summaryrefslogtreecommitdiffstats
path: root/meta-python
Commit message (Collapse)AuthorAgeFilesLines
* python3-xmlschema: upgrade 3.3.2 -> 3.4.1Wang Mingyu2024-09-181-1/+1
| | | | | | | | | | | Changelog: =========== - Fix failing URL normalization tests - Disable protocols checking with elementpath v4.5.0 - Extended ModelVisitor to make it usable as an helper class for generating content Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-virtualenv: upgrade 20.26.4 -> 20.26.5Wang Mingyu2024-09-181-1/+1
| | | | | | | | Changelog: Use uv over pip Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-robotframework: upgrade 7.0.1 -> 7.1Wang Mingyu2024-09-181-1/+1
| | | | | | | | Changelog: https://github.com/robotframework/robotframework/blob/master/doc/releasenotes/rf-7.1.rst Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-rich: upgrade 13.8.0 -> 13.8.1Wang Mingyu2024-09-181-1/+1
| | | | | | | | | | Changelog: =========== - Added support for Python 3.13 - Fixed infinite loop when appending Text to same instance Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-regex: upgrade 2024.7.24 -> 2024.9.11Wang Mingyu2024-09-181-1/+1
| | | | | | | | Changelog: Updated to Unicode 16.0.0. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyunormalize: upgrade 15.1.0 -> 16.0.0Wang Mingyu2024-09-181-2/+2
| | | | | | | | | | License-Update: Copyright year updated to 2024. Changelog: Updated to Unicode 16.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyproject-api: upgrade 1.7.1 -> 1.7.2Wang Mingyu2024-09-181-1/+1
| | | | | | | | Changelog: Improve the CI Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pymisp: upgrade 2.4.197 -> 2.4.198Wang Mingyu2024-09-181-1/+1
| | | | | | | | | | | | | Changelog: ============ - Bump changelog. - Bump deps, version. - Only include the changelog in the sdist package. - [data] describeTypes.json updated. - Openioc.py is not a script, but had exec bit. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyasn1-modules: upgrade 0.4.0 -> 0.4.1Wang Mingyu2024-09-181-1/+1
| | | | | | | | Changelog: Added support for Python 3.13 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-platformdirs: upgrade 4.3.1 -> 4.3.6Wang Mingyu2024-09-181-1/+1
| | | | | | | | | | | | | | | | Changelog: =========== - Fix readme download target - Split build and publish for release - Use upstream setup-uv with uv python - Bump astral-sh/setup-uv from 2 to 3 - [pre-commit.ci] pre-commit autoupdate - don't include outdated changelog in docs - Fix multi-path returned from _path methods on MacOS - Use uv as installer Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-paramiko: upgrade 3.4.1 -> 3.5.0Wang Mingyu2024-09-181-1/+1
| | | | | | | | Changelog: Add support for AES-GCM encryption ciphers (128 and 256 bit variants). Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-nmap: upgrade 1.6.0 -> 1.9.1Wang Mingyu2024-09-181-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-greenlet: upgrade 3.0.3 -> 3.1.0Wang Mingyu2024-09-181-1/+1
| | | | | | | | | | Changelog: ========== - Adds support for Python 3.13. - Greatly reduce the chances for crashes during interpreter shutdown. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-filelock: upgrade 3.16.0 -> 3.16.1Wang Mingyu2024-09-181-1/+1
| | | | | | | | Changelog: CI improvements Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-eventlet: upgrade 0.36.1 -> 0.37.0Wang Mingyu2024-09-181-1/+1
| | | | | | | | | | | | Changelog: ========== * [fix] os.read/write waits until file descriptor is ready. * [fix] Upgrade RLocks as last thing we do * [security] drop header keys with underscores * [doc] Various doc updates Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-elementpath: upgrade 4.4.0 -> 4.5.0Wang Mingyu2024-09-181-1/+1
| | | | | | | | | | | Changelog: ========== - Fix and clean node trees iteration methods - Fix missing raw string for '[^rn]' - Full and more specific type annotations Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-msgpack: upgrade 1.0.8 -> 1.1.0alperak2024-09-171-2/+2
| | | | | | | Full Changelog: https://github.com/msgpack/msgpack-python/compare/v1.0.8...v1.1.0 Signed-off-by: alperak <alperyasinak1@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pytest-mock: Upgrade to 3.14.0Khem Raj2024-09-152-96/+4
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fastjsonschema: Add missing rdeps for ptestsKhem Raj2024-09-152-1/+4
| | | | | | Allocated 5G RAM to qemu when running the ptest to avoid OOMs Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pylint: Add missing ptest rdep on python3-miscKhem Raj2024-09-151-1/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python-ujson: Use python_setuptools_build_metaKhem Raj2024-09-152-40/+5
