summaryrefslogtreecommitdiffstats
path: root/meta/recipes-support
Commit message (Collapse)AuthorAgeFilesLines
...
* nghttp2: upgrade 1.58.0 -> 1.59.0Wang Mingyu2024-02-031-1/+1
| | | | | | | | (From OE-Core rev: 4414f0297c7d1b84ec4c1363fe8a91b6e5bd9695) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnupg: upgrade 2.4.3 -> 2.4.4Wang Mingyu2024-02-035-55/+18
| | | | | | | | | | | | | | | | | | | fix-ldap.patch removed since it's included in 2.4.4. 0001-configure.ac-use-a-custom-value-for-the-location-of-.patch 0004-autogen.sh-fix-find-version-for-beta-checking.patch relocate.patch refreshed for 2.4.4 Changelog: https://dev.gnupg.org/T6578 (From OE-Core rev: 35ad01e17e3ba01f87902ab121247bfa600db225) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* dos2unix: upgrade 7.5.1 -> 7.5.2Wang Mingyu2024-02-031-2/+2
| | | | | | | | | | License-Update: Copyright year updated to 2024 (From OE-Core rev: f49b6d0c9c4b000a5ba8bc797dfe8c2cf5f30d27) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* iso-codes: upgrade 4.15.0 -> 4.16.0Wang Mingyu2024-02-031-1/+1
| | | | | | | | (From OE-Core rev: 80a4374fc24243c278caba30ef711956a4c8b1d9) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* at-spi2-core: upgrade 2.50.0 -> 2.50.1Wang Mingyu2024-02-031-1/+1
| | | | | | | | | | | Changelog: atk-adaptor: Fix critical when no table cell array is returned. (From OE-Core rev: 9bed9f07aea6c425748c8908641ce8a99fd5162f) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* numactl: upgrade 2.0.16 -> 2.0.17Richard Purdie2024-02-035-107/+8
| | | | | | | | Drop two backported patches, refresh others. (From OE-Core rev: 63c7bf399f31420374866dc050a52e9c0700cdbd) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gnutls: Upgrade 3.8.2 -> 3.8.3Simone Weiß2024-01-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Upgrade version to adress recent CVE findings. Changelog ========= ** libgnutls: Fix more timing side-channel inside RSA-PSK key exchange [GNUTLS-SA-2024-01-14, CVSS: medium] [CVE-2024-0553] ** libgnutls: Fix assertion failure when verifying a certificate chain with a cycle of cross signatures [GNUTLS-SA-2024-01-09, CVSS: medium] [CVE-2024-0567] ** libgnutls: Fix regression in handling Ed25519 keys stored in PKCS#11 token certtool was unable to handle Ed25519 keys generated on PKCS#11 with pkcs11-tool (OpenSC). This is a regression introduced in 3.8.2. (From OE-Core rev: 705d2972b38efc9f331e3635c07ca92f8812b365) Signed-off-by: Simone Weiß <simone.p.weiss@posteo.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* p11-kit: fix parallel build failuresKai Kang2024-01-262-1/+36
| | | | | | | | | | | | | | | | | | | | | | | It fails occasionally with missing generated header files: | ../git/common/asn1.c:42:10: fatal error: openssl.asn.h: No such file or directory | 42 | #include "openssl.asn.h" | | ^~~~~~~~~~~~~~~ | compilation terminated. According to meson manual page: https://mesonbuild.com/Wrap-best-practices-and-tips.html#declare-generated-headers-explicitly 'asn_h_dep' should be a dependency of static_library target 'libp11_asn1' to make sure that required header files generated before compile common/asn1.c. (From OE-Core rev: 523ae4ba677ee9d9925182689b2d70af6d3df7a8) Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libssh2: backport fix for CVE-2023-48795Ross Burton2024-01-242-0/+467
| | | | | | | | | Backport the upstream fix for CVE-2023-48795. (From OE-Core rev: 314fa19c5e07fa632ff0434a6adbb97de1319a02) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpsl: upgrade 0.21.2 -> 0.21.5Anuj Mittal2024-01-241-3/+3
| | | | | | | | | License-Update: Copyright dates changed (From OE-Core rev: 36375f47d5672aa0c2eae16de9ae18693b3b8a55) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* enchant2: upgrade 2.6.4 -> 2.6.5Jiang Kai2024-01-211-1/+1
| | | | | | | | | | | | | | | | Changelog: ============ -permits error messages from spelling providers not to be valid UTF-8. -The --with-hunspell-dir configure option is removed (along with all the other ---with-PROVIDER-dir options, which did nothing). -Doxygen API documentation is now included in the release tarball (From OE-Core rev: 34eb325aa8fa22454c5a706845140a6c43cfbd6c) Signed-off-by: Jiang Kai <jiangkai@fujitsu.com> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* debianutils: upgrade 5.15 -> 5.16Jiang Kai2024-01-211-1/+1
| | | | | | | | | | | | Changelog: Upload to unstable per request of Chris Hofstaedtler. (From OE-Core rev: cba6e5a16b62976692607c52e5ea6fe40d940067) Signed-off-by: Jiang Kai <jiangkai@fujitsu.com> Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: upgrade 0.74.1 -> 0.74.2Wang Mingyu2024-01-191-1/+1
