Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *python3-pdm* to *2.29.4* has Succeeded.
Next steps:
- apply the patch: git am 0001-python3-pdm-upgrade-2.29.2-2.29.4.patch
- check the changes to upstream patches and summarize them in the commit
message,
- compile an image that contains the package
- perform some basic sanity tests
- amend the patch and sign it off: git commit -s --reset-author --amend
- send it to the appropriate mailing list
Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.
Please review the attached files for further information and build/update
failures.
Any problem please file a bug at
https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler
Regards,
The Upgrade Helper
-- >8 --
>From 9b7492ab240334e4aa7065a383a66261fd801392 Mon Sep 17 00:00:00 2001
From: Upgrade Helper <[email protected]>
Date: Tue, 27 Oct 2026 05:34:26 +0000
Subject: [PATCH] python3-pdm: upgrade 2.29.2 -> 2.29.4
## Release v2.29.4 (2026-10-27)
### Features & Improvements
- Allow specifying `lock.format` in `pyproject.toml` via the `[tool.pdm.lock]`
table. ([#3958]( ))
### Bug Fixes
- Import a requirements file that starts with a UTF-8 BOM, which failed with a
`RequirementError`. ([#3937]( ))
- Treat a `Pipfile` version without an operator, such as `requests = "2.31.0"`,
as an exact `==` pin when importing, like pipenv does, instead of failing with
an invalid specifier error. ([#3939]( ))
- Preserve Poetry include entries targeting both source and wheel distributions
when importing a project. ([#3941]( ))
- Preserve version and description when importing Flit projects with a `src/`
layout or an annotated `__version__`. ([#3942]( ))
- Require `certifi>=2026.10.19`, which removes the `emSign ECC Root CA - G3`
root whose eMudhra intermediates had their private keys compromised. ([#3944](
))
- `pdm outdated` no longer lists a package whose installed version is newer than
the latest one found on the index, such as an installed pre-release or local
build. ([#3945]( ))
- Fix `pdm lock --check` reporting an outdated lockfile when a group is declared
in both `[dependency-groups]` and `[tool.pdm.dev-dependencies]`. ([#3947]( ))
- Show the license from `License-Expression` (PEP 639) in `pdm show` and `pdm
list --fields licenses`. ([#3948]( ))
- Stop `pdm lock` from excluding packages from a lock target when another target
shares its OS and architecture, e.g. manylinux and musllinux. ([#3950]( ))
- Fix a crash when a `python_version` marker compares against a wildcard version
such as `python_version == "3.*"`. ([#3951]( ))
- Send `License-Expression` and `License-File` with the upload in `pdm publish`,
so PyPI shows the license of PEP 639 packages. ([#3952]( ))
- Preserve the subdirectory fragment in source archive requirements when
resolving dependencies and serializing requirement URLs. ([#3954]( ))
- Preserve archive hashes when reading pylock.toml so they remain available for
exports. ([#3956]( ))
- Fix detection of responses served from the HTTP cache, so cached downloads and
index pages are reported as cached again. ([#3961]( ))
### Dependencies
- Install the download dependencies of pbs-installer so Python installation
works with its latest releases. ([#3959]( ))
- Upgrade `unearth` to `>=0.19` and migrate the HTTP client from `httpx` to
`httpx2`. `pdm.models.session.PDMPyPIClient` and the transports in
`pdm.pytest` are now built on `httpx2`, so plugins interacting with them
should import `httpx2` instead of `httpx`. ([#3962]( ))
## Release v2.29.3 (2026-10-19)
### Features & Improvements
- Add the `--venv` option to `pdm outdated`, like the other commands that read
the installed packages. ([#3904]( ))
### Bug Fixes
- Fix isolated PEP 517 builds skipping packages that are only visible via the
host venv's `--system-site-packages`. ([#3895]( ))
- Fix `pdm import` of Poetry projects dropping optional dependencies whose
extras entry is spelled differently, and importing optional dependencies with
