9419 Commits

Author SHA1 Message Date
Wang Mingyu
6b9932a9c2
python3-uvicorn: upgrade 0.44.0 -> 0.49.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
3745c6e673
python3-uefi-firmware: upgrade 1.13 -> 1.16
License-Update:
===============
- fix(packaging): build abi3 extension with stable suffix (#153)
- Fetch refs in release workflow
- Generate version dynamically from refs
- Add test dependencies (#151)

Changelog:
============
- Replace more bytes/str mixing
- Apply hardening fixes from upstream Tiano implementation
- Build generic stable ABI wheels targeting Python 3.10+
- Add test dependencies
- Parsing fixes and support for generate_checksums=True
- fix(packaging): build abi3 extension with stable suffix

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
1bb4ea4ca2
python3-typer: upgrade 0.26.4 -> 0.26.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
f1e3598217
python3-tox: upgrade 4.55.0 -> 4.55.1
Changelog:
 fix(config): propagate overrides through config references

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
706554e69b
python3-sentry-sdk: upgrade 2.61.0 -> 2.61.1
Changelog:
=============
- Pin fakeredis<2.36.0 in tests
- Unpin redis and fakeredis for tests
- (aiohttp) Unfurl spans explicitly instead of using pop()
- (tox) Migrate from pip to uv via tox-uv
- Pin redis<8 for rq

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
a887a8a188
python3-rich-toolkit: upgrade 0.19.10 -> 0.20.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
7ad06d7d6d
python3-python-multipart: upgrade 0.0.30 -> 0.0.32
Changelog:
============
- Speed up partial-boundary scanning for CR/LF-dense part data
- Speed up multipart header parsing and callback dispatch
- Bound header field name size before validating
- Validate Content-Length is non-negative in parse_form

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
66cf04e777
python3-pytest-aiohttp: upgrade 1.1.0 -> 1.1.1
Changelog:
===========
- Drop Python 3.9
- Typing improvements

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
7b4c4cf1a1
python3-pyais: upgrade 3.0.1 -> 3.1.0
Changelog:
===========
- implemented a pre-computed decoder plan for each class
- added json_to_data to aid in re-encoding JSON messages
- encode_msg & encode_dict now require a mandatory sentence argument

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
e319c1f874
python3-ipython: upgrade 9.14.0 -> 9.14.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
229ccfb4b9
python3-inline-snapshot: upgrade 0.34.0 -> 0.34.1
Changelog:
- Fixed snapshot_arg() to use the fix category (instead of create) when
  creating an argument with an existing non-ellipsis default argument value.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
0cc8f2f4bc
python3-filelock: upgrade 3.29.0 -> 3.29.1
Changelog:
===========
- docs: fix API docs of release()
- docs: clarify per-thread scope of FileLock configuration
- chore: improve filelock maintenance path
- fix(soft): refuse to follow symlinks when reading the lock file

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
377271b8ad
python3-faker: upgrade 40.19.1 -> 40.21.0
Changelog:
=========
- Add banks list for en_GB locale
- Add pan and gstin generators to en_IN SSN provider
- Improve barcode provider test coverage
- Bump liskin/gh-problem-matcher-wrap from 3 to 4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
b1303254ff
python3-cyclonedx-python-lib: upgrade 11.7.0 -> 11.8.0
Changelog:
=============
- chore: extract glob for pyupgrade to separate script for cross-platform compatibility
- docs: update CDX summary
- chore: fix test coverage reporting
- chore(deps-dev): update tomli requirement from 2.3.0 to 2.4.1
- chore(release): use own GH app for releasing
- chore(ci): pin GitHub Actions to immutable SHAs while preserving tag tracking
- chore: add zizmor workflow to harden GitHub Actions security
- Update PULL_REQUEST_TEMPLATE.md
- chore: Update CONTRIBUTING.md
- chore(ci): comments for pinned actions
- feat: add support CycloneDX 1.7.1 & 1.6.2 & 1.5.1
- chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
- chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.1
- chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1
- feat: pull SPDX license IDs v1.1-3.28.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
77ec4f1e00
python3-cmd2: upgrade 3.5.1 -> 4.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
759c9fce51
python3-cbor2: upgrade 6.1.1 -> 6.1.2
Changelog:
===========
- Fixed incorrect tracking of string references for definite-length text
  strings of length greater than 65536
- Fixed cbor2.load() crash caused by incorrect handling of internal read buffer
  extension during stream deserialization.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
849546a867
python3-beautifulsoup4: upgrade 4.14.3 -> 4.15.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:00 -07:00
Khem Raj
77e7f2433f
python3-pytest-cache: remove dead recipe
pytest-cache has been unmaintained since its last release in 2013 and
its functionality was long ago merged into pytest core. Drop the recipe
along with its packagegroup-meta-python entry and the now-redundant ptest
dependency in python3-fastjsonschema.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-08 16:35:19 -07:00
Khem Raj
0ad40d5eee
python3-pathtools3: remove dead recipe
pathtools3 is an abandoned Python 3 fork. Its last release (0.2.1) was
in 2018 and the upstream original pathtools has been dead since 2011.
Its only historical consumer, python3-watchdog, dropped the dependency
long ago and is now at 6.0.0 in OE. Nothing else references it.

