linux/meta-openembedded.git/meta-oe/recipes-extended/flatpak, branch styhead-next

flatpak-xdg-utils: upgrade 1.0.5 -> 1.0.6

2024-09-10T14:20:36+00:00

Changelog: ========== - flatpak-spawn now supports --sandbox-a11y-own-name (if supported by portal) - flatpak-spawn prints a useful error when --host isn't permitted - fixed minor leak in flatpak-spawn Signed-off-by: Wang Mingyu Signed-off-by: Khem Raj

cleanup after polkit fix

2024-09-01T22:54:30+00:00

This commit removes the need to fix polkit permissions: https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=d5e90541f8e35916abc930b2da6de037b23d51a1 That allows to do some cleanup Signed-off-by: Khem Raj

flatpak: update 1.15.9 -> 1.15.10

2024-08-21T15:45:47+00:00

Dependencies: In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.10.0 is required. This version adds a new feature which is required by the security fix in this release. Security fixes: Don't follow symbolic links when mounting persistent directories (--persist option). This prevents a sandbox escape where a malicious or compromised app could edit the symlink to point to a directory that the app should not have been allowed to read or write. (CVE-2024-42472, GHSA-7hgv-f2j8-xw87) Documentation: Mark the 1.12.x and 1.10.x branches as end-of-life (#5352) Other bug fixes: Fix several memory leaks (#5883, #5884) Internal changes: Record a log file when running build-time tests with AddressSanitizer (#5884) Add initial suppressions file for AddressSanitizer (#5884) Signed-off-by: Markus Volk Signed-off-by: Khem Raj

flatpak: update 1.15.8 -> 1.15.9

2024-07-29T18:01:43+00:00

- flatpak now uses wrap files instead of git submodules to fetch bwrap and xdg-dbus-proxy For reproducibility reasons, this cannot be done. Add external binaries and configure like recommended below: Dependencies: bubblewrap and xdg-dbus-proxy are now provided by Meson wrap files instead of being directly vendored via git submodule. If downloading external software during build is not allowed in your environment, please install suitable versions of bubblewrap and xdg-dbus-proxy separately, then configure Flatpak with options similar to -Dsystem_bubblewrap=bwrap -Dsystem_dbus_proxy=xdg-dbus-proxy (most major distributions package it like this already). Enhancements: If xdg-dbus-proxy is new enough (0.1.6 or later, not yet released), allow two broadcast signals from AT-SPI by default, allowing bus traffic to be reduced. If xdg-dbus-proxy is older, this change will have no practical effect but is harmless. (#5828) Install csh profile snippet (#5753) Bug fixes: Expand the list of environment variables that Flatpak apps do not inherit from the host system (#5765, #5785) Take time zone information from $TZDIR if set (#5850) Fix a memory leak since 1.15.7 when reloading D-Bus configuration (#5856) Fix a memory leak when running flatpak permissions (#5844) Fix memory leaks in flatpak update (#5816) Fix memory leaks when installing packages (#5811) Use more similar translatable strings for some error messages (#5748) Document flatpak config --set languages '*all*' correctly: it is really *all* (or equivalently *), not just all (#5836) Fix a misleading comment in the test for CVE-2024-32462 (#5779) Fix a copy/paste error in the 1.15.7 release notes On systems where subdirectories of /sys have been made inaccessible, continue without them (#5138) Make tests more compatible with non-GNU shell utilities (#5812) Translation updates: ka (#5873), hi (#5838), pt_BR (#5877), zh_CN (#5843) Internal changes: libglnx and variant-schema-compiler are now managed as git subtree instead of git submodule. Maintainers and contributors, please see subprojects/README.md for details of how to interact with these. In particular this means that submodules no longer need to be set up before working on a git clone. (#5800, #5845) Split library code into more, smaller translation units, reducing internal circular dependencies (#5409, #5801, #5803) Add some convenience macros in the test suite (#5693) Minor internal robustness improvement (#5833) Add configuration for Github Codespaces (#5767) Improve CI configuration (#5791) Work around infrastructure issues in third-party apt repositories used by default in Github Workflows (#5786) Signed-off-by: Markus Volk Signed-off-by: Khem Raj

flatpak: add PACKAGECONFIG for dconf

2024-07-08T15:40:19+00:00

Disable by default to avoid a requirement for meta-gnome Signed-off-by: Markus Volk Signed-off-by: Khem Raj