multiple constraints as required ones. ([#3899]( ))
- Keep the plain requirement in `pdm export` when the same package is also
locked with extras under a narrower marker, so it is no longer missing from
`requirements.txt` on the other platforms. ([#3900]( ))
- Fix `python_version <= "X.Y"` markers excluding the patch releases of `X.Y`,
so `pdm install` skipped such dependencies. ([#3902]( ))
- Fix environment variables set by one task of a composite script, via `env` or
`env_file`, leaking into the tasks that run after it. ([#3903]( ))
- Convert flit's comma-separated `keywords` and obsolete `dev-requires` into
valid PEP 621 fields when importing a flit project. ([#3907]( ))
- Import custom Pipfile package categories, such as `[docs]`, as dependency
groups instead of dropping them. ([#3909]( ))
- Keep editable requirements in `[tool.pdm.dev-dependencies]` on `pdm import`,
so the written `[dependency-groups]` table stays valid per PEP 735. ([#3910](
))
- Keep Poetry's `develop = true` as an editable requirement when importing
dependency groups. ([#3913]( ))
- Fix `pdm import` of the project's own Poetry `pyproject.toml` writing each
dependency group to both `[tool.pdm.dev-dependencies]` and `[dependency-
groups]`. ([#3915]( ))
- Import Pipfile packages declared with a `file` URL, such as `{file =
"https://..."}`, as URL requirements instead of dropping the URL. ([#3918]( ))
- Preserve Poetry platform restrictions as environment markers when importing
dependencies. ([#3920]( ))
- Read an `exclude-newer` timestamp without a UTC offset as UTC, so `pdm lock`
no longer fails with a `TypeError` comparing naive and aware datetimes.
([#3922]( ))
- Do not write empty dependency groups, such as `dev = []` from an empty `[dev-
packages]` table, when importing from another format. ([#3925]( ))
- Strip every leading and trailing `.`, `_` and `-` when `pdm
[Changelog truncated as it exceeds 5000 characters;
the full changelog can be found in an attachment to the AUH email]
---
.../python/{python3-pdm_2.29.2.bb => python3-pdm_2.29.4.bb} | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
rename meta/recipes-devtools/python/{python3-pdm_2.29.2.bb =>
python3-pdm_2.29.4.bb} (80%)
diff --git a/meta/recipes-devtools/python/python3-pdm_2.29.2.bb
b/meta/recipes-devtools/python/python3-pdm_2.29.4.bb
similarity index 80%
rename from meta/recipes-devtools/python/python3-pdm_2.29.2.bb
rename to meta/recipes-devtools/python/python3-pdm_2.29.4.bb
index 83e9508612..2a2c6d4c82 100644
--- a/meta/recipes-devtools/python/python3-pdm_2.29.2.bb
+++ b/meta/recipes-devtools/python/python3-pdm_2.29.4.bb
@@ -4,7 +4,7 @@ LICENSE = "MIT"
SECTION = "devel/python"
LIC_FILES_CHKSUM = "file://LICENSE;md5=2eb31a2cc1a758c34b499f287dd04ef2"
-SRC_URI[sha256sum] =
"bad9705e9482e7d877a53380ff25273b01e9c1d313ee6ce7b215a6562a9d8bdd"
+SRC_URI[sha256sum] =
"48d013ba869b85538fea268107cd7a2c18fd91a6abf785fa4d7ed5951808582d"
inherit pypi python_pdm
--
2.47.1
packages/x86-64-v3-poky-linux/python3-pdm: SRC_URI changed from "https://files.pythonhosted.org/packages/source/p/pdm/pdm-2.29.2.tar.gz"; to "https://files.pythonhosted.org/packages/source/p/pdm/pdm-2.29.4.tar.gz"; packages/x86-64-v3-poky-linux/python3-pdm: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm: PV changed from "2.29.2" to "2.29.4" packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-dbg: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-dbg: PV changed from "2.29.2" to "2.29.4" packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-dev: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-dev: PV changed from "2.29.2" to "2.29.4" packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-doc: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-doc: PV changed from "2.29.2" to "2.29.4" packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-locale: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-locale: PV changed from "2.29.2" to "2.29.4" packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-src: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-src: PV changed from "2.29.2" to "2.29.4" packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-staticdev: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm-staticdev: PV changed from "2.29.2" to "2.29.4" packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm: FILELIST: directory renamed /usr/lib/python3.14/site-packages/pdm-2.29.2.dist-info -> /usr/lib/python3.14/site-packages/pdm-2.29.4.dist-info, directory renamed /usr/lib/python3.14/site-packages/pdm-2.29.2.dist-info/licenses -> /usr/lib/python3.14/site-packages/pdm-2.29.4.dist-info/licenses packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm: PKGSIZE changed from 2554870 to 2581866 (+1%) packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm: PKGV changed from 2.29.2 [default] to 2.29.4 [default] packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm: PV changed from "2.29.2" to "2.29.4" Changes to packages/x86-64-v3-poky-linux/python3-pdm (sysroot): /usr/lib/python3.14/site-packages/pdm-2.29.2.dist-info moved to /usr/lib/python3.14/site-packages/pdm-2.29.4.dist-info
0001-python3-pdm-upgrade-2.29.2-2.29.4.patch
Description: Binary data
packages/x86-64-v3-poky-linux/python3-pdm/python3-pdm: FILELIST: directory renamed /usr/lib/python3.14/site-packages/pdm-2.29.2.dist-info/licenses -> /usr/lib/python3.14/site-packages/pdm-2.29.4.dist-info/licenses, directory renamed /usr/lib/python3.14/site-packages/pdm-2.29.2.dist-info -> /usr/lib/python3.14/site-packages/pdm-2.29.4.dist-info Changes to packages/x86-64-v3-poky-linux/python3-pdm (sysroot): /usr/lib/python3.14/site-packages/pdm-2.29.2.dist-info moved to /usr/lib/python3.14/site-packages/pdm-2.29.4.dist-info
## Release v2.29.4 (2026-10-27)
### Features & Improvements
- Allow specifying `lock.format` in `pyproject.toml` via the `[tool.pdm.lock]`
table. ([#3958]( ))
### Bug Fixes
- Import a requirements file that starts with a UTF-8 BOM, which failed with a
`RequirementError`. ([#3937]( ))
- Treat a `Pipfile` version without an operator, such as `requests = "2.31.0"`,
as an exact `==` pin when importing, like pipenv does, instead of failing with
an invalid specifier error. ([#3939]( ))
- Preserve Poetry include entries targeting both source and wheel distributions
when importing a project. ([#3941]( ))
- Preserve version and description when importing Flit projects with a `src/`
layout or an annotated `__version__`. ([#3942]( ))
- Require `certifi>=2026.10.19`, which removes the `emSign ECC Root CA - G3`
root whose eMudhra intermediates had their private keys compromised. ([#3944](
))
- `pdm outdated` no longer lists a package whose installed version is newer than
the latest one found on the index, such as an installed pre-release or local
build. ([#3945]( ))
- Fix `pdm lock --check` reporting an outdated lockfile when a group is declared
in both `[dependency-groups]` and `[tool.pdm.dev-dependencies]`. ([#3947]( ))
- Show the license from `License-Expression` (PEP 639) in `pdm show` and `pdm
list --fields licenses`. ([#3948]( ))
- Stop `pdm lock` from excluding packages from a lock target when another target
shares its OS and architecture, e.g. manylinux and musllinux. ([#3950]( ))
- Fix a crash when a `python_version` marker compares against a wildcard version
such as `python_version == "3.*"`. ([#3951]( ))
- Send `License-Expression` and `License-File` with the upload in `pdm publish`,
so PyPI shows the license of PEP 639 packages. ([#3952]( ))
- Preserve the subdirectory fragment in source archive requirements when
resolving dependencies and serializing requirement URLs. ([#3954]( ))
- Preserve archive hashes when reading pylock.toml so they remain available for
exports. ([#3956]( ))
- Fix detection of responses served from the HTTP cache, so cached downloads and
index pages are reported as cached again. ([#3961]( ))
