Skip to content

Backports/v2026.10.1 #7201

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
kwryankrattiger wants to merge 15 commits into
base: releases/v2026.10
Choose a base branch
from
Open

Backports/v2026.10.1 #7201

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
2db1e60
php: add v8.5.12, v8.4.27, v8.3.36; deprecate vulnerable versions
haampie-bot Oct 21, 2026
169922b
php: fix build dependencies
haampie-bot Oct 21, 2026
39b1881
php: reference CVE ids only
haampie-bot Oct 21, 2026
4d294d7
ca-certificates-mozilla: add v2026-10-20, deprecate older versions
haampie-bot Oct 21, 2026
a018ee8
py-pip: deprecate older versions
wdconinc Oct 21, 2026
7d69f23
py-pip: add GHSA link
wdconinc Oct 21, 2026
2a97b13
py-uv: deprecate versions due to CVE
adamjstewart Oct 21, 2026
8d162ac
py-certifi: add v2026.10.19
wdconinc Oct 21, 2026
e8ea918
py-certify: fix style; deprecate older
wdconinc Oct 21, 2026
5c99d6f
[@spackbot] updating style on behalf of wdconinc
wdconinc Oct 21, 2026
474d8d4
py-certify: add link to GHSA
wdconinc Oct 21, 2026
0904855
kokkos-fft: update CUDA dependency
tpadioleau Oct 11, 2026
e1c0d9d
python: add v3.15.1, v3.14.9, v3.13.17
Priyanshi507 Oct 22, 2026
9c20b8c
go: add v1.27.3 and v1.26.10
Priyanshi507 Oct 22, 2026
1a66195
Fix Style
kwryankrattiger Oct 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions repos/spack_repo/builtin/packages/ca_certificates_mozilla/package.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,15 +15,22 @@ class CaCertificatesMozilla(Package):

maintainers("haampie")

version(
"2026-10-20",
sha256="796f1389bfea13c0ed78f663b765baaff54a508e5483786bd6ece73c5e3e3cbe",
expand=False,
)
version(
"2026-05-14",
sha256="86a1f3366afac7c6f8ae9f3c779ac221129328c43f0ab2b8817eb2f362a5025c",
expand=False,
deprecated=True,
)
version(
"2026-03-19",
sha256="b6e66569cc3d438dd5abe514d0df50005d570bfc96c14dca8f768d020cb96171",
expand=False,
deprecated=True,
)
version(
"2025-08-12",
Expand Down
2 changes: 2 additions & 0 deletions repos/spack_repo/builtin/packages/go/package.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,8 +43,10 @@ class Go(Package):

license("BSD-3-Clause")

version("1.27.3", sha256="6e7749035cf360f06b2575d162ea79df9fda8ef671889e5c375f8e50777f26bb")
version("1.27.1", sha256="4e408abae126d916b6164627193f2c54f0e3ca1312d693b86db45f862ab238b1")
version("1.27.0", sha256="7002403d7cc44529ef6d26f69a44818263395ead7c16c05a5808ae047ebeb0e5")
version("1.26.10", sha256="fd63e883ba2f2bfca93c1646b31ebef63e2b1e4d2b317c9789d976a68d81f36f")
version("1.26.8", sha256="4e39b98e42f946fa05ac8bc5b71877df97dbdb7cbb1a777b541667ad7117fd2e")
version("1.26.7", sha256="0ed24eac755105085b89fe9cabc2742b91a0ad7b94b59d3ad364918ebc8956ad")
version("1.26.6", sha256="a0721c54c688901448d77ad9b3ec7ea7c474730755ff891382e92ecb93ff2cb1")
Expand Down
4 changes: 3 additions & 1 deletion repos/spack_repo/builtin/packages/kokkos_fft/package.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -63,7 +63,9 @@ class KokkosFft(CMakePackage):

depends_on("fftw@3.3:3 ~mpi precision=float,double")
requires("^fftw +openmp", when="host_backend=fftw-openmp")
depends_on("cuda@11:12", when="device_backend=cufft")
depends_on("cuda@11:", when="device_backend=cufft")
depends_on("cuda@:13", when="device_backend=cufft")
depends_on("cuda@:12", when="@:1 device_backend=cufft")
with when("device_backend=hipfft"):
depends_on("hipfft@5.3:")
depends_on("hipfft@:7", when="@:1")
Expand Down
25 changes: 16 additions & 9 deletions repos/spack_repo/builtin/packages/php/package.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,18 +19,25 @@ class Php(AutotoolsPackage):

