Upgrade to release 7.17.1:
- Fix: a one-line class or function body immediately followed by
another statement (such as class Foo: ... on its own line) was
incorrectly reported as a missing branch when using the
sys.monitoring core. This is now fixed.
- Fix: the HTML report only rewrites a file's page when the file or
its data has changed, but each page also links to the previous
and next files. When the set of reported files changed, unchanged
pages kept their old links. For example, with skip_covered, a
file that became 100% covered had its page deleted, but the pages
next to it still linked to it. Now a page is also rewritten when
its neighbors change.
- Fix: --fail-under now uses at least the decimal precision of the
threshold for both the comparison and failure message. With
precision=0, a total of 0.4 now passes --fail-under=0.3 and fails
--fail-under=0.5 with the message "total of 0.4 is less than
fail-under=0.5". Previously, the comparison rounded the total to
zero and the message could claim "1 is less than 0".
- Fix: the HTML report escaped file names twice, so a name with &,
<, or quotes in it was shown with entities like &. Now they
are properly escaped only once.
- Fix: --source=/ measured no files. A file system root can't be a
source directory, so now it is an error.
- In an abundance of caution, prevent forged SQLite journal files
from deleting files they shouldn't.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 4.4.1:
- Size the relay test's payload from the pipe capacity
- Publish releases from GitHub Actions with PyPI provenance
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 26.11.1:
- Security: parse the HTTP headers of the WebSocket opening
handshake strictly (RFC 9112, RFC 9110). The header block was
split with str.splitlines(), which also splits on VT, FF, FS, GS,
RS, NEL and on a bare CR or LF, so a peer could make autobahn see
header lines that a front proxy treats as part of a header value,
for example an X-Forwarded-For used with trustXForwardedFor.
Lines are now separated by CRLF only. ⚠ behaviour change — a
header block with a bare CR or LF, obs-fold, whitespace before
the colon, an invalid header name, a header line without a colon
(was skipped), or a control character in a header value or the
status line is rejected: the server fails the handshake with HTTP
400, the client fails the handshake or the proxy CONNECT. A bare
LF is rejected deliberately, although RFC 9112 allows accepting
it as a line end. obs-text (0x80-0xFF) in header values is still
allowed, and header values are trimmed of SP and HTAB only. This
fixes advisory GHSA-2gqc-mwv3-66rp
- Security: raise the floors of the compress extra (and so all)
to brotli>=1.2.1 (CPython) and brotlicffi>=1.2.1.0 (PyPy), the
releases with the fix for CVE-2026-111497, an out-of-bounds write
in the brotli decoder that permits remote code execution.
permessage-brotli decodes data sent by the WebSocket peer; it is
not used unless an application offers or accepts it. The brotli
1.0.10 and 1.1.1 backports of the fix are not enough, since the
permessage-brotli receive path needs the decompression limit of
brotli 1.2. New tests check the declared floors and the installed
version
- Add tests for the HTTP header parsing of the WebSocket opening
handshake, on the server, the client and the explicit proxy
CONNECT, run on Twisted and asyncio
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 6.10.1:
- Recognize trace operations defined in view docstrings, instead
of silently dropping them
- Fix intersect OneOf and Equal choices in field2choices
- Drop support for marshmallow 3, which is EOL
- Drop support for Python 3.10
- Test against Python 3.15
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Tries to call sphinx-build during clean in docs directory and fails when
not installed on host nor included in HOSTTOOLS
Fixes do_configure failure when re-executed in existing WORKDIR
...
rm -f ./*.gcov
make[2]: Entering directory '/OE/tmp/work/x86_64-linux/ctags-native/6.2.20261011.0/sources/ctags-6.2.20261011.0/docs'
/bin/sh: 1: sphinx-build: not found
make[2]: Leaving directory '/OE/tmp/work/x86_64-linux/ctags-native/6.2.20261011.0/sources/ctags-6.2.20261011.0/docs'
make[2]: *** [Makefile:20: clean] Error 127
make[1]: *** [Makefile:8218: clean-local] Error 2
make[1]: Leaving directory '/OE/tmp/work/x86_64-linux/ctags-native/6.2.20261011.0/sources/ctags-6.2.20261011.0'
make: *** [Makefile:7175: clean-recursive] Error 1
ERROR: oe_runmake failed
WARNING: exit code 1 from a shell command.
