1972681 - Use compatible release operator when possible for vendored Python dependencies

Status: NEW

(Firefox Build System :: Mach Core, task)

Description

[Alex Hochheiden [:ahochheiden]]

Lots of packages are pinned at relatively old versions. With the minimum Python version bump to 3.9, we've unlocked updating to newer versions for many of the vendored Python packages. Let's do that.

Comment 1

[Alex Hochheiden [:ahochheiden]]

Attachment: Bug 1972681 - Use compatible release operator for vendored Python packages where possible and run `./mach vendor python --upgrade` r?ahal

Updated aiohttp v3.12.12 -> v3.12.13
Updated attrs v23.1.0 -> v25.3.0
Updated blessed v1.19.1 -> v1.21.0
Updated cbor2 v4.0.1 -> v5.6.5
Updated certifi v2024.7.4 -> v2025.6.15
Updated click v8.1.7 -> v8.1.8
Updated compare-locales v9.0.1 -> v9.0.4
Updated distro v1.8.0 -> v1.9.0
Updated fluent-migrate v0.13.2 -> v0.13.3
Updated importlib-metadata v6.0.0 -> v8.7.0
Updated jsmin v3.0.0 -> v3.0.1
Updated json-e v4.5.3 -> v4.8.0
Updated jsonschema v4.17.3 -> v4.24.0
Added jsonschema-specifications v2025.4.1
Updated looseversion v1.0.1 -> v1.3.0
Updated mozilla-taskgraph v3.3.1 -> v3.3.2
Updated multidict v6.4.4 -> v6.5.0
Updated pathspec v0.9.0 -> v0.12.1
Updated ply v3.10 -> v3.11
Updated pyasn1 v0.4.8 -> v0.6.1
Updated pyasn1-modules v0.2.8 -> v0.4.2
Updated pylru v1.0.9 -> v1.2.1
Removed pyrsistent v0.20.0
Updated python-hglib v2.4 -> v2.6.2
Updated redo v2.0.3 -> v3.0.0
Added referencing v0.36.2
Updated requests-unixsocket v0.2.0 -> v0.4.1
Updated responses v0.10.6 -> v0.25.7
Added rpds-py v0.25.1
Updated rsa v4.9 -> v4.9.1
Updated sentry-sdk v1.14.0 -> v2.30.0
Updated six v1.16.0 -> v1.17.0
Updated tomlkit v0.12.3 -> v0.13.3
Updated tqdm v4.66.3 -> v4.67.1
Updated typing-extensions v4.12.2 -> v4.14.0
Updated voluptuous v0.12.1 -> v0.15.2
Updated yamllint v1.23.0 -> v1.37.1

Comment 2

[Alex Hochheiden [:ahochheiden]]

Attachment: Bug 1972681 - Bump vendored `certifi` to version `2025.6.15` r?ahal

Updated certifi v2024.7.4 -> v2025.6.15

Comment 3

[Alex Hochheiden [:ahochheiden]]

Attachment: Bug 1972681 - Bump vendored `attrs` to version `25.3.0` r?ahal

Updated attrs v23.2.0 -> v25.3.0

Comment 4

[Alex Hochheiden [:ahochheiden]]

Attachment: Bug 1972681 - Bump vendored `cbor2` to version `5.6.5` r?ahal

Updated cbor2 v4.1.2 -> v5.6.5

Comment 5

[Alex Hochheiden [:ahochheiden]]

Attachment: Bug 1972681 - Bump vendored `importlib-metadata` to version `8.7.0` r?ahal

Updated importlib-metadata v6.11.0 -> v8.7.0

Comment 6

[Alex Hochheiden [:ahochheiden]]

Attachment: Bug 1972681 - Bump vendored `repo` to version `3.0.0` r?ahal

Updated redo v2.0.4 -> v3.0.0

Comment 7

[Alex Hochheiden [:ahochheiden]]

Attachment: Bug 1972681 - Bump `sentry-sdk` to version `2.30.0` r?ahal

Updated sentry-sdk v1.45.1 -> v2.30.0