Refresh all patches for pip 26.0.1:
- 001 (pyproject-hooks-pyc-fix): vendored pyproject_hooks switched
from single to double quotes and multiline block format; restructure
to minimal diff (keep unchanged context lines as context)
- 002 (pip-runner-pyc-fix): get_runnable_pip() shifted ~20 lines;
Set[str] -> set[str] in trailing context; refresh offsets
- 003 (disable-pip-version-check): option definition moved ~174 lines;
refresh line number
pip 26 also dropped the version-specific binary (e.g. pip3.14).
Update the install rule to use pip3 as the primary binary and
symlink pip/pip$(VERSION) to it.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Update to 3.11.8 to fix the build error with Python 3.14
```
--- stderr
error: the configured Python interpreter version (3.14) is newer than PyO3's maximum supported version (3.13)
= help: please check if an updated version of PyO3 is available. Current version: 0.23.0-dev
= help: set PYO3_USE_ABI3_FORWARD_COMPATIBILITY=1 to suppress this check and build anyway using the stable ABI
warning: build failed, waiting for other jobs to finish...
💥 maturin failed
```
orjson imports uuid.py at module init to look up uuid.UUID type;
python3-uuid is a separate package not included in python3-light,
causing a segfault when python3-uuid is absent. Add it as an explicit
dependency to fix the crash on all architectures.
Crash is:
```
importing orjson...
Fatal Python error: Segmentation fault
Current thread 0xecf37c64 [python3] (most recent call first):
File "<frozen importlib._bootstrap>", line 491 in _call_with_frames_removed
File "<frozen importlib._bootstrap_external>", line 1061 in exec_module
File "<frozen importlib._bootstrap>", line 938 in _load_unlocked
File "<frozen importlib._bootstrap>", line 1342 in _find_and_load_unlocked
File "<frozen importlib._bootstrap>", line 1371 in _find_and_load
File "/usr/lib/python3.14/site-packages/orjson/__init__.py", line 8 in <module>
File "<frozen importlib._bootstrap>", line 491 in _call_with_frames_removed
File "<frozen importlib._bootstrap_external>", line 759 in exec_module
File "<frozen importlib._bootstrap>", line 938 in _load_unlocked
File "<frozen importlib._bootstrap>", line 1342 in _find_and_load_unlocked
File "<frozen importlib._bootstrap>", line 1371 in _find_and_load
File "<stdin>", line 5 in <module>
Current thread's C stack trace (most recent call first):
<cannot get C stack on this system>
Segmentation fault (core dumped)
Test failed
```
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
This software seems no longer maintained.
The latest upstream commit is 11 years ago,
and no package depends on this.
Signed-off-by: Yanase Yuki <dev@zpc.st>
Major version bump from 11.0.3 to 16.0. The legacy API
(websockets.legacy.*) was removed in 14.0; the current public
API (connect/serve in websockets.asyncio.*) is stable and
backward-compatible since 12.0. Add test.sh that verifies core
imports (frames, http11, datastructures).
Changelog: https://websockets.readthedocs.io/en/stable/changelog.html
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changelog: https://github.com/kislyuk/argcomplete/blob/develop/CHANGES.rst
Feature and bug fix releases since 3.2.1, including improvements to
shell completion and compatibility updates.
Switch build system from setuptools+setuptools_scm to hatchling+hatch-vcs
(upstream changed in 3.3.0). Remove now-obsolete 001-unpin-setuptools.patch.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Update package to 2.1.0. This is a major version bump with API changes
including new callback signatures.
Add PYPI_SOURCE_NAME since PyPI switched sdist filename to use
underscores (paho_mqtt-2.1.0.tar.gz).
Add PKG_BUILD_DEPENDS for python-hatchling since upstream switched
build backend from setuptools to hatchling.
Add test.sh to verify basic client functionality.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
This is a security release.
Notable Changes
* (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
* (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
* (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
* (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
* (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
* (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
* (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low
Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Changelog: https://github.com/python-poetry/poetry-core/releases/tag/2.3.2
Changes include:
- Fix handling of PEP 440 post-releases in version constraints
- Minor bug fixes and internal improvements
Add test.sh to validate basic version parsing and constraint evaluation.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
The 0001-distutils-use-python-sysroot.patch was written against an
older setuptools where the build_ext LIBDIR yield had less indentation.
In 82.0.1, a z/OS platform check wrapped the code adding an extra
indentation level. Regenerate the patch against the actual 82.0.1 source.