Drop the recipe and its packagegroup-meta-python entry.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-08 16:34:37 -07:00
Ankur Tyagi
18576ace94
python3-django: upgrade 5.2.14 -> 5.2.15
https://docs.djangoproject.com/en/dev/releases/5.2.15/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:49 -07:00
Ankur Tyagi
4d1b287447
python3-django: upgrade 6.0.5 -> 6.0.6
https://docs.djangoproject.com/en/dev/releases/6.0.6/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:49 -07:00
Wang Mingyu
2074aa8e0d
python3-zopeinterface: upgrade 8.4 -> 8.5
Changelog:
===========
- Build and upload free-threaded (cp314t, cp315t) wheels for all platforms.
- Replace all remaining PyDict_GetItem() calls in the C extension with
  exception-safe alternatives (PyDict_Contains, PyDict_GetItemWithError).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:45 -07:00
Wang Mingyu
4ba309bd44
python3-virtualenv: upgrade 21.3.3 -> 21.4.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
a5521d2f8c
python3-typer: upgrade 0.25.1 -> 0.26.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
babb68c6cb
python3-tox: upgrade 4.54.0 -> 4.55.0
Changelog:
=============
- ci(schemastore): sync fork before pushing branch
- feat: Also pass TERMINFO when in an interactive shell
- fix(pip): skip constrain_package_deps when constraints is set

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
7efb03070d
python3-tornado: upgrade 6.5.5 -> 6.5.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
0ded2930cf
python3-starlette: upgrade 1.1.0 -> 1.2.1
Changelog:
============
- Support httpx2 in the test client
- Use httpx2 for type checking in the testclient module
- Add assert error for requires() when request param is not Request type

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:43 -07:00
Wang Mingyu
bcd5b983f8
python3-service-identity: upgrade 24.2.0 -> 26.1.0
Changelog:
===========
- Python 3.14 and 3.15 are now officially supported. #85 #93
- service-identity now uses cryptography's Rust-based ASN.1 decoder and doesn't
  depend on pyasn1 and pyasn1-modules anymore.
- Verifying a single-label hostname (e.g. localhost) against a wildcard
  certificate pattern now raises VerificationError cleanly instead of crashing
  with an opaque ValueError

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:43 -07:00
Wang Mingyu
1731e2583f
python3-serpent: upgrade 1.42 -> 1.43
Changelog:
===========
- Fixed multiple bugs in serialization and parsing (complex number edge cases, custom types etc)
- Changed java maven publishing method

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:43 -07:00
Wang Mingyu
620f777776
python3-sentry-sdk: upgrade 2.60.0 -> 2.61.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:42 -07:00
Wang Mingyu
2aa01762f5
python3-redis: upgrade 7.4.0 -> 8.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:42 -07:00
Wang Mingyu
495ee09eb1
python3-python-multipart: upgrade 0.0.29 -> 0.0.30
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:42 -07:00
Wang Mingyu
df45dce096
python3-pytest-asyncio: upgrade 1.3.0 -> 1.4.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
2e97a0caa1
python3-pyproject-api: upgrade 1.10.0 -> 1.10.1
Changelog:
===========
- chore(tox): migrate tox.ini to tox.toml
- Migrate type checking from mypy to ty
- Move from extras to dependency-groups
- Align dependency versions across projects
- Add permissions to workflows
- Move SECURITY.md to .github/SECURITY.md
- Switch FUNDING.yml to github: gaborbernat
- Standardize .github files to .yaml suffix
- ci(workflows): add zizmor security auditing
- chore: improve pyproject-api maintenance path

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
e85cda200b
python3-platformdirs: upgrade 4.9.6 -> 4.10.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
92587e59c9
python3-parse: upgrade 1.22.0 -> 1.22.1
Changelog:
  Parse zero-precision floats formatted without a decimal point

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
b28e7d6753
python3-moteus: upgrade 0.3.101 -> 1.0.0
Changelog:
==========
- moteus_tool --calibrate for controllers configured for hall commutation now
  calibrate a fine position for each hall transition, which improves
  performance and consistency for hall based configurations
- moteus.move_to now respects the velocity_limit argument across all devices
- moteus.move_to works properly when exiting the stopped state
- Don't inject await when it isn't needed, rending some python mode definitions
  possible that previously would have triggered syntax errors
- Fix the order of D and Q axes for current mode requests

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:40 -07:00
Wang Mingyu
be121dbd8b
python3-ipython: upgrade 9.13.0 -> 9.14.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:40 -07:00
Wang Mingyu
9f782944ea
python3-inline-snapshot: upgrade 0.33.0 -> 0.34.0
Changelog:
===========
- get_snapshot_value() now accepts a which parameter ("new" or "old") to select
  whether to return the new (just-compared) or the old (previously stored)
  snapshot value
- Example.run_pytest: deterministic test order by using -p no:ranodmly

