Commit Graph

9345 Commits

Author SHA1 Message Date
Wang Mingyu
845d15ae2a
python3-pytest-httpx: upgrade 0.36.0 -> 0.36.2
License-Update: Copyright year updated to 2026.

Fixed:
  Document how to ignore query parameters while matching on URL.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu
02e82f58c2
python3-pymodbus: upgrade 3.12.1 -> 3.13.0
Changelog:
============
- Correct missing types.
- Altherma heat pump control, with Home Assistant and updating server.
- SimDevice, use_bit_address allows different addressing for BITS.
- Remove 3.5char frame time check.
- Fixed Modbus*Context.
- Fix bug in ModbusDeviceContext.
- Fix log level in examples
- Fix CSS lookup for simulator server
- Fix usage docs in examples: add missing option --baudrate
- Doc:Finalice server/simulator narrative
- Fix codespell bug.
- Datastores uses SimData/SimDevice.
- Doc on how to convert to SimData/SimDevice.
- Fix Read Fifo Query RTU Frame Size
- Update server documentation (datstore).
- Update server examples to use SimData/SimDevice.
- Add server.async_get/setValues.
- Solve codeql caching problem.
- Remove unused methods in datastore.
- Remove datastore get/setValues (async_get/set exist)
- Revert "Combine ModbusSparseDataBlock with ModbusSequentialDataBlock."
- Combine ModbusSparseDataBlock with ModbusSequentialDataBlock.
- Remove RemoteDeviceContext datastore.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00
Wang Mingyu
e249a4e8df
python3-pyais: upgrade 2.20.1 -> 3.0.0
Changelog:
===========
- ~35% faster compared to v2
- breaking Changes
  removed bitarray dependency. Replaced with a custom bit_vector
  renamed AISSentence.bit_array to AISSentence.bv
  renamed Payload.from_bitarray() to Payload.from_vector()
  renamed Payload.to_bitarray() to Payload.to_bytes()
  changed overflow encoding behavior
  deprecated NonPrintableCharacterException
  dropped support for Python 3.9
- removed bitarray as an external dependency
- improved performance through a custom bit vector implementation
- optimized single-fragment message assembly
- NOTE: If you are not ready to migrate, v2 continues to receive bugfixes on the legacy branch

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00
Wang Mingyu
d61051de6b
python3-platformdirs: upgrade 4.9.4 -> 4.9.6
fix:
 use double quotes for tag variable expansion

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00
Wang Mingyu
8bf9ef4452
python3-inline-snapshot: upgrade 0.32.5 -> 0.32.6
Fix:
- Pydantic models, attrs and dataclasses with NewType-typed fields now generate
  correct snapshots that wrap the field value with the NewType constructor (e.g.
  Something(some_id=SomeID(1)) instead of Something(some_id=1)). This could only
  be fixed for Python >= 3.10.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00
Wang Mingyu
85617f68bf
python3-imgtool: upgrade 2.3.0 -> 2.4.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00
Wang Mingyu
ab0b7e4e59
python3-greenlet: upgrade 3.3.2 -> 3.4.0
Changelog:
==========
- Publish binary wheels for RiscV 64.
- Fix multiple rare crash paths during interpreter shutdown.
- Note that this now relies on the atexit module, and introduces subtle API
  changes during interpreter shutdown (for example, getcurrent is no longer
  available once the atexit callback fires).
- Address the results of an automated code audit performed by Daniel Diniz.
  This includes several minor correctness changes that theoretically could have
  been crashing bugs, but typically only in very rare circumstances.
- Fix several race conditions that could arise in free-threaded builds when
  using greenlet objects from multiple threads, some of which could lead to
  assertion failures or interpreter crashes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:33 -07:00
Wang Mingyu
e799080b87
python3-google-auth: upgrade 2.48.0 -> 2.49.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:33 -07:00
Wang Mingyu
6157dd3159
python3-git-pw: upgrade 2.7.1 -> 2.8.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:33 -07:00
Wang Mingyu
79ea9d58cd
python3-gevent: upgrade 25.9.1 -> 26.4.0
Changelog:
===========
- Make gevent.ssl stop reusing exception instances, as this could appear to
  cause a memory leak if there are many short reads or writes.
- Fix Greenlet.dead returning true for an active greenlet during early
  bootstrap.
- Fix some potential GIL-related crashes during interpreter shutdown by
  avoiding acquiring the GIL in libev callbacks when the interpreter is
  finalizing.
- Support for Python 3.9 has been removed.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:33 -07:00
Gyorgy Sarvari
d13ec66639
python3-django: upgrade 5.2.12 -> 5.2.13
Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292,
CVE-2026-33033 and CVE-2026-33034.

Changelog: https://docs.djangoproject.com/en/6.0/releases/5.2.13/

Ptests passed successfully:
Ran 18163 tests in 457.705s

OK (skipped=1389, expected failures=5)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-13 15:28:25 -07:00
Gyorgy Sarvari
a408ffedd8
python3-django: upgrade 6.0.3 -> 6.0.4
Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292,
CVE-2026-33033 and CVE-2026-33034.

Changelog: https://docs.djangoproject.com/en/6.0/releases/6.0.4/

Ptests passed successfully:
Ran 18691 tests in 149.800s

OK (skipped=1397, expected failures=5)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-13 15:28:25 -07:00
Li Zhou
389cf85390
python3-pytest-runner: remove using pkg_resources
The python3 setuptools 82 dropped pkg_resources module by now.
To avoid the failure "No module named 'pkg_resources'", replace the
functions from this module with other functions from modules
packaging and importlib.metadata.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Zhang Peng
73b3a1a53b
python3-pytest-codspeed: upgrade 3.0.0 -> 4.3.0
Remove explicit python3-hatchling-native from DEPENDS since it is
automatically added when inheriting python_hatchling.

Add python3-cffi-native to DEPENDS since v4.0.0 introduced
CodSpeedHQ/instrument-hooks which uses cffi FFI bindings at
build time.

