py-uv py-uv-build: updated to 0.13.6
0.13.6
Enhancements
Accept an empty UV_RUN_RECURSION_DEPTH as zero and report invalid values consistently
Explain how to add project metadata when uv init finds a pyproject.toml without a [project] table
Python
Add CPython 3.11.18, 3.12.16, 3.13.18, 3.14.10, and 3.15.2
Preview features
Detect NVIDIA GPU capabilities when selecting compatible wheel variants with wheel-variants
Nest each module's owners in an object in uv workspace metadata output
Report the unsupported properties required by an incompatible wheel variant
[23 lines not shown]
py-ruff: updated to 0.17.3
0.17.3
Preview features
[suspicious] Add shared-clock-mock
Bug fixes
[pyupgrade] Avoid incorrect conversions to f-strings (UP032)
Performance
Buffer stdout in ruff format
Specialize ASCII identifier lexing
Speed up identifier and keyword lexing
Documentation
[2 lines not shown]
py-pyrate-limiter: updated to 4.5.1
4.5.1
Bug fixes only. One behaviour change to note: a decorated call that the limiter
can never admit now raises instead of running (see the first entry).
Fixed
- **`as_decorator` ran the wrapped function even when denied.** Both the sync
and async wrappers discarded the result of `try_acquire()` and called the
function unconditionally. With the default `blocking=True, timeout=-1` that
result is only `False` when the weight can never be admitted under the
configured rates (e.g. `weight=5` on `Rate(2, Duration.SECOND)`), so the
limiter's verdict was silently bypassed. Such calls now raise `RuntimeError`.
- **`Limiter.close()` never closed its buckets.** `BucketFactory.close()` read
the bucket list off the leaker after tearing the leaker down, so it always
iterated an empty list: SQLite connections and Postgres connection pools
stayed open. It now snapshots the buckets first. `SingleBucketFactory` also
closes its bucket when no leak was ever scheduled; factories that hold buckets
[21 lines not shown]
py-poetry-dynamic-versioning: updated to 1.10.1
1.10.1
Fixed:
* `0.1.2a3` would result in `__version_tuple__ = (0, 1, "2a3")`,
rather than the expected `__version_tuple__ = (0, 1, 2, "a3")`.
keepassxc: update to 2.8.0.
New Features
Add remote database synchronization and import using external tools [#7222, #10896, #11271]
Allow configuring keyboard shortcuts [#9643]
SSH Agent: Add support for generating RSA, ECDSA, and Ed25519 keys [#7215]
Linux: Add Wayland Auto-Type support using XDG Desktop Portals [#13359, #13449, #13579, #13770, #13810]
Linux: Add Quick Unlock using Polkit (adds a UUID to public metadata, marking database as modified on first launch) [#8983]
Linux Add AArch64 AppImage [#13816]
macOS: Allow Quick Unlock using the device password when Touch ID is unavailable [#11410]
Windows: Allow administrators to enforce certain user settings via global Group Policy overrides [#11223]
Windows: Add native Arm64 builds [#13678, #13727]
Major Changes
Migrate to Qt 6 [#11651, #7783, #13456, #13473, #13684, #13784]
Linux: Store application state in XDG_STATE_HOME instead of XDG_CACHE_HOME [#9755]
Build: Bundle build features under a single KPXC_MINIMAL CMake option [#11003]
[60 lines not shown]
swayidle: update to 1.9.1
swayidle v1.9.1
Brian Farris (1):
Drain the sd-bus queue in the check pass
Erik Reider (1):
Fix idle_notifier_v1 interface version
Kenny Levinsen (1):
Use bright black rather than black for LOG_DEBUG
fooyin: update to 0.14.1.
Provided by Gourd in wip.
0.14.1
Improvements
Interface
Add configurable column header fonts, including a separate playlist header font (#1788)
Add configurable Volume Control slider step sizes (#1802)
Improve standalone Library Tree window appearance
Improve Library Tree control bar padding
Playlist
Add the Configure action to the full track context menus (#1804)
Plugins
Add support for removing and reinstalling plugins in user plugin directories (#1805)
Support upgrades from loose plugin files and show pending installations
Report specific plugin installation failures
[32 lines not shown]
py-genshi: updated to 0.7.12
0.7.12
* Add support for Python 3.15 and PyPy 3.12
* Fix reference leak in Markup.__mod__ for mapping arguments
* Drop processing instructions (PI) and CDATA sections in HTMLSanitizer
* Track nesting depth when removing unsafe elements in HTMLSanitizer
* Update CI test matrix to add Python 3.15 release and PyPy 3.12
* Several RTD build fixes
* Update versions of GitHub actions.
py-curl: updated to 7.49.0
PycURL 7.49.0 - 2026-10-26
This release adds SSH_HOSTKEYFUNCTION and several missing libcurl SSH
constants, and accepts CurlShare subclasses in setopt. It fixes a
use-after-free when a mime part's content is replaced and makes object
teardown exception-safe by moving cleanup into tp_finalize. The build
system has also been cleaned up: custom setup.py command line options have
been removed in favor of their environment variable equivalents, and wheels
no longer install documentation and examples.
cargo-nextest: updated to 0.9.150
0.9.150
Security
Fixed GHSA-vc25-qg58-w57c: with the experimental run recording feature enabled, cargo nextest run --rerun with a malicious portable recording could run arbitrary code during the build.
Reruns inherit the original run's build scope (defined as the combination of package, target, and feature selection options). Nextest versions 0.9.125 through 0.9.149 recorded the build scope as raw Cargo arguments, and passed them to Cargo unchanged. A crafted recording could therefore add any Cargo option, such as a --config that sets build.rustc-wrapper. That code ran as the invoking user during the build, before any tests started, even with a warm build cache.
Nextest now records the build scope as structured data, and passes each value to Cargo joined to its flag (for example, --package=<value>), so a recording can no longer add other Cargo options.
To ensure that everyone working on your repository uses a fixed version, set the minimum required version in .config/nextest.toml:
nextest-version = "0.9.150"
Added
cargo nextest archive has a new --zstd-long option, which enables Zstandard long-distance matching with a 128 MiB window. For large archives, this can significantly improve the compression ratio at lower compression levels. Extracting these archives needs no extra options.
[15 lines not shown]
