Skip to content

[pull] master from openwrt:master#636

Merged
pull[bot] merged 13 commits intoliudf0716:masterfrom
openwrt:master
Apr 5, 2026
Merged

[pull] master from openwrt:master#636
pull[bot] merged 13 commits intoliudf0716:masterfrom
openwrt:master

Conversation

@pull
Copy link
Copy Markdown

@pull pull bot commented Apr 5, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

commodo and others added 13 commits April 5, 2026 15:03
When Python3 was updated via commit 97a92f2 , distutils was
disappeared from Python3 and moved to setuptools.
So that patch should have moved here as well.

This should fix all packages which still use the 'build_ext'
module from setuptools.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Needed by python-cryptography 46.x, which switched its build backend
from setuptools-rust to maturin (requires maturin >= 1.9.4).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Required by python-maturin as a build dependency (maturin >= 1.12.6
requires setuptools-rust >= 1.11.0).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Starting with 46.x, cryptography switched its build backend from
setuptools-rust to maturin. Update PKG_BUILD_DEPENDS accordingly:
replace python-setuptools-rust/host with python-maturin/host and
python-setuptools/host (setuptools is still required by cffi).

Drop 001-Update-ouroboros.patch: the ouroboros crate is no longer a
dependency in 46.x, so the patch (which bumped it from 0.15 to 0.18
to fix RUSTSEC-2023-0042) no longer applies.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
The 0001-distutils-use-python-sysroot.patch was written against an
older setuptools where the build_ext LIBDIR yield had less indentation.
In 82.0.1, a z/OS platform check wrapped the code adding an extra
indentation level. Regenerate the patch against the actual 82.0.1 source.

Signed-off-by: Alexandru Ardelean <alex@mesatop.com>
Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changelog: https://github.com/python-poetry/poetry-core/releases/tag/2.3.2

Changes include:
- Fix handling of PEP 440 post-releases in version constraints
- Minor bug fixes and internal improvements

Add test.sh to validate basic version parsing and constraint evaluation.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
This is a security release.
Notable Changes
* (CVE-2026-21637) wrap SNICallback invocation in try/catch (Matteo Collina) - High
* (CVE-2026-21710) use null prototype for headersDistinct/trailersDistinct (Matteo Collina) - High
* (CVE-2026-21713) use timing-safe comparison in Web Cryptography HMAC (Filip Skokan) - Medium
* (CVE-2026-21714) handle NGHTTP2_ERR_FLOW_CONTROL error code (RafaelGSS) - Medium
* (CVE-2026-21717) test array index hash collision (Joyee Cheung) - Medium
* (CVE-2026-21715) add permission check to realpath.native (RafaelGSS) - Low
* (CVE-2026-21716) include permission check on lib/fs/promises (RafaelGSS) - Low

Signed-off-by: Hirokazu MORIKAWA <morikw2@gmail.com>
Current description is getting
cut off and is formatted incorrectly
in LuCI when viewing packages.
Rewrote description to shorten,
correct and provide a more
concise description that will
work in LuCI.

Signed-off-by: Joshua Criss <owlsy@outlook.com.au>
Changelog: https://github.com/pallets/click/releases/tag/8.3.2

Minor bug fix release.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changelog: https://github.com/sqlalchemy/mako/blob/main/doc/changelog.rst

Maintenance release with bug fixes since 1.3.5.
Add PYPI_SOURCE_NAME to use lowercase filename (mako-1.3.10.tar.gz).

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changelog: https://github.com/PyO3/setuptools-rust/releases/tag/v1.12.1

Patch release. Add test.sh to verify RustExtension import.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changelog: https://github.com/pypa/setuptools-scm/blob/main/CHANGELOG.rst

Patch release with minor bug fixes.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
Changelog: https://docs.sqlalchemy.org/en/20/changelog/changelog_20.html

Patch release (resets PKG_RELEASE to 1).
Add test.sh to verify ORM and core SQL functionality.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
@pull pull bot locked and limited conversation to collaborators Apr 5, 2026
@pull pull bot added the ⤵️ pull label Apr 5, 2026
@pull pull bot merged commit d090b03 into liudf0716:master Apr 5, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants