

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Gyorgy Sarvari
93671dd613 python3-reportlab: mark CVE-2020-28463 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-28463

According to Debian[1] it has been fixed since version 3.5.55[2]
Mark is as patched.

[1]: https://security-tracker.debian.org/tracker/CVE-2020-28463
[2]: https://hg.reportlab.com/hg-public/reportlab/rev/7f2231703dc7

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:48 -08:00
Jiaying Song
baa3cc3df0 python3-aiohttp: upgrade 3.13.2 -> 3.13.3
Changelog:https://docs.aiohttp.org/en/stable/changes.html

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:47 -08:00
Wang Mingyu
38119992d8 python3-bleak: upgrade 2.0.0 -> 2.1.1
1. Changelog:
   https://github.com/hbldh/bleak/blob/v2.1.1/CHANGELOG.rst

2. Skip integration tests in ptest
   After upgrade to 2.1.1, a new test set integration was added.
   https://github.com/hbldh/bleak/tree/v2.1.1/tests/integration

   According to the description, the tests need kernel module hci_vhci,
   but hci_vhci is disabled in yocto, so skip these tests.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Gyorgy Sarvari
ba6468f7a0 python3-m2crypto: mark CVE-2020-25657 as patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2020-25657

The commit[1] that fixes the vulnerability has been part of the
package since version 0.39.0

[1]: 84c53958de

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Gyorgy Sarvari
b46a5452a1 python3-m2crypto: ignore CVE-2009-0127
Details: https://nvd.nist.gov/vuln/detail/CVE-2009-0127

The vulnerability is disputed[1] by upstream:
"There is no vulnerability in M2Crypto. Nowhere in the functions
are the return values of OpenSSL functions interpreted incorrectly.
The functions provide an interface to their users that may be
considered confusing, but is not incorrect, nor it is a vulnerability."

[1]: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-0127

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:45 -08:00
Wang Mingyu
7db6f31b0f python3-types-psutil: upgrade 7.1.1.20251122 -> 7.2.1.20251231
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
65ed8861f7 python3-pillow: upgrade 12.0.0 -> 12.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
1b8c883667 python3-nocaselist: upgrade 2.1.0 -> 2.2.0
Changelog:
 https://nocaselist.readthedocs.io/en/2.2.0/changes.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
6a9c1e9114 python3-nocasedict: upgrade 2.1.0 -> 2.2.0
Changelog:
 https://nocasedict.readthedocs.io/en/2.2.0/changes.html

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
9206e31273 python3-moteus: upgrade 0.3.96 -> 0.3.97
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Wang Mingyu
86cabd1603 python3-marshmallow: upgrade 4.1.2 -> 4.2.0
Changelog:
 many argument of Nested properly overrides schema instance value.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:44 -08:00
Gyorgy Sarvari
38eaab2241 python3-waitress: add ptest support
It takes <10s to execute.

Some (54) tests are not compatible with musl[1] - due to this the tests are on the problem-list.

Sample output snippet:

root@qemux86-64:~# ptest-runner
START: ptest-runner
2026-01-07T09:57
BEGIN: /usr/lib/python3-waitress/ptest
PASS: tests.test_adjustments.TestAdjustments.test_bad_port
PASS: tests.test_adjustments.TestAdjustments.test_badvar
PASS: tests.test_adjustments.TestAdjustments.test_default_listen
[...many lines...]
PASS: tests.test_wasyncore.Test_readwrite.test_socketerror_in_disconnected
PASS: tests.test_wasyncore.Test_readwrite.test_socketerror_not_in_disconnected
PASS: tests.test_wasyncore.Test_write.test_gardenpath
PASS: tests.test_wasyncore.Test_write.test_non_reraised
PASS: tests.test_wasyncore.Test_write.test_reraised

============================================================================
Testsuite summary
\# TOTAL: 783
\# PASS: 775
\# SKIP: 8
\# XFAIL: 0
\# FAIL: 0
\# XPASS: 0
\# ERROR: 0
DURATION: 7
END: /usr/lib/python3-waitress/ptest
2026-01-07T09:57
STOP: ptest-runner
TOTAL: 1 FAIL: 0

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-12 08:53:42 -08:00
Leon Anavi
b6ddf00e8c python3-termcolor: Upgrade 3.2.0 -> 3.3.0
Upgrade to release 3.3.0:

- Add support for italic
- can_colorize: Expect fileno() to raise OSError, as documented

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 09:09:29 -08:00
Leon Anavi
312155a7d6 python3-behave: Upgrade 1.3.2 -> 1.3.3
Upgrade to release 1.3.3:

- FIXED: Broke Python 2.7 support

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 09:09:29 -08:00
Leon Anavi
d2501971b2 python3-astroid: Upgrade 4.0.2 -> 4.0.3
Upgrade to release 4.0.3:

