From b9c60c567587dc7a9957e5ec29fe2558b76e75e7 Mon Sep 17 00:00:00 2001 From: James Hilliard Date: Wed, 4 Mar 2026 10:27:29 -0700 Subject: [PATCH 1/7] package/python-aiodns: bump to version 4.0.0 Signed-off-by: James Hilliard Signed-off-by: Julien Olivain --- package/python-aiodns/python-aiodns.hash | 4 ++-- package/python-aiodns/python-aiodns.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-aiodns/python-aiodns.hash b/package/python-aiodns/python-aiodns.hash index a4a242670a52..4cde1c4b1dd9 100644 --- a/package/python-aiodns/python-aiodns.hash +++ b/package/python-aiodns/python-aiodns.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/aiodns/json -md5 c1552fe562a1f9c98ea4c2311a2c75ba aiodns-3.6.1.tar.gz -sha256 b0e9ce98718a5b8f7ca8cd16fc393163374bc2412236b91f6c851d066e3324b6 aiodns-3.6.1.tar.gz +md5 c69a64f09c0999f63ed759f5046d5bb4 aiodns-4.0.0.tar.gz +sha256 17be26a936ba788c849ba5fd20e0ba69d8c46e6273e846eb5430eae2630ce5b1 aiodns-4.0.0.tar.gz # Locally computed sha256 checksums sha256 3e91cfa76821ab70d22998136d674d20ae888463a7e8a7f377166cfe1ee64feb LICENSE diff --git a/package/python-aiodns/python-aiodns.mk b/package/python-aiodns/python-aiodns.mk index 7476c76b7294..6befbff2037e 100644 --- a/package/python-aiodns/python-aiodns.mk +++ b/package/python-aiodns/python-aiodns.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_AIODNS_VERSION = 3.6.1 +PYTHON_AIODNS_VERSION = 4.0.0 PYTHON_AIODNS_SOURCE = aiodns-$(PYTHON_AIODNS_VERSION).tar.gz -PYTHON_AIODNS_SITE = https://files.pythonhosted.org/packages/85/2f/9d1ee4f937addda60220f47925dac6c6b3782f6851fd578987284a8d2491 +PYTHON_AIODNS_SITE = https://files.pythonhosted.org/packages/10/da/97235e953109936bfeda62c1f9f1a7c5652d4dc49f2b5911f9ae1043afa9 PYTHON_AIODNS_SETUP_TYPE = setuptools PYTHON_AIODNS_LICENSE = MIT PYTHON_AIODNS_LICENSE_FILES = LICENSE From 51365ff06379aaf6fcc9a751e8ff32ac694f3e92 Mon Sep 17 00:00:00 2001 From: James Hilliard Date: Wed, 4 Mar 2026 10:56:02 -0700 Subject: [PATCH 2/7] package/python-setuptools: bump to version 82.0.0 Signed-off-by: James Hilliard Signed-off-by: Julien Olivain --- package/python-setuptools/python-setuptools.hash | 4 ++-- package/python-setuptools/python-setuptools.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-setuptools/python-setuptools.hash b/package/python-setuptools/python-setuptools.hash index d0ed270e9c0d..0236a139990f 100644 --- a/package/python-setuptools/python-setuptools.hash +++ b/package/python-setuptools/python-setuptools.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/setuptools/json -md5 82e1d67883b713f9493659b50d13b436 setuptools-80.9.0.tar.gz -sha256 f36b47402ecde768dbfafc46e8e4207b4360c654f1f3bb84475f0a28628fb19c setuptools-80.9.0.tar.gz +md5 6e65b88d2466b35e86e5187b99502b1c setuptools-82.0.0.tar.gz +sha256 22e0a2d69474c6ae4feb01951cb69d515ed23728cf96d05513d36e42b62b37cb setuptools-82.0.0.tar.gz # Locally computed sha256 checksums sha256 86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741 LICENSE diff --git a/package/python-setuptools/python-setuptools.mk b/package/python-setuptools/python-setuptools.mk index e013000c57d4..3c94931fbec5 100644 --- a/package/python-setuptools/python-setuptools.mk +++ b/package/python-setuptools/python-setuptools.