Commit Graph

7858 Commits

Author SHA1 Message Date
Gyorgy Sarvari
b66b1eb9f6
python3-pandas: compile against target version of numpy
python3-numpy headers are required by pandas to compile successfully.
By default, this recipe used python3-numpy-native for compilation,
which usually works. However in case the bitness of the build-host
differs from the target, then problems arise.

For example when compiling for 32-bit ARM on a x86-64 machine, the following
error appears when trying to import the module:

ValueError: Buffer dtype mismatch, expected 'const int64_t' but got 'long long'

When running a diff on all numpy headers across native and target,
only one header differs, _numpyconfig.h, in a significant way.
This header defines the sizes of different datatypes used by numpy,
and these sizes strongly depend on the arch bitness.

This change switches from python3-numpy-native dependency to python3-numpy to
ensure that the correct headers are used. Beside this also patch the meson script,
so it accepts an option (numpy_inc_dir) to specify the location of these headers,
since it is not able to query them from the class-target module

The PYTHONPATH variable is extended with the target's RECIPE_SYSROOT, because
numpy is specified as a dependency in meson, and it needs to find the module
to continue successfully.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-10 09:41:56 -07:00
Leon Anavi
56cb03c8cf
python3-eventlet: Upgrade 0.39.0 -> 0.39.1
Upgrade to release 0.39.1:

- [fix] Make LightQueue and derivatives subscriptable

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-08 15:04:57 -08:00
Leon Anavi
bd3395567f
python3-pycurl: Upgrade 7.45.4 -> 7.45.6
Upgrade to release 7.45.6:

- Update the wheels to incorporate libcurl 8.12.1 for security
  fixes, as well as enable some additional libraries in wheel
  builds.
- The previous release was accidentally built without CA bundle
  autodetection in Linux wheels - this restores that behavior
  (no changes to macOS or Linux).

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-08 15:04:57 -08:00
Leon Anavi
a3d2fd3f85
python3-pdm: Upgrade 2.22.3 -> 2.22.4
Upgrade to release 2.22.4:

- Ensure dev-dependencies are added to the correct group when the
  tool.pdm.dev-dependencies table has groups.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-08 15:04:57 -08:00
Oliver Kästner
8aa895e877
python3-h5py: don't enforce HDF5 version
The library version to link against can be automatically detected.
This fixes the following runtime warning:

    >>> import h5py
    /usr/lib/python3.13/site-packages/h5py/__init__.py:36: UserWarning:
    h5py is running against HDF5 1.14.4 when it was built against
    1.14.0, this may cause problems
    _warn(("h5py is running against HDF5 {0} when it was built against
    {1}, "

Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-08 15:04:56 -08:00
Oliver Kästner
c25b471aba
python3-h5py: switch to PEP-517 build backend
Upstream moved to PEP-517 builds, so use the appropriate bbclass.

Signed-off-by: Oliver Kästner <okaestner@rosen-nxt.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-08 15:04:56 -08:00
Leon Anavi
3e73dbaab8
python3-alembic: Upgrade 1.14.1 -> 1.15.1
Upgrade to release 1.15.1:

- Fixed an issue in the new PEP 621 pyproject.toml layout that
  prevented Alembic's template files from being included in the
  .whl file in the distribution.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-07 08:37:00 -08:00
Leon Anavi
aaca0cb3f3
python3-stevedore: Upgrade 5.4.0 -> 5.4.1
Upgrade to release 5.4.1:

- Skip installation to speed up pep8
- reno: Update master for unmaintained/2023.1

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-07 08:37:00 -08:00
Kai Kang
4a86797cc1
python3-crypt-r: replacement of module crypt
Since module crypt has been removed from python 3.13, add a renamed copy
of it that other packages may require it, such as python3-anaconda.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-07 08:37:00 -08:00
Kai Kang
11b8917fe1
python3-requests-ftp: remove use of module cgi
python 3.13 removed some modules such as cgi which is required by python3-requests-ftp:

    https://docs.python.org/3/whatsnew/3.13.html

    Important removals:

    PEP 594: The remaining 19 “dead batteries” (legacy stdlib modules) have
    been removed from the standard library: aifc, audioop, cgi, cgitb,
    chunk, crypt, imghdr, mailcap, msilib, nis, nntplib, ossaudiodev, pipes,
    sndhdr, spwd, sunau, telnetlib, uu and xdrlib.

Backport and rebase a patch from Fedora to remove use of module cgi.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-07 08:36:59 -08:00
Leon Anavi
614bc6319b python3-pyperf: Upgrade 2.8.1 -> 2.9.0
Upgrade to release 2.9.0:

- Add warnings about too few or too many samples
- .github: Add ARM64 CI for pyperf
- Add support for profiling benchmarks using perf-record
- Prepare 2.9.0 release

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Leon Anavi
33de56236f python3-mock: Upgrade 5.1.0 -> 5.2.0
Upgrade to release 5.2.0:

- :func:`unittest.mock.Mock.attach_mock` no longer triggers a call
  to a PropertyMock being attached.
- Improved documentation for :func:`unittest.mock.patch.dict`
- Add support for :func:`dataclasses.dataclass` in
  :func:`unittest.mock.create_autospec`. Now create_autospec will
  check for potential dataclasses and use :func:`dataclasses.fields`
  function to retrieve the spec information.
- Fix :class:`unittest.mock.MagicMock` reseting magic methods
  return values after .reset_mock(return_value=True) was called.
- Fixed :func:`unittest.mock.create_autospec` to configure parent
  mock with keyword arguments.
- Indicate if there were no actual calls in unittest
  :meth:`~unittest.mock.Mock.assert_has_calls` failure.
- Deprecate :func:`!asyncio.iscoroutinefunction` in favor of
  :func:`inspect.iscoroutinefunction`.
- Limit starting a patcher (from :func:`unittest.mock.patch` or
  :func:`unittest.mock.patch.object`) more than once without
  stopping it
- Fixed :func:`unittest.mock.create_autospec` to pass the call
  through to the wrapped object to return the real result.
- Fix :func:`unittest.mock.patch` to not read attributes of the
  target when new_callable is set. Patch by Robert Collins.
- Fix import of :mod:`unittest.mock` when CPython is built without
  docstrings.
- Fix name passing to :class:`unittest.mock.Mock` object when using
  :func:`unittest.mock.create_autospec`.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Leon Anavi
4cf1f81fa1 python3-sh: Upgrade 2.2.1 -> 2.2.2
Upgrade to release 2.2.2:

- Bugfix where it was impossible to use a signal as an ok_code

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Leon Anavi
85483b64fb python3-bitstruct: Upgrade 8.19.0 -> 8.20.0
Upgrade to release 8.20.0.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Leon Anavi
2e9751d16e python3-aiohttp: Upgrade 3.11.12 -> 3.11.13
Upgrade to release 3.11.13:

- Removed a break statement inside the finally block in
  :py:class:~aiohttp.web.RequestHandler
- Changed connection creation to explicitly close sockets if an
  exception is raised in the event loop's create_connection method
- Fixed test test_write_large_payload_deflate_compression_data_in_eof_writelines
  failing with Python 3.12.9+ or 3.13.2+
- Added human-readable error messages to the exceptions for
  WebSocket disconnects due to PONG not being received

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Leon Anavi
94b44822d5 python3-gcovr: Upgrade 8.2 -> 8.3
Upgrade to release 8.3:

- Replace setup.py with hatchling. To install from source at least
  version 21.3 of pip is needed.
- Drop support for Python 3.8.
- Add condition coverage to text summary report.
- Add --include to search files in search paths which should be
  added to report.
- Add option to generate LCOV format produced by version 1.x of
  LCOV tool.
- Extend logging for data merge errors with info about the data
  sources.
- Add condition coverage merge mode option --merge-mode-conditions
- Add --gcov-suspicious-hits-threshold to configure the value for
  detecting suspicious hits in GCOV files.
- Renamed JSON element destination_blockno to destination_block_id.
- Add --html-block-ids to show the block ids of the lines and
  branches in HTML report.
- Fixed an error handling bug throwing a TypeError exception on a
  gcov merge assertion failure instead of reporting the error and
  (if requested by the user) continuing execution
- Check format version of external generated gcov JSON files.
- Fix crash on Windows when trying to fix the case of the files.
- Fix LCOV report. Excluded lines where added with a count of 0.
- Fix line exclusion not clearing all child coverage data.
- Fix summary stats in JaCoCo report.
- Fix path issue when reading/writing Coveralls report.
- Fix issue with negative counters in GCOV JSON export.