- Fix inference of IfExp (ternary expression) nodes to avoid
  prematurely narrowing results in the face of inference ambiguity.
- Fix base class inference for dataclasses using the PEP 695
  typing syntax.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 08:18:57 -08:00
Leon Anavi
5ff2ec190a python3-anyio: Upgrade 4.12.0 -> 4.12.1
Upgrade to release 4.12.1:

- Changed all functions currently raising the private
  NoCurrentAsyncBackend exception (since v4.12.0) to instead raise
  the public NoEventLoopError exception
- Fixed anyio.functools.lru_cache not working with instance methods

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 08:18:56 -08:00
Leon Anavi
7721e7a6fc python3-bumble: Upgrade 0.0.220.bb -> 0.0.221
Upgrade to release 0.0.221:

- Cancel l2cap connection result future on abort
- Implement extended advertising emulation
- Rust: Fix cargo-all-features to 1.11.0
- L2CAP Enhanced Retransmission mode
- Add some docs about Android and Hardware
- bump pdl dependencies versions
- android-netsim transport enhancements
- Upgrade GitHub Actions for Node 24 compatibility
- Upgrade GitHub Actions to latest versions
- GATT: fix redefinition of GATT_CONTENT_CONTROL_ID_CHARACTERISTIC
- Remove unused imports
- Fix missing type hints on Device.notify_subscribers()
- L2CAP: Enhanced Credit-based Flow Control Mode
- use ruff for linting and import sorting
- hot fix: remove unused import
- Ruff: Add and fix UP rules
- add support for multiple concurrent broadcasts
- Add EATT Support
- Fix some typos and annotations

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-07 08:18:56 -08:00
Leon Anavi
bc8066fd7f python3-fastapi: Upgrade 0.124.4 -> 0.128.0
Upgrade to release 0.128.0:

- Drop support for pydantic.v1
- Run performance tests only on Pydantic v2

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Leon Anavi
656bbf2c70 python3-networkx: Upgrade 3.6 -> 3.6.1
Upgrade to release 3.6.1:

API Changes

- Add spectral bipartition community finding and greedy bipartition
  using node swaps

Enhancements

- Nodelists for from_biadjacency_matrix
- Add spectral bipartition community finding and greedy bipartition
  using node swaps
- Fix draw_networkx_nodes with list node_shape and add regression
  test

Bug Fixes

- Fix: allow graph subclasses to have additional arguments

Documentation

- DOC: Improve benchmarking readme
- DOC: More details re: RC releases in the release process devdocs
- DOC: clarify difference between G.nodes/G.nodes() and
  G.edges/G.edges() in tutorial
- DOC: Add blurb to contributor guide about drawing tests
- DOC: Fix underline lens in docstrings
- Rolling back shortest paths links

Maintenance

- MAINT: Replace string literal with comment
- Bump actions/checkout from 5 to 6 in the actions group
- pin python 3.14 to be version 3.14.0 until dataclasses are fixed
- Blocklist Python 3.14.1

Other

- TST: add tests for unsupported graph types in MST algorithms
- TST: clean up isomorphism tests

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Leon Anavi
382e4de7d8 python3-brotli: Upgrade 1.1.0 -> 1.2.0
Upgrade to release 1.2.0:

SECURITY

- python: added Decompressor::can_accept_more_data method and optional
  output_buffer_limit argument Decompressor::process;
  that allows mitigation of unexpectedly large output;
  reported by Charles Chan (https://github.com/charleswhchan)

Added

- decoder/encoder: added static initialization to reduce binary size
- python: allow limiting decoder output (see SECURITY section)
- CLI: brcat alias; allow decoding concatenated brotli streams
- kt: pure Kotlin decoder
- cgo: support "raw" dictionaries
- build: Bazel modules

Removed

- java: dropped finalize() for native entities

Fixed

- java: in compress pass correct length to native encoder

Improved

- build: install man pages
- build: updated / fixed / refined Bazel buildfiles
- encoder: faster encoding
- cgo: link via pkg-config
- python: modernize extension / allow multi-phase module
  initialization

Changed

- decoder / encoder: static tables use "small" model (allows 2GiB+
  binaries)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Leon Anavi
768a039171 python3-parse-type: Upgrade 0.6.3 -> 0.6.6
Upgrade to release 0.6.6:

- Disable setuptools-scm: Too many side-effects

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-06 07:36:35 -08:00
Gyorgy Sarvari
c6ac2c467d python3-flask-cors: upgrade 4.0.0 -> 5.0.0
Contains fix for CVE-2024-6221 and CVE-2024-1681

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:19 -08:00
Gyorgy Sarvari
cbb4f9d4e0 python3-configobj: ignore CVE-2023-26112
Details: https://nvd.nist.gov/vuln/detail/CVE-2023-26112

The fix[1] is already included in the recipe version (5.0.9),
the CVE can be marked as patched.

[1]: 7c618b0bba

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-05 18:16:19 -08:00