Changelog:
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.3.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.2.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.1
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.0.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.2.0
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.2
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.1
https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.0

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 17:25:49 -07:00
Leon Anavi
7127c15a01
python3-yappi: Upgrade 1.7.3 -> 1.7.6
Upgrade to release 1.7.6:

- Fix VERSION file missing from source distribution (sdist)

>From 1.7.5:

- Fix callgrind export producing duplicate entries for top-level
  functions
- Fix various edge cases
- Add limit parameter to print_all
- Fix file reading to use UTF-8 encoding

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Leon Anavi
79bff37b73
python3-charset-normalizer: Upgrade 3.4.6 -> 3.4.7
Upgrade to release 3.4.7:

- Pre-built optimized version using mypy[c] v1.20.
- Relax setuptools constraint to setuptools>=68,<82.1.
- Correctly remove SIG remnant in utf-7 decoded string.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Leon Anavi
eb59d62c00
python3-aiofiles: Upgrade 24.1.0 -> 25.1.0
Upgrade to release 25.1.0:

- Switch to uv + add Python v3.14 support.
- Add ruff formatter and linter.
- Drop Python 3.8 support. If you require it, use version 24.1.0.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:59 -07:00
Bartosz Golaszewski
7e24f2b5a8
python3-gpiod: update to v2.4.2
Bug-fix release addressing a buffer overflow bug discovered during an
AI-augmented security audit as well as another minor issue with
unnecessarily duplicated code.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:58 -07:00
Wang Mingyu
d8c310aa52
python3-werkzeug: upgrade 3.1.7 -> 3.1.8
Request.host and get_host return the empty string if the header is missing or has invalid characters.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
36111dde1a
python3-tzdata: upgrade 2025.3 -> 2026.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
ad83f5541f
python3-types-psutil: upgrade 7.2.2.20260130 -> 7.2.2.20260408
Changelog:
===========
- Use dashes instead of underscores for METADATA.toml field names
- Update most test/lint dependencies
- Update mypy to 1.20.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
11a2e0a7b4
python3-sqlalchemy: upgrade 2.0.48 -> 2.0.49
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
f3cad077fc
python3-snagboot: upgrade 2.6 -> 2.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
882dc303c9
python3-sentry-sdk: upgrade 2.56.0 -> 2.57.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:57 -07:00
Wang Mingyu
1813d9138c
python3-regex: upgrade 2026.3.32 -> 2026.4.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
edb96b0670
python3-python-multipart: upgrade 0.0.22 -> 0.0.24
Changelog:
============
- Validate chunk_size in parse_form()
- Remove unused trust_x_headers parameter and X-File-Name fallback
- Return processed length from QuerystringParser._internal_write
- Cleanup metadata dunders from __init__.py

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
b5fb673c18
python3-pandas: upgrade 3.0.1 -> 3.0.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
58e071451f
python3-orjson: upgrade 3.11.7 -> 3.11.8
Build and compatibility improvements.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
b3d1987115
python3-marshmallow: upgrade 4.2.3 -> 4.3.0
Changelog:
=============
- Add pre_load and post_load parameters to marshmallow.fields.Field for field-level pre- and post-processing
- Typing: improvements to marshmallow.validate
- marshmallow.validate.URL and marshmallow.validate.Email accept Internationalized Domain Names (IDNs)
  marshmallow.validate.Email also correctly rejects IDN domains with leading/trailing hyphens.
- Typing: Fix typing of nested in marshmallow.fields.Nested

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
36cbd5f66f
python3-icecream: upgrade 2.1.10 -> 2.2.0
Changelog:
============
- Improved: Fixes Japanese character encoding issues.
- Added: noColor option for configureOutput, which disables
  colored output. It is set to False by default.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:56 -07:00
Wang Mingyu
bae411b616
python3-google-auth-oauthlib: upgrade 1.3.0 -> 1.3.1
Changelog:
============
- Allow Protobuf 7.x
- Require Python 3.9

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
3f6557a279
python3-fastapi: upgrade 0.135.2 -> 0.135.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
355e8fcf2a
python3-faker: upgrade 40.12.0 -> 40.13.0
Fix: Ensure deterministic locale selection in multi-locale mode.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
644e0bc7af
python3-eventlet: upgrade 0.40.4 -> 0.41.0
Changelog:
============
* Switch to 3.14 for testing
* Drop 3.9 support
* More visible deprecation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
cbd1da1f64
python3-cmake: upgrade 4.3.0 -> 4.3.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
041704b01c
python3-bitarray: upgrade 3.8.0 -> 3.8.1
Changelog:
==========
* fixed critial findings in C Extension Analysis Report
* add tests, in particular 'devel/test_capi.py'

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:55 -07:00
Wang Mingyu
2ff5277aac
python3-asyncinotify: upgrade 4.4.0 -> 4.4.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:54 -07:00
Liu Yiding
7eb5d48aed
python3-ckzg: upgrade 2.1.1 -> 2.1.7
1.Changelog:
  https://github.com/ethereum/c-kzg-4844/releases/tag/v2.1.7

2.Remove python-ckzg-0001-Let-override-CC.patch as it was merged upstream

3.Remove python-ckzg-0002-Disable-Werror.patch as it was dropped in the Fedora package
  https://src.fedoraproject.org/rpms/python-ckzg/blob/rawhide/f/python-ckzg.spec

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:51 -07:00
Liu Yiding
d477f7e360
python3-tox: upgrade 4.49.0 -> 4.52.0
Changelog:
  https://tox.wiki/en/latest/changelog.html

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
5cd2bb6427
python3-setuptools-git-versioning: upgrade 2.1.0 -> 3.0.1
Changelog:
 https://setuptools-git-versioning.readthedocs.io/en/v3.0.1/changelog/3.0.x.html

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
a3b6a0c84d
python3-legacy-cgi: upgrade 2.6.2 -> 2.6.4
Add do_install function to resolve following issue.
  python3-legacy-cgi-2.6.4-r0 do_package_qa: QA Issue: /usr/lib/python3.14/site-packages/.pc/0001-cgi.py-fixup-interpreter-according-to-OE.patch/cgi.py contained in package python3-legacy-cgi requires /usr/local/bin/python, but no providers found in RDEPENDS:python3-legacy-cgi? [file-rdeps]

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
998888c826
python3-pyatspi: upgrade 2.46.1 -> 2.58.2
Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:50 -07:00
Liu Yiding
cd7b52861d
python3-djangorestframework: upgrade 3.16.1 -> 3.17.1
Changelog:
  https://www.django-rest-framework.org/community/release-notes/#deprecation-policy

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:49 -07:00
Liu Yiding
a1efbb73c6
python3-croniter: upgrade 6.0.0 -> 6.2.2
Changelog:
  https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:49 -07:00
Liu Yiding
94102dd836
python3-cucumber-tag-expressions: upgrade 6.2.0 -> 9.1.0
1. Changelog
  https://github.com/cucumber/tag-expressions/blob/main/CHANGELOG.md

2. LIC_FILES_CHKSUM changed as line of License info changed in PKG-INFO file.

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-10 07:59:49 -07:00
Bai, Haiqing
d793c367e0
Revert "python3-stopit: add missing run-time dependencies"
This reverts commit 812f091414.

