summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* netcf: remove recipeAnuj Mittal2026-03-314-229/+0
| | | | | | | | | | | | | It isn't maintained anymore and requires workarounds when gnulib is updated. It was only used by libvirt and with the upstream [1] and meta-virt changes to not require it anymore, this can be dropped. [1] https://gitlab.com/libvirt/libvirt/-/commit/35d5b26aa433bd33f4b33be3dbb67313357f97f9 Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* tftp-hpa: upgrade 5.2 -> 5.3Yi Zhao2026-03-3117-260/+101
| | | | | | | | | * Use git instead of tarball in SRC_URI. * Update configuration options. * Clean up and refresh local patches. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* pidgin: drop obsolete CVE_STATUSGyorgy Sarvari2026-03-311-1/+0
| | | | | | | | The CVE is now tracked with a version by NVD, it is not needed to ignore it explicitly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gattlib: drop obsolete CVE_STATUSGyorgy Sarvari2026-03-311-3/+0
| | | | | | | | | The CVE is now tracked by NVD with a version that is earlier than the recipe, the vulnerability doesn't show up in the CVE report anymore. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-nltk: upgrade 3.9.3 -> 3.9.4Gyorgy Sarvari2026-03-311-1/+1
| | | | | | | | | | | | | | | | | | | Changes: * Support Python 3.14 * Fix bug in Levenshtein distance when substitution_cost > 2 * Fix bug in Treebank detokeniser re quote ordering * Fix bug in Jaro similarity for empty strings * Several security enhancements * Fix GHSA-rf74-v2fm-23pw: unbounded recursion in JSONTaggedDecoder * Implement TextTiling vocabulary introduction method (Hearst 1997) * Fix ALINE feature matrix errors and add comprehensive tests * Support multiple VerbNet versions, fix longid/shortid regex for VerbNet ids * Let downloader fallback to md5 when sha256 is unavailable * Several other minor bugfixes and code cleanups Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pyjwt: drop obsolete CVE_STATUSGyorgy Sarvari2026-03-311-1/+0
| | | | | | | | This CVE is disputed, and it is now tracked with an old version of the application, it doesn't show up in the CVE report anymore. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* kmscon: bump version to 9.3.3Adam Duskett2026-03-311-1/+3
| | | | | | | | | Changes: - zlib is now a mandatory dependency - freetype support added Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dovecot: upgrade 2.4.2 -> 2.4.3Gyorgy Sarvari2026-03-313-31/+35
| | | | | | | | | | | | | | | | | | Drop patch which is included in this release, and add a patch that adapts a lua api call to the lua version that is used in OE. License-Change: the unicode license text has been updated, there should be no material change. However while examining these changes, I noticed that some parts of the code are covered by licenses not mentined in the recipe. It should reflect all licenses now. Tis version contains fixes fox CVE-2025-59028, CVE-2025-59031, CVE-2026-24031, CVE-2026-27859, CVE-2026-27860, CVE-2026-27857, CVE-2026-27856 and CVE-2026-27855 Changelog: https://github.com/dovecot/core/blob/main/NEWS Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libtorrent-rasterbar: upgrade 2.0.11 -> 2.0.12Liu Yiding2026-03-312-2/+30
| | | | | | | | | | | | 1.Changelog https://github.com/arvidn/libtorrent/releases/tag/v2.0.12 2. Add 0001-Fix-Python3-site-packages-path-to-fix-package-QA-Iss.patch to fix package QA Issue: libtorrent-rasterbar-2.0.12-r0 do_package: QA Issue: libtorrent-rasterbar: Files/directories were installed but not shipped in any package: /lib/python3.14/site-packages/libtorrent.so Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libfaketime: upgrade 0.9.11 -> 0.9.12Liu Yiding2026-03-311-1/+1
| | | | | | | | Since 0.9.11: - Improved macOS compatibility (@usertam) Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* glibmm-2.68: upgrade 2.86.0 -> 2.88.0Liu Yiding2026-03-311-1/+1
| | | | | | | | NEWS: https://gitlab.gnome.org/GNOME/glibmm/-/blob/2.88.0/NEWS Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gjs: upgrade 1.84.1 -> 1.84.2Liu Yiding2026-03-311-1/+1
| | | | | | | | | | | | Version 1.84.2 -------------- - Closed bugs and merge requests: * GtkNotebook.pages GListModel is inaccessible from GJS [#686, !992, Philip Chimento] Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* kmsxx: update SRCREVSwamil Jain2026-03-311-1/+1