License-Update: Update year

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:58:00 -08:00
Leon Anavi
08e22ae5fd python3-prettytable: Upgrade 3.14.0 -> 3.15.1
Upgrade to release 3.15.1:

- Fix IndexError for add_rows() with an empty list
- Fix typing: replace Iterable with indexable Sequence

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:57:59 -08:00
Leon Anavi
155df32a2d python3-typer: Upgrade 0.15.1 -> 0.15.2
Upgrade to release 0.15.2:

- Allow custom styles for commands in help output.
- Avoid the unnecessary import of typing_extensions in newer Python
  versions.
- Fix shell completions for the fish shell.
- Rename test to corner-cases to make it more explicit.
- Fix small typos in the tutorial documentation.
- Update optional CLI argument section in tutorial with Annotated.
- Clarify the need for mix_stderr when accessing the output of
  stderr in tests.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-03-06 06:57:59 -08:00
Peter Marko
fe582374d3
python3-grpcio(-tools): fix build concurrency issue
Set GRPC_PYTHON_BUILD_EXT_COMPILER_JOBS to limit spawned compiler
processes. Without this it uses all available CPUs (via
multiprocessing.cpu_count()) and can exhaust build host since there are
lot of files to compile (e.g. with 128 cores it manages to spawn 128 gcc
processes)

Note that this is a general problem for all setuptools based builds with
build_ext compilation which can either compile with 1 thread or
cpu_count threads. grpcio hot-patches setuptools and allows to set
specific build concurrency value.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-28 18:48:26 -08:00
Wang Mingyu
23902813ef
python3-zeroconf: upgrade 0.143.0 -> 0.145.1
Changelog:
==========
- Hold a strong reference to the AsyncEngine setup task
- docs: Enable link to source code
- Non unique name during wheel upload
- Add a helpful hint for when EADDRINUSE happens during startup
- Wheel builds failing after adding armv7l builds
- Add armv7l wheel builds
- Make no buffer space available when adding multicast memberships forgiving

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:55 -08:00
Wang Mingyu
a3895f69fd
python3-virtualenv: upgrade 20.29.1 -> 20.29.2
Changelog:
==============
- Remove old virtualenv wheel
- Bump pip to 25.0.1

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:55 -08:00
Wang Mingyu
c2805f300d
python3-tzlocal: upgrade 5.2 -> 5.3
Changelog:
===========
- Now supports Python 3.9 to 3.13, and no longer requires backports.zoneinfo.
- Debian is for some reason removing support for /etc/timezone, which is bad,
  because that's the only place where the timezone is stated in plain text,
  and what's worse, they don't delete it. So we can't trust it now,
  so when we have multiple configs, we are forced to just ignore it.
- Attempts to return a ZoneInfo object also for UTC.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:55 -08:00
Wang Mingyu
f4e12b6d36
python3-starlette: upgrade 0.45.3 -> 0.46.0
Changelog:
=============
- GZipMiddleware: Make sure Vary header is always added if a response can be compressed
- Raise exception from background task on BaseHTTPMiddleware
- GZipMiddleware: Don't compress on server sent events
- MultiPartParser: Rename max_file_size to spool_max_size
- Add deprecated warning to TestClient(timeout=...)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:55 -08:00
Wang Mingyu
307668fcba
python3-sqlalchemy: upgrade 2.0.37 -> 2.0.38
Changelog:
 https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html#change-2.0.38

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:55 -08:00
Wang Mingyu
afaf3035e8
python3-snagboot: upgrade 2.1 -> 2.2
docs:
provide some performance indicators for Snagfactory

snagflash:
add a Fastboot command to flash Android Sparse Image files

snagrecover:
add support for AM62Lx platforms

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:54 -08:00
Wang Mingyu
6f046ca1e5
python3-setproctitle: upgrade 1.3.4 -> 1.3.5
Changelog:
===========
- Modernizing handling of bool type.
- docs: add release note about C23 compilers fix
- fix: modernize handling of bool type
- Preventing bouncing Dock icon when using setproctitle on newer macOS versions.
- docs: add history note about bouncy macOS fix
- fix(macOS): prevent bouncing Dock icon on newer macOS versions

