[pull] master from buildroot:master#916
Merged
pull[bot] merged 95 commits intomir-one:masterfrom Mar 15, 2026
Merged
Conversation
https://github.com/pypa/hatch/blob/hatchling-v1.29.0/docs/history/hatchling.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/empicano/aiomqtt/blob/v2.5.1/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/aio-libs/aiorwlock/blob/v1.5.1/CHANGES.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/marshmallow-code/apispec/blob/6.10.0/CHANGELOG.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/aio-libs/async-lru/blob/v2.2.0/CHANGES.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/scott-griffiths/bitstring/blob/4.4.0/release_notes.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/boto/boto3/blob/1.42.68/CHANGELOG.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/boto/botocore/blob/1.42.68/CHANGELOG.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/jawah/charset_normalizer/blob/3.4.5/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/scrapy/cssselect/blob/v1.4.0/CHANGES "Switched the build system to ``hatchling``." Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/Kozea/cssselect2/releases/tag/0.9.0 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/Bluetooth-Devices/dbus-fast/releases/tag/v4.0.0 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://python-evdev.readthedocs.io/en/latest/changelog.html#feb-05-2025 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/fastapi/fastapi/blob/0.135.1/docs/en/docs/release-notes.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/tox-dev/filelock/blob/3.25.2/docs/changelog.rst Upstream switched license to MIT: tox-dev/filelock@4aac786 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/pallets/flask/blob/3.1.3/CHANGES.rst Fixes CVE-2026-27205: https://nvd.nist.gov/vuln/detail/CVE-2026-27205 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/fonttools/fonttools/blob/4.62.1/NEWS.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/googleapis/google-cloud-python/blob/main/packages/google-api-core/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/googleapis/google-cloud-python/blob/main/packages/google-auth/CHANGELOG.md 2.47.0 removed the dependency to cachetools: googleapis/google-auth-library-python@5c07e1c 2.48.0 added a dependency to cryptography: googleapis/google-auth-library-python@52558ae 2.49.1 removed the dependency to rsa: googleapis/google-cloud-python@e8927b9 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> [Julien: add BR2_PACKAGE_HOST_RUSTC_TARGET_ARCH_SUPPORTS dep in Config.in] Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/googleapis/google-cloud-python/blob/main/packages/googleapis-common-protos/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://greenlet.readthedocs.io/en/latest/changes.html Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/httplib2/httplib2/blob/v0.31.2/CHANGELOG Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/corenting/immutabledict/blob/v4.3.1/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/pR0Ps/iterable-io/blob/v1.0.1/CHANGELOG.md Updated license hash due to upstream typo fix: pR0Ps/iterable-io@b9e785c Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Upstream removed the old license file jmespath/jmespath.py@772c03a and added a new one jmespath/jmespath.py@5634c66 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> [Julien: remove LICENSE.txt entry in hash file] Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/jazzband/jsonmodels/blob/2.8.0/HISTORY.rst Upstream switched to hatch: jazzband/jsonmodels@1c4dab6 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/jquast/telnetlib3/blob/4.0.1/docs/history.rst Updated license hash due to upstream commit: jquast/telnetlib3@1af3eee Upstream switched to hatch: jquast/telnetlib3@c4b8488 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/Textualize/textual/blob/v8.1.1/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/msoulier/tftpy/blob/master/ChangeLog.md Upstream bumped the version without creating a version tag: msoulier/tftpy@fc93bae Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/CourtBouillon/tinyhtml5/blob/2.1.0/docs/changelog.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/hukkin/tomli/blob/2.4.0/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/python-poetry/tomlkit/blob/0.14.0/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/tornadoweb/tornado/blob/v6.5.5/docs/releases/v6.5.5.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/tortoise/tortoise-orm/blob/1.1.6/CHANGELOG.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://tqdm.github.io/releases/ Updated license hash due to copyright year bump: tqdm/tqdm@a69dac8 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/pypa/trove-classifiers/releases Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/agronholm/typeguard/blob/4.5.1/docs/versionhistory.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/psutil.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/python-dateutil.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/typeshed-internal/stub_uploader/blob/main/data/changelogs/setuptools.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/ultrajson/ultrajson/releases/tag/5.12.0 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/urwid/urwid/blob/3.0.5/docs/changelog.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/Kludex/uvicorn/blob/0.41.0/docs/release-notes.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/Kozea/WeasyPrint/blob/v68.1/docs/changelog.rst Version 68.0 fixes CVE-2025-68616. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/python-websockets/websockets/blob/16.0/docs/project/changelog.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/pallets/werkzeug/blob/3.1.6/CHANGES.rst Please note that the fixed CVEs CVE-2026-21860 & CVE-2026-27199 only relate to Windows. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/pypa/wheel/blob/0.46.3/docs/news.rst Version 0.46.2 fixes CVE-2026-24049: wheel Allows Arbitrary File Permission Modification via Path Traversal Fixes: https://www.cve.org/CVERecord?id=CVE-2026-24049 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> [Julien: mark the commit as "security" and add info in commit log] Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/evansd/whitenoise/blob/6.12.0/docs/changelog.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/martinblech/xmltodict/blob/v1.0.4/CHANGELOG.md Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/adrienverge/yamllint/blob/v1.38.0/CHANGELOG.rst Tarball hashes were computed by scanpypi. Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/aio-libs/yarl/blob/v1.23.0/CHANGES.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/zopefoundation/zope.interface/blob/8.2/CHANGES.rst Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
https://github.com/fonttools/py-zopfli/releases/tag/v0.4.1 Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )