summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* xterm: upgrade 407 -> 408Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* stunnel: upgrade 5.77 -> 5.78Wang Mingyu7 days2-9/+9
| | | | | | | | | | License-Update: Copyright year updated to 2026 fix-openssl-no-des.patch refreshed for 5.78 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-zopeinterface: upgrade 8.2 -> 8.3Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-virtualenv: upgrade 21.2.0 -> 21.2.1Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | | | | | | | | | Changelog: =========== - Upgrade embedded pip/setuptools/wheel - Enhance upgrade workflow: age check, dedup, issue tracking - fix(create): use commonpath for correct path validation - ci(workflows): add zizmor security auditing - Add current and previous maintainers - fix(ci): restore git credentials for release and upgrade jobs - Fix broken Installation link in README - fix: use terminal width for help formatting instead of hardcoded 240 - fix(nushell): surface actionable hint in deactivate error output - ci: fix setup-uv warnings and drop brew@3.9 - fix(ci): fix pre-release push and release note generation - fix(ci): check out repo in publish job for gh release notes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-tox: upgrade 4.52.0 -> 4.52.1Wang Mingyu7 days1-1/+1
| | | | | | | | | | Changelog: ========== - use normalize_isa for architecture factor matching - fix(pip): invalidate install cache on resolution env var changes Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-soundcard: upgrade 0.4.5 -> 0.4.6Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-smbus2: upgrade 0.6.0 -> 0.6.1Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-rich: upgrade 14.3.3 -> 15.0.0Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-python-multipart: upgrade 0.0.24 -> 0.0.26Wang Mingyu7 days1-2/+2
| | | | | | | | | | | | | | | | | Changelog: =========== - Skip preamble before the first multipart boundary more efficiently - Silently discard epilogue data after the closing multipart boundary - Add MIME content type info to File - Handle CTE values case-insensitively - Remove custom FormParser classes - Add UPLOAD_DELETE_TMP to FormParser config - Emit field_end for trailing bare field names on finalize - Handle multipart headers case-insensitively - Apply Apache-2.0 properly Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pytest-httpx: upgrade 0.36.0 -> 0.36.2Wang Mingyu7 days1-2/+2
| | | | | | | | | | License-Update: Copyright year updated to 2026. Fixed: Document how to ignore query parameters while matching on URL. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pymodbus: upgrade 3.12.1 -> 3.13.0Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - Correct missing types. - Altherma heat pump control, with Home Assistant and updating server. - SimDevice, use_bit_address allows different addressing for BITS. - Remove 3.5char frame time check. - Fixed Modbus*Context. - Fix bug in ModbusDeviceContext. - Fix log level in examples - Fix CSS lookup for simulator server - Fix usage docs in examples: add missing option --baudrate - Doc:Finalice server/simulator narrative - Fix codespell bug. - Datastores uses SimData/SimDevice. - Doc on how to convert to SimData/SimDevice. - Fix Read Fifo Query RTU Frame Size - Update server documentation (datstore). - Update server examples to use SimData/SimDevice. - Add server.async_get/setValues. - Solve codeql caching problem. - Remove unused methods in datastore. - Remove datastore get/setValues (async_get/set exist) - Revert "Combine ModbusSparseDataBlock with ModbusSequentialDataBlock." - Combine ModbusSparseDataBlock with ModbusSequentialDataBlock. - Remove RemoteDeviceContext datastore. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-pyais: upgrade 2.20.1 -> 3.0.0Wang Mingyu7 days1-2/+2
| | | | | | | | | | | | | | | | | | | | | Changelog: =========== - ~35% faster compared to v2 - breaking Changes removed bitarray dependency. Replaced with a custom bit_vector renamed AISSentence.bit_array to AISSentence.bv renamed Payload.from_bitarray() to Payload.from_vector() renamed Payload.to_bitarray() to Payload.to_bytes() changed overflow encoding behavior deprecated NonPrintableCharacterException dropped support for Python 3.9 - removed bitarray as an external dependency - improved performance through a custom bit vector implementation - optimized single-fragment message assembly - NOTE: If you are not ready to migrate, v2 continues to receive bugfixes on the legacy branch Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-platformdirs: upgrade 4.9.4 -> 4.9.6Wang Mingyu7 days1-1/+1
| | | | | | | | fix: use double quotes for tag variable expansion Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-inline-snapshot: upgrade 0.32.5 -> 0.32.6Wang Mingyu7 days1-1/+1
