Commit Graph

9291 Commits

Author SHA1 Message Date
Samuli Piippo fefec1cbe9 python3-cyclonedx-python-lib: add recipe
OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard
that provides advanced supply chain capabilities for cyber risk
reduction.

This Python package provides data models, validators and more,
to help you create/render/read CycloneDX documents.

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:49 -07:00
Samuli Piippo 96ab7b827a python3-py-serializable: add recipe
This Pythonic library provides a framework for serializing/
deserializing Python classes to and from JSON and XML

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:49 -07:00
Samuli Piippo 6a01b25316 python3-packageurl-python: add recipe
Python library to parse and build “purl” aka. Package URLs.

Signed-off-by: Samuli Piippo <samuli.piippo@qt.io>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:49 -07:00
Wang Mingyu d2f999fcb8 python3-zopeinterface: upgrade 8.3 -> 8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:47 -07:00
Wang Mingyu 7c6a8fee4a python3-xxhash: upgrade 3.6.0 -> 3.7.0
Changelog:
==========
- Drop support for Python 3.7
- Build armv7l manylinux/musllinux wheels
- Build riscv64 manylinux/musllinux wheels
- Build android and ios wheels

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 2e12e283a0 python3-virtualenv: upgrade 21.2.1 -> 21.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 3331a61f7a python3-tzdata: upgrade 2026.1 -> 2026.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu ec49e5e385 python3-typer: upgrade 0.24.1 -> 0.25.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu ad0ddc93ce python3-tox: upgrade 4.52.1 -> 4.53.0
Changelog:
  eat(toml): allow bare range/labeled dicts in env_list

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 907e93c143 python3-simplejson: upgrade 3.20.2 -> 4.1.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:46 -07:00
Wang Mingyu 879a957545 python3-sentry-sdk: upgrade 2.57.0 -> 2.58.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu d89c21c4c9 python3-python-multipart: upgrade 0.0.26 -> 0.0.27
Changelog:
============
- Pass parse offsets via constructors
- Add multipart header limits

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu 61ea9a4780 python3-pytest-codspeed: upgrade 4.3.0 -> 4.4.0
Changelog:
===========
- fix: fix segfault caused by multiple activate_stack_trampoline
- fix: Exclude setup time from benchmark in walltime mode
- feat: collect Python toolchain information via instrument hooks environment API

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu d9598d46d1 python3-pyroute2: upgrade 0.9.5 -> 0.9.6
Changelog:
=============
- dhcp: call UNBOUND hook upon NAK
- ndb: support replacement policies for routes
- ndb: support localns setup and fix object cache
- iproute: fix set_netnsid() to be a coroutine
- ci: drop support for Python < 3.10

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu 4251956467 python3-pymongo: upgrade 4.16.0 -> 4.17.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu d50d1c4df2 python3-pymisp: upgrade 2.5.33.1 -> 2.5.33.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:45 -07:00
Wang Mingyu 939f50c3d9 python3-pre-commit: upgrade 4.5.1 -> 4.6.0
Changelog:
============
- feature: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.
- fix: --hook-type is required

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 58e7fd13e6 python3-moteus: upgrade 0.3.100 -> 0.3.101
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 47664393cf python3-ipython: upgrade 9.12.0 -> 9.13.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu b9da653a2b python3-inline-snapshot: upgrade 0.32.6 -> 0.32.7
Changelog:
============
- Fixed snapshot comparison for dicts where keys are dataclass instances (or
  other custom objects used as dict keys), which previously caused corrupted
  snapshots - either collapsing multiple entries into one or appending duplicate
  keys on subsequent runs
- Fixed tuple snapshot updates to compare elements positionally rather than
  using sequence alignment, so existing expressions (e.g. 3 + 3) are preserved
  when elements are removed from or added to a tuple.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 521a48045d python3-identify: upgrade 2.6.18 -> 2.6.19
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu ada51454a2 python3-greenlet: upgrade 3.4.0 -> 3.5.0
Changelog:
  Remove the atexit callback.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:44 -07:00
Wang Mingyu 5f03b130d2 python3-flask-wtf: upgrade 1.2.2 -> 1.3.0
Changelog:
==========
- pre-commit autoupdate
- remove slsa provenance
- Support for Python 3.14
- Try not to read uploaded files into memory
- Migrate the project to uv
- ReCaptcha field testing mode documentation
- Allow nonce in reCaptcha
- CSRF meta tag helper
- widget support the kwargs to add custom html attributes
- Respect exempts in CSRFProtect.protect()
- Adding RECAPTCHA_ENABLE to disable recaptcha
- Improve CSRF Documentation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu 09fd8162c2 python3-flask-marshmallow: upgrade 1.4.0 -> 1.5.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu 59cb3f9a95 python3-filelock: upgrade 3.25.2 -> 3.29.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu a5e60deb3e python3-fastapi: upgrade 0.135.3 -> 0.136.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu ca0f537997 python3-faker: upgrade 40.13.0 -> 40.15.0
Changelog:
==========
- Add job providers for ar_DZ and fr_DZ locales (#2352).
- Add company providers for ar_DZ and fr_DZ locales (#2351).
- Add geo providers for ar_DZ and fr_DZ locales (#2350).
- Add currency providers for ar_DZ and fr_DZ locales (#2349).
- Add date_time provider for ar_DZ locale (#2348).
- Add ssn providers for ar_DZ and fr_DZ locales (#2347).
- v40.14.1 - 2026-04-17
- Fix UnicodeEncodeError in CLI docs on non-UTF consoles (#2362).
- v40.14.0 - 2026-04-17
- Fix: update placekitten URL to placekittens