license("PHP-3.01")

version("8.3.12", sha256="d5d4e6ffc6d6b2f02a87c45741623e08045ec6509ade44a1033e0f8bbb374119")
version("7.4.33", sha256="dfbb2111160589054768a37086bda650a0041c89878449d078684d70d6a0e411")
version("8.5.12", sha256="914702592c81f85cb3f6c2bca0cbe4217d3fe5f5a4b8ca34a8f93f74a3575fc7")

@kwryankrattiger kwryankrattiger Oct 26, 2026

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Remove 8.5 and 8.4 as they are not patch releases to CVE version.

version("8.4.27", sha256="ae5896236c1b5bba6c36dcdd2e30c87ccda595d28650d18e6c007eebb0db68ab")
version("8.3.36", sha256="132154b55122efe74ed55c6a51486dcf6a7797a2a8df66e5361c2bb6f0f1b527")

depends_on("c", type="build") # generated
depends_on("cxx", type="build") # generated
# CVE-2026-109618, CVE-2026-109619
with default_args(deprecated=True):
version(
"8.3.12", sha256="d5d4e6ffc6d6b2f02a87c45741623e08045ec6509ade44a1033e0f8bbb374119"
)
version(
"7.4.33", sha256="dfbb2111160589054768a37086bda650a0041c89878449d078684d70d6a0e411"
)

depends_on("c", type="build")

depends_on("autoconf", type="build")
depends_on("automake", type="build")
depends_on("libtool", type="build")
depends_on("m4", type="build")
# buildconf only runs autoconf/autoheader; libtool.m4 is bundled in build/
depends_on("autoconf@2.68:", type="build")
depends_on("pkgconfig", type="build")
depends_on("bison", type="build")
depends_on("bison@3:", type="build")
depends_on("re2c", type="build")
depends_on("bash", type="build")
depends_on("libiconv", when="@8:")
Expand Down
22 changes: 18 additions & 4 deletions repos/spack_repo/builtin/packages/py_certifi/package.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,10 +17,24 @@ class PyCertifi(PythonPackage):

license("MPL-2.0")

version("2026.2.25", sha256="e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e80bfba7")
version("2026.1.4", sha256="ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120")
version("2025.7.14", sha256="8ea99dbdfaaf2ba2f9bac77b9249ef62ec5218e7c2b2e903378ed5fccf765995")
version("2025.4.26", sha256="0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6")
version(
"2026.10.19", sha256="035c1e85572b141bf1c3a3eff0e33a8eb74917522f2559075ff8d2fea780a1ae"
)
# older versions include emSign intermediate certificates with exposed private keys
# https://github.com/astral-sh/uv/security/advisories/GHSA-hq85-5cpj-mr62
with default_args(deprecated=True):
version(
"2026.2.25", sha256="e887ab5cee78ea814d3472169153c2d12cd43b14bd03329a39a9c6e2e80bfba7"
)
version(
"2026.1.4", sha256="ac726dd470482006e014ad384921ed6438c457018f4b3d204aea4281258b2120"
)
version(
"2025.7.14", sha256="8ea99dbdfaaf2ba2f9bac77b9249ef62ec5218e7c2b2e903378ed5fccf765995"
)
version(
"2025.4.26", sha256="0a816057ea3cdefcef70270d2c515e4506bbc954f417fa5ade2021213bb8f0c6"
)

with default_args(type="build"):
depends_on("py-setuptools@42:")
88 changes: 62 additions & 26 deletions repos/spack_repo/builtin/packages/py_pip/package.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,32 +26,68 @@ class PyPip(Package, PythonExtension):

license("MIT")