Signed-off-by: Alexandru Ardelean <alex@mesatop.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Starting with 46.x, cryptography switched its build backend from
setuptools-rust to maturin. Update PKG_BUILD_DEPENDS accordingly:
replace python-setuptools-rust/host with python-maturin/host and
python-setuptools/host (setuptools is still required by cffi).
Drop 001-Update-ouroboros.patch: the ouroboros crate is no longer a
dependency in 46.x, so the patch (which bumped it from 0.15 to 0.18
to fix RUSTSEC-2023-0042) no longer applies.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Required by python-maturin as a build dependency (maturin >= 1.12.6
requires setuptools-rust >= 1.11.0).
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Needed by python-cryptography 46.x, which switched its build backend
from setuptools-rust to maturin (requires maturin >= 1.9.4).
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
When Python3 was updated via commit 97a92f2e7 , distutils was
disappeared from Python3 and moved to setuptools.
So that patch should have moved here as well.
This should fix all packages which still use the 'build_ext'
module from setuptools.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
As we're seeing in various test.sh scrip runs, importing 'email' fails
with not finding 'urllib' and vice-versa.
Then via a7e96ec91 ("python3-email: add python3-urllib as dependency")
I created a circular dependency.
So, might as well merge the two packages into one (named python3-urllib)
and updates all dependencies to pull python3-urllib.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
urllib3 2.6.3 pyproject.toml pins setuptools-scm<10 but
python-setuptools-scm was recently bumped to 10.0.3, breaking
the build. Drop the upper bound via patch to allow building
with setuptools-scm 10.x.
Also add test.sh to verify core API imports, Retry/Timeout
configuration, and PoolManager creation.
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changes since 1.0.1:
- Added support for Python 3.14 (including free-threaded build)
- CLI now forwards flags directly to commands
- Improved symlink handling with explicit follow_symlinks option
- Added FIFO file support on Unix systems
- Changed file mode preservation to maintain original permissions
Also add test.sh to verify dotenv_values parsing and load_dotenv.
Note: PyPI renamed the source tarball from python-dotenv-*.tar.gz
to python_dotenv-*.tar.gz; add PYPI_SOURCE_NAME accordingly.
Link: https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changes since 8.0.1:
- Improved uppercase special character handling and text
normalization before unicode conversion
- Resolved pattern type issues
- Various bug fixes for robust character handling
Also add test.sh to verify slugification, unicode handling and
options like separator and max_length.
Link: https://github.com/un33k/python-slugify/blob/master/CHANGELOG.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changes since 25.0:
- Added support for PEP 751 (pylock files) and PEP 794 (import
name metadata); new metadata writing functionality
- Performance improvements: 3x speedup via regex caching, lazy
Version key calculation, accelerated canonicalize_name
- Refined PEP 440 prerelease handling and SpecifierSet matching
- Improved Marker and Requirement subclassing support
Link: https://github.com/pypa/packaging/blob/main/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changes since 2.32.5:
- Security fix for CVE-2026-25645 in extract_zipped_paths utility
- Migrated to PEP 517 build system
- Added inline type hints throughout the library
- Fixed Content-Type header parsing for malformed values
Also add test.sh to verify core API imports and PreparedRequest.
Link: https://github.com/psf/requests/blob/main/HISTORY.md
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changes since 1.7.0:
- v1.8.0: Add support for custom socket options and improved
proxy handling
- v1.9.0: Fix compatibility with Python 3.12+ deprecations
- Various bug fixes for connection handling and error reporting
Also add test.sh to verify version and core API imports.
Link: https://github.com/websocket-client/websocket-client/blob/master/ChangeLog
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changes since 0.4.4:
- v0.5.0: Improved handling of CTEs and window functions
- v0.5.0: Better token classification for SQL dialects
- v0.5.x: Various bug fixes for edge cases in formatting
and statement splitting
Also add test.sh to verify formatting, splitting, and parsing.
Link: https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changes since 5.3.1:
- v6.0: Drop Python 3.7 support; add Python 3.12/3.13
- v6.0: TTLCache now uses monotonic time for expiry
- v7.0: Cache classes are now generic (PEP 585 type hints)
- v7.0: New MRUCache (most-recently-used) eviction policy
- Various performance improvements across all cache types
Also add test.sh to verify LRU/LFU/TTL caches and @cached decorator.
Link: https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
