summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* python3-pyais: upgrade 2.14.0 -> 2.15.0Wang Mingyu2026-01-131-2/+2
| | | | | | | | Changelog: AISTracker.update now accepts raw sentences as well as decoded messages Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pikepdf: upgrade 10.1.0 -> 10.2.0Wang Mingyu2026-01-131-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-ipython: upgrade 9.8.0 -> 9.9.0Wang Mingyu2026-01-131-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-alembic: upgrade 1.17.2 -> 1.18.0Wang Mingyu2026-01-131-2/+2
| | | | | | | License-Update: copyright year updated to 2026 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openfortivpn: upgrade 1.24.0 -> 1.24.1Wang Mingyu2026-01-131-1/+1
| | | | | | | | Changelog: fix regression where the 'plugin' was not passed to pppd Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nautilus: upgrade 49.2 -> 49.3Wang Mingyu2026-01-131-1/+1
| | | | | | | | | | | | | Changelog: ========= - Don't waste resources on images with extreme dimensions - Consider thumbnailing finished at correct time - Redraw view when screen scale factor changes - Fix potential outdated view item usage - Correctly close mime type program chooser dialog Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcloudproviders: upgrade 0.3.6 -> 0.4.0Wang Mingyu2026-01-131-1/+1
| | | | | | | | | | | | Changelog: =========== * Add dependencies to the pkg-config file * Replace gtk-doc with gi-docgen * Require meson 1.9.0 * Plug tiny memory leaks and reduce memory footprint of the library Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lcms: upgrade 2.17 -> 2.18Wang Mingyu2026-01-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - Add an extra check for completeness only. - Fix a signed integer overflow which could trigger a FPE_INTOVF - Fix Microsoft'2 MHC2 private tag - Added projects for XCode 26 & Visual Studio 2026 - Added documentation for PCS illuminants and chromatic adaptation - Check for a possible out-of-bounds in softproofing transforms when using cmsCreateExtendedTransform - Fix for a out-of-bound read, issue #522 - Add an extra check for out-of-bounds read when misusing a support function - avoid divide by zero, special case from spec. notes on CAM02 - Fix CGATS parser bug when number has a "+" sign - Fix a typo when handling a special case for BPC - Fixed a loss of precision when Lab16 is used as input color space on integer transforms - Fixes hypotetical corrupted pointer in non-happy path. Cannot happen in real world - Fix a theoretical memory leak. - Add support of localized descriptions in v2 profiles for MacOS - Mark some tables as const - Make the param of cmsCreateLab4Profile() to refer to the media white instead of the illuminant - fix a warning in unit tests - Remove redundant check. Fixes #497 - Update autotools - fix plugins soname + add oklab to transicc (experimental) - meson: ability to disable .so.version libraries - Fix black point detection when using darker colorant. - testcms2.c: Fix incorrect string comparisons - Fix CICp tag size. - Fix broken linkicc - meson: Bump minimum Meson version to 0.52 for visibility:hidden - meson: Disable unused fs import - Add a guard against a wrong use of flags - Fix for #469 heap buffer overflow on convert_utf16_to_utf32() Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* eog: upgrade 47.0 -> 49.1Wang Mingyu2026-01-131-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ============ - Fix frequent crashes when with gdk-pixbuf 2.44 - Add image/avif to the MimeType list in the .desktop - appdata: Add missing developer name - Set prgname to application ID - data: Rename appdata to metainfo and use rDNS app id - metadata: Hide unreachable help URL - desktop: Add more keywords - content type to mime type conversion - Official website has been retired - org.gnome.eog.desktop should list image/heic as MimeType - Segfault SIGSEGV when switching images Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* doxygen: upgrade 1.15.0 -> 1.16.1Wang Mingyu2026-01-131-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.2.20260104.0 -> 6.2.20260111.0Wang Mingyu2026-01-131-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* abseil-cpp: upgrade 20250814.1 -> 20260107.0Wang Mingyu2026-01-131-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-libevdev: Upgrade 0.12 -> 0.13.1Leon Anavi2026-01-132-2/+19
| | | | | | | | | | | | Add ptest and upgrade to release 0.13.1: - pyproject.toml: add pytest as dev dependency - Import Self from type_checking if needed to be compat with 3.9 - CI: run pytest via uv - CI: test against multiple python versions Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-huey: Upgrade 2.5.5 -> 2.6.0Leon Anavi2026-01-131-2/+2
| | | | | | | | | | | | | | Upgrade to release 2.6.0: - "Modernize" build system to use pyproject.toml and github actions. Fixes: WARNING: python3-huey-2.6.0-r0 do_check_backend: QA Issue: inherits setuptools3 but has pyproject.toml with setuptools.build_meta, use the correct class [pep517-backend] Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-filelock: Upgrade 3.20.2 -> 3.20.3Leon Anavi2026-01-131-1/+1
| | | | | | | | | Upgrade to release 3.20.3: - Fix TOCTOU symlink vulnerability in SoftFileLock Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aenum: Upgrade 3.1.15 -> 3.1.16Leon Anavi2026-01-131-1/+1
| | | | | | | | | | | Upgrade to release 3.1.16: - standardized handling of negative numbers in flags - support dictionary-like key access to NamedTuple - remove newer setup.py option include_package_data Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pylint: Upgrade 4.0.3 -> 4.0.4Leon Anavi2026-01-131-1/+1
| | | | | | | | | | | | | Upgrade to release 4.0.4: - Fixed false positive for ``invalid-name`` where module-level constants were incorrectly classified as variables when a class-level attribute with the same name exists. - Fix a false positive for ``invalid-name`` on an UPPER_CASED name inside an ``if`` branch that assigns an object. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* frr: upgrade 10.5.0 -> 10.5.1Yi Zhao2026-01-131-1/+1
| | | | | | | | ChangeLog: https://github.com/FRRouting/frr/releases/tag/frr-10.5.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tumbler: upgrade 4.20.0 -> 4.20.1Jason Schonberg2026-01-131-1/+1
| | | | | | | Changelog: https://gitlab.xfce.org/xfce/tumbler/-/tags/tumbler-4.20.1 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xdg-user-dirs: upgrade 0.18 -> 0.19Liu Yiding2026-01-131-3/+5
| | | | | | | | | | | | | | | | | | | | | | 1. Changelog Features: * Add a systemd service to run xdg-user-dirs-update * Add initial Meson buildsystem support Bugfixes: * Fix autopoint invocation Miscellaneous: * Updated translations * Update automake boilerplate * Update information in README 2. Add pkgconfig to solvo following configure error: ../sources/xdg-user-dirs-0.19/configure: line 9319: syntax error near unexpected token `systemd,' ../sources/xdg-user-dirs-0.19/configure: line 9319: `PKG_CHECK_EXISTS(systemd,' Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-google-auth: upgrade 2.45.0 -> 2.47.0Liu Yiding2026-01-132-36/+1
| | | | | | | | | | 1. Changelog https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md 2. Drop 0001-make-the-TLS-tests-skip-when-pyopenssl-isn-t-availab.patch as it was merged upstream. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtksourceview*: fix build issue related to SPeter Bergin2026-01-123-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Source code for gtksourceview will be unpacked to a directory called 'gtksourceview-${PV}'. But as the recipes have added part of PV to the name of the recipe the default setting of variable S will be wrong. This is fixed by explicitly setting it. Fixing issues like: WARNING: gtksourceview3-3.24.11-r0 do_unpack: gtksourceview3: the directory ${UNPACKDIR}/${BP} (<snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to WARNING: gtksourceview3-3.24.11-r0 do_populate_lic: Could not copy license file <snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11/COPYING to <snip>/gtksourceview3/3.24.11/license-destdir/corei7-64/gtksourceview3/COPYING: [Errno 2] No such file or directory: '<snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11/COPYING' ERROR: gtksourceview3-3.24.11-r0 do_populate_lic: QA Issue: gtksourceview3: LIC_FILES_CHKSUM points to an invalid file: <snip>/gtksourceview3/3.24.11/sources/gtksourceview3-3.24.11/COPYING [license-checksum] ERROR: gtksourceview3-3.24.11-r0 do_populate_lic: Fatal QA errors were found, failing task. WARNING: gtksourceview4-4.8.4-r0 do_unpack: gtksourceview4: the directory ${UNPACKDIR}/${BP} (<snip>/gtksourceview4/sources/gtksourceview4-4.8.4) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to ERROR: gtksourceview4-4.8.4-r0 do_patch: Applying patch '0001-remove-pointless-check.patch' on target directory '<snip>/gtksourceview4/4.8.4/sources/gtksourceview4-4.8.4' WARNING: gtksourceview5-5.18.0-r0 do_unpack: gtksourceview5: the directory ${UNPACKDIR}/${BP} (<snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0) pointed to by the S variable doesn't exist - please set S within the recipe to point to where the source has been unpacked to WARNING: gtksourceview5-5.18.0-r0 do_populate_lic: Could not copy license file <snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0/COPYING to <snip>/gtksourceview5/5.18.0/license-destdir/corei7-64/gtksourceview5/COPYING: [Errno 2] No such file or directory: '<snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0/COPYING' ERROR: gtksourceview5-5.18.0-r0 do_populate_lic: QA Issue: gtksourceview5: LIC_FILES_CHKSUM points to an invalid file: <snip>/gtksourceview5/5.18.0/sources/gtksourceview5-5.18.0/COPYING [license-checksum] ERROR: gtksourceview5-5.18.0-r0 do_populate_lic: Fatal QA errors were found, failing task. Signed-off-by: Peter Bergin <peter@berginkonsult.se> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* btop: update 1.4.5 -> 1.4.6Markus Volk2026-01-121-2/+3
| | | | | | | | | | | Disable build-testing for now, as this would require 'googletest' dependency v1.4.6 References | Description | Author(s) Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* acpitool: update SRC_URIGyorgy Sarvari2026-01-121-2/+1
| | | | | | | | The old SRC_URI stopped working (its certificate expired), and the recipe defaulted to OE mirrors. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-keyring: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+2
| | | | | | | | | | | | | | | | | | The underscores and hyphens in the product name are used randomly in the CVE database: sqlite> select * from PRODUCTs where vendor = 'gnome' and product like '%keyr%'; CVE-2012-3466|gnome|gnome-keyring|3.4.0|=|| CVE-2012-3466|gnome|gnome-keyring|3.4.1|=|| CVE-2012-6111|gnome|gnome_keyring|3.2|=|| CVE-2012-6111|gnome|gnome_keyring|3.4|=|| CVE-2018-19358|gnome|gnome-keyring|||3.28.2|<= CVE-2018-20781|gnome|gnome_keyring|||3.27.2|< Set CVE_PRODUCT so that both versions are matched. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* xerces-c: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+2
| | | | | | | | | | | | | | | | The related CVEs are tracked with "xerces-c\+\+" (sic). See CVE db query: sqlite> select vendor, product, count(*) from PRODUCTs where product like '%xerces%' group by 1, 2; apache|xerces-c\+\+|29 apache|xerces-j|2 apache|xerces2_java|3 redhat|xerces|3 Set CVE_PRODUCT accordingly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* lmdb: patch CVE-2026-22185Gyorgy Sarvari2026-01-122-0/+32
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22185 Pick the patch that is mentioned as a solution in the related upstream bug[1]. [1]: https://bugs.openldap.org/show_bug.cgi?id=10421 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* boinc-client: mark CVE-2013-2018 patchedGyorgy Sarvari2026-01-121-0/+1
| | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2013-2018 According to oss-security email[1], version 7.0.45 included the fixes[2][3][4] [1]: https://www.openwall.com/lists/oss-security/2013/04/29/11 [2]: https://github.com/BOINC/boinc/commit/6e205de096da83b12ffb2f0183b43e51261eb0c4 [3]: https://github.com/BOINC/boinc/commit/e8d6c33fe158129a5616e18eb84a7a9d44aca15f [4]: https://github.com/BOINC/boinc/commit/ce3110489bc139b8218252ba1cb0862d69f72ae3 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* influxdb: ignore CVE-2024-30896Ankur Tyagi2026-01-121-0/+1
| | | | | | | | | | | | | As mentioned in the comment[1], vulnerability is in /api/v2/authorizations API which only exists in 2.x, 1.x is not affected. Details: https://nvd.nist.gov/vuln/detail/CVE-2024-30896 [1] https://github.com/influxdata/influxdb/issues/24797#issuecomment-2514690740 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-aiodns: Upgrade 3.6.1 -> 4.0.0Leon Anavi2026-01-121-1/+1
| | | | | | | | | | | | | | | | Upgrade to release 4.0.0: - Added new query_dns() method returning native pycares 5.x DNSResult types - Deprecated query() method - still works with backward-compatible result types - Deprecated gethostbyname() method - use getaddrinfo() instead - Added compatibility layer for pycares 4.x result types to ease migration - Updated dependencies Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pycares: Upgrade 4.11.0 -> 5.0.1Leon Anavi2026-01-121-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 5.0.1: - Use Literal for type - Use CMake for compiling c-ares - Move project metadata to pyproject.toml - Remove gethostbyname - Remove getsock - Replace ares_{get,set}servers with ares_{get,set}_servers_csv - Remove ares_init and ares_mkquery, they are unused - Make c-ares thread-safety mandatory - Migrate API to c-ares' dnsrec variants - Build wheels in parallel - Update bundled c-ares to v1.34.6 - Make callback a mandatory kwarg-only argument - Return bytes data for TXT records - Add support for TLSA, HTTP and URI queries - Remove event_thread option, make it implicit - Fix IDNA 2008 test Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-langtable: Upgrade 0.0.68 -> 0.0.69Leon Anavi2026-01-121-1/+1
| | | | | | | | | | | | | Upgrade to release 0.0.69: - Add Georgian console fonts - Add Adlm script to SN - Add dra, Tutg, ath, cmc, Cham, tai - Remove License classifier (license tag with SPDX license expression is already there) Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-identify: Upgrade 2.6.13 -> 2.6.15Leon Anavi2026-01-121-1/+1
| | | | | | | | | | | Upgrade to release 2.6.15: - Add .piskel extension - Fix: make PKGBUILD files a superset of .bash - [pre-commit.ci] pre-commit autoupdate Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* opencv: upgrade 4.12.0 -> 4.13.0Liu Yiding2026-01-123-109/+12
| | | | | | | | | | | | | | | 1.Changelogs https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130 2.Remove following patches as they have been merged in upstream. 27691.patch 0001-Renamed-templated-BlocksCompensator-feed-method-to-e.patch 3.After upgrading to 4.13.0, WITH_KLEIDICV is ON as default in aarch64, so build kleidicv along with openCV in aarch64. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* menulibre: fix do_install failedHongxu Jia2026-01-122-1/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use pip 25.3 to install failed ... Traceback (most recent call last): File "menulibre-2.4.0/setup.py", line 245, in <module> DistUtilsExtra.auto.setup( ~~~~~~~~~~~~~~~~~~~~~~~~~^ name='menulibre', ^^^^^^^^^^^^^^^^^ ...<12 lines>... cmdclass={'install': InstallAndUpdateDataDirectory} ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ ) ^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 98, in setup __requires(attrs, src_all) ~~~~~~~~~~^^^^^^^^^^^^^^^^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 471, in __requires __add_imports(imports, s, attrs) ~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 405, in __add_imports if alias.name and __external_mod(cur_module, alias.name, attrs): ~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "recipe-sysroot-native/usr/lib/python3.13/site-packages/DistUtilsExtra/auto.py", line 377, in __external_mod return 'dist-packages' in mod.__file__ or 'site-packages' in mod.__file__ or \ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ TypeError: argument of type 'NoneType' is not iterable ... Refer [1] to correct one line in setup.py [1] https://github.com/epoptes/epoptes/commit/81be63961a428728601df6f442490638df3bd263 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: add ptestYi Zhao2026-01-122-3/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ptest results on genericx86-64 BSP: $ run-ptest PASS: compat_block PASS: compat_bug777 PASS: compat_bus PASS: compat_cmsg PASS: compat_device PASS: compat_iovec PASS: compat_msg PASS: compat_options PASS: compat_pair PASS: compat_pipeline PASS: compat_poll PASS: compat_reqrep PASS: compat_reqttl PASS: compat_shutdown PASS: compat_survey PASS: compat_surveyttl PASS: cplusplus_pair PASS: device PASS: files FAIL: httpclient PASS: httpserver PASS: inproc PASS: ipc PASS: ipcsupp PASS: multistress PASS: nonblock PASS: options PASS: pipe PASS: pollfd PASS: reqctx PASS: reqstress PASS: scalability PASS: synch PASS: tcp PASS: tcp6 PASS: tcpsupp PASS: tls PASS: ws PASS: wss The httpclient case attempts to retrieve the Content-Length field from HTTP header of http://example.com/, but because the site uses chunked transfer encoding, the Content-Length field is not present, leading to an assertion failure. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* boinc-client: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+3
| | | | | | | | | | | | | | | | The relevant CVEs are tracked with underscore in their name. See CVE db query: sqlite> select vendor, product, count(*) from PRODUCTs where product like '%boinc%' group by 1, 2; berkeley|boinc_client|2 berkeley|boinc_forum|1 universityofcalifornia|boinc_client|165 universityofcalifornia|boinc_server|5 Set the CVE_PRODUCT accordingly. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* asyncmqtt: set CVE_PRODUCTGyorgy Sarvari2026-01-121-0/+2
| | | | | | | | | | | | The CVEs are tracked with an underscore in the product name: sqlite> select * from PRODUCTs where product like '%async%mq%'; CVE-2025-65503|redboltz|async_mqtt|10.2.5|=|| This patch sets the correct CVE_PRODUCT. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nginx: ignore CVE-2025-53859 for 1.28.1Peter Marko2026-01-121-0/+2
| | | | | | | | | Fix is included via commit [1]. [1] https://github.com/nginx/nginx/commit/fbbbf189dadf3bd59c2462af68c16f2c2874d4ee Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsodium: patch CVE-2025-69277Peter Marko2026-01-122-0/+63
| | | | | | | | | Pick patch per [1]. [1] https://nvd.nist.gov/vuln/detail/CVE-2025-69277 Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcanberra: add runtime recommendation for sound-theme-freedesktopMarkus Volk2026-01-121-0/+1
| | | | | | | Required to actually play event sounds Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nng: upgrade 1.7.3 -> 1.11Yi Zhao2026-01-121-3/+2
| | | | | | | | | | | ChangeLog: https://github.com/nanomsg/nng/releases/tag/v1.11 https://github.com/nanomsg/nng/releases/tag/v1.10 https://github.com/nanomsg/nng/releases/tag/v1.9.0 https://github.com/nanomsg/nng/releases/tag/v1.8.0 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nanomsg: add ptestYi Zhao2026-01-122-2/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ptest results: $ run-ptest PASS: async_shutdown PASS: block PASS: bug328 PASS: bug777 PASS: bus PASS: cmsg PASS: device PASS: device4 PASS: device5 PASS: device6 PASS: device7 PASS: domain PASS: emfile PASS: hash PASS: inproc PASS: inproc_shutdown PASS: iovec PASS: ipc PASS: ipc_shutdown PASS: ipc_stress PASS: list PASS: msg PASS: pair PASS: pipeline PASS: poll PASS: prio PASS: pubsub PASS: reqrep PASS: reqttl PASS: separation PASS: shutdown PASS: stats PASS: survey PASS: surveyttl PASS: symbol PASS: tcp PASS: tcp_shutdown PASS: term PASS: timeo PASS: trie PASS: ws PASS: ws_async_shutdown PASS: zerocopy Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nanomsg: upgrade 1.2.1 -> 1.2.2Yi Zhao2026-01-122-60/+2
| | | | | | | | | | | ChangeLog: https://github.com/nanomsg/nanomsg/releases/tag/1.2.2 Drop 0001-allow-build-with-cmake-4.patch as the issue has been fixed upstream. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-filelock: add ptest supportGyorgy Sarvari2026-01-123-1/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tests take <15s to execute. Sample output: root@qemux86-64:~# ptest-runner START: ptest-runner 2026-01-09T18:00 BEGIN: /usr/lib/python3-filelock/ptest PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncUnixFileLock] PASS: tests/test_async_filelock.py:test_simple[a-str-AsyncSoftFileLock] PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncUnixFileLock] PASS: tests/test_async_filelock.py:test_simple[a-PurePath-AsyncSoftFileLock] PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncUnixFileLock] PASS: tests/test_async_filelock.py:test_simple[a-Path-AsyncSoftFileLock] [...many lines...] PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[SoftFileLock-TimeoutError] PASS: tests/test_filelock.py:test_mtime_zero_exit_branch[UnixFileLock-PermissionError] PASS: tests/test_virtualenv.py:test_virtualenv ============================================================================ Testsuite summary DURATION: 10 END: /usr/lib/python3-filelock/ptest 2026-01-09T18:00 STOP: ptest-runner TOTAL: 1 FAIL: 0 (There are 20 Windows-only tests, which are skipped) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-send2trash: add ptest supportGyorgy Sarvari2026-01-124-1/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The tests take less than a second to execute. The current source distribution is missing a test file, which I added with a patch. The problem is already solved by upstream just not tagged yet - the patch can be dropped with the next update. Sample output: root@qemux86-64:~# ptest-runner START: ptest-runner 2026-01-09T17:11 BEGIN: /usr/lib/python3-send2trash/ptest SKIP: tests/test_plat_win.py:tests/test_plat_win.py # SKIP Skipping windows-only tests PASS: tests/test_plat_other.py:test_trash PASS: tests/test_plat_other.py:test_multitrash PASS: tests/test_plat_other.py:test_trash_bytes PASS: tests/test_plat_other.py:test_trash_unicode PASS: tests/test_plat_other.py:test_trash_topdir PASS: tests/test_plat_other.py:test_trash_topdir_fallback PASS: tests/test_plat_other.py:test_trash_topdir_failure PASS: tests/test_plat_other.py:test_trash_symlink PASS: tests/test_script_main.py:test_trash PASS: tests/test_script_main.py:test_no_args ============================================================================ Testsuite summary DURATION: 1 END: /usr/lib/python3-send2trash/ptest 2026-01-09T17:11 STOP: ptest-runner TOTAL: 1 FAIL: 0 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcanberra: update 0.30 -> 0.30-19Markus Volk2026-01-125-288/+47
