@@ -1,4 +1,4 @@
-From c677aa7a80fd551abb391a8f6abd28dc9f5c43a2 Mon Sep 17 00:00:00 2001
+From 2afdc29c60812d16708041c3c48ebf8674a5d16f Mon Sep 17 00:00:00 2001
From: Leon Anavi <leon.anavi@konsulko.com>
Date: Mon, 20 Jul 2026 15:52:32 +0300
Subject: [PATCH] Skip -march guessing for external cross toolchains
@@ -16,7 +16,7 @@ Signed-off-by: Leon Anavi <leon.anavi@konsulko.com>
1 file changed, 33 insertions(+), 3 deletions(-)
diff --git a/src/autobahn/nvx/_compile_args.py b/src/autobahn/nvx/_compile_args.py
-index 2a35ab31..173e5fd4 100644
+index 2a35ab3..173e5fd 100644
--- a/src/autobahn/nvx/_compile_args.py
+++ b/src/autobahn/nvx/_compile_args.py
@@ -81,6 +81,10 @@ CIBUILDWHEEL : str, optional
@@ -83,6 +83,3 @@ index 2a35ab31..173e5fd4 100644
def _get_target_machine():
"""
Return the *target* machine architecture for the build.
-2.43.0
-
similarity index 87%
rename from meta-python/recipes-devtools/python/python3-autobahn_26.7.1.bb
rename to meta-python/recipes-devtools/python/python3-autobahn_26.10.1.bb
@@ -5,7 +5,7 @@ LIC_FILES_CHKSUM = "file://LICENSE;md5=49165a577911c4178e915dc26e2802a3"
SRC_URI += "file://0001-Skip-march-guessing-for-external-cross-toolchains.patch"
-SRC_URI[sha256sum] = "c6949a2c6eb95fb1c218837dbda0a59abbbebafb8b11098551c01a7061dfd245"
+SRC_URI[sha256sum] = "0acc00895d4d3b06b55e4c945592d426033062c989ca2910749777a855faa27a"
CVE_PRODUCT = "autobahn"
Upgrade to release 26.10.1: General - Load the vendored FlatBuffers runtime only when a FlatBuffers message is first built or parsed, instead of on every import autobahn. The runtime imports numpy whenever numpy is installed, so up to 26.7.1 every process importing autobahn also loaded numpy, including WebSocket-only users such as Django Channels applications served by Daphne. Every autobahn import now needs about 13-17 MB less memory on CPython and 18-24 MB less on PyPy, and none loads numpy. A new documentation page (docs/memory-footprint.rst, just memory-footprint) shows the import memory footprint per release on CPython and PyPy. Wheels - Publish native Windows ARM64 (win_arm64) wheels with NVX for CPython 3.11-3.14, built on GitHub’s windows-11-arm runners (PyPy publishes no Windows ARM64 interpreter); thanks to @ndabas. cryptography currently publishes no win_arm64 wheel, so the build compiles it against an OpenSSL from vcpkg. - Build cryptography against an OpenSSL from vcpkg on Windows x86_64 too: cryptography 50.0.2 publishes its Windows PyPy wheels for PyPy 8 (pp80) only, and the pypy311 wheel build uses PyPy 7.3 (pp73), so pip builds it from source there. WebSocket - Make all four per-message compression extensions (permessage-deflate, -bzip2, -brotli, -snappy) enforce the decompression budget the same way: decompression stops near the remaining maxMessagePayloadSize budget instead of decompressing a whole frame first, and “over budget” as well as “budget already used up” raise PayloadExceededError. brotli now bounds its output with Decompressor.process(output_buffer_limit=...), snappy is decompressed one framing chunk at a time, and deflate no longer lets one octet through once the budget is used up. - Add autobahn.exception.PayloadCorruptError: every compression extension now raises it for input it cannot decompress (corrupt, truncated, or not the extension’s format), instead of the library’s own exception (zlib.error, OSError, brotli.error, …), and snappy no longer accepts such input silently. The protocol fails the connection with close code 1007 (invalid frame payload data), the same for every extension and on both Twisted and asyncio. - Fix permessage-brotli failing on the second message of a connection when context takeover was negotiated (the default): the compressor and decompressor were reused after their brotli stream had finished. Each message is now a new brotli stream, which is the wire format brotli used for the first message already, and for no context takeover. - Fix an asyncio WebSocket connection being left open, but no longer serviced, when an exception escaped the processing of received data: the connection is now dropped, as on Twisted. - Add a documentation page on WebSocket compression (docs/websocket/compression.rst): for each of the four extensions, which Python package and which compression library (and bundled version) it uses on CPython and on PyPy, plus context takeover, decompression limits and the handling of invalid data. The old, unpublished page under docs/work/ did not cover permessage-brotli Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> --- ...Skip-march-guessing-for-external-cross-toolchains.patch | 7 ++----- ...hon3-autobahn_26.7.1.bb => python3-autobahn_26.10.1.bb} | 2 +- 2 files changed, 3 insertions(+), 6 deletions(-) rename meta-python/recipes-devtools/python/{python3-autobahn_26.7.1.bb => python3-autobahn_26.10.1.bb} (87%)