Commit Graph

2685 Commits

Author SHA1 Message Date
Alexandru Ardelean
86be9943bf python-botocore: update to 1.42.88
Bump version 1.42.86 -> 1.42.88.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-14 08:00:30 +03:00
Alexandru Ardelean
1e274804a8 python-boto3: update to 1.42.88
Bump version 1.42.86 -> 1.42.88.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-14 08:00:30 +03:00
Alexandru Ardelean
29e685e1f8 python-ubus: backport patch for newer Python
Build is failing for a while now with error:
```
14.3.0_musl/usr/include -I/builder/shared-workdir/build/sdk/staging_dir/toolchain-mipsel_24kc_gcc-14.3.0_musl/include -I/builder/shared-workdir/build/sdk/staging_dir/toolchain-mipsel_24kc_gcc-14.3.0_musl/include/fortify -I/builder/shared-workdir/build/sdk/staging_dir/target-mipsel_24kc_musl/usr/include/python3.14 -fPIC -I/builder/shared-workdir/build/sdk/staging_dir/target-mipsel_24kc_musl/usr/include/python3.14 -c ./ubus_python.c -o build/temp.linux-mipsel-cpython-314/ubus_python.o
./ubus_python.c: In function 'ubus_python_add':
./ubus_python.c:1081:17: error: implicit declaration of function 'PyEval_CallMethod'; did you mean 'PyObject_CallMethod'? [-Wimplicit-function-declaration]
 1081 |                 PyEval_CallMethod(python_alloc_list, "pop", "");
      |                 ^~~~~~~~~~~~~~~~~
      |                 PyObject_CallMethod
error: command '/builder/shared-workdir/build/sdk/staging_dir/toolc
```

This has been fixed on version 0.1.3, but that hasn't been
published to pypi yet.

Also add test.sh

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-13 08:27:10 +03:00
Alexandru Ardelean
2bb434d3c3 python-sentry-sdk: update to 2.57.0
Update package to 2.57.0.

Major version 2.0 breaking changes:
- Hub API deprecated; replaced with new_scope / isolation_scope API;
  configure_scope / push_scope removed; Hub class retained but deprecated
- Python 2.7 support dropped; internal SDK data model refactored
- Migration guide: https://docs.sentry.io/platforms/python/migration/1.x-to-2.x

New features (2.0 - 2.57):
- Many integrations now auto-activate if the package is detected:
  Ariadne, ARQ, asyncpg, Chalice, Loguru, PyMongo, Quart, Starlite,
  Strawberry, Anthropic, Cohere, Graphene, LiteLLM, Google GenAI
- Extensive AI/LLM monitoring with gen_ai.* span attributes aligned
  with OpenTelemetry semantic conventions
- Feature flag tracking: LaunchDarkly, Unleash integrations
- Sentry structured logs (beta, 2.30): capture Loguru log messages
- New SysExitIntegration (2.14)
- failed_request_status_codes configurable for FastAPI/Starlette (2.5)
- Client cert/key support for HttpTransport (2.10)
- Experimental async transport added (2.57)

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
d4058a9479 python-awscli: update to 1.44.76
Update package to 1.44.76.

Key changes since 1.29.7:

1.32.0: Python 3.7 dropped.

1.33.0: Version numbering aligned with botocore/boto3; aws logs
start-live-tail command added.

1.35.0 (S3 checksum): --checksum-mode and --checksum-algorithm flags
added to high-level s3 commands.

1.36.0: Shorthand @= file-loading syntax added; aws s3 ls gains
--bucket-name-prefix and --bucket-region filters (1.36.35).

1.37.0: CRC32 default for uploads; response checksum validation.

1.39.0: Python 3.8 dropped.

1.40.0: aws eks update-kubeconfig gains --assume-role-arn for
cross-account access; STS regional endpoints now default.

1.42.42: aws eks update-kubeconfig gets --proxy-url option.

1.43.0: Login credential provider support.

1.44.0: New --v2-debug flag and AWS_CLI_UPGRADE_DEBUG_MODE env var to
detect CLI v2 breaking changes.

1.44.57: aws s3 mb gains --tags flag.

