diff mbox series

[AUH] python3-pdm: upgrading to 2.29.4 SUCCEEDED

Message ID 010101a17bdfeaef-fa4c1a98-97ab-40de-9b15-01850821a0bd-000000@us-west-2.amazonses.com
State New
Headers show
Series [AUH] python3-pdm: upgrading to 2.29.4 SUCCEEDED | expand

Commit Message

auh@yoctoproject.org Oct. 27, 2026, 5:40 a.m. UTC
Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *python3-pdm* to *2.29.4* has Succeeded.

Next steps:
    - apply the patch: git am 0001-python3-pdm-upgrade-2.29.2-2.29.4.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From 9b7492ab240334e4aa7065a383a66261fd801392 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Tue, 27 Oct 2026 05:34:26 +0000
Subject: [PATCH] python3-pdm: upgrade 2.29.2 -> 2.29.4

## Release v2.29.4 (2026-10-27)
### Features & Improvements

- Allow specifying `lock.format` in `pyproject.toml` via the `[tool.pdm.lock]`
  table. ([#3958]( ))

### Bug Fixes

- Import a requirements file that starts with a UTF-8 BOM, which failed with a
  `RequirementError`. ([#3937]( ))
- Treat a `Pipfile` version without an operator, such as `requests = "2.31.0"`,
  as an exact `==` pin when importing, like pipenv does, instead of failing with
  an invalid specifier error. ([#3939]( ))
- Preserve Poetry include entries targeting both source and wheel distributions
  when importing a project. ([#3941]( ))
- Preserve version and description when importing Flit projects with a `src/`
  layout or an annotated `__version__`. ([#3942]( ))
- Require `certifi>=2026.10.19`, which removes the `emSign ECC Root CA - G3`
  root whose eMudhra intermediates had their private keys compromised. ([#3944](
  ))
- `pdm outdated` no longer lists a package whose installed version is newer than
  the latest one found on the index, such as an installed pre-release or local
  build. ([#3945]( ))
- Fix `pdm lock --check` reporting an outdated lockfile when a group is declared
  in both `[dependency-groups]` and `[tool.pdm.dev-dependencies]`. ([#3947]( ))
- Show the license from `License-Expression` (PEP 639) in `pdm show` and `pdm
  list --fields licenses`. ([#3948]( ))
- Stop `pdm lock` from excluding packages from a lock target when another target
  shares its OS and architecture, e.g. manylinux and musllinux. ([#3950]( ))
- Fix a crash when a `python_version` marker compares against a wildcard version
  such as `python_version == "3.*"`. ([#3951]( ))
- Send `License-Expression` and `License-File` with the upload in `pdm publish`,
  so PyPI shows the license of PEP 639 packages. ([#3952]( ))
- Preserve the subdirectory fragment in source archive requirements when
  resolving dependencies and serializing requirement URLs. ([#3954]( ))
- Preserve archive hashes when reading pylock.toml so they remain available for
  exports. ([#3956]( ))
- Fix detection of responses served from the HTTP cache, so cached downloads and
  index pages are reported as cached again. ([#3961]( ))

### Dependencies

- Install the download dependencies of pbs-installer so Python installation
  works with its latest releases. ([#3959]( ))
- Upgrade `unearth` to `>=0.19` and migrate the HTTP client from `httpx` to
  `httpx2`. `pdm.models.session.PDMPyPIClient` and the transports in
  `pdm.pytest` are now built on `httpx2`, so plugins interacting with them
  should import `httpx2` instead of `httpx`. ([#3962]( ))

## Release v2.29.3 (2026-10-19)
### Features & Improvements

- Add the `--venv` option to `pdm outdated`, like the other commands that read
  the installed packages. ([#3904]( ))

### Bug Fixes

- Fix isolated PEP 517 builds skipping packages that are only visible via the
  host venv's `--system-site-packages`. ([#3895]( ))
- Fix `pdm import` of Poetry projects dropping optional dependencies whose
  extras entry is spelled differently, and importing optional dependencies with
  multiple constraints as required ones. ([#3899]( ))
- Keep the plain requirement in `pdm export` when the same package is also
  locked with extras under a narrower marker, so it is no longer missing from
  `requirements.txt` on the other platforms. ([#3900]( ))
- Fix `python_version <= "X.Y"` markers excluding the patch releases of `X.Y`,
  so `pdm install` skipped such dependencies. ([#3902]( ))
- Fix environment variables set by one task of a composite script, via `env` or
  `env_file`, leaking into the tasks that run after it. ([#3903]( ))
- Convert flit's comma-separated `keywords` and obsolete `dev-requires` into
  valid PEP 621 fields when importing a flit project. ([#3907]( ))
- Import custom Pipfile package categories, such as `[docs]`, as dependency
  groups instead of dropping them. ([#3909]( ))
- Keep editable requirements in `[tool.pdm.dev-dependencies]` on `pdm import`,
  so the written `[dependency-groups]` table stays valid per PEP 735. ([#3910](
  ))
- Keep Poetry's `develop = true` as an editable requirement when importing
  dependency groups. ([#3913]( ))
- Fix `pdm import` of the project's own Poetry `pyproject.toml` writing each
  dependency group to both `[tool.pdm.dev-dependencies]` and `[dependency-
  groups]`. ([#3915]( ))
- Import Pipfile packages declared with a `file` URL, such as `{file =
  "https://..."}`, as URL requirements instead of dropping the URL. ([#3918]( ))
- Preserve Poetry platform restrictions as environment markers when importing
  dependencies. ([#3920]( ))
- Read an `exclude-newer` timestamp without a UTC offset as UTC, so `pdm lock`
  no longer fails with a `TypeError` comparing naive and aware datetimes.
  ([#3922]( ))
- Do not write empty dependency groups, such as `dev = []` from an empty `[dev-
  packages]` table, when importing from another format. ([#3925]( ))
- Strip every leading and trailing `.`, `_` and `-` when `pdm

[Changelog truncated as it exceeds 5000 characters;
the full changelog can be found in an attachment to the AUH email]
---
 .../python/{python3-pdm_2.29.2.bb => python3-pdm_2.29.4.bb}     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta/recipes-devtools/python/{python3-pdm_2.29.2.bb => python3-pdm_2.29.4.bb} (80%)
diff mbox series

Patch

diff --git a/meta/recipes-devtools/python/python3-pdm_2.29.2.bb b/meta/recipes-devtools/python/python3-pdm_2.29.4.bb
similarity index 80%
rename from meta/recipes-devtools/python/python3-pdm_2.29.2.bb
rename to meta/recipes-devtools/python/python3-pdm_2.29.4.bb
index 83e9508612..2a2c6d4c82 100644
--- a/meta/recipes-devtools/python/python3-pdm_2.29.2.bb
+++ b/meta/recipes-devtools/python/python3-pdm_2.29.4.bb
@@ -4,7 +4,7 @@  LICENSE = "MIT"
 SECTION = "devel/python"
 LIC_FILES_CHKSUM = "file://LICENSE;md5=2eb31a2cc1a758c34b499f287dd04ef2"
 
-SRC_URI[sha256sum] = "bad9705e9482e7d877a53380ff25273b01e9c1d313ee6ce7b215a6562a9d8bdd"
+SRC_URI[sha256sum] = "48d013ba869b85538fea268107cd7a2c18fd91a6abf785fa4d7ed5951808582d"
 
 inherit pypi python_pdm