summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* php: upgrade 8.5.4 -> 8.5.5Jason Schonberg11 days1-1/+1
| | | | | | | | | This is a bug fix release. Changelog: https://www.php.net/ChangeLog-8.php#8.5.5 Signed-off-by: Jason Schonberg <schonm@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pytest-codspeed: upgrade 3.0.0 -> 4.3.0Zhang Peng11 days1-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Remove explicit python3-hatchling-native from DEPENDS since it is automatically added when inheriting python_hatchling. Add python3-cffi-native to DEPENDS since v4.0.0 introduced CodSpeedHQ/instrument-hooks which uses cffi FFI bindings at build time. Changelog: https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.3.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.2.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.1 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.1.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v4.0.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.2.0 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.2 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.1 https://github.com/CodSpeedHQ/pytest-codspeed/releases/tag/v3.1.0 Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* freeradius: Update to latest on 3.2 releaseKhem Raj11 days7-563/+6
| | | | | | | Drop backports which are already in this SHA update Add -DTLS_STORAGE_CLASS=__thread via cflags Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* Revert "refpolicy-targeted: Added sepolicy for adb service"Gargi Misra11 days2-81/+0
| | | | | | This reverts commit 00616ccdaf0ce9e54ac7c75fabdb2d8f079c7578. Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* Revert "refpolicy-targeted: Add sepolicy for adb service"Gargi Misra11 days1-2/+2
| | | | | | This reverts commit 801addc52851b88b335d2349f6f7787b8200c95c. Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libvarlink: add new recipePeter Marko11 days1-0/+17
| | | | | | | | | Varlink C library and command line tool. Remove unuseful vim integration. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* mjansson-mdns: add new recipePeter Marko11 days2-0/+35
| | | | | | | | | | | | | Public domain mDNS/DNS-SD library in C Add github namespace to recipe name and handle it in CVE_PRODUCT because there already is a different mdns recipe in meta-openembedded. Example application is built but not installed. This is good to verify that current toolchain is copatible with headers. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ttyd: add new recipePeter Marko11 days1-0/+11
| | | | | | | ttyd is a simple command-line tool for sharing terminal over the web. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* crow: add new recipePeter Marko11 days1-0/+20
| | | | | | | | | | Crow is a C++ framework for creating HTTP or Websocket web services. Disable tests as they are using CPM (Cmake Dependency Manager), which would be downloading the test dependencies in configuration step. Signed-off-by: Peter Marko <peter.marko@siemens.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ostree: Fix build with C23/glibc-2.43Khem Raj11 days2-0/+30
| | | | Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-yappi: Upgrade 1.7.3 -> 1.7.6Leon Anavi11 days2-3847/+1
| | | | | | | | | | | | | | | | | Upgrade to release 1.7.6: - Fix VERSION file missing from source distribution (sdist) >From 1.7.5: - Fix callgrind export producing duplicate entries for top-level functions - Fix various edge cases - Add limit parameter to print_all - Fix file reading to use UTF-8 encoding Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-charset-normalizer: Upgrade 3.4.6 -> 3.4.7Leon Anavi11 days2-28/+1
| | | | | | | | | | | Upgrade to release 3.4.7: - Pre-built optimized version using mypy[c] v1.20. - Relax setuptools constraint to setuptools>=68,<82.1. - Correctly remove SIG remnant in utf-7 decoded string. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-aiofiles: Upgrade 24.1.0 -> 25.1.0Leon Anavi11 days1-1/+5
| | | | | | | | | | | Upgrade to release 25.1.0: - Switch to uv + add Python v3.14 support. - Add ruff formatter and linter. - Drop Python 3.8 support. If you require it, use version 24.1.0. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* netplan upgrade 1.1.2 -> 1.2.1Yi Zhao11 days2-6/+7
| | | | | | | | | ChangeLog: https://github.com/canonical/netplan/releases/tag/1.2 https://github.com/canonical/netplan/releases/tag/1.2.1 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-gpiod: update to v2.4.2Bartosz Golaszewski11 days1-1/+1
