summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* libspdm: upgrade 3.8.1 -> 3.8.2Wang Mingyu2026-02-251-2/+2
| | | | | | | | | | | Changelog: ============ - os_stub/openssllib: Allow building with older OpenSSL versions - Ignore MSVC warning when compiling OpenSSL - Bring fixes from main to 3.8 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libpanel: upgrade 1.10.3 -> 1.10.4Wang Mingyu2026-02-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgsf: upgrade 1.14.54 -> 1.14.55Wang Mingyu2026-02-251-1/+1
| | | | | | | | | | Changelog: ========= * Reduce stack usage. * Documentation fixes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libdnet: upgrade 1.18.0 -> 1.18.2Wang Mingyu2026-02-251-2/+2
| | | | | | | | | | | | | Changelog: =========== - fix copyright typo - Fix encoding (iso-8859 -> utf-8) and add GL CI config - config.h.in: Fix wrong return type - Update master from devel branch - Pull in latest development changes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* jwt-cpp: upgrade 0.7.1 -> 0.7.2Wang Mingyu2026-02-251-2/+2
| | | | | | | | | | | | | | | | | | | | | Changelog: =========== - Improve as_date narrowing conversion from C4244 warning - update trait dependencies to support CMake v4 - Fix linter error - Update workflows for new GitHub Action Runner Images - Support passing ssl library key handles to algorithms - Update CMP0135 to new behaviour - Fix error in CMake config-file package - CMake: synchronize cmake_minimum_required from main CMakeLists.txt - Reduce usage of std::time_t, std::chrono::system_clock::to_time_t and system_clock::from_time_t in order to get correct dates when working with a 32bit application - Fix set_expires_in not accepting non-default Period - AppVeyor Warnings Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* imagemagick: upgrade 7.1.2-13 -> 7.1.2-15Wang Mingyu2026-02-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gtksourceview5: upgrade 5.18.0 -> 5.19.0Wang Mingyu2026-02-251-1/+1
| | | | | | | | | | | | | | | | Changelog: ========= * Annotations: draw a background behind annotations; align to the right when they fit (e.g. for diagnostics) * GObject Introspection: fix nullable and callback destroy annotations (get_location, get_match_style, scheduler, callbacks) * Fix gutter text renderer text layout snapshot deprecation * PHP language: highlight PHP 8.0 attributes and add new keywords * New language: Cornish * Translation updates Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gensio: upgrade 3.0.1 -> 3.0.2Wang Mingyu2026-02-251-2/+2
| | | | | | | | | | | | Changelog: ========= - Fix afskmdm shutdown issues - Fix a crash if gensio_acc_disable() is called more than once. - Allow the pcre2 package to be used. - Fix a locking issue in cm108gpio. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* feh: upgrade 3.11.2 -> 3.11.3Wang Mingyu2026-02-251-1/+1
| | | | | | | | | | | | | Changelog: ========== * Support DOS-style \r\n line breaks when loading filelists. Note that they will be saved with UNIX-style \n line breaks regardless of input format. This is intentional. * Fix --action, --info, --title and similar commands hard-coding the maximum length of the formatted output to 4095 characters. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ctags: upgrade 6.2.20260125.0 -> 6.2.20260222.0Wang Mingyu2026-02-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cmark: upgrade 0.31.1 -> 0.31.2Wang Mingyu2026-02-251-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* catch2: upgrade 3.12.0 -> 3.13.0Wang Mingyu2026-02-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* byacc: upgrade 20241231 -> 20260126Wang Mingyu2026-02-251-2/+2
| | | | | | | License-Update: Copyright year updated to 2026. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bdwgc: upgrade 8.2.10 -> 8.2.12Wang Mingyu2026-02-251-2/+2
| | | | | | | License-Update: Copyright year updated to 2025. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* asyncmqtt: upgrade 10.2.6 -> 10.3.0Wang Mingyu2026-02-251-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ============= - Added Share Name character check. - Implemented cmake package version checking. - Fixed broker tool not delivering all retained messages when wildcard subscription matches multiple topics. - Added get_qos2_publish_handled_pids(), restore_qos2_publish_handled_pids(), restore_packets(), and get_stored_packets() to client for convenient. - get_endpoint() can be omitted now. - Refined reconnect examples. - Added websocket async_close timeout. - Added documentation regarding stream reuse restrictions for TLS-related streams. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* abseil-cpp: upgrade 20260107.0 -> 20260107.1Wang Mingyu2026-02-251-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libsdl3-image: update 3.2.6 -> 3.4.0Markus Volk2026-02-242-15/+19
| | | | | | | | | - Fix license checksum: Copyright year has been changed - Add support for av1 and jxl - libavif is in meta-multimedia -> disable av1 by default Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* tigervnc: Fix do_rootfs ErrorLiu Yiding2026-02-241-1/+3
| | | | | | | | | Fix the following error: ERROR: core-image-minimal-1.0-r0 do_rootfs: Postinstall scriptlets of ['tigervnc'] have failed. If the intention is to defer them to first boot, then please place them into pkg_postinst_ontarget:${PN} (). Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iperf2: Update CVE_PRODUCTColin McAllister2026-02-241-1/+1
| | | | | | | | | CPEs are registered for iperf_project2:iperf2 in addition to iperf_project:iperf. By changing CVE_PRODUCT to an appends, this ensures that both iperf and iperf2 CPEs are used for CVE matching. Signed-off-by: Colin Pinnell McAllister <colin.mcallister@garmin.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-nltk: upgrade 3.9.2 -> 3.9.3Gyorgy Sarvari2026-02-241-1/+1
| | | | | | | | | | | | | | | Contains fix for CVE-2026-14009. Changelog: * Fix CVE-2025-14009: secure ZIP extraction in nltk.downloader * Block path traversal/arbitrary reads in nltk.data for protocol-less refs * Block path traversal/abs paths in corpus readers and FS pointers * Validate external StanfordSegmenter JARs using SHA256 * Add optional sandbox enforcement for filestring() * Maintenance: downloader/zipped models, CI/tooling updates Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: patch CVE-2026-23532Gyorgy Sarvari2026-02-242-0/+50
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-23532 The related Github advisory[1] contains a detailed analysis about the vulnerability. Pick the patch that describes the same issue in its description. [1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-fq8c-87hj-7gvr Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: patch CVE-2026-23530Gyorgy Sarvari2026-02-242-0/+29
| | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-23530 The related Github advisory[1] contains an amalysis of the vulenrability, describing the issue and the root cause also. Backported the commit that implemented the solution described in the advisory. [1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-r4hv-852m-fq7p Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-jwt-extended: Upgrade 4.6.0 -> 4.7.1Leon Anavi2026-02-241-2/+2
| | | | | | | | | | | | | | Upgrade to release 4.7.1: - Add controls for verify_sub option in PyJWT From release 4.7.0: - Drop support for python 3.7 and 3.8, add 3.13 - Fix documentation around identity needing to be a string Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-pymongo: Upgrade 2.3.0 -> 3.0.1Leon Anavi2026-02-241-4/+8
| | | | | | | | | | | | | | | | | Upgrade to release 3.0.1: - Fix link rendering in readme - Fix handling of _version.py file From release 3.0.0: - Support Flask 3.0+ and PyMongo 4.0+. - Support Python 3.9-3.13. - Support MongoDB 4.4+. - Add support for ~flask.json.jsonify(). Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-socketio: Upgrade 5.6.0 -> 5.6.1Leon Anavi2026-02-241-1/+1
| | | | | | | | | | | Upgrade to release 5.6.1: - Session fixes for Flask >= 3.1.3 - Update SocketIO constructor documentation - Switch to the Furo documentation template Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-cors: Upgrade 5.0.0 -> 6.0.2Leon Anavi2026-02-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 6.0.2: - Update license pyproject.toml From 6.0.1: - Invert regex sorting to make it correctly match the intent (sorting by specificity descending) - Fix README file extension in pyproject.toml From 6.0.0: - [CVE-2024-6839] Sort Paths by Regex Specificity - [CVE-2024-6844] Replace use of (urllib) unquote_plus with unquote - [CVE-2024-6866] Case Sensitive Request Path Matching License-Update: Use line 6 from PKG-INFO Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-marshmallow: Upgrade 1.3.0 -> 1.4.0Leon Anavi2026-02-241-1/+1
| | | | | | | | | | Upgrade to release 1.4.0: - Add missing commas in error message for validate.FileType - Support Python 3.10-3.14 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask: Upgrade 3.1.2 -> 3.1.3Leon Anavi2026-02-241-2/+2