| | | | | | | | (From OE-Core rev: 153f61dad23f7d04e720369f6b76aeb9a0d3d454) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* nghttp2: upgrade 1.57.0 -> 1.58.0Wang Mingyu2024-01-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ -Fix build error when both clock_gettime and GetTickCount64 are available -nghttpx: Shutdown h3 stream write if reset by a remote endpoint -Bump golang.org/x/net from 0.15.0 to 0.17.0 -cmake: speed up warning option detection -Update doc -ngtcp2 has merged BBR and BBRv2 under BBR (fixes issue #1955) -Bump ngtcp2 -Integration servertester h3 -Refactor character comparison -nghttpx: Stricter transfer-encoding checks -Configure cygwin -windows: Fix warnings -Prefer clock_gettime if CYGWIN defined -Bump neverbleed -Bump ngtcp2 -Bump neverbleed (From OE-Core rev: 9b40ffc9766673111214c6a0551c3291032cfd8e) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libbsd: upgrade 0.11.7 -> 0.11.8Wang Mingyu2024-01-192-42/+3
| | | | | | | | | | | | | License-Update: Switch arc4random(3bsd) man page from OpenBSD to NetBSD 0001-funopen-Replace-off64_t-with-off_t-in-funopen_seek.patch removed since it's included in 0.11.8 (From OE-Core rev: c5709bb67c14f7ba829803cf1dc3f1c564376168) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rng-tools: Revert "rng-tools: move to meta-oe"Randy MacLeod2024-01-194-0/+144
| | | | | | | | | | | | | | | | | | This reverts commit d2b445384da3f3e6dab8577b6c56648b5244a788. Revert this commit since: - some systems using oe-core master may still be using kernels from before 5.6 pulled in the rng-tools algorithm, and - some hardware platforms may not have a hardware random number generator and could therefore need to run rngd to avoid long boot-time initialization due to a depleted entropy pool. (From OE-Core rev: 828afafb3bff54079fcba9bdab2ec87ac13e4ce6) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunwind: clean up configurationRoss Burton2024-01-191-5/+2
| | | | | | | | | | | | | | | | | | | | | Add a PACKAGECONFIG for the support for zlib-compressed debuginfo. There's no need to explicitly enable reading of .debug_frame segments as this is enabled automatically for arm/aarch64. Enable static globally, there's not much to gain by making this musl-specific. Don't disable the tests on musl as they verify that libunwind can link, which is important with external libucontext libraries. No need to disable documentation on musl, as it's already disabled out of the box. (From OE-Core rev: 2752f6a4f8a45afff3366e5aa75672ba6f994a23) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunwind: refresh patchesRoss Burton2024-01-198-218/+139
| | | | | | | | | | | | | | | | | | | | | | 0001-src-Gtrace-remove-unguarded-print-calls.patch has been merged, so update the Upstream-Status. 0003-x86-Stub-out-x86_local_resume.patch has been hopefully obsoleted by the use of libucontext, remove. Split 004-Fix-build-on-mips-musl.patch into two, as there's two independent issues here. 0006-Fix-for-X32.patch appears to have been fixed with 31738a upstream, in 1.6.0. musl-header-conflict.patch was obsoleted by recipe-specific-sysroots, remove it. (From OE-Core rev: 916c67e3e16c5c355ce6f2a88f3f2a7506af4980) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libunwind: merge .inc and .bbRoss Burton2024-01-192-26/+25
| | | | | | | | | There's no need to these to be split, so merge them together. (From OE-Core rev: e0d7f27e7da8c2d052e3c761d41305348d898458) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* classes/recipes: Switch to use inherit_deferRichard Purdie2024-01-181-1/+2
| | | | | | | | | | | | | | | | | Now that bitbake supports the use of inherit_defer, switch all conditional (variable based) inherits to use this instead. This leads to more a more deterministic user experience since there is no longer an immediate expansion and later changes to the variables in question (e.g. a bbappend) are accounted for. This patch tries to ensure the behaviour before/after remains as unchanged as it reasonably can, e.g. by always inherting populate_sdk_base. native and nativesdk continue to need to be inherited last, hence being used with inherit_defer in a handful of very specific cases. (From OE-Core rev: 451363438d38bd4552d5bcec4a92332f5819a5d4) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bmaptool: add 3 fixesTrevor Woerner2024-01-154-1/+168
| | | | | | | | | | | | | | | | I found a couple issues with bmaptool, including a race condition, which I have fixed and submitted upstream. This patch adds these fixes to the project now while waiting for feedback and a new release: BmapCopy.py: fix error message CLI.py: fix block device udev race condition BmapCopy.py: tweak suggested udev rule (From OE-Core rev: 72ae1304bc8d3db14d0a7cc01d10328e47cf5a09) Signed-off-by: Trevor Woerner <twoerner@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rng-tools: move to meta-oeRandy MacLeod2024-01-154-144/+0
| | | | | | | | | | | | | Nothing in oe-core depends on rng-tools anymore: e7e1bc43ca rng-tools: splitting the rng-tools systemd/sysvinit serivce as a package so move it to meta-oe for people who still want to run rngd as a service for some reason or for those who want to run rng-test. (From OE-Core rev: 9a651e5bc2492cf864261e8f17e4cbe34d6d48ce) Signed-off-by: Randy MacLeod <Randy.MacLeod@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* rng-tools: remove obsolete build time dependency on sysfsutilsdavid d zuhn2024-01-101-1/+1
| | | | | | | | | | | | This package used to use libsysfs, but has been modified to read the /sys file system directly. This build dependency is no longer needed. (From OE-Core rev: 9ee39dd1d505f787e7bf4e3aa2b527f17c3a78cd) Signed-off-by: david d zuhn <david.zuhn@sonos.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libpcre2: fix upstream version checkAlexander Kanavin2024-01-101-1/+1
| | | | | | | | (From OE-Core rev: 0eb4e166d293e0e595e4d0a70f378cb8014425ee) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* taglib: fix upstream version checkAlexander Kanavin2024-01-101-0/+1
| | | | | | | | (From OE-Core rev: 2ed130333fb4f378e4d2a91b3d37d12716dd41f7) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libusb1: Do not match on -rc versionsFabio Estevam2024-01-091-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, the upstream check gives incorrect results: $ devtool latest-version libusb1 ... INFO: Current version: 1.0.26 INFO: Latest version: 1.0.27 There is no 1.0.27 release yet, only 1.0.27-rc1. Anuj Mittal has submitted the fix in v2: https://lists.openembedded.org/g/openembedded-core/message/192683 but the original version was applied instead. Fix it by passing "$" to make an exact match on the version. With this change applied, devtool reports the correct latest version: INFO: Current version: 1.0.26 INFO: Latest version: 1.0.26 (From OE-Core rev: 81b97e4727592e4abbbab284b8d8161c1eda52b8) Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap-ng-python: upgrade 0.8.3 -> 0.8.4Yi Zhao2024-01-071-1/+1
| | | | | | | | | | | | | | | | ChangeLog: - In capng_change_id, clear PR_SET_KEEPCAPS if returning an error - pscap: add -p option for reporting a specified process - Annotate function prototypes to warn if results are unused - Drop python2 support * Remove "--with-python" option as python2 support was dropped. (From OE-Core rev: ee0eab240976f3bd0c9050694524336368c96201) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap-ng: upgrade 0.8.3 -> 0.8.4Yi Zhao2024-01-072-2/+2
| | | | | | | | | | | | | | | | ChangeLog: - In capng_change_id, clear PR_SET_KEEPCAPS if returning an error - pscap: add -p option for reporting a specified process - Annotate function prototypes to warn if results are unused - Drop python2 support * Remove "--with-python" option as python2 support was dropped. (From OE-Core rev: 8d2fbe1de759d36a8aeb184aaf89bb7c14fb3760) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* bmap-tools: Upgrade to 3.7Fabio Estevam2024-01-031-3/+3
| | | | | | | | | | | | Upgrade to version 3.7. The COPYING file has been renamed as LICENSE, so adapt LIC_FILES_CHKSUM accordingly. (From OE-Core rev: 38e3d8f2f79a667dddf820f63c67715a5b096594) Signed-off-by: Fabio Estevam <festevam@denx.de> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* aspell: upgrade 0.60.8 -> 0.60.8.1Wang Mingyu2024-01-012-106/+2
| | | | | | | | | | | | | | | | | | | CVE-2019-25051.patch removed since it's included in 0.60.8.1 Changelog: ============ -Fix memory leak in suggestion code introduced in 0.60.8. -Various documentation fixes. -Fix various warnings when compiling with -Wall. -Fix two buffer overflows found by Google's OSS-Fuzz. -Other minor updates. (From OE-Core rev: ec3c8642f71b470936b6dd29331afa467ab865c7) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Disable test 1091 due to intermittent failuresRichard Purdie2023-12-301-0/+2
| | | | | | | | Disable another test that intermittently fails on the autobuilder. (From OE-Core rev: 8d169e13f7e2eb6511f0ac98da63b060c6c0d53a) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libseccomp: remove redundant PV assignmentRoss Burton2023-12-241-2/+0