| | | | | | | Update SRCREV to pick the latest changes for kmsxx Signed-off-by: Swamil Jain <s-jain1@ti.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libtimezonemap: port to libsoup3Changqing Li2026-03-302-2/+98
| | | | | | | Backport patch to make libtimezonemap port to libsoup3 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libgdata: remove unmaintained recipeChangqing Li2026-03-302-1168/+0
| | | | | | | | | | | This recipe is unmaintained now, and gvfs already disable google option, so remove this recipe. [1] https://gitlab.gnome.org/GNOME/gvfs/-/merge_requests/266 [2] https://gitlab.gnome.org/Archive/libgdata/-/merge_requests/49 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gvfs: drop google optionChangqing Li2026-03-301-1/+1
| | | | | | | | | | | drop google option to remove dependency on libsoup-2.4, refer upstream commit [1], and disable google option explicitly [1] https://gitlab.gnome.org/GNOME/gvfs/-/merge_requests/266 [2] https://gitlab.gnome.org/Archive/libgdata/-/merge_requests/49 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* strongswan: update PACKAGECONFIG soupChangqing Li2026-03-301-1/+1
| | | | | | | | | | | | | Refer [1], this can fix do_configure failure: | checking for libsoup-3.0... no | configure: error: Package requirements (libsoup-3.0) were not met: | | Package 'libsoup-3.0' not found [1] https://github.com/strongswan/strongswan/commit/6ddabf52d5f335147601c7c2797da21820efafb8 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-ecdsa: Upgrade 0.19.1 -> 0.19.2Mingli Yu2026-03-301-1/+1
| | | | | | | | Changlog: https://github.com/tlsfuzzer/python-ecdsa/releases/tag/python-ecdsa-0.19.2 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* flatbuffers: Convert confusing append to override syntaxMichal Sieron2026-03-301-1/+1
| | | | | | | | | | While in this case `SYSROOT_PREPROCESS_FUNCS:class-target +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:class-target =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* pcsc-lite: Convert confusing append to override syntaxMichal Sieron2026-03-301-1/+1
| | | | | | | | | | While in this case `RPROVIDES:${PN}:class-native +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:class-native =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* syzkaller: Fix appends overriding valuesMichal Sieron2026-03-301-2/+2
| | | | | | | | Those LIC_FILES_CHKSUM:class-native(sdk) were actually overriding the rest of LIC_FILES_CHKSUM. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* syzkaller: Drop qemu-system-native dependencyMichal Sieron2026-03-301-4/+0
| | | | | | | | | Either I am missing something or it isn't needed in the build time and should maybe be a RRECOMMENDS:${PN}? Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Cc: Stefan Wiehler <me@sephalon.net> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* graphviz: Fix append overriding valueMichal Sieron2026-03-301-1/+1
| | | | | | | | | It actually overrides value of FILES:${PN} instead of appending. In this case SDKPATHNATIVE is the prefix so everything was still working, but let's convert it to a proper conditional append. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* postgresql: Fix append overriding valueMichal Sieron2026-03-301-1/+1
| | | | | | | | | `EXTRA_OECONF:sh4 += "--disable-spinlocks"` was supposed to simply disable unsupported spinlocks, but was also overriding other configuration defined in EXTRA_OECONF above. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libgusb: Convert confusing append to assignmentMichal Sieron2026-03-301-1/+1
| | | | | | | | | While in this case override caused by `EXTRA_OEMESON:class-native +=` is desirable, the `+=` can be confusing. Let's avoid that and use explicit assignment. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* postfix: Convert confusing appends to override syntaxMichal Sieron2026-03-301-2/+2
| | | | | | | | | | While in this case `RDEPENDS:class-target +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:class-target =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* pipewire: Convert confusing appends to override syntaxMichal Sieron2026-03-301-1/+1
| | | | | | | | | | While in this case `RRECOMMENDS:class-target +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:class-target =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* accountsservice: Convert confusing append to override syntaxMichal Sieron2026-03-301-1/+1
| | | | | | | | | | While in this case `EXTRA_OEMESON:libc-musl +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:libc-musl =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* aufs-util: Convert confusing append to override syntaxMichal Sieron2026-03-301-1/+1
