Commit Graph

2401 Commits

Author SHA1 Message Date
Josef Schlehofer
a9891c2877 python-flask-session: update to version 0.8.0
Release notes:
https://flask-session.readthedocs.io/en/latest/changes.html

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 03303c362d)
2025-12-03 20:20:47 +01:00
Josef Schlehofer
75ba28479e python-pysocks: remove outdated and not maintained package
The latest commit in https://github.com/Anorov/PySocks
is from 2019, it looks outdated and not maintained.

It does not follow PEP 625.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 95fe4bf332)
2025-12-03 20:19:33 +01:00
Josef Schlehofer
b03875c738 python-parsley: drop package
This looks like it is not maintained anymore.
The last commit in the repository [1] is from 2017,
and the last tarball uploaded on PyPI is from 2015.

That tarball does not follow PEP625, because the
wheel and tarball begins with uppercase, it should be
in lowercase and as well it is still using setup.py.

Python these days is using pyproject.toml.

[1] https://github.com/washort/parsley

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 598dc276f7)
2025-12-03 20:19:25 +01:00
Josef Schlehofer
8b1ea353d5 python-zope-interface: update to 8.0.1
Release notes:
https://github.com/zopefoundation/zope.interface/blob/8.0.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit c4bcff285b)
2025-12-03 10:48:00 +01:00
Josef Schlehofer
cec82e394e python-zope-event: update to version 6.1
Release notes:
https://github.com/zopefoundation/zope.event/blob/6.1/CHANGES.rst

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 9218d6ee4f)
2025-12-03 10:47:46 +01:00
Josef Schlehofer
07ed6152fe django: update to version 5.1.14
Includes many CVEs fixes e.g.
- CVE-2025-64458
- CVE-2025-64459
- CVE-2025-59681
- CVE-2025-59682
and others while bumping this from version 5.1.7

Release notes:
https://docs.djangoproject.com/en/5.2/releases/5.1.14/

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
2025-12-02 15:53:26 +02:00
Josef Schlehofer
1b990e991a python-setuptools: update to version 80.9.0
Release notes:
https://setuptools.pypa.io/en/stable/history.html#v80-9-0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 9bf59d5f67)
2025-11-02 16:46:55 +01:00
Josef Schlehofer
45bfa5f87f python-wheel: update to 0.45.1
Release notes:
https://github.com/pypa/wheel/releases/tag/0.45.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 182156cfad)
2025-11-02 16:46:43 +01:00
Josef Schlehofer
1c13afebe7 python-calver: update to version 2025.10.20
Fixes:
 SetuptoolsDeprecationWarning: License classifiers are deprecated.
!!

        ********************************************************************************
        Please consider removing the following classifiers in favor of a SPDX license expression:

        License :: OSI Approved :: Apache Software License

        See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
        ********************************************************************************

!!
  self._finalize_license_expression()

Release notes:
https://github.com/di/calver/releases/tag/2025.10.20

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7f64f6c0cf)
2025-11-02 16:45:48 +01:00
Josef Schlehofer
c8941adc2f python-cython: update to version 3.1.5
Fixes:
Traceback (most recent call last):
  File "<frozen runpy>", line 198, in _run_module_as_main
  File "<frozen runpy>", line 88, in _run_code
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 98, in <module>
_main(sys.argv[1:], "python -m installer")
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/__main__.py", line 86, in _main
with WheelFile.open(args.wheel) as source:
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/contextlib.py", line 137, in __enter__
return next(self.gen)
   ^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/site-packages/installer/sources.py", line 162, in open
with zipfile.ZipFile(path) as f:
 ^^^^^^^^^^^^^^^^^^^^^
  File "/turris/build/staging_dir/hostpkg/lib/python3.11/zipfile.py", line 1311, in __init__
self.fp = io.open(file, filemode)
  ^^^^^^^^^^^^^^^^^^^^^^^
FileNotFoundError: [Errno 2] No such file or directory: '/turris/build/build_dir/hostpkg/pypi/Cython-3.0.10//openwrt-build/Cython-3.0.10-*.whl'

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 7f233be4ce)
2025-10-31 12:48:40 +01:00
Josef Schlehofer
7113624afb python-markupsafe: update to version 3.0.3
Release notes:
https://github.com/pallets/markupsafe/releases/tag/3.0.3

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 69539619b6)
2025-10-31 12:48:11 +01:00
Josef Schlehofer
7877590b82 python-uci: drop patches due to newer setuptools
These patches were required with older setuptools version,
but in Python 3.11.4 is bundled setuptools updated, thus
we can remove these patches.

