Commit Graph

2390 Commits

Author SHA1 Message Date
Josef Schlehofer
7877590b82 python-uci: drop patches due to newer setuptools
These patches were required with older setuptools version,
but in Python 3.11.4 is bundled setuptools updated, thus
we can remove these patches.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f4395c5d31)
2025-10-31 12:43:01 +01:00
Josef Schlehofer
5ea20ec4f0 python3: update to version 3.11.4
In this release, there is updated setuptools, so update
it as well.

Fixes CVEs:
- CVE-2025-47273
- CVE-2024-6345

Release notes:
https://pythoninsider.blogspot.com/2025/10/python-31212-31114-31019-and-3924-are.html

Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.

[1] b37e4a5f56
[2] https://peps.python.org/pep-0632/
[3] 88eb8cc66f

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ef509da52b)
2025-10-31 12:42:55 +01:00
Josef Schlehofer
9110dd9e2a python-build: update to version 1.3.0
Release notes:
https://github.com/pypa/build/releases/tag/1.3.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4ba2c1487c)
2025-10-29 11:53:52 +01:00
Josef Schlehofer
abf944ce4e python-flit-core: update to version 3.12.0
Release notes:
5714d1f78f/doc/history.rst (version-312)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit caed169831)
2025-10-29 11:53:51 +01:00
Josef Schlehofer
5cf245f6ad python-hatch-requirements-txt: bump to 0.4.1
Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f182a567aa)
2025-10-22 12:55:50 +02:00
Felix Fietkau
ef893976e7 python3-host.mk: disable pip --no-binary on macOS
For some reason, pip builds a broken Cython, which segfaults on attempting
to install wheel. Work around this by allowing to use precompiled wheels.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit d798ccce9a)
2025-10-22 01:09:51 +02:00
W. Michael Petullo
58eb9bbf1d python-networkx: update to 3.5
Upstream list of changes is available at
https://github.com/networkx/networkx/releases/tag/networkx-3.5.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ac839af473)
2025-10-22 01:09:12 +02:00
George Sapkin
1326c21ec1 python-trove-classifiers: bump to 2025.9.11.17
Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d856cb45e3)
2025-10-22 01:05:38 +02:00
Finn Landweber
9f66360e54 python-setuptools-scm: update to 8.1.0
Signed-off-by: Finn Landweber <finn@landweber.xyz>
(cherry picked from commit c6989438c3)
2025-10-22 00:29:03 +02:00
Alexandru Ardelean
0f4782d144 python-lxml: bump to version 5.4.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit eeacf8474b)
2025-10-22 00:20:09 +02:00
Alexandru Ardelean
c1a3e22aaf python-lxml: bump to version 5.3.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 9060de91b0)
2025-10-22 00:20:04 +02:00
Wei-Ting Yang
62819b7e56 python-urllib3: update to 2.5.0
Changelogs can be found in https://github.com/urllib3/urllib3/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit c6ba0ce292)
2025-10-21 23:49:43 +02:00
Josef Schlehofer
e160ba18d5 python-hatchling: update to version 1.27.0
Release notes:
https://github.com/pypa/hatch/releases/tag/hatchling-v1.27.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4d521dfbeb)
2025-10-21 23:49:42 +02:00
Wei-Ting Yang
fb35b87809 python-packaging: update to 25.0
Changelogs can be found in https://github.com/pypa/packaging/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 7289cb0119)
2025-10-21 23:49:42 +02:00
Austin Lane
0af825465e python-pyelftools: Update to v0.32
- Update pyelftools to version 0.32 (minor)

Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit f2d141912f)
2025-10-02 22:15:00 +02:00
Austin Lane
28ff64bed9 python-pyelftools: add package / hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit dc79b54b57)
2025-10-02 22:15:00 +02:00
Wei-Ting Yang
44cff71992 python-certifi: update to 2025.8.3
Fix CVE-2024-39689.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 6d9d0d2bf8)
2025-09-20 23:24:32 +08:00
Wei-Ting Yang
d490217d82 python-certifi: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit dc6724fca5)
2025-09-20 23:24:32 +08:00
Richard Muzik
7e010914b3 python-twisted: Update to 25.5.0
This update fixes CVE-2024-41810 and CVE-2024-41671 [1]. For the full
changelog see NEWS [2].

