From: Wei-Ting Yang <redacted>
Date: Mon, 11 May 2026 04:49:44 +0000 (+0800)
Subject: python-urllib3: update to 2.7.0
X-Git-Url: http://git.99rst.org/?a=commitdiff_plain;h=c41f0fc54b9112c3b6d479e3fc6de9b0250ea01f;p=openwrt-packages.git

python-urllib3: update to 2.7.0

Fix CVE-2026-44431 and CVE-2026-44432.

Full release notes:
https://github.com/urllib3/urllib3/releases/tag/2.7.0

- Drop 0001-relax-setuptools-scm-version-constraint.patch since
  upstream changed the setuptools-scm constraint to >=8,<11.

Signed-off-by: Wei-Ting Yang <redacted>
---

diff --git a/lang/python/python-urllib3/Makefile b/lang/python/python-urllib3/Makefile
index 25d92fe5c..9acc9fc71 100644
--- a/lang/python/python-urllib3/Makefile
+++ b/lang/python/python-urllib3/Makefile
@@ -8,8 +8,8 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=python-urllib3
-PKG_VERSION:=2.6.3
-PKG_RELEASE:=2
+PKG_VERSION:=2.7.0
+PKG_RELEASE:=1
 
 PKG_MAINTAINER:=Josef Schlehofer <pepe.schlehofer@gmail.com>
 PKG_LICENSE:=MIT
@@ -17,7 +17,7 @@ PKG_LICENSE_FILES:=LICENSE.txt
 PKG_CPE_ID:=cpe:/a:python:urllib3
 
 PYPI_NAME:=urllib3
-PKG_HASH:=1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed
+PKG_HASH:=231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c
 
 PKG_BUILD_DEPENDS:= \
 	python-hatch-vcs/host \
diff --git a/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch b/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch
deleted file mode 100644
index d3791ef8c..000000000
--- a/lang/python/python-urllib3/patches/0001-relax-setuptools-scm-version-constraint.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/pyproject.toml
-+++ b/pyproject.toml
-@@ -1,7 +1,7 @@
- # This file is protected via CODEOWNERS
- 
- [build-system]
--requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8,<10"]
-+requires = ["hatchling>=1.27.0,<2", "hatch-vcs>=0.4.0,<0.6.0", "setuptools-scm>=8"]
- build-backend = "hatchling.build"
- 
- [project]