python-urllib3: update to 2.7.0
authorWei-Ting Yang <redacted>
Mon, 11 May 2026 04:49:44 +0000 (12:49 +0800)
committerAlexandru Ardelean <redacted>
Tue, 19 May 2026 05:49:41 +0000 (08:49 +0300)
Fix CVE-2026-44431 and CVE-2026-44432.

Full release notes:
https://github.com/urllib3/urllib3/releases/tag/2.7.0

- Drop 0001-relax-setuptools-scm-version-constraint.patch since
  upstream changed the setuptools-scm constraint to >=8,<11.

Signed-off-by: Wei-Ting Yang <redacted>
lang/python/python-urllib3/Makefile
lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch [deleted file]

index 25d92fe5c438e26e7d531397c7a2d62bdb6b161e..9acc9fc71eefc95873cc0f96730fb83bffd41eb0 100644 (file)
@@ -8,8 +8,8 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=python-urllib3
-PKG_VERSION:=2.6.3
-PKG_RELEASE:=2
+PKG_VERSION:=2.7.0
+PKG_RELEASE:=1
 
 PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
 PKG_LICENSE:=MIT
@@ -17,7 +17,7 @@ PKG_LICENSE_FILES:=LICENSE.txt
 PKG_CPE_ID:=cpe:/a:python:urllib3
 
 PYPI_NAME:=urllib3
-PKG_HASH:=1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed
+PKG_HASH:=231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c
 
 PKG_BUILD_DEPENDS:= \
        python-hatch-vcs/host \
diff --git a/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch b/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch
deleted file mode 100644 (file)
index d3791ef..0000000
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/pyproject.toml
-+++ b/pyproject.toml
-@@ -1,7 +1,7 @@
- # This file is protected via CODEOWNERS
- [build-system]
--requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8,<10"]
-+requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8"]
- build-backend = "hatchling.build"
- [project]
git clone https://git.99rst.org/PROJECT