summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* postgresql: upgrade 17.7 -> 17.8Ankur Tyagi2026-02-207-21/+15
| | | | | | | | | | | | | | License-Update: Update license year to 2026 Refreshed patches for version 17.8 Includes fix for CVE-2026-2003, CVE-2026-2004, CVE-2026-2005, CVE-2026-2006 Release Notes: https://www.postgresql.org/docs/release/17.8/ Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libjxl: upgrade 0.11.1 -> 0.11.2Ankur Tyagi2026-02-201-2/+2
| | | | | | | | | | | | - fix tile dimension in low memory rendering pipeline (CVE-2025-12474) - fix number of channels for gray-to-gray color transform (CVE-2026-1837) - djxl: reject decoding JXL files if "packed" representation size overflows size_t https://github.com/libjxl/libjxl/releases/tag/v0.11.2 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* dbus-cxx: update 2.6.0 -> 2.6.1Frede Hoey Braendstrup2026-02-201-1/+1
| | | | | | | | | Changelog from upstream: Some minor fixes for code generation. Qt6 is now properly detected. Signed-off-by: Frede Hoey Braendstrup <frederikbraendstrup@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: move SRCREV below SRC_URIAdam Duskett2026-02-171-5/+5
| | | | | | | | According to the recipe style guide, SRCREV should be placed below SRC_URI. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: add a BBCLASSEXTENDAdam Duskett2026-02-171-0/+2
| | | | | | | | A native version of libtoml11 may be needed for recipes such as dnf5 in the future. Add it now. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: add a cve_productAdam Duskett2026-02-171-0/+1
| | | | | Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: Add a bugtracker urlAdam Duskett2026-02-171-0/+1
| | | | | Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: check PTEST_ENABLED instead of DISTRO_FEATURESAdam Duskett2026-02-171-1/+1
| | | | | | | | Checking for PTEST_ENABLED 1 is the preferred method for enabling and disabling ptests for packages. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11: use gitsm for SRC_URIAdam Duskett2026-02-171-7/+1
| | | | | | | Using gitsm also allows for the revmoval of SRCREV_json and SRCREV_doctest. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11/files/0001-Remove-whitespace-in-operator.patch: change upstream-statusAdam Duskett2026-02-171-1/+1
| | | | | | | | Change "Submitted" in 0001-Remove-whitespace-in-operator.patch to "Backport" with the appropraite link to the relevant commit hash. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libtoml11/files/run-ptest: cleanupAdam Duskett2026-02-171-5/+6
| | | | | | | | | | | | | | | | | | Shellcheck -oall warnings fixed: - exit 1 if `cd tests` failes (SC2164) - Double quote `./${atest}` to prevent globbing and word splitting. (SC2086) - Check the test exit code directly intead of using $? (SC2181) Other fixes: - The shebang sould traditionally be /usr/bin/env sh in case sh is not located in /bin. - Do not remove tests.log for every test. Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-flask-limiter: Add recipeLeon Anavi2026-02-171-0/+21
| | | | | | | | | | Rate limiting for flask applications. Add recipe for release 4.1.1: - Ensure cli commands fail gracefully when cli dependencies are not installed. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-limits: Add recipeLeon Anavi2026-02-171-0/+18
| | | | | | | | | | | | | Rate limiting utilities. Add recipe for release 5.8.0: - Allow explicit keyword arguments for storage options for username & password for storages that support it. - Allow explicitly specifying startup_nodes through keyword arguments for all redis cluster storages. - Support IPv6 addresses in cluster locators in storage URI Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ifenslave: update link to homepagePeter Marko2026-02-171-1/+1
| | | | | | | | The old link does not work anymore. New page found based on other linuxfoundation.org link redirects. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* bridge-utils: update link to homepagePeter Marko2026-02-171-1/+1
| | | | | | | | The old link does not work anymore. New page found based on other linuxfoundation.org link redirects. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* cups-filters: update link to homepagePeter Marko2026-02-171-1/+1
| | | | | | | The old link redirects here now. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* thunar: upgrade 4.20.5 -> 4.20.7Jason Schonberg2026-02-171-1/+1
| | | | | | | | Changelog: https://gitlab.xfce.org/xfce/thunar/-/tags/thunar-4.20.7 Changelog: https://gitlab.xfce.org/xfce/thunar/-/tags/thunar-4.20.6 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyperf: Upgrade 2.9.0 -> 2.10.0Leon Anavi2026-02-171-1/+1
| | | | | | | | | | | | | | | Upgrade to release 2.10.0: - ReadTheDocs: use latest Ubuntu and Python - Add BSD support for track-memory - Docs: Update minimum Python version. Add matching badge - Remove fallbacks for unsupported Python versions (< 3.9) - Setup Dependabot for Github actions, bump checkout and setup-python actions - Recognise CPython as a JIT implementation Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-platformdirs: Upgrade 4.5.1 -> 4.9.2Leon Anavi2026-02-171-1/+1
| | | | | | | | | | Upgrade to release 4.9.2: - docs(platforms): fix RST formatting and TOC hierarchy - docs: restructure following Diataxis framework Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-tox: Upgrade 4.27.0 -> 4.36.1Leon Anavi2026-02-171-1/+1
| | | | | | | | | | | | | | | | Upgrade to release 4.36.1: - ci(workflows): add explicit permissions to workflows - Add architecture documentation - docs(man): add Unix man page and composable CLI argument inheritance - Add new logging section in documentation - Report TOML parse errors during config discovery instead of silently ignoring them - fix(execute): adopt CPython subprocess stream handling Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-filelock: Upgrade 3.20.3 -> 3.24.2Leon Anavi2026-02-171-3/+3
| | | | | | | | | | | | | Upgrade to release 3.24.2: - docs: restructure using Diataxis framework - fix(test): resolve flaky write non-starvation test - fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race License-Update: Move from Unlicense to MIT Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* kmscon: bump version to 9.3.2Adam Duskett2026-02-161-1/+1
| | | | | Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-lief: Upgrade 0.17.2 -> 0.17.3Leon Anavi2026-02-161-1/+1
| | | | | | | | | | | | Upgrade to release 0.17.3: - Fix bug with resources - Fix VA/RVA confusion in the PE's builder This work was sponsored by GOVCERT.LU. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* yelp: add opengl to REQUIRED_DISTRO_FEATURESGyorgy Sarvari2026-02-161-1/+2
| | | | | | | | | | webkitgtk3 requires this feature. Also add wayland as an optional required feature, to match the requirements of webkitgtk3. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-trio: Upgrade 0.32.0 -> 0.33.0Leon Anavi2026-02-161-1/+1
| | | | | | | | | | | | | | | | | | Upgrade to release 0.33.0: Bugfixes: - Start supporting Android's new "android" sys.platform. Deprecations and removals: - Both trio.testing.RaisesGroup and trio.testing.Matcher have been deprecated. Pytest alternatives pytest.RaisesGroup and pytest.RaisesExc (respectively) are considered correct replacement. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-langtable: Upgrade 0.0.69 -> 0.0.70Leon Anavi2026-02-161-1/+1
| | | | | | | | | | | | | | Upgrade to release 0.0.70: - Add a few dz keyboards - Add more translations from CLDR - Get translation changes from CLDR - Add GS, ady, bqi, isv, kbd, kek, lzz, mww, oka, pi, pms, suz, Suni, si_ID.UTF-8 zgh_MA.UTF-8 - Add mdf_RU.UTF-8 to RU Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyee: Upgrade 13.0.0 -> 13.0.1Leon Anavi2026-02-161-1/+1
| | | | | | | | | | Upgrade to release 13.0.1: - Check for listener's existence before attempting to remove it - Update pytest configuration to support pytest 9 Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pyrad: Upgrade 2.5.2 -> 2.5.4Leon Anavi2026-02-161-1/+1
| | | | | | | | | | Upgrade to release 2.5.4: - Remove python2 leftovers - Add support for Ascend-Data-Filter "delete" keyword Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-typeguard: Upgrade 4.4.4 -> 4.5.0Leon Anavi2026-02-161-1/+2