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:54 -08:00
Wang Mingyu
18e7f56626
python3-robotframework: upgrade 7.2 -> 7.2.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:54 -08:00
Wang Mingyu
493c6cd080
python3-pyproj: upgrade 3.7.0 -> 3.7.1
Changelog:
=============
- WHL: Add wheels for musllinux
- WHL: MacOS minimum deployment target moved to 13
- WHL: Wheels contain PROJ 9.5.1
- MNT: Cython 3.1+ fixes
- MNT: Remove use of utcnow() and change to naive datetimes instead
- TST: remove checking is python >= 3.4
- TST: Add assert statements at the end of tests
- LNT: Setup ruff & lint fixes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:54 -08:00
Wang Mingyu
92093f341e
python3-pymongo: upgrade 4.11 -> 4.11.1
Changelog:
 restores wheel support for s390x and ppc64le architectures

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:54 -08:00
Wang Mingyu
a82316bc8a
python3-pymisp: upgrade 2.5.4 -> 2.5.7.1
Changelog:
=============
- Remove tests from wheel.
- Make mypy happy.
- Move email MSG to PW protected archive to fool bumb AVs.
- Enrich event/attribute endpoints.
- Update readme.
- Allow MD in docs.
- Remove ref to recommonmark.
- Added missing properties for Notes and Opinions.
- Notes, Opinions and Relationships are no longer
  AnalystDataBehaviorMixin.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:54 -08:00
Wang Mingyu
b0a237f744
python3-propcache: upgrade 0.2.1 -> 0.3.0
Changelog:
=============
- Implemented support for the free-threaded build of CPython 3.13
- Started building wheels for the free-threaded build of CPython 3.13
- GitHub Actions CI/CD is now configured to manage caching pip-ecosystem dependencies using re-actors/cache-python-deps

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:53 -08:00
Wang Mingyu
0fe5ef7219
python3-jsbeautifier: upgrade 1.15.1 -> 1.15.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:53 -08:00
Wang Mingyu
81c6770719
python3-inline-snapshot: upgrade 0.20.1 -> 0.20.2
Fix:
- snapshots inside tests which are marked as xfail are now ignored
- Fixed a crash caused by the following code:
  snapshot(tuple())
  # or
  snapshot(dict())

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:53 -08:00
Wang Mingyu
904c932f40
python3-humanize: upgrade 4.12.0 -> 4.12.1
Changelog:
 Fix regression in naturalsize for float

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:53 -08:00
Wang Mingyu
f4fff062ef
python3-h5py: upgrade 3.12.1 -> 3.13.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:53 -08:00
Wang Mingyu
7953d572e7
python3-evdev: upgrade 1.9.0 -> 1.9.1
Changelog:
==========
- Fix fox missing UI_FF constants in generated ecodes.py.
- More type annotations.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:52 -08:00
Wang Mingyu
92952b435c
python3-cantools: upgrade 40.2.0 -> 40.2.1
Changelog:
==========
- Update CDD parser to load all possible data types
- add a strict par to fix EncodeError when init value is bigger than maximum value

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:52 -08:00
Wang Mingyu
ceb7f474f9
python3-cachetools: upgrade 5.5.1 -> 5.5.2
License-Update: Copyright year updated to 2025.

Changelog:
============
- Reduce number of @cached lock/unlock operations.
- Improve documentation.
- Update CI environment.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:52 -08:00
Wang Mingyu
bf54853dc9
python3-bitarray: upgrade 3.0.0 -> 3.1.0
Changelog:
===========
* allow mask assignment to bitarrays
* add missing masked operations to pyi-file
* refactor 'resize()' and avoid overallocation when downsizing buffer
* update 'build_wheels.yml'
* fix some typos
* minor simplifications
* rename 'growth/' example to 'resize/' and add tests for 'resize()'
* update gene example
* add comments

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:52 -08:00
Wang Mingyu
9ec1bde403
python3-aiohue: upgrade 4.7.3 -> 4.7.4
Changelog:
============
- Add dimming_delta support
- Add new effects underwater, cosmos, sunbeam, enchant

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-26 08:30:52 -08:00
Peter Marko
c6e9064deb
python3-grpcio: revert unbundling abseil-cpp
This reverts commit 990b03b616.