| | | | | | | | | Bug-fix release addressing a buffer overflow bug discovered during an AI-augmented security audit as well as another minor issue with unnecessarily duplicated code. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libgpiod: update to v2.2.4Bartosz Golaszewski11 days2-85/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bug-fix release addressing several issues discovered during an AI-augmented security audit. The most severe bug was found in the C extension code of the python bindings - which also get an update - but there were some memory leaks and integer overflow bugs in the core C library as well as in tools and DBus daemon. Full changelog: Bug fixes: - fix buffer over-read bugs when translating uAPI structs to library types - fix variable and argument types where necessary - sanitize values returned by the kernel to avoid potential buffer overflows - fix memory leaks in gpio-tools - add missing return value checks in gpio-tools - fix period parsing in gpio-tools - use correct loop counter in error path in gpio-manager Improvements: - make tests work with newer coreutils by removing cases checking tools' behavior on SIGINT which stopped working due to changes in behavior of the timeout tool Also: drop the patch that's now upstream from the recipe. Signed-off-by: Bartosz Golaszewski <bartosz.golaszewski@oss.qualcomm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* upower: upgrade 1.91.1 -> 1.91.2Wang Mingyu11 days1-1/+1
| | | | | | | | | | | | Changelog: =========== - Feature: Skip the systemd inhibitor when performing CriticalPowerAction - Feature: Introduce "Auto" CriticalPowerAction using systemd-logind Sleep() - Fix: Test CanPowerOff() availability before calling PowerOff() - Fix: Add charge limit support for systems providing only charge_control_end_threshold Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* swagger-ui: upgrade 5.32.1 -> 5.32.2Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* spectre-meltdown-checker: upgrade 0.46 -> 26.26.0404682Wang Mingyu11 days1-4/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* rtorrent: upgrade 0.16.8 -> 0.16.9Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-werkzeug: upgrade 3.1.7 -> 3.1.8Wang Mingyu11 days1-1/+1
| | | | | | | Request.host and get_host return the empty string if the header is missing or has invalid characters. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-tzdata: upgrade 2025.3 -> 2026.1Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-types-psutil: upgrade 7.2.2.20260130 -> 7.2.2.20260408Wang Mingyu11 days1-1/+1
| | | | | | | | | | | Changelog: =========== - Use dashes instead of underscores for METADATA.toml field names - Update most test/lint dependencies - Update mypy to 1.20.0 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-sqlalchemy: upgrade 2.0.48 -> 2.0.49Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-snagboot: upgrade 2.6 -> 2.6.1Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-sentry-sdk: upgrade 2.56.0 -> 2.57.0Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-regex: upgrade 2026.3.32 -> 2026.4.4Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-python-multipart: upgrade 0.0.22 -> 0.0.24Wang Mingyu11 days1-1/+1
| | | | | | | | | | | | Changelog: ============ - Validate chunk_size in parse_form() - Remove unused trust_x_headers parameter and X-File-Name fallback - Return processed length from QuerystringParser._internal_write - Cleanup metadata dunders from __init__.py Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pandas: upgrade 3.0.1 -> 3.0.2Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-orjson: upgrade 3.11.7 -> 3.11.8Wang Mingyu11 days2-47/+35
| | | | | | | Build and compatibility improvements. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-marshmallow: upgrade 4.2.3 -> 4.3.0Wang Mingyu11 days1-1/+1
| | | | | | | | | | | | | Changelog: ============= - Add pre_load and post_load parameters to marshmallow.fields.Field for field-level pre- and post-processing - Typing: improvements to marshmallow.validate - marshmallow.validate.URL and marshmallow.validate.Email accept Internationalized Domain Names (IDNs) marshmallow.validate.Email also correctly rejects IDN domains with leading/trailing hyphens. - Typing: Fix typing of nested in marshmallow.fields.Nested Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-icecream: upgrade 2.1.10 -> 2.2.0Wang Mingyu11 days1-1/+1
| | | | | | | | | | | Changelog: ============ - Improved: Fixes Japanese character encoding issues. - Added: noColor option for configureOutput, which disables colored output. It is set to False by default. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-google-auth-oauthlib: upgrade 1.3.0 -> 1.3.1Wang Mingyu11 days1-1/+1
| | | | | | | | | | Changelog: ============ - Allow Protobuf 7.x - Require Python 3.9 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-fastapi: upgrade 0.135.2 -> 0.135.3Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-faker: upgrade 40.12.0 -> 40.13.0Wang Mingyu11 days1-1/+1