| | | | | | | | | | While in this case `RRECOMMENDS:class-target +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:class-target =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gnome-bluetooth3: Fix RRECOMMENS typoMichal Sieron2026-03-301-1/+1
| | | | | Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* meta-python: Convert confusing appends to override syntaxMichal Sieron2026-03-309-10/+10
| | | | | | | | | | While in this case `RDEPENDS:class-target +=` wouldn't result in any unwanted override, there is no guarantee there won't be a change, which would be hidden by this override. To avoid any surprises in the future let's use `:append:class-target =` syntax here. Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* canopenterm: update to version 2.00Michael Fitzmayer2026-03-302-40/+5
| | | | | | | | | | - Switched to a new versioning scheme: 1.0.13 -> 2.00 - Reworked CAN interface handling by migrating to the CANvenient abstraction layer - Improved/updated auto-completion using isocline - Various bug fixes Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* Add recipe: canvenient 1.00Michael Fitzmayer2026-03-301-0/+41
| | | | | | | | | CANvenient is an abstraction layer for multiple CAN APIs on Windows and Linux. It provides a unified interface for CAN communication, allowing developers to write code that is portable across different platforms and CAN hardware. Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* Add recipe: isocline 1.0.9Michael Fitzmayer2026-03-301-0/+28
| | | | | | | Isocline is a pure C library that can be used as an alternative to the GNU readline library. Signed-off-by: Michael Fitzmayer <mail@michael-fitzmayer.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-fastapi-cli: upgrade 0.0.20 -> 0.0.24Liu Yiding2026-03-301-1/+1
| | | | | | | | Changelog https://github.com/fastapi/fastapi-cli/releases/tag/0.0.24 Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xfce4-session: Make gdk-pixbuf-csource availableMingli Yu2026-03-302-2/+35
| | | | | | | | Fixes the below error during do_configure: ../sources/xfce4-session-4.21.1/meson.build:50:21: ERROR: Program '/usr/bin/gdk-pixbuf-csource' not found or not executable Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nmap: make python3 RDEPENDS conditional on ndiffPaolo Barbolini2026-03-302-10/+2
| | | | | | | | | | | | | | When ndiff was disabled by default in 51e070301e ("nmap: disable ndiff"), the python3 RDEPENDS were left unconditional on the main package. This causes python3-difflib, python3-asyncio and python3-xml to be pulled into every image that includes nmap, even though ndiff is not built and the core nmap binary (C++) does not need Python. Gate the RDEPENDS behind the ndiff PACKAGECONFIG so that Python is only required when ndiff is actually enabled. Signed-off-by: Paolo Barbolini <paolo.barbolini@m4ss.net> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* grpc: upgrade 1.78.1 -> 1.80.0Peter Marko2026-03-301-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | License-Update: Re-scope secondary licenses [1] Release information [2]: This is release 1.80.0 (glimmering) of gRPC Core. Core * [ssl] Implement TLS private key signer in Python. (#41701) * [TLS Credentials]: Private Key Offload Implementation. (#41606) * Fix max sockaddr struct size on OpenBSD. (#40454) * [core] Enable EventEngine for Python by default, and EventEngine fork support in Python and Ruby. (#41432) * [TLS Credentials]: Create InMemoryCertificateProvider to update certificates independently. (#41484) * [Ruby] Build/test ruby 4.0 and build native gems with Ruby 4.0 support. (#41324) * [EventEngine] Remove an incorrect std::move in DNSServiceResolver constructor. (#41502) * [RR and WRR] enable change to connect from a random index. (#41472) * [xds] Implement gRFC A101. (#41051) C++ * [C++] Add SNI override option to C++ channel credentials options API. (#41460) [1] https://github.com/grpc/grpc/commit/fb53717dfa6b264e7f930bb5e9a7e5c86a31ed9e [2] https://github.com/grpc/grpc/releases/tag/v1.80.0 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xdg-desktop-portal-gnome: update 49.0 -> 50.0Markus Volk2026-03-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes in 50.0 ================= - Make the Clipboard portal return errors instead of succeeding - Fix a bug in the Print portal where it was accidentally closing fd 0 - Translation updates Changes