9989 Commits

Author SHA1 Message Date
Leon Anavi
dfe448d205
python3-starlette: Upgrade 1.2.1 -> 1.3.1
Upgrade to release 1.3.1:

- Use StarletteDeprecationWarning instead of DeprecationWarning
- Enforce max_fields and max_part_size in FormParser
- Enforce FormParser limits in parser callbacks

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:32 -07:00
Leon Anavi
bc1a962e4b
python3-httpx2: Add recipe
Add recipe for release 2.4.0:

- Add HTTPXDeprecationWarning, a UserWarning subclass shown by default
  so deprecations are visible without enabling warnings.
- Limit the number of chained Content-Encoding decoders to 5.
- Allow version 15 of rich in the cli extra.
- Parse an empty Digest auth realm without crashing.
- Decode IDNA labels in non-leading host positions.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:32 -07:00
Leon Anavi
f411606992
python3-dunamai: Add recipe
Add recipe for release 1.26.1:

- Fixed: The highest_tag argument was ignored in Version.from_any_vcs()
- Fixed: Compatibility with Pijul 1.0.0-beta.11

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:32 -07:00
Leon Anavi
05b6de0a7e
python3-uv-dynamic-versioning: Add recipe
Add recipe for release 0.14.0:

- Improve Version Source Docs
- ci: update actions
- docs: update README
- feat: support highest-tag option
- docs: update tips

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:32 -07:00
Leon Anavi
3bbae18504
python3-traitlets: Upgrade 5.15.0 -> 5.15.1
Upgrade to release 5.15.1:

- Fix CI (docs build, mypy tests, downstream)

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:31 -07:00
Leon Anavi
1200bc49e0
python3-faker: Upgrade 40.21.0 -> 40.23.0
Upgrade to release 40.23.0:

- Add French social security numbers with Corsican codes
- Fix typos in docstrings and comments

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:31 -07:00
Leon Anavi
6227b8a3e3
python3-geojson: Upgrade 3.2.0 -> 3.3.0
Upgrade to release 3.3.0:

- __all__ must be a sequence of strings: fix __init__.py and factory.py
- remove simplejson
- Add support for Python 3.14
- Remove EOL Python version support
- Update GH action versions for Node 24
- fix: convert dict features to Feature objects in FeatureCollection

Drop 0001-Allow-install-over-python-3.14-329.patch because it
has been applied in the upstream of the project.

License-Update: Update years

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:31 -07:00
Leon Anavi
c8b82e6d3d
python3-tornado: Upgrade 6.5.6 -> 6.5.7
Upgrade to release 6.5.7:

- CurlAsyncHTTPClient now fully resets the curl object before reusing
  it. This prevents incorrectly reusing options from a previous request,
  specifically including client SSL and credentials used for accessing
  proxies.

Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-14 23:13:31 -07:00
Wang Mingyu
702acd16d7
python3-aiohttp: upgrade 3.13.5 -> 3.14.1
License-Update: add full apache license

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-12 07:19:26 -07:00
Wang Mingyu
6b9932a9c2
python3-uvicorn: upgrade 0.44.0 -> 0.49.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
3745c6e673
python3-uefi-firmware: upgrade 1.13 -> 1.16
License-Update:
===============
- fix(packaging): build abi3 extension with stable suffix (#153)
- Fetch refs in release workflow
- Generate version dynamically from refs
- Add test dependencies (#151)

Changelog:
============
- Replace more bytes/str mixing
- Apply hardening fixes from upstream Tiano implementation
- Build generic stable ABI wheels targeting Python 3.10+
- Add test dependencies
- Parsing fixes and support for generate_checksums=True
- fix(packaging): build abi3 extension with stable suffix

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
1bb4ea4ca2
python3-typer: upgrade 0.26.4 -> 0.26.7
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
f1e3598217
python3-tox: upgrade 4.55.0 -> 4.55.1
Changelog:
 fix(config): propagate overrides through config references

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:03 -07:00
Wang Mingyu
706554e69b
python3-sentry-sdk: upgrade 2.61.0 -> 2.61.1
Changelog:
=============
- Pin fakeredis<2.36.0 in tests
- Unpin redis and fakeredis for tests
- (aiohttp) Unfurl spans explicitly instead of using pop()
- (tox) Migrate from pip to uv via tox-uv
- Pin redis<8 for rq

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
a887a8a188
python3-rich-toolkit: upgrade 0.19.10 -> 0.20.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
7ad06d7d6d
python3-python-multipart: upgrade 0.0.30 -> 0.0.32
Changelog:
============
- Speed up partial-boundary scanning for CR/LF-dense part data
- Speed up multipart header parsing and callback dispatch
- Bound header field name size before validating
- Validate Content-Length is non-negative in parse_form