| | | | | | | | | | Upgrade to release 3.1.3: - The session is marked as accessed for operations that only access the keys but not the values, such as in and len. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-migrate: Upgrade 4.0.7 -> 4.1.0Leon Anavi2026-02-241-2/+2
| | | | | | | | | | Upgrade to release 4.1.0: - Accept arguments such as --directory in environment variables - Fix minor typos in documentation Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-mail: Upgrade 0.9.1 -> 0.10.0Leon Anavi2026-02-241-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 0.10.0: - Drop support for Python < 3.8. - Use pyproject.toml for packaging metadata. - Use flit_core as build backend. - Apply code formatting and linting tools. - Add static type annotations. - Deprecate the __version__ attribute. Use feature detection or importlib.metadata.version("flask-mail") instead. - Indicate that the deprecated is_bad_headers will be removed in the next version. - Fix the email_dispatched signal to pass the current app as the sender and message as an argument, rather than the other way around. - Attachment.data may not be None. - Attachment.content_type will be detected based on filename and data and will not be None. License-Update: Use LICENSE.txt Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* blueprint-compiler: remove recipeYi Zhao2026-02-241-16/+0
| | | | | | | | | The recipe has been moved to oe-core[1]. [1] https://git.openembedded.org/openembedded-core/commit/?id=4212392ca7ebf890e1e192ddd0e7dbe1f8dabcf2 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-appdirs:Add HOMEPAGELiu Yiding2026-02-241-0/+1
| | | | | | | Add HOMEPAGE in python3-appdirs. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* streamripper: ignore CVE-2020-37065Gyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2020-37065 The vulnerability is about a 3rd party Windows-only GUI frontend for the streamripper library, and not for the CLI application that the recipe builds. Due to this ignore this CVE. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-werkzeug: upgrade 3.1.5 -> 3.1.6Gyorgy Sarvari2026-02-241-1/+1
| | | | | | | | | Contains fix for CVE-2026-27199 Changelog: safe_join on Windows does not allow special devices names in multi-segment paths Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pillow: upgrade 12.1.0 -> 12.1.1Gyorgy Sarvari2026-02-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | Contains fix for CVE-2026-25990 Ptests passed successfully: Testsuite summary TOTAL: 5024 PASS: 4587 SKIP: 434 XFAIL: 3 FAIL: 0 XPASS: 0 ERROR: 0 Changelog: Patch libavif for svt-av1 4.0 compatibility Fix OOB Write with invalid tile extents Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* live555: upgrade 20210824 -> 20260112Gyorgy Sarvari2026-02-242-2/+2
| | | | | Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* protobuf: ignore CVE-2026-0994Gyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0994 The vulnerability impacts only the python bindings of protobuf, which is in a separate recipe (python3-protobuf, where it is patched). Ignore this CVE in this recipe due to this. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* polkit: add info about CVE-2016-2568Gyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2016-2568 This commit mostly just tries to add some info to this issue, in the hope that it will save some time for others who try to investigate it. This CVE most probably will stay open in meta-oe in the foreseeable future, although it can be mitigated reasonably easily by the users of the layer. The description of the vulnerability is short enough that it can be reproduced here: "pkexec, when used with --user nonpriv, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer." The general consensus amongst developers/major distros[1][2][3] seems to be that it should be mitigated on the kernel side, to not allow non-privileged users to fake input. To this end, the kernel has introduced a new config in v6.2, called CONFIG_LEGACY_TIOCSTI - when it is enabled, non-privileged used can also fake input. It is however by default enabled (and it is also enabled in the kernels shipped in oe-core, at least at the time of writing this). Disabling this kernel config is considered to be the mitigation, to allow input-faking only by privileged users. [1]: https://security-tracker.debian.org/tracker/CVE-2016-2568 [2]: https://bugzilla.suse.com/show_bug.cgi?id=968674 [3]: https://marc.info/?t=145694748900001&r=1&w=2 / https://marc.info/?l=util-linux-ng&m=145702209921574&w=2 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* openjpeg: patch CVE-2023-39327Gyorgy Sarvari2026-02-242-0/+51
| | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2023-39327 Take the patch that is used by OpenSUSE to mitigate this vulnerability. Upstream seems to be unresponsive to this issue. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* minidlna: ignore CVE-2024-51442Gyorgy Sarvari2026-02-241-0/+1
| | | | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-51442 The description of the vulnerability says "attacker [...] execute arbitrary OS commands via a specially crafted minidlna.conf configuration file". There is no official fix for this CVE, and upstream seems to be inactive for the past 3 years. The reason for ignoring this CVE is that the referenced minidlna.conf file is in the /etc folder, and the file is not world-writable. Which means that this vulnerability can be exploited only when someone is root - but if the attacker is already root, they don't need to resort to minidlna config-file modifications to execute any command they want. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libcdio: mark CVE-2024-36600 fixedGyorgy Sarvari2026-02-241-0/+2
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2024-36600 The vulnerability is fixed since 2.2.1.rc1[1], and officially since v2.3.0. However NVD tracks it like v2.3.0 was still vulnerable. Mark the CVE explicitly patched. [1]: https://github.com/libcdio/libcdio/blob/master/NEWS.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gnome-shell: ignore CVE-2021-3982Gyorgy Sarvari2026-02-241-0/+1
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2021-3982 The vulnerability is about a privilege escalation, in case the host distribution sets CAP_SYS_NICE capability on the gnome-shell binary. OE distros don't do that, and due to this this recipe is not affected by this issue. The CVE is ignored. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* gimp: ignore already fixed CVEsGyorgy Sarvari2026-02-241-1/+4
| | | | | | | | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-0797 https://nvd.nist.gov/vuln/detail/CVE-2026-2044 https://nvd.nist.gov/vuln/detail/CVE-2026-2045 https://nvd.nist.gov/vuln/detail/CVE-2026-2047 https://nvd.nist.gov/vuln/detail/CVE-2026-2048 All these CVEs are already fixed in the recipe version, however NVD tracks them currently without CPE info. Ignore them. Relevant upstream commits: CVE-2026-0797: https://gitlab.gnome.org/GNOME/gimp/-/commit/ca449c745d58daa3f4b1ed4c2030d35d401a009d Note that the commit referenced by NVD is incorrect. This commit was identified from the relevant upstream Gitlab issue: https://gitlab.gnome.org/GNOME/gimp/-/issues/15555 CVE-2026-2044: https://gitlab.gnome.org/GNOME/gimp/-/commit/3b5f9ec2b4c03cf4a51a5414f2793844c26747e5 CVE-2026-2045: https://gitlab.gnome.org/GNOME/gimp/-/commit/bb896f67942557658b3fbfc67a1c073775c002c7 CVE-2026-2047: https://gitlab.gnome.org/GNOME/gimp/-/commit/5873e16f80cf4152d25a4c86b08553008a331e90 CVE-2026-2048: https://gitlab.gnome.org/GNOME/gimp/-/commit/fa69ac5ec5692f675de5c50a6df758f7d3e45117 Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: ignore CVE-2026-22853Gyorgy Sarvari2026-02-241-0/+1
| | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22853 The vulnerable feature was introduced in v3.9.0[1], the recipe version is not affected. Ignore this CVE. [1]: https://github.com/FreeRDP/FreeRDP/commit/a4bd5ba8863c0959501d4604159042a311dae85a Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* freerdp: patch CVE-2026-22852Gyorgy Sarvari2026-02-242-0/+28
| | | | | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-22852 The related github advisory[1] comes with an analysis of the vulnerability, including pointing to the vulnerable code snippet. Backported the commit that touched the mentioned code part in the fixed version, and is in line with the description of the issue. Ptests passed successfully. [1]: https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-9chc-g79v-4qq4 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-gunicorn: Upgrade 24.1.1 -> 25.1.0Leon Anavi2026-02-241-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 25.1.0: - Control Interface (gunicornc): Add interactive control interface for managing running Gunicorn instances, similar to birdc for BIRD routing daemon - Unix