| | | | | | | | | | | | | | | | | | | | | | | Upgrade to release 4.5.0: - Restored the check_argument_types() and check_return_type() functions that were dropped in v3.0.0, for users who want more fine-grained control over run-time type checking - Added support for extra_items in TypedDict, allowing users to specify the types for the values of "leftover" keys in a typed dict (keys that weren't explicitly defined in the TypedDict subclass) - Fixed NameError when evaluating forward references on Python 3.14 - Fixed protocol check incorrectly rejecting inherited classmethods and staticmethods - Fixed missing TypeCheckError when checking TypedDict with Required[...] annotations - Fixed type aliases (e.g. type Foo = list[int]) not being resolved during type checking - Fixed type-checked assignments to a single tuple target (e.g. x, = ("foo",)) falsely raising TypeCheckedError Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* webkitgtk3: upgrade 2.48.7 -> 2.50.5Gyorgy Sarvari2026-02-162-14/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Includes fixes for CVE-2025-13502, CVE-2025-13947, CVE-2025-43421, CVE-2025-43458 and CVE-2025-66287. Drop libsoup2 support. Even though this particular version still supports it, this is the last major version that is not libsoup3-only. Starting with version 2.52 (which is only 3-4 weeks away at the time of writing this message) upstream is dropping libsoup2 support completely[1]. This is a proactive removal of this feature, the sooner users start the migration, the better. Made opengl a mandatory DISTRO_FEATURE: libepoxy requires it, which is both a direct dependency, and an indirect one from gtk+3. Changelogs: https://webkitgtk.org/2026/02/09/webkitgtk2.50.5-released.html https://webkitgtk.org/2025/12/16/webkitgtk2.50.4-released.html https://webkitgtk.org/2025/12/04/webkitgtk2.50.3-released.html https://webkitgtk.org/2025/11/19/webkitgtk2.50.2-released.html https://webkitgtk.org/2025/10/10/webkitgtk2.50.1-released.html https://webkitgtk.org/2025/09/17/webkitgtk2.50.0-released.html [1]: https://webkitgtk.org/2025/10/07/webkitgtk-soup2-deprecation.html Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* wxwidgets: enable webkit PACKAGECONFIG only when opengl is availableGyorgy Sarvari2026-02-161-1/+7
| | | | | | | | The latest version of webkitgtk3 requires opengl DISTRO_FEATURE, so the webkit PACKAGECONFIG should be enabled only when opengl is available. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ttf-sazanami: fix SRC_URIGyorgy Sarvari2026-02-161-1/+1
| | | | | | | The original SRC_URI became inaccessible a while ago. Switch to a working source. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ntfs-3g-ntfsprogs: fix SRC_URIGyorgy Sarvari2026-02-161-3/+2
| | | | | | | | | | | The SRC_URI has became inaccessible some time ago, falling back to the Yocto mirror. Instead use the Github mirror. I ran a diff on the files of this revision and the files of the original tarball, and the contents were bit-identical. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* iwd: update 3.10 -> 3.11Markus Volk2026-02-161-1/+1
| | | | | | | | ver 3.11: Fix issue with interface registration before acquiring name. Signed-off-by: Markus Volk <f_l_k@t-online.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* hotdoc : Add new recipeLiu Yiding2026-02-165-0/+205
| | | | | | | | | | | | | | | | | | | | | | 1. Backport following patch to solve build and runtime issue 0001-c_comment_scanner-fix-function-prototypes.patch 0002-avoid-third-party-backports-dependency-on-sufficient.patch 0003-CMake-4-compatibility.patch 2. Add do_configure:prepend() to solve buildpaths QA check do_package_qa: QA Issue: File /usr/lib/python3.14/site-packages/hotdoc/parsers/cmark.cpython-314-x86_64-linux-gnu.so in package hotdoc contains reference to TMPDIR [buildpaths] 3. Add 0004-Use-flex-with-noline-option-to-prevent.patch to solve buildpaths QA check do_package_qa:QA Issue: File /usr/src/debug/hotdoc/0.17.4/hotdoc/parsers/c_comment_scanner/scanner.c in package hotdoc-src contains reference to TMPDIR [buildpaths] 4. Add clang as RDEPENDS for following reason Hotdoc has some Extensions including c-Extension. The c-Extension needs llvm and clang in runtime as introduced in doc of hotdoc. https://hotdoc.github.io/c-extension.html#c-extension "The extension uses Clang to build and walk an AST from the source code" Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-dbus-deviation: Add new recipeLiu Yiding2026-02-162-0/+47
| | | | | | | Add this new recipe for runtime dependence of hotdoc. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-wheezy-template: Add new recipeLiu Yiding2026-02-161-0/+13
