Commit Graph

2579 Commits

Author SHA1 Message Date
Alexandru Ardelean
4edd68feda python-pytest: bump to 9.0.2
Changelog since 7.4.0:
- v8.1.0: Add namespace packages support; fine-grained verbosity control;
  improved --import-mode=importlib behavior
- v8.2.0: Add command-line argument files via @filename syntax; add
  PYTEST_VERSION env variable; requires pluggy>=1.5.0
- v8.3.0: Add --xfail-tb flag; marker keyword matching; --no-fold-skipped
  option; better virtual environment detection
- v8.4.0: Async tests without suitable plugin now fail (not warned);
  tests returning non-None values now fail; drop Python 3.8 support;
  add pytest.RaisesGroup for ExceptionGroup matching
- v9.0.0: Drop Python 3.9 support; subtest support via pytest.Subtests;
  native TOML config in [tool.pytest] table; strict mode options;
  PytestRemovedIn9Warning deprecations are now errors
- v9.0.1: Restore "raise unittest.SkipTest" support; disable terminal
  progress for iTerm2
- v9.0.2: Disable terminal progress by default; fix config.inicfg
  compatibility; fix quadratic-time behavior with unittest subtests

Add python3-pygments dependency (new requirement since 8.x).
Add test.sh.

Full changelog:
https://github.com/pytest-dev/pytest/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-29 08:31:47 +03:00
Alexandru Ardelean
78d8eedb78 python-pygments: new package (2.19.2)
Pygments is a generic syntax highlighting library that supports over
500 languages and text formats. It is used by a wide range of tools
for terminal, HTML, and LaTeX output.

Added as a required dependency for python-pytest >= 7.x, which uses
Pygments to syntax-highlight code snippets in failure reports and
tracebacks.

The package uses hatchling as its build backend and has no runtime
dependencies beyond the Python standard library.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-29 08:31:47 +03:00
Alexandru Ardelean
41515642ef python-pluggy: bump to 1.6.0
Required by python-pytest >= 9.0.0, which needs pluggy >= 1.5.0.

v1.5.0 added support for deprecating specific hook parameters via
warn_on_impl_args (used by pytest 9.x hookspecs). Without this,
pytest fails to import with:
  TypeError: HookspecMarker.__call__() got an unexpected keyword
  argument 'warn_on_impl_args'

v1.6.0 changes:
- Drop Python 3.8 support
- Fix regression where get_result() on a failed Result caused the
  exception traceback to grow longer on each call
- Fix StopIteration passing through hook wrappers
- Fix Python 3.14 SyntaxWarning

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-28 20:56:59 +02:00
Alexandru Ardelean
a373dcfc86 python-setuptools-scm: bump to version 10.0.3
Seems they released a new version already.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-28 20:56:59 +02:00
Alexandru Ardelean
2049fd639d python-vcs-versioning: add python-build/host dep
Fixes build errors.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-28 20:56:59 +02:00
Jean Thomas
7f2db0e900 python-poetry-core: bump to 2.3.1
Bump to latest available version.

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>
2026-03-26 16:53:59 +02:00
Alexandru Ardelean
a7f33e7daf python-pycparser: bump to 3.0
v3.0 removes the dependency on PLY by rewriting pycparser with a
hand-written lexer and recursive-descent parser for C. No API changes
or functionality changes - the same AST is produced as before.

Other changes:
- Drop EOL Python 3.8 and 3.9 support (minimum now 3.10)
- Add support for Python 3.14

Since PLY is no longer used:
- Remove python-ply from PKG_BUILD_DEPENDS and HOST_BUILD_DEPENDS
- Remove +python3-ply from package DEPENDS
- Remove 001-use-external-ply.patch (no longer needed)

Full release notes:
https://github.com/eliben/pycparser/releases/tag/release_v3.00

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-25 14:56:35 +02:00
Alexandru Ardelean
47d4485ae4 python-psutil: bump to 7.2.2
Notable changes since 5.9.5:

v6.0.0:
- process_iter() is now ~20x faster (no longer pre-emptively checks
  PID reuse); add process_iter.cache_clear() API
- Process.connections() renamed to Process.net_connections()
  (old name deprecated)
- disk_partitions() namedtuple drops maxfile/maxpath fields
- Support building with free-threaded CPython 3.13

v7.0.0:
- Drop Python 2.7 support

v7.2.0:
- New heap_info() and heap_trim() functions for native C heap allocator
  access (glibc, mimalloc, libmalloc)
- Tests are no longer part of the installed package

v7.2.2:
- [Linux] Process.wait() now uses pidfd_open() + poll() for waiting
  (no busy loop, faster response); requires Linux >= 5.3 + Python 3.9,
  falls back to polling otherwise
- [macOS/BSD] Process.wait() now uses kqueue() for waiting
- Various macOS memory leak and error handling fixes

Also refresh 100-fix-non-Linux-compile.patch for the updated setup.py
(noqa comment style changed; _compat imports removed upstream).
Add test.sh.