| | | | | | | (From OE-Core rev: 0661d29a6482d9534d221b7d3d0e124cad62b13a) Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* appstream: Upgrade 0.16.3 -> 1.0.0Markus Volk2023-12-233-46/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - remove backport patch - update 0001-remove-hardcoded-path.patch - fix api-documentation Version 1.0.0 ~~~~~~~~~~~~~~ Released: 2023-11-11 Notes: * This version breaks API and bumps the SONAME of libappstream! Applications using AppStream will have to be ported to the new API. The 1.0 release is coinstallable with the stable 0.16.x series. Features: * Autoformat C and C++ sources * Remove all deprecated symbols * Drop support for many deprecated AppStream XML features * Use GPtrArray to expose keywords list * Add length argument to raw metadata parsing functions * Add component array container class * Remove named values for display_length relations * Make AsPool only accept/return component boxes * Port all API away from per-entity locale overrides * Reduce appstream.conf to its essentials, make it work on stateless systems * Hide search engine details from public API * Wrap release entries in AsReleaseList container class * Make AsMetadata handle AsReleaseList objects * Refactor is_satisfied result into new RelationCheckResult class * Add a method to check all relations of a component and get the result * Add algorithm to score compatibility with a system, add chassis templates * ascli: Add new check-syscompat command to check chassis compatibility * Implement environment property for component screenshots * Autogenerate translatable DE and gui-environment-style C arrays * Expose more advanced markup conversion function, update function names * Allow BLAKE3 and SHA512 checksums for release artifacts * Stop supporting mailto: URLs in <url/> tags * validator: Improve API and simplify it * validator: Parse XML in pedantic mode when validating * validator: Check screenshot environment property * validator: Only apply summary-has-dot-suffix check to untranslated strings * compose: Allow creating metadata with complete URLs and no base URL * spdx: Add API to retrieve a translated license name from an SPDX ID * qt: Switch to building with Qt6 * qt: Make it possible to iterate ComponentBox * qt: Implement AppStream::ComponentBox::erase * qt: Allow concatenating two ComponentBoxes * qt: Allow loading Pool asynchronously * qt: Use ComponentBox/Releases in Qt bindings as well * qt: Add support for the new API to check relation satisfaction * qt: Maintenance and namespace fixes, use cPtr() to get C pointers everywhere * bundle: Add linglong as a new type of bundle * Add GUI environment IDs for macOS and Microsoft Windows * validator: Check if Release Description is inside description tag * validator: Add validation for content_rating * Add support for building on Win32 * win32: change some file/path-related code for portability * Implement the developer element for unique developer IDs * Implement scaling factor for screenshots * component-box: Allow removal of components by-index * Implement support for external references and citations * Implement usertags for release data as well * Move ValueFlags to the context, instead of tieing them to components * pool: search: Add additional weight for exact substring matches on names * sysinfo: Add memory size detection support for macOS * Add support for Zstd for on-disk data compression * utils: Make tar unpacker independent of zstd binary presence * Drop Python2 provided tag support * data: Add ‘Endless’ to the list of desktops * Add NetBSD support Specification: * Drop (most) deprecated information * docs: Clarify environment-based screenshot ordering * Add new 'snapshot' release kind * docs: Build all API documentation with gi-docgen * spec: Document the new "developer" element * spec: Document the "reference" tag for registry references * docs: Add example of YAML for references elements * Allow hyphens in the last segment of a component-ID * docs: Drop outdated information from l10n quickstart guide Bugfixes: * meson: check for docbook xsl stylesheets * Fix tweaking of appstream.pc when building as subproject * Fix crash in asc_l10n_search_translations_qt() * qt: Make Qt6 dependency a system dependency. * meson: do not rely on an exe wrapper * meson: do not -I/usr/include when !stemmer * meson: Prevent building attempts with MSVC * meson: Use an SPDX license indentifier in project(license:) * Add meson overrides * compose: Set lower-cased CID for synthesized components again * compose: Set lower-cased CID in desktop-entry parse function * compose: Honor prefix in font search * compose: Select the correct default icon glyphs for fonts * Don't crash when non-YAML documents are read as YAML * Do not override default-priority when parsing multiple metadata files * Ensure stemmer always has the right locale and token-search works * Require a more recent libxmlb to avoid crashes * Rename component get_releases to indicate that releases may not be loaded from the web * Prevent string-id validation functions from matching source comments * Don't define _POSIX_C_SOURCE when building for NetBSD Miscellaneous: * Explain metainfo-ancient error in more detail * Make sed invocation more portable * Add FreeBSD CI * Allow variable shadowing in C++ code * Drop the catchall as-enums unit * vapi: Drop unneeded metadata * Make AsMetadata return a component box for multiple components * apt: Make item descriptions more human-friendly * Streamline