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_SETUPTOOLS_VERSION = 80.9.0 +PYTHON_SETUPTOOLS_VERSION = 82.0.0 PYTHON_SETUPTOOLS_SOURCE = setuptools-$(PYTHON_SETUPTOOLS_VERSION).tar.gz -PYTHON_SETUPTOOLS_SITE = https://files.pythonhosted.org/packages/18/5d/3bf57dcd21979b887f014ea83c24ae194cfcd12b9e0fda66b957c69d1fca +PYTHON_SETUPTOOLS_SITE = https://files.pythonhosted.org/packages/82/f3/748f4d6f65d1756b9ae577f329c951cda23fb900e4de9f70900ced962085 PYTHON_SETUPTOOLS_LICENSE = MIT PYTHON_SETUPTOOLS_LICENSE_FILES = LICENSE PYTHON_SETUPTOOLS_CPE_ID_VENDOR = python From 170445994a4c5be8f766cda74ebd32acb78dd898 Mon Sep 17 00:00:00 2001 From: James Hilliard Date: Wed, 4 Mar 2026 11:07:54 -0700 Subject: [PATCH 3/7] package/python-sentry-sdk: bump to version 2.54.0 Signed-off-by: James Hilliard Signed-off-by: Julien Olivain --- package/python-sentry-sdk/python-sentry-sdk.hash | 4 ++-- package/python-sentry-sdk/python-sentry-sdk.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-sentry-sdk/python-sentry-sdk.hash b/package/python-sentry-sdk/python-sentry-sdk.hash index 10a54a538740..8ec550c4e944 100644 --- a/package/python-sentry-sdk/python-sentry-sdk.hash +++ b/package/python-sentry-sdk/python-sentry-sdk.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/sentry-sdk/json -md5 bb7b7afd707b67117b53658abad8e1b2 sentry_sdk-2.48.0.tar.gz -sha256 5213190977ff7fdff8a58b722fb807f8d5524a80488626ebeda1b5676c0c1473 sentry_sdk-2.48.0.tar.gz +md5 e8e3d9ea3aa3c7fdc465b33b10505aa3 sentry_sdk-2.54.0.tar.gz +sha256 2620c2575128d009b11b20f7feb81e4e4e8ae08ec1d36cbc845705060b45cc1b sentry_sdk-2.54.0.tar.gz # Locally computed sha256 checksums sha256 2a140d660f462812fa290bc740d04633126c5ec45d84b79b569e127b0eeddd0b LICENSE diff --git a/package/python-sentry-sdk/python-sentry-sdk.mk b/package/python-sentry-sdk/python-sentry-sdk.mk index 216f4999e707..21795bf44934 100644 --- a/package/python-sentry-sdk/python-sentry-sdk.mk +++ b/package/python-sentry-sdk/python-sentry-sdk.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_SENTRY_SDK_VERSION = 2.48.0 +PYTHON_SENTRY_SDK_VERSION = 2.54.0 PYTHON_SENTRY_SDK_SOURCE = sentry_sdk-$(PYTHON_SENTRY_SDK_VERSION).tar.gz -PYTHON_SENTRY_SDK_SITE = https://files.pythonhosted.org/packages/40/f0/0e9dc590513d5e742d7799e2038df3a05167cba084c6ca4f3cdd75b55164 +PYTHON_SENTRY_SDK_SITE = https://files.pythonhosted.org/packages/c8/e9/2e3a46c304e7fa21eaa70612f60354e32699c7102eb961f67448e222ad7c PYTHON_SENTRY_SDK_SETUP_TYPE = setuptools PYTHON_SENTRY_SDK_LICENSE = MIT PYTHON_SENTRY_SDK_LICENSE_FILES = LICENSE From 10037a3cd541e1c46d6303ec02006ff5f6ad0df7 Mon Sep 17 00:00:00 2001 From: James Hilliard Date: Wed, 4 Mar 2026 11:14:05 -0700 Subject: [PATCH 4/7] package/python-tortoise-orm: bump to version 1.1.5 Drop no longer required python-pytz runtime dependency. Signed-off-by: James Hilliard Signed-off-by: Julien Olivain --- package/python-tortoise-orm/Config.in | 1 - package/python-tortoise-orm/python-tortoise-orm.hash | 4 ++-- package/python-tortoise-orm/python-tortoise-orm.mk | 4 ++-- 3 files changed, 4 insertions(+), 5 deletions(-) diff --git a/package/python-tortoise-orm/Config.in b/package/python-tortoise-orm/Config.in index 57cebc6489bf..a05bfeab50d4 100644 --- a/package/python-tortoise-orm/Config.in +++ b/package/python-tortoise-orm/Config.in @@ -4,7 +4,6 @@ config BR2_PACKAGE_PYTHON_TORTOISE_ORM select BR2_PACKAGE_PYTHON_ANYIO # runtime select BR2_PACKAGE_PYTHON_ISO8601 # runtime select BR2_PACKAGE_PYTHON_PYPIKA_TORTOISE # runtime - select BR2_PACKAGE_PYTHON_PYTZ # runtime help Easy async ORM for python, built with relations in mind. diff --git a/package/python-tortoise-orm/python-tortoise-orm.hash b/package/python-tortoise-orm/python-tortoise-orm.hash index 6e1f46dd6f85..0bb4224a9ec0 