summaryrefslogtreecommitdiffstats
path: root/meta-python/recipes-devtools/python
Commit message (Collapse)AuthorAgeFilesLines
* python3-inline-snapshot: upgrade 0.32.5 -> 0.32.6Wang Mingyu3 days1-1/+1
| | | | | | | | | | | Fix: - Pydantic models, attrs and dataclasses with NewType-typed fields now generate correct snapshots that wrap the field value with the NewType constructor (e.g. Something(some_id=SomeID(1)) instead of Something(some_id=1)). This could only be fixed for Python >= 3.10. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-imgtool: upgrade 2.3.0 -> 2.4.0Wang Mingyu3 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-greenlet: upgrade 3.3.2 -> 3.4.0Wang Mingyu3 days1-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========== - Publish binary wheels for RiscV 64. - Fix multiple rare crash paths during interpreter shutdown. - Note that this now relies on the atexit module, and introduces subtle API changes during interpreter shutdown (for example, getcurrent is no longer available once the atexit callback fires). - Address the results of an automated code audit performed by Daniel Diniz. This includes several minor correctness changes that theoretically could have been crashing bugs, but typically only in very rare circumstances. - Fix several race conditions that could arise in free-threaded builds when using greenlet objects from multiple threads, some of which could lead to assertion failures or interpreter crashes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-google-auth: upgrade 2.48.0 -> 2.49.2Wang Mingyu3 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-git-pw: upgrade 2.7.1 -> 2.8.0Wang Mingyu3 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-gevent: upgrade 25.9.1 -> 26.4.0Wang Mingyu3 days1-1/+1
| | | | | | | | | | | | | | | | Changelog: =========== - Make gevent.ssl stop reusing exception instances, as this could appear to cause a memory leak if there are many short reads or writes. - Fix Greenlet.dead returning true for an active greenlet during early bootstrap. - Fix some potential GIL-related crashes during interpreter shutdown by avoiding acquiring the GIL in libev callbacks when the interpreter is finalizing. - Support for Python 3.9 has been removed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-django: upgrade 5.2.12 -> 5.2.13Gyorgy Sarvari3 days1-1/+1
| | | | | | | | | | | | | | | Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033 and CVE-2026-33034. Changelog: https://docs.djangoproject.com/en/6.0/releases/5.2.13/ Ptests passed successfully: Ran 18163 tests in 457.705s OK (skipped=1389, expected failures=5) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-django: upgrade 6.0.3 -> 6.0.4Gyorgy Sarvari3 days1-1/+1
| | | | | | | | | | | | | | | Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033 and CVE-2026-33034. Changelog: https://docs.djangoproject.com/en/6.0/releases/6.0.4/ Ptests passed successfully: Ran 18691 tests in 149.800s OK (skipped=1397, expected failures=5) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pytest-runner: remove using pkg_resourcesLi Zhou6 days2-0/+81
| | | | | | | | | | The python3 setuptools 82 dropped pkg_resources module by now. To avoid the failure "No module named 'pkg_resources'", replace the functions from this module with other functions from modules packaging and importlib.metadata. Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pytest-codspeed: upgrade 3.0.0 -> 4.3.0Zhang Peng6 days1-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Remove explicit python3-hatchling-native from DEPENDS since it is automatically added when inheriting python_hatchling. Add python3-cffi-native to DEPENDS since v4.0.0 introduced CodSpeedHQ/instrument-hooks which uses cffi FFI bindings at build time. Changelog: https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.3.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.2.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.1 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.0.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.2.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.2 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.1 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.0 Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-yappi: Upgrade 1.7.3 -> 1.7.6Leon Anavi7 days2-3847/+1
| | | | | | | | | | | | | | | | | Upgrade to release 1.7.6: - Fix VERSION file missing from source distribution (sdist) >From 1.7.5: - Fix callgrind export producing duplicate entries for top-level functions - Fix various edge cases - Add limit parameter to print_all - Fix file reading to use UTF-8 encoding Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-charset-normalizer: Upgrade 3.4.6 -> 3.4.7Leon Anavi7 days2-28/+1
| | | | | | | | | | | Upgrade to release 3.4.7: - Pre-built optimized version using mypy[c] v1.20. - Relax setuptools constraint to setuptools>=68,<82.1. - Correctly remove SIG remnant in utf-7 decoded string. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-aiofiles: Upgrade 24.1.0 -> 25.1.0Leon Anavi7 days1-1/+5