README Contributors: Aleix Pol, Alessandro Astone, Alexander Wilms, Dan Yeaw, Daniel Drake, Gary Wang, Gleb Popov, Ingo Klöcker, JakobDev, Jeremy Whiting, Kai Uwe Broulik, Marc-André Lureau, Matthias Klumpp, Philip Withnall, Tao Zuhong, Thomas Klausner, Tristan Partin, and thanks to all translators mentioned in the respective l10n files! Version 0.16.4 ~~~~~~~~~~~~~~ Released: 2023-11-10 Features: * Allow hyphens in the last segment of a component-ID * Implement the developer element for unique developer IDs * Add meson overrides Bugfixes: * meson: Prevent building attempts with MSVC * meson: Avoid potentially bad sed backup filename when fixing .pc file Miscellaneous: * Make sed invocation more portable Contributors: Gleb Popov, Matthias Klumpp, Tristan Partin (From OE-Core rev: 104b38e204729a08a160752c12933739d9fbb92a) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* debianutils: upgrade 5.14 -> 5.15Yi Zhao2023-12-231-1/+1
| | | | | | | | | | | | ChangeLog: * Shellscript compatibility with BSD and Mac, for "which -s" * d/tests/smoke: Update to test "which -s" (From OE-Core rev: 06a2f55337d36c2fb18cd360fa70908542114d44) Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* diffoscope: upgrade 252 -> 253Wang Mingyu2023-12-231-1/+1
| | | | | | | | | | | | | | | | Changelog: ============ * Improve DOS/MBR extraction by adding support for 7z. * Process objdump symbol comment filter inputs as the Python "bytes" type (and not str). * Add a missing RequiredToolNotFound import. * Update copyright years. (From OE-Core rev: 6452368935b103a39ed7c603bf763b3877544008) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* p11-kit: upgrade 0.25.2 -> 0.25.3Wang Mingyu2023-12-231-1/+1
| | | | | | | | | | | | | Changelog: ============ * rpc: fix serialization of NULL mechanism pointer * fix meson build failure in macOS (appleframeworks not found) (From OE-Core rev: b02e282d4c8d380b53555ec65de7b12ea7c5ac10) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gpgme: upgrade 1.23.1 -> 1.23.2Wang Mingyu2023-12-238-41/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ * Preserve more specific existing failure code. * qt: Start dirmngr with gpgconf to avoid multiple instances. * qt: On Windows, use UTF-8 when logging the error text. * qt: Remove left-over partial files more persistently. * qt: Use a temporary file name when creating signed or encrypted archives. * qt: Build Qt 6 bindings with -fPIC if requested or Qt 6 was built with this flag. 0001-autogen.sh-remove-unknown-in-version.patch0001-pkgconfig.patch 0001-pkgconfig.patch 0001-use-closefrom-on-linux-and-glibc-2.34.patch 0003-Correctly-install-python-modules.patch 0005-gpgme-config-skip-all-lib-or-usr-lib-directories-in-.patch 0006-fix-build-path-issue.patch 0008-do-not-auto-check-var-PYTHON.patch refreshed for 1.23.2 (From OE-Core rev: 178dab3a479729aa0980a40846a81f5f3da8d709) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libseccomp: upgrade 2.5.4 -> 2.5.5Wang Mingyu2023-12-231-2/+2
| | | | | | | | | | | | Changelog: ========== Update the syscall table for Linux v6.7-rc3 (From OE-Core rev: 35c92894ec43fa58b0a8e0aab5974d1113f87283) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libnl: upgrade 3.8.0 -> 3.9.0Wang Mingyu2023-12-231-1/+1
| | | | | | | | (From OE-Core rev: 9837ab2d5999ffe36652e5fb473e0566ab1ad7cd) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libatomic-ops: upgrade 7.8.0 -> 7.8.2Wang Mingyu2023-12-231-1/+1
| | | | | | | | | | | | | | | | | | | | | Changelog: ========= * Eliminate 'atomic_thread_fence is unsupported with tsan' gcc-11 warning * Eliminate 'comparing signed/unsigned values' lcc warning in add_chunk_as * Fix 'undefined reference to AO_pt_lock' if configure is using clang-16 * Fix 'undefined reference to __atomic_load/store/cas_16' Mingw64-gcc error * Fix 'undefined reference' linker errors if shared build on OpenBSD (CMake) * Fix get_chunk for case of mmap area is located before AO_initial_heap * Fix typo in AO_HAVE_compare_and_swap_double name in atomic_ops_stack.h * Fix typo in comment of run_one_test of test_stack * Fix typos in comments of atomic_ops_malloc.c and atomic_ops_stack.c/h * Update cmake minimum required version to 3.5 (From OE-Core rev: 1dea52da8cd00e6619890b8c4dcece8b5ff83f74) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: Disable two intermittently failing testsRichard Purdie2023-12-211-0/+6
