summaryrefslogtreecommitdiffstats
path: root/meta-python/recipes-devtools/python
Commit message (Collapse)AuthorAgeFilesLines
* python3-ujson: upgrade 5.11.0 -> 5.12.0Wang Mingyu45 hours1-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-ninja: fix ninja_syntax import and version for setuptools buildJiaying Song45 hours1-0/+5
| | | | | | | | | | | | | | | | | | | | | | | | Fixes issues introduced in commit 16a72067f5 ("python3-ninja: upgrade 1.11.1.1 -> 1.13.0"). Upstream's __init__.py uses a relative import: from .ninja_syntax import Writer, escape, expand This requires ninja_syntax.py to be present inside the ninja package directory. Upstream relies on CMake (via scikit-build-core) to copy ninja_syntax.py from ninja-upstream/misc/ into the package during build [1]. Since the OE recipe replaces scikit-build-core with setuptools (no-scikit-build.patch), CMake is not invoked and this copy does not happen, causing ImportError at runtime. Similarly, upstream uses scikit-build-core's generate feature to create _version.py from the SCM version. With setuptools, this does not happen automatically, so generate it in do_configure. [1] https://github.com/scikit-build/ninja-python-distributions/commit/f3b4a786be Signed-off-by: Jiaying Song <jiaying.song.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-werkzeug: upgrade 3.1.6 -> 3.1.7Wang Mingyu2 days1-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: ========== - parse_list_header preserves partially quoted items, discards empty items, and returns empty for unclosed quoted values. - WWWAuthenticate.to_header does not produce a trailing space when there are no parameters. - Transfer-Encoding is parsed as a set. - Request.host, get_host, and host_is_trusted validate the characters of the value. An empty value is no longer allowed. A Unix socket server address is ignored. The trusted_list argument to host_is_trusted is optional. - Fix multipart form parser handling of newline at boundary. - Response.make_conditional sets the Accept-Ranges header even if it is not a satisfiable range request. - merge_slashes merges any number of consecutive slashes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-tomli: upgrade 2.4.0 -> 2.4.1Wang Mingyu2 days1-1/+1
| | | | | | | | Changelog: Limit number of parts of a TOML key to address quadratic time complexity Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-sentry-sdk: upgrade 2.55.0 -> 2.56.0Wang Mingyu2 days1-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: ========= - (asgi) Add option to disable suppressing chained exceptions - (logging) Separate ignore lists for events/breadcrumbs and sentry logs - Set exception info on streaming span when applicable - Patch AsyncStream.close() and AsyncMessageStream.close() to finish spans - Patch Stream.close() and MessageStream.close() to finish spans - (starlette) Catch Jinja2Templates ImportError - Add note on AI PRs to CONTRIBUTING.md - Pin GitHub Actions to full-length commit SHAs - Add -latest alias for each integration test suite - Use date-based branch names for toxgen PRs - Update test matrix with new releases (03/19) - Add client report tests for span streaming Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-regex: upgrade 2026.2.28 -> 2026.3.32Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-redis: upgrade 7.3.0 -> 7.4.0Wang Mingyu2 days1-1/+1
| | | | | | | | | | | | | | | | Changelog: ========== - Fix AttributeError in cluster metrics recording when connection is None or ClusterNode object instance is used to extract the connection info (#3999) - Fixing security concern in repr methods for ConnectionPools - passwords might leak in plain text logs (#3998) - Refactored connection count and SCH metric collection (#4001) - Refactored health check logic for MultiDBClient (#3994) - Expose basic Otel classes and functions to be importable through redis.observability to match the examples in the readthedocs Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pyais: upgrade 2.20.0 -> 2.20.1Wang Mingyu2 days1-1/+1