Full changelog:
https://github.com/giampaolo/psutil/blob/master/HISTORY.rst

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-25 07:05:06 +02:00
Alexandru Ardelean
facb68ee69 django-restframework: bump to 3.17.0
v3.17.0 changes:
- Drop Python 3.9 support (minimum now 3.10)
- Drop deprecated coreapi support
- Add Python 3.14 support
- Add ability to specify output format for DurationField
- Add missing decorators: @versioning_class(), @content_negotiation_class(),
  @metadata_class() for function-based views
- Support violation messages in UniqueConstraint

Full release notes:
https://github.com/encode/django-rest-framework/releases/tag/3.17.0

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-24 18:26:33 +02:00
Alexandru Ardelean
7e5c87e074 micropython: bump to 1.27.0
Also update micropython-lib to v1.27.0. Switch micropython-lib from a
git source to the release tarball from:
https://github.com/micropython/micropython-lib/releases/tag/v1.27.0

MPY_VERSION remains at 6, no ABI change.

Adjusted patches.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-24 14:38:52 +02:00
Alexandru Ardelean
24cd935ac8 python-setuptools-scm: bump to 10.0.1
v10.0.0 is a major release with these key changes:
- Drop Python 3.8 and 3.9 support; minimum is now Python 3.10
- Depend on vcs-versioning for core version inference logic, allowing
  other build backends to reuse it without a setuptools dependency
- Version files (write_to, version_file) are now written to the build
  directory during build_py instead of the source tree during version
  inference, enabling builds from read-only source directories

v10.0.1 fixes the release pipeline tooling only (no functional changes).

Full release notes:
https://github.com/pypa/setuptools-scm/releases/tag/setuptools-scm-v10.0.0

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-24 06:24:12 +02:00
Alexandru Ardelean
89786f5c35 python-vcs-versioning: add new package (version 1.0.1)
vcs-versioning provides the core VCS version inference logic that was
extracted from setuptools-scm into a standalone library. This enables
other build backends to use the same version inference without a
setuptools dependency.

Required as a new dependency for setuptools-scm >= 10.0.0.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-24 06:24:12 +02:00
Alexandru Ardelean
20fbeb8bca python-chardet: bump to 7.2.0
Bump to 7.2.0.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-24 06:23:37 +02:00
Alexandru Ardelean
7842061a70 python-more-itertools: drop package (no longer used)
Was needed by python-zipp
Right now, it's no longer needed, so it can be pulled by pip
on the device (if needed).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 20:52:42 +02:00
Alexandru Ardelean
df78cf6b01 pillow: bump to 12.1.1
Pillow 12.x introduces pybind11-based C extension bindings and a
custom build backend (wrapping setuptools.build_meta). This requires:
- Replacing python-setuptools-scm with python-setuptools as build dep
- Adding python-pybind11 as a new build dependency (host)
- Updating build config settings from --build-option flags to the new
  key=value format (e.g. zlib=enable, imagequant=disable)
- Removing the separate webpmux flag (merged into webp feature)

Full release notes:
https://pillow.readthedocs.io/en/stable/releasenotes/index.html

Remove 001-remove-setuptools-version-limit.patch
That's an old relic since when setuptools was packaged inside Python3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 20:23:25 +02:00
Alexandru Ardelean
432fa809dd python-pybind11: add new package (version 2.13.6)
pybind11 is a header-only library that exposes C++ types in Python,
used as a build-time dependency by packages like Pillow 12.x.

Uses setuptools as its build backend.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 20:23:25 +02:00
Alexandru Ardelean
df0744b3fb python-werkzeug: bump to 3.1.6
Changelog since 3.1.3:
- v3.1.4: Fix special device name access on Windows in send_from_directory
  (security); fix multipart parser \r\n handling at chunk boundaries;
  improve Watchdog reloader CPU efficiency
- v3.1.5: Extend Windows path protection against special device names
  (security); fix multipart form parser \r\n at chunk boundaries; fix
  AttributeError in DebuggedApplication with pin_security=False
- v3.1.6: Block special device names in multi-segment paths on Windows
  via safe_join (security)

Add test.sh.