| | | | | | | | These two tests seem to fail semi-regularly so just stop running them. (From OE-Core rev: 1bfa564f1aa8b865f6c3ae3501e6d5f6cc0542eb) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* curl: update to 8.5.0Lee Chee Yang2023-12-212-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | update include fix for CVE-2023-46218. skip test 1477 which check that libcurl-errors.3 and the public header files have the same set of error codes. Notes: This test is not included in the source tarball. https://github.com/curl/curl/issues/12462 Release Notes: curl and libcurl 8.5.0 Public curl releases: 253 Command line options: 258 curl_easy_setopt() options: 303 Public functions in libcurl: 93 Contributors: 3039 This release includes the following changes: o gnutls: support CURLSSLOPT_NATIVE_CA [31] o HTTP3: ngtcp2 builds are no longer experimental [77] This release includes the following bugfixes: o appveyor: make VS2008-built curl tool runnable [93] o asyn-thread: use pipe instead of socketpair for IPC when available [4] o autotools: accept linker flags via `CURL_LDFLAGS_{LIB,BIN}` [128] o autotools: avoid passing `LDFLAGS` twice to libcurl [127] o autotools: delete LCC compiler support bits [137] o autotools: fix/improve gcc and Apple clang version detection [136] o autotools: stop setting `-std=gnu89` with `--enable-warnings` [135] o autotools: update references to deleted `crypt-auth` option [46] o BINDINGS: add V binding [54] o build: add `src/.checksrc` to source tarball [1] o build: add more picky warnings and fix them [172] o build: always revert `#pragma GCC diagnostic` after use [143] o build: delete `HAVE_STDINT_H` and `HAVE_INTTYPES_H` [107] o build: delete support bits for obsolete Windows compilers [106] o build: fix 'threadsafe' feature detection for older gcc [19] o build: fix builds that disable protocols but not digest auth [174] o build: fix compiler warning with auths disabled [85] o build: fix libssh2 + `CURL_DISABLE_DIGEST_AUTH` + `CURL_DISABLE_AWS` [120] o build: picky warning updates [125] o build: require Windows XP or newer [86] o cfilter: provide call to tell connection to forget a socket [65] o checksrc.pl: support #line instructions o CI: add autotools, out-of-tree, debug build to distro check job [14] o CI: ignore test 286 on Appveyor gcc 9 build [6] o cmake: add `CURL_DISABLE_BINDLOCAL` option [146] o cmake: add test for `DISABLE` options, add `CURL_DISABLE_HEADERS_API` [138] o cmake: dedupe Windows system libs [114] o cmake: fix `HAVE_H_ERRNO_ASSIGNABLE` detection [2] o cmake: fix CURL_DISABLE_GETOPTIONS [12] o cmake: fix multiple include of CURL package [96] o cmake: fix OpenSSL quic detection in quiche builds [56] o cmake: option to disable install & drop `curlu` target when unused [72] o cmake: pre-fill rest of detection values for Windows [50] o cmake: replace `check_library_exists_concat()` [23] o cmake: speed up threads setup for Windows [68] o cmake: speed up zstd detection [69] o config-win32: set `HAVE_SNPRINTF` for mingw-w64 [123] o configure: better --disable-http [80] o configure: check for the fseeko declaration too [55] o conncache: use the closure handle when disconnecting surplus connections [173] o content_encoding: make Curl_all_content_encodings allocless [101] o cookie: lowercase the domain names before PSL checks [160] o curl.h: delete Symbian OS references [162] o curl.h: on FreeBSD include sys/param.h instead of osreldate.h [21] o curl.rc: switch out the copyright symbol for plain ASCII [167] o curl: improved IPFS and IPNS URL support [87] o curl_easy_duphandle.3: clarify how HSTS and alt-svc are duped [99] o Curl_http_body: cleanup properly when Curl_getformdata errors [152] o curl_setup: disallow Windows IPv6 builds missing getaddrinfo [57] o curl_sspi: support more revocation error names in error messages [95] o CURLINFO_PRETRANSFER_TIME_T.3: fix time explanation [181] o CURLMOPT_MAX_CONCURRENT_STREAMS: make sure the set value is within range [165] o CURLOPT_CAINFO_BLOB.3: explain what CURL_BLOB_COPY does [113] o CURLOPT_WRITEFUNCTION.3: clarify libcurl returns for CURL_WRITEFUNC_ERROR [45] o CURPOST_POSTFIELDS.3: add CURLOPT_COPYPOSTFIELDS in SEE ALSO o docs/example/keepalive.c: show TCP keep-alive options [73] o docs/example/localport.c: show off CURLOPT_LOCALPORT [83] o docs/examples/interface.c: show CURLOPT_INTERFACE use [84] o docs/libcurl: fix three minor man page format mistakes [26] o docs/libcurl: SYNSOPSIS cleanup [150] o docs: add supported version for the json write-out [92] o docs: clarify that curl passes on input unfiltered [47] o docs: fix function typo in curl_easy_option_next.3 [36] o docs: KNOWN_BUGS cleanup o docs: make all examples in all libcurl man pages compile [175] o docs: preserve the modification date when copying the prebuilt man page [89] o docs: remove bold from some man page SYNOPSIS sections [90] o docs: use SOURCE_DATE_EPOCH for generated manpages [16] o doh: provide better return code for responses w/o addresses [133] o doh: use PIPEWAIT when HTTP/2 is attempted [63] o duphandle: also free 'outcurl->cookies' in error path [122] o duphandle: make dupset() not return with pointers to old alloced data [109] o duphandle: use strdup to clone *COPYPOSTFIELDS if size is