Commit Graph

9849 Commits

Author SHA1 Message Date
Samuli Piippo fefec1cbe9 python3-cyclonedx-python-lib: add recipe
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard
that provides advanced supply chain capabilities for cyber risk
reduction.

This Python package provides data models, validators and more,
to help you create/render/read CycloneDX documents.

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:49 -07:00
Samuli Piippo 96ab7b827a python3-py-serializable: add recipe
This Pythonic library provides a framework for serializing/
deserializing Python classes to and from JSON and XML

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:49 -07:00
Samuli Piippo 6a01b25316 python3-packageurl-python: add recipe
Python library to parse and build “purl” aka. Package URLs.

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:49 -07:00
Wang Mingyu d2f999fcb8 python3-zopeinterface: upgrade 8.3 -> 8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:47 -07:00
Wang Mingyu 7c6a8fee4a python3-xxhash: upgrade 3.6.0 -> 3.7.0
Changelog:
==========
- Drop support for Python 3.7
- Build armv7l manylinux/musllinux wheels
- Build riscv64 manylinux/musllinux wheels
- Build android and ios wheels

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 2e12e283a0 python3-virtualenv: upgrade 21.2.1 -> 21.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 3331a61f7a python3-tzdata: upgrade 2026.1 -> 2026.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu ec49e5e385 python3-typer: upgrade 0.24.1 -> 0.25.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu ad0ddc93ce python3-tox: upgrade 4.52.1 -> 4.53.0
Changelog:
  eat(toml): allow bare range/labeled dicts in env_list

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 907e93c143 python3-simplejson: upgrade 3.20.2 -> 4.1.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 879a957545 python3-sentry-sdk: upgrade 2.57.0 -> 2.58.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu d89c21c4c9 python3-python-multipart: upgrade 0.0.26 -> 0.0.27
Changelog:
============
- Pass parse offsets via constructors
- Add multipart header limits

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu 61ea9a4780 python3-pytest-codspeed: upgrade 4.3.0 -> 4.4.0
Changelog:
===========
- fix: fix segfault caused by multiple activate_stack_trampoline
- fix: Exclude setup time from benchmark in walltime mode
- feat: collect Python toolchain information via instrument hooks environment API

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu d9598d46d1 python3-pyroute2: upgrade 0.9.5 -> 0.9.6
Changelog:
=============
- dhcp: call UNBOUND hook upon NAK
- ndb: support replacement policies for routes
- ndb: support localns setup and fix object cache
- iproute: fix set_netnsid() to be a coroutine
- ci: drop support for Python < 3.10

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu 4251956467 python3-pymongo: upgrade 4.16.0 -> 4.17.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu d50d1c4df2 python3-pymisp: upgrade 2.5.33.1 -> 2.5.33.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu 939f50c3d9 python3-pre-commit: upgrade 4.5.1 -> 4.6.0
Changelog:
============
- feature: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.
- fix: --hook-type is required