Full changelog:
https://werkzeug.palletsprojects.com/en/stable/changes/

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 18:22:15 +02:00
Alexandru Ardelean
2bb3817f26 python-pyasn1: bump to 0.6.3
Changelog since 0.6.2:
- Fix CVE-2026-30922: nesting depth limit in ASN.1 decoder to prevent
  stack overflow from deeply nested structures
- Fix OverflowError from oversized BER length fields (#54)
- Fix incorrect stacklevel in deprecation warnings (#86)
- Fix fractional seconds parsing in asDateTime function (#81)

Full changelog: https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 11:41:09 +02:00
Alexandru Ardelean
54e813217a python-attrs: bump to 26.1.0
Changelog since 25.3.0:
- v25.4.0: Add python-hatch-fancy-pypi-readme as build dependency
- v26.1.0: Field aliases now resolved before calling field_transformer,
  with new Attribute.alias_is_default flag (#1509); fix type annotations
  for validators.optional() with tuples (#1496); validators.disabled()
  now supports nesting (#1513); frozen classes support
  on_setattr=attrs.setters.NO_OP (#1515); attrs.fields() accepts
  instances in addition to classes (#1529)

Full changelog: https://www.attrs.org/en/stable/changelog.html

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 11:08:42 +02:00
Alexandru Ardelean
60c5eb29a3 python-attrs: bump to 25.4.0
Changes since 23.1.0:
- attrs 24.1.0: add __attrs_init__ customization via on_setattr
- attrs 24.2.0: improve type annotations, deprecate older APIs
- attrs 25.1.0: Python 3.13 support, drop Python 3.7
- attrs 25.3.0: further type annotation improvements
- attrs 25.4.0: bug fixes and maintenance

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 08:48:29 +02:00
Alexandru Ardelean
dc489c0822 python-hatch-fancy-pypi-readme: bump to 25.1.0
Changes since 23.1.0:
- 24.1.0: migrate from setup.cfg to pyproject.toml
- 25.1.0: drop Python 3.7 and 3.8 support; maintenance updates

Required by python-attrs 25.4.0 which needs hatch-fancy-pypi-readme>=23.2.0.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-23 08:48:29 +02:00
Alexandru Ardelean
51a6db0b86 python-augeas: bump to 1.2.0
Changes since 1.1.0:
- Python 3.11+ compatibility fixes
- Drop Python 2 support
- Various bug fixes and maintenance updates

Drop upstreamed patch: 001-backport-ffi-fix.patch

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-22 17:44:12 +02:00
Alexandru Ardelean
fd5c7badcc python-bidict: bump to 0.23.1
Changes since 0.22.1:
- Require Python >= 3.8 (dropped 3.7)
- Performance improvements and internal refactoring
- Better type annotations and mypy support
- Various bug fixes

Also add PKG_BUILD_DEPENDS on python-setuptools/host as bidict uses
setuptools.build_meta build backend.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-22 10:01:51 +02:00
Alexandru Ardelean
ada77e5dad python-six: bump to 1.17.0
Changes since 1.16.0:
- Drop Python 2.7 and 3.5 support
- Add ensure_str(), ensure_binary(), ensure_text() helpers
- Various minor fixes and maintenance updates

six 1.17.0 switched to pyproject.toml with setuptools build backend,
so add PKG_BUILD_DEPENDS on python-setuptools/host.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-22 09:49:35 +02:00
Alexandru Ardelean
e2e0362a17 python-socketio: bump to 5.11.2
Changelog since 5.8.0:
- v5.9.0: Optimize performance and memory usage for broadcasts
- v5.10.0: Add SimpleClient and AsyncSimpleClient classes; add reporting
  to Socket.IO Admin UI; add server shutdown() function; make async
  enter_room/leave_room proper coroutines
- v5.11.0: Add catch-all namespace support; improve pubsub manager
  robustness; fix background task garbage collection
- v5.11.1: Add connection retry option in client; drop Python 3.7 support;
  add Python 3.12 support
- v5.11.2: Improve routing to catch-all namespace handlers; add option
  to disable routing in ASGIApp

Add test.sh.