1.44.76 (security): Tighter file permissions for CodeArtifact login and
IAM MFA bootstrap output.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
9615f65675 python-s3transfer: update to 0.16.0
Update package to 0.16.0.

Changes since 0.6.1:

0.7.0: SSE-C arguments now passed to CompleteMultipartUpload for upload
operations.

0.8.0 (CRT improvements): Wider CRT upload functionality; CRC32
auto-configured for CRT uploads; file-like object support for seekable
and non-seekable streams; dynamic target throughput via AWS CRT system
detection.

0.9.0: Python 3.7 dropped.

0.10.0: S3 Express support for CRT; Multi-Region Access Point support
for CRT (0.10.4).

0.11.0 (CRC32 default): Now uses CRC32 by default and supports
user-provided full-object checksums.

0.12.0: Python 3.8 dropped.

0.13.0: ETag validation during multipart downloads.

0.15.0: ETag validation during multipart copies.

0.16.0: TransferConfig options (multipart_threshold, multipart_chunksize,
max_request_concurrency) now supported in CRTTransferManager.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
a91080e035 python-botocore: update to 1.42.86
Update package to 1.42.86.

Key changes since 1.31.7:

1.32.1: botocore wheel now ships compressed service models to reduce
disk footprint.

1.33.0: Version aligned; boto3/botocore share the same version number.

1.36.0 (S3 checksum overhaul): CRC32 default for uploads; CRC64NVME
support via awscrt; configurable via request_checksum_calculation and
response_checksum_validation settings.

1.37.0 (Account-based endpoints): DynamoDB support for account-based
endpoint routing; smithy-rpc-v2-cbor protocol support (1.37.2).

1.38.0: Python 3.8 dropped.

1.40.0: STS regional endpoints now default; login credential provider
added (1.41.0).

1.42.29: TCP Keep-Alive config via BOTOCORE_TCP_KEEPALIVE env var.
1.42.43: HTTP blocksize increased 16KB -> 128KB with urllib3 v2.
1.42.53: SHA512/XXHASH checksum algorithms added.
1.42.85: SigV4a auth_scheme_preference bugfix.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
bae2e54d90 python-boto3: update to 1.42.86
Update package to 1.42.86.

Key changes since 1.28.7:

1.33.0: boto3 and botocore now share the same version number.

1.36.0 (S3 checksum overhaul): CRC32 is now calculated by default for
all supported S3 operations; Content-MD5 header no longer auto-populated;
response checksum validation added; CRC64NVME and SHA512 algorithms
supported via optional awscrt.

1.38.0 (Account-based endpoints): DynamoDB and future services now use
https://<account-id>.ddb.<region>.amazonaws.com endpoints when account
ID is available. Python 3.8 end of support.

1.40.0 (STS endpoint default): Changed from legacy to regional; override
via sts_regional_endpoints config or AWS_STS_REGIONAL_ENDPOINTS env var.

1.41.0 (New credential provider): login credential provider added,
allowing use of AWS Management Console credentials.

Hundreds of API additions across Bedrock, ECS, EKS, Lambda, SageMaker,
and many more services.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-12 10:14:26 +03:00
Alexandru Ardelean
684e738cab python3-chardet: update to 7.4.1
Update package to 7.4.1.

Changes since 7.2.0:

7.3.0:
- License changed from MIT to 0BSD (no attribution required)
- New mime_type field in all detection results -- identifies binary and text
  file types via magic number matching (40+ formats supported)
- Performance: 4 additional modules compiled with mypyc; per-file detection
  capped at 16 KB (worst-case time: 62ms -> 26ms)
- Added riscv64 prebuilt wheel support
- Bug fix: null-separated ASCII data was misdetected as UTF-16-BE

7.4.0:
- Accuracy improved from 98.6% to 99.3%; speed improved with new dense
  zlib-compressed model format (cold start: ~75ms -> ~13ms with mypyc)
- Training data overhauled: added MADLAD-400 and Wikipedia sources,
  eliminated train/test overlap, samples increased from 15K to 25K per
  language/encoding pair
- Bug fix: dedicated structural analyzers added for CP932, CP949, and
  Big5-HKSCS (previously sharing base encoding byte-range analyzer)

7.4.1:
- Bug fix: BOM-prefixed UTF-16/32 input now correctly returns utf-16/utf-32
  instead of endian-specific variants (utf-16-le/utf-16-be/etc.), which
  previously caused a stray U+FEFF character at the start of decoded text

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
1616acb388 python3-cryptography: update to 46.0.7
Update package to 46.0.7.