flatpak: add PACKAGECONFIG knob for malcontent

2024-05-21T21:15:11+00:00

Signed-off-by: Markus Volk Signed-off-by: Khem Raj

flatpak;xdg-desktop-portal: add missing runtime dependency on fuse3-utils

2024-05-19T15:27:52+00:00

Signed-off-by: Markus Volk Signed-off-by: Khem Raj

flatpak: update 1.15.6 -> 1.15.8

2024-05-19T15:27:51+00:00

- remove included patches - set path for fusermount3 to avoid requirement for fuse3-native. This is needed since: https://github.com/flatpak/flatpak/commit/2cb17b4eb82ecedaa98b5b7f954cf3e52fa95682 Changes in 1.15.8 ~~~~~~~~~~~~~~~~~ Security fixes: * Don't allow an executable name to be misinterpreted as a command-line option for bwrap(1). This prevents a sandbox escape where a malicious or compromised app could ask xdg-desktop-portal to generate a .desktop file with access to files outside the sandbox. (CVE-2024-32462) Other bug fixes: * Pass the -export-dynamic linker option as -Wl,-export-dynamic, fixing build failures with clang 18 and lld 18 (#5760) * Fix a double-free when installation is cancelled (#5763) * Fix installed-tests failure with "FUSERMOUNT: unbound variable" (#5751) * Translation updates: pt_BR (#5762), tr (#5761) Changes in 1.15.7 ~~~~~~~~~~~~~~~~~ Released: 2024-03-27 Dependencies: * The Meson build system is now required. Compiling with Autotools is no longer possible. * In distributions that compile Flatpak to use a separate bubblewrap (bwrap) executable, version 0.9.0 is recommended. Several of the bug fixes listed below will not be active if an older version is used. * In distributions that compile Flatpak to use a separate xdg-dbus-proxy executable, version 0.1.5 is recommended. * If libmalcontent (parental controls) is enabled, it must be version 0.5.0 or later. New features: * Automatically remove obsolete driver versions and other autopruned refs (#5632) * `--socket=inherit-wayland-socket` (#5614) * Automatically reload D-Bus session bus configuration after installing or upgrading apps, to pick up any exported D-Bus services (#3342) Bug fixes: * Update included copy of bubblewrap to version 0.9.0: * `--symlink` is now idempotent, meaning it succeeds if the symlink already exists and already has the desired target (#2387, #3477, #5255) * Report a better error message if `mount(2)` fails with `ENOSPC` * Fix a double-close on error reading from `--args`, `--seccomp` or `--add-seccomp-fd` argument * Improve memory allocation behaviour * Silence various compiler warnings * Update included copy of bubblewrap to version 0.1.5: * Fix handling of long object paths * Don't parse `` as the application name (#5700) * Don't refuse to start apps when there is no D-Bus system bus available (#5076) * Don't try to repeat migration of apps whose data was migrated to a new name and then deleted (#5668) * Improve handling of mixed locales on systems with systemd-localed (#5497) * Improve display of ellipsized columns in wide terminals (#5722) * Make `flatpak info -e` look for extensions in all installations (#5670) * Fix warnings from newer GLib versions (#5660, #5737) * Always set the `container` environment variable (#5610) * Always let the app inherit redirected file descriptors (#5626) * In `flatpak ps`, add xdg-desktop-portal-gnome to the list of backends we'll use to learn which apps are running in the background (#5729) * Don't use `WAYLAND_SOCKET` unless given `--socket=inherit-wayland-socket` (#5614) * Use `fusermount3` if compiled with FUSE 3, overridable with `-Dsystem_fusermount` compile-time option (#5104) * Avoid leaking a temporary variable from /etc/profile.d/flatpak.sh into the shell environment (#5574) * Improve async-signal safety (#5687) * Fix various memory leaks (#5683, #5690, #5691) * Avoid undefined behaviour of signed left-shift when storing object IDs in a hash table (#5738) * Detect the correct gtk-doc when cross-compiling (#5650) * Detect the correct wayland-scanner when cross-compiling (#5596) * Documentation improvements (#5659, #5677, #5682, #5664, #5719) * Skip more tests when FUSE isn't available (#5611) * Translation updates (#5602, #5707) Signed-off-by: Markus Volk Signed-off-by: Khem Raj

flatpak: remove unneeded RDEPENDS

2024-02-12T15:44:19+00:00

The build has been modified to use internal copies of bubblewrap and xdg-dbus-proxy. https://git.openembedded.org/meta-openembedded/commit/?h=master-next&id=9c68079a26b64b836bc6a28e422a1099f48726d2 We can additionally remove the RDEPENDS for these tools, since flatpak now creates its own copies of the files in /usr/libexec. Signed-off-by: Markus Volk Signed-off-by: Khem Raj

flatpak: fix gtk-doc build

2024-01-12T16:51:12+00:00

this fixes: | Run-time dependency gtk-doc found: NO (tried pkgconfig) | | ../git/meson.build:206:13: ERROR: Dependency "gtk-doc" not found, tried pkgconfig Signed-off-by: Markus Volk Signed-off-by: Khem Raj