py-django-mptt: updated to 0.21.0
0.21 (2026-10-27)
Fixed tree methods of proxy models with a filtering custom manager (e.g. get_queryset().filter(level=2)) only seeing the filtered rows: e.g. get_root() raised DoesNotExist, and inserting nodes through such a manager corrupted the tree. Tree operations now use an unfiltered tree manager bound to the proxy model, so they still return proxy instances.
TreeManager.db_manager() now passes the database on to the manager that proxy and multi-table inheritance models delegate tree operations to.
Tree writes (inserting, moving and deleting nodes, rebuild(), partial_rebuild(), build_tree_nodes()) now always see every row, even if the model's tree manager is a TreeManager subclass which filters get_queryset(). Previously, hidden nodes could lead to crashes or a corrupted tree, e.g. duplicate tree ids or child nodes left behind in the wrong tree. Positions for order_insertion_by now also take hidden siblings into account. Read methods such as get_children() still apply the filter.
py-fsspec: updated to 2026.9.0
2026.9.0
Enhancements
ia:// filesystem for files in Internet Archive items: an HTTPFileSystem reading from archive.org/download with credentials from ia configure's ia.ini
Allow instance-local memory stores with global_store=False while preserving normal instance caching and the default shared store
Add an adaptive readahead cache
Implement created and modified for SFTPFileSystem
Allow filesystem implementations to assign protocol per instance
Delegate sizes and cat_ranges from DirFileSystem to the wrapped filesystem
Delegate invalidate_cache, ukey and checksum from DirFileSystem to the wrapped filesystem
Support negative offsets in TarFileSystem.cat_file
Mirror readinto from the PyArrow stream onto ArrowFile
Allow simplecache files to be removed by age using their modification times
HTTP: retry transient failures (408/425/429/5xx, dropped connections, timeouts, truncated range bodies, a 416 inside the file) of cat_file, HTTPFile block reads and the size lookup behind open, controlled by the new retries, retry_wait, retry_statuses and retry_exceptions options
Fixes
[36 lines not shown]
py-breathe: updated to 5.1.0
Breathe v5.1.0
- Dropped support for Sphinx 6.2, 7.0 & 7.1 and added python 3.14
- Strip leading spaces when making initializer
- Fix duplicate constexpr qualifiers on constructors
- Handle C++11 extended friend declarations
- Keep template arguments in class template specialization names
py-pydyf: updated to 0.13.0
0.13.0
Dependencies:
* Python 3.15 is supported and tested
* Python 3.11+ is now needed, Python 3.10 is not supported anymore
New features:
* Add a new "name" function to safely create name objects
Bug fixes:
* Test both compressed and uncompressed PDF generation
py-time-machine: updated to 3.6.0
3.6.0 (2026-10-25)
Drop Python 3.10 support.
Extend the Migration CLI to migrate freeze_time() class decorators on pytest-style test classes to the pytest.mark.time_machine() marker. Previously, such decorators were left unchanged and reported, since time_machine.travel() only supports unittest.TestCase subclasses as a class decorator, but they can be migrated to the marker instead.
Extend the Migration CLI to migrate freeze_time() calls that pass the destination with the time_to_freeze keyword argument. The argument is made positional, or renamed to destination if it follows another kept keyword argument.
py-numba: updated to 0.68.1
0.68.1 (26 October 2026)
This is a patch release of Numba that fixes two performance regressions
(``np.sum`` and fancy indexing), aligns the accumulator dtypes of
reductions with NumPy, and fixes caching of functions
imported from a zip archive on Windows.
py-sphinx-automodapi: updated to 0.22.1
0.22.1 (2026-10-15)
- Fixed a bug to avoid problem from target object ``__dict__``
changing during iteration in ``generate_automodsumm_docs()``.
py-sphinx-autodoc-typehints: updated to 3.17.4
3.17.4 (2026-10-27)
Fixed
- Link each name in the type after an attribute, data or property name with the role its docstring field uses, so a
``type`` alias an inventory lists as data, such as ``numpy.typing.NDArray``, resolves through intersphinx
3.17.3 (2026-10-27)
Packaging
- Publish categorized GitHub Release notes with PyPI and version-comparison links
3.17.2 (2026-10-17)
[4 lines not shown]
py-aioquic: updated to 1.7.0
1.7.0
* Migrate clients to the server's preferred address, as :rfc:`9000` allows.