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu 56ed987d2c python3-cmd2: upgrade 3.4.0 -> 3.5.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:43 -07:00
Wang Mingyu f2cfc38402 python3-cmake: upgrade 4.3.1 -> 4.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Wang Mingyu 86b1436db1 python3-bumble: upgrade 0.0.226 -> 0.0.228
Changelog:
===========
- release command semaphore after timeout
- fix: add input validation to prevent remote crash from empty/malforme
- SDP: Fix wrong parameter size
- Hash and cache 128 bytes of UUID
- SDP: Migrate to dataclasses
- Make ConnectionPHY dataclass
- Add --locked to allow installing cargo-all-features
- Add read classic remote features support
- Fix Hive demo install failure
- Keys: Remove appdirs and improve typing
- Feature - Add SMP Debug Mode (Core Vol.3, Part H)
- Advertise in run_gatt_client_and_server

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Wang Mingyu 31174858d7 python3-asyncinotify: upgrade 4.4.2 -> 4.4.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:42 -07:00
Zhang Xiao d389ed9e33 python3-aspectlib: Fix pytest compatibility
Partially backport upstream commit to fix pytest compatibility issue.

Fixes pytest errors e.g.
  | pytest.PytestRemovedIn9Warning: The (path: py.path.local) argument is deprecated, please use (collection_path: pathlib.Path)
  | see https://docs.pytest.org/en/latest/deprecations.html#py-path-local-arguments-for-hooks-replaced-with-pathlib-path
  | ERROR: Exit status is 1

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:36 -07:00
Bartosz Golaszewski 36d46e1871 python3-pyfuse3: Move to meta-python
Add a recipe for pyfuse3 - a python package providing high-level bindings
to libfuse3.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-23 07:48:11 -07:00
Gyorgy Sarvari 1be9c09e23 python3-pillow: upgrade 12.1.1 -> 12.2.0
Contains fix for CVE-2026-40192

License-update: Copyright holder's name is spelled out fully instead of using abbreviation.

Changelog: https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari 468ee626f8 python3-grpcio: ignore CVE-2026-33186
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33186

The vulnerability only affects the Go implememtation of the library,
not the Python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari aef8bc3422 protobuf, python3-protobuf: ignore CVE-2026-6409
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409

The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Leon Anavi f34a878ee2 python3-moteus: Upgrade 0.3.99 -> 0.3.100
Upgrade to release 0.3.100:

- python: Fix compatibility with older python versions
- Add configurable faults for position or velocity tracking error
- Work around a linker warning with newer gcc
- tview: Suppress warnings about importing Axes3D
- moteus_gui: Include registernoop.py in our generated wheel
- Replace setup.py with pyproject.toml for Python package builds
- Use ::isfinite for Arduino compatibility
- Implement support for the RLS Orbis encoder over SPI

Fixes:

WARNING: python3-moteus-0.3.100-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with setuptools.build_meta,
use the correct class [pep517-backend]

License-Update: Use PKG-INFO

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:55 -07:00
Leon Anavi 50d807b18b python3-soupsieve: Upgrade 2.8.2 -> 2.8.3
Upgrade to release 2.8.3:

- FIX: Fix inefficient attribute pattern.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Leon Anavi b94206dc56 python3-huey: Upgrade 2.6.0 -> 3.0.0
Upgrade to release 3.0.0:

- Add chord() (map -> reduce) and group() (map) primitives.
- Add timeout (using SIGALRM for process and gevent.Timeout for
  greenlet) to control task running time. For threads, unfortunately,
  there's no good mechanism so instead APIs for cooperatively
  checking timeout are provided on the Task instance.
- Add simple fixed-window rate_limit() for tasks.
- Add Result.is_ready() method for checking result readiness.
- New option for low-latency result fetching, available for RedisHuey.
  To use, pass notify_result=True when initializing your Huey instance.
- Add new incr(key, amount=1) to storage API for atomic increment
  primitive. This is used by chord().
- Add new wait_result() method to storage APIs for efficiently waiting
  for a result to become ready. The default implementation uses the
  exponential backoff from the previous implementation of a blocking
  Result.get() - so no changes are needed. However if you have a custom
  storage implementation, this provides a mechanism for pub/sub or
  other notification of result readiness.
- Remove Python 2.x compatibility.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Leon Anavi 18a7b38f73 python3-uvicorn: Upgrade 0.42.0 -> 0.44.0
Upgrade to release 0.44.0:

- Implement websocket keepalive pings for websockets-sansio

From 0.43.0:

- Emit http.disconnect ASGI receive() event on server shutting down
  for streaming responses
- Use native context parameter for create_task on Python 3.11+
- Drop cast in ASGI types

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Wang Mingyu 22854e60c4 python3-zopeinterface: upgrade 8.2 -> 8.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:36 -07:00
Wang Mingyu e0fc1b6d29 python3-virtualenv: upgrade 21.2.0 -> 21.2.1
Changelog:
===========
- Upgrade embedded pip/setuptools/wheel
- Enhance upgrade workflow: age check, dedup, issue tracking
- fix(create): use commonpath for correct path validation
- ci(workflows): add zizmor security auditing
- Add current and previous maintainers
- fix(ci): restore git credentials for release and upgrade jobs
- Fix broken Installation link in README
- fix: use terminal width for help formatting instead of hardcoded 240
- fix(nushell): surface actionable hint in deactivate error output
- ci: fix setup-uv warnings and drop brew@3.9
- fix(ci): fix pre-release push and release note generation
- fix(ci): check out repo in publish job for gh release notes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:36 -07:00
Wang Mingyu e8272fb33d python3-tox: upgrade 4.52.0 -> 4.52.1
Changelog:
==========
- use normalize_isa for architecture factor matching
- fix(pip): invalidate install cache on resolution env var changes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu bd948393d9 python3-soundcard: upgrade 0.4.5 -> 0.4.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu df1c485e18 python3-smbus2: upgrade 0.6.0 -> 0.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu 18d1c54c72 python3-python-multipart: upgrade 0.0.24 -> 0.0.26
Changelog:
===========
- Skip preamble before the first multipart boundary more efficiently
- Silently discard epilogue data after the closing multipart boundary
- Add MIME content type info to File
- Handle CTE values case-insensitively
- Remove custom FormParser classes
- Add UPLOAD_DELETE_TMP to FormParser config
- Emit field_end for trailing bare field names on finalize
- Handle multipart headers case-insensitively
- Apply Apache-2.0 properly

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu 845d15ae2a python3-pytest-httpx: upgrade 0.36.0 -> 0.36.2
License-Update: Copyright year updated to 2026.

Fixed:
  Document how to ignore query parameters while matching on URL.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu 02e82f58c2 python3-pymodbus: upgrade 3.12.1 -> 3.13.0
Changelog:
============
- Correct missing types.
- Altherma heat pump control, with Home Assistant and updating server.
- SimDevice, use_bit_address allows different addressing for BITS.
- Remove 3.5char frame time check.
- Fixed Modbus*Context.
- Fix bug in ModbusDeviceContext.
- Fix log level in examples
- Fix CSS lookup for simulator server
- Fix usage docs in examples: add missing option --baudrate
- Doc:Finalice server/simulator narrative
- Fix codespell bug.
- Datastores uses SimData/SimDevice.
- Doc on how to convert to SimData/SimDevice.
- Fix Read Fifo Query RTU Frame Size
- Update server documentation (datstore).
- Update server examples to use SimData/SimDevice.
- Add server.async_get/setValues.
- Solve codeql caching problem.
- Remove unused methods in datastore.
- Remove datastore get/setValues (async_get/set exist)
- Revert "Combine ModbusSparseDataBlock with ModbusSequentialDataBlock."
- Combine ModbusSparseDataBlock with ModbusSequentialDataBlock.
- Remove RemoteDeviceContext datastore.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00
Wang Mingyu e249a4e8df python3-pyais: upgrade 2.20.1 -> 3.0.0
Changelog:
===========
- ~35% faster compared to v2
- breaking Changes
  removed bitarray dependency. Replaced with a custom bit_vector
  renamed AISSentence.bit_array to AISSentence.bv
  renamed Payload.from_bitarray() to Payload.from_vector()
  renamed Payload.to_bitarray() to Payload.to_bytes()
  changed overflow encoding behavior
  deprecated NonPrintableCharacterException
  dropped support for Python 3.9
- removed bitarray as an external dependency
- improved performance through a custom bit vector implementation
- optimized single-fragment message assembly
- NOTE: If you are not ready to migrate, v2 continues to receive bugfixes on the legacy branch

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00
Wang Mingyu d61051de6b python3-platformdirs: upgrade 4.9.4 -> 4.9.6
fix:
 use double quotes for tag variable expansion

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00