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f4395c5d31)
2025-10-31 12:43:01 +01:00
Josef Schlehofer
5ea20ec4f0 python3: update to version 3.11.4
In this release, there is updated setuptools, so update
it as well.

Fixes CVEs:
- CVE-2025-47273
- CVE-2024-6345

Release notes:
https://pythoninsider.blogspot.com/2025/10/python-31212-31114-31019-and-3924-are.html

Patch:
- 0001-Adjust-library-header-paths-for-cross-compilation.patch
comes from buildroot [1], but they removed it as they switched to Python 3.12,
however Python 3.11 still supports distutils, but it is marked as deprecated [2]
and it will be gone in 3.12. So, don't rebase it this time as this patch does not apply
anymore due to this commit [3] and sooner switch to more up-to-date Python3 version.

[1] b37e4a5f56
[2] https://peps.python.org/pep-0632/
[3] 88eb8cc66f

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit ef509da52b)
2025-10-31 12:42:55 +01:00
Josef Schlehofer
9110dd9e2a python-build: update to version 1.3.0
Release notes:
https://github.com/pypa/build/releases/tag/1.3.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4ba2c1487c)
2025-10-29 11:53:52 +01:00
Josef Schlehofer
abf944ce4e python-flit-core: update to version 3.12.0
Release notes:
5714d1f78f/doc/history.rst (version-312)

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit caed169831)
2025-10-29 11:53:51 +01:00
Josef Schlehofer
5cf245f6ad python-hatch-requirements-txt: bump to 0.4.1
Release notes:
https://github.com/repo-helper/hatch-requirements-txt/releases/tag/v0.4.1

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit f182a567aa)
2025-10-22 12:55:50 +02:00
Felix Fietkau
ef893976e7 python3-host.mk: disable pip --no-binary on macOS
For some reason, pip builds a broken Cython, which segfaults on attempting
to install wheel. Work around this by allowing to use precompiled wheels.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
(cherry picked from commit d798ccce9a)
2025-10-22 01:09:51 +02:00
W. Michael Petullo
58eb9bbf1d python-networkx: update to 3.5
Upstream list of changes is available at
https://github.com/networkx/networkx/releases/tag/networkx-3.5.

Signed-off-by: W. Michael Petullo <mike@flyn.org>
(cherry picked from commit ac839af473)
2025-10-22 01:09:12 +02:00
George Sapkin
1326c21ec1 python-trove-classifiers: bump to 2025.9.11.17
Adds classifier for Python 3.15.
More details can be found in their tags:
https://github.com/pypa/trove-classifiers/releases

Signed-off-by: George Sapkin <george@sapk.in>
(cherry picked from commit d856cb45e3)
2025-10-22 01:05:38 +02:00
Finn Landweber
9f66360e54 python-setuptools-scm: update to 8.1.0
Signed-off-by: Finn Landweber <finn@landweber.xyz>
(cherry picked from commit c6989438c3)
2025-10-22 00:29:03 +02:00
Alexandru Ardelean
0f4782d144 python-lxml: bump to version 5.4.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit eeacf8474b)
2025-10-22 00:20:09 +02:00
Alexandru Ardelean
c1a3e22aaf python-lxml: bump to version 5.3.0
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 9060de91b0)
2025-10-22 00:20:04 +02:00
Wei-Ting Yang
62819b7e56 python-urllib3: update to 2.5.0
Changelogs can be found in https://github.com/urllib3/urllib3/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit c6ba0ce292)
2025-10-21 23:49:43 +02:00
Josef Schlehofer
e160ba18d5 python-hatchling: update to version 1.27.0
Release notes:
https://github.com/pypa/hatch/releases/tag/hatchling-v1.27.0

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 4d521dfbeb)
2025-10-21 23:49:42 +02:00
Wei-Ting Yang
fb35b87809 python-packaging: update to 25.0
Changelogs can be found in https://github.com/pypa/packaging/releases.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 7289cb0119)
2025-10-21 23:49:42 +02:00
Austin Lane
0af825465e python-pyelftools: Update to v0.32
- Update pyelftools to version 0.32 (minor)

Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit f2d141912f)
2025-10-02 22:15:00 +02:00
Austin Lane
28ff64bed9 python-pyelftools: add package / hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit dc79b54b57)
2025-10-02 22:15:00 +02:00
Wei-Ting Yang
44cff71992 python-certifi: update to 2025.8.3
Fix CVE-2024-39689.