| | | | | | | | | | | Upgrade to release 25.1.0: - Switch to uv + add Python v3.14 support. - Add ruff formatter and linter. - Drop Python 3.8 support. If you require it, use version 24.1.0. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-gpiod: update to v2.4.2Bartosz Golaszewski7 days1-1/+1
| | | | | | | | | Bug-fix release addressing a buffer overflow bug discovered during an AI-augmented security audit as well as another minor issue with unnecessarily duplicated code. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-werkzeug: upgrade 3.1.7 -> 3.1.8Wang Mingyu7 days1-1/+1
| | | | | | | Request.host and get_host return the empty string if the header is missing or has invalid characters. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-tzdata: upgrade 2025.3 -> 2026.1Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-types-psutil: upgrade 7.2.2.20260130 -> 7.2.2.20260408Wang Mingyu7 days1-1/+1
| | | | | | | | | | | Changelog: =========== - Use dashes instead of underscores for METADATA.toml field names - Update most test/lint dependencies - Update mypy to 1.20.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-sqlalchemy: upgrade 2.0.48 -> 2.0.49Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-snagboot: upgrade 2.6 -> 2.6.1Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-sentry-sdk: upgrade 2.56.0 -> 2.57.0Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-regex: upgrade 2026.3.32 -> 2026.4.4Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-python-multipart: upgrade 0.0.22 -> 0.0.24Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | Changelog: ============ - Validate chunk_size in parse_form() - Remove unused trust_x_headers parameter and X-File-Name fallback - Return processed length from QuerystringParser._internal_write - Cleanup metadata dunders from __init__.py Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pandas: upgrade 3.0.1 -> 3.0.2Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-orjson: upgrade 3.11.7 -> 3.11.8Wang Mingyu7 days2-47/+35
| | | | | | | Build and compatibility improvements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-marshmallow: upgrade 4.2.3 -> 4.3.0Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | | Changelog: ============= - Add pre_load and post_load parameters to marshmallow.fields.Field for field-level pre- and post-processing - Typing: improvements to marshmallow.validate - marshmallow.validate.URL and marshmallow.validate.Email accept Internationalized Domain Names (IDNs) marshmallow.validate.Email also correctly rejects IDN domains with leading/trailing hyphens. - Typing: Fix typing of nested in marshmallow.fields.Nested Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-icecream: upgrade 2.1.10 -> 2.2.0Wang Mingyu7 days1-1/+1
| | | | | | | | | | | Changelog: ============ - Improved: Fixes Japanese character encoding issues. - Added: noColor option for configureOutput, which disables colored output. It is set to False by default. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-google-auth-oauthlib: upgrade 1.3.0 -> 1.3.1Wang Mingyu7 days1-1/+1
| | | | | | | | | | Changelog: ============ - Allow Protobuf 7.x - Require Python 3.9 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-fastapi: upgrade 0.135.2 -> 0.135.3Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-faker: upgrade 40.12.0 -> 40.13.0Wang Mingyu7 days1-1/+1
| | | | | | | Fix: Ensure deterministic locale selection in multi-locale mode. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-eventlet: upgrade 0.40.4 -> 0.41.0Wang Mingyu7 days1-1/+1
| | | | | | | | | | | Changelog: ============ * Switch to 3.14 for testing * Drop 3.9 support * More visible deprecation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-cmake: upgrade 4.3.0 -> 4.3.1Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-bitarray: upgrade 3.8.0 -> 3.8.1Wang Mingyu7 days1-1/+1
| | | | | | | | | | Changelog: ========== * fixed critial findings in C Extension Analysis Report * add tests, in particular 'devel/test_capi.py' Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-asyncinotify: upgrade 4.4.0 -> 4.4.2Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-ckzg: upgrade 2.1.1 -> 2.1.7Liu Yiding7 days3-54/+1
| | | | | | | | | | | | | 1.Changelog: https://github.com/ethereum/c-kzg-4844/releases/tag/v2.1.7 2.Remove python-ckzg-0001-Let-override-CC.patch as it was merged upstream 3.Remove python-ckzg-0002-Disable-Werror.patch as it was dropped in the Fedora package https://src.fedoraproject.org/rpms/python-ckzg/blob/rawhide/f/python-ckzg.spec Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-tox: upgrade 4.49.0 -> 4.52.0Liu Yiding7 days1-1/+2
| | | | | | | | Changelog: https://tox.wiki/en/latest/changelog.html Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-setuptools-git-versioning: upgrade 2.1.0 -> 3.0.1Liu Yiding7 days1-2/+2
| | | | | | | | Changelog: https://setuptools-git-versioning.readthedocs.io/en/v3.0.1/changelog/3.0.x.html Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-legacy-cgi: upgrade 2.6.2 -> 2.6.4Liu Yiding7 days1-2/+7
| | | | | | | | Add do_install function to resolve following issue. python3-legacy-cgi-2.6.4-r0 do_package_qa: QA Issue: /usr/lib/python3.14/site-packages/.pc/0001-cgi.py-fixup-interpreter-according-to-OE.patch/cgi.py contained in package python3-legacy-cgi requires /usr/local/bin/python, but no providers found in RDEPENDS:python3-legacy-cgi? [file-rdeps] Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pyatspi: upgrade 2.46.1 -> 2.58.2Liu Yiding7 days1-4/+6
| | | | | Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-djangorestframework: upgrade 3.16.1 -> 3.17.1Liu Yiding7 days1-2/+2
| | | | | | | | Changelog: https://www.django-rest-framework.org/community/release-notes/#deprecation-policy Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-croniter: upgrade 6.0.0 -> 6.2.2Liu Yiding7 days1-2/+2
| | | | | | | | Changelog: https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-cucumber-tag-expressions: upgrade 6.2.0 -> 9.1.0Liu Yiding7 days1-2/+3
| | | | | | | | | | 1. Changelog https://github.com/cucumber/tag-expressions/blob/main/CHANGELOG.md 2. LIC_FILES_CHKSUM changed as line of License info changed in PKG-INFO file. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* Revert "python3-stopit: add missing run-time dependencies"Bai, Haiqing10 days1-4/+0
| | | | | | | | | | | | This reverts commit 812f091414b34dbebe4a3990c9039cbaadc4dd71. The runtime dependency on python3-setuptools is no longer needed since the patch 0001-Drop-the-deprecated-pkg_resources.patch replaced the pkg_resources usage with importlib.metadata, which is part of the Python 3.8+ standard library. Keeping this RDEPENDS pulls in an unnecessary dependency on the target system. Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-stopit: Fixed the deprecated pkg_resources issueBai, Haiqing10 days2-1/+43
| | | | | | | | | pkg_resources is deprecated as an API. The pkg_resources package has been removed from setuptools, so the way of obtaining the version needs to be replaced with importlib.metadata module. Signed-off-by: Bai, Haiqing <Haiqing.Bai@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-aiohttp: mark fixed CVEs are patchedGyorgy Sarvari11 days1-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | | All these CVEs have been fixed already, the relevant NVD reports mention it explicitly that 3.13.4 is fixed, along with referencing the commit that fixes the respective vulnerabilities. However each of these are tracked without version info by NVD -.- Due to this, mark them explicitly as patched. Relevant reports: https://nvd.nist.gov/vuln/detail/CVE-2026-22815 https://nvd.nist.gov/vuln/detail/CVE-2026-34513 https://nvd.nist.gov/vuln/detail/CVE-2026-34514 https://nvd.nist.gov/vuln/detail/CVE-2026-34515 https://nvd.nist.gov/vuln/detail/CVE-2026-34516 https://nvd.nist.gov/vuln/detail/CVE-2026-34517 https://nvd.nist.gov/vuln/detail/CVE-2026-34518 https://nvd.nist.gov/vuln/detail/CVE-2026-34519 https://nvd.nist.gov/vuln/detail/CVE-2026-34520 https://nvd.nist.gov/vuln/detail/CVE-2026-34525 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-aiohttp: upgrade 3.13.4 -> 3.13.5Gyorgy Sarvari11 days1-1/+1
| | | | | | | | | | Changelog: Skipped the duplicate singleton header check in lax mode (the default for response parsing). In strict mode (request parsing, or -X dev), all RFC 9110 singletons are still enforced. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pyroute2: add missing rdepend of python3-unittestJeroen Hofstee12 days1-0/+1
| | | | | | | | Without it, it will throw "ModuleNotFoundError: No module named 'unittest'" from pyroute2/netlink/rtnl/iprsocket.py" line 6. Signed-off-by: Jeroen Hofstee <jhofstee@victronenergy.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-icu: enable building -native and nativesdk- variantsHongxu Jia14 days1-0/+2
| | | | | Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-configargparse: upgrade 1.7.3 -> 1.7.5Liu Yiding14 days1-2/+4
| | | | | | | Changelog: Slightly simplified PyPI deployment workflow via setuptools-scm Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-ujson: upgrade 5.11.0 -> 5.12.0Wang Mingyu2026-04-021-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-ninja: fix ninja_syntax import and version for setuptools buildJiaying Song2026-04-021-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | Fixes issues introduced in commit 16a72067f5 ("python3-ninja: upgrade 1.11.1.1 -> 1.13.0"). Upstream's __init__.py uses a relative import: from .ninja_syntax import Writer, escape, expand This requires ninja_syntax.py to be present inside the ninja package directory. Upstream relies on CMake (via scikit-build-core) to copy ninja_syntax.py from ninja-upstream/misc/ into the package during build [1]. Since the OE recipe replaces scikit-build-core with setuptools (no-scikit-build.patch), CMake is not invoked and this copy does not happen, causing ImportError at runtime. Similarly, upstream uses scikit-build-core's generate feature to create _version.py from the SCM version. With setuptools, this does not happen automatically, so generate it in do_configure. [1] https://github.com/scikit-build/ninja-python-distributions/commit/f3b4a786be Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>