The runtime dependency on python3-setuptools is no longer needed
since the patch 0001-Drop-the-deprecated-pkg_resources.patch
replaced the pkg_resources usage with importlib.metadata, which
is part of the Python 3.8+ standard library. Keeping this RDEPENDS
pulls in an unnecessary dependency on the target system.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-06 22:54:18 -07:00
Bai, Haiqing
733b6fc2c6
python3-stopit: Fixed the deprecated pkg_resources issue
pkg_resources is deprecated as an API. The pkg_resources package
has been removed from setuptools, so the way of obtaining the
version needs to be replaced with importlib.metadata module.

Signed-off-by: Bai, Haiqing <Haiqing.Bai@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-06 22:54:18 -07:00
Gyorgy Sarvari
4ee0103733
python3-aiohttp: mark fixed CVEs are patched
All these CVEs have been fixed already, the relevant NVD
reports mention it explicitly that 3.13.4 is fixed, along
with referencing the commit that fixes the respective
vulnerabilities. However each of these are tracked without
version info by NVD -.-

Due to this, mark them explicitly as patched.

Relevant reports:
https://nvd.nist.gov/vuln/detail/CVE-2026-22815
https://nvd.nist.gov/vuln/detail/CVE-2026-34513
https://nvd.nist.gov/vuln/detail/CVE-2026-34514
https://nvd.nist.gov/vuln/detail/CVE-2026-34515
https://nvd.nist.gov/vuln/detail/CVE-2026-34516
https://nvd.nist.gov/vuln/detail/CVE-2026-34517
https://nvd.nist.gov/vuln/detail/CVE-2026-34518
https://nvd.nist.gov/vuln/detail/CVE-2026-34519
https://nvd.nist.gov/vuln/detail/CVE-2026-34520
https://nvd.nist.gov/vuln/detail/CVE-2026-34525

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-06 09:46:31 -07:00
Gyorgy Sarvari
844f87dd10
python3-aiohttp: upgrade 3.13.4 -> 3.13.5
Changelog:
Skipped the duplicate singleton header check in lax mode (the default for response
parsing). In strict mode (request parsing, or -X dev), all RFC 9110 singletons
are still enforced.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-06 09:46:31 -07:00
Jeroen Hofstee
b7245e15b9
python3-pyroute2: add missing rdepend of python3-unittest
Without it, it will throw "ModuleNotFoundError: No module named
'unittest'" from pyroute2/netlink/rtnl/iprsocket.py" line 6.

Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-05 07:48:16 +00:00
Hongxu Jia
a1a3c1fac7
python3-icu: enable building -native and nativesdk- variants
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-03 08:38:52 -07:00
Liu Yiding
8f5c021ddb
python3-configargparse: upgrade 1.7.3 -> 1.7.5
Changelog: Slightly simplified PyPI deployment workflow via setuptools-scm

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-03 08:38:52 -07:00
Wang Mingyu
ff39bfa81e
python3-ujson: upgrade 5.11.0 -> 5.12.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-02 16:05:46 +00:00
Jiaying Song
2a4bed73a9
python3-ninja: fix ninja_syntax import and version for setuptools build
Fixes issues introduced in commit 16a72067f5 ("python3-ninja: upgrade
1.11.1.1 -> 1.13.0").

Upstream's __init__.py uses a relative import:
  from .ninja_syntax import Writer, escape, expand

This requires ninja_syntax.py to be present inside the ninja package
directory. Upstream relies on CMake (via scikit-build-core) to copy
ninja_syntax.py from ninja-upstream/misc/ into the package during
build [1]. Since the OE recipe replaces scikit-build-core with
setuptools (no-scikit-build.patch), CMake is not invoked and this
copy does not happen, causing ImportError at runtime.

Similarly, upstream uses scikit-build-core's generate feature to
create _version.py from the SCM version. With setuptools, this
does not happen automatically, so generate it in do_configure.

[1] https://github.com/scikit-build/ninja-python-distributions/commit/f3b4a786be

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-02 16:05:46 +00:00
Wang Mingyu
db8bd24b0d
python3-werkzeug: upgrade 3.1.6 -> 3.1.7
Changelog:
==========
- parse_list_header preserves partially quoted items, discards empty items, and
  returns empty for unclosed quoted values.
- WWWAuthenticate.to_header does not produce a trailing space when there are no
  parameters.
- Transfer-Encoding is parsed as a set.
- Request.host, get_host, and host_is_trusted validate the characters of the
  value. An empty value is no longer allowed. A Unix socket server address is
  ignored. The trusted_list argument to host_is_trusted is optional.
- Fix multipart form parser handling of newline at boundary.
- Response.make_conditional sets the Accept-Ranges header even if it is not a
  satisfiable range request.
- merge_slashes merges any number of consecutive slashes.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:11 -07:00
Wang Mingyu
affabbd410
python3-tomli: upgrade 2.4.0 -> 2.4.1
Changelog:
 Limit number of parts of a TOML key to address quadratic time complexity

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:11 -07:00
Wang Mingyu
acbd14a284
python3-sentry-sdk: upgrade 2.55.0 -> 2.56.0
Changelog:
=========
- (asgi) Add option to disable suppressing chained exceptions
- (logging) Separate ignore lists for events/breadcrumbs and sentry logs
- Set exception info on streaming span when applicable
- Patch AsyncStream.close() and AsyncMessageStream.close() to finish spans
- Patch Stream.close() and MessageStream.close() to finish spans
- (starlette) Catch Jinja2Templates ImportError
- Add note on AI PRs to CONTRIBUTING.md
- Pin GitHub Actions to full-length commit SHAs
- Add -latest alias for each integration test suite
- Use date-based branch names for toxgen PRs
- Update test matrix with new releases (03/19)
- Add client report tests for span streaming

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:10 -07:00
Wang Mingyu
29c2c9ef99
python3-regex: upgrade 2026.2.28 -> 2026.3.32
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:10 -07:00
Wang Mingyu
05538fe024
python3-redis: upgrade 7.3.0 -> 7.4.0
Changelog:
==========
- Fix AttributeError in cluster metrics recording when connection is None or
  ClusterNode object instance is used to extract the connection info (#3999)
- Fixing security concern in repr methods for ConnectionPools - passwords might
  leak in plain text logs (#3998)
- Refactored connection count and SCH metric collection (#4001)
- Refactored health check logic for MultiDBClient (#3994)
- Expose basic Otel classes and functions to be importable through
  redis.observability to match the examples in the readthedocs

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:10 -07:00
Wang Mingyu
d6564e6271
python3-pyais: upgrade 2.20.0 -> 2.20.1
this release reduces the supply chain attack surface
- pins dependencies
- pins workflows
- adds a SHA256 hash sum for deployed artifacts
- migrates to PyPI trusted publishing

