Changelog:
==========
- Ignore malformed Host header when constructing request.url
- Use "application/octet-stream" as the FileResponse media type fallback
- Only dispatch standard HTTP verbs in HTTPEndpoint
- Reject absolute paths in StaticFiles.lookup_path
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
=============
- FIX: Fix another inefficient attribute pattern
- FIX: Limit total number of selectors processed in a pattern to prevent massive selector requests
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Added a dynamic-metadata provider compatible with scikit-build-core.
- Add support for git archive builds via a tracked .git_archival.txt file.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
============
* Added Spanish translation of the README (''README.es.rst'')
* When both 'content_type' and 'headers['content-type']' are in a response mock file,
'content_type' is now used.
* Added strict_match to urlencoded_params_matcher, enabling partial request parameter
matching.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Breaking changes
================
- Connection.ping() change the default to not reconnect and deprecate reconnect
argument. Create a new connection if you want to reconnect.
- Error classes in Cursor class are removed.
- connect() arguments db and passwd now emit DeprecationWarning. Use database
and password instead.
- Reorganize TLS connection behavior.
- PyMySQL uses TLS by default when server supports it. Use ssl_disabled=True to
prohibit SSL.
- When ssl_verify_cert=True, ssl_verify_identity=True, an ssl.SSLContext is
passed, or when any other SSL option is configured, the connection requires
SSL and raises OperationalError (CR_SSL_CONNECTION_ERROR) if the server doesn't
support it.
Other changes
==============
- Support MySQL 8 row/column alias syntax in executemany INSERT regex.
- Expose SQLSTATE on MySQL protocol exceptions without changing exception
formatting.
- Reject non-finite decimal.Decimal query parameters
- Connection.set_charset(charset) now emits DeprecationWarning.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
0001-fix-swig-avoid-clang-GNUC-pragma-block-before-_lib.h.patch
removed since it's included in 0.48.0
Changelog:
=============
- doc: another move this time to Codeberg (and communication to
Matrix)
- test(smime): parametrize test_write_pkcs7_der
- test(smime): fix test_signEncryptDecryptVerify
- fix(util): return bytes from passphrase callbacks
- fix(SSL.Checker): add IDN Chinese name
- test(ssl): add IDN certificate fixture coverage
- test(ssl): cover IDN hostname matching in Checker
- doc: update expected Name format in migration guide
- fix(smime): S/MIME signature verification for Outlook and Thunderbird
- fix(provider): handle OSSL_STORE_INFO_PUBKEY compat. for OpenSSL < 3.2
- fix: cast X509_dup in sk_X509_deep_copy to avoid type mismatch
- fix(smime): S/MIME signature verification for Outlook and Thunderbird
- fix(smime): remove obsolete Python pre-3.6 constructs
- ci: run on Codeberg with forgejo_runner
- doc: clarify the status of the project
- fix(provider): adjust the CI run on Gitea for the older OpenSSL on
Debian
- fix(evp): narrow digest and BIO pointers for mypy
- fix(init): acommodate modern packaging API
- doc: IRC channel is on Libera, Ergo was a wrong idea
- fix(tests): remove duplicate definition of IS_DEBIAN in test_ssl
- fix(test_bio_ssl): fix TLS 1.3 deadlock and add socket timeouts
- fix(test_bio_ssl): replace sys.exit() with self.fail() to prevent test
process crash
- ci: publish to PyPI with Sigstore attestations via Trusted Publishing
- fix(authcookie): handle CookieError from Python 3.13.12+
(CVE-2026-0672)
- ci(leap): use setup.py bdist_wheel to bypass old pip PEP 517 wrapper
- fix(util): replace is_32bit with struct.calcsize and update tests
- ci: add FreeBSD SourceHut CI build script
- fix(swig): avoid clang GNUC pragma block before _lib.h
- fix(provider): don't abuse TemporaryDirectory to be mkdtemp, use that
directly.
- fix(provider): gate provider APIs for OpenSSL 1.1.1
- feat(provider): add key generation and destruction methods
- docs(provider): add comprehensive documentation to Provider module
- fix(provider): better exception handling
- doc: add a simple AGENTS.md
- feat(engine): add availability check, lifecycle helpers, and safer
cleanup
- doc(engine): Improve documentation and example of using Engine module
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Fix Python 3.14 DeprecationWarning caused by implicit ctypes layout when
using pack = 1.
- Bundle libusb1 1.0.29 dlls in Windows wheels
- Fix a licence inconsistency: the old pypi classifier was refering to the
LGPL2+ instead of the LGPL2.1+ .
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Add preliminary support for Python 3.15b1.
- Fix the discrepancy in the way the two getcurrent APIs behave during greenlet teardown.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Build and publish Windows 11 ARM wheels.
- Add preliminary support for Python 3.15b1 and distribute binary wheels for it.
- Support for Python 3.10 will be ending soon. Support for PyPy will be ending soon.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update: Copyright year updated to 2026
Changelog:
===========
- Added license SPDX identifier to pyproject.toml
- Added official support for Python 3.14
- Fixed a bug with "return await"
- Moved decorator.py to a package structure ('decorator/__init__.py') and
added a stub file ('decorator/__init__.pyi')
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- Clear error on empty addr_infos in start_connection
- Stop verify_no_lingering_tasks from leaking an event loop
- Optimize obtaining event-loop down to 1 line
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update: Copyright year updated to 2026
Changelog:
Added SDLNet_TCP_OpenServer() and SDLNet_TCP_OpenClient()
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
- split role initialization from setting pragmas to allow more flexibility
for subclasses
- ensure consistent internal handling of Class::C3 vs mro
- reduced Exporter dependency to 0 (any version)
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
==========
* remove use of eval in globmapper. #73
* Update zipdetails to version 4.006.
* Fix typo in fastForward #72
* Fix issue with "rawdeflate` option in AnyInflate.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
License-Update: Copyright year updated to 2026
Changelog:
=============
* Added CTAP 2.3 support.
* Restrict webauthn.dll search paths; YSA-2026-01.
* Support application-managed PIN/UV Auth tokens; gh#806.
* Support 64-byte hmac-secret salts when using windows://hello.
* Fixed a U2F transaction handling bug when a timeout had been set; gh#917.
* Fixed a bug where stdin was closed on fido_nl_new failure; gh#923.
* fido2-token: new -G -t mode to to retrieve a PPUAT.
* fido2-token: new -I -t mode for deciphering encrypted fields.
* fido2-cred -M: support the -t toggle argument
* Improved documentation and examples.
* Removed tools from SDK packaging on Windows.
* New API calls
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
* Add ReadWritePaths=/dev/shm to systemd service for semaphore creation
under ProtectSystem=full sandboxing
* Fix privilege escalation via command socket (CVE-2026-41054)
* Check peer credentials before reading command (CVE-2026-41054)
* Handle failing opening of semaphore
* Fix /dev/shm permissions to use sticky bit
* Use chmod after mkdir to ensure correct /dev/shm permissions
* Update libtool: add lib64 search paths, remove dead code
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
===========
- The MinGW packages no longer have libgd-dependent components enabled.
- **Breaking**: The 'diffimg' utility has been removed.
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
QA Issue: inherits setuptools3 but has pyproject.toml with setuptools.build_meta, use the correct class [pep517-backend]
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
SDL2_net does not install SDL2_net.pc. Thus, libsdl2-net cannot package
the file. Fix this by applying an upstream patch.
Signed-off-by: Mark Jonas <toertel@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Wang Mingyu
Adam Duskett
Mark Jonas
Guocai He