| | | | | | | Add this new recipe for runtime dependence of hotdoc. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-toposort: Add new recipeLiu Yiding2026-02-161-0/+10
| | | | | | | Add this new recipe for runtime dependence of hotdoc. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-schema: Add new recipeLiu Yiding2026-02-161-0/+10
| | | | | | | Add this new recipe for runtime dependence of hotdoc. Signed-off-by: Liu Yiding <liuyd.fnst@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vulkan-cts: upgrade 1.4.5.0 -> 1.4.5.1Dmitry Baryshkov2026-02-162-3/+3
| | | | | | | | Bump Vulkan CTS revision, picking up fixes for sevaral Vulkan tests (and updating VVS to 0.3.9). Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* vk-gl-cts: ensure that the SRCREV is correctDmitry Baryshkov2026-02-161-1/+1
| | | | | | | | Use tag=${BP} in SRC_URI in order to ensure that the SRCREV is correctly updated together with the package version. Signed-off-by: Dmitry Baryshkov <dmitry.baryshkov@oss.qualcomm.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* php: upgrade 8.5.2 -> 8.5.3Jason Schonberg2026-02-161-1/+1
| | | | | | | | | This is a bug fix release. Changelog: https://www.php.net/ChangeLog-8.php#8.5.3 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* waylandpp: Move wayland-scanner++ to -dev packageMike Crowe2026-02-161-0/+2
| | | | | | | | | wayland-scanner++ is only used during development so it's not usually required to be installed on the target. wayland-scanner++.pc is already in the -dev package. Signed-off-by: Mike Crowe <mac@mcrowe.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* redis: add back DEBUG_PREFIX_MAP to LDFLAGSGyorgy Sarvari2026-02-161-0/+2
| | | | | | | | | | | | | | Without this redis embeds absoute build paths in the binaries, failing qa check. These LDFLAGS were recently removed from oe-core[1] - this change adds it back to this recipe. The qa error was not showing with redis 6 recipe, so it is added only to redis 7. [1]: https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* valkey: remove TMPDIR truncation in binariesGyorgy Sarvari2026-02-161-7/+0
| | | | | | | | | | | | | | | | These seds were added to remove reproducibility QA errors about TMPDIR being present in the binaries. The root of the problem was changed LDFLAGS in oe-core, and after adding back these LDFLAGS to this recipe[1], the QA error is also gone - the binaries require no changes due to this. Also remove the INSANE_SKIP, which was most likely fixed by the same LDFLAGS issue - it doesn't happen anymore. [1]: https://git.openembedded.org/meta-openembedded/commit/?id=e8981bf43163d2fe90ea28b2952a2443ceaea934 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* python3-pybind11-json: fix Targets.cmake trying to reference hostTafil Avdyli2026-02-162-1/+36
| | | | | | | | | | | | | | | The resulting pybind11_jsonTargets.cmake in the dev-package adds an absolute path to python include directories in the target properties: set_target_properties(pybind11_json PROPERTIES INTERFACE_INCLUDE_DIRECTORIES "/usr/include/python3.13;${_IMPORT_PREFIX}/include" ) The patch removes ${PYTHON_INCLUDE_DIRS} which is set by pybind11 from set_target_properties to remove the poisonous host path. Signed-off-by: Tafil Avdyli <tafil@tafhub.de> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nginx: upgrade 1.29.1 -> 1.29.5Gyorgy Sarvari2026-02-161-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | License-Update: copyright year bump. Changelog: 1.29.5: - Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642). - Bugfix: use-after-free might occur after switching to the next gRPC or HTTP/2 backend. - Bugfix: an invalid HTTP/2 request might be sent after switching to the next upstream. - Bugfix: a response with multiple ranges might be larger than the source response. - Bugfix: fixed setting HTTP_HOST when proxying to FastCGI, SCGI, and uwsgi backends. - Bugfix: fixed warning when compiling with MSVC 2022 x86. - Change: the logging level of the "ech_required" SSL error has been lowered from "crit" to "info". 