Additionally changed the way the test files are omitted from patch file
to filespec in the Makefile.

[1] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst#twisted-2470-2024-08-08
[2] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit e09ffebce1)
2025-09-11 08:00:59 +02:00
Josef Schlehofer
2f6357377d python3: update to version 3.11.13
Release notes:
https://docs.python.org/release/3.11.13/whatsnew/changelog.html#python-3-11-13

Fixes CVEs:
CVE 2024-12718
CVE 2025-4138
CVE 2025-4330
CVE 2025-4517

Patch refreshed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3686cbe417)
2025-09-11 08:00:33 +02:00
Wei-Ting Yang
091d10162a python-urllib3: update to 2.0.7
Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 23646be59e)
2025-08-22 16:13:26 +03:00
Richard Muzik
a4ef5c8971 python-incremental: Update to 24.7.2
To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit 63b3e10116)
2025-07-30 12:00:32 +02:00
Rosen Penev
c7b68fb51c python3: update to 3.11.10
Just a security bugfix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f2d5c861bd)
2025-07-18 11:59:50 +02:00
Sean Khan
9684653566 python3: Bump version 3.11 to 3.11.9
Also bumps setuptools to version 24.0

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Maintainer: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Sean Khan <datapronix@protonmail.com>
(cherry picked from commit 49e3c330d4)
2025-07-18 11:59:44 +02:00
Josef Schlehofer
45a9470246 python-uci: update to version 0.10.3 + two patches
Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] 240180b294/pyproject.toml (L29)
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] c94ab433ca/lang/python/python3-version.mk (L18)
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] c96ab19ae4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d457c26c0d)
2025-07-18 11:35:19 +02:00
Austin Lane
978dfa5be0 python-click: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 117a3a2b1b)
2025-07-15 15:07:08 +02:00
Austin Lane
a6f877bee7 python-pyserial: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit ac212e0c43)
2025-06-11 22:10:26 +02:00
Austin Lane
32083d152c python-requests: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit edf093ff04)
2025-06-11 22:10:04 +02:00
Austin Lane
d0b8fe2731 python-urllib3: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit d6c644c5f5)
2025-06-11 22:10:04 +02:00
Austin Lane
0cce9c40b5 python-certifi: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 955976cee7)
2025-06-11 22:10:04 +02:00
Austin Lane
b43daa56f5 python-idna: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 6bb68d4682)
2025-06-11 22:10:04 +02:00
Austin Lane
6760772479 python-chardet: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 7db7fd2aea)
2025-06-11 22:10:04 +02:00
Tomasz Maciej Nowak
dfd8a8668f python-bcrypt: bump version to 4.1.3
Bumps pyo3 version to 21, which in result fixes copmilation on
platforms without 64-bit atomics.

Upstream-issue: https://github.com/pyca/bcrypt/issues/731
Link: https://github.com/pyca/bcrypt/compare/4.1.2...4.1.3#commits_bucket

Signed-off-by: Tomasz Maciej Nowak <tmn505@gmail.com>
(cherry picked from commit 40c6ef6941)
2025-06-03 19:25:16 +02:00
Alexandru Ardelean
ad54bb46cd django: bump to version 5.1.7
Includes a bunch of fixes from 5.1 onwards.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-03-14 20:50:56 +02:00
Alexandru Ardelean
056b7a42c7 numpy: bump to version 2.2.1
Dropped:
  003-without-vendored-meson.patch
  004-workaround-for-multiple-top-level-packages-discovered.patch

This time, we really need to use meson to build numpy.
And to make things more complicated, the 'vendored' meson package (that
comes with numpy) must be used. This is because they have some special
logic in there that's specific to numpy.