in 50.rc ================= - Translation updates Changes in 50.beta ================= - Update libgxdp - Remove ellipse from the app chooser list header - Fix a memory leak in the Print portal implementation - Fix icon size in the Dynamic Launcher portal - Various fixes in the Remote Desktop portal - Fix monitor identification in VMs - Fix an issue with mismatching GVariant type unwrapping - Translation updates Changes in 50.alpha ================= - Fix a potential source of crashes in the ScreenCast portal code - Properly send the Global Shortcut activation token to the portal frontend - Update libgxdp to override GTK settings - Use a GNOME OS based CI template - Translation updates Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gnome-software: update 49.2 -> 50.0Markus Volk2026-03-302-58/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Version 50.0 ~~~~~~~~~~~~ Released: 2026-03-13 This is a stable release with updated translations: * Danish (Alan Mortensen) * English (United Kingdom) (Bruce Cowan) * Japanese (小山田 純 - Oyamada Jun) * Occitan (post 1500) (Quentin PAGÈS) * Polish (Victoria) * Portuguese (Hugo Carvalho) Version 50~rc ~~~~~~~~~~~~~ Released: 2026-02-27 This is an unstable release with the following changes: * Remember window size between app restarts * Updates page could be sometimes hidden after resume from suspend * Allow remove also Flatpak remotes from system installation * Correct check for add-ons when app's ID changed * Improve socket permissions checks for Flatpak apps This release also updates translations: * Basque (Asier Saratsua Garmendia) * Catalan (Jordi Mas, Victor Dargallo) * Chinese (China) (luming zh) * Czech (Daniel Rusek) * Finnish (Jiri Grönroos) * French (Lucien Ouoba, Guillaume Bernard) * Galician (Fran Diéguez) * German (Christian Kirbach) * Greek, Modern (1453-) (Efstathios Iosifidis) * Hungarian (Balázs Úr) * Interlingua (International Auxiliary Language Association) (Emilio Sepúlveda) * Italian (Davide Ferracin) * Japanese (Makoto Sakaguchi) * Kazakh (Baurzhan Muftakhidinov) * Korean (Seong-ho Cho) * Spanish (Daniel Mustieles) * Swedish (Anders Jonsson) * Turkish (Sabri Ünal) Version 50~beta ~~~~~~~~~~~~~~~ Released: 2026-01-30 This is an unstable release with the following changes: * Show install and uninstall progress of an add-on * Use lower thread priority when running in background * Fix possible crash on session permission change * Fix possible crash after XbSilo rebuild This release also updates translations: * Bulgarian (twlvnn kraftwerk) * Georgian (Ekaterine Papava) * Hebrew (Yaron Shahrabani) * Indonesian (Andika Triwidada) * Kazakh (Baurzhan Muftakhidinov) * Lithuanian (Aurimas Aurimas Černius) * Portuguese (Brazil) (Juliano de Souza Camargo) * Romanian (Antonio Marin) * Russian (Artur S0) * Slovenian (Martin) * Uighur (Abduqadir Abliz) * Ukrainian (Yuri Chornoivan) Version 50~alpha ~~~~~~~~~~~~~~~~ Released: 2026-01-15 This is an unstable release with the following changes: * Improve display of long repository names * Clarify warning about removing data when uninstalling an app * Fix minor UI issues when scrolling using gestures on a touchpad * Don’t show firmware warning on Installed Updates page * Several fixes to update history on rpm-ostree systems * Improve notifying the user about newly installed trivial flatpak app updates * Improve display of keyboard shortcuts * Split rpm-ostree changelogs by app * Display error toasts in the repositories dialog when something goes wrong This release also updates translations: * Catalan (Victor Dargallo) * Indonesian (Andika Triwidada) * Japanese (Makoto Sakaguchi) * Kazakh (Baurzhan Muftakhidinov) * Portuguese (Hugo Carvalho) * Portuguese (Brazil) (Juliano de Souza Camargo) * Russian (Artur S0) * Slovenian (Martin) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ostree: drop soup2 optionChangqing Li2026-03-301-6/+3
| | | | | | | | | | | | * libsoup-2.4 is deprecated, and some recipes already stop support of soup2, soup2 and soup3 cannot be used together * ostree upstream already stop test of soup2, refer [1] * Remove unnecessary comments, PACKAGECONFIG for ptest already set in bb [1] https://github.com/ostreedev/ostree/pull/3531 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* surf: upgrade to latest commitChangqing Li2026-03-302-52/+2
| | | | | | | | | | * upgrade to latest commit * latest commit support soup3 by default, refer [1] [1] https://git.suckless.org/surf/commit/7f1156f9b0977a72e523e031cf67a4946cfee9b2.html Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* yelp: drop soup2 optionChangqing Li2026-03-301-6/+0