version("26.1.2", sha256="382ff9f685ee3bc25864f820aa50505825f10f5458ffff07e30a6d96e5715cab")
version("26.1", sha256="4e8486d821d814b77319acb7b9e8bf5a4ee7590a643e7cb21029f209be8573c1")
version("26.0.1", sha256="bdb1b08f4274833d62c1aa29e20907365a2ceb950410df15fc9521bad440122b")
version("25.1.1", sha256="2913a38a2abf4ea6b64ab507bd9e967f3b53dc1ede74b01b0931e1ce548751af")
version("25.1", sha256="13b4aa0aaad055020a11bec8a1c2a70a2b2d080e12d89b962266029fff0a16ba")
version("25.0.1", sha256="c46efd13b6aa8279f33f2864459c8ce587ea6a1a59ee20de055868d8f7688f7f")
version("25.0", sha256="b6eb97a803356a52b2dd4bb73ba9e65b2ba16caa6bcb25a7497350a4e5859b65")
version("24.3.1", sha256="3790624780082365f47549d032f3770eeb2b1e8bd1f7b2e02dace1afa361b4ed")
version("24.2", sha256="2cd581cf58ab7fcfca4ce8efa6dcacd0de5bf8d0a3eb9ec927e07405f4d9e2a2")
version("24.1.2", sha256="7cd207eed4c60b0f411b444cd1464198fe186671c323b6cd6d433ed80fc9d247")
version("24.0", sha256="ba0d021a166865d2265246961bec0152ff124de910c5cc39f1156ce3fa7c69dc")
version("23.3.2", sha256="5052d7889c1f9d05224cd41741acb7c5d6fa735ab34e339624a614eaaa7e7d76")
version("23.2.1", sha256="7ccf472345f20d35bdc9d1841ff5f313260c2c33fe417f48c30ac46cccabf5be")
version("23.1.2", sha256="3ef6ac33239e4027d9a5598a381b9d30880a1477e50039db2eac6e8a8f6d1b18")
version("23.0", sha256="b5f88adff801f5ef052bcdef3daa31b55eb67b0fccd6d0106c206fa248e0463c")
version("22.2.2", sha256="b61a374b5bc40a6e982426aede40c9b5a08ff20e640f5b56977f4f91fed1e39a")
version("22.1.2", sha256="a3edacb89022ef5258bf61852728bf866632a394da837ca49eb4303635835f17")
version("21.3.1", sha256="deaf32dcd9ab821e359cd8330786bcd077604b5c5730c0b096eda46f95c24a2d")
version("21.1.2", sha256="f8ea1baa693b61c8ad1c1d8715e59ab2b93cd3c4769bacab84afcc4279e7a70e")
version("20.2", sha256="d75f1fc98262dabf74656245c509213a5d0f52137e40e8f8ed5cc256ddd02923")
version("19.3", sha256="e100a7eccf085f0720b4478d3bb838e1c179b1e128ec01c0403f84e86e0e2dfb")
version("19.1.1", sha256="993134f0475471b91452ca029d4390dc8f298ac63a712814f101cd1b6db46676")
version("19.0.3", sha256="bd812612bbd8ba84159d9ddc0266b7fbce712fc9bc98c82dee5750546ec8ec64")
version("18.1", sha256="7909d0a0932e88ea53a7014dfd14522ffef91a464daaaf5c573343852ef98550")
version("10.0.1", sha256="717cdffb2833be8409433a93746744b59505f42146e8d37de6c62b430e25d6d7")
version("9.0.1", sha256="690b762c0a8460c303c089d5d0be034fb15a5ea2b75bdf565f40421f542fefb0")
version("26.2.2", sha256="fd7f4dfa8190e014013b9f08f3e973f4e4c26ffd179a204895533a7254813a70")