### Dependencies
- Install the download dependencies of pbs-installer so Python installation
works with its latest releases. ([#3959]( ))
- Upgrade `unearth` to `>=0.19` and migrate the HTTP client from `httpx` to
`httpx2`. `pdm.models.session.PDMPyPIClient` and the transports in
`pdm.pytest` are now built on `httpx2`, so plugins interacting with them
should import `httpx2` instead of `httpx`. ([#3962]( ))
## Release v2.29.3 (2026-10-19)
### Features & Improvements
- Add the `--venv` option to `pdm outdated`, like the other commands that read
the installed packages. ([#3904]( ))
### Bug Fixes
- Fix isolated PEP 517 builds skipping packages that are only visible via the
host venv's `--system-site-packages`. ([#3895]( ))
- Fix `pdm import` of Poetry projects dropping optional dependencies whose
extras entry is spelled differently, and importing optional dependencies with
multiple constraints as required ones. ([#3899]( ))
- Keep the plain requirement in `pdm export` when the same package is also
locked with extras under a narrower marker, so it is no longer missing from
`requirements.txt` on the other platforms. ([#3900]( ))
- Fix `python_version <= "X.Y"` markers excluding the patch releases of `X.Y`,
so `pdm install` skipped such dependencies. ([#3902]( ))
- Fix environment variables set by one task of a composite script, via `env` or
`env_file`, leaking into the tasks that run after it. ([#3903]( ))
- Convert flit's comma-separated `keywords` and obsolete `dev-requires` into
valid PEP 621 fields when importing a flit project. ([#3907]( ))
- Import custom Pipfile package categories, such as `[docs]`, as dependency
groups instead of dropping them. ([#3909]( ))
- Keep editable requirements in `[tool.pdm.dev-dependencies]` on `pdm import`,
so the written `[dependency-groups]` table stays valid per PEP 735. ([#3910](
))
- Keep Poetry's `develop = true` as an editable requirement when importing
dependency groups. ([#3913]( ))
- Fix `pdm import` of the project's own Poetry `pyproject.toml` writing each
dependency group to both `[tool.pdm.dev-dependencies]` and `[dependency-
groups]`. ([#3915]( ))
- Import Pipfile packages declared with a `file` URL, such as `{file =
"https://..."}`, as URL requirements instead of dropping the URL. ([#3918]( ))
- Preserve Poetry platform restrictions as environment markers when importing
dependencies. ([#3920]( ))
- Read an `exclude-newer` timestamp without a UTC offset as UTC, so `pdm lock`
no longer fails with a `TypeError` comparing naive and aware datetimes.
([#3922]( ))
- Do not write empty dependency groups, such as `dev = []` from an empty `[dev-
packages]` table, when importing from another format. ([#3925]( ))
- Strip every leading and trailing `.`, `_` and `-` when `pdm init` derives the
project name from the directory, so a folder like `__demo__` no longer
produces the invalid name `_demo_`. ([#3927]( ))
- `pdm init` now writes `project.license` as a license expression string instead
of a `{text = ...}` table, and no longer rewrites an existing `{file = ...}`
table or license expression into a value the build backend rejects. ([#3929](
))
- Read the inline metadata of a script that starts with a UTF-8 BOM, which `pdm
run` ignored. ([#3931]( ))
- Convert a space-separated Poetry version constraint such as `>=1.0 <2.0` like
the comma-separated form instead of aborting the import. ([#3934]( ))
- Resolve relative `path` entries in a `Pipfile` against the directory of the
`Pipfile` when importing, instead of the current working directory. ([#3935](
))
### Documentation
- Document what to cache and which install command to use when running PDM on CI
platforms other than GitHub Actions. ([#2472]( ))
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#248709): https://lists.openembedded.org/g/openembedded-core/message/248709 Mute This Topic: https://lists.openembedded.org/mt/121955740/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