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 58e7fd13e6 python3-moteus: upgrade 0.3.100 -> 0.3.101
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 47664393cf python3-ipython: upgrade 9.12.0 -> 9.13.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu b9da653a2b python3-inline-snapshot: upgrade 0.32.6 -> 0.32.7
Changelog:
============
- Fixed snapshot comparison for dicts where keys are dataclass instances (or
  other custom objects used as dict keys), which previously caused corrupted
  snapshots - either collapsing multiple entries into one or appending duplicate
  keys on subsequent runs
- Fixed tuple snapshot updates to compare elements positionally rather than
  using sequence alignment, so existing expressions (e.g. 3 + 3) are preserved
  when elements are removed from or added to a tuple.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 521a48045d python3-identify: upgrade 2.6.18 -> 2.6.19
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu ada51454a2 python3-greenlet: upgrade 3.4.0 -> 3.5.0
Changelog:
  Remove the atexit callback.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 5f03b130d2 python3-flask-wtf: upgrade 1.2.2 -> 1.3.0
Changelog:
==========
- pre-commit autoupdate
- remove slsa provenance
- Support for Python 3.14
- Try not to read uploaded files into memory
- Migrate the project to uv
- ReCaptcha field testing mode documentation
- Allow nonce in reCaptcha
- CSRF meta tag helper
- widget support the kwargs to add custom html attributes
- Respect exempts in CSRFProtect.protect()
- Adding RECAPTCHA_ENABLE to disable recaptcha
- Improve CSRF Documentation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu 09fd8162c2 python3-flask-marshmallow: upgrade 1.4.0 -> 1.5.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu 59cb3f9a95 python3-filelock: upgrade 3.25.2 -> 3.29.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu a5e60deb3e python3-fastapi: upgrade 0.135.3 -> 0.136.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu ca0f537997 python3-faker: upgrade 40.13.0 -> 40.15.0
Changelog:
==========
- Add job providers for ar_DZ and fr_DZ locales (#2352).
- Add company providers for ar_DZ and fr_DZ locales (#2351).
- Add geo providers for ar_DZ and fr_DZ locales (#2350).
- Add currency providers for ar_DZ and fr_DZ locales (#2349).
- Add date_time provider for ar_DZ locale (#2348).
- Add ssn providers for ar_DZ and fr_DZ locales (#2347).
- v40.14.1 - 2026-04-17
- Fix UnicodeEncodeError in CLI docs on non-UTF consoles (#2362).
- v40.14.0 - 2026-04-17
- Fix: update placekitten URL to placekittens

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu 56ed987d2c python3-cmd2: upgrade 3.4.0 -> 3.5.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu f2cfc38402 python3-cmake: upgrade 4.3.1 -> 4.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Wang Mingyu 86b1436db1 python3-bumble: upgrade 0.0.226 -> 0.0.228
Changelog:
===========
- release command semaphore after timeout
- fix: add input validation to prevent remote crash from empty/malforme
- SDP: Fix wrong parameter size
- Hash and cache 128 bytes of UUID
- SDP: Migrate to dataclasses
- Make ConnectionPHY dataclass
- Add --locked to allow installing cargo-all-features
- Add read classic remote features support
- Fix Hive demo install failure
- Keys: Remove appdirs and improve typing
- Feature - Add SMP Debug Mode (Core Vol.3, Part H)
- Advertise in run_gatt_client_and_server

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Wang Mingyu 31174858d7 python3-asyncinotify: upgrade 4.4.2 -> 4.4.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Jiaying Song 1785028847 python3-blivet: switch from setuptools3_legacy to python_setuptools_build_meta
Upstream blivet 3.13.2 ships a pyproject.toml declaring
setuptools.build_meta as its PEP 517 build backend. Update the recipe to
use the correct build class to resolve the pep517-backend QA warning.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:36 -07:00
Zhang Xiao d389ed9e33 python3-aspectlib: Fix pytest compatibility
Partially backport upstream commit to fix pytest compatibility issue.

Fixes pytest errors e.g.
  | pytest.PytestRemovedIn9Warning: The (path: py.path.local) argument is deprecated, please use (collection_path: pathlib.Path)
  | see https://docs.pytest.org/en/latest/deprecations.html#py-path-local-arguments-for-hooks-replaced-with-pathlib-path
  | ERROR: Exit status is 1

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:36 -07:00
Bartosz Golaszewski 36d46e1871 python3-pyfuse3: Move to meta-python
Add a recipe for pyfuse3 - a python package providing high-level bindings
to libfuse3.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-23 07:48:11 -07:00
Gyorgy Sarvari 1be9c09e23 python3-pillow: upgrade 12.1.1 -> 12.2.0
Contains fix for CVE-2026-40192

License-update: Copyright holder's name is spelled out fully instead of using abbreviation.

Changelog: https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari 468ee626f8 python3-grpcio: ignore CVE-2026-33186
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33186

The vulnerability only affects the Go implememtation of the library,
not the Python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari aef8bc3422 protobuf, python3-protobuf: ignore CVE-2026-6409
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409

The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Haiqing Bai 4152a23426 pytesseract: replace deprecated md5sum with sha256sum
SRC_URI[md5sum] has been deprecated and replace it with
SRC_URI[sha256sum] for proper integrity verification.