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
66cf04e777
python3-pytest-aiohttp: upgrade 1.1.0 -> 1.1.1
Changelog:
===========
- Drop Python 3.9
- Typing improvements

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
7b4c4cf1a1
python3-pyais: upgrade 3.0.1 -> 3.1.0
Changelog:
===========
- implemented a pre-computed decoder plan for each class
- added json_to_data to aid in re-encoding JSON messages
- encode_msg & encode_dict now require a mandatory sentence argument

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
e319c1f874
python3-ipython: upgrade 9.14.0 -> 9.14.1
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:02 -07:00
Wang Mingyu
229ccfb4b9
python3-inline-snapshot: upgrade 0.34.0 -> 0.34.1
Changelog:
- Fixed snapshot_arg() to use the fix category (instead of create) when
  creating an argument with an existing non-ellipsis default argument value.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
0cc8f2f4bc
python3-filelock: upgrade 3.29.0 -> 3.29.1
Changelog:
===========
- docs: fix API docs of release()
- docs: clarify per-thread scope of FileLock configuration
- chore: improve filelock maintenance path
- fix(soft): refuse to follow symlinks when reading the lock file

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
377271b8ad
python3-faker: upgrade 40.19.1 -> 40.21.0
Changelog:
=========
- Add banks list for en_GB locale
- Add pan and gstin generators to en_IN SSN provider
- Improve barcode provider test coverage
- Bump liskin/gh-problem-matcher-wrap from 3 to 4

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
b1303254ff
python3-cyclonedx-python-lib: upgrade 11.7.0 -> 11.8.0
Changelog:
=============
- chore: extract glob for pyupgrade to separate script for cross-platform compatibility
- docs: update CDX summary
- chore: fix test coverage reporting
- chore(deps-dev): update tomli requirement from 2.3.0 to 2.4.1
- chore(release): use own GH app for releasing
- chore(ci): pin GitHub Actions to immutable SHAs while preserving tag tracking
- chore: add zizmor workflow to harden GitHub Actions security
- Update PULL_REQUEST_TEMPLATE.md
- chore: Update CONTRIBUTING.md
- chore(ci): comments for pinned actions
- feat: add support CycloneDX 1.7.1 & 1.6.2 & 1.5.1
- chore(deps): bump actions/create-github-app-token from 3.1.1 to 3.2.0
- chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.1
- chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.1
- feat: pull SPDX license IDs v1.1-3.28.0

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
77ec4f1e00
python3-cmd2: upgrade 3.5.1 -> 4.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
759c9fce51
python3-cbor2: upgrade 6.1.1 -> 6.1.2
Changelog:
===========
- Fixed incorrect tracking of string references for definite-length text
  strings of length greater than 65536
- Fixed cbor2.load() crash caused by incorrect handling of internal read buffer
  extension during stream deserialization.

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:01 -07:00
Wang Mingyu
849546a867
python3-beautifulsoup4: upgrade 4.14.3 -> 4.15.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-09 18:55:00 -07:00
Khem Raj
77e7f2433f
python3-pytest-cache: remove dead recipe
pytest-cache has been unmaintained since its last release in 2013 and
its functionality was long ago merged into pytest core. Drop the recipe
along with its packagegroup-meta-python entry and the now-redundant ptest
dependency in python3-fastjsonschema.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-08 16:35:19 -07:00
Khem Raj
0ad40d5eee
python3-pathtools3: remove dead recipe
pathtools3 is an abandoned Python 3 fork. Its last release (0.2.1) was
in 2018 and the upstream original pathtools has been dead since 2011.
Its only historical consumer, python3-watchdog, dropped the dependency
long ago and is now at 6.0.0 in OE. Nothing else references it.

Drop the recipe and its packagegroup-meta-python entry.

Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-08 16:34:37 -07:00
Ankur Tyagi
18576ace94
python3-django: upgrade 5.2.14 -> 5.2.15
https://docs.djangoproject.com/en/dev/releases/5.2.15/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:49 -07:00
Ankur Tyagi
4d1b287447
python3-django: upgrade 6.0.5 -> 6.0.6
https://docs.djangoproject.com/en/dev/releases/6.0.6/

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:49 -07:00
Wang Mingyu
2074aa8e0d
python3-zopeinterface: upgrade 8.4 -> 8.5
Changelog:
===========
- Build and upload free-threaded (cp314t, cp315t) wheels for all platforms.
- Replace all remaining PyDict_GetItem() calls in the C extension with
  exception-safe alternatives (PyDict_Contains, PyDict_GetItemWithError).