| | | | | | | | | | | libsoup-2.4 is deprecated, and other recipes already stop support of soup2, soup2 and soup3 cannot be used together, and the latest version of yelp also drop option webkit2gtk-4-0 [1] https://gitlab.gnome.org/GNOME/yelp/-/commit/1b0ccdae25d0a788a2b44960db7273f2d1dacb4d Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dialog: 1.3-20250116 -> 1.3-20260107Hongxu Jia2026-03-301-1/+1
| | | | | Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* thunar-shares-plugin: add missing HOMEPAGEJason Schonberg2026-03-301-0/+1
| | | | | Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* bpftrace: Upgrade to 0.25.1 releaseKhem Raj2026-03-301-2/+3
| | | | | | | * This version works with llvm 22+ * Use system libbpf Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* bcc: Upgrade to 0.36.1Khem Raj2026-03-304-70/+64
| | | | | | | | * Drop upstreamed patches * Backport clang-22 fix * Disable git lfs Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libbpf: Upgrade to 1.7.0 releaseKhem Raj2026-03-301-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | User space-side features * bpf_map__set_exclusive_program() and bpf_map__exclusive_program() APIs for exclusive map creation; * bpf_program__assoc_struct_ops() and bpf_prog_assoc_struct_ops() APIs to associate a non-struct_ops BPF program with a struct_ops map; * btf__permute() API to rearrange BTF types in-place according to a provided mapping; * BTF type lookup optimization: binary search for btf__find_by_name() and btf__find_by_name_kind(); * btf__add_btf() now accepts split BTF sources; * fsession support (SEC("fsession+") / SEC("fsession.s+")); * BPF_F_CPU and BPF_F_ALL_CPUS flags support for per-CPU map operations; * arena globals are moved to the end of the arena mmap region if kernel supports it; * support for LLVM-generated indirect jump tables (BPF ISA v4) via .jumptables ELF section and BPF_MAP_TYPE_INSN_ARRAY maps; * avoid expensive kallsyms parsing when kprobe.session target is an exact function match; * new dont_enable option in struct bpf_perf_event_opts to suppress perf event auto-enablement; BPF-side features * USDT SIB (Scale-Index-Base) addressing support; * dynptr helper signatures (bpf_dynptr_from_mem, bpf_dynptr_read, bpf_dynptr_write, bpf_dynptr_data) widened from 32-bit to 64-bit size/offset parameters; Bug fixes * As usual, a number of bug fixes included, see full commit log for details. Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* include-what-you-use: Upgrade to 0.26Khem Raj2026-03-301-3/+2
| | | | | | This works with clang-22 Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nginx: upgrade 1.29.6 -> 1.29.7Gyorgy Sarvari2026-03-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: *) Security: a buffer overflow might occur while handling a COPY or MOVE request in a location with "alias", allowing an attacker to modify the source or destination path outside of the document root (CVE-2026-27654). *) Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module on 32-bit platforms might cause a worker process crash, or might have potential other impact (CVE-2026-27784). *) Security: processing of a specially crafted mp4 file by the ngx_http_mp4_module might cause a worker process crash, or might have potential other impact (CVE-2026-32647). *) Security: a segmentation fault might occur in a worker process if the CRAM-MD5 or APOP authentication methods were used and authentication retry was enabled (CVE-2026-27651). *) Security: an attacker might use PTR DNS records to inject data in auth_http requests, as well as in the XCLIENT command in the backend SMTP connection (CVE-2026-28753). *) Security: SSL handshake might succeed despite OCSP rejecting a client certificate in the stream module (CVE-2026-28755). *) Feature: the "multipath" parameter of the "listen" directive. *) Feature: the "local" parameter of the "keepalive" directive in the "upstream" block. *) Change: now the "keepalive" directive in the "upstream" block is enabled by default. *) Change: now ngx_http_proxy_module supports keepalive by default; the default value for "proxy_http_version" is "1.1"; the "Connection" proxy header is not sent by default anymore. *) Bugfix: an invalid HTTP/2 request might be sent after switching to the next upstream if buffered body was used in the ngx_http_grpc_module. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>