| | | | | | | | | | | Fix: - Pydantic models, attrs and dataclasses with NewType-typed fields now generate correct snapshots that wrap the field value with the NewType constructor (e.g. Something(some_id=SomeID(1)) instead of Something(some_id=1)). This could only be fixed for Python >= 3.10. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-imgtool: upgrade 2.3.0 -> 2.4.0Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-greenlet: upgrade 3.3.2 -> 3.4.0Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | | | | | | | | Changelog: ========== - Publish binary wheels for RiscV 64. - Fix multiple rare crash paths during interpreter shutdown. - Note that this now relies on the atexit module, and introduces subtle API changes during interpreter shutdown (for example, getcurrent is no longer available once the atexit callback fires). - Address the results of an automated code audit performed by Daniel Diniz. This includes several minor correctness changes that theoretically could have been crashing bugs, but typically only in very rare circumstances. - Fix several race conditions that could arise in free-threaded builds when using greenlet objects from multiple threads, some of which could lead to assertion failures or interpreter crashes. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-google-auth: upgrade 2.48.0 -> 2.49.2Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-git-pw: upgrade 2.7.1 -> 2.8.0Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-gevent: upgrade 25.9.1 -> 26.4.0Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | | | | | Changelog: =========== - Make gevent.ssl stop reusing exception instances, as this could appear to cause a memory leak if there are many short reads or writes. - Fix Greenlet.dead returning true for an active greenlet during early bootstrap. - Fix some potential GIL-related crashes during interpreter shutdown by avoiding acquiring the GIL in libev callbacks when the interpreter is finalizing. - Support for Python 3.9 has been removed. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ostree: upgrade 2025.7 -> 2026.1Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nano: upgrade 8.7.1 -> 9.0Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | Changelog: ============ - When the cursor almost goes offscreen to the right, all lines are now scrolled sideways together, by just the amount needed to keep the cursor in view. Use --solosidescroll or 'set solosidescroll' to get back the old, jerky, single-line horizontal scrolling. - The viewport can be scrolled sideways (in steps of one tabsize) with M-< and M->. See 'man nanorc' if M-< and M-> should switch between buffers (as they did earlier). - M-Left, M-Right, M-Up, and M-Down have become rebindable. - Stopping the recording of a macro immediately after starting it cancels the recording and leaves an existing macro in place. - Feature toggles no longer break a chain of ^K cuts or M-6 copies, except the M-K cut-from-cursor toggle. - With --mouse and --indicator, one can click in the scrollbar area to roughly navigate within the buffer. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* mpich: upgrade 5.0.0 -> 5.0.1Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Changelog: ========== - Fix bad cast in release-gather collectives that caused data loss issues on Big-Endian 64b arches (s390x) - Fix issue with canceling MPI_ANY_SOURCE receive requests - Fix configuration issue when C++ compiler does not support complex types - Fix function signature issue in Hydra PBS support - Fix crash in MPI_Allreduce with MPI_LOGICAL type - Fix potential crash in multi-nic libfabric initialization - Fix memory leaks in Level Zero and PMIx support - Fix bug in CMA code when GPU support is enabled - Fix potential shared memory collision between multiple singleton processes on the same node - Add large count and other necessary aliases to ROMIO to avoid accidental profiling of internal MPI function usage - Add missing error checks in rndv and colletive composition code - Improve autogen.sh error message when autotools are too old Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libsodium: upgrade 1.0.21 -> 1.0.22Wang Mingyu7 days2-53/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 0001-Fix-compilation-with-GCC-on-aarch64.patch removed since it's included in 1.0.22 Changelog: ============ - Post-quantum key encapsulation is now available. ML-KEM768, the NIST-standardized lattice-based KEM, is accessible through the 'crypto_kem_mlkem768_*()' functions. - X-Wing, a hybrid KEM combining ML-KEM768 with X25519 for protection against both classical and quantum adversaries, is available through the 'crypto_kem_*()' functions. X-Wing is the recommended KEM for most applications. - SHA-3 hash functions are now available as 'crypto_hash_sha3256_*()' and 'crypto_hash_sha3512_*()', with both one-shot and streaming APIs. - Performance: NEON optimizations for Argon2 on ARM platforms. - Performance: SHA3 (Keccak1600) now leverages ARM SHA3 instructions when available on ARM platforms. - Performance: WebAssembly SIMD implementations of Argon2 have been added. - Emscripten: LTO is now disabled. With Emscripten 4, LTO produced WebAssembly modules with functions that ran significantly slower than without it. - Emscripten: a new option allows compilation with SIMD support. - Emscripten: native ESM module generation is now supported. - JavaScript sumo builds now allow up to 80 MiB memory usage, so that 'crypto_pwhash' with the interactive settings can be used in pure JavaScript, not just WebAssembly. - XOF state alignment has been relaxed. - 'crypto_core_keccak1600_state' has been added. - Export missing 'crypto_ipcrypt_nd_keygen()' helper function. - 'crypto_auth_hmacsha256_init' and 'crypto_auth_hmacsha512_init' now accept NULL key pointers (with a zero key length), for consistency with other '_init' functions. - apple-xcframework: headers are now in a Clibsodium subdirectory to prevent module.modulemap collisions with other xcframeworks. - Fixed compilation with GCC on aarch64 and gcc 4.x. - On aarch64, aes256-gcm is now enabled even when not using clang, including MSVC. - Added compatibility with Visual Studio 2026 when toolsets do not define PlatformToolsetVersion. - Libsodium can be directly used as a dependency in a Zig project. - Performance of MSVC builds has been improved. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libgedit-gfls: upgrade 0.4.0 -> 0.4.1Wang Mingyu7 days1-1/+1
| | | | | | | | | | Changelog: =========== - Fix a unit test on big-endian architectures. - Translation updates. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* imagemagick: upgrade 7.1.2-18 -> 7.1.2-19Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* graphviz: upgrade 14.1.4 -> 14.1.5Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gnome-online-accounts: upgrade 3.58.0 -> 3.58.1Wang Mingyu7 days1-1/+1
| | | | | | | | | | | | * Bugs fixed: - !391 google: Use #ifdef for GOA_GOOGLE_FILES_ENABLED * Translation updates: - Serbian - Slovak Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* glaze: upgrade 7.3.0 -> 7.3.3Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* geoclue: upgrade 2.8.0 -> 2.8.1Wang Mingyu7 days1-2/+2
| | | | | | | | | | | | | | Fixes: - Accept NMEA GGA sentences with 11 or more parts (needed 14 or more previously) - Use async D-bus 'Set' methods to set client properties in libgeoclue to improve robustness - Do not change Client Location property on updates which are below threshold to avoid leaking location to D-bus - Ignore wired WPA interfaces when finding an interface for WiFi scanning Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* babl: upgrade 0.1.124 -> 0.1.126Wang Mingyu7 days1-1/+1
| | | | | | | It is now possible to build with MSVC. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* b4: upgrade 0.15.1 -> 0.15.2Wang Mingyu7 days1-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* atftp: upgrade 0.8.0 -> 0.8.1Wang Mingyu7 days1-2/+2
| | | | | | | | | | | | | | | | | | | License-Update: update LICENSE from https://www.gnu.org/licenses/ Changelog: ============= - merge README* to single README.md - Merge pull request #2 from feckert/pr/20250902-build-fixes - Fix fortify abort when LTO is enabled - Fix uninitialized buffer data. - Enable listening on IPv6 - test.sh: redirect stderr to /dev/null when counting lines - Declare variable D as local in stop_and_clean - Fix pthread_t format warning for fprintf - Fix incompatible-pointer-types for pcre2_substring_list_free Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* webkitgtk3: fix escaping in CVE_PRODUCTRoss Burton7 days1-1/+1
| | | | | | | | | | The CPE parsing in oe-core's cve_check.py now handles escapes correctly[1] so we don't need to escape in CVE_PRODUCT. [1] oe-core 3c73dafd03b ("cve_check: Improve escaping of special characters in CPE 2.3") Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xerces-c: fix escaping in CVE_PRODUCTRoss Burton7 days1-1/+1
| | | | | | | | | | The CPE parsing in oe-core's cve_check.py now handles escapes correctly[1] so we don't need to escape in CVE_PRODUCT. [1] oe-core 3c73dafd03b ("cve_check: Improve escaping of special characters in CPE 2.3") Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* dracut: upgrade 109 -> 110Adam Duskett7 days2-48/+2
| | | | | | | | Drop upstream 0002-fix-broken-symlink-in-dracut-config-examples.patch Changelog: https://github.com/dracut-ng/dracut-ng/releases/tag/110 Signed-off-by: Adam Duskett <adam.duskett@amarulasolutions.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* openct: Drop this recipeZheng Ruoqin7 days9-361/+0
| | | | | | | | | 1.Drop openct as it is unmaintained upstream. 2.Remove openct in meta-oe/recipes-core/packagegroups/packagegroup-meta-oe.bb Signed-off-by: Zheng Ruoqin <zhengrq.fnst@fujitsu.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* parole: fix do_compile failureChangqing Li7 days2-1/+33