Signed-off-by: Haiqing Bai <haiqing.bai@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:36 -07:00
Khem Raj 2b16c16389 packagegroup-meta-python: Enable python3-pyatspi conditional upon GI data
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Leon Anavi f34a878ee2 python3-moteus: Upgrade 0.3.99 -> 0.3.100
Upgrade to release 0.3.100:

- python: Fix compatibility with older python versions
- Add configurable faults for position or velocity tracking error
- Work around a linker warning with newer gcc
- tview: Suppress warnings about importing Axes3D
- moteus_gui: Include registernoop.py in our generated wheel
- Replace setup.py with pyproject.toml for Python package builds
- Use ::isfinite for Arduino compatibility
- Implement support for the RLS Orbis encoder over SPI

Fixes:

WARNING: python3-moteus-0.3.100-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with setuptools.build_meta,
use the correct class [pep517-backend]

License-Update: Use PKG-INFO

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:55 -07:00
Leon Anavi 50d807b18b python3-soupsieve: Upgrade 2.8.2 -> 2.8.3
Upgrade to release 2.8.3:

- FIX: Fix inefficient attribute pattern.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Leon Anavi b94206dc56 python3-huey: Upgrade 2.6.0 -> 3.0.0
Upgrade to release 3.0.0:

- Add chord() (map -> reduce) and group() (map) primitives.
- Add timeout (using SIGALRM for process and gevent.Timeout for
  greenlet) to control task running time. For threads, unfortunately,
  there's no good mechanism so instead APIs for cooperatively
  checking timeout are provided on the Task instance.
- Add simple fixed-window rate_limit() for tasks.
- Add Result.is_ready() method for checking result readiness.
- New option for low-latency result fetching, available for RedisHuey.
  To use, pass notify_result=True when initializing your Huey instance.
- Add new incr(key, amount=1) to storage API for atomic increment
  primitive. This is used by chord().
- Add new wait_result() method to storage APIs for efficiently waiting
  for a result to become ready. The default implementation uses the
  exponential backoff from the previous implementation of a blocking
  Result.get() - so no changes are needed. However if you have a custom
  storage implementation, this provides a mechanism for pub/sub or
  other notification of result readiness.
- Remove Python 2.x compatibility.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Leon Anavi 18a7b38f73 python3-uvicorn: Upgrade 0.42.0 -> 0.44.0
Upgrade to release 0.44.0:

- Implement websocket keepalive pings for websockets-sansio

From 0.43.0:

- Emit http.disconnect ASGI receive() event on server shutting down
  for streaming responses
- Use native context parameter for create_task on Python 3.11+
- Drop cast in ASGI types

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Liu Yiding 29305b3295 python3-mlcommons-loadgen: upgrade 5.1.2 -> 6.0.14
Update source-date-epoch.patch for 6.0.14

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 07:24:54 -07:00
Wang Mingyu 22854e60c4 python3-zopeinterface: upgrade 8.2 -> 8.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:36 -07:00
Wang Mingyu e0fc1b6d29 python3-virtualenv: upgrade 21.2.0 -> 21.2.1
Changelog:
===========
- Upgrade embedded pip/setuptools/wheel
- Enhance upgrade workflow: age check, dedup, issue tracking
- fix(create): use commonpath for correct path validation
- ci(workflows): add zizmor security auditing
- Add current and previous maintainers
- fix(ci): restore git credentials for release and upgrade jobs
- Fix broken Installation link in README
- fix: use terminal width for help formatting instead of hardcoded 240
- fix(nushell): surface actionable hint in deactivate error output
- ci: fix setup-uv warnings and drop brew@3.9
- fix(ci): fix pre-release push and release note generation
- fix(ci): check out repo in publish job for gh release notes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:36 -07:00
Wang Mingyu e8272fb33d python3-tox: upgrade 4.52.0 -> 4.52.1
Changelog:
==========
- use normalize_isa for architecture factor matching
- fix(pip): invalidate install cache on resolution env var changes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu bd948393d9 python3-soundcard: upgrade 0.4.5 -> 0.4.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu df1c485e18 python3-smbus2: upgrade 0.6.0 -> 0.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu 00ee8e3bff python3-rich: upgrade 14.3.3 -> 15.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00