Full changelog:
https://github.com/miguelgrinberg/python-socketio/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-22 08:43:45 +02:00
Alexandru Ardelean
643e0bd695 python-gmpy2: bump to 2.3.0
Changelog since 2.2.2:
- Add mpz.array() method for NumPy interaction
- Implement mpq.limit_denominator() functionality
- Add is_integer() method for mpz/mpq types
- Add mixed-mode arithmetic support for mpc types
- Enhanced formatting using context's rounding mode defaults
- Full free-threaded Python build support
- Fix memory leaks in MPFR/MPC cache and context exit
- Drop CPython 3.8 support (requires 3.9+)

Add test.sh.

gmpy2 2.3.0 switched to pyproject.toml with setuptools-scm for version
management. Add python-setuptools-scm/host to PKG_BUILD_DEPENDS.

Full changelog:
https://github.com/aleaxit/gmpy/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-22 08:43:19 +02:00
Alexandru Ardelean
b303f7823f python-chardet: bump to 7.1.0
Changes since 7.0.1:
- Add PEP 263 encoding declaration detection for Python source files
- Improve performance: 5.5x faster first-detect time
- Fix undocumented encoding name changes introduced in 5.x
- Restore backward compatibility for encoding names

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 21:16:16 +02:00
Alexandru Ardelean
db4af80188 python-gnupg: bump to 0.5.6
Changelog since 0.5.1:
- Add configurable I/O buffer size via buffer_size attribute (0.5.2)
- Add Web Key Directory (WKD) support for automatic key location (0.5.3)
- Fix sensitive data exposure by removing decryption result logging (0.5.3)
- Fix exception handling in on_data callable during GPG operations (0.5.4)
- Fix GPG version detection robustness (0.5.5)
- Add uid_map attribute to capture UID information (0.5.5)
- Add capability, fingerprint and keygrip to subkey_info (0.5.6)
- Fix username handling when verification keys are expired/revoked (0.5.6)

Full changelog:
https://github.com/vsajip/python-gnupg/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 21:16:04 +02:00
Fabrice Fontaine
bf675f71b1 python/python-orjson: assign PKG_CPE_ID
cpe:/a:ijl:orjson is the correct CPE ID for orjson:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:ijl:orjson

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-21 17:41:17 +02:00
Alexandru Ardelean
d33d9e1826 numpy: bump to 2.4.3
Changelog since 2.4.2:
- Fix threading issue with OpenBLAS on ARM
- Fix memory leaks found via LeakSanitizer
- Fix buffer overrun in CPU baseline validation
- Fix NULL pointer dereference and reference leaks
- Fix np.ma.flatten_structured_array infinite recursion
- Fix np.isin() weak hash function
- Fix busdaycalendar bool array weekmask handling

Full changelog:
https://github.com/numpy/numpy/releases/tag/v2.4.3

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 17:40:40 +02:00
Alexandru Ardelean
b57afd9631 python-zipp: bump to 3.23.0
Changelog since 3.16.2:
- v3.17.0: Add CompleteDirs.inject classmethod; prevent path separators
  from matching '?' wildcards in glob
- v3.18.0: Improve glob performance bypassing ZipFile.namelist; support
  platform-specific path separators in glob
- v3.19.1: Fix handling of malformed zip files
- v3.19.3: Fix glob to match directories in addition to files
- v3.20.0: Expose zipfile compatibility overlay as public API (zipp.compat.overlay)
- v3.20.1: Fix infinite loops in archive name handling preserving special chars
- v3.20.2: Make zipfile compatibility overlay hashable
- v3.21.0: Enhance performance for zipfile.Path.open in non-reading modes
- v3.22.0: Fix basename-based properties on Windows; backport CPython tests
- v3.23.0: Add compatibility shim supporting Python 3.13 and earlier

Add python-setuptools/host to PKG_BUILD_DEPENDS (now requires setuptools>=77).
Patch out coherent.licensed build dependency (not packaged).
Add test.sh.

Full changelog:
https://github.com/jaraco/zipp/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 17:24:27 +02:00
Alexandru Ardelean
c3792992f2 python-apipkg: bump to 3.0.2
Changelog since 3.0.1:
- Fix import path to make it vendoring-friendly
- Remove py reference from test suite

Add test.sh.