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:10 -07:00
Wang Mingyu
0640d09636
python3-marshmallow: upgrade 4.2.2 -> 4.2.3
Changelog:
===========
- Make marshmallow.fields.Number and marshmallow.fields.Mapping abstract base
  classes to prevent using them within Schemas
- Allow required to be set on marshmallow.fields.Contant
- Fix marshmallow.validate.OneOf emitting extra pairs when labels outnumber
  choices
- Fix behavior when passing a dot-delimited attribute name to partial for a key
  with data_key set
- Fix Enum field by-name lookup to only return actual members
- marshmallow.fields.DateTime with format="timestamp_ms" properly rejects bool
  values
- Fix typing of error_essages argument to marshmallow.fields.Field
- Add ipaddress.* to marshmallow.Schema.TYPE_MAPPING
-

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:09 -07:00
Wang Mingyu
72d7137691
python3-ipython: upgrade 9.11.0 -> 9.12.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:09 -07:00
Wang Mingyu
d06649721b
python3-gunicorn: upgrade 25.1.0 -> 25.3.0
Bug Fixes
==========
- HTTP/2 ASGI Body Duplication: Fix request body being received twice in HTTP/2
  ASGI requests, causing JSON parsing errors with "Extra data" messages (#3558)
- ASGI Chunked EOF Handling: Add finish() method to callback parser to handle
  chunked encoding edge case where connection closes before final CRLF after
  zero-chunk
- HTTP/2 Documentation: Fix http_protocols examples to use comma-separated
  string instead of list syntax (#3561)
- Chunked Encoding: Reject chunk extensions containing bare CR bytes per RFC
  9112 (#3556)
- Request Line Limit: Fix --limit-request-line 0 to mean unlimited as
  documented, instead of using default maximum. Works with both Python and fast
  C parser. (#3563)
- uWSGI Async Workers: Fix InvalidUWSGIHeader: incomplete header error when
  using gevent or gthread workers with uwsgi protocol behind nginx.
- FileWrapper Iterator Protocol: Add __iter__ and __next__ methods to
  FileWrapper for full PEP 3333 compliance. Previously only supported old-style
  __getitem__ iteration which broke code explicitly using iter() or next().

Security =============
- ASGI Parser Header Validation: Add security checks per RFC 9110/9112:
- Reject duplicate Content-Length headers
- Reject requests with both Content-Length and Transfer-Encoding
- Reject chunked transfer encoding in HTTP/1.0
- Reject stacked chunked encoding
- Validate Transfer-Encoding values
- Strict chunk size validation

Changes ==========
- Fast HTTP Parser: Update to gunicorn_h1c >= 0.6.3 for asgi_headers property
  and InvalidChunkExtension validation for bare CR rejection
- ASGI PROXY Protocol: Add PROXY protocol v1/v2 support to callback parser
- Docker Images: Update to Python 3.14

New Features ============
- Fast HTTP Parser (gunicorn_h1c 0.6.0): Integrate new exception types and
  limit parameters from gunicorn_h1c 0.6.0 for both WSGI and ASGI workers
- Requires gunicorn_h1c >= 0.6.0 for http_parser='fast'
- Falls back to Python parser in auto mode if version not met
- Proper HTTP status codes for limit errors (414, 431)

Performance ============
- ASGI HTTP Parser Optimizations: Improve ASGI worker HTTP parsing performance
- Callback-based parsing with direct bytearray buffer operations
- Use bytearray.find() directly instead of converting to bytes first
- Use index-based iteration for header parsing instead of list.pop(0) (O(1) vs
  O(n))

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:09 -07:00
Wang Mingyu
cac0e06488
python3-fsspec: upgrade 2026.2.0 -> 2026.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:09 -07:00
Wang Mingyu
3ea6e07b22
python3-fastapi: upgrade 0.135.1 -> 0.135.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:08 -07:00
Wang Mingyu
757773916e
python3-faker: upgrade 40.11.0 -> 40.12.0
Changelog:
  Add address providers for ar_DZ and fr_DZ locale

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:08 -07:00
Wang Mingyu
5e61a6311d
python3-eth-utils: upgrade 5.3.1 -> 6.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:08 -07:00
Wang Mingyu
1b047a663d
python3-eth-typing: upgrade 5.2.1 -> 6.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:08 -07:00
Wang Mingyu
0dd89fb71e
python3-eth-hash: upgrade 0.7.1 -> 0.8.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:07 -07:00
Wang Mingyu
b4a70a9373
python3-dateparser: upgrade 1.3.0 -> 1.4.0
Security fixes:
=================
- Remove import-time loading of timezone offset data from pickle to prevent
  unsafe deserialization from packaged data
- Replace eval() use when parsing no_word_spacing with strict boolean
  parsing to prevent code execution from locale metadata (#1056)

New features:
=============
- Add support for expressions like "N {interval} from now" in English (#1271)
- Add support for the en-US locale (#1222)

Fixes:
========
- Honor REQUIRE_PARTS for ambiguous month-number inputs by retrying with a
  year-biased DATE_ORDER (#1298)
- Fix parsing word-number relative phrases such as "two days later" (#1316)
- Allow md5hash to work in FIPS environments (#1267)

Improvements:
=============
- Add Bosnian Cyrillic (ijekavica) date translations (#1293)
- Add a new browser-based demo to the project documentation (#1306)
- Update installation documentation to replace setup.py install guidance
- Add a project security policy

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:07 -07:00
Wang Mingyu
8e3de212f4
python3-cmake: upgrade 4.2.3 -> 4.3.0
Changelog:
  docs: mention Windows ARM in README

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:07 -07:00
Wang Mingyu
12dc91d96d
python3-bleak: upgrade 3.0.0 -> 3.0.1
Changelog:
  Fixed AttributeError in start_notify() and stop_notify() on Android.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:07 -07:00
Wang Mingyu
ebc50b2c43
python3-anyio: upgrade 4.12.1 -> 4.13.0
Changelog:
===========
- Dropped support for Python 3.9
- Added a ttl parameter to the anyio.functools.lru_cache wrapper
- Widened the type annotations of file I/O streams to accept IO[bytes] instead
  of just BinaryIO
- Fixed anyio.Path not being compatible with Python 3.15 due to the removal of
  pathlib.Path.is_reserved() and the addition of pathlib.Path.__vfspath__()
- Fixed the BrokenResourceError raised by the asyncio SocketStream not having
  the original exception as its cause
- Fixed the TypeError raised when using "func" as a parameter name in
  pytest.mark.parametrize when using the pytest plugin
- Fixed the pytest plugin not running tests that had the anyio marker added
  programmatically via pytest_collection_modifyitems
- Fixed cancellation exceptions leaking from a CancelScope on asyncio when they
  are contained in an exception group alongside non-cancellation exceptions
- Fixed Condition.wait() not passing on a notification when the task is
  cancelled but already received a notification
- Fixed inverted condition in the process pool shutdown phase which would cause
  still-running pooled processes not to be terminated

