9846 Commits

Author SHA1 Message Date
Wang Mingyu
12d6ef482f
python3-zopeinterface: upgrade 8.3 -> 8.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:57 -07:00
Wang Mingyu
e0a8bb27fe
python3-xxhash: upgrade 3.6.0 -> 3.7.0
Changelog:
==========
- Drop support for Python 3.7
- Build armv7l manylinux/musllinux wheels
- Build riscv64 manylinux/musllinux wheels
- Build android and ios wheels

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:56 -07:00
Wang Mingyu
3fa56fbd9d
python3-virtualenv: upgrade 21.2.1 -> 21.3.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:56 -07:00
Wang Mingyu
6321202865
python3-tzdata: upgrade 2026.1 -> 2026.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:56 -07:00
Wang Mingyu
791da9289c
python3-typer: upgrade 0.24.1 -> 0.25.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:56 -07:00
Wang Mingyu
e746d2a644
python3-tox: upgrade 4.52.1 -> 4.53.0
Changelog:
  eat(toml): allow bare range/labeled dicts in env_list

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:56 -07:00
Wang Mingyu
f7db694ca5
python3-simplejson: upgrade 3.20.2 -> 4.1.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:56 -07:00
Wang Mingyu
4b28593e9a
python3-sentry-sdk: upgrade 2.57.0 -> 2.58.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:56 -07:00
Wang Mingyu
7841103fcb
python3-python-multipart: upgrade 0.0.26 -> 0.0.27
Changelog:
============
- Pass parse offsets via constructors
- Add multipart header limits

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:55 -07:00
Wang Mingyu
40ea3157ef
python3-pytest-codspeed: upgrade 4.3.0 -> 4.4.0
Changelog:
===========
- fix: fix segfault caused by multiple activate_stack_trampoline
- fix: Exclude setup time from benchmark in walltime mode
- feat: collect Python toolchain information via instrument hooks environment API

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:55 -07:00
Wang Mingyu
f11c94d90e
python3-pyroute2: upgrade 0.9.5 -> 0.9.6
Changelog:
=============
- dhcp: call UNBOUND hook upon NAK
- ndb: support replacement policies for routes
- ndb: support localns setup and fix object cache
- iproute: fix set_netnsid() to be a coroutine
- ci: drop support for Python < 3.10

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:55 -07:00
Wang Mingyu
7995c66f68
python3-pymongo: upgrade 4.16.0 -> 4.17.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:55 -07:00
Wang Mingyu
ce66ccbde2
python3-pymisp: upgrade 2.5.33.1 -> 2.5.33.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:55 -07:00
Wang Mingyu
b76b720d7b
python3-pre-commit: upgrade 4.5.1 -> 4.6.0
Changelog:
============
- feature: allow --hook-dir to be missing to enable easier usage with git 2.54+ git hooks.
- fix: --hook-type is required

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:55 -07:00
Wang Mingyu
73cfca3ddd
python3-moteus: upgrade 0.3.100 -> 0.3.101
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:54 -07:00
Wang Mingyu
1e0639ffa3
python3-ipython: upgrade 9.12.0 -> 9.13.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:54 -07:00
Wang Mingyu
fe086de31a
python3-inline-snapshot: upgrade 0.32.6 -> 0.32.7
Changelog:
============
- Fixed snapshot comparison for dicts where keys are dataclass instances (or
  other custom objects used as dict keys), which previously caused corrupted
  snapshots - either collapsing multiple entries into one or appending duplicate
  keys on subsequent runs
- Fixed tuple snapshot updates to compare elements positionally rather than
  using sequence alignment, so existing expressions (e.g. 3 + 3) are preserved
  when elements are removed from or added to a tuple.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:54 -07:00
Wang Mingyu
de42f7888f
python3-identify: upgrade 2.6.18 -> 2.6.19
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:54 -07:00
Wang Mingyu
8c5dd332cd
python3-greenlet: upgrade 3.4.0 -> 3.5.0
Changelog:
  Remove the atexit callback.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:54 -07:00
Wang Mingyu
344f4f0638
python3-flask-wtf: upgrade 1.2.2 -> 1.3.0
Changelog:
==========
- pre-commit autoupdate
- remove slsa provenance
- Support for Python 3.14
- Try not to read uploaded files into memory
- Migrate the project to uv
- ReCaptcha field testing mode documentation
- Allow nonce in reCaptcha
- CSRF meta tag helper
- widget support the kwargs to add custom html attributes
- Respect exempts in CSRFProtect.protect()
- Adding RECAPTCHA_ENABLE to disable recaptcha
- Improve CSRF Documentation