The issue was introduced in p6.2.20260802.0 version with:
https://github.com/universal-ctags/ctags/commit/05a8061a581f626deada11da5300822bee20e458
which replaced "rm -rf $(BUILDDIR) $(EXTDIR)/__pycache__" in clean with
sphinx-build clean:
@$(SPHINXBUILD) -M $@ "$(SOURCEDIR)" "$(BUILDDIR)" $(SPHINXOPTS) $(O)
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The test is parametrized over gateway types; it imports "remote" from
its tmp_path and then deletes that directory, but the module stays in
sys.modules. Every run after the first got the stale module back and
failed with "OSError: could not get source code". Drop the cached
module before importing it.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
1.7.5 replaced py.process.ForkedFunc with multiprocessing, so swap the
python3-py runtime dependency for python3-multiprocessing. The sdist is
now named pytest_forked, the pypi class default, so drop
PYPI_PACKAGE_SDIST.
Backport the pending upstream fix for pytest 9.2, where TestReport
carries a NodeId object in _id that marshal cannot serialize; every
forked test crashed with "ValueError: unmarshallable object". This made
python3-starlette ptests report no results at all; all of them pass
now on qemux86-64.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The project dropped setup.py, switch to python_setuptools_build_meta.
The sdist is now named pytest_benchmark, which is the pypi class
default, so drop PYPI_PACKAGE_SDIST. License checksum change is due
to the copyright year update.
5.1.0 broke every test with pytest 9.2 and Python 3.14:
AttributeError: 'Function' object has no attribute '_nodeid'
PendingDeprecationWarning: FileType is deprecated.
which made ptests fail in python3-pint, python3-fastjsonschema,
python3-portion, python3-tblib, python3-construct and
python3-pydantic-core. These now all pass on qemux86-64.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
4.2.9 needs hatch-fancy-pypi-readme as a build backend plugin, add
it to DEPENDS.
This also fixes ptest failures seen with 4.2.4, e.g.
test_post_open_failure_closes_fd[fstat] and the soft lock
lease/stale tests; all ptests pass now on qemux86-64.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This includes fix for CVE-2026-114550.
Added a patch for reproducibility issue from this release.
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This is a bug-fix release addressing a couple more build issues after the
conversion to meson. Not really necessary for meta-openembedded but
let's upgrade for consistency with upstream.
Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
The generated softhsm2.conf only sets directories.tokendir and
objectstore.backend. SoftHSM warns about every other key it falls back to
the default for, and it logs through syslog(), so every process loading
the module during a build (rauc, extract-cert, ...) puts three
"Missing ... in configuration" lines into the build host's journal.
Set log.level, slots.removable and slots.mechanisms explicitly. The latter
two keep their defaults; log.level = ERROR keeps SoftHSM's INFO/WARNING
chatter out of the host journal while errors are still logged.
Assisted-by: Claude:claude-opus-5-5
Signed-off-by: Johannes Schneider <johannes.schneider@leica-geosystems.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 2026.10:
- meson: Disable tests build by default
- Define attr dependency
- Test if merged overlay is usable after mounting
- Remove trusted xattrs from upperdir metacopies before copying
attributes
- Add Option To Use rsync for merge Operation
- Support merge metacopy file
Since version 2026.10, meson.build wraps the tests build in
"if get_option('tests')", so the tests are disabled by default and
do_configure:prepend is no longer needed. Keeping it also breaks
the build with:
ERROR: Expecting endif got eof.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 2026.09.22:
- generic: test bdev freeze count leak on nested thaw
- btrfs/255: add _cleanup function to kill the balance stress
process
- common/btrfs: exercise all algorithms in _btrfs_stress_defrag()
- common/btrfs: exercise all algorithms in
_btrfs_stress_remount_compress()
- btrfs: test that we don't create pointless compressed inline
extents
- overlay/081: add missing _require_scratch check
- btrfs/273: add missing _require_scratch check
- common/btrfs: require scratch before checking encoded reads
- f2fs/015,016: add missing _require_scratch checks
- generic/590,735,795: add missing _require_scratch check
- common: strip attr 2.6.0 --restore safety warnings
- generic/760: enable sub-block reads
- generic/263: enable sub-block reads
- generic/091: enable sub-block reads
- min_dio_alignment: add a -r option to query read alignment
- statx.h: update to latest kernel UAPI
- generic: test corruption detection using T10 protection
information
- generic: test I/O on devices with T10 protection information
- add a "pi" group
- common: add a _sysfs_block_integrity_path helper
- common: factor out a _bdev_disk_name helper
- common/scsi_debug: don't slow down I/O
- f2fs/009: fix race condition in orphan inode test
- common/rc: remove trailing space from _mread() default map_len
- common: fix spelling of SCRATCH_DEV_POOL
- f2fs/024: add missing execute permission
Upgrade to v2026.09.22, not v2026.10.15 because the latter's
commits are still on branch for-next and have not yet merged to
branch master.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
OpenSSL 4.1 deprecates ASN1_STRING_length(), which the OpenSSL 4 ASN1
opaque fix uses, and the build uses -Werror:
openssl_helper.c:1255:21: error: 'ASN1_STRING_length' is deprecated:
Since OpenSSL 4.1; use ASN1_STRING_get_length() [-Werror,-Wdeprecated-declarations]
Use ASN1_STRING_get_length() when building against OpenSSL 4.1 or newer.