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:06 -07:00
Wang Mingyu
edc7885462
python3-aiohttp: upgrade 3.13.3 -> 3.13.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 19:29:06 -07:00
Gyorgy Sarvari
6eb5b0ec14
python3-pyjwt: drop obsolete CVE_STATUS
This CVE is disputed, and it is now tracked with an old version
of the application, it doesn't show up in the CVE report anymore.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 13:16:40 -07:00
Mingli Yu
27d096d984
python3-ecdsa: Upgrade 0.19.1 -> 0.19.2
Changlog:
  https://github.com/tlsfuzzer/python-ecdsa/releases/tag/python-ecdsa-0.19.2

Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 13:16:38 -07:00
Michal Sieron
01a34fa1cc
meta-python: Convert confusing appends to override syntax
While in this case `RDEPENDS:class-target +=` wouldn't result in any
unwanted override, there is no guarantee there won't be a change, which
would be hidden by this override. To avoid any surprises in the future
let's use `:append:class-target =` syntax here.

Signed-off-by: Michal Sieron <michalwsieron@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-01 13:16:36 -07:00
Liu Yiding
d1f51bbd0a
python3-fastapi-cli: upgrade 0.0.20 -> 0.0.24
Changelog
  https://github.com/fastapi/fastapi-cli/releases/tag/0.0.24

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-30 19:46:40 -07:00
Ross Burton
7a24822d70
python3-py7zr: remove python3-pyzstd
This dependency was replaced with the standard compression.zstd module
in 1.1.0[1].

[1] ccf0def15e

Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:04 -07:00
Wang Mingyu
95b76c2f88
python3-virtualenv: upgrade 20.36.1 -> 21.2.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:02 -07:00
Wang Mingyu
6489eee14b
python3-uvicorn: upgrade 0.41.0 -> 0.42.0
Changelog:
===========
- Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies
- Escape brackets and backslash in httptools HEADER_RE regex
- Fix multiple issues in websockets sans-io implementation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:02 -07:00
Wang Mingyu
923ce0e77e
python3-uswid: upgrade 0.5.2 -> 0.6.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:01 -07:00
Wang Mingyu
a875a17506
python3-starlette: upgrade 0.52.1 -> 1.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:01 -07:00
Wang Mingyu
f6dc162375
python3-simpleeval: upgrade 1.0.3 -> 1.0.7
License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:01 -07:00
Wang Mingyu
8f6946ae76
python3-sentry-sdk: upgrade 1.45.1 -> 2.55.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:01 -07:00
Wang Mingyu
25c7e97c8d
python3-rich-toolkit: upgrade 0.15.1 -> 0.19.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:00 -07:00
Wang Mingyu
5a3ec34c97
python3-pytest-env: upgrade 1.5.0 -> 1.6.0
Changelog:
===========
- Add permissions to workflows
- Add SECURITY.md to .github/
- Add missing .github config files
- Standardize .github files to .yaml suffix
- Fix verbose source attribution when falling back to INI en
- feat(env): preserve existing env values

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:00 -07:00
Wang Mingyu
25009e9407
python3-pytest-cov: upgrade 7.0.0 -> 7.1.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:00 -07:00
Wang Mingyu
b0ffe6916f
python3-pre-commit: upgrade 4.3.0 -> 4.5.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:09:00 -07:00
Wang Mingyu
e8899fd7e4
python3-pint: upgrade 0.25.2 -> 0.25.3
Changelog:
==============
- 'GenericPlainRegistry.parse_expression' now correctly returns a dimensionless
  Quantity when taking a float, int, or NaN
- Replace MIP with scipy in 'Quantity.to_preferred'
- New unit formatting modifier added ('^') to format unit with negative
  exponents
- Add atomic unit of electric field gradient
  ('atomic_unit_of_electric_field_gradient', 'a_u_efg')
- Defer expensive loading of dask.array
- Add support for numpy's 'vdot', 'inner', 'outer', 'linalg.outer', 'matvec',
  'vecmat', 'tensordot', and 'linalg.tensordot'

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:59 -07:00
Wang Mingyu
014d806fa5
python3-pikepdf: upgrade 10.3.0 -> 10.5.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:59 -07:00
Wang Mingyu
77b8a0afd6
python3-myst-parser: upgrade 4.0.1 -> 5.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:59 -07:00
Wang Mingyu
dc606f7071
python3-mpmath: upgrade 1.4.0 -> 1.4.1
Changelog:
============
- Fix test_hexadecimal_with_libc_bulk()
- Keep available deprecated aliases for mpc/mpf_log()
- Use version_file option of setuptools-scm to keep version info
- Add workaround for test on s390x

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:59 -07:00
Wang Mingyu
06a26a7707
python3-mdit-py-plugins: upgrade 0.4.2 -> 0.5.0
Changelog:
==========
- Add plugin & tests to render subscripts
- Drop Python 3.9

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:58 -07:00
Wang Mingyu
749b7c0116
python3-kiwisolver: upgrade 1.4.9 -> 1.5.0
License-Update: Copyright year updated to 2026

Changelog:
==========
- add support for CMakeLists
- implement more move constructor in the C++ code
- add C++ tests
- add support for GraalPy
- add RiscV support

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:58 -07:00
Wang Mingyu
807c44e99e
python3-inline-snapshot: upgrade 0.32.4 -> 0.32.5
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:58 -07:00
Wang Mingyu
2964f80710
python3-importlib-metadata: upgrade 8.7.1 -> 9.0.0
License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:58 -07:00
Wang Mingyu
330bb64346
python3-imageio: upgrade 2.37.2 -> 2.37.3
License-Update: Copyright year updated to 2026

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:57 -07:00
Wang Mingyu
907622615b
python3-identify: upgrade 2.6.17 -> 2.6.18
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:57 -07:00
Wang Mingyu
6c44c7d271
python3-icu: upgrade 2.16.1 -> 2.16.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:57 -07:00
Wang Mingyu
3ef22a8783
python3-google-auth-oauthlib: upgrade 1.2.3 -> 1.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:57 -07:00
Wang Mingyu
176a96f6fb
python3-filelock: upgrade 3.25.0 -> 3.25.2
Changelog:
==========
- fix(unix): suppress EIO on close in Docker bind mounts
- docs(logo): add branded project logo
- fix(win): restore best-effort lock file cleanup on release