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:40 -07:00
Wang Mingyu
4419d084a7
python3-httptools: upgrade 0.7.1 -> 0.8.0
0001-Allow-building-with-latest-setuptools.patch
removed since it's included in 0.8.0

Changelog:
===========
- Add http-parser and llhttp licenses into the wheels
- Mark cython module as free-threading compatible
- Fix all typing issues
- Bump llhttp to 9.4.1
- Security: fix URL truncation issue
- Allow building with latest setuptools

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:39 -07:00
Wang Mingyu
144df89d04
python3-coverage: upgrade 7.14.0 -> 7.14.1
Changelog:
===========
- Fix: the HTML report used typographic niceties to make file paths more
  readable by adding a small amount of space around slashes.
- Add a 3.16 PyPI classifier

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:39 -07:00
Leon Anavi
0d541bae09
python3-cbor2: Upgrade 5.9.0 -> 6.1.1
Upgrade to release 6.1.1:

- Fixed cbor2.load() returning corrupted data for payloads exceeding
  4096 bytes

From 6.1.0:

- Added the allow_duplicate_keys parameter to CBORDecoder, load and
  loads (default: True). When set to False, a CBORDecodeError is raised
  upon encountering a duplicate key within the same map.
- Added support for decoding from any object supporting the buffer API
  (e.g. memoryview or bytearray) in addition to bytes
- Fixed compatibility issues with 32-bit systems

From 6.0.1:

- Fixed an error in the mutability logic during decoding, leading to
  values being decoded as immutable in unexpected places

From 6.0.0:

- MAJOR REWRITE: The Python and C implementations of the encoder and
  decoder were replaced with a single, Rust-based implementation in the
  interest of maintainability.
- BACKWARD INCOMPATIBLE Changed the signature of the tag_hook decoder
  callables to accept (CBORTag, immutable as arguments instead of
  CBORDecoder, CBORTag)
- BACKWARD INCOMPATIBLE Changed the signature of the object_hook decoder
  callables to accept (Mapping[Any, Any], bool) instead of (CBORDecoder,
  dict[Any, Any])
- BACKWARD INCOMPATIBLE Removed the break_marker singleton as no longer
  necessary
- BACKWARD INCOMPATIBLE Removed the CBORDecodeValueError exception,
  instead chaining ValueError or TypeError to a CBORDecodeError
- BACKWARD INCOMPATIBLE Changed the decoding of semantic tag 261 to
  yield an IPv4Interface or IPv6Interface if the address contains host
  bits
- BACKWARD INCOMPATIBLE Removed the individual decoding functions from
  the API as they were mistakenly called directly by users. Please open
  an issue if you need them back.
- BACKWARD INCOMPATIBLE Changed the encoding of IP addresses to use the
  semantic tags 52 and 54 instead of the deprecated 260 and 261
- BACKWARD INCOMPATIBLE Dropped the deprecated cbor2.decoder and
  cbor2.encoder modules - everything in the API is now importable
  directly from cbor2
- BACKWARD INCOMPATIBLE The cbor2.FrozenDict class has now been renamed
  frozendict and is not available on Python 3.15 where the built-in
  frozendict class must be used instead
- Added the semantic_decoders decoder option to add or override decoders
  for specific semantic tags
- Added the immutable decoder flag to always use immutable containers
  where possible when decoding a CBOR stream
- Added the allow_indefinite decoder option to optionally disallow
  indefinite-length strings and containers
- Dropped support for Python 3.9
- Fixed the decoder not rejecting invalid two-byte simple value
  sequences (0xF800 - 0xF81F)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:35 -07:00
Wang Mingyu
61b42a73b5
python3-zeroconf: upgrade 0.148.0 -> 0.149.16
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:55 -07:00
Wang Mingyu
a4bcf24f4f
python3-yarl: upgrade 1.23.0 -> 1.24.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:54 -07:00
Wang Mingyu
2b0a9579ec
python3-wrapt: upgrade 2.1.2 -> 2.2.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:54 -07:00
Wang Mingyu
9966cea909
python3-vector: upgrade 1.8.0 -> 1.8.1
Changelog:
==========
- fix: get rid of cupy<14 quick fix
- fix: _wrap_results skips momentum equivalents
- ci: bump setup-uv to maintained tag scheme
- ci: enable numba testing in 3.14t

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:54 -07:00
Wang Mingyu
0080b0490b
python3-types-psutil: upgrade 7.2.2.20260508 -> 7.2.2.20260518
Changelog:
  Upgrade black to 26.5.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:54 -07:00
Wang Mingyu
78b112d570
python3-telnetlib3: upgrade 2.6.0 -> 4.0.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:54 -07:00
Wang Mingyu
9b722556b4
python3-stevedore: upgrade 5.7.0 -> 5.8.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:54 -07:00
Wang Mingyu
9dbe4374a2
python3-starlette: upgrade 1.0.0 -> 1.1.0
Changelog:
==========
- Ignore malformed Host header when constructing request.url
- Use "application/octet-stream" as the FileResponse media type fallback
- Only dispatch standard HTTP verbs in HTTPEndpoint
- Reject absolute paths in StaticFiles.lookup_path

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-05-31 03:08:53 -07:00