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:45 -07:00
Wang Mingyu
4ba309bd44
python3-virtualenv: upgrade 21.3.3 -> 21.4.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
a5521d2f8c
python3-typer: upgrade 0.25.1 -> 0.26.4
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
babb68c6cb
python3-tox: upgrade 4.54.0 -> 4.55.0
Changelog:
=============
- ci(schemastore): sync fork before pushing branch
- feat: Also pass TERMINFO when in an interactive shell
- fix(pip): skip constrain_package_deps when constraints is set

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
7efb03070d
python3-tornado: upgrade 6.5.5 -> 6.5.6
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:44 -07:00
Wang Mingyu
0ded2930cf
python3-starlette: upgrade 1.1.0 -> 1.2.1
Changelog:
============
- Support httpx2 in the test client
- Use httpx2 for type checking in the testclient module
- Add assert error for requires() when request param is not Request type

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:43 -07:00
Wang Mingyu
bcd5b983f8
python3-service-identity: upgrade 24.2.0 -> 26.1.0
Changelog:
===========
- Python 3.14 and 3.15 are now officially supported. #85 #93
- service-identity now uses cryptography's Rust-based ASN.1 decoder and doesn't
  depend on pyasn1 and pyasn1-modules anymore.
- Verifying a single-label hostname (e.g. localhost) against a wildcard
  certificate pattern now raises VerificationError cleanly instead of crashing
  with an opaque ValueError

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:43 -07:00
Wang Mingyu
1731e2583f
python3-serpent: upgrade 1.42 -> 1.43
Changelog:
===========
- Fixed multiple bugs in serialization and parsing (complex number edge cases, custom types etc)
- Changed java maven publishing method

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:43 -07:00
Wang Mingyu
620f777776
python3-sentry-sdk: upgrade 2.60.0 -> 2.61.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:42 -07:00
Wang Mingyu
2aa01762f5
python3-redis: upgrade 7.4.0 -> 8.0.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:42 -07:00
Wang Mingyu
495ee09eb1
python3-python-multipart: upgrade 0.0.29 -> 0.0.30
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:42 -07:00
Wang Mingyu
df45dce096
python3-pytest-asyncio: upgrade 1.3.0 -> 1.4.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
2e97a0caa1
python3-pyproject-api: upgrade 1.10.0 -> 1.10.1
Changelog:
===========
- chore(tox): migrate tox.ini to tox.toml
- Migrate type checking from mypy to ty
- Move from extras to dependency-groups
- Align dependency versions across projects
- Add permissions to workflows
- Move SECURITY.md to .github/SECURITY.md
- Switch FUNDING.yml to github: gaborbernat
- Standardize .github files to .yaml suffix
- ci(workflows): add zizmor security auditing
- chore: improve pyproject-api maintenance path

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
e85cda200b
python3-platformdirs: upgrade 4.9.6 -> 4.10.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
92587e59c9
python3-parse: upgrade 1.22.0 -> 1.22.1
Changelog:
  Parse zero-precision floats formatted without a decimal point

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:41 -07:00
Wang Mingyu
b28e7d6753
python3-moteus: upgrade 0.3.101 -> 1.0.0
Changelog:
==========
- moteus_tool --calibrate for controllers configured for hall commutation now
  calibrate a fine position for each hall transition, which improves
  performance and consistency for hall based configurations
- moteus.move_to now respects the velocity_limit argument across all devices
- moteus.move_to works properly when exiting the stopped state
- Don't inject await when it isn't needed, rending some python mode definitions
  possible that previously would have triggered syntax errors
- Fix the order of D and Q axes for current mode requests

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:40 -07:00
Wang Mingyu
be121dbd8b
python3-ipython: upgrade 9.13.0 -> 9.14.0
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:40 -07:00
Wang Mingyu
9f782944ea
python3-inline-snapshot: upgrade 0.33.0 -> 0.34.0
Changelog:
===========
- get_snapshot_value() now accepts a which parameter ("new" or "old") to select
  whether to return the new (just-compared) or the old (previously stored)
  snapshot value
- Example.run_pytest: deterministic test order by using -p no:ranodmly

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:40 -07:00
Wang Mingyu
4419d084a7
python3-httptools: upgrade 0.7.1 -> 0.8.0
0001-Allow-building-with-latest-setuptools.patch
removed since it's included in 0.8.0

Changelog:
===========
- Add http-parser and llhttp licenses into the wheels
- Mark cython module as free-threading compatible
- Fix all typing issues
- Bump llhttp to 9.4.1
- Security: fix URL truncation issue
- Allow building with latest setuptools

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:39 -07:00
Wang Mingyu
144df89d04
python3-coverage: upgrade 7.14.0 -> 7.14.1
Changelog:
===========
- Fix: the HTML report used typographic niceties to make file paths more
  readable by adding a small amount of space around slashes.
- Add a 3.16 PyPI classifier

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
2026-06-07 18:21:39 -07:00