Fix CVE-2026-44431 and CVE-2026-44432.
Full release notes:
https://github.com/urllib3/urllib3/releases/tag/2.7.0
- Drop 0001-relax-setuptools-scm-version-constraint.patch since
upstream changed the setuptools-scm constraint to >=8,<11.
Signed-off-by: Wei-Ting Yang <redacted>
include $(TOPDIR)/rules.mk
PKG_NAME:=python-urllib3
-PKG_VERSION:=2.6.3
-PKG_RELEASE:=2
+PKG_VERSION:=2.7.0
+PKG_RELEASE:=1
PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
PKG_LICENSE:=MIT
PKG_CPE_ID:=cpe:/a:python:urllib3
PYPI_NAME:=urllib3
-PKG_HASH:=1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed
+PKG_HASH:=231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c
PKG_BUILD_DEPENDS:= \
python-hatch-vcs/host \
+++ /dev/null
---- a/pyproject.toml
-+++ b/pyproject.toml
-@@ -1,7 +1,7 @@
- # This file is protected via CODEOWNERS
-
- [build-system]
--requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8,<10"]
-+requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8"]
- build-backend = "hatchling.build"
-
- [project]