summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python3-google-api-python-client: upgrade 2.135.0 -> 2.136.0Wang Mingyu2024-12-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-geojson: upgrade 3.1.0 -> 3.2.0Wang Mingyu2024-12-242-43/+2
| | | | | | | | | | | | | | py3.13.patch removed since it's included in 3.2.0 Changelog: ========== - Add support for Python 3.13 - Code modernization - RtD bugfix Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fsspec: upgrade 2024.10.0 -> 2024.12.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== Enhancements ------------ - "exclusive" mode for writing - "tree" text display of filesystem contents - async wrapper for sync FSs - new known implementation: tosfs - consilidate block fetch requests Fixes ------ - better webHDFS proxies - syn FSs in referenceFS - don't serialize file caches - race condition in local ls() - missing/nan references in parquet - _un_chain kwargs - async _cat_file in referenceFS Other ------ - fallback implementation for _fetch_range Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fastnumbers: upgrade 5.1.0 -> 5.1.1Wang Mingyu2024-12-241-1/+1
| | | | | | | | Changelog: Add support for Python 3.13 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fastjsonschema: upgrade 2.21.0 -> 2.21.1Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | Changelog: =========== * Fixed ResourceWarning where file was not properly closed * Fixed regexp for date format Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-eth-utils: upgrade 5.0.0 -> 5.1.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========== Bugfixes ---------- - Correct error message in "from_wei" and "to_wei" - Remove unused hexbytes dependency that is causing a cyclic dependency issue Features ---------- - Removed "_BaseHasLogger" and "_BaseHasExtendedDebugLogger", and the "logger" attribute in the "HasLogger" and "HasExtendedDebugLogger" is type hinted directly. - Add new humanize_hexstr function - Add "memoryview" to accepted input type for "to_hex" , "to_int" , "to_bytes" , and "to_text" Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-eth-keyfile: upgrade 0.7.0 -> 0.8.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | Changelog: Add decode keyfile json v4 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-elementpath: upgrade 4.6.0 -> 4.7.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | Changelog: ========== - Fix fragment argument usage - Fix constructors nud() to skip argument check with XP31+ arrow operator Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-drgn: upgrade 0.0.29 -> 0.0.30Wang Mingyu2024-12-241-1/+1
| | | | | | | | Changelog: https://github.com/osandov/drgn/releases/tag/v0.0.30 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cytoolz: upgrade 1.0.0 -> 1.0.1Wang Mingyu2024-12-241-1/+1
| | | | | | | | Changelog: Add support for Python 3.13 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-croniter: upgrade 5.0.1 -> 6.0.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Announce for now that croniter dev is ended (CRA). - Rework timestamp_to_datetime to use whatever timezone - Make datetime_to_timestamp & timestamp_to_datetime public - Fix EPOCH calculation in case of non UTC & 32 bits based systems - Apply isort formatter - Reintegrate test_speed - Apply black formatter - Code quality changes Remove unused _get_caller_globals_and_locals Remove single-use bad_length Remove unused days in proc_month Use field_index over i for readability Always use """ for docstrings Make helper instance methods that do not use self static Remove unusd call to sys.exc_info Remove unused ALPHAS Improve croniter.expand documentation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-coverage: upgrade 7.6.2 -> 7.6.9Wang Mingyu2024-12-241-1/+1
| | | | | | | | Changelog: Fix: Tomas Uribe fixed a performance problem in the XML report. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cmd2: upgrade 2.5.7 -> 2.5.8Wang Mingyu2024-12-241-1/+1
| | | | | | | | Changelog: Rolled back undocumented changes to printing functions introduced in 2.5.0. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cmake: upgrade 3.31.1 -> 3.31.2Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | Changelog: ========= - [Bot] Update to CMake 3.31.2 - fix: tests - chore: align minimum cmake version with the one of scikit-build-core - fix: bootstrap build Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cassandra-driver: upgrade 3.29.1 -> 3.29.2Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== Features -------- - Convert to pytest for running unit and integration tests (PYTHON-1297) - Add support for Cassandra 4.1.x and 5.0 releases to CI (PYTHON-1393) - Extend driver vector support to arbitrary subtypes and fix handling of variable length types (PYTHON-1369) Bug Fixes ---------- - Python NumpyProtocolHandler does not work with NumPy 1.24.0 or greater (PYTHON-1359) - cibuildwheel appears to not be stripping Cython-generated shared objects (PYTHON-1387) - Windows build for Python 3.12 compiled without libev support (PYTHON-1386) Others --------- - Update README.rst with badges for version and license (PR 1210) - Remove dependency on old mock external module (PR 1201) - Removed future print_function, division, and with and some pre 3.7 handling (PR 1208) - Update geomet dependency (PR 1207) - Remove problematic escape sequences in some docstrings to avoid SyntaxWarning in Python 3.12 (PR 1205) - Use timezone-aware API to avoid deprecated warning Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-cantools: upgrade 39.4.13 -> 40.0.