License-Update: Copyright year updated to 2026
Changelog:
===========
- Speed-up translation on aarch64
- Fix invalid data successfully decoded when using altchars (slice ends with padding)
- Fix thread safety selecting codec
- Add padded and wrapcol parameters to b64encode
- Add padded parameter to urlsafe_b64encode
- Add padded parameter to b64decode & urlsafe_b64decode
- urlsafe_b64decode now defaults to padded=False to align with Python 3.15 behavior
- Add ignorechars and canonical parameters to b64decode
- Handle excess padding with the same behavior as CPython 3.15
- Reject non-ASCII strings in b64decode when validate=False
- Deprecate accepting the + and / characters with an alternative alphabet when decoding
- Use ValueError instead of AssertionError on altchars length validation
- Add SBOM to PyPI wheels
- Publish python 3.15 wheels
- Drop python 3.8 support
- Stop publishing python 3.13t wheels
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* added support for an additional AIS Application Specific Message (Message Type 8)
* US environmental reports (DAC = 367 FID = 33)
* significantly improved decoding performance
* optimized AIS payload decoding using a base64-backed bit unpacker
* reduced NMEA parsing overhead through caching and parser optimizations
* improved enum lookup performance
* added support for additional AIS Application Specific Messages (Message Type 8)
* environmental reports (DAC = 1 FID = 26)
* area notices (DAC = 1 FID = 22/23)
* route information (DAC = 1 FID = 27/28)
* VTS and synthetic target reports
* added new enums for SOLAS equipment status and vessel ice class
* improved support for decoding application-specific AIS payloads
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- docs: wrap Chat-80 HOWTO output
- Sandbox Stanford JAR execution to nltk_data directories
- Harden path-traversal / file-I/O sandbox: close write-side symlink TOCTOU +
shared-temp squat, lock the cluster with a living audit (CWE-22/59/377)
- Extend algorithmic-complexity DoS hardening: repo-wide sweep + two-string
distances (CWE-407/CWE-400)
- Bound unbounded-work DoS in parsers and grammar transforms (CWE-407/674/835)
- fix(security): sandbox MaltParser's Java execution (CVE-2026-12252,
CVE-2026-12841)
- fix(security): trust the system temp dir only when it is private
(CWE-377/CWE-378)
- fix(security): validate corpus-reader roots against the data sandbox (CWE-73)
- fix(security): validate per-call java() options and replace the -XX:/-D
allowlist with a minimal one (CWE-88)
- Additional security hardening (CWE-407, CWE-426, CWE-427, CWE-502, CWE-59,
CWE-776, CWE-918)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
- Improve hall effect calibration
Fine calibration of hall transition point within the electrical cycle
Sweep through 3 electrical cycles in forward and reverse direction
If a hall sensor transition happens to be right on a sample point and oscillates, do something reasonable
- Support firmware ABI 1.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- If by_value is enabled on an enum with a None value allow_none now defaults to True.
- marshmallow.validate.URL accepts a fragment that follows an empty path
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- defer unavailable ENGINE constant lookup
- fixes problematic behaviour of pkcs11-provider
- support TLS 1.0 contexts with modern OpenSSL
- use Python 3 C APIs in handwritten SWIG code
- feat: Add AES-GCM (AEAD) support to M2Crypto
- remove Black configuration from setup.cfg
- release X509V3 config with its context
- keep IOBuffer chains alive until destruction
- test: free low-level OpenSSL objects in leak tests
- avoid leaking X509V3 extension config
- free RSA exponent on modulus conversion failure
- free replaced EVP digest contexts
- wrap created X509 name entries with ownership
- own ASN1 values created from Python data
- own PKCS7 certificate stack copies
- release BIOs on explicit close
- Add AuthorityKeyIdentifier extension support
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
- fix: define datetime resolution attribute
- Adapt to Ruff v0.16 defaults
- fix: preserve instance locale in datetime.astimezone()
- fix(datetime.dst): pass Gregorian to tzinfo.dst()
- typing: use int for fold
- Fix %I/%-I strftime directives to use the 12-hour clock
- Fix Windows Persian locale test
- Add pyright type checking to CI workflow
- Fix Windows test failure for %-I strftime
- migrate tests to pytest
- Add date.strptime and match stdlib subclass behavior
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Prevented --inline-snapshot=trim from changing snapshots when a test body
fails or pytest is limited with -k, a test path, or a test node ID. Skipped
tests and fixture teardown errors do not prevent trimming. A message now
explains why trimming was disabled when it was requested implicitly. An
explicit --inline-snapshot=trim overrides this safeguard.
- Fixed a crash during session finalization when pytest's capture plugin is
disabled.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Forward the Django database OPTIONS when setting up the stats recorder
connection.
- Remove accidental sqlite3 access at module scope,
- Use DoubleField for the stats ts, duration and started columns. On PG & MySQL
the old FloatField was a 32-bit-shitter which lost a lot of seconds of
precision. Existing PG/MySQL tables will need to run the SQL below to migrate
OR just drop the tables and allow them to be rebuilt next run. SQLite was not
affected.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
=============
- Add support for running on WebAssembly / Emscripten via Pyodide, using a
JavaScript fetch-based transport defined in httpx2-jsfetch.