# older versions include emSign intermediate certificates with exposed private keys
# https://github.com/astral-sh/uv/security/advisories/GHSA-hq85-5cpj-mr62
with default_args(deprecated=True):
version(
"26.1.2", sha256="382ff9f685ee3bc25864f820aa50505825f10f5458ffff07e30a6d96e5715cab"
)
version("26.1", sha256="4e8486d821d814b77319acb7b9e8bf5a4ee7590a643e7cb21029f209be8573c1")
version(
"26.0.1", sha256="bdb1b08f4274833d62c1aa29e20907365a2ceb950410df15fc9521bad440122b"
)
version(
"25.1.1", sha256="2913a38a2abf4ea6b64ab507bd9e967f3b53dc1ede74b01b0931e1ce548751af"
)
version("25.1", sha256="13b4aa0aaad055020a11bec8a1c2a70a2b2d080e12d89b962266029fff0a16ba")
version(
"25.0.1", sha256="c46efd13b6aa8279f33f2864459c8ce587ea6a1a59ee20de055868d8f7688f7f"
)
version("25.0", sha256="b6eb97a803356a52b2dd4bb73ba9e65b2ba16caa6bcb25a7497350a4e5859b65")
version(
"24.3.1", sha256="3790624780082365f47549d032f3770eeb2b1e8bd1f7b2e02dace1afa361b4ed"
)
version("24.2", sha256="2cd581cf58ab7fcfca4ce8efa6dcacd0de5bf8d0a3eb9ec927e07405f4d9e2a2")
version(
"24.1.2", sha256="7cd207eed4c60b0f411b444cd1464198fe186671c323b6cd6d433ed80fc9d247"
)
version("24.0", sha256="ba0d021a166865d2265246961bec0152ff124de910c5cc39f1156ce3fa7c69dc")
version(
"23.3.2", sha256="5052d7889c1f9d05224cd41741acb7c5d6fa735ab34e339624a614eaaa7e7d76"
)
version(
"23.2.1", sha256="7ccf472345f20d35bdc9d1841ff5f313260c2c33fe417f48c30ac46cccabf5be"
)
version(
"23.1.2", sha256="3ef6ac33239e4027d9a5598a381b9d30880a1477e50039db2eac6e8a8f6d1b18"
)
version("23.0", sha256="b5f88adff801f5ef052bcdef3daa31b55eb67b0fccd6d0106c206fa248e0463c")
version(
"22.2.2", sha256="b61a374b5bc40a6e982426aede40c9b5a08ff20e640f5b56977f4f91fed1e39a"
)
version(
"22.1.2", sha256="a3edacb89022ef5258bf61852728bf866632a394da837ca49eb4303635835f17"
)
version(
"21.3.1", sha256="deaf32dcd9ab821e359cd8330786bcd077604b5c5730c0b096eda46f95c24a2d"
)
version(
"21.1.2", sha256="f8ea1baa693b61c8ad1c1d8715e59ab2b93cd3c4769bacab84afcc4279e7a70e"
)
version("20.2", sha256="d75f1fc98262dabf74656245c509213a5d0f52137e40e8f8ed5cc256ddd02923")
version("19.3", sha256="e100a7eccf085f0720b4478d3bb838e1c179b1e128ec01c0403f84e86e0e2dfb")
version(
"19.1.1", sha256="993134f0475471b91452ca029d4390dc8f298ac63a712814f101cd1b6db46676"
)
version(
"19.0.3", sha256="bd812612bbd8ba84159d9ddc0266b7fbce712fc9bc98c82dee5750546ec8ec64"
)
version("18.1", sha256="7909d0a0932e88ea53a7014dfd14522ffef91a464daaaf5c573343852ef98550")
version(
"10.0.1", sha256="717cdffb2833be8409433a93746744b59505f42146e8d37de6c62b430e25d6d7"
)
version("9.0.1", sha256="690b762c0a8460c303c089d5d0be034fb15a5ea2b75bdf565f40421f542fefb0")