| | | | | | | | | Fix build failure: /build/tmp/work/x86-64-v3-poky-linux/parole/4.18.2/recipe-sysroot-native/usr/bin/x86_64-poky-linux/x86_64-poky-linux-ld: parole-conf.o: undefined reference to symbol 'xfce_rc_close' /build/tmp/work/x86-64-v3-poky-linux/parole/4.18.2/recipe-sysroot-native/usr/bin/x86_64-poky-linux/x86_64-poky-linux-ld: /build/tmp/work/x86-64-v3-poky-linux/parole/4.18.2/recipe-sysroot/usr/lib/libxfce4util.so.7: error adding symbols: DSO missing from command line Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* libxfce4ui: add wayland PACKAGECONFIGChangqing Li7 days1-5/+4
| | | | | | | | Add wayland PACKAGECONFIG and add wayland and x11 dependency explicitly Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* thunar: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li7 days4-8/+44
| | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES since xfce4-panel requires it, now, xfce4-panel not require x11, so remove x11 from REQUIRED_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xfce4-panel: Remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li7 days1-5/+7
| | | | | | | | Dependency on libwnck3 is moved into PACKAGECONFIG, so we can remove x11 from REQUIRED_DISTRO_FEATURES, set ANY_OF_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xfce4-pulseaudio-plugin: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li7 days1-1/+1
| | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency pavucontrol requires x11, now, pavucontrol doesn't require x11, so remove x11 from REQUIRED_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* pavucontrol: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li7 days1-1/+0
| | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency gtkmm4 require x11, now, gtkmm4 don't require x11, so remove x11 from REQUIRED_DISTRO_FEATURES Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* gtkmm4: remove x11 from REQUIRED_DISTRO_FEATURESChangqing Li7 days1-2/+2
| | | | | | | | | | | We add x11 into REQUIRED_DISTRO_FEATURES because one of the dependency atkmm requires x11, refer [1], remove atkmm from dependency, and remove x11 from REQUIRED_DISTRO_FEATURES [1] https://gitlab.gnome.org/GNOME/gtkmm/-/commit/0fc81d346f50bfc30f6fb78afe6a15331c5a8790 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* xdg-dbus-proxy: upgrade 0.1.6 -> 0.1.7Gyorgy Sarvari7 days3-36/+5
| | | | | | | | | | | | | | | | | | | | Contains fix for CVE-2026-34080. Since it is tracked without version info by NVD, mark it explicitily as patched. Drop the patch that is included in this release. While here, also add the recipe to the ptest list - it's a fast one, runs under a second. Changelog: - Drop the autotools build system - Unbreak the CI - Prevent a crash on disconnect - Fix building with glibc >= 2.43 - Fix the eavesdrop filtering to prevent message interception Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* wolfssl: upgrade 5.9.0 -> 5.9.1Gyorgy Sarvari7 days1-1/+10
| | | | | | | | | | | | | | | | Contains many CVE fixes. Changelog: https://github.com/wolfSSL/wolfssl/releases/tag/v5.9.1-stable There are a number of fixed CVEs in this version that are tracked without version by NVD - mark them as patched explicitly. Ptests passed: Test script returned: 0 unit_test: Success for all configured tests. PASS: Wolfssl Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* ntp: Fix build with -std=gnu23Khem Raj8 days3-0/+136
| | | | | | | Backport a patch from openLDAP to fix the configure errors with clang-22 -std=gnu23 Fix another issue by dropping C89 signatures in favor of C99 function prototypes Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-django: upgrade 5.2.12 -> 5.2.13Gyorgy Sarvari8 days1-1/+1
| | | | | | | | | | | | | | | Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033 and CVE-2026-33034. Changelog: https://docs.djangoproject.com/en/6.0/releases/5.2.13/ Ptests passed successfully: Ran 18163 tests in 457.705s OK (skipped=1389, expected failures=5) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* python3-django: upgrade 6.0.3 -> 6.0.4Gyorgy Sarvari8 days1-1/+1
| | | | | | | | | | | | | | | Contains fixes for CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033 and CVE-2026-33034. Changelog: https://docs.djangoproject.com/en/6.0/releases/6.0.4/ Ptests passed successfully: Ran 18691 tests in 149.800s OK (skipped=1397, expected failures=5) Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* nodejs: mark CVE-2026-21710 patchedGyorgy Sarvari8 days1-0/+1
| | | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-21710 The CVE is fixed in the current recipe version[1], but NVD tracks it without verison info. Mark it as patched in the recipe. [1]: https://github.com/nodejs/node/blob/v22.x/doc/changelogs/CHANGELOG_V22.md Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
* minio: ignore irrelevant CVEsGyorgy Sarvari8 days1-1/+1
| | | | | | | | | | | | | Details: https://nvd.nist.gov/vuln/detail/CVE-2026-33419 https://nvd.nist.gov/vuln/detail/CVE-2026-34204 These CVEs were filed against minio server, but this recipe is for minio client tools, which is a related, but different project. Ignore these CVEs. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2026-04-21 19:17:07 +0000