>>> import grpc
Traceback (most recent call last):
  File "<python-input-0>", line 1, in <module>
    import grpc
  File "/usr/lib/python3.13/site-packages/grpc/__init__.py", line 22, in <module>
    from grpc import _compression
  File "/usr/lib/python3.13/site-packages/grpc/_compression.py", line 20, in <module>
    from grpc._cython import cygrpc
ImportError: /usr/lib/python3.13/site-packages/grpc/_cython/cygrpc.cpython-313-x86_64-linux-gnu.so: undefined symbol: _ZN4absl12lts_2024072212log_internal17kUnsignedCharNullE

Even installing whole abseil-ccp does not solve this.
ldd on this library does not include libraries containing this symbol.
Some work in linking upstram would be needed.

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-23 09:56:37 -08:00
Soumya Sambu
02d14e5715
python3-django: upgrade 4.2.17 -> 4.2.18
Fixes CVE-2024-56374

Release Notes:
https://docs.djangoproject.com/en/dev/releases/4.2.18/

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-21 11:54:39 -08:00
Soumya Sambu
1da8b9cd0e
python3-django: upgrade 5.0.10 -> 5.0.11
Fixes CVE-2024-56374

Release Notes:
https://docs.djangoproject.com/en/dev/releases/5.0.11/

Signed-off-by: Soumya Sambu <soumya.sambu@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-21 11:54:39 -08:00
Bartosz Golaszewski
8cf716ca6c
python3-gpiod: update to v2.3.0
This is a minor gpiod package release that brings in some new
interfaces, a significant typing rework, ruff and mypy conformity and a
slew of bug-fixes.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-19 09:36:17 -08:00
Leon Anavi
e933824566
python3-typeguard: Upgrade 4.4.1 -> 4.4.2
Upgrade to release 4.4.2:

- Fixed TypeCheckError in unpacking assignment involving properties
  of a parameter of the function
- Fixed display of module name for forward references
- Fixed TypeError when using an assignment expression
- Fixed ValueError: no signature found for builtin when checking
  against a protocol and a matching attribute in the subject is a
  built-in function

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:59 -08:00
Leon Anavi
8a07f8d5c3
python3-humanize: Upgrade 4.11.0 -> 4.12.0
Upgrade to release 4.12.0:

- Add support for Python 3.14 and test PyPy3.11
- Handle en_GB and en_US locale
- Release to PyPI using Trusted Publishing

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Leon Anavi
6e97f274b9
python3-bandit: Upgrade 1.8.2 -> 1.8.3
Upgrade to release 1.8.3:

- Bump docker/build-push-action from 6.10.0 to 6.11.0
- Bump docker/build-push-action from 6.11.0 to 6.12.0
- Bump docker/build-push-action from 6.12.0 to 6.13.0
- [pre-commit.ci] pre-commit autoupdate
- Update bug template to include latest released versions
- Add markupsafe.Markup XSS plugin
- Warn not error on an nonexistant test given
- Bump sigstore/cosign-installer from 3.7.0 to 3.8.0
- Bump docker/setup-buildx-action from 3.8.0 to 3.9.0
- B107: Skip None values in hardcoded password detection
- Pytorch fix

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Leon Anavi
ce36130887
python3-simplejson: Upgrade 3.19.3 -> 3.20.1
Upgrade to release 3.20.1:

- Do not memoize keys before they are coerced to string

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Leon Anavi
14b839aab2
python3-cppy: Upgrade 1.3.0 -> 1.3.1
Upgrade to release 1.3.1:

- On Windows link to debug runtime lib when building with a debug
  Python

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-17 07:40:58 -08:00
Peter Marko
f993cb2ecb
python-grpcio(-tools): add grpc:grpc to cve product
These grpc python modules contain parts of grpc core.
Each CVE needs to be assessed if the patch applies also to core parts
included in each module.

Note that so far there was never a CVE specific for python module, only
for grpc:grpc and many of those needed to be fixed at leasts in grpcio:

sqlite> select vendor, product, count(*) from products where product like '%grpc%' group by vendor, product;
grpc|grpc|21
grpck|grpck|1
linuxfoundation|grpc_swift|9
microsoft|grpconv|1
opentelemetry|configgrpc|1

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2025-02-14 20:27:18 -08:00