not set [132] o easy: in duphandle, init the cookies for the new handle [131] o easy: remove duplicate wolfSSH init call [37] o easy_lock: add a pthread_mutex_t fallback [13] o examples/rtsp-options.c: add [157] o fopen: create new file using old file's mode [153] o fopen: create short(er) temporary file name [155] o getenv: PlayStation doesn't have getenv() [41] o GHA: move mod_h2 version in CI to v2.0.25 [43] o hostip: show the list of IPs when resolving is done [35] o hostip: silence compiler warning `-Wparentheses-equality` [62] o hsts: skip single-dot hostname [67] o HTTP/2, HTTP/3: handle detach of onoing transfers [134] o http2: header conversion tightening [33] o http2: provide an error callback and failf the message [53] o http2: safer invocation of populate_binsettings [8] o http: allow longer HTTP/2 request method names [112] o http: avoid Expect: 100-continue if Upgrade: is used [15] o http: consider resume with CURLOPT_FAILONERRROR and 416 to be fine [81] o http: fix `-Wunused-parameter` with no auth and no proxy [149] o http: fix `-Wunused-variable` compiler warning [115] o http: fix empty-body warning [76] o http_aws_sigv4: canonicalise valueless query params [88] o hyper: temporarily remove HTTP/2 support [139] o INSTALL: update list of ports and CPU archs o IPFS: fix IPFS_PATH and file parsing [119] o keylog: disable if unused [145] o lib: add and use Curl_strndup() [97] o lib: apache style infof and trace macros/functions [71] o lib: fix gcc warning in printf call [7] o libcurl-errors.3: sync with current public headers [156] o libcurl-thread.3: simplify the TLS section [79] o Makefile.am: drop vc10, vc11 and vc12 projects from dist [103] o Makefile.mk: fix `-rtmp` option for non-Windows o mime: store "form escape" as a single bit [170] o misc: fix -Walloc-size warnings [118] o msh3: error when built with CURL_DISABLE_SOCKETPAIR set [61] o multi: during ratelimit multi_getsock should return no sockets [182] o multi: use pipe instead of socketpair to *wakeup() [18] o ngtcp2: fix races in stream handling [178] o ngtcp2: ignore errors on unknown streams [158] o ntlm_wb: use pipe instead of socketpair when possible [44] o openldap: move the alloc of ldapconninfo to *connect() [29] o openldap: set the callback argument in oldap_do [30] o openssl: avoid BN_num_bits() NULL pointer derefs [9] o openssl: fix building with v3 `no-deprecated` + add CI test [161] o openssl: fix infof() to avoid compiler warning for %s with null [70] o openssl: identify the "quictls" backend correctly [82] o openssl: include SIG and KEM algorithms in verbose [52] o openssl: make CURLSSLOPT_NATIVE_CA import Windows intermediate CAs [58] o openssl: two multi pointer checks should probably rather be asserts [91] o openssl: when a session-ID is reused, skip OCSP stapling [142] o page-footer: clarify exit code 25 [51] o projects: add VC14.20 project files [104] o pytest: use lower count in repeat tests [98] o quic: make eyeballers connect retries stop at weird replies [140] o quic: manage connection idle timeouts [5] o quiche: use quiche_conn_peer_transport_params() [116] o rand: fix build error with autotools + LibreSSL [111] o resolve.d: drop a multi use-sentence [100] o RTSP: improved RTP parser [32] o rustls: implement connect_blocking [154] o sasl: fix `-Wunused-function` compiler warning [124] o schannel: add CA cache support for files and memory blobs [121] o setopt: check CURLOPT_TFTP_BLKSIZE range on set [171] o setopt: remove outdated cookie comment [64] o setopt: remove superfluous use of ternary expressions [169] o socks: better buffer size checks for socks4a user and hostname [20] o socks: make SOCKS5 use the CURLOPT_IPRESOLVE choice [38] o symbols-in-versions: the CLOSEPOLICY options are deprecated o test1683: remove commented-out check alternatives o test3103: add missing quotes around a test tag attribute o test613: stop showing an error on missing output file o tests/README: SOCKS tests are not using OpenSSH, it has its own server [48] o tests/server: add more SOCKS5 handshake error checking [27] o tests: Fix Windows test helper tool search & use it for handle64 [17] o tidy-up: casing typos, delete unused Windows version aliases [144] o tool: fix --capath when proxy support is disabled [28] o tool: support bold headers in Windows [117] o tool_cb_hdr: add an additional parsing check [129] o tool_cb_prg: make the carriage return fit for wide progress bars [159] o tool_cb_wrt: fix write output for very old Windows versions [24] o tool_getparam: limit --rate to be smaller than number of ms [3] o tool_operate: do not mix memory models [108] o tool_operate: fix links in ipfs errors [22] o tool_parsecfg: make warning output propose double-quoting [164] o tool_urlglob: fix build for old gcc versions [25] o tool_urlglob: make multiply() bail out on negative values [11] o tool_writeout_json: fix JSON encoding of non-ascii bytes [179] o transfer: abort pause send when connection is marked for closing [183] o transfer: avoid calling the read callback again after EOF [130] o transfer: only reset the FTP wildcard engine in CLEAR state [42] o url: don't touch the multi handle when closing internal handles [40] o url: find scheme with a "perfect hash" [141] o url: fix `-Wzero-length-array` with no protocols [147] o url: fix builds with `CURL_DISABLE_HTTP` [148] o url: protocol handler lookup tidy-up [66] o url: proxy ssl connection reuse fix [94] o urlapi: avoid null deref if setting blank host to url encode [75] o urlapi: skip appending NULL pointer query [74] o urlapi: when URL encoding the fragment, pass in the right length [59] o urldata: make maxconnects a 32 bit value [166] o urldata: move async resolver state from easy handle to connectdata [34] o urldata: move cookielist from UserDefined to UrlState [126] o urldata: move hstslist from 'set' to 'state' [105] o urldata: move the 'internal' boolean to the state struct [39] o vssh: remove the #ifdef for Curl_ssh_init, use empty macro o vtls: cleanup SSL config management [78] o vtls: consistently use typedef names for OpenSSL structs [176] o vtls: late clone of connection ssl config [60] o vtls: use ALPN "http/1.1" for HTTP/1.x, including HTTP/1.0 [102] o VULN-DISCLOSURE-POLICY: escape sequences are not a security flaw [110] o windows: use built-in `_WIN32` macro to detect Windows [163] o wolfssh: remove redundant static prototypes [168] o wolfssl: add default case for wolfssl_connect_step1 switch [49] o wolfssl: require WOLFSSL_SYS_CA_CERTS for loading system CA [10] (From OE-Core rev: 44f4e93d25f208d0be4c53d02113b7d0ebfffa4a) Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* gpgme: disable python support (until upstream fixes 3.12 compatibility)Alexander Kanavin2023-12-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | The only consumer in oe-core was dnf, and latest dnf releases no longer use it. There are no consumers in meta-oe. gpgme's python support is generally a pain to support, and lags behind upstream python versions. It was enabled in commit fc6c81da79897c95a9c81960a1dee49517f2562a Author: Mark Hatle <mark.hatle@windriver.com> Date: Tue Mar 7 12:54:33 2017 -0600 gpgme: Fix issue building for the target which wasn't prompted by any consumer requiring python, but rather to correct build errors in absence of specific configuration passed in. (From OE-Core rev: 6d82ce8c16e724d5bba088b3a3d05c1690e47862) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libcap-ng-python: depend on setuptools to obtain distutils copyAlexander Kanavin2023-12-211-1/+2
| | | | | | | | | | | | Upstream has made the needed fixes (not easy to backport), but hasn't released a new version with them. Distutils has been removed from the core python library in 3.12.0. (From OE-Core rev: 234a02419bce1f46deb202ce0a3bbe38835e0997) Signed-off-by: Alexander Kanavin <alex@linutronix.de> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* enchant2: upgrade 2.6.2 -> 2.6.4Anuj Mittal2023-12-201-3/+1
| | | | | | | | | | | | pkgdatadir is a versioned directory by default now so we don't need to pass it to EXTRA_OEMAKE. https://github.com/AbiWord/enchant/commit/6e4a8df5cbf80fd449f1857ac1065d3235f1139f (From OE-Core rev: 3a58f8055374f89d9c91faa328093394aecfe2a4) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* libusb1: fix upstream version checkAnuj Mittal2023-12-201-0/+1
| | | | | | | | | Fix regex to not match release candidates. (From OE-Core rev: 1423a69a1ddc54c62ca3431f062b35d2fef68ac2) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* sqlite3: upgrade 3.44.0 -> 3.44.2Anuj Mittal2023-12-201-1/+1
| | | | | | | (From OE-Core rev: 915e54859ff50eafca8f4d27af7e460d042b112a) Signed-off-by: Anuj Mittal <anuj.mittal@intel.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* attr: Fix build with latest muslKhem Raj2023-12-132-0/+36
| | | | | | | | | | Include libgen.h to get basename() signature (From OE-Core rev: bc05ad35c02ac63b6c5428111aec3f455b17d75f) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: Separate out gtk4 pieces of vte into individual packagesKhem Raj2023-12-041-1/+10
| | | | | | | | | | | | This avoids adding gtk4 dependencies when image may only desire the gtk3 pieces of vte. (From OE-Core rev: d2c4e8cb85c6a5ca37c7990f879c3b650df5770b) Signed-off-by: Khem Raj <raj.khem@gmail.com> Cc: Ross Burton <ross.burton@arm.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
* vte: Upgrade to 0.74.1Khem Raj2023-12-041-2/+3
| | | | | | | | | | | * Inherit systemd class * Add packageconfig for fribidi support (From OE-Core rev: e3cd856f1ef66aefe2f5f6f1e7771376616d721a) Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>