Full changelog:
https://github.com/pytest-dev/apipkg/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 07:47:33 +02:00
Alexandru Ardelean
10358791fe python-cython: bump to 3.2.4
Changelog since 3.1.5:
- v3.2.0: Type inference for builtin exception types; extended f-string
  syntax (PEP-701); t-strings support (PEP-750); optimized PEP-604 union
  type checks; freelists support for Limited API; faster fused function
  dispatch; efficient C array looping for literal sequences
- v3.2.1: Fix relative imports with shared utility modules; fix GIL
  acquisition crashes under lock congestion in Python 3.11
- v3.2.2: Update C-API declarations for PyDict_*Ref() functions; fix
  invalid C code generation for literal sequences in generators
- v3.2.3: Add PyList_*() function declarations; fix t-strings losing
  final elements in Limited API; fix excessive process requests in
  parallel builds
- v3.2.4: Add @collection_type() decorator; add C++ exception declarations;
  fix pseudo-literal default values in function arguments; reduce pickle
  serialization size for extension types

Full changelog:
https://github.com/cython/cython/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 07:47:22 +02:00
Alexandru Ardelean
79fe85b9e3 python-greenlet: bump to 3.3.2
Changelog since 3.3.1:
- v3.3.2: Fix crash on Python 3.10 during interpreter shutdown with
  active greenlets

Add test.sh.

Full changelog:
https://github.com/python-greenlet/greenlet/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 07:47:09 +02:00
Alexandru Ardelean
0f88d2339b python-pkgconfig: bump to 1.6.0
Changelog since 1.5.5:
- Drop Python < 3.9 support; add Python 3.9-3.14 support
- Replace deprecated distutils with setuptools for Python 3.12+
  compatibility
- Reorganize to src/ layout
- Migrate CI from Travis CI to GitHub Actions
- Fix edge cases in configure_extension() for empty compiler/linker flags

Full changelog:
https://github.com/matze/pkgconfig/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 07:46:45 +02:00
Alexandru Ardelean
c1a2cb4bf9 python-pyasn1: bump to 0.6.2
Changelog since 0.5.1:
- v0.6.0: Drop Python 2.7 and Python 3.6/3.7 support; add support for
  RELATIVE-OID construct
- v0.6.1: Add Python 3.13 compatibility; remove legacy Python 2 code
- v0.6.2: Fix continuation octet limits in OID/RELATIVE-OID decoder
  (CVE-2026-23490); add Python 3.14 support; switch to pyproject.toml

Full changelog:
https://github.com/pyasn1/pyasn1/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 07:46:27 +02:00
Alexandru Ardelean
6fc55f8b74 python-incremental: bump to 24.11.0
Changelog since 24.7.2:
- Switch build system from wheel to hatchling
- Switch runtime dependency from setuptools/pkg-resources to packaging
- Add CLI script (pipx run incremental)
- Add Python 3.13 and 3.14 support; drop Python 3.8 support
- Drop Click dependency from CLI

Update HOST_BUILD_DEPENDS to use python-hatchling/host instead of
python-wheel/host, and replace +python3-pkg-resources dependency with
+python3-packaging in DEPENDS.

Add test.sh.

Full changelog:
https://github.com/twisted/incremental/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 07:46:01 +02:00
Alexandru Ardelean
1e1166d0ba python-zope-interface: bump to 8.2
Changelog since 8.0.1:
- v8.0.1: Improve test robustness; eliminate runtime dependency on setuptools
- v8.1: Drop Python 3.9 support; add Python 3.14 support
- v8.2: Consolidate package metadata into pyproject.toml; add handling
  for Python 3.14's new __annotate_func__ attribute

Full changelog:
https://github.com/zopefoundation/zope.interface/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-21 07:45:42 +02:00
Jean Thomas
ef77e07976 python-frozenlist: bump to version 1.8
And disable custom build-backend in order to use setuptools.

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>
2026-03-21 07:44:42 +02:00
Jean Thomas
3213df23b1 python-expandvars: add new package
Necessary to build python-frozenlist

Signed-off-by: Jean Thomas <jean.thomas@wifirst.fr>
2026-03-21 07:44:42 +02:00
Fabrice Fontaine
29d25282f0 python/openpyxl: assign PKG_CPE_ID
cpe:/a:python:openpyxl is the correct CPE ID for openpyxl:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:python:openpyxl

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-20 18:55:11 +02:00
Fabrice Fontaine
da53869fb2 python/python-eventlet: assign PKG_CPE_ID
cpe:/a:eventlet:eventlet is the correct CPE ID for python-eventlet:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:eventlet:eventlet

