From c41f0fc54b9112c3b6d479e3fc6de9b0250ea01f Mon Sep 17 00:00:00 2001 From: Wei-Ting Yang Date: Mon, 11 May 2026 12:49:44 +0800 Subject: [PATCH] python-urllib3: update to 2.7.0 Fix CVE-2026-44431 and CVE-2026-44432. Full release notes: https://github.com/urllib3/urllib3/releases/tag/2.7.0 - Drop 0001-relax-setuptools-scm-version-constraint.patch since upstream changed the setuptools-scm constraint to >=8,<11. Signed-off-by: Wei-Ting Yang --- lang/python/python-urllib3/Makefile | 6 +++--- ...0001-relax-setuptools-scm-version-constraint.patch | 11 ----------- 2 files changed, 3 insertions(+), 14 deletions(-) delete mode 100644 lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch diff --git a/lang/python/python-urllib3/Makefile b/lang/python/python-urllib3/Makefile index 25d92fe5c4..9acc9fc71e 100644 --- a/lang/python/python-urllib3/Makefile +++ b/lang/python/python-urllib3/Makefile @@ -8,8 +8,8 @@ include $(TOPDIR)/rules.mk PKG_NAME:=python-urllib3 -PKG_VERSION:=2.6.3 -PKG_RELEASE:=2 +PKG_VERSION:=2.7.0 +PKG_RELEASE:=1 PKG_MAINTAINER:=Josef Schlehofer PKG_LICENSE:=MIT @@ -17,7 +17,7 @@ PKG_LICENSE_FILES:=LICENSE.txt PKG_CPE_ID:=cpe:/a:python:urllib3 PYPI_NAME:=urllib3 -PKG_HASH:=1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed +PKG_HASH:=231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c PKG_BUILD_DEPENDS:= \ python-hatch-vcs/host \ diff --git a/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch b/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch deleted file mode 100644 index d3791ef8cc..0000000000 --- a/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch +++ /dev/null @@ -1,11 +0,0 @@ ---- a/pyproject.toml -+++ b/pyproject.toml -@@ -1,7 +1,7 @@ - # This file is protected via CODEOWNERS - - [build-system] --requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8,<10"] -+requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8"] - build-backend = "hatchling.build" - - [project]