py-tenacity: update to 9.2.1.
9.2.1
9.2.0 was tagged but never reached PyPI: the upload rejected its
package description (#714). 9.2.1 is the first release on PyPI with
everything in 9.2.0, plus the changes below.
What's Changed
chore(mypy): drop vestigial tornado ignore_missing_imports override by @jd in #676
fix: annotate wait_base.radd as taking the int seed from sum() by @jd in #677
chore(mypy): enable the strictness options strict leaves off by @jd in #678
refactor: drop always-true truthiness checks and enable truthy-bool by @jd in #679
refactor: declare BaseAction's REPR_FIELDS and NAME as ClassVar by @jd in #680
test: fix possibly-undefined and deprecated call sites by @jd in #681
refactor: mark overridden methods with @OverRide by @jd in #682
fix: restore support for falsy wait values and callable + strategy by @jd in #694
fix: read the tornado global live instead of an import-time snapshot by @jd in #696
[71 lines not shown]
[SPIR-V] Lower llvm.minimum/maximum instead of selecting fmin/fmax (#225667)
Fixes #225665. The SPIRV-LLVM-Translator equivalent is
KhronosGroup/SPIRV-LLVM-Translator#4032.
`G_FMINIMUM`/`G_FMAXIMUM` were legal and selected to `fmin`/`fmax`
(`NMin`/`NMax`), which neither propagate NaNs nor order signed zeros.
This expands `llvm.minimum`/`llvm.maximum` in `SPIRVPrepareFunctions`,
with the same code the translator uses in `SPIRVRegularizeLLVM`, so that
both produce the same OpenCL SPIR-V:
```llvm
%m = call float @llvm.minnum.f32(float %x, float %y)
; unless nsz: for non-NaN operands, the result has the sign of %x if that is
; set (maximum: clear), and the sign of %y otherwise
%xsign = call float @llvm.copysign.f32(float 1.0, float %x)
%xneg = fcmp olt float %xsign, 0.0
%s = select i1 %xneg, float %x, float %y
%m.s = call float @llvm.copysign.f32(float %m, float %s)
[41 lines not shown]
py-soupsieve: update to 3.0.3.
3.0.3
FIX: When matching with >, the BeautifulSoup object should not count as a parent.
FIX: Fix case where relative sibling matching under :has(~) would incorrectly match a sibling that came before
the target element.
3.0.2
FIX: Python versions less than 3.11.5 have broken possessive quantifiers, so require at least 3.11.5 for Soup
Sieve 3.0+. 3.0 and 3.0.1 will be yanked from PyPI to avoid having the 3.0 series installed on Python < 3.11.5
which will cause the library to be broken.
3.0.1
FIX: Fix regression related to [attribute!=value] where previously it would match if the attribute was not
present and recent changes broke that. Essentially, [attribute!=value] should be the same as
:not([attribute=value]).
[17 lines not shown]
py-pymdown-extensions: update to 12.2.
NEW: Add official support for Python 3.15.
NEW: Tilde, Caret: For backwards compatibility, disable CommonMark punctuation rules by default. If subscript or
superscript is disabled in the respective extension, CommonMark rules will be honored again. A new punctuation
rule has been added to force CommonMark rules. When done, people will need to be aware of punctuation when subscript
or superscript is enabled and escape any that violates CommonMark rules.
NEW: Highlight: Highlight now allows in the auto_title_map specifying the title as a simple string or a
dictionary containing the title and the title mode: either text or html, with text being the default. This
allows a title to be specified and treated as HTML when the mode is html.
NEW: SuperFences: Add new title_mode option for Pygments fenced blocks that allows a user to specify a title
to be treated as HTML via title_mode="html".
py-pillow_heif: update to 1.8.1.
## [1.8.1 - 2026-10-11]
This is the last version that supports `Python 3.10` and `Pillow` `11`/`12`: version `1.9.0` will require `Pillow 13`, which needs `Python 3.11` or newer.
### Changed
- `libheif` was updated from the `1.23.4` to `1.23.6` version. #491 #499
- Saving `;10`/`;12` data with sample values above its bit depth now raises `ValueError`. #499
- `libx265` was updated from the `4.2` to `4.3` version. #503
py-pdf: update to 6.20.0.
Security (SEC)
Limit work per stream (filter count, accumulated decoding work) (#4173) by @stefan6419846
New Features (ENH)
Add support for BrotliDecode filter (PDF 2.0) (#4168) by @stefan6419846
Performance Improvements (PI)
Parse an embedded CFF font program once per stream (#4164) by @marshalltech81
Parse numbers, indirect references, names and nulls faster (#4148) by @MartinThoma
Do not inherit PdfObject from a Protocol (#4149) by @MartinThoma
Speed up cloning direct objects (#4152) by @MartinThoma
Bug Fixes (BUG)
[17 lines not shown]
[AMDGPU] Fix out-of-bounds read of a trailing '%' in printf formats (#229088)
locateCStrings checked whether the character after a '%' was another '%'
without checking that there was one. A device printf whose format string
ends in '%' hit the StringRef index assertion in both hostcall and
buffered mode.
Assisted-by: Claude Opus 5.5
---------
Signed-off-by: Steffen Holst Larsen <sholstla at amd.com>
py-multidict: update to 7.1.0.
7.1.0 is a correctness and housekeeping release. It changes what
:meth:`~multidict.MultiDict.keys` yields, fixes a long list of crashes and
inconsistencies that Python code run in the middle of an operation could
trigger, stores the common all-:class:`str` multidicts in half the space, and
deprecates ``multidict.upstr``.
interfaces: clear track6-interface as a precaution #11001
If we are not in idassoc6/track6 mode some components will still
look at track6-interface so make sure to remove this at least.
interfaces.php clears the previous settings very consistently,
but that's difficult to do in MVC without adding more logic so
eventually the backend should be fixed to live with the new world
order.
(cherry picked from commit 3c87c8513b58c84c33fd375b2bf5ed95e2b7e470)
firewall: Revert parts of b45e2cd as most users would predict a cloned rule to appear adjecent to the original rule (#11007)
(cherry picked from commit ffac004867b0de04c93a1eb769fd2f6910dca84f)
[mlir][x86] Bail out on AMX accumulation without result write (#231144)
Rejects the AMX contraction lowering of zero initialized reduction loops
whose results are not written to memory.
Such cases crashed the lowering instead of being left unchanged.
Assisted-by: Claude
py-google-auth: update to 2.61.0.
2.61.0 (2026-10-07)
Features
auth: support bound access and ID tokens for GKE (#18594) (9f5fd7b)
2.60.0 (2026-10-02)
Features
auth: Support sync credentials in AsyncAuthorizedSession (#18542) (3799568)