AI-Generated: Uses Claude Code
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
tests/test_sequence_docs.py executes the code examples embedded in
docs/usage.rst, resolved relative to the tests directory. The file was
not installed, so all 26 tests in it failed with:
FileNotFoundError: [Errno 2] No such file or directory:
'/usr/lib/python3-cbor2/ptest/docs/usage.rst'
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Regenerate python3-cbor2-crates.inc to match the bundled Cargo.lock.
The previous crates list was stale (bigdecimal 0.4.10 vs 0.4.11 locked),
which made cargo metadata fail in do_compile with:
failed to select a version for the requirement `bigdecimal = "^0.4.10"`
(locked to 0.4.11)
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2.112 2019-12-13
- Added the change log from any prior source that could be found. Formatted
the log to fit metacpan.org loose standards.
- Added .mailmap to correctly attribute all commits to Dianne Skoll when
using: git shortlog -s -e
- Added .gitattributes and .gitignore to assist with keeping the repo clean
- Change use vars qw() to our $whatever instead. 'our'
- Hide IO::WrapTie subclasses from PAUSE
- Rebuild Makefile.PL to contain all of the prerequisites. Make use of the
stub from Dist::Zilla
- Convert README to README.md
- Fix the documentation in the main module, IO::Stringy to better indicate
where to get info and how to use the module
- Fix the dist's META information to indicate the original author and license
- Add a LICENSE file
- Get rid of the set-version.pl file as it's no longer needed
- Add AppVeyor CI testing
- Add Travis CI testing
- update t/IO_InnerFile.t to use Test::More and a proper TEMP file (RT #103895)
Signed-off-by: Jason Schonberg <schonm@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Changelog:
- Fix panics in thin_dump when btree nodes point beyond the metadata device
- Fix overflows in IoEngine block range tracking and offset calculation,
which caused panics or reads at wrong offsets on damaged metadata in
thin_check, cache_check and other tools.
- Fix integer overflow in space map boundary checks
- Remove redundant leaf insertions in LeafWalker
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Dropped patch that is part of the upstream version.
Changelog:
- Support building with OpenSSL 4.0.0 and later.
- Bug fix; UTF-7 encoding mailbox conversion problems.