100644 --- a/package/python-tortoise-orm/python-tortoise-orm.hash +++ b/package/python-tortoise-orm/python-tortoise-orm.hash @@ -1,5 +1,5 @@ # md5, sha256 from https://pypi.org/pypi/tortoise-orm/json -md5 b3dab10562c6574232334e954666f3eb tortoise_orm-0.25.3.tar.gz -sha256 b6dedd388393624628ec46228c93df361533ceb3925986fa2d1d22debc838a7d tortoise_orm-0.25.3.tar.gz +md5 5c143e93e4c35dfd8cd19dfdbc064d6d tortoise_orm-1.1.5.tar.gz +sha256 d4074a7c34a8445fcca19ec865189d80ea7a00b29e4b12778460fcab67a5ce74 tortoise_orm-1.1.5.tar.gz # Locally computed sha256 checksums sha256 f955d347b975d5867ee364f978476b3012878a706d468571b9758cac74de6041 LICENSE.txt diff --git a/package/python-tortoise-orm/python-tortoise-orm.mk b/package/python-tortoise-orm/python-tortoise-orm.mk index 3a380710a0b8..18ad37d5d9c4 100644 --- a/package/python-tortoise-orm/python-tortoise-orm.mk +++ b/package/python-tortoise-orm/python-tortoise-orm.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_TORTOISE_ORM_VERSION = 0.25.3 +PYTHON_TORTOISE_ORM_VERSION = 1.1.5 PYTHON_TORTOISE_ORM_SOURCE = tortoise_orm-$(PYTHON_TORTOISE_ORM_VERSION).tar.gz -PYTHON_TORTOISE_ORM_SITE = https://files.pythonhosted.org/packages/dd/be/0fdfcd8295f4f02a280f33bdda99c3edba450f9a212149232f2fbb6afa96 +PYTHON_TORTOISE_ORM_SITE = https://files.pythonhosted.org/packages/f3/b0/2b3962847aad793d32646c6e43e7fab6f845f34a5502da5722fe704ec847 PYTHON_TORTOISE_ORM_SETUP_TYPE = pep517 PYTHON_TORTOISE_ORM_LICENSE = Apache-2.0 PYTHON_TORTOISE_ORM_LICENSE_FILES = LICENSE.txt From b7b8c9e2778dc08a45942af9aaf7312ec3d78ff8 Mon Sep 17 00:00:00 2001 From: James Hilliard Date: Wed, 4 Mar 2026 11:20:21 -0700 Subject: [PATCH 5/7] package/python-trio: bump to version 0.33.0 Signed-off-by: James Hilliard Signed-off-by: Julien Olivain --- package/python-trio/python-trio.hash | 4 ++-- package/python-trio/python-trio.mk | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/package/python-trio/python-trio.hash b/package/python-trio/python-trio.hash index bd722a236774..79146dc1a258 100644 --- a/package/python-trio/python-trio.hash +++ b/package/python-trio/python-trio.hash @@ -1,6 +1,6 @@ # md5, sha256 from https://pypi.org/pypi/trio/json -md5 8bc9dbdc265c291c93006f5e0f1d3918 trio-0.32.0.tar.gz -sha256 150f29ec923bcd51231e1d4c71c7006e65247d68759dd1c19af4ea815a25806b trio-0.32.0.tar.gz +md5 e778db1205fa2ea00dac9340471b8f1d trio-0.33.0.tar.gz +sha256 a29b92b73f09d4b48ed249acd91073281a7f1063f09caba5dc70465b5c7aa970 trio-0.33.0.tar.gz # Locally computed sha256 checksums sha256 418d025e1284311f2690263e6efa6bf51585e5741818ece63e5862487e505bb9 LICENSE sha256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30 LICENSE.APACHE2 diff --git a/package/python-trio/python-trio.mk b/package/python-trio/python-trio.mk index 73c1ecb46159..4211dbb31300 100644 --- a/package/python-trio/python-trio.mk +++ b/package/python-trio/python-trio.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_TRIO_VERSION = 0.32.0 +PYTHON_TRIO_VERSION = 0.33.0 PYTHON_TRIO_SOURCE = trio-$(PYTHON_TRIO_VERSION).tar.gz -PYTHON_TRIO_SITE = https://files.pythonhosted.org/packages/d8/ce/0041ddd9160aac0031bcf5ab786c7640d795c797e67c438e15cfedf815c8 +PYTHON_TRIO_SITE = https://files.pythonhosted.org/packages/52/b6/c744031c6f89b18b3f5f4f7338603ab381d740a7f45938c4607b2302481f PYTHON_TRIO_SETUP_TYPE = setuptools PYTHON_TRIO_LICENSE = Apache-2.0 or MIT PYTHON_TRIO_LICENSE_FILES = LICENSE LICENSE.APACHE2 LICENSE.MIT From 9faac374c740e2dc1df32b47303a2e05ea7f5592 Mon Sep 17 