extends("python")

Expand Down
117 changes: 89 additions & 28 deletions repos/spack_repo/builtin/packages/py_uv/package.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,35 +24,94 @@ class PyUv(PythonPackage, CargoPackage):

executables = ["^uv$"]

version("0.11.32", sha256="5359a7b0de78ba99b2519d33c173e004c39111c4baebe1b7c3d111a2de2011e1")
version("0.11.31", sha256="763609d59721af5b8522e16deac6cffe8055f82bb837740c708917506f305185")
version("0.11.30", sha256="06f4b824c6123df1cd00a68367f970870e7252b0b11a4d03a06b2b4b433afcda")
version("0.11.29", sha256="a4ca34dc3b247740e511ca7c718181d5300e7899bbef755db45bb6c993610a64")
version("0.11.28", sha256="df86cfd135542a833e9f84708b3b8dbaa987a3b9db85b267062db49ab639d242")
version("0.11.27", sha256="3469204521869f0e6bdea17b02c1d86db2d0150820895653a6152cab206fb00b")
version("0.11.26", sha256="2a433ece2ace088dd572d8abb0e6bd9a4ecb0e10bc9856447bbb37545f384f29")
version("0.11.25", sha256="458e731778e7b5cc870710397859c23e766703e7bc0695f23b3eb15080745ba6")
version("0.11.24", sha256="8602a1b6300a3a948afacc62e1cb933c8394c27966db85ed7e29483300b69dc4")
version("0.11.23", sha256="f2476dda35866ea3ded3a5905759da2d32dfac36dfd5b3428191a99a8ce15b02")
version("0.11.22", sha256="32e31cb70bada3ad03d99614ead365cd36b2ac9455a6fc232f6d50b619a964e1")
version("0.11.21", sha256="083882c73373a16de4c136d54e3386a52388dead5048a07505e25578b157182f")
version("0.11.20", sha256="a246f30931cbc93d0a39d0cfc75be045fddd45773a734ddf8afa869aabc46c63")
version("0.11.19", sha256="f56f5bf853626a30423052d7ee00bf5cc940a08347d6ee7ede96862d084054a5")
version("0.11.18", sha256="61f2bc99898383f9bf04e24b984e42e19cde378dd79192935ca21d75563368a8")
version("0.11.17", sha256="1d1be74deec997db1dda05a7e67541c904d65cbfd72e455d3c0a2a1e4bf2cddf")
version("0.11.16", sha256="4b435fcb0af8f34833dcc1903a8a223856437efd0d515c2160a2871def221238")
version("0.11.15", sha256="755f959ec6a2fd8ccb6ee76ad90ab759d2eb1f4797444078645dd1ee4bca92d6")
version("0.11.14", sha256="0ea006a117b586b2681b6dfd9703a540d2ad2a136ec0f48d272767e599cc3dfb")
version("0.11.13", sha256="c30889b6a4417f94a0315371ec5bf8af151f062406ad3fb4b2cbf13d645d825c")
version("0.11.12", sha256="2d85d1fe06bafddf9632ec5c8ac24f86bd6eb7ec21e650be8c3565b600b502c9")
version("0.11.11", sha256="2ba46a912a1775957c579a1a42c8c8b480418502326b72427b1cad972c8f659f")
version("0.11.10", sha256="9b3a2ce56c4a22065462473acee0b729140370650974de4e781a5273f49371fa")
version("0.11.9", sha256="43edb4b3eb43a9780f9232110dfbcc0bed9367ce5b24d37a315817d3faf3c913")
version("0.11.8", sha256="bb2cf302b8503629aab6f0090a05551e6f8cfc2d687ca059cad7ec9e11214335")
version("0.11.7", sha256="46d971489b00bdb27e0aa715e4a5cd4ef2c28ea5b6ef78f2b67bf861eb44b405")
version("0.11.6", sha256="e3b21b7e80024c95ff339fcd147ac6fc3dd98d3613c9d45d3a1f4fd1057f127b")
version("0.10.1", sha256="c89e7fd708fb3474332d6fc54beb2ea48313ebdc82c6931df92a884fcb636d9d")
version("0.13.4", sha256="b0bff5b9a5061f7a35b1d0c1a94c19af134222c48eb7aadc42f85a038be1b248")
with default_args(deprecated=True):
# https://github.com/astral-sh/uv/security/advisories/GHSA-hq85-5cpj-mr62
version(
"0.11.32", sha256="5359a7b0de78ba99b2519d33c173e004c39111c4baebe1b7c3d111a2de2011e1"
)