| | | | | | | | | | | | | | | | Lennart Poettering stopped maintaining libcanberra over a decade ago but it is still maintained by the debian gnome-team. Most notable improvement is that building the libcanberra-gtk3-module doesn't depend on gtk2 anymore and thus libcanberra isn't dependent on x11 to build support for gtk3 - fetch source from salsa.debian.org, use git for it - remove outdated patches - dont build gtk+ module by default anymore - simplify packaging Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-gcovr: Upgrade 8.3 -> 8.5Leon Anavi2026-01-122-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 8.5: Breaking changes: - The option --lcov-test-name doesn't accept values with spaces anymore. - The option --lcov-format-1.x is deprecated and mapped to --lcov-format-version=1.x. - Changes to HTML templates. New features and notable changes: - Due to added support for LLVM source based code coverage format some configuration file keys got changed. The old gcov named options are still supported but they also affect the LLVM toolchain. Bug fixes and small improvements: - Fix coveralls report if there are several coverage elements per line. - Fix not excluded conditions if branches are excluded by comments. - Fix reported excluded branches in LCOV report. - Fix exclusion filter --gcov-exclude. - Add --json-trace-data-source to include the trace data source in the JSON report independent from --verbose. - Remove generated gcov files on error and catch additional gcov error message. - Change default HTML theme excluded line color. - Move theme colors to a separate CSS file so they can be overridden with a simple --html-template-dir directory with only the style.colors.css file. - Fix regular expression for detecting a version mismatch between gcc and gcov. - Improve logging messages for GCOV execution errors to not print information twice and add trace messages for gcov execution. - Fix handling of lines after function specialization. - Improve performance by changing logging messages (level and lazy interpolation). - Fix text report for covered decisions. - Fix runtime problem introduced with 8.4. - Fix wrong entries in data source attribute of JSON report. - Fix nested HTML report without coverage data. - Add warning if coverage data is empty. - Add warning if function lines are missing in external generated GCOV files. - Extend support for zipped reports. If last suffix is .xz then LZMA is used to compress the report. - Fix function exclusion in report generation. - Do not ignore lines without functions, e.g. from inlined code. - Ignore all whitespaces instead of only spaces for detection of noncode lines. - Add support for temporary merging line coverage objects without modifying the data model. - Change internal behavior of --exclude-function-lines to exclude the line of function definition instead of removing it completely. - Ensure that all functions have a line coverage element in LCOV report. License-Update: Update years Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-xmlschema: Upgrade 4.2.0 -> 4.3.0Leon Anavi2026-01-121-2/+2
| | | | | | | | | | | | | | | | | | | | | Upgrade to release 4.3.0: - Add arguments validation for schemas and validation methods (by validation contexts) - Add custom XPath parser for find/findall/iterfind APIs on schemas for match singleton sequence also if position is a number greater than 1 in predicate expression - Improve build of XSD elements and groups, using a three-state built flag for components - Extend and fix memory tests (Python 3.14+ seems to consume more memory) - Drop support for Python 3.9 and add development support for Python 3.15 License-Update: Update years Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-fsspec: Upgrade 2025.5.1 -> 2025.12.0Leon Anavi2026-01-121-1/+1
| | | | | | | | | | | | | | | Upgrade to release 2025.12.0: - fsspec.parquet to support filters and multiple files - passing withdirs in aync _glob() - fix _rm_file/_rm redirection in async - allow arrowFile to be seekable - add size attribute to arrowFile - support py3.14 and drop 3.9 - avoid ruff warning Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-04-22 12:06:27 +0000