py-google-auth-oauthlib: updated to 1.4.1
1.4.1
Bug Fixes
google-auth-oauthlib: prevent port re-use on windows
Documentation
handwritten: centralize CONTRIBUTING.rst pointers
py-websocket-client: updated to 1.9.2
1.9.2
- Fix race in `WebSocketApp.close()` when `run_forever()` thread clears the socket during the close handshake
1.9.1
- Add Python 3.14 support to setup config and CI (f2bc97a)
- Fix `close()` dropping close frame when reason is str (2f22e2e)
- Fix `close()` type annotation and docstring for timeout and reason (d69f730)
- Make `abort()` robust for sockets that cannot shutdown, same logic as `shutdown()` (1904e3d)
- Raise `WebSocketException` for redirects missing a `Location` header (97e34db)
- Raise when WebSocket connect redirect limit is exhausted (be0d38d)
- Raise `WebSocketException` for redirects to invalid targets (62ef6af)
- Fix unformatted ABNF validation error messages (0145b7b)
- Fix `validate_utf8()` crash on str input (4a8e6ed)
- Store `status_message` on `WebSocketBadStatusException` (368aeda)
- Raise `WebSocketException` for `check_hostname` with `CERT_NONE` (0232aca)
- Fix `handleDisconnect` type annotation: None default requires Optional (20f3712)
- Remove unreachable `not frame` check in `recv_data_frame()` (b684242)
[9 lines not shown]
py-coverage: updated to 7.16.0
7.16.0 — 2026-08-28
- When combining files, now path separator slashes will automatically be
converted to the local file system style. This makes it less necessary to
define ``[paths]`` configuration to combine data across operating systems.
Fixes `issue 2266`_.
- The :meth:`.Coverage.switch_context` method now returns the previous context.
- Fix: previously, a ``[paths]`` pattern would be replaced everywhere in a file
path when it was only meant to be replaced once, in the leading portion of
the path. This is now fixed, in `pull 2268`_.
- Fixes to validation of options and configuration settings:
- Negative precision settings now always cause useful error messages (`pull
2261`_).
[25 lines not shown]
py-cloudflare: updated to 5.6.0
5.6.0 (2026-07-22)
Breaking Changes
* **accounts:** The `create()` and `get()` methods have been removed from `client.accounts.subscriptions`. The `SubscriptionCreateParams` type is no longer available.
* **acm:** The `CertificateAuthority` type has been removed from `cloudflare.types.acm`.
* **certificate_authorities:** The `HostnameAssociation` type has been removed from `cloudflare.types.certificate_authorities`.
* **cloudforce_one:** The `indicator_types` sub-resource has been removed from `client.cloudforce_one.threat_events`. Use the new `client.cloudforce_one.threat_events.indicators.types` resource instead.
* **hyperdrive:** The pagination type for `client.hyperdrive.configs.list()` changed from `SyncSinglePage` to `SyncV4PagePaginationArray`. Code that relied on single-page iteration semantics may need adjustment.
* **load_balancers:** All methods on `client.load_balancers` now use a polymorphic `/{account_or_zone}/{account_or_zone_id}/load_balancers` endpoint pattern instead of the previous `/zones/{zone_id}/load_balancers`. Method signatures now accept either `account_id` or `zone_id`.
* **moq:** The `rotate()` method and `TokenRotateResponse` type have been removed from `client.moq.relays.tokens`. Use the new `create()`, `list()`, and `delete()` methods instead.
* **mtls_certificates:** The `MTLSCertificate` type has been replaced with `MTLSCertificateGetResponse`, `MTLSCertificateListResponse`, and `MTLSCertificateDeleteResponse`. The return types of `list()`, `delete()`, and `get()` have changed accordingly.
* **custom_certificates:** The `Status` type has been removed from `cloudflare.types.custom_certificates`.
* **ssl:** The `Host`, `Status`, and `ValidationMethod` types have been removed from `cloudflare.types.ssl`. The `hosts` parameter on `client.ssl.certificate_packs.create()` changed from `SequenceNotStr[Host]` to `SequenceNotStr[str]`.
* **zero_trust:** The `setup_flows` sub-resource has been removed from `client.zero_trust.casb.applications`. The `get()` method endpoint changed from `/accounts/{account_id}/one/applications/{slug}` to `/accounts/{account_id}/one/applications/{application_id}`.