| | | | | | | | | | | this release reduces the supply chain attack surface - pins dependencies - pins workflows - adds a SHA256 hash sum for deployed artifacts - migrates to PyPI trusted publishing Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-marshmallow: upgrade 4.2.2 -> 4.2.3Wang Mingyu2 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Make marshmallow.fields.Number and marshmallow.fields.Mapping abstract base classes to prevent using them within Schemas - Allow required to be set on marshmallow.fields.Contant - Fix marshmallow.validate.OneOf emitting extra pairs when labels outnumber choices - Fix behavior when passing a dot-delimited attribute name to partial for a key with data_key set - Fix Enum field by-name lookup to only return actual members - marshmallow.fields.DateTime with format="timestamp_ms" properly rejects bool values - Fix typing of error_essages argument to marshmallow.fields.Field - Add ipaddress.* to marshmallow.Schema.TYPE_MAPPING - Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-ipython: upgrade 9.11.0 -> 9.12.0Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-gunicorn: upgrade 25.1.0 -> 25.3.0Wang Mingyu2 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug Fixes ========== - HTTP/2 ASGI Body Duplication: Fix request body being received twice in HTTP/2 ASGI requests, causing JSON parsing errors with "Extra data" messages (#3558) - ASGI Chunked EOF Handling: Add finish() method to callback parser to handle chunked encoding edge case where connection closes before final CRLF after zero-chunk - HTTP/2 Documentation: Fix http_protocols examples to use comma-separated string instead of list syntax (#3561) - Chunked Encoding: Reject chunk extensions containing bare CR bytes per RFC 9112 (#3556) - Request Line Limit: Fix --limit-request-line 0 to mean unlimited as documented, instead of using default maximum. Works with both Python and fast C parser. (#3563) - uWSGI Async Workers: Fix InvalidUWSGIHeader: incomplete header error when using gevent or gthread workers with uwsgi protocol behind nginx. - FileWrapper Iterator Protocol: Add __iter__ and __next__ methods to FileWrapper for full PEP 3333 compliance. Previously only supported old-style __getitem__ iteration which broke code explicitly using iter() or next(). Security ============= - ASGI Parser Header Validation: Add security checks per RFC 9110/9112: - Reject duplicate Content-Length headers - Reject requests with both Content-Length and Transfer-Encoding - Reject chunked transfer encoding in HTTP/1.0 - Reject stacked chunked encoding - Validate Transfer-Encoding values - Strict chunk size validation Changes ========== - Fast HTTP Parser: Update to gunicorn_h1c >= 0.6.3 for asgi_headers property and InvalidChunkExtension validation for bare CR rejection - ASGI PROXY Protocol: Add PROXY protocol v1/v2 support to callback parser - Docker Images: Update to Python 3.14 New Features ============ - Fast HTTP Parser (gunicorn_h1c 0.6.0): Integrate new exception types and limit parameters from gunicorn_h1c 0.6.0 for both WSGI and ASGI workers - Requires gunicorn_h1c >= 0.6.0 for http_parser='fast' - Falls back to Python parser in auto mode if version not met - Proper HTTP status codes for limit errors (414, 431) Performance ============ - ASGI HTTP Parser Optimizations: Improve ASGI worker HTTP parsing performance - Callback-based parsing with direct bytearray buffer operations - Use bytearray.find() directly instead of converting to bytes first - Use index-based iteration for header parsing instead of list.pop(0) (O(1) vs O(n)) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-fsspec: upgrade 2026.2.0 -> 2026.3.0Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-fastapi: upgrade 0.135.1 -> 0.135.2Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-faker: upgrade 40.11.0 -> 40.12.0Wang Mingyu2 days1-1/+1
