net/openrsync: update to openrsync-0.20260730
Sync with upstream, pulling another year of commits.
Noteworthy changes:
* Many portability fixes (with specific regard to NetBSD)
* Various bug fixes.
* Several improvents merged from Apple.
Refer to the github history for more details.
py-nbclient: updated to 0.11.0
0.11.0
Maintenance and upkeep improvements
Minor cleanup and bump minimal versions.
Other merged PRs
no-numfocus funding + Zizmor
ignore parallel closing error
Remove out of date badges about Python version.
Ignore new warning from ipykernel about encryption
drop leftover ref. to async_generator
Replace @flaky.flaky decorate with pytest marker
py-nbformat: updated to 5.11.1
5.11.1
Merged PRs
- Try to skip publishing to NPM to be able to publish a patch version on PYPI
- disable pendingdeprecationWarnings for now
- Bump github/codeql-action from 4.37.3 to 4.37.5 in the actions group
- Clarify normalize guidance in the changelog
- fix steps to skip
py-pyspnego: updated to 0.12.2
0.12.2 - 2026-08-26
* Fix up NTLM single host data unpacking to be less strict making it compatible with newer Windows versions
* Use canoncial Kerberos client principal from `kinit` operation, this avoid issues around not being able to find TGT in cache during Kerberos authentication
py-pkginfo: updated to 1.13
1.13.0 (2026-08-29)
- Support 'metadata_version' == '2.5' (PEP 794).
- Add support for Python 3.14.
- Drop support for Python 3.9.
- Drop support for Python 3.8.
py-dulwich: updated to 1.2.14
1.2.14 2026-08-28
* Collapse consecutive `**` segments in wildmatch translation, matching
git's behavior and avoiding catastrophic regex backtracking on patterns
like `a/**/**/**/z` from untrusted repositories. (netliomax25-code)
1.2.13 2026-08-24
* Make concurrent ``Pack.get_raw`` calls thread-safe by synchronizing
``PackData``'s resolved-object offset cache.
(Bojan Zivanovic)
* Speed up cached `PackData.get_object_at` lookups by acquiring the
offset-cache lock directly instead of through a `with` statement.
(Bojan Zivanovic)
* Bound fetch negotiation the way C Git's ``MAX_IN_VAIN`` does: give up
[77 lines not shown]
resterm: Update to 1.5.1
Fixed
Failed streams keep their transcript
Stream failures keep their original cause
IPv6 redirects and limits
Headless API note
py-joserfc: updated to 1.7.5
1.7.5
- **JWK**: Ignore keys with unknown ``kty`` values when importing a key set.
- **JWE**: Add ``max_recipients`` to ``JWERegistry``.
py-pydantic*: update to 2.13.5
Fixes
Allow reuse of validators when plugins are set by @Viicos in #13535
Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624
Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629
Count validated model fields once in smart unions by @tamird in #13731