| | | | | | | Drop the patch to disable strip instead set the env variable. set UJSON_BUILD_NO_STRIP=1 and get rid of one pending patch Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pillow: Add missing rdep on py3-compile for ptestsKhem Raj2024-09-151-1/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-wrapt: Add missing rdep on misc modules for ptestsKhem Raj2024-09-151-0/+2
| | | | | | Needed for 'this', 'abc' modules Signed-off-by: Khem Raj <raj.khem@gmail.com>
* non-repro-meta-python: exclude packages that failed previouslyYoann Congal2024-09-141-0/+3
| | | | | | | | Those are the non-reproducible packages from: https://autobuilder.yoctoproject.org/typhoon/#/builders/155/builds/43 Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-django: upgrade 5.0.6 -> 5.0.9Fathi Boudra2024-09-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2024-45230: Potential denial-of-service vulnerability in django.utils.html.urlize() urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters. CVE-2024-45231: Potential user email enumeration via response status on password reset Due to unhandled email sending failures, the django.contrib.auth.forms.PasswordResetForm class allowed remote attackers to enumerate user emails by issuing password reset requests and observing the outcomes. To mitigate this risk, exceptions occurring during password reset email sending are now handled and logged using the django.contrib.auth logger. CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent. CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize() The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters. CVE-2024-41991: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters. CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list() QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg. CVE-2024-38875: Potential denial-of-service in django.utils.html.urlize() urlize() and urlizetrunc() were subject to a potential denial-of-service attack via certain inputs with a very large number of brackets. CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords The django.contrib.auth.backends.ModelBackend.authenticate() method allowed remote attackers to enumerate users via a timing attack involving login requests for users with unusable passwords. CVE-2024-39330: Potential directory-traversal in django.core.files.storage.Storage.save() Derived classes of the django.core.files.storage.Storage base class which override generate_filename() without replicating the file path validations existing in the parent class, allowed for potential directory-traversal via certain inputs when calling save(). Built-in Storage sub-classes were not affected by this vulnerability. CVE-2024-39614: Potential denial-of-service in django.utils.translation.get_supported_language_variant() get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters. To mitigate this vulnerability, the language code provided to get_supported_language_variant() is now parsed up to a maximum length of 500 characters. Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-django: upgrade 4.2.11 -> 4.2.16Fathi Boudra2024-09-131-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | CVE-2024-45230: Potential denial-of-service vulnerability in django.utils.html.urlize() urlize and urlizetrunc were subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters. CVE-2024-45231: Potential user email enumeration via response status on password reset Due to unhandled email sending failures, the django.contrib.auth.forms.PasswordResetForm class allowed remote attackers to enumerate user emails by issuing password reset requests and observing the outcomes. To mitigate this risk, exceptions occurring during password reset email sending are now handled and logged using the django.contrib.auth logger. CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent. CVE-2024-41990: Potential denial-of-service in django.utils.html.urlize() The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with a specific sequence of characters. CVE-2024-41991: Potential denial-of-service vulnerability in django.utils.html.urlize() and AdminURLFieldWidget The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters. CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list() QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg. CVE-2024-38875: Potential denial-of-service in django.utils.html.urlize() urlize() and urlizetrunc() were subject to a potential denial-of-service attack via certain inputs with a very large number of brackets. CVE-2024-39329: Username enumeration through timing difference for users with unusable passwords The django.contrib.auth.backends.ModelBackend.authenticate() method