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 6d9d0d2bf8)
2025-09-20 23:24:32 +08:00
Wei-Ting Yang
d490217d82 python-certifi: assign PKG_CPE_ID
https://nvd.nist.gov/products/cpe/search/results?keyword=cpe:2.3:a:certifi:certifi

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit dc6724fca5)
2025-09-20 23:24:32 +08:00
Richard Muzik
7e010914b3 python-twisted: Update to 25.5.0
This update fixes CVE-2024-41810 and CVE-2024-41671 [1]. For the full
changelog see NEWS [2].

Additionally changed the way the test files are omitted from patch file
to filespec in the Makefile.

[1] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst#twisted-2470-2024-08-08
[2] https://github.com/twisted/twisted/blob/twisted-25.5.0/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit e09ffebce1)
2025-09-11 08:00:59 +02:00
Josef Schlehofer
2f6357377d python3: update to version 3.11.13
Release notes:
https://docs.python.org/release/3.11.13/whatsnew/changelog.html#python-3-11-13

Fixes CVEs:
CVE 2024-12718
CVE 2025-4138
CVE 2025-4330
CVE 2025-4517

Patch refreshed

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit 3686cbe417)
2025-09-11 08:00:33 +02:00
Wei-Ting Yang
091d10162a python-urllib3: update to 2.0.7
Fix CVE-2023-45803 and CVE-2023-43804.

Full changelogs:
- https://github.com/urllib3/urllib3/releases/tag/v2.0.5
- https://github.com/urllib3/urllib3/releases/tag/2.0.6
- https://github.com/urllib3/urllib3/releases/tag/2.0.7

Signed-off-by: Wei-Ting Yang <williamatcg@gmail.com>
(cherry picked from commit 23646be59e)
2025-08-22 16:13:26 +03:00
Richard Muzik
a4ef5c8971 python-incremental: Update to 24.7.2
To see changes check NEWS [1].

[1] https://github.com/twisted/incremental/blob/incremental-24.7.2/NEWS.rst

Signed-off-by: Richard Muzik <richard.muzik@turris.com>
(cherry picked from commit 63b3e10116)
2025-07-30 12:00:32 +02:00
Rosen Penev
c7b68fb51c python3: update to 3.11.10
Just a security bugfix.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
(cherry picked from commit f2d5c861bd)
2025-07-18 11:59:50 +02:00
Sean Khan
9684653566 python3: Bump version 3.11 to 3.11.9
Also bumps setuptools to version 24.0

Run tested: aarch64, Dynalink DL-WRX36, Master Branch

Maintainer: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Sean Khan <datapronix@protonmail.com>
(cherry picked from commit 49e3c330d4)
2025-07-18 11:59:44 +02:00
Josef Schlehofer
45a9470246 python-uci: update to version 0.10.3 + two patches
Release notes:
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.0
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.1
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.2
https://gitlab.nic.cz/turris/pyuci/-/tags/v0.10.3

Upstream (pyuci developers) removed setup.py,
I bring it back to be able to compile it despite
that we do support building packages, which are
using pyproject.toml, but the thing here is
that their pyproject.toml requires setuptools 74.1.0
[1] [2], but Python 3.11 is using bundled setuptools
and pip [3] [4]. In current version 3.11.13,
there is still outdated version of setuptools, but
it looks like that in the newer version, there will be
new one [5].

Once, there is released Python 3.11.14 and updated
in OpenWrt, these patches can be dropped.

