Commit Graph

8957 Commits

Author SHA1 Message Date
Khem Raj
84ec93dbbc python3-orjson: Upgrade to 3.11.5
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-31 00:13:44 -08:00
Liu Yiding
785336405d python3-sqlalchemy: upgrade 2.0.45 -> 2.0.46
1.Changelog:
https://github.com/sqlalchemy/sqlalchemy/releases/tag/rel_2_0_46

2.LICENSE checksum has changed as Copyright year changed:
997cdf9cad

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-31 00:13:43 -08:00
Wang Mingyu
c8e0deb564 python3-ukkonen: upgrade 1.0.1 -> 1.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:09 -08:00
Wang Mingyu
702b08355b python3-python-multipart: upgrade 0.0.21 -> 0.0.22
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:09 -08:00
Wang Mingyu
ccc5fd9e78 python3-pytest-html: upgrade 4.1.1 -> 4.2.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:09 -08:00
Wang Mingyu
e86ca5c544 python3-multidict: upgrade 6.7.0 -> 6.7.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:09 -08:00
Wang Mingyu
9d39ccf76a python3-marshmallow: upgrade 4.2.0 -> 4.2.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:09 -08:00
Wang Mingyu
95e2afb5e0 python3-icecream: upgrade 2.1.9 -> 2.1.10
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:09 -08:00
Wang Mingyu
a0f8399ae6 python3-httplib2: upgrade 0.31.1 -> 0.31.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:08 -08:00
Wang Mingyu
38d438b403 python3-gunicorn: upgrade 23.0.0 -> 24.1.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:08 -08:00
Wang Mingyu
b9f1c502bd python3-greenlet: upgrade 3.3.0 -> 3.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:08 -08:00
Wang Mingyu
5e043092ac python3-elementpath: upgrade 5.1.0 -> 5.1.1
License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:08 -08:00
Wang Mingyu
b62af48a2d python3-dill: upgrade 0.4.0 -> 0.4.1
License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:08 -08:00
Wang Mingyu
b13522054b python3-coverage: upgrade 7.13.1 -> 7.13.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:08 -08:00
Wang Mingyu
23f7bc3344 python3-cachetools: upgrade 6.2.4 -> 6.2.5
Licensse-Update: copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:07 -08:00
Wang Mingyu
7ad9ca5fd8 python3-bandit: upgrade 1.9.2 -> 1.9.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:07 -08:00
Leon Anavi
112b473a7f python3-path: Upgrade 17.1.0 -> 17.1.1
Upgrade to release 17.1.1:

- Feed the hobgoblins (delint)
- Supply the types, irrespective of platform
- Ignore the arg type

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:05 -08:00
Leon Anavi
71285e9807 python3-jmespath: Upgrade 1.0.1 -> 1.1.0
Upgrade to release 1.1.0:

- Fix concurrency issue with cache
- Added support for Python 3.12-3.14
- Removed support for Python 3.7-3.8

License-Update: Use file LICENSE

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:05 -08:00
Leon Anavi
48dd13d374 python3-pandas: Upgrade 2.2.3 -> 3.0.0
Upgrade to release 3.0.0:

- Dedicated string data type by default
- Consistent copy/view behaviour with Copy-on-Write (CoW) (a.k.a.
  getting rid of the SettingWithCopyWarning)
- New default resolution for datetime-like data
- Initial support for the new pd.col syntax

License-Update: Update license year to 2026

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-30 23:59:04 -08:00
Trevor Gamblin
6d9c1d30e7 python3-geojson: fix build with python 3.14
Backport parts of an upstream PR that enables 3.14 in setup.py.

ptests look OK:

|============================================================================
|Testsuite summary
|# TOTAL: 68
|# PASS: 68
|# SKIP: 0
|# XFAIL: 0
|# FAIL: 0
|# XPASS: 0
|# ERROR: 0
|DURATION: 0
|END: /usr/lib/python3-geojson/ptest
|2026-01-23T18:03
|STOP: ptest-runner
|TOTAL: 1 FAIL: 0

Signed-off-by: Trevor Gamblin <tgamblin@baylibre.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-27 11:58:28 -08:00
Leon Anavi
fb974db2c4 python3-pydantic: Upgrade 2.12.4 -> 2.12.5
Upgrade to release 2.12.5:

- Fix pickle error when using model_construct() on a model with
  MISSING as a default value
- Several updates to the documentation

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-27 11:58:27 -08:00
Leon Anavi
5d40ca9cdf python3-reportlab: Upgrade 4.4.5 -> 4.4.9
Upgrade to release 4.4.9:

- Remove unwanted debug

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-27 11:58:27 -08:00
Wang Mingyu
68a249df75 python3-xmlschema: upgrade 4.3.0 -> 4.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:03 -08:00
Wang Mingyu
e288070514 python3-types-psutil: upgrade 7.2.1.20251231 -> 7.2.1.20260116
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu
fa3ce8c42a python3-starlette: upgrade 0.51.0 -> 0.52.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu
f84f881351 python3-soupsieve: upgrade 2.8.1 -> 2.8.2
License-Update: Copyright year updted to 2026.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu
b9bd8426db python3-regex: upgrade 2025.11.3 -> 2026.1.15
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu
65c850da4f python3-pymisp: upgrade 2.5.17 -> 2.5.32
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu
0ee36e8e5a python3-py7zr: upgrade 1.1.0 -> 1.1.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:02 -08:00
Wang Mingyu
a462432b6a python3-protobuf: upgrade 6.33.2 -> 6.33.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu
2a8b4c695e python3-moteus: upgrade 0.3.97 -> 0.3.98
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu
da80db34b6 python3-identify: upgrade 2.6.15 -> 2.6.16
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu
2746a0ad19 python3-httplib2: upgrade 0.31.0 -> 0.31.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Wang Mingyu
70b10d77bb python3-alembic: upgrade 1.18.0 -> 1.18.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-22 22:01:01 -08:00
Leon Anavi
7476295bea python3-wsproto: Upgrade 1.2.0 -> 1.3.2
Upgrade to release 1.3.2:

- Fix type hints to allow BytesMessage to accept bytes again, as
  well as bytearray.

Release 1.3.1:

- Add additional license identifier to pyproject.toml.
- Use Python 3.13 to build the docs to match ReadTheDocs build
  environment.

Release 1.3.0:

- Require h11>=0.16 dependency.
- Fix "Upgrade" header value to match RFC.
- Add reason "Switching Protocols" to handshake response.
- Add docs for wsproto.Connection
- Add support for Python 3.12, 3.13, and 3.14.
- Drop support for Python 3.7, 3.8, and 3.9.
- Improve Python typing, specifically bytes vs. bytearray.
- Various linting, styling, and packaging improvements.

Fixes:

WARNING: python3-wsproto-1.3.2-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with
setuptools.build_meta, use the correct class [pep517-backend]

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:31:08 -08:00
Leon Anavi
a25b352d19 python3-pyperclip: Upgrade 1.9.0 -> 1.11.0
Upgrade to release 1.11.0:

- Mention Wayland in error message
- Update __init__.py

License-Update: Use LICENSE.txt

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:31:07 -08:00
Leon Anavi
61f918dbbf python3-bumble: Upgrade 0.0.221 -> 0.0.223
Upgrade to release 0.0.223:

- Add annotation for Heart Rate and Battery Service
- Add test for Heart Rate and Battery Service
- Add support for RTL8761CU
- feat: Add filtering options for usb probe
- Fix GATT TemplateSerivce annotations
- Improve Address type annotations
- Replace send_pdu() with write()
- GATT: Support Multiple Requests
- Correct ATT_MTU in enhanced bearers
- Add HCI Packets annotations and send_sco_sdu
- Return 'invalid handle' for malformed read by type request

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-21 15:31:07 -08:00
Khem Raj
d2539548d0 python3-backports-zstd: Delete
It conflicts with standard library with python 3.14+

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:44:21 -08:00
Leon Anavi
36d480b9e1 python3-icecream: Upgrade 2.1.8 -> 2.1.9
Upgrade to release 2.1.9:

- Removed support for Python 3.8.
- Fixed issues to improve lists output.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:14 -08:00
Leon Anavi
6c439b75a9 python3-tomlkit: Upgrade 0.13.3 -> 0.14.0
Upgrade to release 0.14.0:

- fix: Add DottedKey to a super table gives wrong output
- feat: enhance custom encoders to accept _parent and _sort_keys
  parameters

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:14 -08:00
Leon Anavi
e102cccecf python3-pynacl: Upgrade 1.5.0 -> 1.6.2
Upgrade to release 1.6.2:

- Updated libsodium to 1.0.20-stable (2025-12-31 build) to resolve
  CVE-2025-69277.

From 1.6.1:

- The MAKE environment variable can now be used to specify the make
  binary that should be used in the build process.