Security fix:
- CVE-2026-39892: Non-contiguous buffers could be passed to Python buffer
  APIs potentially causing a buffer overflow -- now blocked

Wheels recompiled against OpenSSL 3.5.6 on Windows, macOS, and Linux.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
bf34f9abb4 python3-flask-httpauth: update to 4.8.1
Update package to 4.8.1.

Security fix:
- Empty or missing tokens are no longer accepted; previously this could
  allow bypassing token authentication

Documentation improvements: new installation section, revised docs, fixed
broken links.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
b5a553b457 python3-django-restframework: update to 3.17.1
Update package to 3.17.1.

Bug fix:
- HTMLFormRenderer crashed with empty datetime field values

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
06eb22a606 python3-django: update to 6.0.4
Update package to 6.0.4.

Security fixes:
- CVE-2026-33033: DoS fix in MultiPartParser -- base64-encoded multipart
  uploads with excessive whitespace could cause repeated memory copying
- CVE-2026-3902: ASGI header spoofing fixed -- headers containing underscores
  are now ignored by ASGIRequest to prevent hyphen/underscore conflation
  attacks
- CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin -- add permissions
  on inline model instances were not validated against forged POST data
- CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable -- changelist
  forms incorrectly allowed new instances to be created via forged POST data
- CVE-2026-33034: DoS via ASGI memory upload limit bypass -- missing or
  understated Content-Length could bypass DATA_UPLOAD_MAX_MEMORY_SIZE

Bug fixes:
- alogin/alogout regression where request.user was not set/cleared if already
  materialized by sync middleware
- RelatedFieldWidgetWrapper regression incorrectly wrapping all widgets in a
  fieldset in admin forms

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-11 12:56:34 +03:00
Alexandru Ardelean
5264f85e22 python3-lxml: add package guard to test.sh
The test.sh lacked a package name guard, causing it to run (and fail)
when the -src subpackage was tested without python3 installed.
Add the standard guard to skip the test for non-main packages.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
a547770f98 python3-et_xmlfile: add python3-xml dep, fix test
The test.sh imports xml.etree.ElementTree from the stdlib, and
et_xmlfile itself falls back to stdlib xml when lxml is unavailable.
Add python3-xml to DEPENDS to ensure the xml module is present at
both install and test time.

The test used et_xmlfile.__version__ without importing the et_xmlfile
module (only 'from et_xmlfile import xmlfile' was present). Add
'import et_xmlfile' so the version check works correctly.

The test.sh lacked a package name guard, causing it to run (and fail)
when the -src subpackage was tested without python3 installed.
Add the standard guard to skip the test for non-main packages.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
0dd65907ab python3-influxdb: update to 5.3.2
Update package to 5.3.2.

Bug fix:
- Correctly serialize nanosecond-precision DataFrame timestamps;
  previously nanosecond timestamps were not serialized correctly when
  writing via DataFrameClient

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
40c8afbc5a python3-pytest: update to 9.0.3
Update package to 9.0.3.

Security fix:
- CVE-2025-71176: Fixed use of an insecure temporary directory

Bug fixes:
- pytest.approx now correctly accounts for collections.abc.Mapping key
  order when comparing mappings
- Blocking a conftest.py with -p no: is now explicitly disallowed with a
  clear UsageError (previously caused an internal assertion failure)
- Fixed crash when a test raises an ExceptionGroup with
  __tracebackhide__ = True
- Fixed non-string messages in unittest.TestCase.subTest() not printed

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
9769e03752 python3-platformdirs: update to 4.9.6
Update package to 4.9.6.

4.9.5: Silent patch release.
4.9.6: Fixed shell quoting bug in the release workflow -- double quotes
now used for tag variable expansion in CI scripts.

No functional or API changes for end users between 4.9.4 and 4.9.6.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
a6f91c626a python3-openpyxl: update to 3.1.5
Update package to 3.1.5.