- Add max_event_size to cap SSE event buffering.
- Add RFC 9110 status code constants.
- Add support for Python 3.15.
- Improve SSE chunk buffering performance.
- Skip cookie extraction for responses without Set-Cookie headers.
- Return str | None instead of Any from Headers.get.
- Enforce the WebSocket max message size across fragmented messages.
- Ignore unsolicited and duplicate WebSocket Pong frames.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Link the C++ runtime statically into the Windows wheels again, as the
Appveyor builds did through 3.3.0. Since 3.3.1 _greenlet.pyd imported
MSVCP140.dll, which no Windows CPython distribution ships, so importing
greenlet failed on machines without the Visual C++ redistributable.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
* Fixed wrong results of anyOf, oneOf, not, if/then/else, contains and propertyNames when 'fast_fail' is off
* Fixed collecting errors from subschemas behind '$ref' when 'fast_fail' is off
* Fixed escaping property name in boolean 'dependencies' validation (prevents schema-controlled code injection)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- Fix: in the HTML report, a source file name containing a double quote (legal
on POSIX) wasn't escaped where it's dropped into the href of the index and
prev/next links, so it could close the attribute early and inject markup. Page
URLs are now escaped.
- Fix: the LCOV report wrote file names and other fields into its line-oriented
records without neutralizing control characters. A measured file whose name
contained a newline (legal on POSIX) could forge extra records, inflating the
coverage seen by tools that read the report. Control characters in a field are
now replaced.
- Wheels are now provided for Python 3.15.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* move internal tests for 'util._Random' class into 'devel/test_random.py'
* add debug-mode introspection and tests for 'decodetree' structure
* fix 'util.pprint()' for very narrow output widths
* substantially simplify 'util.ba2int()' and 'util.int2ba()'
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
- fix READNU32 by casting to uint32_t
- filter out non printable characters in description for lease file
- check for the return value of snprintf() : overflow or error
- nftables: Avoid building too long rule with nftnl_rule_nlmsg_build_payload() by triming description to 256 chars.
- HTTPS: Do not abort on SSL errors
- Fix heap overflow in PinholeVerification()
- Free resources on start error
- print usage on stdout or stderr depending on command line
- increase maximum description length when possible (netfilter/nftables)
- fix nfqueue code
- Re-enable port forwarding properly (broken in 2.3.10)
- Fix PCP option size parsing
- Allow using ip/mask when IPv6 is compiled but disabled
- use a 8kB buffer for Netlink as recommended
- fix URL parsing in upnpevents.c
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- A new tsm_screen_get_cursor_style() interface is available, that provides the current style of the cursor.
- screen/vte: add cursor style support via DECSCUSR (CSI Ps SP q)
- Fix backward selection
- Fix also clear the character value for multi-width character.
- screen: don't clear cells when resizing
- libtsm: fix tsm_screen_attr2_t
- Fix 3 out of bound reads
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
=========
* Note incorrect field name 'min_rate' should be called 'max_rate'.
* Apply timeout in MMC command on GNU/Linux
* Fix no MMC data returned when buffer size is divisible by 256 (skr4n).
* Deprecate obscure MMC set length macros
* In eject programs on GNU/Linux, cdio_open needs access mode RDWR.
* More ISO field validation in RockRidge
* Validate bounds in disk images reading
* Validate UDF File Identifier Descriptor bounds
* Change references from MMC-5 to MMC-6 Draft 2g when possible.
* At URLS for MMC6 Draft 2g and SPC-3.
* Administrivia: Error when help2man not found in maintainer mode. Otherwise warn, and tolerate builds without help2man.
* Correct the way MMC CDB allocation length values are set
* Correct XA attribute flags
- Add '*SYS' values of the XA attribute flags to represent the other/world user mode bits.
- Fix it to use the '*OTH' values instead.
* Use thread locals in recursion check to allow multi-threaded use
* Correct macOS workflows
* Fix '-Wdiscarded-qualifiers' warnings
* Fix 'udf_read_block' docs; count blocks, not bytes
* Go over grammar and spelling in docs.
* Go over doxygen formatting. (More should be done though).
* start to use clang-format to format C files.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
=============
- soapysdr would not compile static.
- Some python2 APIs were converted to Python 3 for SWIG 4.5.0 compatibility.
- An ssh compatibility mode was added to gtlssh. This deals with how parameters
are parsed. If you invoke it as gsh, parameters are parsed as ssh does. If
invoked as gtlssh, they are parsed like gtlssh does (which is arguably more
sane). There is also a parameter to do this. This helps when using it with git
and rsync and such. This is described in the gtlssh man page.
- In the fsk (afskmdm) gensio, low sample rates were broken because the gain
was not set properly in the FIR filter implementation.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- avx512 support is now more extensively checked at runtime, fixes for macOS
exported symbols and library version, initial WASM support.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Wang Mingyu
Ankur Tyagi