With this change, we also need to keep a special/internal
'openwrt-cross.txt.in' file, because cross-compiling numpy also requires
that a 'longdouble_format' property be added.
More details about this:
   https://github.com/numpy/numpy/issues/23972
   https://github.com/numpy/numpy/blob/maintenance/2.2.x/doc/source/building/cross_compilation.rst

Removing quirk fix for x86_64 with detecting 'avx512f'.
This should work with the new meson stuff.

And finally, added a test.sh script.
This should make sure that this package works fine during upgrades.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 7b4ee2dabf)
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-03-11 16:09:52 +02:00
Glenn Strauss
cf7048f2b7 micropython-lib: update to 1.24.0
* update micropython-lib to hash for 1.24.0

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 8ec794998f)
2024-12-18 17:02:39 +08:00
Glenn Strauss
0c20a9e187 micropython-lib: update to 1.23.0 and fix compile on external mbedtls3
* update micropython-lib to hash for 1.23.0
* remove micropython-lib unix-uffi patches

Co-authored-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4c751e454c)
2024-12-18 17:02:39 +08:00
Alexandru Ardelean
0396341599 python-dateutil: "downgrade" to version 2.9.0
Fixes:
  https://github.com/openwrt/packages/pull/23648#issuecomment-2495371925

As weird as this sounds, the only different between the current version
(2.9.0.post0) and 2.9.0 is the pinning of `setuptools_scm` to `< 8`.
See:  https://github.com/dateutil/dateutil/releases/tag/2.9.0.post0

Also, the APK build doesn't seem to like the 'post0' suffix.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 40cfff8fe9)
2024-12-08 11:54:29 +02:00
Christian Marangi
86602b5f3a micropython: bump to 1.23.0 release
Bump micropython to 1.23.0. This is done to fix support for MbedTLS 3.0

Lots changed between 1.21 and 1.23 for the library side.

Mainly the barkeley-db library was moved to micropython own fork and the
cdef patch required lots of changes. (we have to manually include a copy
of cdef.h as it was dropped by them)
Also a new patch is required to mute some compilarion error that are
false-positive. (variable not initialized but that are ALWAYS
initialized)

Also refresh the extmod patch with new files included.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-10-27 15:09:50 -07:00
Alexandru Ardelean
ddc619dc61 numpy: bump to version 2.1.0
Re-applied:
   003-without-vendored-meson.patch

Added:
   004-workaround-for-multiple-top-level-packages-discovered.patch

Suggestion found here:
   https://stackoverflow.com/questions/72294299/multiple-top-level-packages-discovered-in-a-flat-layout

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-08-26 15:43:02 +03:00
Alexandru Ardelean
031a4968b5 django: bump to 5.1
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-08-26 15:43:02 +03:00
Alexandru Ardelean
32b033868d django-restframework: bump to version 3.15.2
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-07-18 16:20:33 +03:00
Alexandru Ardelean
f9dbdeaa03 django: bump to version 5.0.7
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-07-18 16:20:33 +03:00
Rosen Penev
d257ffe609 python3: use pkgconfig to find readline
When searching for readline, ncurses is needed, which can be ncursesw or
ncurses. Use pkgconfig to avoid the whole situation and simplify.

Also add readline/host as the OS one may be unusable.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Rosen Penev
434cdf4a75 python3: remove rpath from host python
Everything relevant to python is now built statically. No need for
rpath.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Rosen Penev
8aac7a78a9 python3: replace e2fsprogs includes
libuuid is provided by util-linux now.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
2024-07-12 13:10:49 -07:00
Alexandru Ardelean
41486a7df7 Merge pull request #24314 from commodo/python-updates1
django,python-{requests,evdev,lxml}: bump versions
2024-06-09 12:50:19 +03:00
W. Michael Petullo
b560ea218e python-networkx: update to 3.3
Signed-off-by: W. Michael Petullo <mike@flyn.org>
2024-06-07 03:23:18 +08:00
Alexandru Ardelean
76c07f6432 django: bump to version 5.0.6
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-06-03 09:42:38 +03:00
Alexandru Ardelean
bcebcf13fb python-requests: bump to version 2.32.3
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2024-06-03 09:41:21 +03:00