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:54 -07:00
Wang Mingyu
a1ea487c50
python3-flask-marshmallow: upgrade 1.4.0 -> 1.5.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:53 -07:00
Wang Mingyu
6a7392f88f
python3-filelock: upgrade 3.25.2 -> 3.29.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:53 -07:00
Wang Mingyu
1dc5309883
python3-fastapi: upgrade 0.135.3 -> 0.136.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:53 -07:00
Wang Mingyu
d5ef0b6c8c
python3-faker: upgrade 40.13.0 -> 40.15.0
Changelog:
==========
- Add job providers for ar_DZ and fr_DZ locales (#2352).
- Add company providers for ar_DZ and fr_DZ locales (#2351).
- Add geo providers for ar_DZ and fr_DZ locales (#2350).
- Add currency providers for ar_DZ and fr_DZ locales (#2349).
- Add date_time provider for ar_DZ locale (#2348).
- Add ssn providers for ar_DZ and fr_DZ locales (#2347).
- v40.14.1 - 2026-04-17
- Fix UnicodeEncodeError in CLI docs on non-UTF consoles (#2362).
- v40.14.0 - 2026-04-17
- Fix: update placekitten URL to placekittens

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:53 -07:00
Wang Mingyu
2f18e97759
python3-cmd2: upgrade 3.4.0 -> 3.5.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:53 -07:00
Wang Mingyu
e020150dd9
python3-cmake: upgrade 4.3.1 -> 4.3.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:53 -07:00
Wang Mingyu
e454377810
python3-bumble: upgrade 0.0.226 -> 0.0.228
Changelog:
===========
- release command semaphore after timeout
- fix: add input validation to prevent remote crash from empty/malforme
- SDP: Fix wrong parameter size
- Hash and cache 128 bytes of UUID
- SDP: Migrate to dataclasses
- Make ConnectionPHY dataclass
- Add --locked to allow installing cargo-all-features
- Add read classic remote features support
- Fix Hive demo install failure
- Keys: Remove appdirs and improve typing
- Feature - Add SMP Debug Mode (Core Vol.3, Part H)
- Advertise in run_gatt_client_and_server

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:52 -07:00
Wang Mingyu
906979c699
python3-asyncinotify: upgrade 4.4.2 -> 4.4.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-12 01:06:52 -07:00
Jiaying Song
1785028847
python3-blivet: switch from setuptools3_legacy to python_setuptools_build_meta
Upstream blivet 3.13.2 ships a pyproject.toml declaring
setuptools.build_meta as its PEP 517 build backend. Update the recipe to
use the correct build class to resolve the pep517-backend QA warning.

Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:36 -07:00
Zhang Xiao
d389ed9e33
python3-aspectlib: Fix pytest compatibility
Partially backport upstream commit to fix pytest compatibility issue.

Fixes pytest errors e.g.
  | pytest.PytestRemovedIn9Warning: The (path: py.path.local) argument is deprecated, please use (collection_path: pathlib.Path)
  | see https://docs.pytest.org/en/latest/deprecations.html#py-path-local-arguments-for-hooks-replaced-with-pathlib-path
  | ERROR: Exit status is 1

Signed-off-by: Zhang Xiao <xiao.zhang@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-07 10:45:36 -07:00
Bartosz Golaszewski
36d46e1871
python3-pyfuse3: Move to meta-python
Add a recipe for pyfuse3 - a python package providing high-level bindings
to libfuse3.

Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-23 07:48:11 -07:00
Gyorgy Sarvari
1be9c09e23
python3-pillow: upgrade 12.1.1 -> 12.2.0
Contains fix for CVE-2026-40192

License-update: Copyright holder's name is spelled out fully instead of using abbreviation.

Changelog: https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari
468ee626f8
python3-grpcio: ignore CVE-2026-33186
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33186

The vulnerability only affects the Go implememtation of the library,
not the Python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Gyorgy Sarvari
aef8bc3422
protobuf, python3-protobuf: ignore CVE-2026-6409
Details: https://nvd.nist.gov/vuln/detail/CVE-2026-6409

The vulnerability impacts only the PHP library component, not the
cpp/python one. Ignore this CVE due to this.

Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:37 -07:00
Haiqing Bai
4152a23426
pytesseract: replace deprecated md5sum with sha256sum
SRC_URI[md5sum] has been deprecated and replace it with
SRC_URI[sha256sum] for proper integrity verification.

Signed-off-by: Haiqing Bai <haiqing.bai@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-20 07:35:36 -07:00
Khem Raj
2b16c16389
packagegroup-meta-python: Enable python3-pyatspi conditional upon GI data
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-16 12:21:08 -07:00
Leon Anavi
f34a878ee2
python3-moteus: Upgrade 0.3.99 -> 0.3.100
Upgrade to release 0.3.100:

- python: Fix compatibility with older python versions
- Add configurable faults for position or velocity tracking error
- Work around a linker warning with newer gcc
- tview: Suppress warnings about importing Axes3D
- moteus_gui: Include registernoop.py in our generated wheel
- Replace setup.py with pyproject.toml for Python package builds
- Use ::isfinite for Arduino compatibility
- Implement support for the RLS Orbis encoder over SPI

Fixes:

WARNING: python3-moteus-0.3.100-r0 do_check_backend: QA Issue:
inherits setuptools3 but has pyproject.toml with setuptools.build_meta,
use the correct class [pep517-backend]

License-Update: Use PKG-INFO

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:55 -07:00
Leon Anavi
50d807b18b
python3-soupsieve: Upgrade 2.8.2 -> 2.8.3
Upgrade to release 2.8.3:

- FIX: Fix inefficient attribute pattern.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Leon Anavi
b94206dc56
python3-huey: Upgrade 2.6.0 -> 3.0.0
Upgrade to release 3.0.0:

- Add chord() (map -> reduce) and group() (map) primitives.
- Add timeout (using SIGALRM for process and gevent.Timeout for
  greenlet) to control task running time. For threads, unfortunately,
  there's no good mechanism so instead APIs for cooperatively
  checking timeout are provided on the Task instance.
- Add simple fixed-window rate_limit() for tasks.
- Add Result.is_ready() method for checking result readiness.
- New option for low-latency result fetching, available for RedisHuey.
  To use, pass notify_result=True when initializing your Huey instance.
- Add new incr(key, amount=1) to storage API for atomic increment
  primitive. This is used by chord().
- Add new wait_result() method to storage APIs for efficiently waiting
  for a result to become ready. The default implementation uses the
  exponential backoff from the previous implementation of a blocking
  Result.get() - so no changes are needed. However if you have a custom
  storage implementation, this provides a mechanism for pub/sub or
  other notification of result readiness.
- Remove Python 2.x compatibility.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Leon Anavi
18a7b38f73
python3-uvicorn: Upgrade 0.42.0 -> 0.44.0
Upgrade to release 0.44.0:

- Implement websocket keepalive pings for websockets-sansio

From 0.43.0:

- Emit http.disconnect ASGI receive() event on server shutting down
  for streaming responses
- Use native context parameter for create_task on Python 3.11+
- Drop cast in ASGI types

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 15:07:54 -07:00
Liu Yiding
29305b3295
python3-mlcommons-loadgen: upgrade 5.1.2 -> 6.0.14
Update source-date-epoch.patch for 6.0.14

Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-15 07:24:54 -07:00
Wang Mingyu
22854e60c4
python3-zopeinterface: upgrade 8.2 -> 8.3
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:36 -07:00
Wang Mingyu
e0fc1b6d29
python3-virtualenv: upgrade 21.2.0 -> 21.2.1
Changelog:
===========
- Upgrade embedded pip/setuptools/wheel
- Enhance upgrade workflow: age check, dedup, issue tracking
- fix(create): use commonpath for correct path validation
- ci(workflows): add zizmor security auditing
- Add current and previous maintainers
- fix(ci): restore git credentials for release and upgrade jobs
- Fix broken Installation link in README
- fix: use terminal width for help formatting instead of hardcoded 240
- fix(nushell): surface actionable hint in deactivate error output
- ci: fix setup-uv warnings and drop brew@3.9
- fix(ci): fix pre-release push and release note generation
- fix(ci): check out repo in publish job for gh release notes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:36 -07:00
Wang Mingyu
e8272fb33d
python3-tox: upgrade 4.52.0 -> 4.52.1
Changelog:
==========
- use normalize_isa for architecture factor matching
- fix(pip): invalidate install cache on resolution env var changes

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu
bd948393d9
python3-soundcard: upgrade 0.4.5 -> 0.4.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu
df1c485e18
python3-smbus2: upgrade 0.6.0 -> 0.6.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu
00ee8e3bff
python3-rich: upgrade 14.3.3 -> 15.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu
18d1c54c72
python3-python-multipart: upgrade 0.0.24 -> 0.0.26
Changelog:
===========
- Skip preamble before the first multipart boundary more efficiently
- Silently discard epilogue data after the closing multipart boundary
- Add MIME content type info to File
- Handle CTE values case-insensitively
- Remove custom FormParser classes
- Add UPLOAD_DELETE_TMP to FormParser config
- Emit field_end for trailing bare field names on finalize
- Handle multipart headers case-insensitively
- Apply Apache-2.0 properly

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu
845d15ae2a
python3-pytest-httpx: upgrade 0.36.0 -> 0.36.2
License-Update: Copyright year updated to 2026.

Fixed:
  Document how to ignore query parameters while matching on URL.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:35 -07:00
Wang Mingyu
02e82f58c2
python3-pymodbus: upgrade 3.12.1 -> 3.13.0
Changelog:
============
- Correct missing types.
- Altherma heat pump control, with Home Assistant and updating server.
- SimDevice, use_bit_address allows different addressing for BITS.
- Remove 3.5char frame time check.
- Fixed Modbus*Context.
- Fix bug in ModbusDeviceContext.
- Fix log level in examples
- Fix CSS lookup for simulator server
- Fix usage docs in examples: add missing option --baudrate
- Doc:Finalice server/simulator narrative
- Fix codespell bug.
- Datastores uses SimData/SimDevice.
- Doc on how to convert to SimData/SimDevice.
- Fix Read Fifo Query RTU Frame Size
- Update server documentation (datstore).
- Update server examples to use SimData/SimDevice.
- Add server.async_get/setValues.
- Solve codeql caching problem.
- Remove unused methods in datastore.
- Remove datastore get/setValues (async_get/set exist)
- Revert "Combine ModbusSparseDataBlock with ModbusSequentialDataBlock."
- Combine ModbusSparseDataBlock with ModbusSequentialDataBlock.
- Remove RemoteDeviceContext datastore.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-04-14 08:59:34 -07:00