socket-based communication with JSON protocol - Interactive mode with readline support and command history - Commands: show all/workers/dirty/config/stats/listeners - Worker management: worker add/remove/kill, dirty add/remove - Server control: reload, reopen, shutdown - New settings: --control-socket, --control-socket-mode, --no-control-socket - New CLI tool: gunicornc for connecting to control socket - Dirty Stash: Add global shared state between workers via dirty.stash - In-memory key-value store accessible by all workers - Supports get, set, delete, clear, keys, and has operations - Useful for sharing state like feature flags, rate limits, or cached data - Dirty Binary Protocol: Implement efficient binary protocol for dirty arbiter IPC using TLV (Type-Length-Value) encoding - More efficient than JSON for binary data - Supports all Python types: str, bytes, int, float, bool, None, list, dict - Better performance for large payloads - Dirty TTIN/TTOU Signals: Add dynamic worker scaling for dirty arbiters - Send SIGTTIN to increase dirty workers - Send SIGTTOU to decrease dirty workers - Respects minimum worker constraints from app configurations - ASGI Worker: Promoted from beta to stable - Dirty Arbiters: Now marked as beta feature License-Update: Update years Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-isort: Upgrade 7.0.0 -> 8.0.0Leon Anavi2026-02-241-1/+1
| | | | | | | | | | | | | | | | | Upgrade to release 8.0.0: - Update CHANGELOG for version 8.0.0 - Fix edge case of __future__ import - Fix the Plone profile to be compatible with black - Remove the setuptools plugin - Turn some warnings into errors in test suite - chore: replace black with ruff in clean.sh - feat!: remove old finders flag and legacy finder logic - Fix whitespace insensitive check triggering on tabs - Fix line separator detection not considering form feed as white space Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-mpmath: Upgrade 1.3.0 -> 1.4.0Leon Anavi2026-02-241-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 1.4.0: - Support underscores as digit separators per PEP 515 - Add rationals converter for mpf's - Rewrite bernpoly/eulerpoly to avoid dependency on bernoulli(1) convention - Support base kwarg for from_str() - Support randmatrix() for mp.iv and mp contexts - Added rank() function for matrices - Add plus flag to select the B_1 sign convention for bernoulli/bernfrac - Add mpf.as_integer_ratio() method, support construction of mpf from Decimal objects - Expose lower/upper_gamma functions - Support mpc initialization from string - Support asinh/acosh/atanh in the fp context - Support binary/octal/hexadecimal string output - Support pickling for matrices and mpi - Support matrix.__array__() dunder method - Support more number syntaxes - Run mpmath as a module for interactive work - Add signed option to to_man_exp() - Add fp.hypot - Support inf/nan's in ctx.almosteq() - Implement mpf.__format__() - Support conversion from scalar ndarray's - Support rounding modes in mpf.__format__ - Support '%' presentation type for mpf - Support gmpy2-like rounding modes in to_str() - Implement 'a'/'A' formating types for mpf.__format__ - Add mpc.__format__() - Now mpf.__round__() returns mpf - Support 'b' (binary) format type for mpf/mpc - Implement mpf.__floordiv__() and mpf.__divmod__() - Add parameters for MPContext constructor - Add MPFR-compatible aliases for rounding modes - Support negative indexes in matrix - Better introspection support for decorated functions - Add moving sofa demo - Support spherical Bessel functions (jn/yn) - Add pretty_dps context property to control number of printed digits - Support thousands separators for formatting of fractional part - Use PyREPL, as fallback (no IPython) - Add exp2() and log2() - Support rounding property for the mp context - Add Fox H-function with rational A/B parameters (foxh()) - Provide experimental support for free-threading builds License-Update: Update years Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libgpiod: update to v2.2.3Bartosz Golaszewski2026-02-241-1/+1
| | | | | | | Bug-fix release addressing a couple problems in gpio-manager and tests. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webmin: upgrade 2.501 -> 2.520Jason Schonberg2026-02-241-1/+1
| | | | | | | | Changelog: https://github.com/webmin/webmin/releases/tag/2.520 Changelog: https://github.com/webmin/webmin/releases/tag/2.510 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-04-22 01:41:42 +0000