[1] 240180b294/pyproject.toml (L29)
[2] https://setuptools.pypa.io/en/stable/history.html#v74-1-0
[3] c94ab433ca/lang/python/python3-version.mk (L18)
[4] https://github.com/python/cpython/commits/3.11/Lib/ensurepip/_bundled
[5] c96ab19ae4

Signed-off-by: Josef Schlehofer <pepe.schlehofer@gmail.com>
(cherry picked from commit d457c26c0d)
2025-07-18 11:35:19 +02:00
Austin Lane
978dfa5be0 python-click: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit 117a3a2b1b)
2025-07-15 15:07:08 +02:00
Austin Lane
a6f877bee7 python-pyserial: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>
(cherry picked from commit ac212e0c43)
2025-06-11 22:10:26 +02:00
Austin Lane
32083d152c python-requests: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit edf093ff04)
2025-06-11 22:10:04 +02:00
Austin Lane
d0b8fe2731 python-urllib3: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit d6c644c5f5)
2025-06-11 22:10:04 +02:00
Austin Lane
0cce9c40b5 python-certifi: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 955976cee7)
2025-06-11 22:10:04 +02:00
Austin Lane
b43daa56f5 python-idna: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 6bb68d4682)
2025-06-11 22:10:04 +02:00
Austin Lane
6760772479 python-chardet: add hostbuild
Signed-off-by: Austin Lane <vidplace7@gmail.com>

(cherry picked from commit 7db7fd2aea)
2025-06-11 22:10:04 +02:00
Tomasz Maciej Nowak
dfd8a8668f python-bcrypt: bump version to 4.1.3
Bumps pyo3 version to 21, which in result fixes copmilation on
platforms without 64-bit atomics.

Upstream-issue: https://github.com/pyca/bcrypt/issues/731
Link: https://github.com/pyca/bcrypt/compare/4.1.2...4.1.3#commits_bucket

Signed-off-by: Tomasz Maciej Nowak <tmn505@gmail.com>
(cherry picked from commit 40c6ef6941)
2025-06-03 19:25:16 +02:00
Alexandru Ardelean
ad54bb46cd django: bump to version 5.1.7
Includes a bunch of fixes from 5.1 onwards.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-03-14 20:50:56 +02:00
Alexandru Ardelean
056b7a42c7 numpy: bump to version 2.2.1
Dropped:
  003-without-vendored-meson.patch
  004-workaround-for-multiple-top-level-packages-discovered.patch

This time, we really need to use meson to build numpy.
And to make things more complicated, the 'vendored' meson package (that
comes with numpy) must be used. This is because they have some special
logic in there that's specific to numpy.

With this change, we also need to keep a special/internal
'openwrt-cross.txt.in' file, because cross-compiling numpy also requires
that a 'longdouble_format' property be added.
More details about this:
   https://github.com/numpy/numpy/issues/23972
   https://github.com/numpy/numpy/blob/maintenance/2.2.x/doc/source/building/cross_compilation.rst

Removing quirk fix for x86_64 with detecting 'avx512f'.
This should work with the new meson stuff.

And finally, added a test.sh script.
This should make sure that this package works fine during upgrades.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 7b4ee2dabf)
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2025-03-11 16:09:52 +02:00
Glenn Strauss
cf7048f2b7 micropython-lib: update to 1.24.0
* update micropython-lib to hash for 1.24.0

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 8ec794998f)
2024-12-18 17:02:39 +08:00
Glenn Strauss
0c20a9e187 micropython-lib: update to 1.23.0 and fix compile on external mbedtls3
* update micropython-lib to hash for 1.23.0
* remove micropython-lib unix-uffi patches

Co-authored-by: Jeffery To <jeffery.to@gmail.com>

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
(cherry picked from commit 4c751e454c)
2024-12-18 17:02:39 +08:00
Alexandru Ardelean
0396341599 python-dateutil: "downgrade" to version 2.9.0
Fixes:
  https://github.com/openwrt/packages/pull/23648#issuecomment-2495371925

As weird as this sounds, the only different between the current version
(2.9.0.post0) and 2.9.0 is the pinning of `setuptools_scm` to `< 8`.
See:  https://github.com/dateutil/dateutil/releases/tag/2.9.0.post0

Also, the APK build doesn't seem to like the 'post0' suffix.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
(cherry picked from commit 40cfff8fe9)
2024-12-08 11:54:29 +02:00
Christian Marangi
86602b5f3a micropython: bump to 1.23.0 release
Bump micropython to 1.23.0. This is done to fix support for MbedTLS 3.0

Lots changed between 1.21 and 1.23 for the library side.

Mainly the barkeley-db library was moved to micropython own fork and the
cdef patch required lots of changes. (we have to manually include a copy
of cdef.h as it was dropped by them)
Also a new patch is required to mute some compilarion error that are
false-positive. (variable not initialized but that are ALWAYS
initialized)

Also refresh the extmod patch with new files included.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2024-10-27 15:09:50 -07:00