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:56 -07:00
Wang Mingyu
5871948af0
python3-faker: upgrade 40.8.0 -> 40.11.0
Changelog:
=============
- Add major Swiss banks to de_CH bank provider.
- Fix: mixed-gender names in es_MX locale.
- Fix pt_PT postalcode format in address provider.
- Fix mutable default providers.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:56 -07:00
Wang Mingyu
2f10352e4a
python3-coverage: upgrade 7.13.4 -> 7.13.5
Changelog:
==========
- Fix: issue 2138 describes a memory leak that happened when repeatedly using
  the Coverage API with in-memory data. This is now fixed.
- Fix: the markdown-formatted coverage report didn't fully escape special
  characters in file paths (issue 2141). This would be very unlikely to cause a
  problem, but now it's done properly
- Fix: the C extension wouldn't build on VS2019, but now it does

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:56 -07:00
Wang Mingyu
f2cfe8d069
python3-cbor2: upgrade 5.8.0 -> 5.9.0
Changelog:
=========
- Added the max_depth decoder parameter to limit the maximum allowed nesting
  level of containers, with a default value of 400 levels (CVE-2026-26209)
- Changed the default read_size from 4096 to 1 for backwards compatibility. The
  buffered reads introduced in 5.8.0 could cause issues when code needs to
  access the stream position after decoding. Users can opt-in to faster decoding
  by passing read_size=4096 when they don't need to access the stream directly
  after decoding. Added a direct read path for read_size=1 to avoid buffer
  management overhead.
- Fixed C encoder not respecting string referencing when encoding string-type
  datetimes (tag 0)
- Fixed a missed check for an exception in the C implementation of
  CBOREncoder.encode_shared()
- Fixed two reference/memory leaks in the C extension's long string decoder
- Fixed C decoder ignoring the str_errors setting when decoding strings, and
  improved string decoding performance by using stack allocation for small
  strings and eliminating unnecessary conditionals. Benchmarks show 9-17% faster
  deserialization.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:56 -07:00
Wang Mingyu
3490811436
python3-bleak: upgrade 2.1.1 -> 3.0.0
Changelog:
============
- Added adapter attribute to bleak.args.bluez.BlueZClientArgs and
  bleak.args.bluez.BlueZScannerArgs.
- Added bluez keyword argument to BleakClient.
- Added new bleak.args.bluez.BlueZClientArgs class.
- Added bleak.exc.BleakGATTProtocolError and
  bleak.exc.BleakGATTProtocolErrorCode classes.
- Added type hints and documentation for use_cached kwarg for read_gatt_char()
  and read_gatt_descriptor() methods in BleakClient.
- Added support for "use_cached" kwarg to read_gatt_char() and
  read_gatt_descriptor() methods in BlueZ backend.
- Deprecated adapter keyword argument in BleakScanner and BleakClient.
- Changed GATT read and write methods to raise BleakGATTProtocolError when a
  GATT protocol error occurs.
- Changed start/stop scanning on CoreBluetooth so that the isScanning property
  is not checked anymore.
- Changed BleakClient.write_gatt_descriptor() to raise ValueError when
  attempting to write to the descriptor 0x2902 (Client Characteristic
  Configuration Descriptor, CCCD). Use start_notify() and stop_notify() instead.
- Fixed occasional EOFError when disconnecting in BlueZ backend.
- Fixed a potential deadlock when turning off Bluetooth manually while starting
  scanning on CoreBluetooth.
- Fixed reading descriptors 0x2900, 0x2902 and 0x2903 on CoreBluetooth backend.
- Fixed cyclic references problem in CoreBluetooth backend causing memory
  leaks.
- Fixed typehint for BleakScanner.__aexit__().
- Removed undocumented/deprecated device keyword argument from
  BleakScannerBlueZDBus and BleakClientBlueZDBus.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:55 -07:00
Wang Mingyu
af3f94a0ca
python3-bitstring: upgrade 4.3.1 -> 4.4.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:55 -07:00
Wang Mingyu
6fb096996f
python3-astroid: upgrade 4.1.1 -> 4.1.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:55 -07:00
Wang Mingyu
673ba5164f
python3-apiflask: upgrade 3.0.0 -> 3.1.0
Changelog:
===========
- Support pagination with Pydantic
- Fix @app.output(Schema(many=True)) is not array type in OpenAPI doc
- Support upload file model
- Fix type checking for view function return types

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:55 -07:00
Wang Mingyu
7d6ed20da3
python3-aenum: upgrade 3.1.16 -> 3.1.17
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-27 09:08:54 -07:00
Gyorgy Sarvari
f2d565781e
python3-scrypt: upgrade 0.8.27 -> 0.9.4
License-Update: Copyright year bump

Shortlog:
https://github.com/holgern/py-scrypt/compare/v0.8.27...v0.9.4

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-24 14:22:34 -07:00
Gyorgy Sarvari
8694997b2c
python3-txdbus: add missing RDEPENDS
This module depends on python3-six, otherwise it errors out:

>>> from txdbus.interface import DBusInterface, Method, Signal
Traceback (most recent call last):
  File "<python-input-1>", line 1, in <module>
    from txdbus.interface import DBusInterface, Method, Signal
  File "/usr/lib/python3.14/site-packages/txdbus/interface.py", line 8, in <module>
    import six
ModuleNotFoundError: No module named 'six'

Add the missing dependency.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-24 14:22:33 -07:00
Gyorgy Sarvari
a2daf1bf09
python3-zopeinterface: upgrade 7.1.1 -> 8.2
Drop obsolete patch.

An important change is that this version supports Python 3.14.

License-Update: switch to license file instead of PKG-INFO file. The license
itself hasn't changed.

Changelog:
https://github.com/zopefoundation/zope.interface/blob/master/CHANGES.rst

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-24 14:22:33 -07:00
Ankur Tyagi
969b6221bd
python3-black: upgrade 26.3.0 -> 26.3.1
Includes fix for CVE-2026-32274.

Changelog:
https://github.com/psf/black/releases/tag/26.3.1

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-23 13:34:21 -07:00
Peter Marko
7dd437eb03
python3-protobuf: upgrade 6.33.5 -> 6.33.6
Release information [1] does not list python changes, but we should
match protobuf (C++) recipe version.

[1] https://github.com/protocolbuffers/protobuf/releases/tag/v33.6

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-23 13:34:20 -07:00
Khem Raj
69e42c4fbd
python3-charset-normalizer: Upgrade to 3.4.6
Fix build with setuptools > 82.0.0 as well

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-03-20 15:12:13 -07:00
Gyorgy Sarvari
6ec8ca6773
python3-lief: drop obsolete CVE_STATUS
The CVE is now tracked with correct version info by NVD.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-20 14:13:10 -07:00
Gyorgy Sarvari
03fbb8fd04
python3-pyjwt: drop obsolete CVE_STATUS
This CVE is now tracked with the correct version info by NVD.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-20 14:13:10 -07:00
Khem Raj
a917abe8e4
python3-xstatic-font-awesome: Upgrade to 6.2.1.2
License-Update: Updated to use LICENSE.txt for anchoring the check

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-20 14:12:30 -07:00
Gyorgy Sarvari
b26a0ad219
python3-pychromecast: upgrade 14.0.9 -> 14.0.10
Beside the below changelog, it also allows compiling with the latest Setuptools.