Features
[9 lines not shown]
py-authlib: updated to 1.8.0
1.8.0
Prefer id_token_signed_response_alg client metadata to guess algs
fix: Catch InvalidKeyIdError in RFC 9068 JWTBearerTokenValidator
fix: make leeway configurable in JWTBearerTokenValidator
feat: add default jti claim to sign_jwt_bearer_assertion
fix(oauth): cast sub claim to string in JWTBearerTokenGenerator
Declare lower bounds for dependencies
feat(client): use httpx2 instead of httpx
Fix RFC7523 malformed claims handling
Fix httpx oauth1 binary form data
fix(starlette_client): remove default= keyword from config.get calls
Added client_id parameter to AssertionClient
fix(oauth): save device credential with authenticated client id
fix(oauth1): correct protocol name in InsecureTransportError description
fix(client): client can be flexible with jwt's header
fix(oidc): omit claims when the value is None
haproxy: updated to 3.4.4
3.4.4
- BUG/MEDIUM: proxy: fix crash on delete first backend
- BUG/MINOR: cli: use the current argument to parse the FD spec in "show fd"
- BUG/MINOR: cli: do not reject the "/<fd>" form of "show fd"
- BUG/MINOR: ech: propagate error from load_echkeys()
- BUG/MINOR: ech: reject an ECH store with no usable private key
- BUG/MEDIUM: counters: preserve shared.tg pointer on 'clear counters all'
- BUG/MEDIUM: filter: Disable auto-close on channel during TCP payload filtering
- BUG/MINOR: server: check strdup return value on server ID
- BUG/MINOR: proxy: fix default-server leak on post-parsing cleanup
- MINOR: proxy: implement unpublished backend keyword
- DOC: explain better that named defaults are preserved
- BUG/MINOR: proxy: release watcher in various commands on CLI abort
- REGTESTS: proxy: complete "del backend" test
- BUG/MEDIUM: hpack: encode long methods and schemes using the long form
- BUG/MINOR: stats-file: reject tgid 0 when preloading shm objects
- BUG/MINOR: hlua: use a local buffer to format the socket addresses
[72 lines not shown]
py-uv py-uv-build: updated to 0.12.9
0.12.9
Python
Add CPython 3.15.0rc2
Enhancements
Add --no-locked and --no-frozen to disable lock modes enabled by UV_LOCKED and UV_FROZEN for a single invocation
Report the exact command-line lock-mode flag in warnings and errors
Performance
Speed up cold wheel installs by extracting each streaming ZIP archive in a single blocking task and reusing buffers across files
Bug fixes
[5 lines not shown]
Remove the global __do_color_init, this is now obsolete. It was used
to force the terminal to be updated with the default colours because
the older colour code could not distinguish between default colours and
no colours. Now this is fixed so the forcing is no longer required.
sbcl: update to 2.6.8
* minor incompatible change: FILE-POSITION on composite streams
returns a more accurate result for CONCATENATED-STREAM, and NULL on
TWO-WAY-STREAM and ECHO-STREAM.
* platform support:
** improvements to code generation for the ARM64 backend.
** improved support for AVX512 instruction encoding and decoding.
* various enhancements to the SB-SIMD contributed module.
* bug fix: FILE-POSITION on a stream after reading input into a list
or generic sequence returns the correct result.
* bug fix: allow the manual to build on more platforms.
* bug fix: infinite loop in the compiler while attempting to remove
data moves.
* bug fix: debugger failed to handle (COMPLEX DOUBLE-FLOAT) entities
on the stack.
* bug fix: error reporting from STRING-TO-OCTETS reported using the
wrong string indices.
* optimization: the compiler performs assignment conversion in nearly
[12 lines not shown]
print/foliate: Update to 3.3.0
Changes since 2.6.4:
3.3.0
* Updated for GNOME 48
* Added support for mouse forward/backward buttons (#1474)
* Improved text wrapping in headings
* Improved default link style
3.2.1
* Fixed tables not displayed in FB2 books (#1445)
* Updated translations
3.2.0
* Revamped translation tool, which now remembers the last target
[198 lines not shown]