version(
"0.11.31", sha256="763609d59721af5b8522e16deac6cffe8055f82bb837740c708917506f305185"
)
version(
"0.11.30", sha256="06f4b824c6123df1cd00a68367f970870e7252b0b11a4d03a06b2b4b433afcda"
)
version(
"0.11.29", sha256="a4ca34dc3b247740e511ca7c718181d5300e7899bbef755db45bb6c993610a64"
)
version(
"0.11.28", sha256="df86cfd135542a833e9f84708b3b8dbaa987a3b9db85b267062db49ab639d242"
)
version(
"0.11.27", sha256="3469204521869f0e6bdea17b02c1d86db2d0150820895653a6152cab206fb00b"
)
version(
"0.11.26", sha256="2a433ece2ace088dd572d8abb0e6bd9a4ecb0e10bc9856447bbb37545f384f29"
)
version(
"0.11.25", sha256="458e731778e7b5cc870710397859c23e766703e7bc0695f23b3eb15080745ba6"
)
version(
"0.11.24", sha256="8602a1b6300a3a948afacc62e1cb933c8394c27966db85ed7e29483300b69dc4"
)
version(
"0.11.23", sha256="f2476dda35866ea3ded3a5905759da2d32dfac36dfd5b3428191a99a8ce15b02"
)
version(
"0.11.22", sha256="32e31cb70bada3ad03d99614ead365cd36b2ac9455a6fc232f6d50b619a964e1"
)
version(
"0.11.21", sha256="083882c73373a16de4c136d54e3386a52388dead5048a07505e25578b157182f"
)
version(
"0.11.20", sha256="a246f30931cbc93d0a39d0cfc75be045fddd45773a734ddf8afa869aabc46c63"
)
version(
"0.11.19", sha256="f56f5bf853626a30423052d7ee00bf5cc940a08347d6ee7ede96862d084054a5"
)
version(
"0.11.18", sha256="61f2bc99898383f9bf04e24b984e42e19cde378dd79192935ca21d75563368a8"
)
version(
"0.11.17", sha256="1d1be74deec997db1dda05a7e67541c904d65cbfd72e455d3c0a2a1e4bf2cddf"
)
version(
"0.11.16", sha256="4b435fcb0af8f34833dcc1903a8a223856437efd0d515c2160a2871def221238"
)
version(
"0.11.15", sha256="755f959ec6a2fd8ccb6ee76ad90ab759d2eb1f4797444078645dd1ee4bca92d6"
)
version(
"0.11.14", sha256="0ea006a117b586b2681b6dfd9703a540d2ad2a136ec0f48d272767e599cc3dfb"
)
version(
"0.11.13", sha256="c30889b6a4417f94a0315371ec5bf8af151f062406ad3fb4b2cbf13d645d825c"
)
version(
"0.11.12", sha256="2d85d1fe06bafddf9632ec5c8ac24f86bd6eb7ec21e650be8c3565b600b502c9"
)
version(
"0.11.11", sha256="2ba46a912a1775957c579a1a42c8c8b480418502326b72427b1cad972c8f659f"
)
version(
"0.11.10", sha256="9b3a2ce56c4a22065462473acee0b729140370650974de4e781a5273f49371fa"
)
version(
"0.11.9", sha256="43edb4b3eb43a9780f9232110dfbcc0bed9367ce5b24d37a315817d3faf3c913"
)
version(
"0.11.8", sha256="bb2cf302b8503629aab6f0090a05551e6f8cfc2d687ca059cad7ec9e11214335"
)
version(
"0.11.7", sha256="46d971489b00bdb27e0aa715e4a5cd4ef2c28ea5b6ef78f2b67bf861eb44b405"
)
version(
"0.11.6", sha256="e3b21b7e80024c95ff339fcd147ac6fc3dd98d3613c9d45d3a1f4fd1057f127b"
)
# https://github.com/astral-sh/uv/security/advisories/GHSA-4gg8-gxpx-9rph
version(
"0.10.1", sha256="c89e7fd708fb3474332d6fc54beb2ea48313ebdc82c6931df92a884fcb636d9d"
)
# https://www.cvedetails.com/cve/CVE-2025-13327/
version(
"0.7.22", sha256="f5cf159907d594e33433f14737d1ee843dc8799edfcf57b5b8c0f282d1117051"
Expand Down Expand Up @@ -94,6 +153,8 @@ class PyUv(PythonPackage, CargoPackage):
depends_on("gmake")

# Minimum Rust toolchain, from Cargo.toml
depends_on("rust@1.97:", when="@0.12.22:")
depends_on("rust@1.96:", when="@0.12.6:")
depends_on("rust@1.95:", when="@0.11.29:")
depends_on("rust@1.94:", when="@0.11.18:")
depends_on("rust@1.93:", when="@0.11.8:")
Expand Down
Loading
Loading