Drop patches which became obsolete.

Changes:
- Ensure cec info is none if not supported
- Add some fast pre-commit checks
- Switch to ruff for checks and formatting
- add D24f-J09 to const.py
- Update const.py to include Lenovo Smart Display 10
- Avoid logging graceful disconnect as error
- Fix datetime deprecation

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-20 09:51:43 -07:00
Jiaying Song
cf4788c916
python3-redis: upgrade 5.3.1->7.3.0
Switch build system from setuptools3 to python_hatchling

Changelog:
https://github.com/redis/redis-py/releases

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:33 -07:00
Jiaying Song
d62b06c427
python3-paramiko: upgrade 3.5.1->4.0.0
Changelog:
https://www.paramiko.org/changelog.html

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:33 -07:00
Wang Mingyu
62b17d2806
python3-m2crypto: fix do_compile error using clang
erre message:
| INFO:mkpath:creating build/temp.linux-aarch64-cpython-314/src/SWIG
| INFO:spawn:aarch64-yoe-linux-clang -mcpu=cortex-a57+crc --dyld-prefix=/usr -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security -fstack-protector-strong -O2 -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security -Werror=format-security --sysroot=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot -O2 -g -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/sources/m2crypto-0.47.0=/usr/src/debug/python3-m2crypto/0.47.0 -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/sources/m2crypto-0.47.0=/usr/src/debug/python3-m2crypto/0.47.0 -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot= -ffile-prefix-map=/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot-native= -pipe -fPIC -I/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/recipe-sysroot/usr/include/python3.14 -I/srv/build/yoe/build/tmp/work/cortexa57-yoe-linux/python3-m2crypto/0.47.0/sources/m2crypto-0.47.0/src/SWIG -c src/SWIG/_m2crypto_wrap.c -o build/temp.linux-aarch64-cpython-314/src/SWIG/_m2crypto_wrap.o -DTHREADING -Wno-deprecated-declarations
| src/SWIG/_m2crypto_wrap.c:4455:1: error: unknown type name 'PRAGMA_IGNORE_UNUSED_LABEL'
|  4455 | PRAGMA_IGNORE_UNUSED_LABEL
|       | ^
| src/SWIG/_m2crypto_wrap.c:4456:30: error: expected ';' after top level declarator
|  4456 | PRAGMA_WARN_STRICT_PROTOTYPES
|       |                              ^
|       |                              ;
| 2 errors generated.

Add patch 0001-fix-swig-avoid-clang-GNUC-pragma-block-before-_lib.h.patch to avoid clang GNUC pragma block before _lib.h

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:33 -07:00
Gyorgy Sarvari
0abb9a484e
python-pyjwt: upgrade 2.11.0 -> 2.12.1
Contains fix for CVE-2026-32597. Since NVD tracks this CVE
without version info, mark the CVE explicitly patched.

Changes:
2.12.1:
Add typing_extensions dependency for Python < 3.11

2.12.0:
chore(docs): fix docs build
Annotate PyJWKSet.keys for pyright
fix: close HTTPError to prevent ResourceWarning on Python 3.14
chore: remove superfluous constants
chore(tests): enable mypy
Bump actions/download-artifact from 7 to 8
fix: do not store reference to algorithms dict on PyJWK
Use PyJWK algorithm when encoding without explicit algorithm
Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. (CVE-2026-32597)

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:32 -07:00
Ankur Tyagi
cdb5d4c3e7
python3-tornado: upgrade 6.5.4 -> 6.5.5
Security fixes including CVE-2026-31958

https://www.tornadoweb.org/en/stable/releases/v6.5.5.html

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:29 -07:00
Andrej Kozemcak
94990de736
python3-grpcio: upgrade 1.76.0 -> 1.78.0
Change build tools from setuptools3 to python_setuptools_build_meta

Add cython depends and change cython requirement from cython==3.1.1 to
cython>=3.1.1. Currently we use cython version 3.2.4

Changelog:
  https://github.com/grpc/grpc/releases/tag/v1.78.0

Changes for python:
- aio: fix race condition causing asyncio.run() to hang forever during the shutdown process.
- Migrate to pyproject.toml build system from setup.py builds.
- Log error details when ExecuteBatchError occurs (at DEBUG level).
- Update setuptools min version to 77.0.1.

Signed-off-by: Andrej Kozemcak <andrej.kozemcak@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:28 -07:00
Jiaying Song
16a72067f5
python3-ninja: upgrade 1.11.1.1 -> 1.13.0
Changelog:
https://github.com/scikit-build/ninja-python-distributions/releases

Upstream commit [1] switched build system from scikit-build to
scikit-build-core, which changed pyproject.toml structure and rewrote
__init__.py. Update patches accordingly:

- no-scikit-build.patch: rewrite for new pyproject.toml structure,
  replace scikit-build-core with setuptools, and remove 'readme'
  from dynamic fields as setuptools cannot handle the fancy-pypi-readme
  plugin.
- run-ninja-from-path.patch: drop. Old version imported skbuild
  modules in __init__.py which caused ImportError in OE since
  scikit-build is not installed. New version replaced these imports
  with stdlib sysconfig, so the patch is no longer needed.
- CMakeLists.txt: drop. This was a stub file added to prevent
  scikit-build from failing when it could not find CMakeLists.txt.
  Since we now use setuptools which does not require it, the file
  can be removed.

[1] https://github.com/scikit-build/ninja-python-distributions/commit/f3b4a786be

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:27 -07:00
Bartosz Golaszewski
f75f4164fd
python3-gpiod: update to v2.4.1
Bug-fix release addressing a memory leak and a couple minor issues.

We now ship the license file with the dist tarball so update the recipe
to take this into account. While at it: trim the LICENSE value to only
include LGPL-v2.1-or-later as the other two licenses cover tests and
text files.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:26 -07:00
Gyorgy Sarvari
7a3ce6a063
python3-cassandra-driver: upgrade 3.29.2 -> 3.29.3
Also, add a patch to be able to build with Setuptools 82.
This patch is oe-specific, but upstream has already merged[1] a
patch that should make it compatible with the latest Setuptools.
It however seems to require multiple patches to apply clean. The
patch in this change is expected to be a short term workaround until
the next version is released.