Changes since 3.0.10:

3.1.0: Added support for data table formulae; Rich Text in cells; Custom
Document Properties; mapped chartspace graphical properties to charts.
Breaking: removed deprecated workbook methods (get_named_range,
add_named_range, remove_named_range) and several worksheet properties.
Bug fixes: fixed table filters being overridden, various dataframe and
multiindex alignment issues.

3.1.1: Fixed DocumentProperties times being set only at module import;
fixed missing worksheet-specific definitions.

3.1.2: Fixed reading worksheets in read-only mode with locally scoped
definitions; fixed empty custom properties causing invalid files.

3.1.3: Major performance fixes -- column name caching, pivot table
loading, custom properties reading; fixed rich-text save without lxml;
fixed file handler leaks; fixed timedelta reading in read-only mode;
improved duplicate named styles handling.

3.1.4: Minor bug fixes and stability improvements.

3.1.5: Latest stable release with cumulative fixes.

Add test.sh to verify write/read roundtrip of xlsx workbooks.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
98298ce7f8 python3-pillow: update to 12.2.0
Update package to 12.2.0.

Security fixes:
- Prevent FITS decompression bomb -- GZIP data from FITS images is now
  limited to prevent decompression bomb attacks
- Fix OOB write with invalid tile extents -- 12.1.1 PSD tile extent checks
  did not account for integer overflow
- Prevent PDF parsing trailer infinite loop -- cyclic trailer references
  in PDFs are now detected and stopped
- Fix integer overflow when processing fonts with excessively large
  per-glyph advances
- Fix heap buffer overflow with nested list coordinates -- nested lists
  passed to ImagePath.Path, polygon(), line() etc. are now validated to
  contain exactly two numeric coordinates

New features:
- ImageText.Text.wrap() -- new method to wrap text within a given
  width/height, with optional shrink/grow scaling
- FontFile.to_imagefont() -- FontFile instances can now be directly
  converted to ImageFont instances
- Support reading JPEG2000 images with CMYK palettes

Performance:
- Lazy plugin loading -- open is 2.3-15.6x faster, save is 2.2-9x faster
  for common formats

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:01:09 +03:00
Alexandru Ardelean
653d85d226 python3-jsonpath-ng: update to 1.8.0
Update package to 1.8.0.

Changes since 1.5.3:

1.6.0: Removed Python 2 and six dependency; field names with literals
now enclosed in quotes; removed decorator and testscenarios dependencies;
made path instances hashable.

1.6.1: Fixed lambda-based updates; fixed assignment when root element is
a list; added keys keyword; added slice step support; don't fail on regex
match against non-strings; Python 3.12 support.

1.7.0: Added wherenot operator; added path extension exposing datum's
path from the expression itself; allowed numeric values as keys; added
negative and wildcard indices in Split; fixed boolean value update bug;
removed Python 3.7 support; parse table constructed only once
(performance improvement).

1.8.0: Added support for comma-separated indices (e.g., field[0,1,2]);
added EMOJI and CJK Unicode support; added type hints; fixed wildcard
path resolution in field filters; fixed False/None value handling in
bool filters; vendored ply (no longer maintained upstream); dropped
Python 3.8 and 3.9 support; Python 3.13/3.14 tested.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
15e2da047b python3-greenlet: update to 3.4.0
Update package to 3.4.0.

Changes:
- Added binary wheels for RISC-V 64
- Fixed multiple rare crash paths during interpreter shutdown; now uses
  the atexit module (subtle API change: getcurrent unavailable once
  atexit fires)
- Fixed multiple race conditions in free-threaded (no-GIL) builds when
  greenlets are accessed from multiple threads, some causing assertion
  failures or interpreter crashes
- Several minor correctness fixes from automated code audit

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
eb513f6cec python3-pynacl: update to 1.6.2
Update package to 1.6.2.

Security fix:
- Updated bundled libsodium to 1.0.20-stable (2025-12-31 build) to
  resolve CVE-2025-69277

Refresh 001-always-compile-ed25519.patch for the updated source.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
a509f32047 python3-cryptodomex: update to 3.23.0
Update package to 3.23.0.

pycryptodomex is the same codebase as pycryptodome under the Cryptodome
namespace. All changes are identical to python3-cryptodome 3.23.0:

3.19.0: Added ECDH support via Cryptodome.Protocol.DH; TupleHash128/256
update() can now hash multiple items at once.

3.19.1 (security): Patched side-channel leakage in OAEP decryption that
could enable a Manger attack.

3.20.0: Added TurboSHAKE128 and TurboSHAKE256; Cryptodome.Hash.new()
factory; AES-GCM support for PBES2/PKCS#8 containers.

3.21.0: Added Curve25519/X25519 and Curve448/X448 support; dropped
Python 3.5 support.

3.22.0: Added HPKE (RFC 9180) support; dropped Python 3.6 support.

3.23.0: Added Key Wrap (KW/KWP, RFC 3394/5649) cipher modes; Windows
ARM wheels; fixed HashEdDSA/Ed448 sign/verify mutating XOF state.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
066225fb1e python3-cryptodome: update to 3.23.0
Update package to 3.23.0.

Changes since 3.18.0:

3.19.0: Added ECDH support via Crypto.Protocol.DH; TupleHash128/256
update() can now hash multiple items at once; fixed cffi bug on Windows
with Python 3.12+.

3.19.1 (security): Patched side-channel leakage in OAEP decryption that
could enable a Manger attack.

3.20.0: Added TurboSHAKE128 and TurboSHAKE256; added Crypto.Hash.new()
factory; AES-GCM support for PBES2/PKCS#8 containers; SHA-2/SHA-3 support
in PBKDF2 for key containers.

3.21.0: Added Curve25519/X25519 and Curve448/X448 support; added
PYCRYPTODOME_DISABLE_GMP env var; RSA keys for PSS can now be imported;
fixed Ed25519 point negation; dropped Python 3.5 support.

3.22.0: Added HPKE (RFC 9180) support; CCM cipher now enforces
nonce-length data limits; fixed RC4 infinite loop for data >4GB; fixed
invalid PEM file handling; dropped Python 3.6 support.

3.23.0: Added Key Wrap (KW/KWP, RFC 3394/5649/NIST SP 800-38F) cipher
modes; Windows ARM wheels; fixed HashEdDSA/Ed448 sign/verify mutating
XOF state.

Refresh 001-fix-libgmp-loading.patch and 002-omit-tests.patch for the
updated source (hunk offsets shifted by 2-4 lines due to new functions).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-10 14:00:41 +03:00
Alexandru Ardelean
0514eb8326 python-pytest-xdist: update to 3.8.0
Update package to 3.8.0.

Add PYPI_SOURCE_NAME since PyPI switched sdist filename to use
underscores (pytest_xdist-3.8.0.tar.gz).

Add test.sh to verify basic plugin functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:01:05 +03:00
Alexandru Ardelean
2b8992a144 python-async-timeout: update to 5.0.1
Update package to 5.0.1.

Add PYPI_SOURCE_NAME since PyPI switched sdist filename to use
underscores (async_timeout-5.0.1.tar.gz).

Add test.sh to verify timeout context manager functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:01:05 +03:00
Alexandru Ardelean
9785dc89ec python-jsonschema-specifications: bump to 2025.9.1
Update package to 2025.9.1.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:01:05 +03:00
Alexandru Ardelean
c0213d52af python-pyasn1-modules: update to 0.4.2
Update package to 0.4.2.

Changelog:
- 0.3.0: Updated ASN.1 module imports to use RFC-based names
- 0.4.0: Added support for newer RFC modules and improved compatibility
- 0.4.1: Minor bug fixes
- 0.4.2: Latest stable release

Add PYPI_SOURCE_NAME since PyPI switched sdist filename to use
underscores (pyasn1_modules-0.4.2.tar.gz).