| | | | | | | Fix: Ensure deterministic locale selection in multi-locale mode. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-eventlet: upgrade 0.40.4 -> 0.41.0Wang Mingyu11 days1-1/+1
| | | | | | | | | | | Changelog: ============ * Switch to 3.14 for testing * Drop 3.9 support * More visible deprecation Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-cmake: upgrade 4.3.0 -> 4.3.1Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-bitarray: upgrade 3.8.0 -> 3.8.1Wang Mingyu11 days1-1/+1
| | | | | | | | | | Changelog: ========== * fixed critial findings in C Extension Analysis Report * add tests, in particular 'devel/test_capi.py' Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-asyncinotify: upgrade 4.4.0 -> 4.4.2Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nbdkit: upgrade 1.47.5 -> 1.47.7Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* mstpd: upgrade 0.1.1 -> 0.2.0Wang Mingyu11 days1-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ============ - README.md: update IRC channel location - ctl_socket_server: require root for changing configuration - mstp: validate admin port path costs - mstp: do not allow changing Bridge Hello Time - mstp: do not overflow calculated root path costs - mstp: increase maxHops limit to 100 - README.md: add packaging status - README.md: update FID/MSTI limits - README.md: clarify IVL/SVL and MSTI support in linux - packet: set socket priority to TC_PRIO_CONTROL - TCSM: fix infinite recursion for MSTI per-tree ports Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libtorrent: upgrade 0.16.8 -> 0.16.9Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libsdl3: upgrade 3.4.2 -> 3.4.4Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libsdl3-image: upgrade 3.4.0 -> 3.4.2Wang Mingyu11 days1-2/+2
| | | | | | | | | | | | Changelog: =========== - Non-animated images can now be loaded as single frame animations - Fixed animated WebP frame composition - Fixed potential buffer overflow in tRNS handling - Fixed out of bounds read in XCF image loader (CVE-2026-35444) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libsdl2-image: upgrade 2.8.8 -> 2.8.10Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libcbor: upgrade 0.13.0 -> 0.14.0Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libburn: upgrade 1.5.6 -> 1.5.8Wang Mingyu11 days2-30/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | 0001-Bug-fix-Faulty-signal-handler-prototype-spoiled-comp.patch removed since it's included in 1.5.8 Changelog: ============= * Bug fix: burn_offst_source_new() parameter "size" rolled over at 2 exp 31 * Bug fix: ATA and SATA drives under sg did not register their SCSI address tuple * Bug fix: WAVE files with unsuitable audio format were read as raw audio file. * New API calls use and return off_t sizes instead of int or uint32_t * Augmented struct burn_toc_entry by new off_t block addresses and counters * New struct burn_progress_v2 and API call burn_drive_get_status_v2() * New API call burn_disc_track_lba_nwa_v2() * New API calls burn_disc_get_sectors_v2(), burn_session_get_sectors_v2(), burn_track_get_sectors_v2() * New API call burn_get_read_capacity_v2() * New API call burn_drive_release_v2() * New API call burn_write_opts_set_perform_opc_v2 * New cdrskin option --audio_not_raw * New cdrskin options --perform_opc and --perform_opc_growisofs Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gtk-layer-shell: upgrade 0.10.0 -> 0.10.1Wang Mingyu11 days1-1/+1
| | | | | | | | | | | | | Changelog: ========== - Fix: unmap when surface is immediately requested to close after opening - Fix: time out after 1 second of waiting for configure - Fix: edge cases around montiros changing while being mapped - gtk-priv: rename ast.py -> c_ast.py to avoid name collision with std lib - Compat: bump supported GTK to v3.24.52 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* glaze: upgrade 7.2.2 -> 7.3.0Wang Mingyu11 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* feh: upgrade 3.11.3 -> 3.12.1Wang Mingyu11 days1-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========== * Update tests to reflect the %f/%F changes implemented in v3.12 * Disallow %f and %n format specifiers in --action and --info strings; abort with an error message if those are encountered. Use %F and %N instead. Rationale: %f and %n do not escape shell-specific syntax and are thus a security risk when passing untrusted file names to feh. %F and %N, which have been available since v2.3 (Feb 2012), do escape shell-specific syntax. Migration path: Replace %f (or '%f') and %n (or '%n') with %F and %N (without '') in --action and --info commands. * Fix formatting in man page for groff 1.23.0+ * Do not skip URLs when '--sort mtime' or similar are used * Define '_GNU_SOURCE' macro for mkstemps usage (if enabled) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>