Changelog:

Features
- Upgraded cython to 3.0.x
- Add support for DSE 6.9.x and HCD releases to CI
- Add execute_concurrent_async and expose execute_concurrent_* in Session

Bug Fixes
- Update geomet to align with requirements.txt
- Connection failure to SNI endpoint when first host is unavailable
- Maintain compatibility with CPython 3.13

Others
- Remove duplicated condition in primary key check
- Remove Python 3.8 which reached EOL on Oct 2024, update cryptography lib to 42
- Remove obsolete urllib2 from ez_setup.py
- Remove stale dependency on sure
- Removed 2.7 Cpython defines

[1]: https://github.com/apache/cassandra-python-driver/pull/1268

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:25 -07:00
Gyorgy Sarvari
4ac220373b
python3-xstatic: add patch to build w/ Setuptools 82
Setuptools 82 dropped pkg_resources module. It is not used
by the setup script, nevertheless, it is imported, and this
missing module fails compilation.

This patch removes this import.

Upstream started to work on refactoring their setup scripts, so
this patch is not appropriate to them - once/if they release, most
likely this patch can be dropped.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:25 -07:00
Gyorgy Sarvari
8193a3c0ef
python3-httptools: allow building with latest setuptools
By default this recipe requires Setuptools with strictly version 80.9.0.
oe-core has updated Setuptools to 82.0, and this recipe failed to build.

This patch relaxes the Setuptools version requirements.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:25 -07:00
Peter Marko
d8bc478d9c
python3-html5lib: fix build with setuptools 82
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-18 14:33:24 -07:00
Wang Mingyu
32a81707a9
python3-wrapt: upgrade 2.1.1 -> 2.1.2
Changelog:
===========
- Building of Python wheels for riscv64 Linux platform had been accidentally
  removed from the build configuration. This has now been added back in.
- When a weak function proxy was created for a bound method and the instance it
  was bound to was garbage collected, calling the proxy would silently call the
  function as unbound instead of raising a ReferenceError.
- When deleting an attribute named __annotations__ on an object proxy, the
  attribute was only being deleted from the proxy and not also from the wrapped
  object.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:34 -07:00
Wang Mingyu
614a18cfeb
python3-whitenoise: upgrade 6.11.0 -> 6.12.0
Changelog:
========
- Drop Python 3.9 support.
- Fix potential unauthorised file access vulnerability in "autorefesh" mode.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:33 -07:00
Wang Mingyu
69aeb4598a
python3-wheezy-template: upgrade 3.2.4 -> 3.2.5
Changelog:
 Added wheezy.html 3.2.1 as a development dependency.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:33 -07:00
Wang Mingyu
ac23a9f78e
python3-tqdm: upgrade 4.67.2 -> 4.67.3
Changelog:
  fix py3.7 dependencies

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:33 -07:00
Wang Mingyu
fd40cda1b2
python3-tox: upgrade 4.36.1 -> 4.49.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:33 -07:00
Wang Mingyu
a3ff8e2027
python3-tabulate: upgrade 0.9.0 -> 0.10.0
Changelog:
===========
- Add support for Python 3.11, 3.12, 3.13, 3.14.
- Drop support for Python 3.7, 3.8, 3.9.
- PRESERVE_STERILITY global is replaced with preserve_sterility function argument.
- New formatting options: headersglobalalign, headersalign, colglobalalign.
- New output format: "colon_grid" (Pandoc grid_tables with alignment)
- Various bug fixes.
- Improved error messages.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:33 -07:00
Wang Mingyu
6fd6dbec63
python3-sqlalchemy: upgrade 2.0.46 -> 2.0.48
Changelog:
 https://docs.sqlalchemy.org/en/21/changelog/changelog_20.html#change-2.0.48

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:33 -07:00
Wang Mingyu
4d59761490
python3-snagboot: upgrade 2.5 -> 2.6
treewide:
Migrate documentation to readthedocs
Emit more specific error messages for USB permission-based access issues
Add unit tests

snagflash:
Support compressed input files, e.g. *.wic.bz2
Refactor fastboot-uboot logic to factor out common code and improve logging
Automatically detect when oem_run isn't supported by U-Boot, and fallback to ucmd

snagrecover:
Support Renesas RZ/N1 platforms
Support SoC model aliases, and add i.MX8MP alias
Handle relative path prefixes with the -F syntax

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:32 -07:00
Wang Mingyu
ba180ee148
python3-scikit-build-core: upgrade 0.11.6 -> 0.12.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:32 -07:00
Wang Mingyu
ab8740596c
python3-robotframework: upgrade 7.3.2 -> 7.4.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:32 -07:00
Wang Mingyu
b11e4f37b9
python3-regex: upgrade 2026.2.19 -> 2026.2.28
Changelog:
==========
- Replaced atomic operations with mutex on pattern object for free-threaded Python.
- PR #598: Fix race condition in storage caching with atomic operations.
- Replaced use of PyUnicode_GET_LENGTH with PyUnicode_GetLength.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:32 -07:00
Wang Mingyu
b18308ffad
python3-pytest-env: upgrade 1.2.0 -> 1.5.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:32 -07:00
Wang Mingyu
f4e786b322
python3-pymisp: upgrade 2.5.32.3 -> 2.5.33.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:32 -07:00
Wang Mingyu
513344d14c
python3-pyais: upgrade 2.15.0 -> 2.20.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:31 -07:00
Wang Mingyu
ff7f74b88e
python3-platformdirs: upgrade 4.9.2 -> 4.9.4
Changelog:
============
- Fix test failures on BSD for runtime directory defaults
- Respect XDG_CONFIG_HOME in _get_user_dirs_folder
- Add missing _optionally_create_directory in Android user_log_dir and user_runtime_dir
- Add permissions to workflows
- Move SECURITY.md to .github/SECURITY.md
- Standardize .github files to .yaml suffix
- docs: add project logo to documentation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:31 -07:00
Wang Mingyu
ae831ade44
python3-pkgconfig: upgrade 1.5.5 -> 1.6.0
Changelog:
============
- Drop support for Python < 3.9, support 3.9 .. 3.14.
- README: clarify pkg-config and pkgconf, #75
- Switch CI from Travis to GitHub Actions; test on all supported Python versions.
- Use src/ layout for project, fixes #36. Also move tests and test data to tests/.
- Replace deprecated distutils with setuptools to make tests work on Python 3.12; fixes #64.
- Fix configure_extension for empty cflags or libs.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:31 -07:00
Wang Mingyu
67b858ec99
python3-orjson: upgrade 3.11.6 -> 3.11.7
Changelog:
==============
- Use a faster library to serialize float. Users with byte-exact regression
  tests should note positive exponents are now written using a +, e.g.,
  1.2e+30 instead of 1.2e30. Both formats are spec-compliant.
- ABI compatibility with CPython 3.15 alpha 5 free-threading.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:31 -07:00
Wang Mingyu
1698357b41
python3-nanobind: upgrade 2.11.0 -> 2.12.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2026-03-17 13:25:31 -07:00