Add test.sh to verify basic functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:01:05 +03:00
Alexandru Ardelean
f5fd23b575 python-pathspec: bump to 1.0.4
Changelog: https://github.com/cpburnz/python-pathspec/blob/master/CHANGELOG.rst

First stable 1.x release with API refinements and bug fixes.
Add test.sh to verify gitignore-style pattern matching.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:00:48 +03:00
Alexandru Ardelean
362d823329 python-dns: bump to 2.8.0
Changelog: https://github.com/rthalley/dnspython/blob/master/CHANGELOG.rst

Multiple minor releases since 2.4.1 adding new record types,
improved DNSSEC support, and bug fixes.
Add test.sh to verify DNS name parsing and rdatatype lookups.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:00:48 +03:00
Alexandru Ardelean
062e0cecdd python-cachelib: bump to 0.13.0
Changelog: https://github.com/pallets-eco/cachelib/blob/main/CHANGES.rst

Minor release with improvements to cache backends.
Add test.sh to verify SimpleCache and NullCache operations.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:00:48 +03:00
Alexandru Ardelean
5a7fbc8303 python-asgiref: bump to 3.11.1
Changelog: https://github.com/django/asgiref/blob/main/CHANGELOG.txt

Multiple minor/patch releases since 3.7.2 with bug fixes and
Python 3.13+ compatibility improvements. Resets PKG_RELEASE to 1.
Add test.sh to verify async_to_sync and sync_to_async adapters.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:00:48 +03:00
Alexandru Ardelean
c2ebcc7e9b python-pip: update to 26.0.1
Refresh all patches for pip 26.0.1:
- 001 (pyproject-hooks-pyc-fix): vendored pyproject_hooks switched
  from single to double quotes and multiline block format; restructure
  to minimal diff (keep unchanged context lines as context)
- 002 (pip-runner-pyc-fix): get_runnable_pip() shifted ~20 lines;
  Set[str] -> set[str] in trailing context; refresh offsets
- 003 (disable-pip-version-check): option definition moved ~174 lines;
  refresh line number

pip 26 also dropped the version-specific binary (e.g. pip3.14).
Update the install rule to use pip3 as the primary binary and
symlink pip/pip$(VERSION) to it.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 08:00:32 +03:00
Alexandru Ardelean
cf5b39f8c3 python-orjson: update to 3.11.8, add test.sh
Update to 3.11.8 to fix the build error with Python 3.14

```
  --- stderr
  error: the configured Python interpreter version (3.14) is newer than PyO3's maximum supported version (3.13)
  = help: please check if an updated version of PyO3 is available. Current version: 0.23.0-dev
  = help: set PYO3_USE_ABI3_FORWARD_COMPATIBILITY=1 to suppress this check and build anyway using the stable ABI
warning: build failed, waiting for other jobs to finish...
💥 maturin failed
```

orjson imports uuid.py at module init to look up uuid.UUID type;
python3-uuid is a separate package not included in python3-light,
causing a segfault when python3-uuid is absent. Add it as an explicit
dependency to fix the crash on all architectures.

Crash is:
```
importing orjson...
Fatal Python error: Segmentation fault

Current thread 0xecf37c64 [python3] (most recent call first):
  File "<frozen importlib._bootstrap>", line 491 in _call_with_frames_removed
  File "<frozen importlib._bootstrap_external>", line 1061 in exec_module
  File "<frozen importlib._bootstrap>", line 938 in _load_unlocked
  File "<frozen importlib._bootstrap>", line 1342 in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 1371 in _find_and_load
  File "/usr/lib/python3.14/site-packages/orjson/__init__.py", line 8 in <module>
  File "<frozen importlib._bootstrap>", line 491 in _call_with_frames_removed
  File "<frozen importlib._bootstrap_external>", line 759 in exec_module
  File "<frozen importlib._bootstrap>", line 938 in _load_unlocked
  File "<frozen importlib._bootstrap>", line 1342 in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 1371 in _find_and_load
  File "<stdin>", line 5 in <module>

Current thread's C stack trace (most recent call first):
  <cannot get C stack on this system>
Segmentation fault (core dumped)
Test failed
```

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-09 07:58:46 +03:00
Yanase Yuki
6be3aaaac9 python3-pyinotify: remove package
This software seems no longer maintained.
The latest upstream commit is 11 years ago,
and no package depends on this.