1.29.4: - Feature: the ngx_http_proxy_module supports HTTP/2. - Feature: Encrypted ClientHello TLS extension support when using OpenSSL ECH feature branch; the "ssl_ech_file" directive. Thanks to Stephen Farrell. - Change: validation of host and port in the request line, "Host" header field, and ":authority" pseudo-header field has been changed to follow RFC 3986. - Change: now a single LF used as a line terminator in a chunked request or response body is considered an error. - Bugfix: when using HTTP/3 with OpenSSL 3.5.1 or newer a segmentation fault might occur in a worker process; the bug had appeared in 1.29.1. Thanks to Jan Svojanovsky. - Bugfix: a segmentation fault might occur in a worker process if the "try_files" directive and "proxy_pass" with a URI were used. 1.29.3: - Feature: the "add_header_inherit" and "add_trailer_inherit" directives. - Feature: the $request_port and $is_request_port variables. - Feature: the $ssl_sigalg and $ssl_client_sigalg variables. - Feature: the "volatile" parameter of the "geo" directive. - Feature: now certificate compression is available with BoringSSL. - Bugfix: now certificate compression is disabled with OCSP stapling. 1.29.2 - Feature: now nginx can be built with AWS-LC. Thanks Samuel Chiang. - Bugfix: now the "ssl_protocols" directive works in a virtual server different from the default server when using OpenSSL 1.1.1 or newer. - Bugfix: SSL handshake always failed when using TLSv1.3 with OpenSSL and client certificates and resuming a session with a different SNI value; the bug had appeared in 1.27.4. - Bugfix: the "ignoring stale global SSL error" alerts might appear in logs when using QUIC and the "ssl_reject_handshake" directive; the bug had appeared in 1.29.0. Thanks to Vladimir Homutov. - Bugfix: in delta-seconds processing in the "Cache-Control" backend response header line. - Bugfix: an XCLIENT command didn't use the xtext encoding. Thanks to Igor Morgenstern of Aisle Research. - Bugfix: in SSL certificate caching during reconfiguration. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nginx: upgrade 1.28.1 -> 1.28.2Gyorgy Sarvari2026-02-161-1/+1
| | | | | | | | | | | | Changelog: - Security: an attacker might inject plain text data in the response from an SSL backend (CVE-2026-1642). - Bugfix: use-after-free might occur after switching to the next gRPC or HTTP/2 backend. - Bugfix: fixed warning when compiling with MSVC 2022 x86. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: detect NEON correctly for aarch64Gyorgy Sarvari2026-02-162-0/+52
| | | | | | | | | | | | | | | | | | | | | | | The llhttp vendored dependency of nodejs takes advantage of Arm NEON instructions when they are available, however they are detected by checking for an outdated CPU feature macro: it checks for __ARM_NEON__, however it is not defined by new compilers for aarch64, rather they set __ARM_NEON. The Arm C extension guide[1] refers to __ARM_NEON macro aswell. This patch changes the detection to check for both macros when detecting the availability of NEON instructions. The code this patch modifies is generated, so the patch itself isn't suitable for upstream submission, as the root cause of the error is in the generator itself. A PR has been submitted[2] to the generator project to rectify this issue. [1]: https://developer.arm.com/documentation/ihi0053/d/ - pdf, section 6.9 [2]: https://github.com/nodejs/llparse/pull/84 Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nodejs: patch incorrect NEON intrinsicsGyorgy Sarvari2026-02-162-4/+60
| | | | | | | | | | | | | | | | | | | | | | | The llhttp dependency of nodejs uses NEON intrinsics when they are available, however some of these calls are incorrect: they the call they use don't match the parameters passed, and so the compilation fail (unless the error is suppressed): | ../deps/llhttp/src/llhttp.c: In function 'llhttp__internal__run': | ../deps/llhttp/src/llhttp.c:2645:9: note: use '-flax-vector-conversions' to permit conversions between vectors with differing element types or numbers of subparts | 2645 | ); | | ^ | ../deps/llhttp/src/llhttp.c:2643:11: error: incompatible type for argument 1 of 'vandq_u16' | 2643 | vcgeq_u8(input, vdupq_n_u8(' ')), There is a patch upstream that fixes it (though it is not merged yet). This patch is a port of that fix. This allows us to remove the extra CFLAGS also from the recipe that suppressed this error. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-08-28 17:28:01 +0000