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | Changelog: =========== - When parsing DBC, use long names in SignalGroup.signal_names to match Signal.name - Raise Minimum Python Version to 3.9 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-astroid: upgrade 3.3.5 -> 3.3.7Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | Changelog: =========== - Fix inability to import collections.abc in python 3.13.1. - Fix crash when typing._alias() call is missing arguments. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-apispec: upgrade 6.7.1 -> 6.8.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | Changelog: ========= - Allow properties on $ref objects for OpenAPI 3.1 - Fix nullable nested schemas with metadata in OpenAPI 3.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-apiflask: upgrade 2.2.1 -> 2.3.2Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | Changelog: =========== - Fix response headers to be compliant with the OpenAPI specification for versions 3.0.0+ - Fix input data loading implementation when input validation is skipped - Include input documentation in API spec when specifying validation=False on @input decorator - Support skipping the validation for the request body with @input(validation=False) - Enable CI test for Python 3.13. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-anyio: upgrade 4.6.2 -> 4.7.0Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Updated TaskGroup to work with asyncio's eager task factories - Added the wait_readable() and wait_writable() functions which will accept an object with a .fileno() method or an integer handle, and deprecated their now obsolete versions (wait_socket_readable() and wait_socket_writable()) - Changed EventAdapter (an Event with no bound async backend) to allow set() to work even before an async backend is bound to it - Added support for wait_readable() and wait_writable() on ProactorEventLoop (used on asyncio + Windows by default) - Fixed a misleading ValueError in the context of DNS failures - Fixed the return type annotations of readinto() and readinto1() methods in the anyio.AsyncFile class - Fixed TaskInfo.has_pending_cancellation() on asyncio returning false positives in cleanup code on Python >= 3.11 - Fixed cancelled cancel scopes on asyncio calling asyncio.Task.uncancel when propagating a CancelledError on exit to a cancelled parent scope1 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiosignal: upgrade 1.3.1 -> 1.3.2Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | Changelog: =========== - Dropped Python 3.7 support. - Dropped Python 3.8 support. - Remove redundant wheel dep from pyproject.toml Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ostree: upgrade 2024.9 -> 2024.10Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | | | | Changelog: ========== - prepare-root: Add composefs.enabled=verity - README: Update buildstream URL to new github repo - composefs: Ensure buffer is suitably aligned for struct fsverity_digest - core: Always sort incoming xattrs - Fix ci - sign-ed25519: Fix error message of validate_length - rofiles-fuse: when fuse execution fails, rofiles-fuse still returns exit code 0 - libostree/deploy: enable composefs by default - man: Note semantics combining root.transient with composefs.enabled Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nvmetcli: upgrade 0.7 -> 0.8Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: ============= - fix common misspellings from codespell project - nvmetcli: set up the target only after the network is configured - nvmetcli: fixup ana groupid setting for namespaces - Documentation: fix typo - nvmetcli: add a tcp example json - nvmetcli: Correct xrange usage for py3 - nvmetcli: Allow different devices for make test - nvmetcli: Report save name correctly - test_nvmet.py: test_invalid_input fails for py3 - nvme.py: Make modprobe work for kmod lib too - nvme.py: Sync the containing directory - nvme.py: Explicit close is redundant - nvmetcli: Improve IOError handling on restore - README: Update URL for configshell-fb - nvmetcli: don't remove ANA Group 1 on clear Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nano: upgrade 8.2 -> 8.3Wang Mingyu2024-12-241-1/+1
| | | | | | | | | | Changelog: ============ - A build failure with gcc-15 is fixed. - Several translations were updated. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl2-image: upgrade 2.8.2 -> 2.8.3Wang Mingyu2024-12-241-1/+1
| | | | | | | | Changelog: Fixed handling of grayscale images with alpha Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcapture-tiny-perl: upgrade 0.48 -> 0.50Wang Mingyu2024-12-241-2/+2
| | | | | | | | | | | | License-Update: add year and name of copyright owner Changelog: ========== - Stringify '$]' for far future compatibility. - Fixed docs about custom files for capture Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.1.20241215.0 -> 6.1.20241222.0Wang Mingyu2024-12-241-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyproj: cleanup dependenciesYi Zhao2024-12-231-2/+2
| | | | | | | | Drop python3-cython-native from DEPENDS since we already inherit cython bbclass. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-kivy: cleanup dependenciesYi Zhao2024-12-231-2/+0
| | | | | | | | Drop python3 and python3-cython-native from DEPENDS since we already inherit setuptools3 and cython bbclasses. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-yarl: upgrade 1.18.0 -> 1.18.3Tom Geelen2024-12-211-1/+1
| | | | | Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-sqlalchemy: upgrade 2.0.35 -> 2.0.36Tom Geelen2024-12-211-1/+1
| | | | | Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pytest-asyncio: upgrade 0.23.6 -> 0.24.0Tom Geelen2024-12-211-1/+3
| | | | | Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyjwt: upgrade 2.9.0 -> 2.10.1Tom Geelen2024-12-211-1/+1
| | | | | Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-propcache: upgrade 0.2.0 -> 0.2.1Tom Geelen2024-12-211-1/+1
| | | | | Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pillow: upgrade 10.4.0 -> 11.0.0Tom Geelen2024-12-212-5/+5
| | | | | Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiohttp: upgrade 3.11.8 -> 3.11.11Tom Geelen2024-12-211-1/+1
| | | | | Signed-off-by: Tom Geelen <t.f.g.geelen@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-gpiod: update v2.2.2 -> v2.2.3Bartosz Golaszewski2024-12-201-1/+1
| | | | | | | | Small bugfix release addressing a potential crash due to a bad usage of PyDict_Next() in the C extension. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* weechat: upgrade 4.0.4 -> 4.5.0Peter Marko2024-12-202-42/+3
| | | | | | | | | | | | | Solves CVE-2024-46613 Update dependencies: - remove openssl and icu - add cjson and gettext-native Remove patch to find gcrypt which is no longer needed. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wireshark: upgrade 4.2.8 -> 4.2.9Peter Marko2024-12-201-1/+1
| | | | | | | | | | | Solves CVE-2024-9781 Release notes: https://www.wireshark.org/docs/relnotes/wireshark-4.2.7.html https://www.wireshark.org/docs/relnotes/wireshark-4.2.8.html Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* sassc: ignore CVE-2022-43357Peter Marko2024-12-201-0/+2
| | | | | | | | | | | | | | | | | | | This CVE is fixed in current libsass recipe version. So wrapper around it will also not show this problem. It's usual usecase is to be statically linked with libsass which is probably the reason why this is listed as vulnerable component. [1] links [2] as issue tracker which points to [3] as fix. [4] as base repository for the recipe is not involved and files from [3] are not present in this repository. [1] https://nvd.nist.gov/vuln/detail/CVE-2022-43357 [2] https://github.com/sass/libsass/issues/3177 [3] https://github.com/sass/libsass/pull/3184 [4] https://github.com/sass/sassc/ Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmemcached: ignore CVE-2023-27478Peter Marko2024-12-201-0/+2
| | | | | | | | | | | | | | | | | Per [1] this is fixed by [2]. The commit message says that it is reverting feature added in: $ git tag --no-contains d7a0084 | grep 1.0.18 1.0.18 This recipe is for the original memcached which is unmaintained now. Hence the ignore instead of upgrade. [1] https://nvd.nist.gov/vuln/detail/CVE-2023-27478 [2] https://github.com/awesomized/libmemcached/commit/48dcc61a Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmemcached: merge inc into bbPeter Marko2024-12-202-19/+17
| | | | | | | | | After removing old libmemcached recipe version, these is no reasons anymore to have this split. The memcached resurrected project uses cmake and different urls. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libmemcached: remove recipe for version 1.0.7Peter Marko2024-12-201-4/+0
| | | | | | | This no longer compiles with latest toolchains. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.2.20 -> 8.2.26Peter Marko2024-12-208-11/+12
| | | | | | | | | | | | | | | | Solves dozens of vulnerabilities. See https://php.watch/versions/8.2/releases/8.2.21 https://php.watch/versions/8.2/releases/8.2.22 https://php.watch/versions/8.2/releases/8.2.23 https://php.watch/versions/8.2/releases/8.2.24 https://php.watch/versions/8.2/releases/8.2.25 https://php.watch/versions/8.2/releases/8.2.26 Removes CVE-2024-11233, CVE-2024-11234 and CVE-2024-11236 from current cve metrics. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: upgrade 1.6.17 -> 1.6.33Peter Marko2024-12-203-116/+10
| | | | | | | | | Solves CVE-2023-46852 and CVE-2023-46853. Upgrade done via "devtool upgrade". Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* memcached: add UPSTREAM_CHECK_URIPeter Marko2024-12-201-0/+2
| | | | | | | | Download URL is not listable so devtool upgrade fails. Using homepage works as it contains link to latest release, Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensc: mark CVE-2024-8443 as fixedPeter Marko2024-12-201-0/+2
| | | | | | | | | | | | | | | | | NVD tracks this CVE as version-less. Per [1] this is fixed by following commits: $ git tag --contains b28a3cef416fcfb92fbb9ea7fd3c71df52c6c9fc 0.26.0 0.26.0-rc1 $ git tag --contains 02e847458369c08421fd2d5e9a16a5f272c2de9e 0.26.0 0.26.0-rc1 [1] https://github.com/OpenSC/OpenSC/wiki/CVE-2024-8443 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opensc: upgrade 0.25.1 -> 0.26.0Peter Marko2024-12-201-2/+2
| | | | | | | | Solves CVE-2024-45615, CVE-2024-45616, CVE-2024-45617, CVE-2024-45618, CVE-2024-45619 and CVE-2024-45620. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* postgresql: upgrade 16.4 -> 16.5Yogita Urade2024-12-202-4/+4
| | | | | | | | | | | | | | Includes fix for CVE-2024-10976, CVE-2024-10977, CVE-2024-10978 and CVE-2024-10979 Changelog: https://www.postgresql.org/docs/release/16.5/ 0003-configure.ac-bypass-autoconf-2.69-version-check.patch Refreshed for 16.5 Signed-off-by: Yogita Urade <yogita.urade@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* 7zip: Fix build with clangKhem Raj2024-12-202-18/+32
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>