Signed-off-by: Yanase Yuki <dev@zpc.st>
2026-04-07 14:47:28 +02:00
Alexandru Ardelean
e1d14dc70e python-werkzeug: bump to 3.1.8
Changelog: https://werkzeug.palletsprojects.com/en/stable/changes/
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 09:02:56 +03:00
Alexandru Ardelean
026041601b python-websockets: bump to 16.0, add test.sh
Major version bump from 11.0.3 to 16.0. The legacy API
(websockets.legacy.*) was removed in 14.0; the current public
API (connect/serve in websockets.asyncio.*) is stable and
backward-compatible since 12.0. Add test.sh that verifies core
imports (frames, http11, datastructures).

Changelog: https://websockets.readthedocs.io/en/stable/changelog.html
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 09:02:56 +03:00
Alexandru Ardelean
8ec35e12a8 python-tornado: bump to 6.5.5, add test.sh
Bump from 6.3.3 to 6.5.5. Add a basic test.sh that imports
the tornado module and verifies Application/RequestHandler
can be instantiated.

Changelog: https://www.tornadoweb.org/en/stable/releases.html
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 09:02:56 +03:00
Alexandru Ardelean
2817de263b python-wheel: bump to 0.46.3, fix dep
Version 0.46.x adds packaging>=24.0 as a runtime dependency.
Add python3-packaging to DEPENDS accordingly.

Changelog: https://wheel.readthedocs.io/en/stable/news.html
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 09:02:56 +03:00
Alexandru Ardelean
7e8ea87f96 python-certifi: bump to 2026.2.25
Update the Mozilla CA certificate bundle.

Changelog: https://github.com/certifi/python-certifi/blob/master/CHANGES
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 09:02:56 +03:00
Alexandru Ardelean
c02972510a python-networkx: bump to 3.6.1
Changelog: https://networkx.org/documentation/stable/release/release_dev.html

Minor release with new algorithms and bug fixes since 3.5.
Add test.sh to verify graph creation, pathfinding, and topological sort.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:31:58 +03:00
Alexandru Ardelean
1b3be237a7 python-jsonschema: bump to 4.26.0
Changelog: https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst

Minor release with bug fixes and improved draft 2020-12 support.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:31:58 +03:00
Alexandru Ardelean
8e87775380 python-charset-normalizer: bump to 3.4.7
Changelog: https://github.com/Ousret/charset_normalizer/releases/tag/3.4.7

Maintenance release with bug fixes and performance improvements.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:31:58 +03:00
Alexandru Ardelean
387b6197cc python-babel: bump to 2.18.0
Changelog: https://github.com/python-babel/babel/blob/master/CHANGES.rst

Minor release with bug fixes. Resets PKG_RELEASE to 1.
Add test.sh to verify locale, date, and number formatting.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:31:58 +03:00
Alexandru Ardelean
753282cb9b python-argcomplete: bump to 3.6.3
Changelog: https://github.com/kislyuk/argcomplete/blob/develop/CHANGES.rst

Feature and bug fix releases since 3.2.1, including improvements to
shell completion and compatibility updates.

Switch build system from setuptools+setuptools_scm to hatchling+hatch-vcs
(upstream changed in 3.3.0). Remove now-obsolete 001-unpin-setuptools.patch.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:31:58 +03:00
Alexandru Ardelean
3e548ca574 python-paho-mqtt: update to 2.1.0
Update package to 2.1.0. This is a major version bump with API changes
including new callback signatures.

Add PYPI_SOURCE_NAME since PyPI switched sdist filename to use
underscores (paho_mqtt-2.1.0.tar.gz).

Add PKG_BUILD_DEPENDS for python-hatchling since upstream switched
build backend from setuptools to hatchling.

Add test.sh to verify basic client functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:29:13 +03:00
Alexandru Ardelean
e05e7ab598 python-xmltodict: update to 1.0.4
Update package to 1.0.4.

Add test.sh to verify XML parsing and unparsing functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:29:13 +03:00
Alexandru Ardelean
10a5d4024c python-eventlet: update to 0.41.0
Update to version 0.41.0

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-06 08:29:13 +03:00
Alexandru Ardelean
d090b03d1e python-sqlalchemy: bump to 2.0.49
Changelog: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html

Patch release (resets PKG_RELEASE to 1).
Add test.sh to verify ORM and core SQL functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-04-05 19:56:43 +03:00