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-20 18:54:38 +02:00
Alexandru Ardelean
e7e16a8597 python-build: bump to 1.4.0
Changelog since 1.3.0:
- v1.3.0: Add --config-json for JSON-based configuration; drop Python 3.8
  support; fix ModuleNotFoundError when pip isn't installed
- v1.4.0: Add --quiet flag for silent operation; add --metadata option to
  dump PEP 517 metadata; add support for UV environment variable;
  improve Python 3.14 compatibility

Full changelog:
https://github.com/pypa/build/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-20 15:43:10 +02:00
Alexandru Ardelean
5f957ab5d3 python-setuptools: bump to 82.0.1
Changelog since 80.9.0:
- v81.0.0: Remove --dry-run parameter from setup.py
- v82.0.0: Remove pkg_resources module (deprecated since 67.5.0);
  users should migrate to importlib.resources / importlib.metadata
- v82.0.1: Fix loading of launcher manifest.xml file; documentation
  improvements for installing source distributions

Since pkg_resources has been removed in v82.0.0, drop the
python3-pkg-resources sub-package and remove it as a dependency
from python3-setuptools.

Full changelog:
https://github.com/pypa/setuptools/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-20 15:26:50 +02:00
Alexandru Ardelean
01d1c66135 python-hatchling: bump to 1.29.0
Changelog since 1.27.0:
- v1.27.0: Update default version of core metadata to 2.4
- v1.28.0: Drop Python 3.9 support; add sbom-files option and
  sbom_files build data to wheel build target for SBOM file inclusion
- v1.29.0: Fix Source Date Epoch handling for dates before 1980

Full changelog:
https://github.com/pypa/hatch/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-20 15:26:31 +02:00
Alexandru Ardelean
161d07e436 python-click: bump to 8.3.1
Changelog since 8.1.7:
- v8.1.8: Fix type hints for open_file(); fix multiline error messages
  for invalid Path; restore empty string defaults in help text
- v8.2.0: Drop Python 3.7-3.9 support; switch to pyproject.toml/flit_core;
  redesign shell completion system (Bash 4.4+, Zsh, Fish);
  add ProgressBar(hidden) parameter
- v8.2.1: Fix flag value handling for flag options with explicit types;
  fix shell completion for nested groups
- v8.2.2: Fix default/flag_value/type parameter reconciliation; fix Zsh
  completion for items containing colons
- v8.3.0: Rework flag_value and default parameters; enable default on
  Argument with nargs=-1; enhance Fish shell autocompletion
- v8.3.1: Fix pager argument handling; fix prompt rendering with empty
  prompt_suffix; fix parameter conversion timing issues

Add test.sh.

Full changelog:
https://github.com/pallets/click/releases

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-20 15:26:09 +02:00
Alexandru Ardelean
f22ab5cf66 python3: bump to 3.14.3
Major version bump from 3.13.9 to 3.14.3.

Highlights of Python 3.14:
- PEP 649: Deferred evaluation of annotations
- PEP 750: Template string literals (t-strings)
- PEP 758: Exception syntax simplification (no brackets needed)
- PEP 765: Restrict control flow in finally blocks
- PEP 779: Official free-threaded mode support
- PEP 784: Zstandard compression module
- UUID versions 6-8 support with faster generation
- Formally verified HMAC implementation
- Experimental JIT compiler support
- Tail-call interpreter option for performance

Full release notes:
https://www.python.org/downloads/release/python-3143/

Dropped 100-test_hashlib-better-handle-support-for-SHA3.patch (upstreamed)
Adapted 027-fix-host-build-libressl.patch (for
X509_VERIFY_PARAM_get_hostflags() )

Refreshed other patches.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-20 15:25:40 +02:00
Fabrice Fontaine
6f5a3f76b7 python/python-wheel: assign PKG_CPE_ID
cpe:/a:wheel_project:wheel is the correct CPE ID for python-wheel:
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:wheel_project:wheel

Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com>
2026-03-19 14:45:11 +02:00
Alexandru Ardelean
3a31ea37bb python-eventlet: bump to 0.40.4
Full release notes:
https://github.com/eventlet/eventlet/blob/master/NEWS

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-19 12:45:20 +02:00
Alexandru Ardelean
5358179573 python-userpath: bump to 1.9.2
Full release notes:
https://github.com/ofek/userpath/releases/tag/v1.9.2

Add a bit more testing.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-03-18 12:03:04 +02:00