| | | | | | | | Changelog: Add address providers for ar_DZ and fr_DZ locale Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-eth-utils: upgrade 5.3.1 -> 6.0.0Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-eth-typing: upgrade 5.2.1 -> 6.0.0Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-eth-hash: upgrade 0.7.1 -> 0.8.0Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-dateparser: upgrade 1.3.0 -> 1.4.0Wang Mingyu2 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Security fixes: ================= - Remove import-time loading of timezone offset data from pickle to prevent unsafe deserialization from packaged data - Replace eval() use when parsing no_word_spacing with strict boolean parsing to prevent code execution from locale metadata (#1056) New features: ============= - Add support for expressions like "N {interval} from now" in English (#1271) - Add support for the en-US locale (#1222) Fixes: ======== - Honor REQUIRE_PARTS for ambiguous month-number inputs by retrying with a year-biased DATE_ORDER (#1298) - Fix parsing word-number relative phrases such as "two days later" (#1316) - Allow md5hash to work in FIPS environments (#1267) Improvements: ============= - Add Bosnian Cyrillic (ijekavica) date translations (#1293) - Add a new browser-based demo to the project documentation (#1306) - Update installation documentation to replace setup.py install guidance - Add a project security policy Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-cmake: upgrade 4.2.3 -> 4.3.0Wang Mingyu2 days1-1/+1
| | | | | | | | Changelog: docs: mention Windows ARM in README Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-bleak: upgrade 3.0.0 -> 3.0.1Wang Mingyu2 days1-1/+1
| | | | | | | | Changelog: Fixed AttributeError in start_notify() and stop_notify() on Android. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-anyio: upgrade 4.12.1 -> 4.13.0Wang Mingyu2 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Dropped support for Python 3.9 - Added a ttl parameter to the anyio.functools.lru_cache wrapper - Widened the type annotations of file I/O streams to accept IO[bytes] instead of just BinaryIO - Fixed anyio.Path not being compatible with Python 3.15 due to the removal of pathlib.Path.is_reserved() and the addition of pathlib.Path.__vfspath__() - Fixed the BrokenResourceError raised by the asyncio SocketStream not having the original exception as its cause - Fixed the TypeError raised when using "func" as a parameter name in pytest.mark.parametrize when using the pytest plugin - Fixed the pytest plugin not running tests that had the anyio marker added programmatically via pytest_collection_modifyitems - Fixed cancellation exceptions leaking from a CancelScope on asyncio when they are contained in an exception group alongside non-cancellation exceptions - Fixed Condition.wait() not passing on a notification when the task is cancelled but already received a notification - Fixed inverted condition in the process pool shutdown phase which would cause still-running pooled processes not to be terminated Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-aiohttp: upgrade 3.13.3 -> 3.13.4Wang Mingyu2 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pyjwt: drop obsolete CVE_STATUSGyorgy Sarvari3 days1-1/+0
| | | | | | | | This CVE is disputed, and it is now tracked with an old version of the application, it doesn't show up in the CVE report anymore. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-ecdsa: Upgrade 0.19.1 -> 0.19.2Mingli Yu3 days1-1/+1
| | | | | | | | Changlog: https://github.com/tlsfuzzer/python-ecdsa/releases/tag/python-ecdsa-0.19.2 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* meta-python: Convert confusing appends to override syntaxMichal Sieron3 days7-8/+8
| | | | | | | | | | While in this case `RDEPENDS:class-target +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:class-target =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-fastapi-cli: upgrade 0.0.20 -> 0.0.24Liu Yiding4 days1-1/+1
| | | | | | | | Changelog https://github.com/fastapi/fastapi-cli/releases/tag/0.0.24 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-py7zr: remove python3-pyzstdRoss Burton8 days1-1/+0
| | | | | | | | | | This dependency was replaced with the standard compression.zstd module in 1.1.0[1]. [1] https://github.com/miurahr/py7zr/commit/ccf0def15e4542ffc24e2a6f00570622ed04a0c9 Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-virtualenv: upgrade 20.36.1 -> 21.2.0Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-uvicorn: upgrade 0.41.0 -> 0.42.0Wang Mingyu8 days1-1/+1
| | | | | | | | | | | Changelog: =========== - Use bytearray for request body accumulation to avoid O(n^2) allocation on fragmented bodies - Escape brackets and backslash in httptools HEADER_RE regex - Fix multiple issues in websockets sans-io implementation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-uswid: upgrade 0.5.2 -> 0.6.0Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-starlette: upgrade 0.52.1 -> 1.0.0Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-simpleeval: upgrade 1.0.3 -> 1.0.7Wang Mingyu8 days1-2/+2
| | | | | | | License-Update: Copyright year updated to 2026 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-sentry-sdk: upgrade 1.45.1 -> 2.55.0Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-rich-toolkit: upgrade 0.15.1 -> 0.19.7Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pytest-env: upgrade 1.5.0 -> 1.6.0Wang Mingyu8 days1-1/+1
| | | | | | | | | | | | | | Changelog: =========== - Add permissions to workflows - Add SECURITY.md to .github/ - Add missing .github config files - Standardize .github files to .yaml suffix - Fix verbose source attribution when falling back to INI en - feat(env): preserve existing env values Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pytest-cov: upgrade 7.0.0 -> 7.1.0Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pre-commit: upgrade 4.3.0 -> 4.5.1Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pint: upgrade 0.25.2 -> 0.25.3Wang Mingyu8 days1-1/+1
| | | | | | | | | | | | | | | | | | Changelog: ============== - 'GenericPlainRegistry.parse_expression' now correctly returns a dimensionless Quantity when taking a float, int, or NaN - Replace MIP with scipy in 'Quantity.to_preferred' - New unit formatting modifier added ('^') to format unit with negative exponents - Add atomic unit of electric field gradient ('atomic_unit_of_electric_field_gradient', 'a_u_efg') - Defer expensive loading of dask.array - Add support for numpy's 'vdot', 'inner', 'outer', 'linalg.outer', 'matvec', 'vecmat', 'tensordot', and 'linalg.tensordot' Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pikepdf: upgrade 10.3.0 -> 10.5.1Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-myst-parser: upgrade 4.0.1 -> 5.0.0Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-mpmath: upgrade 1.4.0 -> 1.4.1Wang Mingyu8 days1-1/+1
| | | | | | | | | | | | Changelog: ============ - Fix test_hexadecimal_with_libc_bulk() - Keep available deprecated aliases for mpc/mpf_log() - Use version_file option of setuptools-scm to keep version info - Add workaround for test on s390x Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-mdit-py-plugins: upgrade 0.4.2 -> 0.5.0Wang Mingyu8 days1-1/+1
| | | | | | | | | | Changelog: ========== - Add plugin & tests to render subscripts - Drop Python 3.9 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-kiwisolver: upgrade 1.4.9 -> 1.5.0Wang Mingyu8 days1-2/+2
| | | | | | | | | | | | | | | License-Update: Copyright year updated to 2026 Changelog: ========== - add support for CMakeLists - implement more move constructor in the C++ code - add C++ tests - add support for GraalPy - add RiscV support Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-inline-snapshot: upgrade 0.32.4 -> 0.32.5Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-importlib-metadata: upgrade 8.7.1 -> 9.0.0Wang Mingyu8 days1-2/+2
| | | | | | | License-Update: Copyright year updated to 2026 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-imageio: upgrade 2.37.2 -> 2.37.3Wang Mingyu8 days1-2/+2
| | | | | | | License-Update: Copyright year updated to 2026 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-identify: upgrade 2.6.17 -> 2.6.18Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-icu: upgrade 2.16.1 -> 2.16.2Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-google-auth-oauthlib: upgrade 1.2.3 -> 1.3.0Wang Mingyu8 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-filelock: upgrade 3.25.0 -> 3.25.2Wang Mingyu8 days1-1/+1
| | | | | | | | | | | Changelog: ========== - fix(unix): suppress EIO on close in Docker bind mounts - docs(logo): add branded project logo - fix(win): restore best-effort lock file cleanup on release Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-04-04 12:36:31 +0000