00:00:00 2001 From: James Hilliard Date: Wed, 4 Mar 2026 10:51:51 -0700 Subject: [PATCH 6/7] package/python-cryptography: security bump to version 46.0.5 For change log since version 46.0.3, see: https://cryptography.io/en/46.0.5/changelog/ Fixes: https://www.cve.org/CVERecord?id=CVE-2026-26007 Signed-off-by: James Hilliard [Julien: - mark commit as a security bump - add link to changelog and cve ] Signed-off-by: Julien Olivain --- package/python-cryptography/python-cryptography.hash | 2 +- package/python-cryptography/python-cryptography.mk | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/python-cryptography/python-cryptography.hash b/package/python-cryptography/python-cryptography.hash index 1ca864d99506..25d987a32130 100644 --- a/package/python-cryptography/python-cryptography.hash +++ b/package/python-cryptography/python-cryptography.hash @@ -1,5 +1,5 @@ # Locally calculated after vendoring -sha256 983924b55a7bf04cca9e329ca46310602a42c0bbd0b9e77795f85c1b50691f97 python-cryptography-46.0.3-cargo4.tar.gz +sha256 18ecafb2c1f2de6d02d1b848f0f80736f0f93e8708afaf3df3064e8722077291 python-cryptography-46.0.5-cargo4.tar.gz # Locally computed sha256 checksums sha256 3e0c7c091a948b82533ba98fd7cbb40432d6f1a9acbf85f5922d2f99a93ae6bb LICENSE sha256 aac73b3148f6d1d7111dbca32099f68d26c644c6813ae1e4f05f6579aa2663fe LICENSE.APACHE diff --git a/package/python-cryptography/python-cryptography.mk b/package/python-cryptography/python-cryptography.mk index f2da36b08a6d..0747394fc6fa 100644 --- a/package/python-cryptography/python-cryptography.mk +++ b/package/python-cryptography/python-cryptography.mk @@ -4,9 +4,9 @@ # ################################################################################ -PYTHON_CRYPTOGRAPHY_VERSION = 46.0.3 +PYTHON_CRYPTOGRAPHY_VERSION = 46.0.5 PYTHON_CRYPTOGRAPHY_SOURCE_PYPI = cryptography-$(PYTHON_CRYPTOGRAPHY_VERSION).tar.gz -PYTHON_CRYPTOGRAPHY_SITE_PYPI = https://files.pythonhosted.org/packages/9f/33/c00162f49c0e2fe8064a62cb92b93e50c74a72bc370ab92f86112b33ff62 +PYTHON_CRYPTOGRAPHY_SITE_PYPI = https://files.pythonhosted.org/packages/60/04/ee2a9e8542e4fa2773b81771ff8349ff19cdd56b7258a0cc442639052edb PYTHON_CRYPTOGRAPHY_SITE = $(PYTHON_CRYPTOGRAPHY_SITE_PYPI)/$(PYTHON_CRYPTOGRAPHY_SOURCE_PYPI)?buildroot-path=filename PYTHON_CRYPTOGRAPHY_SETUP_TYPE = maturin PYTHON_CRYPTOGRAPHY_LICENSE = Apache-2.0 or BSD-3-Clause From d7e8b0d2375ae70605e02426ab3d9ed9b10b82cb Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Fri, 6 Mar 2026 23:33:28 +0100 Subject: [PATCH 7/7] package/libid3tag: needs host-gperf Buildroot commit 0ed1707ba559103f0aa298d40b5017b6bad0394c bumped the package to 0.16.4 which re-added the dependency to host-gperf: https://codeberg.org/tenacityteam/libid3tag/commit/2d7e73eb9f580b2258e434e0a8d63c69687ff5ef Fixes: https://autobuild.buildroot.net/results/133/133adafe89bc2b7df28dcb10eb30c19272100670/ Signed-off-by: Bernd Kuhls Signed-off-by: Julien Olivain --- package/libid3tag/libid3tag.mk | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package/libid3tag/libid3tag.mk b/package/libid3tag/libid3tag.mk index e310f50b7dd8..be6f629c868f 100644 --- a/package/libid3tag/libid3tag.mk +++ b/package/libid3tag/libid3tag.mk @@ -10,6 +10,6 @@ LIBID3TAG_SITE = https://codeberg.org/tenacityteam/libid3tag/releases/download/$ LIBID3TAG_LICENSE = GPL-2.0+ LIBID3TAG_LICENSE_FILES = COPYING COPYRIGHT LIBID3TAG_INSTALL_STAGING = YES -LIBID3TAG_DEPENDENCIES = zlib +LIBID3TAG_DEPENDENCIES = host-gperf zlib $(eval $(cmake-package))