From 1.6.0:

- BACKWARDS INCOMPATIBLE: Removed support for Python 3.6 and 3.7.
- Added support for the low level AEAD AES bindings.
- Added support for crypto_core_ed25519_from_uniform.
- Update libsodium to 1.0.20-stable (2025-08-27 build).
- Added support for free-threaded Python 3.14.
- Added support for Windows on ARM wheels.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:14 -08:00
Khem Raj
4350c04949 python3-html5lib: Fix build with python 3.14
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari
498b49d2a4 python3-lief: mark CVE-2025-15504 patched
Details: https://nvd.nist.gov/vuln/detail/CVE-2025-15504

The vulnerability is patched in v0.17.2, however NVD is currently tracking
the CVE without any version info (or more like with out any CPE info)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari
cc4aa9b9d0 python3-lief: upgrade 0.17.1 -> 0.17.2
Contains fix for CVE-2025-15504

Changelog:
- Differentiate Mach-O FAT magic bytes and Java class
- Fix MinGW compilation for some configuration
- Fix alignment issue when rebuilding PE relocations
- Fix infinite loop when processing v2 dynamic relocation
- Ensure that added DYN ELF sections are properly aligned
- Fix GnuHash null dereference
- Fix strong performance issue when parsing certain Mach-O

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari
91f6b85b36 python3-py: ignore CVE-2022-42969
Details: https://nvd.nist.gov/vuln/detail/CVE-2022-42969

Upstream could not reproduce the issue.
The vulnerability has currently the "disputed" flag in the NVD database,
and Github has revoked their related advisory[1].

Ignore this CVE due to this.

[1]: https://github.com/advisories/GHSA-w596-4wvx-j9j6

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:13 -08:00
Gyorgy Sarvari
ecf359d256 python3-werkzeug: upgrade 3.1.4 -> 3.1.5
Contains fix for CVE-2026-21860

Changelog:
- safe_join on Windows does not allow more special device names,
  regardless of extension or surrounding spaces.
- The multipart form parser handles a \r\n sequence at a chunk boundary.
  This fixes the previous attempt, which caused incorrect content lengths.
- Fix AttributeError when initializing DebuggedApplication with pin_security=False.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Tero Kinnunen
43dbdb9c57 python3-watchdog: Remove obsolete dependencies
Python watchdog has removed all dependencies except optional `pyyaml`
dependency for `watchmedo` utility, like follows [1]:

* pathtools dependency was removed in 1.0.0
* python-argh dependency removed in 2.1.6
* requests was never a dependency
* pyyaml only needed for extras (`watchmedo`) and may not be strictly necessary

[1] https://github.com/gorakhargosh/watchdog/blob/master/changelog.rst

Signed-off-by: Tero Kinnunen <tero.kinnunen@vaisala.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Leon Anavi
cc0c4a6e34 python3-black: Upgrade 25.12.0 -> 26.1.0
Upgrade to release 26.1.0:

Introduces the 2026 stable style, stabilizing the following changes:

- always_one_newline_after_import: Always force one blank line after
  import statements, except when the line after the import is a
  comment or an import statement
- fix_fmt_skip_in_one_liners: Fix # fmt: skip behavior on one-liner
  declarations, such as def foo(): return "mock" # fmt: skip, where
  previously the declaration would have been incorrectly collapsed
- fix_module_docstring_detection: Fix module docstrings being
  treated as normal strings if preceded by comments
- fix_type_expansion_split: Fix type expansions split in generic
  functions
- multiline_string_handling: Make expressions involving multiline
  strings more compact
- normalize_cr_newlines: Add \r style newlines to the potential
  newlines to normalize file newlines both from and to
- remove_parens_around_except_types: Remove parentheses around
  multiple exception types in except and except* without as
- remove_parens_from_assignment_lhs: Remove unnecessary parentheses
  from the left-hand side of assignments while preserving magic
  trailing commas and intentional multiline formatting
- standardize_type_comments: Format type comments which have zero
  or more spaces between # and type: or between type: and value to
  # type: (value)

The following change was not in any previous stable release:

- Regenerated the _width_table.py and added tests for the Khmer
  language

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:12 -08:00
Leon Anavi
65a66a5dde python3-pytokens: Add recipe
Add pytokens release 0.4.0:

- Various packaging and dev improvements
- Just avoid using uv
- Move setup.cfg to pyproject.toml
- Use mypyc for compilation

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:11 -08:00
Gyorgy Sarvari
b2766ba3ce python3-django: add recipe for version 6.0.1
New, non-LTS version.

Release notes: https://github.com/django/django/blob/main/docs/releases/6.0.txt

New features in a nutshell:
- Content Security Policy support
- Template Partials
- Background Tasks
- Adoption of Python's modern email API

Ptest summary:
Ran 18643 tests in 164.287s
OK (skipped=1404, expected failures=5)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-01-20 08:27:11 -08:00