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 3.3.2:
What's Changed:
- chore(deps): Bump the "dependencies" group with 1 update across
multiple ecosystems
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 2.5.2:
- The special methods added to the class generated for an
wrapt.AutoObjectProxy, and adjusted when __wrapped__ was
reassigned, were determined by inspecting the wrapped object
itself, rather than the type of the wrapped object. As special
methods are only ever looked up on the type of an object, this
gave the wrong result in several cases. When the wrapped object
was a class, the special methods it defined for its instances
were added to the proxy class, so a proxy for a class defining
__set_name__() raised TypeError when assigned to an attribute in
a class body, a proxy for a class defining __get__() was bound as
a descriptor on attribute access, and a proxy for a class
defining __await__() or __iter__() was reported as awaitable or
iterable by inspect.isawaitable() and collections.abc checks,
even though the class itself was not. Special methods provided by
the metaclass of a wrapped class, such as __iter__(), were not
added to the proxy class. When the wrapped object was an
instance, instance attributes shadowing the dunder names were
treated as special methods of the wrapped object, and special
methods which a __dir__() method of the wrapped object did not
report were missed. The special methods are now always determined
from the type of the wrapped object, so a proxy behaves the same
as the object it wraps. This also covers a wrapt.LazyObjectProxy
whose factory returns an object, as resolving the wrapped object
reassigns __wrapped__. With thanks to ybai08 for pull request
#361 which identified the issue.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 26.10.0:
Security fixes:
- CVE-2026-83813 (GHSA-jj36-9pvh-vj5r)
- CVE-2023-44487 (GHSA-vpp8-g58w-m8mp)
- CVE-2026-115778 (GHSA-cwm5-jh59-mwxr)
- CVE-2026-115775 (GHSA-3476-c5c2-fr73)
- CVE-2026-115877 (GHSA-q7qq-6mhp-9rc4)
- CVE-2026-115774 (GHSA-2qrf-pqgx-qh9v)
- CVE-2026-115776 (GHSA-53xc-49m8-p798)
Features:
- It is now possible to set the SO_REUSEPORT and SO_REUSEADDR TCP
socket flags from user code.
- Python 3.14 is now supported.
- twisted.internet.defer.Deferred.__iter__, used when awaiting a
Deferred, is now about 2-3% faster.
Bugfixes:
- twisted.internet.tcp.Port.startListening() now closes the socket
when raising CannotListenError.
- Initiating a TCP connection with an address literals and a port
outside of the 1-65535 range in twisted.internet.tcp.BaseClient
and twisted.internet.iocpreactor.tcp.Client now triggers an
errback instead of an unhandled error. This change might also fix
other unhandled errors occurred while connecting using address
literals.
- twisted.logger.LoggingFile.fileno now raises
io.UnsupportedOperation instead of returning -1. This fixes an
interoperability issue with multiprocessing.
- twistd now exits with a non-zero status when given an unknown
subcommand.
- twisted.internet.testing.MemoryReactor.removeAll() now returns
what was removed to comply with IReactorFDSet.removeAll()
- twisted.internet.asyncioreactor.AsyncioSelectorReactor.callLater
now has the same signature as
twisted.internet.interfaces.IReactorTime.callLater.
twisted.internet.asyncioreactor.AsyncioSelectorReactor.callFromThread
now has the same signature as
twisted.internet.interfaces.IReactorFromThreads.callFromThread.
- twisted.protocols.ftp.FTPClient now uses ip address of the
original ftp server to open passive data connections by default,
instead of trusting PASV responses.
Improved Documentation:
- The "Writing Servers" and "UDP Networking" documentation pages
have been updated to remove obsolete references to persisting the
reactor (a feature gone from Twisted for several decades now),
and to better explain the factory and protocol setup and teardown
lifecycle.
- Twisted's policy documentation now includes a prominently
featured, clear explanation of our AI policy: to wit, including
the outputs of generative AI systems is forbidden.
Deprecations and Removals:
- twisted.internet.tcp.Connection no longer supports returning a
non-None value from a protocol's dataReceived method, deprecated
since Twisted 11.0.0.
- twisted.internet.error.PotentialZombieWarning, deprecated since
Twisted 10.0, has been removed.
- Implementations of twisted.internet.interfaces.IProcessProtocol
are now required to provide a processExited method. Omitting this
method was deprecated in Twisted 8.2.
- twisted.internet.ssl.protocolNegotiationMechanisms and
twisted.internet.ssl.ProtocolNegotiationSupport are deprecated
because all supported TLS backends provide ALPN. Callers can
configure ALPN without checking for support.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Upgrade to release 0.35.0:
- Mark that Trio supports 3.15.
- Ensure that Trio consistently encodes all hostnames using IDNA
2008.
- Avoid erroring when running in a CPython built for an Android API
version less than 24.
- Ensure trio.lowlevel.notify_closing works even on events that
have been deleted, e.g. because they were registered as one shot
events.
- trio.Process no longer emits an EncodingWarning on Linux when
Python runs with -X warn_default_encoding
(or PYTHONWARNDEFAULTENCODING=1).
- The typing for async-file-objects is now consistent about what it
exposes based on what is exposed by the underlying object.
Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
Leon Anavi
Martin Jansa
Khem Raj
Peter Marko
Bartosz Golaszewski
Johannes Schneider
Jason Schonberg
Ankur Tyagi