.. note::
If you drive :class:`~aioquic.quic.connection.QuicConnection` with your
own I/O, you must send each datagram to the address returned alongside
it by ``datagrams_to_send()``. That address may now differ from the one
passed to ``connect()``, so a connected UDP socket or a tunnel with a
single fixed destination no longer works.
* Add :meth:`~aioquic.quic.connection.QuicConnection.get_peer_address`, which
returns the address datagrams are currently sent to. It can change when
either endpoint migrates.
* Improve path validation and connection migration as :rfc:`9000` requires:
[58 lines not shown]
py-pylsqpack: updated to 1.0.0
1.0.0
* Adopt semantic versioning.
* Add :meth:`Decoder.cancel_stream` to cancel decoding for a reset or
abandoned stream.
* Grow the encoder's buffers on demand instead of capping them at 4 kB, so
that large header blocks (e.g. with large cookies) no longer fail to encode.
* Allocate the decoder's buffers using Python's memory allocator, making them
visible to :mod:`tracemalloc`.
* Update vendored `ls-qpack`_ from version 2.6.2 to 2.7.0, which brings:
* a fix for decoding header blocks when the encoder selects a dynamic table
capacity lower than the maximum,
* fixes for a use-after-free and a double-free,
* stricter validation of encoder and decoder stream instructions, header
lengths and Huffman padding.
grafana: update to 13.2.5.
Security
Security: Fix CVE-2026-100105
Security: Fix CVE-2026-103506
Security: Fix CVE-2026-88858
Security: Fix CVE-2026-88967
Features and enhancements
Git Sync: Ignore hidden paths in repository scans and diffs #135028, @ferruvich
Provisioning: Default save from a branch preview to the previewed branch #135174, @Clarity-89
Provisioning: Never replace the repository root folder during incremental sync #135463, @ferruvich
Bug fixes
Plugins: Don't report loaded plugins as not registered when a request times out #135665, @leventebalogh
Provisioning: Fix PR dashboard previews when served from a sub-path #135559, @gustaff-weldon
py-jupyter-builder: updated to 1.2.4
1.2.4
Enhancements made
- Add a `jupyterlab.rspackConfig` alias
Bugs fixed
- Fix UTF-8 decoding in captured build tests
- Fix TypeError when package.json omits dependencies field
- Fix \_resolve_core_path_for_jupyterlab_builder overwriting installed package.json
Maintenance and upkeep improvements
- Pass `GITHUB_TOKEN` to the minimum-versions and prerelease test jobs
- Fix flaky macOS CI tests by authenticating GitHub API calls
py-python-discovery: updated to 1.6.6
1.6.6
Bug fixes
Treat version specifiers with an item that cannot be parsed, such as >=3.x, >=3.12 <4 or >=3.12,foo, as literal executable paths instead of raising a bare AssertionError or ignoring the item during discovery
Accept relative interpreter paths that step up a directory, such as ../venv/bin/python, which were found and queried but never matched the spec
Match ~=X.Y compatible-release specifiers against later minor versions, as PEP 440 defines, instead of only the same minor; ~=3.10 now accepts 3.11 and newer 3.x
py-configargparse: updated to 1.9.0
1.9.0
Behavior changes
A false value for a flag now overrides lower-priority sources
Previously, setting a flag (an arg that takes no value, such as store_true, store_false, count or store_const) to false in an environment variable or a higher-priority config file added nothing to the command line, so a true for the same flag in a lower-priority config file still turned it on. Now the false value counts as setting the flag, and lower-priority config files no longer set it. For example, VERBOSE=false now wins over verbose = true in a config file. Args that take a value are unchanged.
A bare -- in a list value is now an error
A list value from a config file or environment variable, such as items = [a, --], used to put a bare -- on the command line, which ended option parsing and turned the user's own command-line options after it into positional args. It now fails with an error that names the key.
Fixes
Options after -- on the command line no longer block other sources
IniConfigParser.serialize() escapes %
Saved config files keep store_false and store_const values
[2 lines not shown]