allowed remote attackers to enumerate users via a timing attack involving login requests for users with unusable passwords. CVE-2024-39330: Potential directory-traversal in django.core.files.storage.Storage.save() Derived classes of the django.core.files.storage.Storage base class which override generate_filename() without replicating the file path validations existing in the parent class, allowed for potential directory-traversal via certain inputs when calling save(). Built-in Storage sub-classes were not affected by this vulnerability. CVE-2024-39614: Potential denial-of-service in django.utils.translation.get_supported_language_variant() get_supported_language_variant() was subject to a potential denial-of-service attack when used with very long strings containing specific characters. To mitigate this vulnerability, the language code provided to get_supported_language_variant() is now parsed up to a maximum length of 500 characters. Fixed a crash in Django 4.2 when validating email max line lengths with content decoded using the surrogateescape error handling scheme (#35361) Signed-off-by: Fathi Boudra <fathi.boudra@linaro.org> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask: Add missing ptest depsKhem Raj2024-09-121-0/+4
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-py-cpuinfo: Fix ptest runtime depsKhem Raj2024-09-121-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyyaml-include: Add missing dependencies for ptestsKhem Raj2024-09-121-0/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ptest-packagelists-meta-python: Add python3-fsspec to fast test listKhem Raj2024-09-121-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fsspec: Add recipeKhem Raj2024-09-121-0/+22
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-service-identity: Fix ptest rdepsKhem Raj2024-09-121-0/+2
| | | | | | Add missing six and attrs modules to runtime deps Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-trustme: Add missing ptest rdeps on attrs and six modulesKhem Raj2024-09-121-0/+2
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-tzdata: Add missing attrs modules rdep for ptestsKhem Raj2024-09-121-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-serpent: Fix typo attr -> attrsKhem Raj2024-09-121-1/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-parse-type: Add missing rdep on six for ptestsKhem Raj2024-09-111-0/+1
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-serpent: Add missing rdeps for ptests to runKhem Raj2024-09-111-1/+3
| | | | Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyjwt 2.8.0 -> 2.9.0Tom Geelen2024-09-101-4/+4
| | | | | | | Updated name of PYPI_PACKAGE as it is renamed on pypi.org Changelog: https://github.com/jpadilla/pyjwt/releases/tag/2.9.0 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-zeroconf: upgrade 0.132.2 -> 0.134.0Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | | | | Changelog: ============ - Improve performance when IP addresses change frequently - Improve helpfulness of ServiceInfo.request assertions - Improve performance of ip address caching - Enable building of arm64 macOS builds - Add classifier for python 3.13 - Python 3.13 support Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-yarl: upgrade 1.9.4 -> 1.10.0Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | | | | | | Changelog: ========== - Fixed joining a path when the existing path was empty - Added :meth:URL.without_query_params() <yarl.URL.without_query_params> method, to drop some parameters from query string - The previously protected types _SimpleQuery, _QueryVariable, and _Query are now available for use externally as SimpleQuery, QueryVariable, and Query - Replaced all :class:~typing.Optional with :class:~typing.Union - Significantly improved performance of parsing the network location - Added internal types to the cache to prevent future refactoring errors Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-watchdog: upgrade 4.0.2 -> 5.0.2Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Enable OS specific Mypy checks - [watchmedo] Fix tricks argument type of schedule_tricks() - [kqueue] Fix TypeError: kqueue.control() only accepts positional parameters - Drop support for Python 3.8 - [core] Enforced usage of proper keyword-arguments - [core] Renamed the BaseObserverSubclassCallable class to ObserverType - [inotify] Renamed the inotify_event_struct class to InotifyEventStruct - [inotify] Renamed the UnsupportedLibc exception to UnsupportedLibcError - [inotify] Removed the InotifyConstants.IN_CLOSE constant - [watchmedo] Renamed the LogLevelException exception to LogLevelError - [watchmedo] Renamed the WatchdogShutdown exception to WatchdogShutdownError - [windows] Renamed the FILE_NOTIFY_INFORMATION class to FileNotifyInformation - [windows] Removed the unused WATCHDOG_TRAVERSE_MOVED_DIR_DELAY constant - [core] Enable disallow_untyped_calls Mypy rule - [core] Enable disallow_untyped_defs Mypy rule - [core] Improve typing references for events - [inotify] Add support for IN_CLOSE_NOWRITE events. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-virtualenv: upgrade 20.26.3 -> 20.26.4Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | | | | Changelog: ========== - Fix whitespace around backticks in changelog - Test latest Python 3.13 - Fix typo in Nushell activation script - GitHub Actions: Replace deprecated macos-12 with macos-13 - Fix #2728: Activating venv create unwanted console output - Upgrade bundled wheels Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-validators: upgrade 0.33.0 -> 0.34.0Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | Changelog: =========== - feat: cache IANA TLDs for faster lookups - chore: update dependencies - docs: adds configuration info Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-types-python-dateutil: upgrade 2.9.0.20240821 -> 2.9.0.20240906Wang Mingyu2024-09-101-1/+1
| | | | | | | | Changelog: [python-dateutil] Add dateutil.parser.UnknownTimezoneWarning. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-types-psutil: upgrade 6.0.0.20240621 -> 6.0.0.20240901Wang Mingyu2024-09-102-10/+10
| | | | | | | | | | License-Update: "Apache-2.0 license" changed to "Apache-2.0" Changelog: Fix types for psutil.cpu_* functions Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-scikit-build: upgrade 0.18.0 -> 0.18.1Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | | Changelog: =========== - Support for setuptools 74 - iOS and Android support - Fix for distutils change - Remove test directives Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-rich: upgrade 13.7.1 -> 13.8.0Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== Fixed -------- - Fixed Table rendering of box elements so "footer" elements truly appear at bottom of table, "mid" elements in main table body. - Fixed styles in Panel when Text objects are used for title - Fix pretty repr for collections.deque - Thread used in progress.track will exit if an exception occurs in a generator - Progress track thread is now a daemon thread - Fixed cached hash preservation upon clearing meta and links - Fixed overriding the background_color of Syntax not including padding - Fixed pretty printing of dataclasses with a default repr in Python 3.13 - Fixed selective enabling of highlighting when disabled in the Console - Fixed BrokenPipeError writing an error message - Fixed superfluous space above Markdown tables - Fixed issue with record and capture interaction - Fixed control codes breaking in append_tokens - Fixed exception pretty printing a dataclass with missing fields Changed ---------- - RichHandler errors and warnings will now use different colors (red and yellow) - Removed the empty line printed in jupyter while using Progress - Running tests in environment with FORCE_COLOR or NO_COLOR environment variables - ansi decoder will now strip problematic private escape sequences (like \x1b7) - Tree's ASCII_GUIDES and TREE_GUIDES constants promoted to class attributes Added --------- - Adds a case_sensitive parameter to prompt.Prompt. This determines if the - response is treated as case-sensitive. Defaults to True. - Added Console.on_broken_pipe Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pymodbus: upgrade 3.7.0 -> 3.7.2Wang Mingyu2024-09-101-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Better error message, when pyserial is missing. - Slave=0 will return first response, used to identify device address. - Feature/add simulator api skeleton - Correct max. read size for registers. - Ruff complains, due to upgrade. - Properly process 'slaves' argument - Update repl requirement to >= 2.0.4 - Fix aiohttp < 3.9.0 - Simplify framer test setup - Clean up ModbusControlBlock - example docstrings diag_message -> pdu.diag_message - Explain version schema - Add more testing for WriteRegisters. - Proof for issue 2273. - Update simulator tests. - Correct README - Rename branch wait3.8.0 to wait_next_API Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pymisp: upgrade 2.4.196 -> 2.4.197Wang Mingyu2024-09-101-1/+1
| | | | | | | | Changelog: fix: Avoid printing huge log when a request fails Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pymetno: upgrade 0.12.0 -> 0.13.0Wang Mingyu2024-09-101-1/+1
| | | | | | | | Changelog: Expose UV Index Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-06-14 19:10:43 +0000